Cheat Engine

Insterluda_88

See my settings attached.

VEH debugger, windows debugger doesn't work the game crashes.
I could debugg with kernelmode debugger, but after 15-20 seconds my PC. crashes and I'm getting a bluescreen.

Is there another way?
Otherwise this will take very long... bypassing anti debugger.

I'm fighting against encrypted 8bit values.
I have managed to find the encrypted internal value, but it's not possible to backtrace this encrypted value without debugger, or ?

May has someone an idea?

Dark Byte · Posted: Thu Apr 09, 2020 4:39 am Post subject:

disable global debug and step through kernel code and see how that goes

Insterluda_88 · Posted: Thu Apr 09, 2020 4:53 am Post subject:

Hi,
Thanks, atleast my PC. doesn't crash anymore.

The game still crashes.
Is there a possibility to try with plugins, or other settings in CE.?
I mean CE. is a mighty tool.

Otherwise I must start collecting crash reports and read them out and find out how to bypass it.
I guess there is an anti debugger.

Dark Byte · Posted: Thu Apr 09, 2020 6:32 am Post subject:

try dbvm find what accesses instead of kerneldebug

you can't single step with it but gives results

(or try a dbvm breakpoint)

Insterluda_88 · Posted: Thu Apr 09, 2020 2:13 pm Post subject:

Hi Dark Byte,

Thanks for the hints, but I can't use this method its "grayed out" I can't click on it.
Did I anything wrong?

I have tried somer other stuff too, but I guess I'm out of ideas.

Dark Byte · Posted: Thu Apr 09, 2020 11:43 pm Post subject:

make sure kernelmode ooen process is checked and then go to ce's about screen.
click on "your system supports dbvm" and launch dbvm

the option should be available now

Insterluda_88 · Posted: Fri Apr 10, 2020 8:33 am Post subject:

You are amazing Darkbite it works, thanks!

I'm a bit curious just if you have time could you please explain why this way works?
holy moly CE. is powerful, I've thought I need some anti-debugger stuff.

and one more question if possible;
Is 32bit more stable than 64bit? I mean using CE. 32bit and game.exe 32bit?

because I dont know why the "speedhack" button crashes the game.

I have just seen yet you are the creator of Cheatengine.
Thank you for sharing your work to the memory hacking community.

Dark Byte · Posted: Fri Apr 10, 2020 11:37 am Post subject:

The DBVM way takes total control of your system, which includes full cpu and physical memory access
When you use dbvm find what access it masks the physical memory itself as unwritable and when the cpu tries to write it it it triggers a signal which then gets intercepted, and then the state gets recorded and continue

64-bit is more stable, 32-bit is a version created after creating the 64-bit version