| View previous topic :: View next topic |
| Author |
Message |
e!ns7e!n Cheater
Reputation: 0
Joined: 06 Sep 2007 Posts: 30
|
Posted: Sun Jun 27, 2010 5:05 pm Post subject: Question: Unhook |
|
|
1.
Hello, I've been trying to unhook a patched memory region with HookShark, but I got the following error:
"Could not unhook following"
[1234] process.exe -> USER32.dll->USER32.dll+0x1D22B
If I try returning back the "original bytes" even with Cheat Engine, the bytes remain the same and don't change.
2.
My second question is related to attaching Cheat Engine to a "protected" process. When I select the process which I need and then just click OK to attach to the process, Cheat Engine closes immediately. So, how to attach to the "protected" process?
10x.
|
|
| Back to top |
|
 |
Deltron Z Expert Cheater
Reputation: 1
Joined: 14 Jun 2009 Posts: 164
|
Posted: Mon Jun 28, 2010 1:23 am Post subject: |
|
|
| 1. Does HookShark unprotect protected memory? try changing the memory with Cheat Engine, I know it does.
|
|
| Back to top |
|
 |
e!ns7e!n Cheater
Reputation: 0
Joined: 06 Sep 2007 Posts: 30
|
Posted: Mon Jun 28, 2010 3:34 am Post subject: |
|
|
No, it doesn't unprotect the protected memory.
When I try to unprotect the protected memory I get the following error:
Also, I cannot attach Cheat Engine to the process, CE closes immediately after attaching. I suppose the process has a kind of protection which doesn't allow the "hacking tools" to view process' memory? (but dunno how to fix that shit)..
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25833 Location: The netherlands
|
Posted: Mon Jun 28, 2010 4:22 pm Post subject: |
|
|
for 2: Get a more recent version of dbghelp.dll and place it in your system32 folder.
XP's version isn't compatible with newer games
| Quote: |
If I try returning back the "original bytes" even with Cheat Engine, the bytes remain the same and don't change.
|
Enable kernelmode read/write processmemory
Then just recompile ce but uncomment the code that calls makewritable, THAT can make everything writable
Alternatively, try the virtualpagedir plugin
Or go to 0xc0000000+(address / 0x1000)*8 and just set the writable bit there
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|