Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


I couldn't attach the debugger to this process

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
arrowins
How do I cheat?
Reputation: 0

Joined: 02 Apr 2015
Posts: 2

PostPosted: Thu Apr 02, 2015 9:57 am    Post subject: I couldn't attach the debugger to this process Reply with quote

I'm trying to make a movement speed hack for Trove, but when I try to "Find out what writes to this address" it just tells me that "I couldn't attach the debugger to this process!".
Does anyone know why this is and how to fix it? Can't do shit without the debugger!
Back to top
View user's profile Send private message
arrowins
How do I cheat?
Reputation: 0

Joined: 02 Apr 2015
Posts: 2

PostPosted: Fri Apr 03, 2015 3:39 am    Post subject: Reply with quote

From what I've read it seems like Trove has an idle debugger attached to it to prevent cheat engine from attaching it's own. In order to circumvent this you need to reset the DebugPort of the eprocess. A program usually used for this is a program called "Helios Debug Port Reset", but I can't find it available for download anywhere! (404 missing page)
Thus I change my question to this; Can anyone provide me a download link to this program? Or if there's another way to reset the debug port, can you help me do so?
Back to top
View user's profile Send private message
cloud2479
How do I cheat?
Reputation: 0

Joined: 27 Mar 2015
Posts: 5

PostPosted: Sun May 31, 2015 4:56 am    Post subject: Reply with quote

I may be too late but I can give it to you Smile
since everybody eles is staring at their feet
PM me!
Back to top
View user's profile Send private message
danrevella
Master Cheater
Reputation: 2

Joined: 11 Jun 2008
Posts: 292

PostPosted: Sun May 31, 2015 5:41 am    Post subject: Re: I couldn't attach the debugger to this process Reply with quote

arrowins wrote:
I'm trying to make a movement speed hack for Trove, but when I try to "Find out what writes to this address" it just tells me that "I couldn't attach the debugger to this process!".
Does anyone know why this is and how to fix it? Can't do shit without the debugger!

You may use the freeware "Process hacker" that have the option "detach from debugger", I have try it and 90% of time it works!
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25814
Location: The netherlands

PostPosted: Sun May 31, 2015 6:28 am    Post subject: Reply with quote

Have you tried the VEH debugger or kernelmode debugger ?

Anyhow, I you like crazy stuff you can do this manually yourself with CE
Enable kernelmode options in settings->extra , select the process , open the memoryview and in the disassembler go to address:
Code:

kernel_PsGetProcessDebugPort

Note down the offset in the instruction there (e.g mov rax,[rcx+000001F0] then 1F0 is what you need)

go to the main ce window and rightclick the processname. Now write down the PEProcess value, or just drag the process indo window to a spot where you can see both the memoryview and that window (doubleclick won't work on 64-bit, bug)
in the memoryview hexview type in the address of the PEProcess and add the debugport offset to the end of it(e.g +1f0).
change the 4/8 bytes(8 for 64-bit windows, 4 for 32) to 0 and the debugger should be able to attach

I guess you could automate this with lua (Note, PsGetProcessDebugPort isn't available on windows XP)

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
cloud2479
How do I cheat?
Reputation: 0

Joined: 27 Mar 2015
Posts: 5

PostPosted: Sun May 31, 2015 1:17 pm    Post subject: Reply with quote

If you could help guide me? My skype is: bluecrimson32
Back to top
View user's profile Send private message
Rydian
Grandmaster Cheater Supreme
Reputation: 31

Joined: 17 Sep 2012
Posts: 1358

PostPosted: Mon Jun 01, 2015 1:53 am    Post subject: Reply with quote

So I've noticed that in CE 6.4, if I have the debugger attached to a game and then close CE, if I open CE again it will not debug that same process, I have to close and restart the game as well. This didn't happen with previous versions.

Following those steps I end up with +1F0 as the offset as well (64-bit Windows 7), but it seems the 8 bytes at the location are already 0 even though I can't attach.



(Dunno' if this is a separate CE bug or something than the process explained to attached to games that already have a debugger on them.)

_________________
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25814
Location: The netherlands

PostPosted: Mon Jun 01, 2015 5:59 am    Post subject: Reply with quote

are you using the windows debugger interface? If not(e. g veh) , this won't work
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Rydian
Grandmaster Cheater Supreme
Reputation: 31

Joined: 17 Sep 2012
Posts: 1358

PostPosted: Mon Jun 01, 2015 7:31 pm    Post subject: Reply with quote

Yeah I'm set to use VEH by default 'cause some things auto-terminate with the windows one.

Using the windows debugger, I do see that address have non-0 data when the debugger attaches.
It also seems that the windows debugger doesn't have the issue of not detaching properly.

So is not detaching on CE closing a VEH bug?

_________________
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25814
Location: The netherlands

PostPosted: Mon Jun 01, 2015 9:25 pm    Post subject: Reply with quote

not a bug, more a feature not present in the VEH debugger interface. (like VEH also missing the ability to attach to new threads instantly like the windows debugger can, or the moduleload breakpoint option)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites