Cheat Engine

booingthetroll

hey this is a really dumb problem but so I need to hex edit my cheat engine exe but when I do that I can't run DBVM, any suggestions?

Dark Byte · Posted: Fri Jan 23, 2015 1:35 am Post subject:

launch dbvm, close ce, and then start your edited ce

it might be easier to compile the driver yourself and boot with signature checks disabled

booingthetroll · Posted: Fri Jan 23, 2015 6:37 pm Post subject:

I've been doing that but the problem's once I start debugging

I tried using using a 6.2 exe you gave someone else w this error and I got the same error. again everything works 100% fine if I don't modify it but there's some detection and I have to remove some keywords or it'll be detected. unsigned drivers are enabled right now so I'm fine w compiling but what's a bit frustrating is that I know how to disable the detection used to see cheat engine easily but in my VM openProcess is too slow and freezes for a second before opening and pausing which is a bit too long and it ends up being too late

Dark Byte · Posted: Fri Jan 23, 2015 8:11 pm Post subject:

there is an unsigned version of dbk64.sys here:
It doesn't use the .sig check that the signed version does

http://cheatengine.org/temp/dbk64-unsigned.rar

booingthetroll · Posted: Fri Jan 23, 2015 9:07 pm Post subject:

one more thing sorry for all the trouble but my driver64.dat isn't working. kernelmode is being detected so I'll give this a try first but when I try running w the new driver64.dat it's erroring. using the template you gave in a previous thread:

Dark Byte · Posted: Fri Jan 23, 2015 9:16 pm Post subject:

reboot and make sure the driver is unloaded and make sure that driver signing requirement is disabled

then extract dbk64.sys to the ce folder (if you didn't reboot windows may restore the .sys with the original)
then rename dbk64.sys to wtf.sys

and make sure driver64.dat is in the same folder as cheat engine

if dbvm is being annoying change the last 2 lines to:

76543210
fedcba98

booingthetroll · Posted: Fri Jan 23, 2015 11:56 pm Post subject:

thanks a ton for all of this the driver's loaded as wtf.sys BUT debugging crashes the host process for some reason, both breakpoints and finding what accesses something. I noticed when I loaded dbvm I got a windows error message ab unsigned drivers (even though it was the unsigned version and the signed requirement was turned off w f8 boot)

I DID have to use your last revision but I thought it was smooth and there aren't any CE errors, just in the host process and I know it's not process specific cuz happens w everything on all processes