| View previous topic :: View next topic |
| Author |
Message |
arrowins How do I cheat?
Reputation: 0
Joined: 02 Apr 2015 Posts: 2
|
Posted: Thu Apr 02, 2015 9:57 am Post subject: I couldn't attach the debugger to this process |
|
|
I'm trying to make a movement speed hack for Trove, but when I try to "Find out what writes to this address" it just tells me that "I couldn't attach the debugger to this process!".
Does anyone know why this is and how to fix it? Can't do shit without the debugger!
|
|
| Back to top |
|
 |
arrowins How do I cheat?
Reputation: 0
Joined: 02 Apr 2015 Posts: 2
|
Posted: Fri Apr 03, 2015 3:39 am Post subject: |
|
|
From what I've read it seems like Trove has an idle debugger attached to it to prevent cheat engine from attaching it's own. In order to circumvent this you need to reset the DebugPort of the eprocess. A program usually used for this is a program called "Helios Debug Port Reset", but I can't find it available for download anywhere! (404 missing page)
Thus I change my question to this; Can anyone provide me a download link to this program? Or if there's another way to reset the debug port, can you help me do so?
|
|
| Back to top |
|
 |
cloud2479 How do I cheat?
Reputation: 0
Joined: 27 Mar 2015 Posts: 5
|
Posted: Sun May 31, 2015 4:56 am Post subject: |
|
|
I may be too late but I can give it to you
since everybody eles is staring at their feet
PM me!
|
|
| Back to top |
|
 |
danrevella Master Cheater
Reputation: 2
Joined: 11 Jun 2008 Posts: 292
|
Posted: Sun May 31, 2015 5:41 am Post subject: Re: I couldn't attach the debugger to this process |
|
|
| arrowins wrote: | I'm trying to make a movement speed hack for Trove, but when I try to "Find out what writes to this address" it just tells me that "I couldn't attach the debugger to this process!".
Does anyone know why this is and how to fix it? Can't do shit without the debugger! |
You may use the freeware "Process hacker" that have the option "detach from debugger", I have try it and 90% of time it works!
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25814 Location: The netherlands
|
Posted: Sun May 31, 2015 6:28 am Post subject: |
|
|
Have you tried the VEH debugger or kernelmode debugger ?
Anyhow, I you like crazy stuff you can do this manually yourself with CE
Enable kernelmode options in settings->extra , select the process , open the memoryview and in the disassembler go to address:
| Code: |
kernel_PsGetProcessDebugPort
|
Note down the offset in the instruction there (e.g mov rax,[rcx+000001F0] then 1F0 is what you need)
go to the main ce window and rightclick the processname. Now write down the PEProcess value, or just drag the process indo window to a spot where you can see both the memoryview and that window (doubleclick won't work on 64-bit, bug)
in the memoryview hexview type in the address of the PEProcess and add the debugport offset to the end of it(e.g +1f0).
change the 4/8 bytes(8 for 64-bit windows, 4 for 32) to 0 and the debugger should be able to attach
I guess you could automate this with lua (Note, PsGetProcessDebugPort isn't available on windows XP)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
cloud2479 How do I cheat?
Reputation: 0
Joined: 27 Mar 2015 Posts: 5
|
Posted: Sun May 31, 2015 1:17 pm Post subject: |
|
|
| If you could help guide me? My skype is: bluecrimson32
|
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Mon Jun 01, 2015 1:53 am Post subject: |
|
|
So I've noticed that in CE 6.4, if I have the debugger attached to a game and then close CE, if I open CE again it will not debug that same process, I have to close and restart the game as well. This didn't happen with previous versions.
Following those steps I end up with +1F0 as the offset as well (64-bit Windows 7), but it seems the 8 bytes at the location are already 0 even though I can't attach.
(Dunno' if this is a separate CE bug or something than the process explained to attached to games that already have a debugger on them.)
_________________
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25814 Location: The netherlands
|
Posted: Mon Jun 01, 2015 5:59 am Post subject: |
|
|
are you using the windows debugger interface? If not(e. g veh) , this won't work
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Mon Jun 01, 2015 7:31 pm Post subject: |
|
|
Yeah I'm set to use VEH by default 'cause some things auto-terminate with the windows one.
Using the windows debugger, I do see that address have non-0 data when the debugger attaches.
It also seems that the windows debugger doesn't have the issue of not detaching properly.
So is not detaching on CE closing a VEH bug?
_________________
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25814 Location: The netherlands
|
Posted: Mon Jun 01, 2015 9:25 pm Post subject: |
|
|
not a bug, more a feature not present in the VEH debugger interface. (like VEH also missing the ability to attach to new threads instantly like the windows debugger can, or the moduleload breakpoint option)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|