Cheat Engine

Smurfin · How do I cheat? Reputation: 0 Joined: 01 Apr 2012 Posts: 5

Hi.

I'm using
- CheatEngine 6.2 beta 5
- Windows 7 64bit with 16gb ram (no oc, all standard/auto setting) and SSD for system C:
- i7 2600k proc with no overclocking
- Asus p8z68vgen3 mobo

I have enabled unsigned driver usage and CE's 'about' window says my system supports dbvm, I already clicked it and set debugger to kernelmode and tried tick/untick-ing the options in Extra and Debugger interface config but it still gave me BSOD after a few seconds to 1 or 2 minutes I clicked [find what writes to this address]

I'd like to post a screenshot but it's prohibited coz this is my first post, maybe later.

this is the BSOD message :

Dark Byte · Posted: Sun Apr 01, 2012 6:03 pm Post subject:

make sure you do not set global debug or single stepping in kernelmode

anyhow,
make sure as little programs are running (not even the game)
go to the about screen and launch dbvm from there and wait one minute.
If the system does not crash, then start the game and try to debug it

also, you can upload screenshots

edit: Clock interrupt indicates that dbvm didn't properly load on all secondary cpu cores, or one crashed with an unexpected reason.

Smurfin · How do I cheat? Reputation: 0 Joined: 01 Apr 2012 Posts: 5

I can use my computer with DBVM enabled from the about screen for a long time and nothing bad happens, it occurs only after I clicked [find out what writes to this address] which attached the debugger.

I just tried [Attach Debugger to Process] via process list window and it still gave me BSOD. So it will only happen after I attached the debugger.

by the way the game I'm trying to debug closes itself using VEH debugger and windows debugger, so kernelmode debugger is my only shot because it works for a few seconds, too bad bsod happens and not enough time to find pointers.

I have tried ticking / unticking combinations of these in settings but no luck

Dark Byte · Posted: Sun Apr 01, 2012 6:56 pm Post subject:

Does it also bsod when debugging the tutorial?
And if you debug the tutorial while that specific game is running ?

Smurfin · How do I cheat? Reputation: 0 Joined: 01 Apr 2012 Posts: 5

yes, it also bsod when debugging the tutorial, but with [v]Use Global Debug Routine enabled. I tried it with call of duty 3 and it also bsod.

so, this [v]Use Global Debug Routine causes bsod in my system when enabled (tried 3 games, the tutorial, cod3, ran online), but without this enabled, the Ran Online game I am trying to hack closes itself, I think it's the only thing that makes the debugger running undetected Sad

, I can debug the other games just fine without that enabled.

Dark Byte · Posted: Sun Apr 01, 2012 8:24 pm Post subject:

at least it's a reproducable bug.
Perhaps someday I'll fix it. (perhaps it's the handling of the gd bit, or the cpu entered a stack crash which would normally raise a tripple fault crash, but that situation isn't implemented (demanded result=cold boot, useless))

As for this specific game, did it work in 32-bit windows ?
The way it reacts makes me believe that even if global debug was enabled it wouldn't find anything (might not close, but all the debugregisters might be in use, leaving none for the debugger)

Smurfin · How do I cheat? Reputation: 0 Joined: 01 Apr 2012 Posts: 5

I don't have a 32 bit windows installation in my system so I never did try.
Then I'll just drop it for now and wait for new release.

Thanks for the help, Dark Byte.

Dark Byte · Posted: Mon Apr 02, 2012 5:06 am Post subject:

There is one other way of finding the code that accesses the variable you're looking for without attaching a debugger, but it won't show any register states and will take a while to find it: Ultimap

Activate it and then let the game access that variable 87 times, then look for code that has been executed 87 times.

And if you're just looking for a pointer, try the pointerscan

Smurfin · How do I cheat? Reputation: 0 Joined: 01 Apr 2012 Posts: 5

how do I enable Ultimap ? can't find it anywhere

btw, I tried the same method on my other computer with i7 920 proc using win7 64 bit os, got the same bsod.

Tried it on my sister's comp with x3350 quadcore proc using win7 32 bit, at first try, it had the same bsod right after clicking enable dbvm in [about]. After that I rebooted, then tried it again, there was a message saying that I'm running a 32 bit system and won't need kernel debugging that badly lol while in fact I need it badly :p , anyway dbvm successfully enabled, but when clicking [find out what writes to this address] it wouldn't show anything in there even though I had changed the value in the game, it's just empty. I used ceregreset and tried again, it's still show empty result.

Dark Byte, could you please let me post screenshot here ? I still get this message "Sorry, but you can't post url's yet". I just got another bsod saying "SYSTEM_SERVICE_EXCEPTION" ..bla bla bla..
***dbk64.sys - Address blablabla base at blablabla, Datestamp 4f28a39e

Dark Byte · Posted: Mon Apr 02, 2012 7:58 am Post subject:

Ultimap is located in memoryview->tools

as for 32-bit , you really do not NEED dbvm there as you can just hook the interrupts there fine. But I guess it does show that the crash is from the 64-bit driver instead of dbvm, and it also shows what I expected, it won't show anything because al debugregisters are used up

and you can upload screenshots (click reply)