Cheat Engine

ColonelRVH

Seriously lately the process of searching for a reuseable address is getting more and more complicated.

I still remember the first time using Art money then Cheat Engine and I love it, it was like about 8 years ago. Everything just simple, search for address and save it, enjoy the fun.

But about like 3 or 4 years ago I have to find the pointer, which is still fine. A bit confused at first but the pointer search did a nice job, just for a while...

There are some game I could find like 10.000 pointer which is normal, i turn off the save and load again for rescan, which is still fine. But after i close the game and open it for rescan: 0 pointer found. Just WTH? I still dont know why.

And that left me one choice left. AOB Scan and Script. After a couple of days I was like giving up. Even i am a programmer (C#, Java, HTML, SQL etc...), damn... The concept of Assembly and the Memory is too complex for a noob like me. Some tutorials got me nowhere. I gave up it for awhile and back to simple method like find all address and save then reuse by find new address and recalculate, which is fine.

But lately I suffered from it again, every match I have to rescan. I come back to do some research for AOB Scan and Script again. Led me to this guide youtube. com /watch?v=2TYAd3l2mkY

It's a nice one, clear and clean. However when I do it like that my game crashed, as his game also crashed near the ending. And I found that if i scan the AOB at that time, it was truly is unique, however If i restart the game and scan that AOB again, I got nothing, wth? Which made me wordering about AOB Scan and Script reliability.

I have used many table from our forum's pros. Most of them work just fine, i admit, just a few crashed. How did they do that? I really want to know.

Also there are some game won't allow me to attach the debugger, like Starcraft 2 single player. The game crashed instantly when attached. How do you guys work around with this?

Lastly, I'm really looking forward to our CE improved more and more, games are changing, CE needs to change too, for noobs like me. Well just a hope.

Please help.

Dark Byte · Posted: Sun Oct 18, 2015 1:06 am Post subject:

you are using proper wildcards in aob's?

e. g jumps, calls and certain offsets should be wildcarded (and try to omit calls in .net games, as they may have an extra bit of code depending on the order a piece of code was jitted

also, has the function you're interested in already been executed once? If not, that aob won't be found no. (tip: if it's mono you can tell ce to jit that function instantly. And for java there is a parameter you can give to make it jit everything as well)

as for the debugger, try a different debugger interface. e. g: veh

Rydian · Posted: Sun Oct 18, 2015 1:38 am Post subject:

http://forum.cheatengine.org/viewtopic.php?t=572465
And there's some explanations on pointer scanning.

STN · Posted: Sun Oct 18, 2015 6:04 am Post subject:

Its on the contrary, games have become piss easy to hack compared to a decade ago. You don't need to understand what the hell you are doing and still hack any game you like, majority of the people posting here have no idea what code injection or pointer is yet still keep using it fine. Things were a lot technical in the past, you had to learn coding and understand gamehacking concepts (even cracking/reversing) if you wanted to train games you like, now CE does that all for you. Anyway, i digress

Without being more specific it is hard to tell what your issue is. There are some games where pointers are not a feasible option whereas in others code injection/sigscanning is hard to do and pointers are better. If you are having trouble attaching to a game then try a different debugger type. But there's really only quite a few games that you can count on your fingers that need a kernel mode debugger to be attached, all others can be debugged fine with VEH debug.

There's another thing, you can never find a perfect AOB/signature anymore. Games are updating every other day (LITERALLY) and their code constantly changing. If the code doesn't change, an offset you're relying on for comparison changes. So its not a problem with your AOBs, its the problem with gaming industry producing games that should be shoved up the developer's ass for further processing before being released. An example that i can recall very recently is Act of Aggression, this game keeps updating twice/thrice a week even when it came out of early access and fully released, it keeps updating. This wasn't the case a decade ago when games were properly released and only idiots upgraded to latest versions.

Rydian · Posted: Sun Oct 18, 2015 6:45 am Post subject:

Not to mention games using JIT tech where something like updating .NET on your computer can cause your tables for games to break because the code they get compiled to changes.

ColonelRVH · Posted: Sun Oct 18, 2015 7:42 am Post subject:

@STN
Actually even if it got updated every 2 or 3 weeks still seems fine to me if the process of creating a fine reuseable table takes about a day.

And if a game update frequently 3 times a week then i have nothing to complain about creating a table.

Dark Byte · Posted: Sun Oct 18, 2015 7:48 am Post subject:

Just a guess, but is this an online game?
Most single player games don't often employ this strict amount of drm (last recentish singleplayer games i saw with such drm where startrek and warhammer 40000)

To bad that the release of 6.4 has a broken implementation of exception breakpoints, but if you have the beta build of next version you could try those kinds of breakpointe

ColonelRVH · Posted: Sun Oct 18, 2015 7:58 am Post subject:

I'm trying with Starcraft 2 single player mode. Since the newest patch, the address always change.

STN · Posted: Sun Oct 18, 2015 8:20 am Post subject:

There is no way kernel mode debugging won't work, are you sure you have it enabled ?. Also i don't remember there being any sort of anti-debug in starcraft 2, no idea why Blizzard will bother implementing one, years after release.

What is the game version you have ? I can see HOG releasing a trainer for v2.1.12.36657 which appears to be the latest ( http://gamecopyworld.com/games/pc_starcraft_2.shtml )

ColonelRVH · Posted: Sun Oct 18, 2015 8:30 am Post subject:

Well newest patch is 3.0 Legacy of the Void, and that one is 2.0

Probably they changed most of the code structures. I was suprised too.

Btw the game crashed itself, not kernelmode doesn't work.

STN · Posted: Sun Oct 18, 2015 8:38 am Post subject:

Isn't that the new expansion pack ? and it is using Warden right ? Means the anti-cheat is monitoring code changes etc. see this
https://en.wikipedia.org/wiki/Warden_(software)

Can you play the game with internet disconnected ? If not then its not really single player and game is sending data to its servers. I don't think this is something that we can help with, you may have better luck on multiplayer related forums since this is strictly anti-cheat designed for MP games and Blizzard is also very anal about people cheating in the single player, treating it essentially as cheating in multiplayer mode ( http://www.wired.com/2010/10/starcraft-ban/ ).

ColonelRVH · Posted: Sun Oct 18, 2015 8:47 am Post subject:

I just checked, I still can go offline and play the single player. And the game still act the same.

Also the main point of this thread is not about Starcraft 2, please remind that.