View previous topic :: View next topic |
Author |
Message |
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Tue Dec 20, 2011 10:21 am Post subject: Stealthedit plugin to deal with memory checks (crcbypass) |
|
|
Here is a tutorial on how to use the stealthedit plugin with Cheat Engine if you run into a single player game that is using memory integrity checks. (Such as Xlive protected game or similar protections.)
http://www.szemelyesintegracio.hu/cheats/41-game-hacking-articles/419-stealthedit
UPDATE: Added Stealthedit 2 download link and description to the article.
_________________
Last edited by Geri on Mon May 21, 2012 12:06 pm; edited 1 time in total |
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sun Dec 25, 2011 8:41 pm Post subject: It doesn't work under windows 7 |
|
|
It doesn't work under windows 7
|
|
Back to top |
|
|
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Sun Dec 25, 2011 9:57 pm Post subject: |
|
|
Did you try it on 64-bit or 32-bit? And what was the exact problem?
_________________
|
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sun Dec 25, 2011 10:39 pm Post subject: |
|
|
My computer is 32-bit, plugin doesn't use the copy instead of the original code,It still uses the original code.
In Solve tutorial step 2 with stealthedit I use NOP on the green copy is not working fine. using NOP on the blue original code is working fine,but If I turn on
Lame memory protection It will crash.
|
|
Back to top |
|
|
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Sun Dec 25, 2011 10:53 pm Post subject: |
|
|
What happens if you do not change the blue code, only the green code?
Blue code should not be modified or the memory check will close the tutorial.
What happens if you enable the memory check and the "Solve tutorial step 2 with stealthedit" script? Is it crashing then?
_________________
|
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sun Dec 25, 2011 11:03 pm Post subject: |
|
|
if I do not change the blue code, only the green code nothing happens.
if I enable the memory check and the "Solve tutorial step 2 with stealthedit" script nothiny happens. The health dosen't change.
Only Blue code can effect the health value.
|
|
Back to top |
|
|
scribly Cheater Reputation: 1
Joined: 27 Apr 2008 Posts: 36
|
Posted: Sun Dec 25, 2011 11:03 pm Post subject: |
|
|
I use windows 7 and it works for me.
Make sure your system supports hardware based DEP
And that the tutorial or target process is not in the exception list
Go to system properties->advanced tab and click on the settings button of performance. Check the data execution prevention tab. (Try enabling it for ALL processes and reboot. If it then doesn't work your system doesn't support it, or you're doing something wrong)
Also, after enabling stealthedit check the taskmanager and make sure the Data Execution Prevention column is visible and that it's enabled
And to make sure, since you keep talking about blue and green memory, have you tried the cheat entries of the table geri provided before you start making any edits of your own? do they even get enabled ? (the stealthedit ones)
(And don't click "Attach to process" when opening the process. Just click ok)
And before I forget, the No Execute feature must not be disabled in the bios
Description: |
|
Filesize: |
39.1 KB |
Viewed: |
82293 Time(s) |
|
|
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sun Dec 25, 2011 11:21 pm Post subject: |
|
|
thank you very much,the both of you
.now it works
|
|
Back to top |
|
|
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Mon Dec 26, 2011 12:39 am Post subject: |
|
|
Cool.
Thanks for the feedback.
_________________
|
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sat Dec 31, 2011 7:33 am Post subject: |
|
|
Now I have a problem i need nop two address first: 39A51B second:39A531
The first address I can write the script like
stealthedit(stealth_tut,39A51B,6)
registersymbol(staddress)
label(staddress)
stealth_tut:
staddress:
nop
the second address how I write the script to nop it
|
|
Back to top |
|
|
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Sat Dec 31, 2011 10:19 am Post subject: |
|
|
39A51B +16 = 39A531
staddress = the copy of 39A51B
so
staddress +16 = the copy of 39A531
So you need to place your second hook on staddress+16
staddress+16:
nop
_________________
|
|
Back to top |
|
|
neu21 Newbie cheater Reputation: 0
Joined: 07 Jan 2009 Posts: 10
|
Posted: Sun Jan 01, 2012 8:28 am Post subject: |
|
|
Ok thank you
|
|
Back to top |
|
|
mezzo Cheater Reputation: 1
Joined: 08 Sep 2010 Posts: 28
|
Posted: Sun Jan 08, 2012 4:22 pm Post subject: |
|
|
Anybody know who the writer of the plugin is ?
|
|
Back to top |
|
|
Geri Moderator Reputation: 111
Joined: 05 Feb 2010 Posts: 5636
|
Posted: Sun Jan 08, 2012 4:58 pm Post subject: |
|
|
Yes, I know (obviously since I got the plugin from him), but it's a seeecret.
_________________
|
|
Back to top |
|
|
mezzo Cheater Reputation: 1
Joined: 08 Sep 2010 Posts: 28
|
Posted: Mon Jan 09, 2012 11:37 am Post subject: |
|
|
Fair enough. Just wondered since I found absolutely no other resources regarding this plugin online, aside from your tutorial.
I'm kinda 'uptight' about DLL's from unknown origins
But I understand your position ! thanks anyway.
|
|
Back to top |
|
|
|