Cheat Engine Explained

Author:Eric "Dark Byte" Heijnen
Developer:Community
Released:2000
Programming Language:Object Pascal, C
Operating System:Windows, macOS,[1] Linux (Wine, Server/Client for Linux processes)[2]
Language:English, French, Italian, Russian, Chinese (China), Chinese (Taiwan)
Language Count:6
Language Footnote:[3]
License:Proprietary, source available, freeware
Genre:Reverse engineering, debugging, disassembler

Cheat Engine (CE) is a proprietary, source available freeware memory scanner/debugger created by Eric Heijnen ("Byte, Darke") for the Windows operating system in 2000.[4] [5] Cheat Engine is mostly used for cheating in computer games and is sometimes modified and recompiled to support new games. It searches for values input by the user with a wide variety of options that allow the user to find and sort through the computer's memory. Cheat Engine can also create standalone trainers that can operate independently of Cheat Engine, often found on user forums or at the request of another user.

While it is source-available, it is not free and open source software, as its license contains restrictions on redistribution.[6]

Features

Cheat Engine can view the disassembled memory of a process and allow the addition and/or alteration of game states to give the user advantages such as infinite health, time, or ammunition. It also has some Direct3D manipulation tools, allowing vision through walls "Wallhacking" and zooming in/out "FOV changes", and with some advanced configuration, Cheat Engine can move the mouse to get a certain texture into the center of the screen. This is commonly used to create aimbots. However, the main use for Cheat Engine is in single player aspect of games, and its use in multiplayer games is discouraged.[7]

As of version 6.1, Cheat Engine can produce game trainers from the tables. While trainers generated in this way are typically very large for their intended purpose, generally used for testing purposes, some have been released by trainers groups as "final" versions,[8] and even some popular sites are fully based on CE trainers[9] due to the ease of trainer creation with CE. However, despite their popularity, CE trainer maker has not been updated since its implementation in version 6.1—it is largely unsupported, and emphasis is given on using Lua to generate trainers. Even the trainer maker itself uses Lua scripts to generate trainers.

Implementations

Two branches of Cheat Engine exist, Cheat Engine Delphi and Cheat Engine Lazarus. Cheat Engine Delphi is primarily for 32-bit versions of Windows XP. Cheat Engine Lazarus is designed for 32 and 64-bit versions of Windows 7. Cheat Engine is, with the exception of the kernel module, written in Object Pascal.

Cheat Engine exposes an interface to its device driver with dbk32.dll, a wrapper that handles both loading and initializing the Cheat Engine driver and calling alternative Windows kernel functions. Due to a programming bug in Lazarus pertaining to the use of try and except blocks, Cheat Engine Lazarus had to remove the use of dbk32.dll and incorporate the driver functions in the main executable.

The kernel module, while not essential to normal CE use, can be used to set hardware breakpoints and bypass hooked API in Ring 3, even some in Ring 0. The module is compiled with the Windows Driver Kit and is written in C.[10]

Cheat Engine also has a plugin architecture for those who do not wish to share their source code with the community. They are more commonly used for game specific features, as Cheat Engine's stated intent is to be a generic cheating tool. These plugins can be found in several locations on the Cheat Engine website as well as other gaming sites.[11]

Cheat Engine Lazarus has the ability to load its unsigned 64-bit device driver on Windows Vista and later x64 bit versions of Windows, by using DBVM, a virtual machine by the same developers that allows access to kernel space from user mode. It is used to allocate nonpaged memory in kernel mode, manually loading the executable image, and creating a system thread at Driver Entry. However, since the Driver Entry parameters are not actually valid, the driver must be modified for DBVM.

Cheat Tables

Cheat Engine allows its users to share their addresses and code locations with other users of the community by making use of cheat tables. "Cheat Tables" is a file format used by Cheat Engine to store data such as cheat addresses, scripts including Lua scripts and code locations, usually carrying the file extension .ct. Using a Cheat Table is straightforward and involves simply opening the Cheat Table through Cheat Engine and enabling/ticking the cheats stored within it. The ability to save and share Cheat Tables has resulted in a large online community for sharing cheats through the Cheat Engine Forums. Popular Cheat Tables are hosted on the Fearless Revolution website.[12]

In addition to simple memory addresses, cheat tables can extend the functionality of Cheat Engine using the Lua scripting language. Almost all of Cheat Engine's features are scriptable, and it is even possible to design custom dialogs to interact with scripts.

Controversy

In 2017, the Entertainment Software Association (ESA) sent a copyright infringement notice asking Eric Heijnen to cease and desist. The notice claimed Cheat Engine allowed evading anti-cheat technologies, accessing in-game DLC items/microtransaction items that could only be bought with real money. Eric Heijnen responded by shutting down the cheat tables section to the public, asking them to be hosted off-site and coming to an agreement with ESA.[13] The Cheat Engine community was not happy with the steps taken, and prominent members moved to a new community website called Fearless Revolution where old cheat tables have been uploaded and new ones are being posted. The Cheat Engine website and forums only focus on development of the tool itself now, and cheat tables have moved to Fearless Revolution forums.[14] [15]

Malware distribution

The installers of Cheat Engine are known to include potentially unwanted programs which are often bloatware or malware, and as a result, most anti-virus software detects the installer as a virus.[16] [17] Bloatware-free versions are generally available on the product's Patreon page, or users can build the program from the GitHub repository through any Pascal compiler.[18]

Notes and References

  1. Web site: Port To Mac. 17 June 2011. forum.cheatengine.org. 3 November 2014. https://web.archive.org/web/20141103053451/http://forum.cheatengine.org/viewtopic.php?t=221190&start=30. live.
  2. Web site: Linux port. Dark Byte. 21 August 2016. forum.cheatengine.org. CE can be used on wine in windows processes and linux processes with the server/client (run the client in wine). 1 January 2015. https://web.archive.org/web/20150101100530/http://forum.cheatengine.org/viewtopic.php?p=5413940#5413940. live.
  3. Web site: cheat-engine/Cheat Engine/bin/languages at master · cheat-engine/cheat-engine. 2022-01-06. GitHub. en. 2018-06-11. https://web.archive.org/web/20180611020719/https://github.com/cheat-engine/cheat-engine. live.
  4. Web site: When was Cheat Engine first released?. Heijnen. Eric. cheatengine.org. 2024-05-21. 2023-06-09. https://web.archive.org/web/20230609034233/https://www.cheatengine.org/forum/viewtopic.php?t=608620&sid=d8d58343632df820e9643727eabb3b70. live.
  5. Web site: About Cheat Engine. Heijnen. Eric. cheatengine.org. 2008-03-20. 2021-04-07. https://web.archive.org/web/20210407050420/https://www.cheatengine.org/aboutce.php. live.
  6. Web site: License.txt . . 2022-04-19 . 2022-02-08 . https://web.archive.org/web/20220208223052/https://github.com/cheat-engine/cheat-engine/blob/master/Cheat%20Engine/release/License.txt . live .
  7. Web site: Cheat Engine :: FAQ. forum.cheatengine.org. August 28, 2016. August 24, 2016. https://web.archive.org/web/20160824174033/http://forum.cheatengine.org/faq.php. live.
  8. Web site: CE Trainers Mass Use . 2012-05-18 . 2012-05-18 . Deviated Trainers . dead . https://archive.today/20130121233130/http://deviatedtrainers.com/sniper-elite-v2-trainer . 2013-01-21 .
  9. Web site: Cheat Engine trainers popularity. 20 October 2019. fearlessrevolution.com. 7 March 2017. https://web.archive.org/web/20170307130212/https://fearlessrevolution.com/viewforum.php?f=5. live.
  10. Web site: Cheat Engine - Trac - compileinfo.txt . Kevin . Valk . 2008-12-20 . 2008-03-20 . . dead . https://web.archive.org/web/20090819032635/http://ce.colddot.nl/browser/Cheat%20Engine/DBKKernel/compileinfo.txt . 2009-08-19 .
  11. Web site: Contributing to CE. 2008-03-20. 2007-01-24. forum.cheatengine.org. 2008-03-03. https://web.archive.org/web/20080303083216/http://forum.cheatengine.org/viewtopic.php?t=58063. live.
  12. Web site: Cheat Tables Location.. 2013-03-27. 2004-10-14. fearlessrevolution.com. 2022-06-14. https://web.archive.org/web/20220614210419/https://fearlessrevolution.com/. live.
  13. Web site: The ESA claim .. 2017-02-26. forum.cheatengine.org. live. https://web.archive.org/web/20180917143448/https://forum.cheatengine.org/viewtopic.php?p=5719224. 2018-09-17. 2017-02-26.
  14. Web site: Cheat Tables Location. 2017-03-31. 2017-03-03. fearlessrevolution.com. 2022-01-09. https://web.archive.org/web/20220109165533/https://fearlessrevolution.com/viewforum.php?f=4. live.
  15. Web site: Major video game publishers target memory scanner Cheat Engine with questionable copyright infringement notices. Bakker. Raymond. 2017-03-25. ZeroLives. 2017-03-31. 2020-11-12. https://web.archive.org/web/20201112004400/https://zerolives.com/article/trgskQ6z/major-video-game-publishers-target-memory-scanner-cheat-engine-with-questionable-copyright-infringement-notices. live.
  16. Web site: Cheat Engine :: View topic - OMG VIRUS!!! . 2022-04-02 . www.cheatengine.org . 2023-01-23 . https://web.archive.org/web/20230123202824/https://www.cheatengine.org/forum/viewtopic.php?t=24363&sid=92f23d0d37df6fc962117bf0a47382e1 . live .
  17. Web site: Cheat Engine installs malware/crapware without consent · Issue #322 · cheat-engine/cheat-engine . 2022-04-02 . GitHub . en . 2022-04-02 . https://web.archive.org/web/20220402115640/https://github.com/cheat-engine/cheat-engine/issues/322 . live .
  18. Web site: Cheat Engine :: View topic - How to download Cheat Engine installer without malware? . 2022-06-03 . www.cheatengine.org . 2023-01-23 . https://web.archive.org/web/20230123202821/https://www.cheatengine.org/forum/viewtopic.php?p=5775851&sid=32a1faf94a48e76cdf0bddee1a9387a5 . live .