Cheat Engine

Csimbi · Posted: Sun Oct 04, 2009 2:27 pm Post subject: Risen crash

Hi,
I am trying to hack Risen.
When I enable the debugger, it crashes.
Any way to work around this?
Thank you.

Dark Byte · Posted: Sun Oct 04, 2009 3:04 pm Post subject:

try this: (assuming you're still on 32-bit windows)
Download http://cheatengine.org/temp/untestedtestwhichwillmostlikelycrashbigtime.rar (don't forget to reboot if you use the old ce's driver)

enable kernelmode debugging and global debug registers
Then try to find out what accesses a specific value (as usual with kernel debug, don't attach the default debugger)

and yes, the name is like that for a reason, it's a mid development compile the kernemode debugger with global debug has only been tested once with ce's tutorial step 2, and DO NOT EVER click on the "test debug" button followed by clicking launch.
and it may slow down your computer so much that you have only 1 frame a day in risen

Csimbi · Posted: Sun Oct 04, 2009 3:49 pm Post subject:

Yes, still 32bit. XP SP3.

Dark Byte · Posted: Sun Oct 04, 2009 4:07 pm Post subject:

parts are from the svn but not everything is commited to it yet
edit: I've just commited everything I hadn't yet

also, just try running it just like that from the folder it is in. don't put it in the same folder as the old ce. (e.g if you had run ce once and any of the settings->extra things where enabled, you wouldn't overwrite dbk32.sys, it'd selfrestore...)
You will get a message that ucc12.dll is missing, but just accept that

also, I haven't changed anything in the processlist yet, so I don't know where that comes from

and that you didn't see the "test debug" line might be because of your horrible dpi settings, or you ran the wrong version of ce (it should be above the manually add address, easily clickable by accident)

hmm:

Csimbi · Posted: Sun Oct 04, 2009 4:51 pm Post subject:

Dark Byte · Posted: Sun Oct 04, 2009 4:59 pm Post subject:

hmm, no idea, sounds like the graphics mode causes ce to crash
Try resetting all settings in ce (using the start menu that deletes all registry info for ce)
Or the processwatcher is broken.

also, what svn errors? What file is missing ?

Csimbi · Posted: Sun Oct 04, 2009 5:18 pm Post subject:

After unloading the driver, I wiped all registry settings.
That did it it seems.
The menus and buttons are ok, and I managed to find the address I am looking for - no errors at all.
But, when I right-click and select find out who accesses this address, my system restarts. No errors, no BSOD, not nothing, just a cold boot as if I turned the system on (the screen went pitch black, there was a tick from the HDD, and the fans in the system started spinning fast, then the BIOS POST screen appeared - and then I knew what was going on).

As for the SVN. I might have been grabbing it while you have updated it, so let me grab again and see. I tried compiling the standalone first; there were no files missing, rather errors about missing things (GetBitsOf or something), then I added a unit to the project, then I got another function missing, I added a unit to "uses", then I got some other error, then I gave up. I'll try again tomorrow and post the results some other place - now it's 01:49 here, so I have to go to sleep.
Later.

*update*
Added SVN compilation issue here:
http://forum.cheatengine.org/viewtopic.php?t=7149

Dark Byte · Posted: Sun Oct 11, 2009 1:42 pm Post subject:

yeah, just had time to test it again in 32-bit. Looks like i broke the debugger since last time it actually worked (have been porting it to 64-bit since then and probably messed up something for the 32-bit part)
The debuggertest app even crashed when debugging

Csimbi · Posted: Sun Oct 11, 2009 3:31 pm Post subject:

Well, I gave it up and I went back to vanilla 5.5 - though it crashes with Risen, so I have to stay away from the debugger.
I'll stick to 5.5 until I hear otherwise.

Dark Byte · Posted: Thu Oct 22, 2009 3:55 pm Post subject:

if you (or someone else with a similar problem) cares to try:
http://www.cheatengine.org/temp/secondhardlytestedtest.rar

I just tested this build in vmware on a 32-bit os and it seems to be working (currently don't have an active 32-bit os installed here to test)

how to use:
just extract it anywhere (as long as you have write access to the folder)
run ce
go to settings->extra and enable both kernelmode and global debug

then open the target process and do a "find out what accesses"

and yes, I know kernelmode writeprocessmemory is broken (writes 0)