View previous topic :: View next topic |
Author |
Message |
orangeapple How do I cheat?
Reputation: 0
Joined: 15 Feb 2013 Posts: 2
|
Posted: Tue Feb 19, 2013 2:29 pm Post subject: Detected after attaching |
|
|
Hello, i was able to compile CE 6.2 and get it undetected by gameguard until i attached it to the process (via process watcher) and i tried playing around with the settings but i still get detected anyone had the same problem? or suggestions to fix it?
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25785 Location: The netherlands
|
Posted: Tue Feb 19, 2013 2:42 pm Post subject: |
|
|
Try disabling the symbol handler syminitialize and always make sure you use the kernelmode openprocess (make sure the driver is undetected as well, add encryption to the ioctrl communications)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
orangeapple How do I cheat?
Reputation: 0
Joined: 15 Feb 2013 Posts: 2
|
Posted: Wed Feb 20, 2013 1:08 am Post subject: |
|
|
thanks for the reply DB, but it seems that i still get detected even if i don't attach it, but it does take a minutes before getting detected could it still be the strings? here's what i've observed and done so far
- i just compiled cheatengine.lpi and the .sys file (edited functions inside dbk32functions and newkernelhandler.pas)
-changed object names in the gui (i even changed the label names of the buttons) + changed the ones i won't use to be invisible
-i tried using public UCE's (which got detected a few seconds after GG loaded) and mine was able to go undetected and play the game for a bit (10 mins max maybe?)
-i only included the .sys file and lua5.1-32.dll with my ce's exe (i also tried it with the rest included in the bin folder)
-disabled symbol handler syminitialize
can all the files that get built in the bin folder be recompiled seperately? or at least be edited? like the overlay.fx and tiny.dat?
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25785 Location: The netherlands
|
Posted: Wed Feb 20, 2013 4:03 am Post subject: |
|
|
It's probably the windows it's detecting. You must change the width and height and position of several components as well
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
m0us Newbie cheater
Reputation: 0
Joined: 25 Apr 2013 Posts: 11
|
Posted: Thu Apr 25, 2013 11:39 am Post subject: |
|
|
orangeapple
captions, static string patterns, device name, etc - a lot of ways to detect, including just to ask an author))
driver - another song because of using assembly - pure signature
where to dl your protector?
|
|
Back to top |
|
 |
|