Watch Dogs 2

[qweasd21]

I confirm that with Watch Dogs 2 version 1.017.189.2.1088394 the cheat tables are not working anymore.

You probably didn't dsiable anti cheat

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[qweasd21]

hi i keep getting a error
saying violation access how to fix that?

You have to disable anti cheat

[sonitaaa]

The table not working anymore, even disable anti-cheat

[mzikagate]

The table not working anymore . plz update it

[uzumakijax]

any chance getting this updated..?

[acecel]

I also would like an update on this ^^

[chrisreddot3]

up

[darkdex52]

I can confirm that even with completely disabled EAC, this table is not working with latest Watch_Dogs 2 on UPlay.

[crfrony]

Hello, will there be an update for this version given by ubi?

[CirnoAlter]

Please update this, I desperately need this invisible thing to escape the cops, theyre so overtuned in this game I'm frustrated.

[[Wizard]]

Since the game is free for all now I grabbed it for PC so I could finally finish the game... Got it on ps4 but it was pretty meh.

Anyhow, I haven't hacked a game in decades, and never with Cheat Engine, so I started looking at the research points, and I quickly found the address and the call writing to it, but although the game said I had 50 research points it was still zero and I couldn't do anything.
I then downloaded the top script (by STN) and he used the same breakpoint as I'd found. In fact it looked pretty much the same in disassembled view although different addresses.

I updated the script with the new addresses but it doesn't work. Somehow they've changed something around userdata and so far I haven't found where things are stored?
The script below only affects the data written on screen, not the actual research points.

Here's the script from STN for unlimited research points, but with corrected inject address and "ORIGINAL CODE" section. Perhaps someone can continue and find where the actual userdata is stored in mem because this doesn't work at all.

Code: Select all

[ENABLE]

aobscanmodule(Points,Disrupt_64.dll,48 89 47 28 4C 8D 5C 24 50) // should be unique
alloc(newmem,$1000,"Disrupt_64.dll"+F8CD98) // the address in the latest revision, Uplay version.

label(code)
label(return)

newmem:
  mov [rdi+28],#99
  lea r11,[rsp+50]
  jmp return

code:
  mov [rdi+28],rax
  lea r11,[rsp+50]
  jmp return

Points:
  jmp newmem
  nop
  nop
  nop
  nop
return:
registersymbol(Points)

[DISABLE]

Points:
  db 48 89 47 28 4C 8D 5C 24 50

unregistersymbol(Points)
dealloc(newmem)

{
// ORIGINAL CODE, latest release - INJECTION POINT: "Disrupt_64.dll"+F8CD98

"Disrupt_64.dll+F8CD6F - 48 8B CB              - mov rcx,rbx
"Disrupt_64.dll+F8CD72 - E8 C1E0FFFF           - call Disrupt_64.dll+F8AE38
"Disrupt_64.dll+F8CD77 - 48 8B BB 60050000     - mov rdi,[rbx+00000560]
"Disrupt_64.dll+F8CD7E - 48 85 FF              - test rdi,rdi
"Disrupt_64.dll+F8CD81 - 74 19                 - je Disrupt_64.dll+F8CD9C
"Disrupt_64.dll+F8CD83 - 48 8B 93 30040000     - mov rdx,[rbx+00000430]
"Disrupt_64.dll+F8CD8A - 48 8B CB              - mov rcx,rbx
"Disrupt_64.dll+F8CD8D - 48 8B 52 58           - mov rdx,[rdx+58]
"Disrupt_64.dll+F8CD91 - E8 0ECF0000           - call Disrupt_64.dll+F99CA4
"Disrupt_64.dll+F8CD96 - 8B C0                 - mov eax,eax
// ---------- INJECTING HERE ----------
"Disrupt_64.dll+F8CD98 - 48 89 47 28           - mov [rdi+28],rax
"Disrupt_64.dll+F8CD9C - 4C 8D 5C 24 50        - lea r11,[rsp+50]
// ---------- DONE INJECTING  ----------
"Disrupt_64.dll+F8CDA1 - 49 8B 5B 30           - mov rbx,[r11+30]
"Disrupt_64.dll+F8CDA5 - 49 8B 6B 38           - mov rbp,[r11+38]
"Disrupt_64.dll+F8CDA9 - 49 8B E3              - mov rsp,r11
"Disrupt_64.dll+F8CDAC - 41 5E                 - pop r14
"Disrupt_64.dll+F8CDAE - 5F                    - pop rdi
"Disrupt_64.dll+F8CDAF - 5E                    - pop rsi
"Disrupt_64.dll+F8CDB0 - C3                    - ret 
"Disrupt_64.dll+F8CDB1 - CC                    - int 3 
"Disrupt_64.dll+F8CDB2 - CC                    - int 3 
"Disrupt_64.dll+F8CDB3 - CC                    - int 3 
}

If this post breaks any forum rules I'm sorry. I'm new here...
I'm continuing to debug the game and see if I can crack this, but it's been a while since I did anything properly - but Cheat Engine is a damn handy tool for sure!

[[Wizard]]

The game often crashes when I change values, like the amount of added followers for a task. That was one of the few injects that I sort of got working, but half of the times the game crashes - especially if I increase the value to a much higher value, so there must be some checksum checks or similar because it's not stable at all.

Can some of the previous table makers comment on this? Have the game really been altered that much or is it just very finicky to circumvent user data?

But a game about hacking just needs to be hacked so I'm continuing, but I can feel it's been a long while since I did these things...

p.s. I have turned off EAC

[ishist]

The game often crashes when I change values, like the amount of added followers for a task. That was one of the few injects that I sort of got working, but half of the times the game crashes - especially if I increase the value to a much higher value, so there must be some checksum checks or similar because it's not stable at all.

Can some of the previous table makers comment on this? Have the game really been altered that much or is it just very finicky to circumvent user data?

But a game about hacking just needs to be hacked so I'm continuing, but I can feel it's been a long while since I did these things...

It uses EasyAntiCheat

it can be disabled by adding -eac_launcher to the game launch arguments.

[[Wizard]]

It uses EasyAntiCheat

it can be disabled by adding -eac_launcher to the game launch arguments.

I know. Otherwise I wouldn't have been able to inject anything in the first place
But I could've been more thorough and mentioned that I'd already taken care of that so my bad in that case.

I haven't got access to the previous release so I can't compare with more than the snippets (commented code) in the tables posted here, but every cheat I've remapped according to the latest release doesn't work so I suspect they've changed something how userdata is managed/stored?! (or perhaps they've compiled with a newer version of EAC that's causing this despite running with -eac_launcher flag?)

I'm going to have a go with IDA Pro and see if that can reveal something useful because I haven't really got a clue how the executable is constructed and what api's etc are called, and I'd like to map userdata and every function that reads, or more importantly writes, to it? That I prefer to do with a full blown debugger/decompiler. The code is most likely obfuscated too which usually yields some pretty weird output, so I need to get a better picture before I understand why it's crashing sometimes etc?

It's been a while but hacking games is fun! Back in the days it was copy protection we mostly focused on, but trainers were as fun to work on - but tools are so much better today... I've only played around with Cheat Engine a couple times recently but usually it's almost too easy so he/she/those who wrote it has done a pretty awesome job! (If I wasn't retired I probably would have offer them a job!)
I just need to learn it properly...
I also need to learn current set of anti cheat suits and common tricks because, like I said, it's been a while

[oldman82]

Anyone know of a working table that stops the clock in the Swelter Skelter mission ?
I swear it's bugged for me and keeps resetting to the beginning every time i get near the end of solving the "hackers challenge" puzzle.
Maybe i'm just getting too old
Anyway , the table i've been using 'watchdog2_v101718921088394_3.ct' by Mikeg that has a 'freeze activities timer' but with a note saying the table author couldn't get it to work.
Game version 1.17 i think.
I do have some of the other WD2 tables but they seem to be for old game versions or don't have a working timer freeze.