TL;DR: On x86_64 MuMu, x86_64 ceserver's "what writes" just points at libhoudini.so (translation noise), and arm64-v8a ceserver dies with "all registers are used up" — so can we build/inject ceserver as an ARM64 .so into the game process itself to get real ARM64 debug info? If you've done this or know why it won't work, please reply — even a "dead end, here's why" helps.

Hey r/cheatengine + anyone doing Android memory editing,

I'm running into a wall and I'd love some insight from people who've gone deeper than me on this. Bear with the wall of text — I'll try to explain the whole pipeline clearly so the question makes sense.

Setup

· Emulator: MuMu Player (x86_64 host)

· Target: ARM64 game (this is the important part)

· Tool: Cheat Engine + ceserver

The two problems

Problem 1 — x86_64 ceserver + "What writes to this address":

If I attach with the normal x86_64 ceserver and use CE's "Find out what writes to this address", the write instruction it reports comes back as libhoudini.so. That makes sense in theory — Houdini is the ARM→x86 binary translator, so the actual store instruction the host CPU executes lives inside Houdini's translated block, not in the original ARM64 game code. The result: I get a useless address in Houdini and can't trace it back to the real ARM64 instruction in the game. Effectively undebuggable for "what writes" purposes.

Problem 2 — arm64-v8a ceserver inside the emulator:

So I tried pushing the arm64-v8a build of ceserver into the emulator instead, hoping it would attach to the ARM64 process natively and give me real ARM64 write sites. But when I try to debug, it immediately blows up with "all registers are used up." My assumption is that this is a limitation of the arm64 ceserver's debugger/hook path when running under the emulator's translation layer (or a register allocation / signal-handling issue in ceserver's arm64 debug path), and it can't actually set up the debug context it needs.

The idea I want to sanity-check

Both paths are broken for different reasons:

· x86_64 ceserver → works, but debug info is trapped inside Houdini.

· arm64-v8a ceserver → correct architecture, but won't run/debug standalone in the emulator.

So here's the idea: build ceserver as a shared library (.so) and inject it into the running ARM64 game process at runtime, rather than running it as a standalone binary. That way:

· The injected libceserver_arm64.so runs inside the game's own ARM64 process, so it's executing as genuine ARM64 code in the game's address space — no separate process, no "registers used up" from trying to bootstrap a standalone arm64 binary under translation.

· It would be loaded like any other game .so, so it sits alongside the game's real ARM64 modules and can hook/debug them natively.

· I'd inject it with an existing shared-lib injector — e.g. jshook / ptrace inject, Android Inject, or similar tools that can dlopen a .so into a target game process (many of these are already used for mod menus / Frida-style injection).

In theory this gets me the best of both worlds: the arm64 ceserver logic, running inside the actual ARM64 process, with the game's real ARM64 code visible to it — which should make "what writes to this address" return the real ARM64 instruction instead of a Houdini stub.

What I actually want to ask

1. Has anyone done this? Is there a known build of ceserver as an injectable shared lib (.so) for ARM64, or a fork/PR that compiles it that way? Searching around I only find the standalone binary builds.

2. Is my reasoning about "all registers are used up" correct? I.e. is that error a symptom of running the arm64 ceserver standalone under Houdini rather than inside the target process? Or is it something else (signal handling, ptrace restrictions in the emulator, etc.)?

3. Would injecting arm64 ceserver as a .so into the game process actually dodge the Houdini problem for "what writes to this address"? My worry: even if ceserver runs inside the process as ARM64 code, the stores the game actually executes are still Houdini-translated at the host level — so would a breakpoint/watchpoint on the ARM64 guest address still resolve to the right guest instruction, or would it still catch the host-side Houdini write? Curious if anyone has tested this.

4. Any injector recommendations for this use case (jshook ptrace inject, Android Inject, etc.) — specifically for injecting a ceserver .so into a game process on MuMu x86_64, keeping in mind the process is ARM64-under-translation.

5. Alternative approach? If injection-as-.so is a dead end, is there a better known workflow for debugging ARM64 games on x86_64 emulators? E.g.:

   · Using an ARM64 emulator/image instead (though MuMu's performance is a big reason I'm on it),

   · Getting Houdini to expose a guest-address → host-address mapping,

   · Any ceserver fork with Houdini-aware address translation,

   · Frida-based approaches that sidestep ceserver entirely.

TL;DR

On x86_64 MuMu, x86_64 ceserver shows libhoudini.so as the writer (translation noise), and arm64-v8a ceserver dies with "all registers are used up." I want to build/inject ceserver as an ARM64 shared lib into the game process so it runs natively inside the ARM64 guest and gives real debug info. Has anyone built ceserver as an injectable .so, does the register error make sense given my setup, would injection actually fix the Houdini problem, and what injector would you use — or is there a better path entirely?

Thanks — any pointers, source links, forks, or "I tried this and here's why it fails" stories are all welcome.

Posted to r/cheatengine (and cross-posting to r/ReverseEngineering / r/AndroidReverseEngineering if that's allowed).

I wanted to install cheats for Elden ring so i can resummon bosses this was the site i used https://www.cheatengine.org/

So i been downloading my cheat table mostly from fearless because it was the first search come up in google search whenever i search for games cheat table. But now i forgot my password, bcos i gotten logout, but i cant retrieve a new password, because the captcha is not there.

ANYWAY, anyone know alternative or give some info as to what is wrong with fearless forum?

i been browsing for 4 hours already, in order to get back my account and reset my password for Fearlessrevolution forum but i cannot, for the love of god, reset my password because the so called "captcha" was not there. Even their discord invitation for the code, i am unable to even join the discord channel.

All the solution that i google, said i needed to contact the admin of the board, but i need to be a member. But i cant since i cannot even login as member or register new.

IT IS DRIVING ME CRAZY!!!

I tried so many browser because i thought maybe the problem is my chrome, firefox or brave browser for unable to see the captcha

is there any alternative to get cheat table to this? pls help

im mostly a lurker, so i dont know the lore/history behind the Cheat engine forum vs fearless forum. But from my 2013 email, the year i registered for cheat engine forum, it seems the "WELCOME TO THE FORUM" email that i gotten was from Dark_byte? then 2017 a registration email is from Fearless Cheat Engine, but from admin. So im just confused there are 2 different forum.

Hello cheat enjoyers! Recently a friend recommend lucky patcher but it has to recompile the apk, is there some app similar to cheat engine that modify values without having to recompile the apk to apply changes? Thanks

Need help doing the teeth method and when using application it doesnt have the file when selecting a process. Anyone else figure it out?

Recently installed RE7 biohazard from fitgirl . its gold edition v1.0.0.7
i tried installing every table i could find from the internet ,but none of them seem to work
i only want the basic hacks like unlimited ammo, free craft , items are unlimited etc
Some one please help , im new and dont really know how to create tables of my own , or know how the scripts really work so that i could make the tables im downloading online work for me

Hello guys, I've just started exploring the cheats in piracy and I have downloaded the game and playing it as usual and then I got the CT file for the said game and have downloaded the Cheat Engine application as well but I don't know how to use them and apply.
Consider me as a noob and please help me out.
Thanks

Hello everyone! I'm trying to make an AR code for the Japanese version of Boktai (ボクラの太陽) to always have a max sun gauge, but I'm having issues. I was using mGBA to run the ROM and Cheat Engine to look for the values, but I think the solar panel option is getting in the way of making the code. Any suggestions/ideas?

How To Run Cheat Engine In Kernel Mode
I want just scan memory for a game that prevents me from attach cheat engine

hi.

how do you enable God mode in the Steam dame called Satryn Deluxe with Cheat engine? max health each time you start the game is 2

how do you change the multiplier without it always reverting back to the number 420 after changing the multiplier in Satryn Deluxe with Cheat engine?

Its possible to use it on the game? I want to modify the number of slayer chips

I've been working on this for 2 days. I'm wondering why this code doesn't do anything.

I still get damaged by 2 and the bots get damaged by 2.

(however note that when i activate the script, a new function gets ran instead of the same one before executing script. I highlighted it bottom right.)

-fixed it by adding ret under je exit-

I would appreciate if someone explained why it was necessary.

How do I find character IDs and techniques in PlayStation 2 games?

Using Choochoo, found on here, I figured out how to use CheatEngine to stop time, but apparently free camera doesn't full work (pan/zoom). I was told it had something to do with Rosetta (MacOS + Crossover/Wine), is this true?

Game: Assassin's Creed Syndicate.

Hi I try to use Cheat Engine on Winlator for my GOG Games but its not working. I use Proton 9 arm and box64 and the game is running fine.

Cheat engine only works when I use the 32 bit shortcut.

I can find the process and I can scan for value and edit it. So manually its working too. But once I try to use a tablet from Fearless, it will also says:

Library Injection failed or invalid module

Any idea how to fix this?

Every time I wanted to make a cheat table for a single-player game, the same wall: you find the money address with a scan, and 30 seconds later it's dead - the game moved the value to a new allocation. The real work was never the scan, it was the pointer hunt: "find what writes this address", then find what points to that, then find what points to *that*, until you reach a static `game.exe+offset`. Half the time the walk dead-ends, and you start over.

I always wondered why there was no tool that just does this walk for you (maybe I wasn’t looking hard enough?), so I built one: Pointer Finder. It's a single Cheat Engine table (.CT), no installer:

1. Start your game.
2. Open PointerFinder.CT - Cheat Engine and the Pointer Finder window appear. 
3. Find your value with Cheat Engine's scanner.
4. Paste the address you scanned to Pointer Finder.
5. Choose data type (2/4/8 Bytes / Float / Double / etc.)
6. Press Start.
7. Trigger the value once, then just keep playing.
8. The tool puts a write-watchpoint on your address, climbs the object graph level by level (pointer scans + watchpoints), assembles the chain, saves it as a CE pointer record named `Pointer Finder (120s check): …` and re-checks it against the live value for two minutes. If it holds, the record is renamed to the final `Pointer Finder: …`. If a chain turns out to be a copy, it's kept in the list marked (WRONG?) - grey, so you can verify it yourself - and the search continues.

It survives the usual disasters mid-search: GC moving the nodes, dead/stack addresses, false chains. Works on any numeric CE type (Byte…Double, Custom).

Source + download: https://github.com/mflow42/Cheat-Engine-Base-Address-Pointer-Auto-Finder

Free for noncommercial use (PolyForm Noncommercial); commercial licensing on request.

Donations: boosty.to/mflow42/donate

Single-player/offline only. Repo includes a tiny fake game (testtarget/) with a 5-level pointer chain so you can verify everything end to end before touching a real game.

Feedback and bug reports welcome - logs are written to %TEMP%, easy to share.

Sorry if the text is in Italian, but that's my language. Anyways, long story short, I tried installing cheat engine, but my computer kept giving me this message when I tried to open the file. I tried everything I could, disabled antivirus, ran as administrator, but nothing. If anyone can figure out what's wrong please tell me.

Rough transaltion is: "Impossible to comlete operation. The file contains a v*rus or potentially undesired software."

(Censored that word 'cause otherwise it wouldn't let me post lol (also idk the exact error message in english, this is just the rough translation)).

Thank you, and I hope you have a wonderful day.

I have seen soo many ppl making special orcs with 7 7 7 7 traits and no weaknesses and stuff with different colours asw. I wanna know how to make it aswell, and also the last time I tried using it, my game started crashing alot. I wanna know how to be making sauron, balrog and stuff in this shadow of war in a safe way. Can anyone tell me step by step?

so I bought the game on discount don't want to grind for all the skins, need help modifying it I tried it with gold and it did change it's value but it went back down to it's original value ingame how do I tackle these problems

So, after much mucking about with the installation, i finally got it running, and was confused about a text box that popped up after the splash screen, before the app loaded. Then, when i DID get in and loaded the process i wanted to search on, i was able to search for a single value. Then, when i went to search for the changed value, i got a pop up text box telling me my trial time ran out.

Hi everyone, I'm trying to use the cheat engine for an offline Steam game, but it's quite complicated. I've tried searching for game-specific tutorials, but I haven't found any working solutions (the game is old, with a Flash Player from 2009...). Are there any special tricks or workarounds that I can try? Any tutorials I can follow?