Cheat Engine

XaneXXXX · Last edited by XaneXXXX on Mon Dec 07, 2015 2:19 pm; edited 1 time in total

So i have this game (x64 one), I have tried using cheat engine, Ollydbg, x64dbg and a few others.

With cheat engine, when i do "check what writes/accesses the address" nothing pops up at all. even tho the address/addresses change.

I also tried setting breakpoint with other debuggers and same thing happend. Nothing just accesses/writes to it. (I've tried all debuggers + methods in CE)

I've never heard about this kind of "protection" before. Has anyone seen something similar? And if so is there a bypass? I won't tell which game for personal reason.

Thanks!

atom0s · Posted: Sat Dec 05, 2015 7:09 pm Post subject:

Try switching the debugger being used in Cheat Engine to something else. Also try using the driver functions too to see if those help any.

XaneXXXX · Posted: Sat Dec 05, 2015 7:22 pm Post subject:

++METHOS · Posted: Sun Dec 06, 2015 1:15 am Post subject:

VEH debugger using page exceptions should work. Is the target packed?

XaneXXXX · Posted: Sun Dec 06, 2015 1:30 pm Post subject:

++METHOS · Posted: Sun Dec 06, 2015 5:26 pm Post subject:

Also, as noob as it sounds, make sure you are running CE as admin.

Sometimes the target will crash, regardless of which debugger that you use...especially if it has anti-debug measures in place.

As an aside, PEiD is one of many analyzers:

http://www.exetools.com/file-analyzers.htm

XaneXXXX · Posted: Sun Dec 06, 2015 6:02 pm Post subject:

++METHOS · Posted: Sun Dec 06, 2015 7:09 pm Post subject:

I wouldn't worry too much about the analyzer...you're probably experiencing problems with anti-debug protection.

XaneXXXX · Posted: Sun Dec 06, 2015 7:25 pm Post subject:

++METHOS · Posted: Sun Dec 06, 2015 7:42 pm Post subject:

If you can publish the name of the target, people can probably just tell you. A lot of game developers tend to stick with what they have used in the past. Sometimes, the protection is their own, custom protection that would take too much time to strip, so bypasses and 'emulation' are often used, instead.

XaneXXXX · Posted: Sun Dec 06, 2015 8:05 pm Post subject:

++METHOS · Posted: Sun Dec 06, 2015 9:36 pm Post subject:

Again, I wouldn't bother with the analyzer. They are great for detecting universal packers and such, but not for protection schemes that perform simple checks based on custom code.

You may just have to examine the code yourself to see what is happening. If it's a game, chances are, you'll just have to find a workaround unless it has a protection that can be stripped...then, you can just use one of the scene releases that have the protection removed. Doing that, though, will most likely render any online mode useless. If it's online game, though, you probably don't want to be cheating anyway unless you are playing on a private server with your friends. Not only does it ruin the game for non-cheaters, but if your cheats are detected, you could be banned from playing or worse.

atom0s · Posted: Mon Dec 07, 2015 12:57 pm Post subject:

Is this an online / multiplayer game? If not, can you share the name? Others may have worked on the game before and could help further that way.

XaneXXXX · Posted: Mon Dec 07, 2015 2:17 pm Post subject:

Since it is against the rules/people won't help if it's an multiplayer game, i don't wanna publish the game. Even tho i don't wanna bypass this debug protection to actually "hack" the game. I wanna do it for educational purposes since this seems like an unique protection.

I also know most of server based/client based stuff. What is the difference etc. I guess that most people here that want help hacking online games do it so that they wanna "rule" over all the others with cheats. I can easily hack this particular game if i wanted to and destroy for others. But i don't care about that. I don't even care about the game at all. The only reason why i use this game is because it has this protection. If i where to find another game which uses the same protection i would switch to that.

Also in my experience many online games that uses protections against debugging is easily bypassed with plugins/switching debugger in CE. Of course there is also the risk of getting banned but still.

So do you people still want me to tell what game it is or should i just forget it and try and solve it myself? haha Smile

atom0s · Posted: Mon Dec 07, 2015 5:37 pm Post subject:

If its an online / multiplayer game, no. Don't share the name as it is against the rules.