Staredit Network > Forums > SC1 UMS Mapmaking Assistance > Topic: CheatEngine Help
CheatEngine Help
Sep 28 2010, 1:56 pm
By: Oo.DaMeiN.oO  

Sep 28 2010, 1:56 pm Oo.DaMeiN.oO Post #1



Alrighty, so I know a lot of you are so tired of people asking for EUD help.

But! This one is not like the others. I am not attempting to stop them via SC Maps, I am going to create a third-party app. to stop hacks.

I never messed with CE before, I used Ollydbg.. but I can't remember how to use it/don't have it anymore.

(So if you want you can help with either CE or ollydbg)

Basically, I need to know how to find the address, thats it. Just need to know the address that is changed/added when a hack is injected.

Any help would be appreciated, thanks :)



None.

Sep 28 2010, 3:09 pm rockz Post #2

ᴄʜᴇᴇsᴇ ɪᴛ!

You can search for ollydbg to find your old thread. What happened to your friend who knew how to use it?

I'm afraid we'll need the assembler gurus to help you with this, as when I tried olly, I couldn't figure it out either. I think the hacks are variable, so you can't look in just one location (so you need your third party app to do so).

If your third party app doesn't actually change SC's memory, it's probably in line with SC's EULA, and thus legal (I use artmoney to view download status because it can't/shouldn't be detected by warden).



"Parliamentary inquiry, Mr. Chairman - do we have to call the Gentleman a gentleman if he's not one?"

Oct 2 2010, 7:04 pm Roy Post #3

An artist's depiction of an Extended Unit Death

Quote from Oo.DaMeiN.oO
Basically, I need to know how to find the address, thats it. Just need to know the address that is changed/added when a hack is injected.
1. Attach CE to an instance of StarCraft.
2. Start a search with an unknown initial value.
3. Search for "Unchanged value" repeatedly to get rid of instances of constantly changing values. This is to get pseudo-static values.
4. Inject hacks
5. Search once for "Changed value" to find the addresses that had their values changed when the hack was injected.
6. Close StarCraft and open it to remove the hack injection.
7. Re-attach CE to StarCraft. Keep the current search.
8. Repeat 3-7 until you have a confident list that these addresses are being altered by hacks.

That's pretty much it. A lot of the addresses you'll find will eventually change when you do things in the program, so while doing step #3, you may want to click menus, join games, etc. to get rid of values that are less static. Then it's just picking the right addresses and values to read to detect when a hack is injected.

If you want to detect this through other clients, you can do these steps, except with a friend injecting the hack (both join a game, run through steps 1-3, have him do #4 in the channel, join a game again, run through steps 5-7). It would probably work in the lobby, too, so you could do it as a host without having to leave and create a new game.

This is what I would do, and what I remember doing when trying to make anti-hack EUDs. Hopefully it's some use to you.




Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[10:41 am]
ManCubuS -- Seems like something's broken regarding the site then. Sadge...
[07:36 am]
Oh_Man -- have i ever told u guys my SC2 pro-gamer story
[2026-7-26. : 11:30 pm]
Ultraviolet -- That's strange, it looks like you targeted the base image file (sometimes people make the mistake of just using the imgur page link which doesn't work for embedding) but it still didn't work it sounds like.
[2026-7-26. : 3:34 pm]
ManCubuS -- Used : " [img=https://i.imgur.com/gpOjTuD.jpeg] "
[2026-7-26. : 3:28 pm]
ManCubuS -- Even tried with imgur, doesn't attach.
[2026-7-26. : 3:14 pm]
ManCubuS -- I should try a workaround, thanks! Sadly imgur is blocked in my country for some unknown reason.
[2026-7-26. : 3:05 pm]
NudeRaider -- I think SEN has trouble with https or hotlinking is forbidden. It certainly is nothing about the size, it just fails to get any size. You can get it working if you use imgur and include the actual image link for the img tag. Like this: [img=https://i.imgur.com/ddYqXZa.jpeg]
[2026-7-26. : 11:15 am]
ManCubuS -- Hey fellas! Anyone knows why when I try to upload an image it says "failed to get image size"? I even tried making it so small. Imgur isn't working here and I tried postimg no luck.
[2026-7-23. : 6:40 am]
Oh_Man -- true
[2026-7-23. : 3:16 am]
RIVE -- Still annoyed there was never a trigger to stop or pause wavs.
Please log in to shout.


Members Online: DarkenedFantasies