Cheat Engine

[VOSMAN]

i have a starforce3 game call "The Suffering Ties That Bind",i can't found this game 's trainer on website,so i want make a trianer,but this game health\ammo and so on is dma address,so i try to Cheat Engine's debugger,but it doen't work. is that starforce3 game have some protect anti debugger?

[Dark Byte]

Sure you can make a trainer, debugging is just a little harder, but it is still possible to debug by rewriting the 'new' int1 handler at a certain position, or using the general exception interrupt after setting memory to read only and capture writes.

But that isn't in a official ce release yet, so for the time being, just scan the memory and make modifications there (bypassing DMA is still possible, just a little more trickier)

[ungabunga]

Ok, I understand that you can make a trainer, but pls be so kind and help us a little. I am really curious how we can bypass this problem. Thanx.

[ungabunga]

I have seen the topic about bypasing sf3 but it doesn't work, so pls give us some help. I insist because it is quite a chalenging thing.

[Zhoul]

Here's a way to make your own pointers... a 3 in 1 actually.

http://forum.cheatengine.org/viewtopic.php?t=4606

As the topic title states "Remember, there's always more then 1 way to skin a cat".

The question you asked has so many answers, you'll probably not get one out of DB, because it's just to extensive to teach on a forum. Take the example in the thread I linked you, and start 'getting in there'

Asking questions is never wrong, but learning it yourself is always fun.

I started using CE a few months ago. Before that, I didn't know assembly, pointers, or much else related to CE, except for memory scanning in general (god, i loved that playstation mem scanner). Just ask DB how many questions I've had, relating to teaching me how to 'do all this', since I started up a few months ago. I'm pretty darn sure the only questions were interface/bug related.

Google is your friend

- Z

[Dark Byte]

yes, it's a bit too complicated to explain. All I can say is that you'll have to do some code rewriting in the windows kernel (80000000 and up)

[ungabunga]

Thanx guys.
Zhoul, i really don't have problems with the pointers, i made a trainer for the first suffering that worked just fine, unfortunatelly i didn't posted it , it was just for me and some friends. if there wouldn't be for the sf3 maybe i would be able to solve this one too:(
But txk and let's hope someone will be able to do something for this.

[Zhoul]

So my question is... Why do you need the debugger in order to find pointers?

I thought that's what the issue was, therefore, I offered an easy way to create your own pointers, even though it's still possible to find pointers without attaching a debugger...

?

Maybe if you described, in detail, what the issue is, we could help.

- Zhoul

[Dark Byte]

the options like "find out what reads/writes/accesses this address" require the debugger. Without them it is hard to find out what code is used to access them.

[Zhoul]

[ungabunga]

So Zhoul... will you be so kind and solve this "Suffering" problem? Maybe even make a tutorial over this? Hey, if you do than i'll buy you a beer the first time you get to Romania! (No joke, i'm from Romania and i don't want to hear anything about dracula and other stupid shit the media thinks that has anything to do with us, excepting for Hagi and phisics researchers:)).

[SunBeam]

[SunBeam]

Salut Cristi. Si io mi-s roman. SF3 nu prea merge nici in Stealth mode, asa k pana nu scoate sefu [Dark Byte] ceva nou, nu prea ai alta solutie decat sa cauti adresele [stiu ca foloseste DMA]. Aceeasi problema o am cu PoP2T asta e...

@Dark Byte : I was telling him that till you don't release anything for certain, he should stick to finding the DMA addresses [although it's a waste of time doing it over and over again]...

[SunBeam]

Zi si mie topicu cu SF3...

[Zhoul]