Cheat Engine

argarg · Cheater Reputation: 0 Joined: 19 Jul 2005 Posts: 45

Hi, I tried the DBVM and CE lazarus and I couldn't get a working debugger on vista x64. I'd like to know if you're still working on it and if you need any help, although this is probably out of my coding knowledge. Also, if any of you guys got it working just gve me tips ...

Dark Byte · Posted: Tue Nov 11, 2008 11:56 pm Post subject:

It is being planned on, but waiting till mid 2009 before I can actually start (waiting for commodore 64)

If you want it sooner you'll have to port to freepascal/lazarus. Which most likely will only be fully usable in a year or 2 (right now the gui's it makes look like ce's gui in wine, really bugged)

argarg · Cheater Reputation: 0 Joined: 19 Jul 2005 Posts: 45

Alright thanks. Also do you know if there's is another way to find a pointer to an address without using the debugging function?

nwongfeiying · Posted: Wed Nov 12, 2008 6:52 pm Post subject:

I have Vista x64-bit and I can use the debugger fine? It's just that on some online games, it crashes. Otherwise, most offline games, it works.

Dark Byte · Posted: Wed Nov 12, 2008 9:00 pm Post subject:

I think he means 64-bit processes. E.g minesweeper 64 is hard to hack with the normal ce

argarg · Cheater Reputation: 0 Joined: 19 Jul 2005 Posts: 45

Oh I didn't realize it's working, only thing is that it's not for the game i'm trying to hack Razz

I get Attach failure windows: "cheat engine failed to attach the process (error=87). The game is age of mythology and it has anti-debugging stuff but using stealth mode everything was ok. But I can't use al the options in the "extra" tab... Is this feature being planned for sooner? And if not d you know an alternative on finding the pointer when I only have the address?

Dark Byte · Posted: Wed Nov 12, 2008 10:00 pm Post subject:

If i'm correct not one option in settings->extra should be usable.
If some options are usable, that's a bug

And solution for this problem, install 32-bit and dualboot...
Even if I do port to 64-bit the kernel functions will be severely limited in 64-bit because of the integrity check windows does (so editing the interrupt table for kernel debugging won't work) and because microsoft hates open source drivers and requires all drivers to be signed. (which I won't do, but if you get a class 3 signing certificate I can sign it, but you're then the one responsible if the ce driver is used to hack systems)
Driver signing can be bypassed by rebooting and then pressing f8 during boot and choose the option to run with driver signing disabled (but quite cumbersome)

Of course, these problems can be bypassed with dbvm, but the systems it runs on are currently limited (currently trying to figure out why after a bios update ah=2/int 0x13 pauses for 15 seconds and then fails when reading from disk 0x80 (when booted from cd)/0x81(when booted from usb flashdisk) for no obvious reason)

and an alternative for finding a pointer without debugging: Try the pointerscan and hope you've given the right parameters. (too big and it can take a year to finish, too small and it won't find anything and you have to try again with something bigger)

argarg · Cheater Reputation: 0 Joined: 19 Jul 2005 Posts: 45

Alright thanks. But is it possible to acess my stuff insaled on my 64 bit install when im on the 32 one? because installing avery games to get addresses then go back in 64 bit (main one) to play the games... I kinda don't feel like it.

Dark Byte · Posted: Wed Nov 12, 2008 10:08 pm Post subject:

Most games don't allow that due to registry settings and DRM.
You have to install the game twice (to the same folder)

also, why not play them in 32-bit ? 64-bit slows 32-bit applications and games down. (Noticed when testing CE in vista 64 and xp32 , memoryview was slow as hell in vista64 and normally usable in xp32)

argarg · Cheater Reputation: 0 Joined: 19 Jul 2005 Posts: 45

Dark Byte · Posted: Wed Nov 12, 2008 10:16 pm Post subject:

off-topic:
just get RRamdisk, to setup a 1GB ramdisk of the unusable 1GB (Don't forget to use the /PAE parameter so it can access memory above the 4GB limit)
Then configure it to make a swapfile in that ramdisk and now when you run out of physical memory in 32-bit it'll use the swapfile stored in ram. (a lot faster than harddisk)

I've got 6GB with 786GB videomem and using this too (2.8GB Ramdisk)

DeletedUser14087 · Posted: Thu Nov 13, 2008 9:28 am Post subject:

Dark Byte · Posted: Thu Nov 13, 2008 12:21 pm Post subject:

/PAE isn't bullshit, it actually works, but the applications need to be designed to make use of it.
The latest version of RRamdisk can make use of that function.

Explanation of PAE:
Page tables contain an physical address that maps the specific virtual address to.
In normal paging a page table entry can specify at most a 32-bit physical address (4GB)
When PAE mode is enabled page table entries can specify 36 Bits (64GB) of course, virtual addresses are still limited to 32-bit

So, when a program needs to address the memory above 4GB it just needs to setup it's own page entries that specify those higher physical addresses
RRamdisk makes use of this method and windows does not (well, the server versions of windows do, but not the normal customer ones)

And for gpu:
8800GTX

DeletedUser14087 · Posted: Thu Nov 13, 2008 1:23 pm Post subject:

Dark Byte · Posted: Thu Nov 13, 2008 1:35 pm Post subject:

Not sure what you don't understand. That your video can use 1.2GB ram instead of 512MB, or why I have more gpu mem than you ?

a gtx8800 also comes in 512MB versions, but mine just came with 768MB
a GPU doesn't mean it has a specific amount of memory.

as for using the 1.2GB ram, that's because some memory has been set aside to the video card, and that memory comes from the normal lower 4GB ram. But don't worry, if your system really needs that memory it gets it and just tells the videocard there's less memory it can use.

(sceenshot of dxdiag here to show it's really 768MB):