mykerneldriver.sln is currently referencing non-existent project file mykerneldriver.vcxproj

Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "mykerneldriver", "mykerneldriver.vcxproj", "{A4B29F18-5AA7-466A-A658-4F886949BE32}"

This must be an error when you tried to upgrade from VS 2008 to 2013.

This repo seems to be lacking a free license. I suggest AGPLv3+.

Cheat Engine 6.4 currently got scaling issues with 4K resolution. First it looks too small and windows scaling doesn't affect it at all. and if we move it to the other monitor it looks horrible.

fidiv qword ptr [address]
fidiv qword ptr [rax]

Suggested patch:

Index: Assemblerunit.pas
===================================================================
--- Assemblerunit.pas   (wersja 2031)
+++ Assemblerunit.pas   (kopia robocza)
@@ -813,7 +813,7 @@
   (mnemonic:'MOVHPS';opcode1:eo_reg;paramtype1:par_xmm;paramtype2:par_m64;bytes:2;bt1:$0f;bt2:$16),
   (mnemonic:'MOVHPS';opcode1:eo_reg;paramtype1:par_m64;paramtype2:par_xmm;bytes:2;bt1:$0f;bt2:$17),

-  (mnemonic:'MOVLHPS';opcode1:eo_reg;paramtype1:par_xmm;paramtype2:par_xmm;bytes:2;bt1:$0f;bt3:$16),
+  (mnemonic:'MOVLHPS';opcode1:eo_reg;paramtype1:par_xmm;paramtype2:par_xmm;bytes:2;bt1:$0f;bt2:$16),

   (mnemonic:'MOVLPD';opcode1:eo_reg;paramtype1:par_xmm;paramtype2:par_m64;bytes:3;bt1:$66;bt2:$0f;bt3:$12),
   (mnemonic:'MOVLPD';opcode1:eo_reg;paramtype1:par_m64;paramtype2:par_xmm;bytes:3;bt1:$66;bt2:$0f;bt3:$13),

[Content]
The plugin dll could not be loaded:126

current v1.6.2 LFS dll files are too old.

Version 1.6.3 [15/Jan/2015]
   Lua 5.3 support.
   Assorted bugfixes.
http://github.com/keplerproject/luafilesystem/releases/tag/v_1_6_3

regular expr in savesession.lua could be:

local ext=files[i].name:match("%.([^%.]+)$")

All OnResize, OnTimer, OnSomething are broken in 32bit CE.

Example, it throws "Error:attempt to call a nil value"

createTimer(nil,true).OnTimer = function (timer)
  print('timer working')
end

intel core i5 2500

windows7 x64

ultimap 2 record/ pause

Sorry, but your CPU seems to be lacking the Intel Processor Trace feature which Ultimap2 makes use of

It is not supported i5 2500 cpu?(ultimap2)

Or is it not implemented ?

frmultimap2unit.pas
if (CPUID(7,0).ebx shr 25) and 1=0 then
raise exception.create('Sorry, but your CPU seems to be lacking the Intel Processor Trace feature which Ultimap2 makes use of');

buy the latest Intel CPU?

https://github.com/cheat-engine/cheat-engine/tree/master/Cheat%20Engine/Direct%20x%20mess/CED3D11Hook

test compile source some bugfixes and testing 2016/06.28

unsign driver load -> engine exit

Kernelmoduleunloader.exe -> BSOD

driver unload source error

жжжж

Original issue reported on code.google.com by [email protected] on 12 Jul 2013 at 6:24

Attachments:

• main.lua.patch

After the last few commits, building fails continually?

cheatengine.lpr(271,1) Error: Can't open resource file "<blablabla>\cheat-engine\Cheat Engine\images.res"

tgdf

Original issue reported on code.google.com by [email protected] on 20 Oct 2012 at 4:11

Attachments:

• forcedinjection.dpr.patch

From what I can tell, the following projects are missing files:

1. MonoDataCollector
2. Direct x mess

This bug exists since CE6.4 (maybe earlier), CE6.1 doesn't have this bug.

Just keep resizing toolbox window, after a while you will see something like this

Hi,

if you open a process in CE. Then open another process and then click on "open a cheat table". It has pre-entered the name of the FIRST process as CE table instead of the process CE has currently opened.

ss

Original issue reported on code.google.com by [email protected] on 14 Jan 2013 at 9:44

Attachments:

• main.lua.patch

frm Rescan Pointer

Original issue reported on code.google.com by [email protected] on 20 Nov 2013 at 5:31

Attachments:

• frmRescanPointerUnit.lfm.patch

When will press stop button before process finished, found strings will not show up. Happens since CE 5.3

was missing

Original issue reported on code.google.com by [email protected] on 20 Nov 2013 at 12:12

Attachments:

• MainUnit.pas.patch

Title says it all but. yeah any chance of adding the ability to copy strings or even dump all from the all strings. maybe next to the "show list" button add a "dump List" button and save them to a text file.

When the application is first opened, the tutorial that is displayed has a word spacing issue with "you renamed" as shown in the screenshot and highlighted. Seems to pull from the Unit1.pas file, but I can't spot anything obvious with spacing.

It crashes with a buffer overflow detection just after I accept to connect to it from windows cheat engine. Using ceserver downloaded from website.

accept=5
*** buffer overflow detected ***: ./ceserver terminated
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7338f)[0x7f58acaa338f]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x5c)[0x7f58acb3ac9c]
/lib/x86_64-linux-gnu/libc.so.6(+0x109b60)[0x7f58acb39b60]
./ceserver[0x40668f]
./ceserver[0x4078de]
./ceserver[0x408bf7]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x8182)[0x7f58ad21a182]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f58acb2a47d]
======= Memory map: ========
00400000-00410000 r-xp 00000000 fc:00 4762127 /home/lmitchell/Downloads/ceserver
0060f000-00610000 r--p 0000f000 fc:00 4762127 /home/lmitchell/Downloads/ceserver
00610000-00611000 rw-p 00010000 fc:00 4762127 /home/lmitchell/Downloads/ceserver
00953000-00974000 rw-p 00000000 00:00 0 [heap]
7f58a4000000-7f58a4021000 rw-p 00000000 00:00 0
7f58a4021000-7f58a8000000 ---p 00000000 00:00 0
7f58ab818000-7f58ab82e000 r-xp 00000000 fc:00 11010053 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f58ab82e000-7f58aba2d000 ---p 00016000 fc:00 11010053 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f58aba2d000-7f58aba2e000 rw-p 00015000 fc:00 11010053 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f58aba2e000-7f58aba2f000 ---p 00000000 00:00 0
7f58aba2f000-7f58ac22f000 rw-p 00000000 00:00 0 [stack:19442]
7f58ac22f000-7f58ac230000 ---p 00000000 00:00 0
7f58ac230000-7f58aca30000 rw-p 00000000 00:00 0 [stack:19438]
7f58aca30000-7f58acbeb000 r-xp 00000000 fc:00 11015605 /lib/x86_64-linux-gnu/libc-2.19.so
7f58acbeb000-7f58acdea000 ---p 001bb000 fc:00 11015605 /lib/x86_64-linux-gnu/libc-2.19.so
7f58acdea000-7f58acdee000 r--p 001ba000 fc:00 11015605 /lib/x86_64-linux-gnu/libc-2.19.so
7f58acdee000-7f58acdf0000 rw-p 001be000 fc:00 11015605 /lib/x86_64-linux-gnu/libc-2.19.so
7f58acdf0000-7f58acdf5000 rw-p 00000000 00:00 0
7f58acdf5000-7f58acdf8000 r-xp 00000000 fc:00 11014053 /lib/x86_64-linux-gnu/libdl-2.19.so
7f58acdf8000-7f58acff7000 ---p 00003000 fc:00 11014053 /lib/x86_64-linux-gnu/libdl-2.19.so
7f58acff7000-7f58acff8000 r--p 00002000 fc:00 11014053 /lib/x86_64-linux-gnu/libdl-2.19.so
7f58acff8000-7f58acff9000 rw-p 00003000 fc:00 11014053 /lib/x86_64-linux-gnu/libdl-2.19.so
7f58acff9000-7f58ad011000 r-xp 00000000 fc:00 11014205 /lib/x86_64-linux-gnu/libz.so.1.2.8
7f58ad011000-7f58ad210000 ---p 00018000 fc:00 11014205 /lib/x86_64-linux-gnu/libz.so.1.2.8
7f58ad210000-7f58ad211000 r--p 00017000 fc:00 11014205 /lib/x86_64-linux-gnu/libz.so.1.2.8
7f58ad211000-7f58ad212000 rw-p 00018000 fc:00 11014205 /lib/x86_64-linux-gnu/libz.so.1.2.8
7f58ad212000-7f58ad22b000 r-xp 00000000 fc:00 11015607 /lib/x86_64-linux-gnu/libpthread-2.19.so
7f58ad22b000-7f58ad42a000 ---p 00019000 fc:00 11015607 /lib/x86_64-linux-gnu/libpthread-2.19.so
7f58ad42a000-7f58ad42b000 r--p 00018000 fc:00 11015607 /lib/x86_64-linux-gnu/libpthread-2.19.so
7f58ad42b000-7f58ad42c000 rw-p 00019000 fc:00 11015607 /lib/x86_64-linux-gnu/libpthread-2.19.so
7f58ad42c000-7f58ad430000 rw-p 00000000 00:00 0
7f58ad430000-7f58ad453000 r-xp 00000000 fc:00 11014185 /lib/x86_64-linux-gnu/ld-2.19.so
7f58ad622000-7f58ad626000 rw-p 00000000 00:00 0
7f58ad64e000-7f58ad652000 rw-p 00000000 00:00 0
7f58ad652000-7f58ad653000 r--p 00022000 fc:00 11014185 /lib/x86_64-linux-gnu/ld-2.19.so
7f58ad653000-7f58ad654000 rw-p 00023000 fc:00 11014185 /lib/x86_64-linux-gnu/ld-2.19.so
7f58ad654000-7f58ad655000 rw-p 00000000 00:00 0
7ffff4bfb000-7ffff4c1c000 rw-p 00000000 00:00 0 [stack]
7ffff4ddc000-7ffff4dde000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

1. Open process1.exe
2. Open process2.exe
3. Try to save the table
   The default name of table will be "process1.CT" (not process2.CT)

(sorry, its not an issue, just a question);
Is it ok to add bugreports to github's bugtracer ("issues"), or should we stick to the mantisdb bugtracker?
does it even make a difference? does anyone care?

(other than that, awesome that you moved it to github; i find it much better than googlecode 👍 )

driver64.dat
test
test
test
test.sys
12341234
fedcf1234

driver.dat file dbvm password change -> dbvm loader(password change dbvm)
-> but ultimap start error

How to reproduce:

1. clean registry with ceregreset, launch CE from SVN
2. define many "custom type (Lua)"
3. close CE
4. define few more "custom type (Lua)"

CE from time to time (step 2 and 4 ) will throw: "access violation" or "external exception C0000008". Randomly.

Other test:

1. define few "custom type (Lua)", five or more, with CE6.4 or CE6.4+ (before lua dll update)
2. now with CE from current SVN (with new lua binaries)
3. launch CE, check value type list.
4. close CE, launch it again, check value type list.
5. This list fills up randomly.

restoring previous dlls fix this issue.

I know of the following that hinders making / using Cheat Engine to create hacks because of Specifically GameGuard/other anti-hacking program as it detects Cheat Engine.

1. the Cheat Engine x.x.x Title they cant change to blah blah blah
2. the speedhack dll's

So, yeah a way to override the default main window title to what they specify in a setting (if set) that allows them to bypass detection of some sort would be nice.

I think there should be a option to disable use of the speedhack dlls as well. (AKA a way to separate it and never load it up if a setting is set?).

And yes the issue is specifically for online game clients. The hacks I can do with Cheat Engine (if I get it to work) should allow me to modify application controled values that can request it to a server therby making the hacks actually work.

got to sometimes love online games like that 😛.

Yes, granted they can get the source from here and change it, however not everyone has all of the tools to build Cheat Engine. I do not think Visual Studio supports building pascal.

I have one updated file - win32callback.inc

There are other files, you mentioned about it here: post

Could you add those files, or patch files, here on github?

Android use apk to install apps,but where is the apk file?
Or it should be made by the end-users?

After executing auto assembler code that allocates memory, an button that says "Goto to allocated memory in memory viewer" is missing. That would be a huge usability plus!
If you are allocating multiple sections, just add the button that sends you to the first memory section.
Please add this! That would be awesome

I have been noticing for a while now, that when you search for a string, say something that is 44 characters long, and then you replace it with exactly 44 character long string, and then size changes from string[44] to string[46] or string[48], seemingly with no rhyme or reason.

Anyone encounter this and know why? Is there a way to avoid this happening? Mainly the question is, why is it happening? TIA.

os.execute('mkdir "'..extractfolder..'"')
findTableFile(filename1).saveToFile(extractfolder..'\\'..filename1)

In CE6.4 it extracts to extractfolder. Shows error when extractfolder not exists (Unable to create file "path\filename.ext").

In CE6.5.1 it doesn't extract to extractfolder. Creates files next to extractfolder .
The existence of the extractfolder doesn't matter.

I think there are some problems in the debug_setBreakpoint function. This is my first time looking at Pascal code and I'm not too versed on Cheat Engine, so I'm not sure if these are bugs or features.

1. This seems wrong. The error message from getting 0 args will never be reached, and you just pop the stack. (Should you pop the stack even if you raise an exception?)

   if parameters>=1 then
   begin
     if parameters>=1 then
     begin
       <process address>
     end else raise exception.create('debug_setBreakpoint needs at least an address');
   <rest>
   end
   

2. If args are (address, function), size isn't set to the default of 1.

3. The argument tuple (address, size, function) isn't allowed. The third parameter will always be parsed as trigger.

I've submitted pull request #49 to address these.

Also, why do some functions use

lua_isstring(L, -1) 

and others use

lua_isstring(L, 1)

?

This code will clean previous method function

myform.OnResize = function () end

This won't clean previous method function

myform.OnResize = nil

Example showing this issue, execute it (with CE 64 bit):

myform = createForm(false)
myform.BorderStyle = 'bsSizeable'
myform.OnClose = function (sender)
                   sender.OnResize = nil
                   collectgarbage()
                   return caFree
                 end

function setonresizewithhugeallocatedmemoryasclosure(form)
  local hugetable={}
  for i=1,100000000 do hugetable[1+#hugetable]=i end -- about 2GB
  form.OnResize = function(sender) local size=#hugetable end
end

setonresizewithhugeallocatedmemoryasclosure(myform)
myform.Visible = true

Wait, close form, then execute this:

print('Memory in use by Lua',math.floor(collectgarbage("count")/1024),'MB')

You will see something like this:
Memory in use by Lua 2048 MB (or 2049MB)

Then try again with 4th line changed to this:

sender.OnResize = function () end

You should see:
Memory in use by Lua 1 MB (or 2MB)

I have script with registerGlobalDisassembleOverride in my autorun folder.
Current CE revision doesn't handle it well. Probably still something with Lua5.3

myDis=createDisassembler()

skipMyDisassembleOverride = false
function myDisassembleOverride(sender, address, ldd)
  if skipMyDisassembleOverride or sender==nil then return nil,nil end

  local bytes=readBytes(address,2,true)

  if bytes~=nil and (bytes[1]==0xF) and (bytes[2]>=0x90 and bytes[2]<=0x9F) then

    skipMyDisassembleOverride=true
      myDis.syntaxhighlighting=sender.syntaxhighlighting
      myDis.disassemble(address)
      local lldd=myDis.getLastDisassembleData()
      for k,v in pairs(lldd) do ldd[k]=v end
    skipMyDisassembleOverride=false

    ldd.parameters='byte ptr '..ldd.parameters
    return ldd.opcode , ldd.description
  end

  return nil,nil
end

registerGlobalDisassembleOverride(myDisassembleOverride)

CE hangs when I copy disassembled output (any, even on not allocated memory, i.e. regions with ?? in opcode column)

Translated text about:
Line 686 changed.
Old: case trainerdata[i].addressentrys[j].value[i] of
New: case trainerdata[i].addressentrys[j].value[m] of

The binary value created in a coach was not set correctly, because a variable 
was set incorrectly.

Gorginal german Text:
Zeile 686 geändert.
Alt: case trainerdata[i].addressentrys[j].value[i] of
Neu: case trainerdata[i].addressentrys[j].value[m] of

Der Binär-Wert in einem erstellten Trainer wurde nicht richtig gesetzt, weil 
eine Variabel falsch gesetzt wurde.

Original issue reported on code.google.com by [email protected] on 16 Aug 2012 at 3:15

Attachments:

• MemoryTrainerUnit.pas.patch

Source code: https://github.com/cheat-engine/cheat-engine/blob/master/Cheat%20Engine/LuaHandler.pas#L2610

if lua_isstring(L, -1) then
begin
  e:=false;
  address:=symhandler.getAddressFromNameL(lua_tostring(L, -1));
  if e then //unrecognizable address
  begin
    lua_pop(L, lua_gettop(L));
    exit;
  end;
end

The function checks a local variable (which can't change by calling another function). It also exits on error.

The getAddressFromNameL function returns 0 on a bad address (or throws an exception, if that flag is set).

Also, should debug_removeBreakpoint return result:=1 on failure instead?

docs update

Original issue reported on code.google.com by [email protected] on 16 Jun 2013 at 6:39

Attachments:

• main.lua.patch

setGlobalKeyPollInterval(50)
setGlobalDelayBetweenHotkeyActivation(300)

Use above at the end or at the beginning of the Lua script. Save.
Then double click CT, allow Lua script. Doesn't work as it should.

Probably because handleparameters procedure executes Lua script indirectly with
LoadTable(tabletoload,false);

and then sets
mainform.visible:=mainformvisible; // which is true for CT

TMainForm.FormShow procedure loads settings from the registry with LoadSettingsFromRegistry. And it loads interval and delay from the OS registry.

Workaround will be:

• using a timer object
• or placing 'setGlobal....' lines inside onOpenProcess function.

Is it possible you can fix above issue by moving LoadSettingsFromRegistry to the beginning of handleparameters?

Index: cheatengine.lpr
===================================================================
--- cheatengine.lpr (wersja 2385)
+++ cheatengine.lpr (kopia robocza)
@@ -111,7 +111,7 @@
   tabletoload:='';
   origin:='';
   mainformvisible:=true;
-
+  LoadSettingsFromRegistry;
   try

     for i:=1 to Paramcount do
Index: MainUnit.pas
===================================================================
--- MainUnit.pas    (wersja 2385)
+++ MainUnit.pas    (kopia robocza)
@@ -6980,7 +6980,7 @@
       rsLicenseExpired, mtWarning, [mbOK], 0);


-  LoadSettingsFromRegistry;
+  //LoadSettingsFromRegistry;

   //Load the table if one was suplied
   overridedebug := False;

https://youtu.be/IIFum5WAx0U

Previously this button appeared instead of "Scan Type". Now it prevents to choose the "Value Type".

Hi there,

I am currently writing an application in C# to provide alternative game controls for disabled users. As part of this project there is a requirement to slow down the speed of the game, as at their default speed users are unable to send inputs fast enough to be successful at the game.

At the moment we are controlling the game speed manually using CheatEngine alongside our program. This works very well for many games but is less elegant than we would like.

Is there any means by which we would be able to control the game speed using Cheat Engine as the back end directly from C#, via something like a command line API or library?

I've had a look through the forum and existing issues and can't seem to find an answer, but please feel free to direct me to any existing discussions regarding this.

All the best,

Richard

alloc(code,128)
registersymbol(code)
createthread(code)
code:
mov [FFFFFA80145B4000],1 //kernel memory 0 -> 1 fix thread dead

ret

alloc(code,128)
registersymbol(code)
createthread(code)
code:
mov rax,FFFFF80005020400
mov [rax],1 // kernel memory 0 -> 1 fix thread dead

ret

and
createthread(FFFFFA80145B4000): <--address kernel memory possible?
FFFFFA80145B4000:
mov [FFFFFA80145B4100],1
ret

//autoassembler createthread kernelmemory address value not fix?

thank you

FFFFF8000207ED0E - 0F -
FFFFF8000207ED0F - 0D 4B38488B - or eax,8B48384B { -1958201269 }
FFFFF8000207ED14 - 43 38 48 83 - cmp [r8-7D],cl
FFFFF8000207ED18 - E0 FE - loopne FFFFF8000207ED18
FFFFF8000207ED1A - 48 8D 48 02 - lea rcx,[rax+02]
FFFFF8000207ED1E - F0 48 0FB1 4B 38 - cmpxchg [rbx+38],rcx
FFFFF8000207ED24 - 74 11 - je FFFFF8000207ED37
FFFFF8000207ED26 - 48 8D 4B 38 - lea rcx,[rbx+38]
FFFFF8000207ED2A - E8 F545C7FF - call FFFFF80001CF3324
FFFFF8000207ED2F - 84 C0 - test al,al
FFFFF8000207ED31 - 0F84 18010000 - je FFFFF8000207EE4F
FFFFF8000207ED37 - 0F -
FFFFF8000207ED38 - 0D 0E488B06 - or eax,68B480E { 109791246 }
FFFFF8000207ED3D - 48 8B C8 - mov rcx,rax
FFFFF8000207ED40 - 48 83 E1 F0 - and rcx,-10 { 240 }
FFFFF8000207ED44 - 48 83 F9 10 - cmp rcx,10 { 16 }
FFFFF8000207ED48 - 76 06 - jna FFFFF8000207ED50
FFFFF8000207ED4A - 48 8D 48 F0 - lea rcx,[rax-10]
FFFFF8000207ED4E - EB 02 - jmp FFFFF8000207ED52

x64 Memory View OF 0D

OPCODE Dissembler View error?
FFFFF8000207ED37-3C or eax,68B480E

Go To the Address FFFFF8000207ED3A -> mov rax,[rsi]

cheat engine source fpc 2.7.1 not error

but new lazarus 1.6 fpc 3.0.0 compile networkinterface compile error

lazarus fpc bug ?

cheat engine source bug?

How do I fix a bug ?

The dotnet collector is missing about 1/4 of the files in the vc project...

This error happens when I set some settigns. I have the files but they are Ssys format. This is a issue with latest Cheat Engine the older ones are fine.

Fixed when You copy and paste the sys files and rename those copies to dbk32.dll and dbk64.dll.

After that rename it goes too:

32bit process register -1 input => reopen data error

No Error -> FF FF FF FF
Error(Long data 8byte) FF FF FF FF FF FF FF FF

dbk_writesIgnoreWriteProtection(true)

driver module edit autoassembler suggestion!