Cheat Engine

themandem · Cheater Reputation: 0 Joined: 06 Dec 2019 Posts: 41

hey, i have used both ultimap 1 and ultimap 2 now. and i noticed the functions that i found in ultimap 1 (the correct one), was not even showing up in the list on ultimap 2. i did the exact same method of scanning on both to try to duplicate my results in ultimap 2. am i doing something wrong and is this normal? it is like ultimap 2 doesn't catch them properly.

i want to be able to use ultimap 2 properly because ultimap 1 slows down the PC by a lot so ultimap 2 seems better for larger x64 games. and I prefer ultimap over code filter, because ultimap shows the count (how many times function has been called and ultimap 1 even shows when its being accessed which can be seen by a constantly increasing counter)

Dark Byte · Posted: Mon Sep 09, 2024 2:24 am Post subject:

which version of ultimap2 do you use? The built in windows-IPT implementation or without ?
The windows one may be fast, but it has the tendency to lose it's recording when too much has happened (circular buffer overflow, it doesn't pause when full)

themandem · Cheater Reputation: 0 Joined: 06 Dec 2019 Posts: 41

Dark Byte · Posted: Mon Sep 09, 2024 8:53 am Post subject:

usermode, just the target process. And if possible just the module you wish to watch if you know it (that does require dbvm to be loaded to hide the fact that you use that option)

themandem · Cheater Reputation: 0 Joined: 06 Dec 2019 Posts: 41

Dark Byte · Posted: Mon Sep 09, 2024 3:19 pm Post subject:

in settings go to debugger settings.
Next to kernelmode debugger there should be a button with text "make possible" or something. click it and restart windows (You don't have to check kernelmode debug, it's just that this button also helps with the issue you have)

Alternatively, force the target process to run as administrator so it's pagetable base pointer is the same in both usermode and kernelmode

themandem · Cheater Reputation: 0 Joined: 06 Dec 2019 Posts: 41