Cheat Engine

TheBandicoot · How do I cheat? Reputation: 0 Joined: 03 Apr 2007 Posts: 4

I'm fairly new to Cheat Engine, but I've finished the tutorials and now I'm ready to get started on actual games. The problem is, a game I have in mind uses anti-cheat measures to detect when people are being naughty.

Doing simple memory scans is not a problem, I can get values but of course they change next time the game is run, they are dynamic.

This brings me to my question. As I understand it, in order to find what writes to an address, Cheat Engine has to attach its debugger to the process. Is this something that can theoretically be detected by a game's anti-cheat measures? Does the debugger leave a signature of some sort, even if I am not injecting code or changing values?

EDIT: To clarify, I'm not looking for a 100% definitive answer, but I would like to double check that attaching the debugger isn't an obvious step that any moron knows not to do.

dm7d3 · How do I cheat? Reputation: 0 Joined: 15 Mar 2007 Posts: 6

well, most of the programs actually r packed with anti-debuggin measures... for example gunbound is packed with Armadillo that has dbger detector (a very simple one but has one)... but i dont think thats ur problems... cos usually when a program is packed that way and detects a debbuger, the program closes to protect itself, but if u can attach the CE to the process and do scans, the program its not detecting the debbuger so dont worry bout that.. ur only problem is that the adresses r dynamic nothing else

maxsound · How do I cheat? Reputation: 0 Joined: 04 Jan 2007 Posts: 3

The simple way is to call IsDebugPresent function. Many PE packers antidebug by using it.

---------from MSDN--------------
IsDebuggerPresent

The IsDebuggerPresent function indicates whether the calling process is running under the context of a debugger.

This function is exported from KERNEL32.DLL.

BOOL IsDebuggerPresent(VOID)
--------------------------------------------

Dark Byte · Posted: Thu Apr 12, 2007 7:55 pm Post subject:

another way is getting the processinfo structure and check for the debugport value. if it's not null, there's a debugger

TheBandicoot · How do I cheat? Reputation: 0 Joined: 03 Apr 2007 Posts: 4

Thanks for the information, that's exactly what I wanted to know.

The game in question is World of Warcraft, but I didn't want to mention it at first in case someone jumped to the wrong conclusion. I'm not looking to "hack" WoW with Cheat Engine, just find the pointer offsets for certain bits of information.

I guess I'll have to find a more discrete way if debuggers are so easily detected.