| View previous topic :: View next topic |
| Author |
Message |
f3lipi
How do I cheat?
![]() Reputation: 0
Joined: 09 Oct 2018
Posts: 5
|
 Posted: Thu Oct 11, 2018 7:56 am Post subject: Stealthedit 2.4 + CE 6.8.1 Slowness |
 |
|
Hi
Recently I've been playing around with bypassing integrity checks, and found out about Stealthedit (which is a very nice tool).
I understood the concept that stealthedit splits the code on the specified base address that I want to inject code (original code), and at new allocated memory inserts a copy of the opcode original bytes (for integrity check) and on another new allocated memory my customized code, did I get it right?
Well, I've done this, and I see that the original base address (the one that contains the original code) becomes a pointer.
1) My first doubt is how does Stealthedit knows when it is an Integrity Check routine to direct the program to the original code, and how does it know when it is a game routine to direct the program to the customized code?
Also, after injecting my code via Stealthedit, reserving only 1 page (I've modified only a few bytes) the game gets really slow (like less than 1 fps).
2) Maybe I'm not using stealthedit correctly? is this supposed to happen, or maybe the game have an additional routine that is more intelligent than a regular Integrity Check, and this causes the slowness?
I appreciate the help...
|
|
| Back to top |
|
 |
TheyCallMeTim13
Wiki Contributor
 Reputation: 51
Joined: 24 Feb 2017
Posts: 976
Location: Pluto
|
| Posted: Thu Oct 11, 2018 12:36 pm Post subject: Re: Stealthedit 2.4 + CE 6.8.1 Slowness |
|
|
| f3lipi wrote: | Hi
Recently I've been playing around with bypassing integrity checks, and found out about Stealthedit (which is a very nice tool).
I understood the concept that stealthedit splits the code on the specified base address that I want to inject code (original code), and at new allocated memory inserts a copy of the opcode original bytes (for integrity check) and on another new allocated memory my customized code, did I get it right?
Well, I've done this, and I see that the original base address (the one that contains the original code) becomes a pointer.
1) My first doubt is how does Stealthedit knows when it is an Integrity Check routine to direct the program to the original code, and how does it know when it is a game routine to direct the program to the customized code?
Also, after injecting my code via Stealthedit, reserving only 1 page (I've modified only a few bytes) the game gets really slow (like less than 1 fps).
2) Maybe I'm not using stealthedit correctly? is this supposed to happen, or maybe the game have an additional routine that is more intelligent than a regular Integrity Check, and this causes the slowness?
I appreciate the help... |
1) Because it executes for one and reads for the other.
2) No it shouldn't be slowing down.
But I'm thinking Stealth Edit was last updated for CE "6.2" or something.
_________________
|
|
| Back to top |
|
|
f3lipi
How do I cheat?
![]() Reputation: 0
Joined: 09 Oct 2018
Posts: 5
|
| Posted: Thu Oct 11, 2018 12:57 pm Post subject: |
|
|
| Quote: |
1) Because it executes for one and reads for the other.
|
Ah! thats why! But isn't it kinda dumb? I guess the simplicity or lack of abstraction layers makes Integrity Checks easy to bypass then...
| Quote: |
2) No it shouldn't be slowing down.
But I'm thinking Stealth Edit was last updated for CE "6.2" or something. |
I did a quick research and apparently Stealthedit 2.3 was for CE 6.4. I found a newer version 2.4, and I tried to use it on most updated CE. Since the plugin loaded just fine, I thought it worked. Anyway, I'll give it a try with different versions.
Thanks for the help Tim
|
|
| Back to top |
|
|
Dark Byte
Site Admin
 Reputation: 471
Joined: 09 May 2003
Posts: 25830
Location: The netherlands
|
| Posted: Thu Oct 11, 2018 1:09 pm Post subject: |
|
|
it depends on the page that is stealthed
if it has a lot of often called routines it will be quite slow as each execution will have to go through a whole exception event
(try dbvm memory cloak. it's slightly faster in those cases)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
f3lipi
How do I cheat?
![]() Reputation: 0
Joined: 09 Oct 2018
Posts: 5
|
| Posted: Thu Oct 11, 2018 1:23 pm Post subject: |
|
|
| Dark Byte wrote: | it depends on the page that is stealthed
if it has a lot of often called routines it will be quite slow as each execution will have to go through a whole exception event
(try dbvm memory cloak. it's slightly faster in those cases) |
Hmm, ok I will give it a shot. and post the results...
Thanks for the help Dark Byte. I'm your fan btw... haha 
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
