Cheat Wizard (CW) is a Windows x64 memory-scanning and pointer-analysis project written in C++20. It works on user-selected processes through ordinary user-mode Win32 APIs.
Starting with v1.7.3, the primary Windows x64 artifact is a single standalone local builder:
Cheat-Wizard-Builder-<version>-win64.exeCheat-Wizard-Builder-<version>-win64.exe.sha256
Run the builder and choose Build & Launch. It contains the pinned Cheat Wizard source plus a minimal verified llvm-mingw toolchain, compiles the application locally and installs the result into a Cheat-Wizard folder beside the builder by default. The local build does not require Visual Studio, CMake, Git or a network download.
The generated folder contains Cheat Wizard.exe, cw-engine.exe, cw-trainer-builder.exe, locales, licenses and build manifests with SHA-256 hashes. The CLI (cw.exe) remains available to source developers and CI but is not part of the end-user folder.
This distribution model is source-first and reproducible; it is not an antivirus bypass. If Windows Security classifies a downloaded builder or generated file as malicious, do not disable Defender or add exclusions merely to run it. The project tracks those detections separately as release-validation issues.
For the current stable build, use the latest release. Source builds from main are continuously validated by the Windows build/test workflow.
Cheat Wizard deliberately separates its tools:
| Executable | Responsibility |
|---|---|
Cheat-Wizard-Builder.exe |
End-user bootstrap: contains pinned source + portable toolchain and builds the complete Cheat Wizard folder locally. |
Cheat Wizard.exe |
Visual frontend: scanner, watched addresses, write/freeze, pointer discovery/rescan, .cwptr profiles and .cwtrainer project creation. Live-process operations go through the local engine IPC boundary. |
cw-engine.exe |
Local process/memory engine generated on the user's machine and accessed through the versioned Named Pipe protocol. |
cw-trainer-builder.exe |
Offline packager: .cwtrainer + .cwptr files -> one standalone trainer EXE. |
cw.exe |
CLI frontend for source builds / CI. It is not included in the end-user folder. |
generated MyTrainer.exe |
Standalone trainer. No Cheat Wizard/Python/JSON/profile files are required beside it. |
cw.exe is not an RPC server and is never a runtime dependency of a generated trainer.
The frontend/engine split is implemented. Cheat Wizard.exe and cw.exe communicate with a dedicated local cw-engine.exe through the versioned Named Pipe protocol 1.1; frontend and engine must agree on the protocol version before process operations are accepted. The GUI binary is build-gated so direct live-process memory/toolhelp APIs cannot be reintroduced accidentally. The end-user standalone builder generates cw-engine.exe directly together with the GUI. To rebuild or repair the application, run Cheat-Wizard-Builder.exe again. Generated Trainers remain self-contained and do not depend on the interactive engine.
See docs/ENGINE_ARCHITECTURE.md and docs/PRODUCT_BUILDER.md.
The GUI loads UTF-8 JSON locale files from the locales/ directory beside Cheat Wizard.exe.
Included initially:
locales/en-US.jsonlocales/pt-BR.json
The language selector is shown in the GUI footer. The selected locale is persisted in cw-settings.json beside the executable. If the configured locale is missing, malformed or incomplete, Cheat Wizard falls back to compiled English strings and remains usable.
Locale discovery is dynamic: to add another language, place another flat JSON file in locales/ with a valid _meta.code. No hard-coded language registry or rebuild is required. See docs/BRANDING_LOCALES.md for the locale contract and compatibility rules.
- The public Windows release is now the standalone
Cheat-Wizard-Builder.exe, which embeds pinned source plus a verified, dependency-pruned llvm-mingw toolchain and builds the application locally. - The graphical frontend is emitted as
Cheat Wizard.exe;cw-engine.exeandcw-trainer-builder.exeare generated beside it by the builder. - GUI process/memory operations are isolated behind the local engine IPC boundary, currently protocol 1.1.
- Exact Float scans preserve exact historical behavior by using zero implicit tolerance unless another frontend explicitly supplies one.
- Pointer discovery now supports Auto, Indexed and Targeted strategies. Auto can fall back from a bounded global index to the targeted layered search, while the Deep preset uses targeted mode directly.
- Pointer diagnostics expose index/search limits, targeted frontier progress and fallback state instead of silently returning an empty result after a partial search.
- Scanner result ranking, watched-address write/freeze, restart-based pointer rescans, redundant
.cwptrprofiles and the visual Trainer Builder remain part of the native GUI. - External UTF-8 locales remain dynamic, with
en-USandpt-BRincluded by default.
select process -> Attach
-> First Scan / Next Scan
-> add correct address to Address List
-> Pointers -> discover chains
-> restart game/process -> find new address -> Rescan
-> repeat until stable
-> Save .cwptr
-> Trainer -> add .cwptr
-> Save .cwtrainer
-> cw-trainer-builder.exe -> single standalone EXE
The Scanner workspace supports Byte, Int16, Int32, Int64, Float, Double and mixed/unknown workflows. Watched addresses display scan value separately from the live current value. Write is read-back verified and Freeze uses a separate worker.
The Pointer workspace supports restart-based stability rescans, module-relative roots and redundant profile persistence. Fast/Balanced use the indexed path with Auto fallback when needed; Deep uses the targeted layered search directly so it is not dependent on the global pointer-index ceiling. .cwptr profiles contain module-relative roots and signed offsets, not restart-stale absolute heap addresses. Legacy .mcptr profiles remain loadable.
Examples:
cw> processes
cw> attach-name target.exe
cw> scan int32 100
cw> next 83
cw> results 20
cw> set #0 250
cw> freeze #0 250
Unknown/mixed scan:
cw> scan all unknown
cw> next decreased
cw> next unchanged
cw> results 20
AOB/signature scan:
cw> aob-module-code target.exe 48 8D 0D ?? ?? ?? ??
cw> aob-results 20
cw> aob-decode #0
Pointer tools:
cw> pointer-scan #0 4 0x1000 10000
cw> pointer-results 20
cw> pointer-save stable.cwchain
See docs/COMMANDS.md and docs/QUICKSTART.md for the full CLI surface.
.cwscan: materialized value-scan session (.mcesremains readable)..cwaob: AOB/signature session (.mcearemains readable)..cwchain: raw pointer-chain set (.mcepremains readable)..cwmap: pointer map (.mcpmremains readable)..cwptr: redundant pointer profile intended for persistent use/trainers (.mcptrremains readable)..cwtrainer: trainer project consumed bycw-trainer-builder.exe; new projects usecheat-wizard-trainerversion 1 and the builder also accepts legacyminice-trainerversion 1.cw-settings.json: local GUI settings, currently including the selected locale.
No development environment is required. Download the release Cheat-Wizard-Builder-<version>-win64.exe, run it, and click Build & Launch. The builder works offline after download and places the locally compiled application in a Cheat-Wizard folder beside itself.
For automated validation, the same executable supports:
Cheat-Wizard-Builder.exe --headless --output-dir C:\Temp\Cheat-WizardRequirements:
- Windows 10/11 x64
- Visual Studio 2022, Desktop development with C++
- CMake 3.20+
build-release.batCMake builds the CLI, GUI, engine, trainer runtime/template, trainer builder and optional standalone builders when their prepared payload ZIPs are supplied. Run tests with:
test-windows.batTagged releases prepare the pinned source/toolchain payload, build and smoke-test Cheat-Wizard-Builder.exe, scan the distributed builder and locally generated output with Microsoft Defender, then publish the builder plus its SHA-256 sidecar to GitHub Releases.
src/ C++ core / native CLI
include/cw/ reusable Cheat Wizard algorithms and public headers
portable_win/ portable no-CRT Windows CLI/GUI/trainer tools
locales/ external UTF-8 GUI locale JSONs
cmake/ build helpers, including runtime embedding
scripts/ release packaging and release-notes automation
docs/ architecture, GUI, trainer, validation and commands
tests/ core and mocked Win32 tests
examples/ example trainer project
bin/ developer/reference Windows x64 binaries and compatibility fixtures
Cheat Wizard is open source under the Apache License 2.0. See LICENSE for the full terms.
Redistributions and derivative works must comply with the Apache-2.0 attribution requirements, including preservation of the applicable attribution notice in NOTICE. The project NOTICE credits FlokiTV as the original Cheat Wizard developer.
Cheat Wizard is a user-mode research/debugging tool. It does not include kernel drivers, protected-process bypasses, anti-cheat bypasses, stealth injection or code-injection features. Use it only with software/processes you are authorized to inspect or modify.