Cheat Engine

OldCheatEngineUser · Jul 26, 2020

so while i was playing these days and searching for some values in games, i ended up with a game that have encrypted values, encrypted values take longer time to find than normal values

so an idea popped up, what if theres a function that allow us to select couple addresses and measure which one of these address changes faster than the other

it will be measured in milliseconds.
lets call it

"find out which of the selected addresses changes faster" it quite useful for multiple things:

lets say our weapon ammo is 25, we searched for it and ended up with 5 results.

OldCheatEngineUser · Jul 26, 2020

i mainly wrote this for encrypted values, since you end up with a range between 25-125.

so if this feature available, ill be able to find what i need quicker.
simply the value that changes fast its probably gonna be what im looking for.

ParkourPenguin · Posted: Thu Jun 29, 2017 9:33 am Post subject:

That timing would be better expressed on the order of microseconds or even nanoseconds. At that scale, events like context switches are no longer negligible, and the precision of the measurements is bad enough that the result of relative comparisons (e.g. this one changed before this one) can't be guaranteed. Even if it was on the order of milliseconds, it still can't be guaranteed because the game's thread could be running while CE's thread could be waiting for a time slice. You're asking for a feature that isn't viable.

As an alternative, you could set breakpoints on multiple instructions and see which order they fire in. That's easy enough for users to do with current features. If you want to automate it, use Lua.

OldCheatEngineUser · Jul 26, 2020

ehm technically i dont understand it that much. its sad thats not guaranteed.

but thank you very much for sharing such a good things that didnt came in my mind. which is setting break points on the instructions. but this remain useless IF you have more than 100 values and instruction.
and remains useless for ending up with over 100 [encrypted] values.

but really thanks i didnt think about it. Rolling Eyes

++METHOS · Posted: Thu Jun 29, 2017 2:53 pm Post subject:

Setting breakpoints even with 5 results is not a viable solution, in my opinion.

Generally, when dealing with multiple, encrypted values, it is best to batch-add them to your cheat table and just freeze them in groups to isolate the correct address as editing certain encrypted values can cause the target to crash.

OldCheatEngineUser · Jul 26, 2020

yeah true, and this is my problem.
whenever.i edit / freeze couple of them. game crash.

i know theres a way. and i can do it.
buy im lazy to do it.

its break and trace. i can take each value separately and see what writes to it. and then break and trace.

in break and trace it will show the value before it gets encrypted on the stack. << this the best thing if i have a range between 5-25.

but in my case no. i ends with at least 150.

++METHOS · Posted: Fri Jun 30, 2017 8:52 am Post subject:

You should be able to isolate the correct address by freezing, but if not, maybe try freezing one-by-one. It takes time, but it is sometimes necessary.

Alternatively, I have found that reverting the value back to what it was before it changed can work. The value needs to be exactly the same as before, though. Fortunately, CE shows you what that value is.

OldCheatEngineUser · Jul 26, 2020

yes methos, it will return black instead of red.
EDIT: i mean if they put a specific number for their encryption. << which i found a game use this method

but some game have it totally random even for the same number. << but technically not possible since how would they revert it back .. unless they save that random encryption value. still doesnt make much sense.

LostForever · Cheater Reputation: 0 Joined: 06 Oct 2006 Posts: 46

This would actually help a lot.

When doing scans for text (Something I've been doing a lot of lately) you'll get a lot of copies.

I usually either find a pointer (can be a pain depending on the program\game) or do something like this:

Scanned Value: "TestMe"

Change each result to "AestMe" "BestMe" "CestMe", etc.

One of them will usually be the original and will therefore update but in my most recent scan I got 197+ copies and because nothing (not even TitanHide w/ ScyllaHide+x64dbg) compares to Cheat Engines DBVM in terms of anti-anti-debugging I use Cheat Engine a lot.

This would save a lot of time.