Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Bypassing Anti-Debugger, anti-cheat systems

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
Jiehfeng
Expert Cheater
Reputation: 0

Joined: 03 Jan 2014
Posts: 107

PostPosted: Sat Jan 17, 2015 11:44 am    Post subject: Bypassing Anti-Debugger, anti-cheat systems Reply with quote

I've come across two games, Sleeping Dogs and AC Unity, which crashes if either a code is injected or a debugger is attached (sleeping dogs). So I was wondering if there's any way around this? I don't know anything about this so a noobish explanation would be great. Razz

Btw, I've tried using Stealthedit but that's for 32bit processes only, and all the debuggers (DBVM crashes games, windows debug doesn't work).

Any kind of help appreciated! ^_^

_________________
I know you're reading this, Hitler.
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25838
Location: The netherlands

PostPosted: Sat Jan 17, 2015 11:54 am    Post subject: Reply with quote

some people seem to have had some luck with veh debug on acu
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Jiehfeng
Expert Cheater
Reputation: 0

Joined: 03 Jan 2014
Posts: 107

PostPosted: Sat Jan 17, 2015 11:57 am    Post subject: Reply with quote

Dark Byte wrote:
some people seem to have had some luck with veh debug on acu


Is it right to say I'm one of them? Razz
Cause opening and using the debugger works fine, using scripts and code injection makes it crash.

_________________
I know you're reading this, Hitler.
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25838
Location: The netherlands

PostPosted: Sat Jan 17, 2015 12:25 pm    Post subject: Reply with quote

as i mentioned in the other topic, find all integrity check routines(find what accesses tge code) and change them all (20+) so they don't see a change (e. g. change the read pointer to a copy)

also, check the beta section(you have access now) . get the latest build by mgr.inz.player and try the stealthedit posted there with that build (debugging and stealthedit may not work simultanous).
it has never been tested on any 64 bit game with the exception of the 64 bit ce tutorial

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Jiehfeng
Expert Cheater
Reputation: 0

Joined: 03 Jan 2014
Posts: 107

PostPosted: Sun Jan 18, 2015 12:54 am    Post subject: Reply with quote

Dark Byte wrote:
as i mentioned in the other topic, find all integrity check routines(find what accesses tge code) and change them all (20+) so they don't see a change (e. g. change the read pointer to a copy)

also, check the beta section(you have access now) . get the latest build by mgr.inz.player and try the stealthedit posted there with that build (debugging and stealthedit may not work simultanous).
it has never been tested on any 64 bit game with the exception of the 64 bit ce tutorial


There were two opcodes, one which displayed the ammo counter every frame, and the one which sets the ammo. Both had their own integrity checks, this is the ammo set one. The other has the same op code too, I tried to nop it but that crashes it, what should I do?

EDIT:
I managed to find all of the checks, disabling them all at once doesn't work. Anything else I can try? Oh, and I also made a .txt file containing all the addresses.

Code:

--AC Unity Integrity Checks

ACU.exe+55CA237 - 32 02                 - xor al,[rdx]
13DAA25EC - 32 02                 - xor al,[rdx]
ACU.exe+55BF403 - 32 02                 - xor al,[rdx]
13DAAA237 - 32 02                 - xor al,[rdx]
13DA9F187 - 8A 02                 - mov al,[rdx]
13DA9F403 - 32 02                 - xor al,[rdx]
ACU.exe+55E3A7D - 66 8B 00              - mov ax,[rax]
13DAC3A7D - 66 8B 00              - mov ax,[rax]

Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25838
Location: The netherlands

PostPosted: Sun Jan 18, 2015 4:08 am    Post subject: Reply with quote

i don't think that's not all (the table i saw had over 20 locations)

anyhow, just to be sure, what do you mean with disable? Did you make a copy of the running code and did a code injection at every spot redirecting the read register to a relative position in that copy, or did you nop them? (won't work)

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Jiehfeng
Expert Cheater
Reputation: 0

Joined: 03 Jan 2014
Posts: 107

PostPosted: Sun Jan 18, 2015 4:21 am    Post subject: Reply with quote

Dark Byte wrote:
i don't think that's not all (the table i saw had over 20 locations)

anyhow, just to be sure, what do you mean with disable? Did you make a copy of the running code and did a code injection at every spot redirecting the read register to a relative position in that copy, or did you nop them? (won't work)


How do I make a copy of the code and make it redirect to the copy? Razz (sorry for my ignorance)

I made a youtube video showing the codes:
youtu.be/5ecseqQB29Y

I just went to all of the codes>auto assembler>//on everything>assign to cheat table>activate all the script cheats at once>crash

Obviously that's not what I'm supposed to do...

_________________
I know you're reading this, Hitler.
Back to top
View user's profile Send private message
Krampus
Cheater
Reputation: 0

Joined: 22 Nov 2014
Posts: 41

PostPosted: Sun Jan 18, 2015 1:04 pm    Post subject: Reply with quote

Are you playing these games through Steam? If so, someone made a DLL that you can inject into the Steam process to allow debugging.

Quoted from the site
Quote:
It hooks 3 functions, CreateProcessA/W and NtSetInformationThread, the NtSetInformationThread hook is responsible for actually disabling the "ThreadHideFromDebugger" flag. The CreateProcess hooks are used to hook any game launched by Steam.


Look up Steam Anti Anti Debug to find it. I personally used it to hack the Torchlight 2 Demo, Terraria, and a few other games that I had issues with.

USE AT YOUR OWN RISK

_________________
There is no spoon.
Back to top
View user's profile Send private message
Jiehfeng
Expert Cheater
Reputation: 0

Joined: 03 Jan 2014
Posts: 107

PostPosted: Sun Jan 18, 2015 1:14 pm    Post subject: Reply with quote

Krampus wrote:
Are you playing these games through Steam? If so, someone made a DLL that you can inject into the Steam process to allow debugging.

Quoted from the site
Quote:
It hooks 3 functions, CreateProcessA/W and NtSetInformationThread, the NtSetInformationThread hook is responsible for actually disabling the "ThreadHideFromDebugger" flag. The CreateProcess hooks are used to hook any game launched by Steam.


Look up Steam Anti Anti Debug to find it. I personally used it to hack the Torchlight 2 Demo, Terraria, and a few other games that I had issues with.

USE AT YOUR OWN RISK


I'm using the RELOADED crack version, thanks for the info though. Will come in handy for any steam game.

_________________
I know you're reading this, Hitler.
Back to top
View user's profile Send private message
omoe
Grandmaster Cheater
Reputation: 8

Joined: 11 Jun 2013
Posts: 547

PostPosted: Thu Jan 22, 2015 9:04 am    Post subject: Reply with quote

I suggest you use breakpoints + changing EIP pointer to your code injection for games like Assassin Creed Unity., Because simply you wont be able to find all of the scanners , You will miss that one scanner and the game will crash in 10 minutes less or more .

Pros:
less than 5 minutes to update when the game updates
tested for 3 hours and no crashes at all

Cons :
May slow down the game a bit
You can only use 4 injections

Suggestion from my own experience :
Don't use it on an address with constant checking on the values , For example instead of injection at the health instruction which access health 10 times a seconds use the instruction which is only used when player is being attacked which should only be access like 10-15 times a minute .

_________________
Hey! , Rep++ .
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites