Posted: Tue Feb 27, 2018 7:11 pm Post subject: Cheat engine routines detection ?
When I attach CE to the game then enter inside it
its not detected But if I activated script and closed CE before entering the game its Detected
I mean there is no problem with attaching CE but the problem in script activation routine is detected
after activation of the script its detected ... even if I closed CE and the script is activated its detected .... I am sure the game dont scan AOBs
I attached ultimap I found many calls .
like kernel32 ReadProcessMemory function ....
and WriteProcessMemory function and others
Which routine of cheatengine after activation of the script is maybe detected ?
Can I change the registers from the memory to prevent that routine detection ?
Joined: 09 May 2003 Posts: 25287 Location: The netherlands
Posted: Wed Feb 28, 2018 1:07 am Post subject:
Quote:
I am sure the game dont scan AOBs
how do you know that ? have you used stealthedit's page access check to confirm that? (do not assume that because it is old it doesn't do that. if it detects cheat engine, it can also do integrity checks)
anyhow, according to your description it detects the execution of the writeprocessmemory api
or your script causes a crash.
is the memory you've found on a mem_mapped region and are you in windows 10? _________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
Joined: 25 Jan 2006 Posts: 8517 Location: 127.0.0.1
Posted: Wed Feb 28, 2018 1:16 am Post subject:
If they aren't detecting attaching to the game or just having CE open then it sounds like what you are doing is causing it to be detected instead.
Activation of a script causing detection sounds like either:
- They are detecting your memory allocations. (alloc/dealloc)
- They are detecting your memory protection changes. (fullaccess)
- They are detecting your ASM/memory edits.
These would result in detections from the following API:
- OpenProcess
- VirtualProtectEx
- VirtualQueryEx
- WriteProcessMemory _________________
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum