Cheat Engine

[TsTg]

Hello,

I would like to report a bug which is very important sometimes when writing scripts or viewing a referenced address in the memory viewer of cheat engine.

The problem is related with 64 bit systems, when hacking a 32bit process(our game for example) and want to call a windows api in an assembler script, cheat engine redirects the call to the x64 version of the DLL, especially when calling one of the Ntdll functions like memcpy and others, the game immediatly crashes with an access violation(because both ntdll.dll versions are loaded together in the process).

If i correct the script to use the exact location of 32 bit version of the dll, all goes fine, but we will not edit the api's address everytime.

Please fix that, cheat engine should get the correct api address through checking first the IsWow64Process for the debugged process, thanks.

[Dark Byte]

There is one workarround (but it will make dll injection a bit more complex)
Get the forcedinjection plugin from the main site and load it.
It contains a bugfix for the symbol handler, where it replaces symbols starting with ntdll.* to ntdll64.* if it's the 64-bit version (I can't just ge rid of it entirely ad there are some reasons you might want to hook the 64-bit version of a function instead)