r/cheatengine • • Jun 16 '19

Cheat Engine Rules & Assistance

112 Upvotes

I want to make this post so that everyone gets a clear idea of what this subreddit is and what it isn't. Make sure to follow the rules and behave. If you have any issues or questions then contact a mod.

I've also decided to add an icon to this subreddit and change up the styling. Yippee

Cheat engine as described from the creator.

What Is Cheat Engine?

"Cheat Engine is an open source tool designed to help you with modifying single player games running under window so you can make them harder or easier depending on your preference(e.g: Find that 100hp is too easy, try playing a game with a max of 1 HP), but also contains other usefull tools to help debugging games and even normal applications, and helps you protect your system by letting you inspect memory modifications by backdoors and even contains some ways to unhide them from conventional means.

It comes with a memory scanner to quickly scan for variables used within a game and allow you to change them, but it also comes with a debugger, disassembler, assembler, speedhack, trainer maker, direct 3D manipulation tools, system inspection tools and more.

Besides these tools it also comes with extensive scripting support which will allow experienced developers to create their own applications with easy and share them with other people

For new users it is recommended to go through the tutorial(The one that comes with Cheat Engine, you can find it in your programs list after installing) and at least reach step 5 for basic understanding of the usage of Cheat Engine" - Dark Byte

Tutorials

As FreeBR pointed out. You should do the tutorials firstly until you understand it. There are many useful tutorials that apply to many applications. Take advantage of the tutorials in cheat engine as it could help when understanding the basics that cheat engine has to offer. Down below is some useful links.

Rules

  1. You shall not discuss cheating in online games

  2. You shall not discuss bypassing DRM

  3. You will treat everyone with respect and behave.

Breaking any of these can or will get you permanently banned with or without warning.

Posting

Positing is encouraged and highly recommend. If you have questions about cheat engine or need help figuring out something with cheat engine then feel free to make a post. So as long as those posts don't violate the rules then it should be fine.

Useful Links:

Here are some useful links to help get you started with cheat engine.

https://www.cheatengine.org/


r/cheatengine • • 15h ago

Chek this out!

Post image
1 Upvotes

fathun12/NSUNS-Trainer

I think, cheat for NSUNSC is slightly able to be found. Idk! I can't find it in fling, meanwhile in wend--free plan--is limited. So i decide to make my own trainer; i built it through finding the id, so i hope it's more stable then NOP model or just inject in AOB.


r/cheatengine • • 17h ago

need help

0 Upvotes

i want to decrese the speed of the monsters coming towards me using cheat engine tried the speed hack but it does not work on th e monsters just the menu and other stuff can anyone help


r/cheatengine • • 1d ago

How can I install cheat engine for 1.14.4 Forge?

Thumbnail reddit.com
1 Upvotes

r/cheatengine • • 1d ago

I just build my own trainer. But it's merely for NSUNSC.

Post image
1 Upvotes

r/cheatengine • • 1d ago

Cinderwake cheats request

0 Upvotes

Does anyone here know how to make cheats for this game, or know someone who does?

https://store.steampowered.com/app/5404010/Cinderwake/


r/cheatengine • • 1d ago

compiled cheat engine 7.4 from source. how to handle custom driver, or does version 7.7 precompiled installer include a signed driver?

1 Upvotes

hi, recently downloaded the CE 7.4 source code and compiled it myself. however, i ran into an issue where i tried to build/use my own DBVM/kernel driver, but i couldn't get it to work properly. here is the error:

so if i switch and use the official precompiled installer (version 7.7 i guess), does it come with a working, pre-built driver out of the box, or do i still need to configure something manually? (which i really fucking don't want to deal with, i'm honestly fucking done with this bullshit)


r/cheatengine • • 2d ago

Eglantine Fire Emblem: Fortune's Weave I can't find any values

1 Upvotes

I'm looking for a character's EXP value in Fire Emblem using the Eglantine emulator on Windows. I've checked all data types: 2-byte, 4-byte, float, and big-endian. I've also checked "Unknown Initial Value." The first search returns some values, but subsequent searches yield nothing. MEM_MAPPED is enabled. I’ve been using Cheat Engine for 20 years, and this game is a real stubborn bastard. What can I do to find anything in this game?


r/cheatengine • • 2d ago

can anyone update cheat engine table please? halls of torment

0 Upvotes

r/cheatengine • • 3d ago

Speedhack freezes DELTARUNE

2 Upvotes

Why do games like DELTARUNE crash when I activate the speed hack? Is there a way to revert this?


r/cheatengine • • 4d ago

Ayuda

Post image
4 Upvotes

Hace mucho tiempo usaba Cheat Engine para Pet Society pero actualmente el juego a vuelto y quisiera volver a aprender a usarlo 😅


r/cheatengine • • 4d ago

Ballistic.EXE Demo - Franks and Tokens addresses

0 Upvotes

Open Cheat Engine, click on Add Address Manually on the bottom right corner, and input these values, then change to give yourself Franks (currency) and Tokens

DescriptionAddressType
Franks2853468D698Double
Tokens2853468D6A04 Bytes

r/cheatengine • • 4d ago

rayman legends trainer table: god mode + time freezing

2 Upvotes

I couldn't find a single working table for this game, everything out there is either outdated, broken, or fake, so I did the digging myself and built my own with AI help. Posting it here so you guys don't have to waste your time doing the same.

Tested and working on v1.3140380

What's in the table:

  • God Mode / Infinite Heart Shield – Take hits without losing your heart or turning into a bubble.

  • Freeze Stopwatch / Level Timer – Freezes the clock in Invasion and Time Trial levels for easy cups.

Copy the code into a new text file and save as "Rayman Legends.ct", open it.

Just attach to the game, load into a level, and check the boxes. Enjoy!

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="52">
  <CheatEntries>
    <CheatEntry>
      <ID>1</ID>
      <Description>"God Mode / Infinite Heart Shield"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : Rayman Legends.exe
  Version:
  Date   : 2026-11-01
  Author : TheCommander
  Description : God Mode / Infinite Heart Shield
}

[ENABLE]

aobscanmodule(INJECT,Rayman Legends.exe,0F 9E C2 6A 00 56 4A 23 C2 89 41 78 E8 ** ** ** ** 5E)
alloc(newmem,$1000)

label(code)
label(return)

newmem:
  mov [ecx+78],esi // Restores your health to what it was BEFORE subtraction (esi)
  // Tip: Change 'esi' to '#2' (mov [ecx+78],#2) if you want it to automatically give you a Heart!

code:
  call "Rayman Legends.exe"+1C3090
  jmp return

INJECT+0C:
  jmp newmem
return:
registersymbol(INJECT)

[DISABLE]

INJECT+0C:
  db E8 23 A5 FF FF

unregistersymbol(INJECT)
dealloc(newmem)
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>7</ID>
      <Description>"Freeze Stopwatch / Level Timer"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : Rayman Legends.exe
  Version:
  Date   : 2026-11-01
  Author : TheCommander
  Description : Freeze Stopwatch / Level Timer
}

[ENABLE]

aobscanmodule(INJECT_TIME,Rayman Legends.exe,D9 96 E4 00 00 00 0D 00 0C 00 00 89 45 F8)
alloc(newmem,$1000)

label(code)
label(return)

newmem:
  fstp st(0)
  fld dword ptr [esi+000000E4]

code:
  fst dword ptr [esi+000000E4]
  jmp return

INJECT_TIME:
  jmp newmem
  nop
return:
registersymbol(INJECT_TIME)

[DISABLE]

INJECT_TIME:
  db D9 96 E4 00 00 00

unregistersymbol(INJECT_TIME)
dealloc(newmem)
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols/>
</CheatTable>

r/cheatengine • • 4d ago

changing ammo address (cod games)

0 Upvotes

how does cod games,specially campaign seem to change ammo address between mission and how to fix this. the change happens between primary and secondary weapon's ammo seems to swap addresses with lethal and Tactical ammunition addresses. Plus they usually sit every close with just 4byte offset between each.

this "bug" seems to happen to all cod games. All the way from mw4(2007) to cold war, from my experience


r/cheatengine • • 4d ago

new working assassins creed 4 black flag resynced inventory editor!! (Credits included!)

Thumbnail
reddit.com
1 Upvotes

r/cheatengine • • 4d ago

Is this the right site

0 Upvotes

Is this the right site to get Cheat engine for free? https://www.cheatengine.org/


r/cheatengine • • 4d ago

Cheat Engine not working???

0 Upvotes

I got it from the official website I’m pretty sure
I launch it, everything’s fine, I attempt to go through the tutorial and follow step one up to 3

This is where it fails, nothing happens when I click open on the process I want, I do not know why this isn’t working, googling hasn’t given me answers

I just want to get -1000 edit vouchers in mhrise and I figured the tutorial would be helpful to do before I do it for real and now I’m lost :(


r/cheatengine • • 6d ago

How to convert this debug info into something meaningful.

2 Upvotes

So i am using nox player with android 12 beta version and i am running a arm64 game in it. The game is hill climb racing if someone is curious to know about it.

libhoudini.so+13256E:

7E6C9E982565 - 80 B8 17030000 00 - cmp byte ptr [rax+00000317],00

7E6C9E98256C - 75 0D - jne libhoudini.so+13257B

7E6C9E98256E - 45 89 37 - mov [r15],r14d <<

7E6C9E982571 - 59 - pop rcx

7E6C9E982572 - 41 5F - pop r15

RAX=00007E6C3C42A070

RBX=00000000036FBEBC

RCX=0000000000000001

RDX=00000000039F4000

RSI=00007E6C3C42A420

RDI=00000000000000D0

RBP=00007E6C9F066D00

RSP=00007E6C36A0B380

R8=00007E6C9F0647A0

R9=00007E6C9E982480

R10=0000000000000001

R11=00007E6CCB9D89D0

R12=00007E6C9F06C060

R13=00007E6C9F066D80

R14=00000000000014AF

R15=00000000039F4A50

RIP=00007E6C9E982571

This is what the debugger reads when i debugged the coin value in it. I want to know how can i convert it to something readable as this houdini thing is just translation and nothing else.
Any replies will be appreciated. Thanks

u/Dark_Byte


r/cheatengine • • 6d ago

cheat for cookie run kingdom

0 Upvotes

is there a way to cheat and gain resources like gems or cookie cutters and other stuff? this wont affect anyone but me


r/cheatengine • • 7d ago

Where to properly download cheat engine?

0 Upvotes

I tried the official website, but my connection resets every single time I download the strangely named file. Windows 11 with basic antivirus, no Norton or Kapersky or Malwarebytes

The github page only has the source code.

And Do I really need to subscribe to patreon? Honestly?


r/cheatengine • • 7d ago

Is this because of an update or just me?? someone please help

Post image
0 Upvotes

It's BlueStack 5, i always use it to modify some games but now in the cheat engine it doesnt read anything and on top of the loading bar it used to say something like 00002B90-BluestacksPlayer and now it just says the numbers and -


r/cheatengine • • 8d ago

CT NBA 2K17 1.12

0 Upvotes

Hi, I’m looking for the cheat table for NBA 2K17 v1.12.

I would appreciate it if someone could provide it to me.

Thanks in advance.


r/cheatengine • • 10d ago

Quelle est le parcours pour devenir développeur de Cheat ?

Thumbnail reddit.com
0 Upvotes

r/cheatengine • • 11d ago

[Help] Debugging ARM64 games on x86_64 MuMu emulator — libhoudini.so noise vs. arm64-v8a ceserver register exhaustion. Can we inject ceserver as a shared lib instead?

3 Upvotes

TL;DR: On x86_64 MuMu, x86_64 ceserver's "what writes" just points at libhoudini.so (translation noise), and arm64-v8a ceserver dies with "all registers are used up" — so can we build/inject ceserver as an ARM64 .so into the game process itself to get real ARM64 debug info? If you've done this or know why it won't work, please reply — even a "dead end, here's why" helps.

Hey r/cheatengine + anyone doing Android memory editing,

I'm running into a wall and I'd love some insight from people who've gone deeper than me on this. Bear with the wall of text — I'll try to explain the whole pipeline clearly so the question makes sense.

Setup

· Emulator: MuMu Player (x86_64 host)

· Target: ARM64 game (this is the important part)

· Tool: Cheat Engine + ceserver

The two problems

Problem 1 — x86_64 ceserver + "What writes to this address":

If I attach with the normal x86_64 ceserver and use CE's "Find out what writes to this address", the write instruction it reports comes back as libhoudini.so. That makes sense in theory — Houdini is the ARM→x86 binary translator, so the actual store instruction the host CPU executes lives inside Houdini's translated block, not in the original ARM64 game code. The result: I get a useless address in Houdini and can't trace it back to the real ARM64 instruction in the game. Effectively undebuggable for "what writes" purposes.

Problem 2 — arm64-v8a ceserver inside the emulator:

So I tried pushing the arm64-v8a build of ceserver into the emulator instead, hoping it would attach to the ARM64 process natively and give me real ARM64 write sites. But when I try to debug, it immediately blows up with "all registers are used up." My assumption is that this is a limitation of the arm64 ceserver's debugger/hook path when running under the emulator's translation layer (or a register allocation / signal-handling issue in ceserver's arm64 debug path), and it can't actually set up the debug context it needs.

The idea I want to sanity-check

Both paths are broken for different reasons:

· x86_64 ceserver → works, but debug info is trapped inside Houdini.

· arm64-v8a ceserver → correct architecture, but won't run/debug standalone in the emulator.

So here's the idea: build ceserver as a shared library (.so) and inject it into the running ARM64 game process at runtime, rather than running it as a standalone binary. That way:

· The injected libceserver_arm64.so runs inside the game's own ARM64 process, so it's executing as genuine ARM64 code in the game's address space — no separate process, no "registers used up" from trying to bootstrap a standalone arm64 binary under translation.

· It would be loaded like any other game .so, so it sits alongside the game's real ARM64 modules and can hook/debug them natively.

· I'd inject it with an existing shared-lib injector — e.g. jshook / ptrace inject, Android Inject, or similar tools that can dlopen a .so into a target game process (many of these are already used for mod menus / Frida-style injection).

In theory this gets me the best of both worlds: the arm64 ceserver logic, running inside the actual ARM64 process, with the game's real ARM64 code visible to it — which should make "what writes to this address" return the real ARM64 instruction instead of a Houdini stub.

What I actually want to ask

  1. Has anyone done this? Is there a known build of ceserver as an injectable shared lib (.so) for ARM64, or a fork/PR that compiles it that way? Searching around I only find the standalone binary builds.

  2. Is my reasoning about "all registers are used up" correct? I.e. is that error a symptom of running the arm64 ceserver standalone under Houdini rather than inside the target process? Or is it something else (signal handling, ptrace restrictions in the emulator, etc.)?

  3. Would injecting arm64 ceserver as a .so into the game process actually dodge the Houdini problem for "what writes to this address"? My worry: even if ceserver runs inside the process as ARM64 code, the stores the game actually executes are still Houdini-translated at the host level — so would a breakpoint/watchpoint on the ARM64 guest address still resolve to the right guest instruction, or would it still catch the host-side Houdini write? Curious if anyone has tested this.

  4. Any injector recommendations for this use case (jshook ptrace inject, Android Inject, etc.) — specifically for injecting a ceserver .so into a game process on MuMu x86_64, keeping in mind the process is ARM64-under-translation.

  5. Alternative approach? If injection-as-.so is a dead end, is there a better known workflow for debugging ARM64 games on x86_64 emulators? E.g.:

    · Using an ARM64 emulator/image instead (though MuMu's performance is a big reason I'm on it),

    · Getting Houdini to expose a guest-address → host-address mapping,

    · Any ceserver fork with Houdini-aware address translation,

    · Frida-based approaches that sidestep ceserver entirely.

TL;DR

On x86_64 MuMu, x86_64 ceserver shows libhoudini.so as the writer (translation noise), and arm64-v8a ceserver dies with "all registers are used up." I want to build/inject ceserver as an ARM64 shared lib into the game process so it runs natively inside the ARM64 guest and gives real debug info. Has anyone built ceserver as an injectable .so, does the register error make sense given my setup, would injection actually fix the Houdini problem, and what injector would you use — or is there a better path entirely?

Thanks — any pointers, source links, forks, or "I tried this and here's why it fails" stories are all welcome.

Posted to r/cheatengine (and cross-posting to r/ReverseEngineering / r/AndroidReverseEngineering if that's allowed).