A modern memory scanner and game modding tool for Windows. Built with .NET 10 and Windows Forms as an alternative to Cheat Engine, designed for game modding, reverse engineering, and security research.
Process selection, memory scanning, and address list
Hex editor with x64 disassembly, memory regions, and live editing
C# scripting with hardware breakpoints and register inspection
IL2CPP type inspection with live value display
Export scripts as standalone executables
- Parallel multi-threaded scanning for maximum performance
- Disk-backed storage supporting 50M+ results without memory exhaustion
- Value types: Int8, Int16, Int32, Int64, Float, Double, String (ASCII/Unicode), Array of Bytes
- Scan types: Exact, Bigger/Smaller, Between, Unknown, Increased/Decreased/Changed/Unchanged
- Value freezing with dedicated high-priority thread for reliable freeze operations
- Hex editor with live editing powered by HexBox
- x64 disassembler using the Iced library
- Memory region viewer for process memory layout inspection
- Pattern search with wildcard support
- Memory export in multiple formats: binary, hex dump, C array
- Roslyn-powered scripting engine with IntelliSense via RoslynPad
- Full memory read/write API for direct process manipulation
- AOB scanning with wildcard pattern support
- Patch helpers:
Nop(),WriteJmp(),WriteCall(),CreateCodeCave() - Enable/Disable script sections for toggling patches
- Save/restore original bytes for clean deactivation
- Hardware breakpoints using debug registers (DR0-DR3)
- Multiple backends: Windows Debug API, VEH injection, Kernel driver
- Register modification in callbacks, including XMM registers
- Find what reads/writes to track memory access
| Runtime | Capabilities |
|---|---|
| Mono/Unity | Type enumeration, method address resolution via MonoDataCollector |
| IL2CPP | Metadata parsing (v24-31), runtime address resolution |
| .NET Core/5+ | ClrMD-based introspection, heap walking |
- ReClass.NET-style memory structure visualization
- Import types directly from Mono, IL2CPP, or .NET runtime
- Code generation: C#, C++, C headers
- Live value display for real-time structure analysis
- BFS-based pointer path finding algorithm
- Multi-threaded scanning for improved performance
- Rescan capability with new base addresses
- Export scripts as standalone executables
- Publish modes: Self-contained, Framework-dependent, Native AOT
- Pre-compiled scripts with no Roslyn runtime dependency
| Requirement | Version |
|---|---|
| Operating System | Windows 10/11 (x64) |
| Runtime | .NET 10 |
| Privileges | Administrator |
- Download the latest release from the Releases page
- Extract the ZIP to a folder of your choice
- Run
DijoScan.exeas Administrator
See docs.md for usage instructions, scripting API reference, and examples.
DijoScan is built upon the work of several excellent open-source projects:
- Iced - High-performance x86/x64 disassembler
- HexBox - Hex editor control for Windows Forms
- RoslynPad - C# editor with Roslyn-powered IntelliSense
- ClrMD - .NET runtime diagnostics library
- Cheat Engine - Inspiration and reference implementation
This software is intended for educational purposes, legitimate game modding, and authorized security research only. Users are responsible for ensuring their use complies with applicable laws and terms of service.