What is zero key anyway? _real_value is needed to allow modification of the value from the outside of the game - because you can't directly manipulate encrypted buffer - some other part of the game may replace it with another encrypted value directly (without doing decrypt/encrypt pass) this may break the game if one value was written(direct, encrypted) and then another value was returned(unencrypted), so I keep them in sync all the time.
Fake values are zeroed just to produce fewer false positive results during memory scans in CE. ObscuredCheatingDetector.IsRunning() was not altered for the reason - this will trick the game into thinking that all anticheat components are running but they are actually harmless now. Just saying ?[/QUOTE]
They obfuscate the value by using the or operation with a key. Now if that key happened to be zero their obfuscation would do nothing at all and the obfuscated value would be the real one. They even check for that case in functions where that key is randomly generated to prevent it.
As for ObscuredCheatingDetector.IsRunning(): That's only used for these honeypot values. It's literally internal and can't be used by the game to see the status of that detector and it really only exists for these honeypot values.
I'm not saying your solution is bad or something, no I just want to discuss how you can do it with live code injection via cheat engine. Since this is mainly a cheat engine forum and live patches are more flexible, don't get overwritten by updates and are less detectable (crc of the dll) as well, I prefer them.
And adding class members like that real value in cheat engine would be quite difficult if possible at all, while the simple solutions, that I described, just alter function return values and are thus very doable.
How to use this cheat table?
- Install Cheat Engine
- Double-click the .CT file in order to open it.
- Click the PC icon in Cheat Engine in order to select the game process.
- Keep the list.
- Activate the trainer options by checking boxes or setting values from 0 to 1
can you check this version just to make sure everything is right? 
