Cheat Engine:Memory Scanning - Revision history

Chris314 at 15:39, 23 April 2022

2022-04-23T15:39:24Z

Chris314 at 13:37, 23 April 2022

2022-04-23T13:37:22Z

Chris314 at 13:23, 23 April 2022

2022-04-23T13:23:44Z

Chris314 at 12:55, 23 April 2022

2022-04-23T12:55:04Z

Eltoro0815: /* Value Type */ corrected ranges for unsigned numbers (2byte and 8byte)

2020-10-09T04:06:19Z

‎Value Type: corrected ranges for unsigned numbers (2byte and 8byte)

Revester at 18:08, 17 July 2020

2020-07-17T18:08:55Z

Revester: Fixed spelling mistakes. Added explanation about alignment of addresses in Fast Scan paragraph.

2020-07-17T16:25:04Z

Fixed spelling mistakes. Added explanation about alignment of addresses in Fast Scan paragraph.

Dark Byte: Reverted edits by This content is not available (Talk) to last revision by Dark Byte

2019-03-18T19:10:24Z

Reverted edits by This content is not available (Talk) to last revision by Dark Byte

This content is not available: Replaced content with 'Sorry! Content not available.'

2019-03-16T16:25:08Z

Replaced content with '<span style="font-size:25px;color:red">Sorry! Content not available.</span>'

Dark Byte: Reverted edits by Khairil (Talk) to last revision by TheyCallMeTim13

2017-04-18T22:58:04Z

Reverted edits by Khairil (Talk) to last revision by TheyCallMeTim13

@@ Line 56: / Line 56: @@
-All these options speak for themselves. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
+All these options speak for themselves.
 ==Value Type==
@@ Line 94: / Line 94: @@
 ==Memory Scan Options==
-Cheat Engine offers you a dropbox option to scan all the memory space used by the target process or only specific areas used by the main process or any of the depending DLL. Depending on selected options the scan range defined by the '''Start''' and the '''Stop''' addresses is automatically adjusted by CE (from 0000000000000000 to 7fffffffffffffff for all memory space) but you can edit/overwrite these limits.
+Cheat Engine offers you a dropbox option to scan all the memory space used by the target process or only specific areas used by the main process or any of the depending DLL. Depending on selected options, the scan range defined by the '''Start''' and the '''Stop''' addresses is automatically adjusted by CE (from 0000000000000000 to 7fffffffffffffff for all memory space) but you can edit/overwrite these limits.
 A tri-state option '''Executable''' allow you to scan only the executable, non-executable, or any kind of executable memory.
@@ Line 100: / Line 100: @@
 The '''Fast Scan''' option can speeds up the scanning by testing only the '''Aligned''' memory addresses or the '''Last Digits''' of the specified value. For aligned address you can choose the multiplier with a defaut value equal to 4 (the most used value used by games and any other applications). Mathematically, an aligned address is a multiple of the multiplier value. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000 because after dividing it by both alignment numbers, remainder of the result is 0 in both cases. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000 because when you divide it by 4, the remainder is 0, but when you divide it by 0x1000, the remainder is 4. Address 0x40001 is not aligned by neither 4, nor 0x1000.
 ==Other extra options==
@@ Line 116: / Line 118: @@
 * Black means dynamic addresses. Variables at these addresses will change location(variables will change their addresses) whenever you load the application, and even while the application is running. Using pointers you can find static addresses for these dynamic ones.
-Then you can refine/reduce the list of addresses performing a '''Next Scan'''.
+Then you can refine/reduce the list of addresses performing a '''Next Scan'''. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the '''First Scan'''.

@@ Line 15: / Line 15: @@
 ==Scan Type==
-Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
+Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides a dropbox with several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
 The available options depend on the scan order (initial/first or subsequent/next):
-For the First Scan the scan types are:
+For the First Scan the scan types options are:
 *'''Exact Value'''
@@ Line 103: / Line 103: @@
 ==Other extra options==
-'''Unrandomizer''' option
+'''Unrandomizer''' option: TODO
-'''Enable Speedhack''' option
+'''Enable Speedhack''' option: see [[Cheat Engine:Internals|Cheat Engine Internals]]
 ==Performing a memory scan==
-When you perform a scan, Cheat Engine will provide you with a list of addresses matching your search. Shown values of variables at found addresses are updated as the actual in-game values of variables change, at a rate set in the Settings menu.
+If you choose the right options, you can perform a new scan by clicking on '''First Scan''' button. Cheat Engine will provide you with a list of addresses matching your search. Shown values of variables at found addresses are updated as the actual in-game values of variables change, at a rate set in the Settings menu. There are two types of addresses in this list: green ones and black ones.
-There are two types of addresses in this list: Green ones and black ones.
-Green means static addresses. Whenever you load the application these addresses will stay the same/hold the same value.
+* Green means static addresses. Whenever you load the application these addresses will stay the same/hold the same value.
 These green addresses show up as absolute virtual addresses in the list, but are actually offsets to base address of one of the loaded modules in the process' address space. So when you have static(green) address 4075FFB0 and module's base address is 40000000, it is calculated as 40000000+75FFB0, which Cheat Engine often shows you as ModuleName.exe+75FFB0.
-Black means dynamic addresses. Variables at these addresses will change location(variables will change their addresses) whenever you load the application, and even while the application is running. Using pointers you can find static addresses for these dynamic ones.
+* Black means dynamic addresses. Variables at these addresses will change location(variables will change their addresses) whenever you load the application, and even while the application is running. Using pointers you can find static addresses for these dynamic ones.

@@ Line 13: / Line 13: @@
 The defaut base for '''Value''' is decimal but you can check the '''Hex''' option to use an hexadecimal value or '''Lua formula''' option to use a valid Lua expression. Latter option actives an extra option '''Separate Lua State''' by default checked.
-==Value Type==
+==Scan Type==
-The available types Cheat Engine can scan for are:
+Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
-*Binary
+For the First Scan the scan types are:
-*Byte (values between 0 and 255 or -128 to 127 if signed)
+*'''Exact Value'''
-*2 Bytes (values between 0 and 65535 or -32768 to 32767 if signed)
+*'''Bigger than...'''
-*4 Bytes (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
+*'''Smaller than...'''
-*8 Bytes (values between 0 and 18446744073709551615 or -9223372036854775808 and 9223372036854775807 if signed)
+*'''Value between...'''
-*Float (values between 1.5 x 10^-45 and 3.4 x 10^38  )
+*'''Unknown initial value'''
-*String (/Text)
+For the Next Scan the scan types options are:
-*Array of bytes
+*'''Exact Value'''
-*All (Byte to Double)
+*'''Bigger than...'''
-*Grouped
+*'''Smaller than...'''
-Which one you should choose depends on the value and type of the value you want to search for.
+*'''Increased Value'''
-==Scan Type==
+*'''Increased Value by...'''
-Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
+*'''Decreased Value'''
-For the First Scan the scan types are:
+*'''Decreased Value by...'''
-*Exact Value
+*'''Changed Value'''
-*Bigger than...
+*'''Unchanged Value'''
-*Smaller than...
+*'''Same as First Scan'''
-*Unknown initial value
+All these options speak for themselves. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
-For the Next Scan the scan types options are:
+The available types Cheat Engine can scan for are:
-*Exact Value
+*'''Binary'''
-*Bigger than...
+*'''Byte''' (values between 0 and 255 or -128 to 127 if signed)
-*Smaller than...
+*'''2 Bytes''' (values between 0 and 65535 or -32768 to 32767 if signed)
-*Value between...
+*'''4 Bytes''' (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
-*Increased Value
+*'''8 Bytes''' (values between 0 and 18446744073709551615 or -9223372036854775808 and 9223372036854775807 if signed)
-*Increased Value by...
+*'''Float''' (values between 1.5 x 10^-45 and 3.4 x 10^38  )
-*Decreased Value
+*'''Double''' (values between 5.0 x 10^-324 and 1.7 x 10^308 )
-*Decreased Value by...
+*'''String''' (/Text)
-*Changed Value
+*'''Array of byte'''
-*Unchanged Value
+*'''All''' (from '''Byte''' to '''Double''')
-*Same as First Scan
+*'''Grouped''' : Grouped scanning allows you to find a structure more quickly when you know its layout. Individual values are in the format "type:value", separated by spaces. For example if you know that health is an integer and your current health is 75/100, and that the structure has the current value, an unknown 4 byte quantity, and then the max value, you can search for this:
-All these options speak for themselves. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
+Which one you should choose depends on the value and type of the value you want to search for.
 ==Memory Scan Options==
@@ Line 98: / Line 99: @@
 The options '''Writable''' and '''CopyOnWrite''' allow to scan only the writable and/or copy-on-write ranges of memory.
-The '''Fast Scan''' option can speeds up the scanning by testing only the '''Aligned''' memory addresses or the '''Last Digits''' of the specified value. For aligned address you can choose the multipier with a defaut value equal to 4 (the most used value used by games and any other applications).
+The '''Fast Scan''' option can speeds up the scanning by testing only the '''Aligned''' memory addresses or the '''Last Digits''' of the specified value. For aligned address you can choose the multiplier with a defaut value equal to 4 (the most used value used by games and any other applications). Mathematically, an aligned address is a multiple of the multiplier value. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000 because after dividing it by both alignment numbers, remainder of the result is 0 in both cases. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000 because when you divide it by 4, the remainder is 0, but when you divide it by 0x1000, the remainder is 4. Address 0x40001 is not aligned by neither 4, nor 0x1000.
-is means that it can be divided by the alignment number and the result will not have a remainder(or will have a remainder of 0). Unaligned means that when an address is divided by the alignment number, result has a non-zero remainder. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000 because after dividing it by both alignment numbers, remainder of the result is 0 in both cases. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000 because when you divide it by 4, the remainder is 0, but when you divide it by 0x1000, the remainder is 4. Number 0x40001 is not aligned by neither 4, nor 0x1000. Most  objects in memory are aligned by 4, but not always.
+==Performing a memory scan==
 When you perform a scan, Cheat Engine will provide you with a list of addresses matching your search. Shown values of variables at found addresses are updated as the actual in-game values of variables change, at a rate set in the Settings menu.
@@ Line 108: / Line 115: @@
 Black means dynamic addresses. Variables at these addresses will change location(variables will change their addresses) whenever you load the application, and even while the application is running. Using pointers you can find static addresses for these dynamic ones.

@@ Line 1: / Line 1: @@
 [[Category:Help]]
-----
+Memory scanning is one of the most major features of Cheat Engine.
-Memory scanning is one of the most major features of Cheat Engine.
+Cheat Engine allows you to search in various ways using different types of searching. All options are provided by the main window of CE: value to search, scan type, value type, many memory scan options, and some other extra options.
-Cheat Engine allows you to search addresses in various ways using different types of searching.
+'''Note:''' You must open a target process to active these options.
-Firstly, you need to define what type of search you want to perform.
+==Value to scan==
-What you need to define is: Value Type, Scan Option, Scan Range and other smaller options.
+The defaut base for '''Value''' is decimal but you can check the '''Hex''' option to use an hexadecimal value or '''Lua formula''' option to use a valid Lua expression. Latter option actives an extra option '''Separate Lua State''' by default checked.
 ==Value Type==
@@ Line 23: / Line 21: @@
 *Byte (values between 0 and 255 or -128 to 127 if signed)
-*2 byte (values between 0 and 65535 or -32768 to 32767 if signed)
+*2 Bytes (values between 0 and 65535 or -32768 to 32767 if signed)
-*4 byte (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
+*4 Bytes (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
-*8 byte (values between 0 and 18446744073709551615 or -9223372036854775808 and 9223372036854775807 if signed)
+*8 Bytes (values between 0 and 18446744073709551615 or -9223372036854775808 and 9223372036854775807 if signed)
 *Float (values between 1.5 x 10^-45 and 3.4 x 10^38  )
 *Double (values between 5.0 x 10^-324 and 1.7 x 10^308 )
 *Array of bytes
 *All (Byte to Double)
@@ Line 48: / Line 46: @@
 Text is often stored as a String/Text.
-==Scan Option==
+==Scan Type==
 Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
-The options available are divided in two: First Scan options and Next Scan options.
+The available options depend on the scan order (initial/first or subsequent/next):
-First Scan options are:
+For the First Scan the scan types are:
 *Exact Value
@@ Line 66: / Line 64: @@
-Next Scan options are:
+For the Next Scan the scan types options are:
 *Exact Value
@@ Line 93: / Line 91: @@
 All these options speak for themselves. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
-==Scan Range==
+==Memory Scan Options==
-Cheat Engine only scans between the given range markers. Default are these From: 00400000 To: 7FFFFFFF
+Cheat Engine offers you a dropbox option to scan all the memory space used by the target process or only specific areas used by the main process or any of the depending DLL. Depending on selected options the scan range defined by the '''Start''' and the '''Stop''' addresses is automatically adjusted by CE (from 0000000000000000 to 7fffffffffffffff for all memory space) but you can edit/overwrite these limits.
-----
+The '''Fast Scan''' option can speeds up the scanning by testing only the '''Aligned''' memory addresses or the '''Last Digits''' of the specified value. For aligned address you can choose the multipier with a defaut value equal to 4 (the most used value used by games and any other applications).
-Fast Scan: Fast scan speeds up the scanning by skipping unaligned(by 4) memory addresses. Aligned address means that it can be divided by the alignment number and the result will not have a remainder(or will have a remainder of 0). Unaligned means that when an address is divided by the alignment number, result has a non-zero remainder. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000 because after dividing it by both alignment numbers, remainder of the result is 0 in both cases. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000 because when you divide it by 4, the remainder is 0, but when you divide it by 0x1000, the remainder is 4. Number 0x40001 is not aligned by neither 4, nor 0x1000. Most  objects in memory are aligned by 4, but not always.
+is means that it can be divided by the alignment number and the result will not have a remainder(or will have a remainder of 0). Unaligned means that when an address is divided by the alignment number, result has a non-zero remainder. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000 because after dividing it by both alignment numbers, remainder of the result is 0 in both cases. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000 because when you divide it by 4, the remainder is 0, but when you divide it by 0x1000, the remainder is 4. Number 0x40001 is not aligned by neither 4, nor 0x1000. Most  objects in memory are aligned by 4, but not always.
 When you perform a scan, Cheat Engine will provide you with a list of addresses matching your search. Shown values of variables at found addresses are updated as the actual in-game values of variables change, at a rate set in the Settings menu.

@@ Line 23: / Line 23: @@
 *Byte (values between 0 and 255 or -128 to 127 if signed)
-*2 byte (values between 0 and 65536 or -32768 to 32767 if signed)
+*2 byte (values between 0 and 65535 or -32768 to 32767 if signed)
 *4 byte (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
-*8 byte (values between 0 and 18446744073709551614 or -9223372036854775808 and 9223372036854775807 if signed)
+*8 byte (values between 0 and 18446744073709551615 or -9223372036854775808 and 9223372036854775807 if signed)
 *Float (values between 1.5 x 10^-45 and 3.4 x 10^38  )

@@ Line 1: / Line 1: @@
 [[Category:Help]]
 {{NeedWork}}
-Initial contribution, just placing a few 'things about ce scanning' here to work out later
+Initial contribution, just placing a few 'things about ce scanning' here to work out later.
 ----
-Memory scanning is one of the most major features of CheatEngine.
+Memory scanning is one of the most major features of Cheat Engine.
-Memory scanning is reading the memory provided to the application.
+Memory scanning means searching for a specific value or a pattern in the memory provided to the application.
-CheatEngine's scanning makes use of multiple processors when available.
+Cheat Engine's scanning makes use of multiple processor cores when available.
-CheatEngine allows you to search addresses in various ways using different types of searching.
+Cheat Engine allows you to search addresses in various ways using different types of searching.
 What you need to define is: Value Type, Scan Option, Scan Range and other smaller options.
 ==Value Type==
-The available types CheatEngine can scan with are:
+The available types Cheat Engine can scan for are:
 *Binary
@@ Line 41: / Line 42: @@
-Which one you should choose depends on the value you want to search.
+Which one you should choose depends on the value and type of the value you want to search for.
 A value that only switches between 1 and 0 is often a Binary.
-While any integer number (1, 3, 4599, 15686, etc...) is most often a 4 byte value.
+While an integer number (1, 3, 4599, 15686, etc...) is most often a 4-byte value.
 Strictly non-integer numbers are always Float or Double. Small numbers are often Float, bigger ones Double.
 Text is often stored as a String/Text.
@@ Line 49: / Line 50: @@
 ==Scan Option==
-Sometimes you may not know the exact number of a value you want to search, or it changes too fast to scan normally. That's why CheatEngine provides several ways of looking for values. These scan options make it possible to find any value, wether you know it or not.
+Sometimes you may not know the exact number of a value you want to search for, or it changes too often to scan normally. That's why Cheat Engine provides several ways of looking for values. These scan options make it possible to find any value, whether you know it or not.
 The options available are divided in two: First Scan options and Next Scan options.
@@ Line 90: / Line 91: @@
-All these options speak for themselves. CheatEngine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
+All these options speak for themselves. Cheat Engine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
 ==Scan Range==
-CheatEngine only scans between the given range markers. Default are these From: 00400000 To: 7FFFFFFF
+Cheat Engine only scans between the given range markers. Default are these From: 00400000 To: 7FFFFFFF
-If you know for certain that a certain address must be between two addresses, then you can change these markers and CheatEngine will only search between those.
+If you know for certain that a certain address must be between two addresses, then you can change these markers and Cheat Engine will only search between those.
 ----
-Fast Scan: Fast scan speeds up the scanning by skipping 'unaligned' memory addresses.
+Fast Scan: Fast scan speeds up the scanning by skipping unaligned(by 4) memory addresses. Aligned address means that it can be divided by the alignment number without remainder. Unaligned means that when an address is divided by the alignment number, there is a remainder. For example, address 0x40000 is aligned by 4 and also aligned by 0x1000. Address 0x40004 is aligned by 4 but isn't aligned by 0x1000. Number 0x40001 is not aligned by neither 4, nor 0x1000. Most  objects in memory are aligned by 4, but not always.
-When you perform a scan, CheatEngine will provide you with a list of addresses matching your search. These shown addresses are also updated as the actual addresses change, at a rate set in the Settings menu.
+When you perform a scan, Cheat Engine will provide you with a list of addresses matching your search. Shown values of variables at found addresses are updated as the actual in-game values of variables change, at a rate set in the Settings menu.
 There are two types of addresses in this list: Green ones and black ones.
 Green means static addresses. Whenever you load the application these addresses will stay the same/hold the same value.
-These addresses show up as normal addresses in the list, but are actualy like this:
+These green addresses show up as absolute virtual addresses in the list, but are actually offsets to base address of one of the loaded modules in the process' address space. So when you have static(green) address 4075FFB0 and module's base address is 40000000, it is calculated as 40000000+75FFB0, which Cheat Engine often shows you as ModuleName.exe+75FFB0.
-Black means dynamic addresses. These will change location whenever you load the application, even during the application's run. Using pointers you can find static addresses for these dynamic ones.
+Black means dynamic addresses. Variables at these addresses will change location(variables will change their addresses) whenever you load the application, and even while the application is running. Using pointers you can find static addresses for these dynamic ones.
 ==Grouped==
-Grouped scanning allows you to find a structure more quickly when you know it's layout.  Individual values are in the format "type:value" separated by spaces.  For example if you know that health is an integer and your current health is 75/100, and that the structure has the current value, an unknown 4 byte quantity, and then the max value, you can search for this:
+Grouped scanning allows you to find a structure more quickly when you know its layout.  Individual values are in the format "type:value", separated by spaces.  For example if you know that health is an integer and your current health is 75/100, and that the structure has the current value, an unknown 4 byte quantity, and then the max value, you can search for this:
 <pre>4:75 4:* 4:100</pre>

← Older revision		Revision as of 19:10, 18 March 2019
Line 1:		Line 1:
−	~~<span style~~=~~"font~~-~~size~~:~~25px;color~~:~~red~~">~~Sorry! Content not available.~~</~~span~~>	+	[[Category:Help]]
		+	{{NeedWork}}
		+	Initial contribution, just placing a few 'things about ce scanning' here to work out later
		+
		+	----
		+
		+	Memory scanning is one of the most major features of CheatEngine.
		+	Memory scanning is reading the memory provided to the application.
		+	CheatEngine's scanning makes use of multiple processors when available.
		+
		+	CheatEngine allows you to search addresses in various ways using different types of searching.
		+
		+	Firstly you need to define what type of search you want.
		+	What you need to define is: Value Type, Scan Option, Scan Range and other smaller options.
		+
		+	==Value Type==
		+
		+	The available types CheatEngine can scan with are:
		+
		+	*Binary
		+
		+	*Byte (values between 0 and 255 or -128 to 127 if signed)
		+
		+	*2 byte (values between 0 and 65536 or -32768 to 32767 if signed)
		+
		+	*4 byte (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
		+
		+	*8 byte (values between 0 and 18446744073709551614 or -9223372036854775808 and 9223372036854775807 if signed)
		+
		+	*Float (values between 1.5 x 10^-45 and 3.4 x 10^38 )
		+
		+	*Double (values between 5.0 x 10^-324 and 1.7 x 10^308 )
		+
		+	*Array of bytes
		+
		+	*String (/Text)
		+
		+	*All (Byte to Double)
		+
		+	*Grouped
		+
		+
		+	Which one you should choose depends on the value you want to search.
		+	A value that only switches between 1 and 0 is often a Binary.
		+	While any integer number (1, 3, 4599, 15686, etc...) is most often a 4 byte value.
		+	Strictly non-integer numbers are always Float or Double. Small numbers are often Float, bigger ones Double.
		+	Text is often stored as a String/Text.
		+
		+	==Scan Option==
		+
		+	Sometimes you may not know the exact number of a value you want to search, or it changes too fast to scan normally. That's why CheatEngine provides several ways of looking for values. These scan options make it possible to find any value, wether you know it or not.
		+	The options available are divided in two: First Scan options and Next Scan options.
		+
		+	First Scan options are:
		+
		+	*Exact Value
		+
		+	*Bigger than...
		+
		+	*Smaller than...
		+
		+	*Value between...
		+
		+	*Unknown initial value
		+
		+
		+	Next Scan options are:
		+
		+	*Exact Value
		+
		+	*Bigger than...
		+
		+	*Smaller than...
		+
		+	*Value between...
		+
		+	*Increased Value
		+
		+	*Increased Value by...
		+
		+	*Decreased Value
		+
		+	*Decreased Value by...
		+
		+	*Changed Value
		+
		+	*Unchanged Value
		+
		+	*Same as First Scan
		+
		+
		+	All these options speak for themselves. CheatEngine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
		+
		+	==Scan Range==
		+
		+	CheatEngine only scans between the given range markers. Default are these From: 00400000 To: 7FFFFFFF
		+	If you know for certain that a certain address must be between two addresses, then you can change these markers and CheatEngine will only search between those.
		+
		+
		+	----
		+
		+	Fast Scan: Fast scan speeds up the scanning by skipping 'unaligned' memory addresses.
		+
		+
		+	When you perform a scan, CheatEngine will provide you with a list of addresses matching your search. These shown addresses are also updated as the actual addresses change, at a rate set in the Settings menu.
		+	There are two types of addresses in this list: Green ones and black ones.
		+	Green means static addresses. Whenever you load the application these addresses will stay the same/hold the same value.
		+	These addresses show up as normal addresses in the list, but are actualy like this:
		+	ApplicationName.exe+75FFB0 (This is merely an example.)
		+
		+	Black means dynamic addresses. These will change location whenever you load the application, even during the application's run. Using pointers you can find static addresses for these dynamic ones.
		+
		+	==Grouped==
		+
		+	Grouped scanning allows you to find a structure more quickly when you know it's layout. Individual values are in the format "type:value" separated by spaces. For example if you know that health is an integer and your current health is 75/100, and that the structure has the current value, an unknown 4 byte quantity, and then the max value, you can search for this:
		+
		+	<pre>4:75 4:* 4:100</pre>

← Older revision		Revision as of 16:25, 16 March 2019
Line 1:		Line 1:
−	~~[[Category:Help]]~~	+	<span style="font-size:25px;color:red">Sorry! Content not available.</span>
−	~~{{NeedWork}}~~
−	~~Initial contribution, just placing a few 'things about ce scanning' here to work out later~~
−
−	~~---~~-
−
−	~~Memory scanning is one of the most major features of CheatEngine.~~
−	~~Memory scanning is reading the memory provided to the application.~~
−	~~CheatEngine's scanning makes use of multiple processors when available.~~
−
−	~~CheatEngine allows you to search addresses in various ways using different types of searching.~~
−
−	~~Firstly you need to define what type of search you want.~~
−	~~What you need to define is~~: ~~Value Type, Scan Option, Scan Range and other smaller options.~~
−
−	~~==Value Type==~~
−
−	~~The available types CheatEngine can scan with are~~:
−
−	*Binary
−
−	*Byte (values between 0 and 255 or -128 to 127 if signed)
−
−	*2 byte (values between 0 and 65536 or -32768 to 32767 if signed)
−
−	*4 byte (values between 0 and 4294967295 or -2147483648 and 2147483647 if signed)
−
−	*8 byte (values between 0 and 18446744073709551614 or -9223372036854775808 and 9223372036854775807 if signed)
−
−	*Float (values between 1.5 x 10^-45 and 3.4 x 10^38 )
−
−	*Double (values between 5.0 x 10^-324 and 1.7 x 10^308 )
−
−	*Array of bytes
−
−	*String (/Text)
−
−	*All (Byte to Double)
−
−	*Grouped
−
−
−	~~Which one you should choose depends on the value you want to search.~~
−	~~A value that only switches between 1 and 0 is often a Binary.~~
−	~~While any integer number (1, 3, 4599, 15686, etc...) is most often a 4 byte value.~~
−	~~Strictly non-integer numbers are always Float or Double. Small numbers are often Float, bigger ones Double.~~
−	~~Text is often stored as a String/Text.~~
−
−	~~==Scan Option==~~
−
−	~~Sometimes you may~~ not know the exact number of a value you want to search, or it changes too fast to scan normally. That's why CheatEngine provides several ways of looking for values. These scan options make it possible to find any value, wether you know it or not.
−	~~The options~~ available ~~are divided in two: First Scan options and Next Scan options.~~
−
−	~~First Scan options are:~~
−
−	*Exact Value
−
−	*Bigger than...
−
−	*Smaller than...
−
−	*Value between...
−
−	*Unknown initial value
−
−
−	~~Next Scan options are:~~
−
−	*Exact Value
−
−	*Bigger than...
−
−	*Smaller than...
−
−	*Value between...
−
−	*Increased Value
−
−	*Increased Value by...
−
−	*Decreased Value
−
−	*Decreased Value by...
−
−	*Changed Value
−
−	*Unchanged Value
−
−	*Same as First Scan
−
−
−	All these options speak for themselves. CheatEngine remembers the values found in the previous scan, allowing it to compare new values with the old ones and revert to a previous scan. It also remembers the values of the First Scan.
−
−	~~==Scan Range==~~
−
−	~~CheatEngine only scans between the given range markers. Default are these From: 00400000 To: 7FFFFFFF~~
−	~~If you know for certain that a certain address must be between two addresses, then you can change these markers and CheatEngine will only search between those.~~
−
−
−	~~----~~
−
−	~~Fast Scan: Fast scan speeds up the scanning by skipping 'unaligned' memory addresses.~~
−
−
−	When you perform a scan, CheatEngine will provide you with a list of addresses matching your search. These shown addresses are also updated as the actual addresses change, at a rate set in the Settings menu.
−	~~There are two types of addresses in this list: Green ones and black ones.~~
−	~~Green means static addresses. Whenever you load the application these addresses will stay the same/hold the same value.~~
−	~~These addresses show up as normal addresses in the list, but are actualy like this:~~
−	~~ApplicationName.exe+75FFB0 (This is merely an example.)~~
−
−	~~Black means dynamic addresses. These will change location whenever you load the application, even during the application's run. Using pointers you can find static addresses for these dynamic ones~~.
−
−	~~==Grouped==~~
−
−	Grouped scanning allows you to find a structure more quickly when you know it's layout. Individual values are in the format "type:value" separated by spaces. For example if you know that health is an integer and your current health is 75/100, and that the structure has the current value, an unknown 4 byte quantity, and then the max value, you can search for this:
−
−	~~<pre>4:75 4:* 4:100~~</~~pre~~>