PDA

View Full Version : Just For JC


MPCNUB
1st July 2006, 02:49
Jc i have 2 questions for you since i searched the forums and none of the threads or posts answered my questions and you just got your uce workin.
the first one is about the strings you posted i did the actual search and replace with them and with the first few there were no files or folder to edit when i search for the vqe and others they are there do i change these to the same string and string number as the older ones ?

2nd Q: im at the part where u have to start configurion the CE GUI Menu when i click on main unit after opening cheatengine.bfg it doesnt show me the gui or hud all i get is info on main unit how did u get yours to show ?

thanks for the 3rd time gj on your uce =)

xshadowFire
1st July 2006, 02:50
you can't just search and replace, you need to pchar the new strings in.

edit: also, if you just wanted jc to answer this you could've just pmed him.

MPCNUB
1st July 2006, 02:56
no use cuz hes gettin pmed by hella leachers for his site to the public uce =\
and btw wats pchar ?

anybody get their CE GUI to show in delphi ?
i click on main unit and it doesnt show and wats pchar cuz i wanna change 780 strings also =\

come on man JC it has ur name all over it where are you

tru_p
1st July 2006, 03:28
All you have to do in order to see the GUI is to open Main and after that, you look under "Object Inspector" at the left and change the "Left" value to 228.

Btw, JC, I also need your help, I made my UCE, but then when I turn it on with MapleStory, it reboots my computer. Any solutions would be nice.

MPCNUB
1st July 2006, 03:31
Werd TRU P ILOVE YOU
i been here sittin surfin for like 45 minutes waitin for an answer thanks a lot my dude

J-C
1st July 2006, 03:35
hey people let me just tell you pchar is NOT NESSESARY if you dont belive me then oh well you only do this if your getting BSOD=blue screen of death when you attach to maple if not just do this:

open your source folder and go to dbkkernel--->memscan.c open the file and search for:

KeStackAttachProcess((PKPROCESS)selectedprocess,&apc_state);
replace
with
KeAttachProcess((PEPROCESS)selectedprocess);

and
KeUnstackDetachProcess(&apc_state);
with
KeDetachProcess();

then do this

http://forum.cheatengine.org/viewtopic.php?t=16748

read through that thread

and for the GUI stuff i have answered like 100 times here change the thing in main unit to "228" where it says left on project manager

MPCNUB
1st July 2006, 03:37
ssry about that thanks for the string info
wheres application so i can change my gui colors and name ?

J-C
1st July 2006, 03:41
is ok really your not the first or last one :P anyways

http://img432.imageshack.us/img432/3136/pic71cd.jpg

lol all in the image dude so i dont even have to explain right? o.O

tru_p
1st July 2006, 03:41
JC, I saw your last post, but there isn't an answer to my question. Do you not know it or did you just didn't read my post?

MPCNUB
1st July 2006, 03:43
yea thanks for the ss =)

One More Question jc do i replace all the names like that or just one ?

J-C
1st July 2006, 04:32
All you have to do in order to see the GUI is to open Main and after that, you look under "Object Inspector" at the left and change the "Left" value to 228.

Btw, JC, I also need your help, I made my UCE, but then when I turn it on with MapleStory, it reboots my computer. Any solutions would be nice.
well there is a solution

http://forum.cheatengine.org/viewtopic.php?t=14816

and:

http://forum.cheatengine.org/viewtopic.php?t=16514&postdays=0&postorder=asc&start=0

;) good luck this is how i fixed mine

yea thanks for the ss =)

One More Question jc do i replace all the names like that or just one ?
you replace whatever you want is your new UCE!!! =)

tru_p
1st July 2006, 18:27
well there is a solution

http://forum.cheatengine.org/viewtopic.php?t=14816

and:

http://forum.cheatengine.org/viewtop...=asc&sta rt=0

good luck this is how i fixed mine



First off thanks for the links, but exactly how do I change the IOCTL codes. Do I just go into dbkdrcr.c and dbk32functions.pas and change the numbers? I hope you would help me explain the process of what I need to do. Thank you.
Btw, if you use AIM, pm me with your SN so we can talk on there, it is much easier.

Monkimann
1st July 2006, 19:07
First off thanks for the links, but exactly how do I change the IOCTL codes. Do I just go into dbkdrcr.c and dbk32functions.pas and change the numbers? I hope you would help me explain the process of what I need to do. Thank you.
Btw, if you use AIM, pm me with your SN so we can talk on there, it is much easier.
Yes, thats exactly what you do. Start at 0x0800 in Ddbkrvr.c and $0800 in dbk32functions.pas. Then add atleast 31 to them. For example, in dbkrvr.c you would find and replace this:


0x0800 - 0x0831
0x0801 - 0x0832
0x0802 - 0x0833
0x0803 - 0x0834
0x0804 - 0x0835
0x0805 - 0x0836
0x0806 - 0x0837
0x0807 - 0x0838
0x0808 - 0x0839
0x0809 - 0x083a
0x080a - 0x083b
0x080b - 0x083c
0x080c - 0x083d
0x080d - 0x083e
0x080e - 0x083f
0x080f - 0x0840
0x0810 - 0x0841
0x0811 - 0x0842

Keep doing this until there are no more, and in dbk32functions.pas, use $0800 instead of 0x0800.

tru_p
1st July 2006, 19:13
Thank you Monkimann, I will try this right now.

J-C
1st July 2006, 20:44
Yes, thats exactly what you do. Start at 0x0800 in Ddbkrvr.c and $0800 in dbk32functions.pas. Then add atleast 31 to them. For example, in dbkrvr.c you would find and replace this:


0x0800 - 0x0831
0x0801 - 0x0832
0x0802 - 0x0833
0x0803 - 0x0834
0x0804 - 0x0835
0x0805 - 0x0836
0x0806 - 0x0837
0x0807 - 0x0838
0x0808 - 0x0839
0x0809 - 0x083a
0x080a - 0x083b
0x080b - 0x083c
0x080c - 0x083d
0x080d - 0x083e
0x080e - 0x083f
0x080f - 0x0840
0x0810 - 0x0841
0x0811 - 0x0842

Keep doing this until there are no more, and in dbk32functions.pas, use $0800 instead of 0x0800.
it starts from 0x0800 and ends at 0x0829

just keep going up adding whatever number you want lets say 50 so 0x0810 + 50 would be 0x0860 then you replace 0x0810 with 0x0860 =)


0x0800 - 0x0831 this is wrong is 0x0800 - 0x0830 you took the 0 out your not supposed to edit the last number on ly the one before XD

Monkimann
1st July 2006, 21:04
0x0800 - 0x0831 this is wrong is 0x0800 - 0x0830 you took the 0 out your not supposed to edit the last number on ly the one before XD
It doesnt really matter...

J-C
1st July 2006, 23:24
yes it does have you made a UCE with the thing you put?

tru_p
2nd July 2006, 08:21
JC, I don't understand the part about $0800 in the dbk32functions.pas. I went into dbk32functions.pas and searched $0800 and found it and add 50 to it so it becomes $0850?
Can you give a little more detail on it and what it starts with and ends with? (Example $0800 - ????)List all please.
Thank you very much for your help so far guys.

J-C
2nd July 2006, 18:31
LOL how many times you want me to put that answer? :P
$0800-->$0850
$0801-->$0851

so easy you just add 50 or whatever number you choose OMFG how is that hard? XD

tru_p
2nd July 2006, 23:19
Well, I was trying it and they were all out of order while I was scrolling down the dbk32functions.pas.
Btw, I wasn't asking what I am supposed to change it to, I understood that part. I just wanted a list of like 0$800, 0$801, 0$802 and so forth because when I searched it, it wasn't found so I scrolled down and look through the whole thing and changed it one by one.
Thank you anyways.

imoo
3rd July 2006, 03:22
OMG.... everytime i post something no one replys..... OMG OMG...... I change the dbk32functions.pas, dbkdrvr.c and memscan.c .... used these strings...
CEDRIVER53 >> string1
DBKProclist53 >> string2
DBKThreadList53 >> string3
dbk32.sys >> string.sys

VQE 4
OP 5
OT 6
NOP 7
RPM 8
WPM 9
VAE 10
CreateRemoteAPC 11
ReadPhysicalMemory 12
WritePhysicalMemory 13
GetPhysicalAddress 14
GetPEProcess 15
GetPEThread 16
ProtectMe 17
UnprotectMe 18
IsValidHandle 19
GetCR4 20
GetCR3 21
SetCR3 22
GetSDT 23
GetSDTShadow 24
setAlternateDebugMethod 25
getAlternateDebugMethod 26
DebugProcess 27
StopDebugging 28
StopRegisterChange 29
RetrieveDebugData 30
GetThreadsProcessOffset 31
GetThreadListEntryOffset 32
GetDebugportOffset 33
GetProcessnameOffset 34
StartProcessWatch 35
WaitForProcessListData 36
GetProcessNameFromID 37
GetProcessNameFromPEProcess 38
GetIDTCurrentThread 39
GetIDTs 40
MakeWritable 41
GetLoadedState 42
ChangeRegOnBP 43
DBKSuspendThread 44
DBKResumeThread 45
DBKSuspendProcess 46
DBKResumeProcess 47
KernelAlloc 48
GetKProcAddress 49
Protect2 50
test 51
useIOCTL 52
DBKGetDC 53

new undetected strings from j-c

CTL_CODE 54
NtOT 55
RewriteKernel32 56
RestoreKernel32 57
InitializeDriver 58
GetWin32KAddress 59
GetDriverVersion 60


These strings are by NubH3x and J-C, i am 100% sure that I followed what it said in the uce tut here >>> http://suburban.chopsticks.googlepag...bysteptutorial ..... still after 3 try doing the samething scared that i might have missed something, my uce is still not working. after gameguard finish loading the memory view and the pointer just get scramble again, like wat have been happening to disk drove. So do u know wat i did wrong... i am trying really hard not to be a leecher but this is really not going well for me. Thank you very much in advance.