Cheat Engine

Dark Byte · Posted: Fri Apr 15, 2005 5:06 pm Post subject: Cheat Engine 5.0 Released

download it here
Check the downloads page or the readme at the end of the setup to see whats new.

If you encounter bugs or something weird let me know.
I know it doesn't support PAE enabled systems with SP2, but unless I'm able to buy one of those to test it propably wont get fixed. (So hope I get enough donations, or someone else fixes it, or try disabling it in your c:\boot.ini file)

emperor · Posted: Fri Apr 15, 2005 5:33 pm Post subject:

Awesome, great job. Thank you Very Happy

Only strange thing i encountered so far: the system call retriever (or not) reboots my comp.
To say a bit more about it: I used the kernel mode unloader to unload the old driver.
Then I start cheat engine 5, then process guard(a little security program) asks me if i want to allow systemcallretriever to execute, i say yes. Then for a split second i see the screen that asks (if it still says the same as in previous versions) if one wants to try enabling the system call retriever. However i don't even have the time to answer. It simply reboots my comb then. Reboots as it...not shutdown but crash.
edit: If I don't allow the systemcallretriever to execute: same effect.

Dark Byte · Posted: Sat Apr 16, 2005 5:13 am Post subject:

see if "start->programs->cheat engine 5.0->kernel stuff->gather kernel data" also crashes you.

try to uninstall cheat engine 4.4 (or 5.0 now) and clean all the files from the folders where you installed it. I noticed it doesn't always overwrite old files with newer ones

And try disabling processguard for a while. the functions that need the data gathered by the systemcall retriever look a lot like a rootkit/virus, so protections against that may go crazy and terminate the system

Oh yes, does enabling the openprocess or read/write memory crash you too? In case you can't go to the settings because it crashes when you start ce now, open regedit go to hkey_current_user\software and delete the cheat engine key

I remember you have a amd64 with SP2. That means you have a PAE enabled system, and means the stuff that uses the systemcallretriever's data won't work.
try changing /NoExecute=OptIn to /NoExecute:AlwaysOff in your c:\boot.ini or disable the noexecute and/or pae in your bios (i really need to get a new cpu)

emperor · Posted: Sat Apr 16, 2005 6:48 am Post subject:

I disabled my execute protection already a while ago when you first told me.
Will try the rest now~
edit: Gather kernel data works.
312
483
378
404
136
372
0

And yeah...with disabling process guard it works fine. Sorry that it was a flaw on my side.

Dark Byte · Posted: Sat Apr 16, 2005 6:54 am Post subject:

oh yes, I noticed something weird with the kerneldata gatherer
when you run it from start->programs it won't find the debugport, but when you run it from a command prompt or from within ce it will find the debugport. (the debugport is usefull when you try to attach the debugger to a already debugged procesS)

emperor · Posted: Sat Apr 16, 2005 7:07 am Post subject:

Well I guess I rejoyed too early. When i clicked on the select process it simply died again.
Then I, still having process guard disabled started CE again and it died on startup. The only reason I can think of must be that the time when i got to the title screen of CE at least, I had started the gather kernel data before, maybe that's related. I just tried it again: when starting the gather kernel data before CE I can get to the CE title screen. I took this opportunity to test without the extra options on: it works then.
edit: It works...after disabling and enabling all options it sort of seems to work.

Dark Byte · Posted: Sat Apr 16, 2005 11:22 am Post subject:

I've re-uploaded it again with one small fix, the installer now gets rid of the old .dat files if they are present and disables the stealthmode, kernel debugger, and memory fixer in the registry so you'll have to enable them yourself again.

And the driver has been modified so it won't write random crap to a random spot in kernelmemory if you havn't ran the kerneldata retriever Embarassed

Jripe · How do I cheat? Reputation: 0 Joined: 28 Mar 2005 Posts: 9

Thanks for all of that, Dark Byte. Smile

I am having a reboot problem right now too, so I'll clear out the folder and download the new one. Thanks for all of this.

Edit: Woo! It all works. Very Happy

diamondjo · Posted: Sat Apr 16, 2005 8:22 pm Post subject: thanks for CE 5

Great Work thanks a lot.
(What is the difference between Find out what reads from an address and find out what accesses an address)
D!@MONDJO

Dark Byte · Posted: Sun Apr 17, 2005 2:26 am Post subject:

Find out what reads from a address only shows what READS from it. It doesn't show what writes to it. But the only way to do that is to make memory inaccesible and check the exeption the cpu throws, 1=read,0=write (or something)
thats why it's coded different and can't you use the kernel debugger. (Well, I could, but then i'd also have to hook the exception handler interupt)

stomperz · Posted: Sun Apr 17, 2005 1:01 pm Post subject:

Works fine.
Had a Blue screen problems when first run had to do a lot of registry cleaning!
Probably related to all the different versions (lots) I had installed.

DB chk yr mail

Davethewave · Posted: Sun Apr 17, 2005 5:31 pm Post subject:

Thanks Dark Byte! It still returns double results when finding a base pointer though. Razz

me · Posted: Sun Apr 17, 2005 9:59 pm Post subject:

this is really good

wow I mean really good Razz

stomperz · Posted: Wed Apr 20, 2005 8:09 am Post subject:

I wrote a trainer with ver 5 and tried to
"Open existing trainer made by Cheat Engine"
It gives me
"This version of Cheat Engine doesn't know how to read this trainer! Trainervershion=5.

The error seems bogus because after reloading CE the file loads and can be regenerated