Cheat Engine 7.4.1
🕑 Added 2022-06-25 20:05:27 +0000 UTCEdit: Patreon is having issues right now.
If you encounter issues after agreeing on patreon then try https://cheatengine.org/nosetup.php (It may take a few times, but eventually you'll get through.
Sorry for the inconvenience
---
It has taken a while as I was working on/studying AARCH64 architecture, MacOS M1, and many different experiments, some of which have opened new ideas for the future. But I do have to hold myself back a bit else i'd never bring out a new release.
So here is the next in-between version: Cheat Engine 7.4.1
from 7.4-7.4.1:
Changes:
- added .Visible property to treenode entries
- added .VisibleRowCount and .TopItem to listviews
- added arm64 disassembling and assembling
- added lua function "runCommand"
- added a radiobutton to select if the generated script will use 5 or 14 byte jmps.
- conditional jumps can now deal 2gb+ destinations (will get rewritten)
- dotnetinfo: Performance improvement
- memory record hotkeys now have a "Only while down" option
- Updated the dbghelp to a more recent version which can better handle nowadys pdb symbols
- different memory allocations now get placed within the initial allocation block. Protection is changed afterwards
- tracer can now step over rep instructions
- lua stringstream now inherits from memorystream, so you have access to the Memory field
- lua: Added a callback for whenever the structure list is modified
- added architecture distinguishing to ceserver
- pressing escape in the hotkey form will now close it
- added nested structure support
- added string based custom types
- ctrl+enter in the disassembler now shows relative addresses from that point
- the diffcount in "find out what accessess/writes" will now stay even when disabling the option to find the number of different addresses an instruction accesses
- (A few other things I forgot about)
Fixes:
- fixed the all type not finding 4 types when double was deselected
- fixed the "all" type when not using double
- fixed ccode esp access in 32-bit and "reg"f types
- fixed disassembling when using binutils for disassembly
- fixed the tablefiles menulist eating memory because they didn't get deleted properly
- fixed .net issues that use obfoscated modules and missing metadata
- fixed paring value starting with a - or +
- fixed assembling pmovmskb
- fixed disassembling vgather* vex256 instructions and allow usage of xmm/ymm registers as address (for instructions that allow it. Like this one)
- fixed the addresslist not giving a proper error when using multiple enable or disable section
- fixed error when using ctrl for speedhack hotkeys
- fixed the groupscan command parser from assigning wildcard to the wrong combobox
- fixed disassembling xchg eax/rax,xxx
- fixed lua custom type registering as float when using the non lua function method
- fixed small memoryscan issue for data at the end of a memoryblock
- ccode doesn't register useless symbols anymore
Changes for Mac:
- Fixed M1 memory scanning.
- Many GUI fixes (header separators are now visible)
- AARCH64 debugging
- Deal with the situation where you can not have executable and writable memory at the same time
If you're having trouble loading this on your Mac, then try signing it yourself using the following command:
sudo codesign --force --deep --sign - CheatEngine741.app
I've also uploaded the latest builds of ceserver for android which work better with the new CE version. These versions are also better capable of editing memory and debugging works better now (Still a WIP)
And a tip: You do not need to root your phone. You can just edit the APK with something like apktool and set it to debuggable=true. Then copy the ceserver to the data apk folder and run it using `run-as` (More on this in the future, likely as a video on the CE youtube channel)
As always: Please ask questions, it helps me understand what can be improved/explained better, report bugs, and most importantly, give feedback on what you think could be improved or added to Cheat Engine.
I can often be reached on the CE Discord (that every Patreon member can access) , the CE forum and the CE github, and of course here in the comment section
Happy modding!
Edit: 26th june 2022: There was a installer error (filepath) and an GUI issue (resizing CE) which is fixed now
Having trouble continuing in the installer? Try using Chrome. There is a report that Edge won't work (not a big surprise there. It's going to be the new Internet Explorer...)
Comments
Eric Heijnen
It's a false positive. You'll have to contact the anti virus that you use and tell them to update their detection. Also, OpenCandy has stopped years ago, it's a really outdated detection
Gloomywing01
Why is it still showing a positive for opencandy even though I thought this version was not supposed to have it? Is there any version that doesn't have it?
Criss Taylor
mcafee can still detect this even if i turned off the firewall. Need help
Eric Heijnen
If you connect patreon with your discord it should automatically add you to the server I don't know about minecraft launcher, so my goto advice would be to reinstall it. As for CE and .CT files, assuming you're on windows 10: Rightclick any .CT file, and go to Open With-> and then select "Choose another app" Then tick the checkbox in the bottom that says "Always use this apopo to open .CT files" Now, If there's a Cheat Engine in the list, click that, if not click on more apps If still nothing there, then click on "Look for another app on this PC" and find where cheat engine is installed. (Likely it's in C:\Program Files\Cheat Engine 7.4.1) and select "Cheat Engine.exe" Alternatively, redownloading and installing CE should let you fix the .CT files as well
Crayoldan
I'm not really sure where the discord link is? And I accidently opened it with minecraft launcher some how, so now it just won't look at it as the file it started out as when I try to use it in cheat engine. Even worse any old or new CT files are now the same. I some how managed to ruin all CT files on my computer and I don't know how to change it back.
Eric Heijnen
You could ask in the discord here. I'm not sure what you mean with opening a CT file with minecraft launcher. (it shouldn't be able to use .ct files). But have you tried restarting windows, or even reinstall the minecraft launcher ?
Crayoldan
I don't know if anyone know's how to fix this, but I accidently opened a CT file with minecraft launcher somehow. NOw I can't get it to revert back to normal. What do I do?
1 ProFakeModel
Used the MacOS version, windows version works fine
Eric Heijnen
Are you on windows ? Do you have any scripts that override "injectLibrary" ?
1 ProFakeModel
How to fix this Failure injecting the MonoDatacollector library:Error in line 18 (mov rax,ffffffffffffffff) :This instruction can't be compiled
Eric Heijnen
Turn all options in settings-extra off, but if they are all disabled then no idea. It's all normal windows API stuff CE uses. Perhaps something is attacking CE, like an anti virus (too busy looking at CE to allow a shutdown) or perhaps it's even a coincidental windows update: https://www.reddit.com/r/WindowsHelp/comments/wf2wqw/windows_program_called_task_host_window_prevents/
Liam
Hi, Im using version 7.4, and whenever i wanna shut down my laptop, i get Task Host Window error. This started happening after using CE, do you know what the problem is?
it gets flagged as a trojan and more stuff
Eric Heijnen
It's an innosetup installer that's unsigned. Some AV's don't like that. Try CE7.4 in the other post here which is signed. It may be slightly less detected. (unless it's being detected as hacktool:cheatengine which is correct)
it still gets flagged as a virus, any explanation for this?
Eric Heijnen
It works on safari. The problem you're having is likely the current issue with patreon where 4 out of 5 times the authorization check fails. You could try it a few times. Eventually it should work. I do hope patreon fixes this server issue soon
I'm having trouble with CE trying to open Patreon in the Safari Web Browser. Apparently Patreon does not support Safari desktop (https://support.patreon.com/hc/en-us/articles/115002834806). I'm unable to authenticate to the site. My default browser is set to chrome, so I'm not sure why CE is trying to use Safari. Any workarounds that come to mind? I am able to open the application and use it fine. I'm just growing tired of the need to restart every few hours.
Eric Heijnen
Tried disabling "realtime protection" on windows? And PuP protection? (different than AV) And have you tried the runtime modifier download in the 7.4 topic? If all else fails, you can always try the nosetup version at https://cheatengine.org/nosetup.php
I keep getting the "don't have permission to access" error. Any way to fix that? Tried turning off my anti-virus, that didn't work.
Eric Heijnen
I have some reports that it does work. But it's not that simple. From what I gather you have to get CE onto the device, and then set the environment variables WINEESYNC and WINEFSYNC to 1 (using export) before you launch CE using proton from the same terminal
Yarinko
I appreciate the work that you do for Cheat Engine. Thanks for the update! Is there a relatively simple way to get this software working on Steam Deck? I'm not exactly tech-literate, but if you know of any workarounds or tutorials to get this running on that platform I'd be grateful for any advice.
okay, thank you so much!
Eric Heijnen
try 7.4 instead of 7.4.1. 7.4.1 isn't signed with a codesigning certificate so may look more suspicious. (of course if it's detected as "cheat engine" that's correct)
is this download of cheat engine supposed to be malicious in anyway? because my antivirus isn't allowing it
Corey Khaal
Ignore earlier message. Appears related to wine https://bugs.winehq.org/show_bug.cgi?id=53189
Corey Khaal
I get this whenever I right click in Cheat Engine connected to ceserver on linux... ```0104:fixme:ntdll:NtQuerySystemInformation (0x000000c4,0x241faf4,0x00000004,0x241faf0) stub 0068:fixme:imm:ImeSetActiveContext (0000000000355A20, 0): stub 0068:fixme:imm:ImmReleaseContext (0000000000010020, 0000000000355A20): stub 0104:fixme:imm:ImeSetActiveContext (00000000063ADC20, 1): stub 0104:fixme:imm:ImmReleaseContext (000000000001005A, 00000000063ADC20): stub 010c:fixme:seh:EnumProcessModulesEx (0000000000000140, 0000000000000000, 0, 000000000434FB34, 3) semi-stub 010c:fixme:seh:EnumProcessModulesEx (0000000000000140, 00000000045A0090, 368, 000000000434FB34, 3) semi-stub 010c:fixme:file:NtLockFile I/O completion on lock not implemented yet 0134:err:dbghelp:SymCleanup this process has not had SymInitialize() called for it! 0104:fixme:explorerframe:taskbar_list_SetProgressState iface 0000000003161F50, hwnd 000000000002004E, flags 2 stub! 0104:fixme:explorerframe:taskbar_list_SetProgressValue iface 0000000003161F50, hwnd 000000000002004E, ullCompleted 33, ullTotal 3e8 stub! m Files\Cheat Engine 7.4.1\cheatengine-x86_64.exe: ../wine/dlls/ntdll/unix/thread.c:1739: ntdll_set_exception_jmp_buf: Assertion `!jmp || !ntdll_get_thread_data()->jmp_buf' failed. 0104:err:seh:call_stack_handlers invalid frame 000000000251F400 (0000000001422000-0000000002420000) 0104:err:seh:NtRaiseException Exception frame is not in stack limits => unable to dispatch exception.``` Happy to provide any more information if wanted.
Eric Heijnen
Did you download CheatEngine741P.exe from here? You could try CheatEngine74P.exe from https://www.patreon.com/file?h=60641229&i=9802000 Or if it's detecting cheat engine, you could try RuntimeModifier 7.4: https://www.patreon.com/file?h=60641229&i=9801999 If that also doesn't work you may have to whitelist the CE setup in your anti virus. When windows blocks something it usually shows a notification in the notification area in the bottom right of the desktop. There you should also be able to set it to allow execution
How do I dowload it without the malware. Windows Defender keeps tagging the installer as malware
Zadkielsan
thanks alot for your answers !
Eric Heijnen
The x.x.y versions are inbetween versions instead of full public releases. For 7.5 i will make a standone again
Zadkielsan
Thanks for the link, but why the 7.4.1 is not available in nosetup ? It'll be in the future ?
Eric Heijnen
There is none for 7.4.1, but for 7.4 it's at https://cheatengine.org/nosetup.php
Eric Heijnen
open a terminal and then go to the location where you've put the CheatEngine741.app file (likely your Downloads folder, so when the terminal just opens, do a `cd Downloads`) Then enter this command: sudo codesign --force --deep --sign - CheatEngine741.app It may ask to install some developer tools and your system password, allow it. Once done it should be able to run
Zadkielsan
where is the zip version , I don't want to use an installer.
I havent yet! Is there a guide on how to do so?
Eric Heijnen
Have you tried signing the .app ? ( sudo codesign --force --deep --sign - CheatEngine741.app )
japanese user
Thanks for the reply. The .CT file is here. (ダウンロード = Download) https://ux.getuploader.com/wp8/download/624 Sorry, I don't know what this is doing with the thread stack to me. The objectives of this CT are as follows. There is a Japanese cheat tool that uses a proprietary scripting language called SpoilerAL. However, it is no longer under development and only supports 32-bit addresses. Therefore, the script copies the pointer address to a 32-bit region and forcibly moves it. Essentially, it is transferable to CT, but because the script was for a simulation game that has been maintained for more than 10 years, the volume was enormous and was used as a band-aid. https://ux.getuploader.com/wp8/download/586 With your reply, I was able to get the script to work by using Cheat Engine to find the free space on the 32-bit stack and rewrite the address! Thank you very much.
So i installed on mac, i allow it to open in settings, but then when i go to open it, it seems like it shuts down right away. Nothing ever opens, any help?
japanese user
As shown in the image, a specific 32-bit area (0x1A008) is inaccessible. (The should value is 0 or otherwise) https://i.imgur.com/ApAXkmK.png
Eric Heijnen
Maybe the script is making an assumption about the order of memory allocation. Windows 11 may have changed the sequence of allocation to something more random. (e.g more memory than needed, instead of 1,2,3 it does 2,3,1. Without seeing the script i can't really say. (e.g using static addresses instead of modulename+offset it'll break eventually) Also does it use threadstack?
japanese user
Certain users say they are having the same problem with Win10 with Windows Update. This was a script that had been distributed by the Japanese community for over a year and was working fine.
Eric Heijnen
Not that i know of. Are you running the 64 bit CE exe? And are you sure there are addresses in the 32 bit region of the process? Try opening another cheat engine and attach it to itself. CE is compiled in such a way that it loads at 00400000, even in 64 bit. Can you read that memory?
japanese user
I updated to Windows 11 this week. But for some reason, I can no longer access some 32-bit addresses for 64-bit games. Is there any known issues?
Eric Heijnen
If you downloaded the 741p.exe from this patreon page then yes. There are no ads in here. Perhaps you mixed up the download ?
Wasnt this download supposed to be addless? I just had to decline 2 adds in the install
Dragon
I am getting antivirus warnings quite a lot of them :(
Ok! I'll try it! Thanks
Eric Heijnen
Try 7.4 or runtime modifier 7.4 in the other post. The 7.4.1 version is not signed so looks suspicious to some anti viruses
Hello! I'm totally new on this! I try to dowload the exe and zip version but my antivarius is blocking the process for the following reason: Malicious behavior blocked....??? Also it detectes infective files...
Eric Heijnen
It should work now.
mog the cretin
Is the server still having technical difficulties? Been trying to install both 7.4 and this one and neither work.
Eric Heijnen
The server is having technical difficulties. It will take a couple of hours
Can't install, just freezes. Turned off firewall and allowed installer to connect to internet but still freezes. Windows 10 64bit 20H2.
Man, is there no Runtime Modifier 7.4.1?
version*
where is the no download vertion??
Eric Heijnen
I'm using the latest version of inno setup now. Perhaps AVG hasn't added in proper checks for it yet. But what file is detected or is it going of on the whole installer file itself? May also be because the installer isn't signed for inbetween builds
kcoca88
thx i will keep tring it ,by the way there is also have a dead loop bug, lfeedback the issue part later!!
Black Unicorn
AVG has claimed this to be infected with malware or a virus 3 times so far. As I have a paid form of AVG I would look at this again and the re distribute it. I only say that as your last 2 updates I got within a day or 2 of it coming up and I had no problems with them.
Eric Heijnen
I've uploaded a new version for mac that should be slightly more stable for debugging but may take a try or two. Don't forget to restart CE when it fails. (It still has the issue where you can't edit the code inside rosetta jitted regions, but that's going to get fixed eventually as well)
kcoca88
really thx ,i will keep test and run for more apps or games if still other bugs, then keep feedback to you,anyway thx your hard work again !! the perfact version looks geting close~^^
Eric Heijnen
I think it depends on the speed the breakpoint gets hit. I installed torchlight, and when testing it with 1 damage dealer for health, it works but for a 2 direct hit situation I saw it crash as well. I'll look into this and see if I can fix it The pointerscanner does work though, I have a pointer to health : Offset 2: 68c Offset 1: 28 Base Address: "Torchlight2"+05a41530
kcoca88
oops,it looks no chance to stop it and just directly carsh down....bery bad@@"
Eric Heijnen
Can you try the following? When finding out what writes to the address and you wish to stop it, go to advanced options(bottom left), and pause the game there. Then click stop. Does it crash then ? Also, keep in mind that since you're running torchlight inside an emulator (rosetta) it may be difficult to get a proper pointer to begin with
kcoca88
i think this game is running under rosetta, game name : Torchlight II
Eric Heijnen
Thanks. Is the target process that crashes a native M1 app or running under rosetta?
kcoca88
Dear Creater: Very first is really appreciate your hard work and release the new version to Mac M1 version there are some issues need feedbakc to you , when we start to use who write or read this pointer(attach the game process) ,on Mac m1 version .it could works but after it the games just crash down ,need to re-start again, cant work pefectly by attach the game process all the time .
Eric Heijnen
Thanks. I've added a tag for ce 7.4. As for the BSOD i doubt it's CE specific unless you have something running in kernelmode that uses CE and messed up when it thinks it's ce 7.4 and accesses wrong memory. (And if you did download this version withon 6 hours if release it has a nasty memory leak which has been fixed)
Just incase you're not aware, up until this one it doesn't look any releases have been tagged since 2020. I recently ran into some BSOD issues (probably not CE related) and wanted to downgrade back to 7.4 but had to specifically search for it since it's not listed otherwise.
Very good Tool! Thanks! I use it often for Full Price Singleplayer Games who think they are Free to Play… I look at you Assassin’s Creed Odyssey.
Jonathan Mota
Thanks for the update.
Melchisedec Bailey
I have no idea what 80% of this is. And I only vaguely recognize some of these terms. But it looks like a lot. GOOD JOB! thank you.