Cheat Tool Set

Cheat Tool Set Pro is a professional reverse engineering tool like CE written in #C .NET and C++.
It is more user friendly than CE with unique features. You can download the latest free version: v1.21

Changelog for v121: https://overlayhack.com/cheat-tool-set#860
Current version in development: 1.22 PRO

The tool is coded and designed from the beginning for dynamic analysis and reverse engineering in general.
If you're a student or hobbyists that requires the right tool for your reverse engineering jobs. This is exactly what you've been waiting for.

The professional X version is available for a one-time payment of $279,00 USD https://overlayhack.com/order
You must be PayPal verified user to purchase. Instant activation after payment. The PRO version price is reasonable considering the current
and the upcoming future features.

This is the official site of the software. The tool is a work in progress. Cheat Tool Set PRO is the same as the X version.

FEATURES

Memory scanner (Currently uses up to 12 threads depending on your CPU)
Memory viewer / editor
Memory pointer scanner (X)
Debug viewer (X)
IAT (Import Address Table) scanning tool - If nothing else works. Try this.
Windows debugger: Read (Find out what accesses this address), Write (Find out what writes to this address) and Instruction execute (Find out what addresses this instruction accesses).
Disassembler - Includes a built-in assembly signature maker that attempts to generate unique signatures
Dump strings tool
Dump a process and it's modules
A basic DLL injector

MAIN VIEW

The screenshots represents the version 1.20

1264:759


WHAT IS THE DIFFERENCE COMPARED TO THE COMPETITION?

Unique features that the competition does not offer. Some features are simply better and more user friendly.
To mention a few. The float value scan returns exactly what you was after (a reasonable values).
To cut a long story short: Previously unfound values can be found with the tool. The tool's memory viewer itself makes a difference to the competition. Check
below screenshot of the memory viewer. Imagine you would be doing all that manually with CE ...

You will save a lot of time and money when you learn to use the tools unique features such as the "Debug viewer" and custom pointer path scan
(allowing you to connect things from an entry point) speeding your work up to 10 times vs any competition.

MEMORY VIEWER/EDITOR

When the process restarts. The view automatically updates according to the process.

1417:875


DISASSEMBLER

1680:1008


POINTER SCANNER

711:923


NOTES

The tool supports only 64-bit (x86_64) processes.

Supported operating systems: Windows 7/8.x/10
Requires .NET Framework 4.7.2 or newer

All the settings can be edited directly to the INI. Offsets are mainly entered as hex values.

When you use the "Include the result if the value has changed ...", you can no longer press the next scan button because the number of times the value has changed
is not saved in the result files.

By default the disassembler disassembles the current and the next function.

The code and IDA style signatures does not require a mask to be entered.

"Array of bytes" scan supports the following formats:
1.
2.
3.
4.
5.

01 02 03
x01 x02 x03
0x1 0x2 0x3
8B 81 ? ? ? ? 48 8B D9 85 C0 7F 0E



When scanning for sequence of bytes (pattern scan), also known as an array of bytes scan. You will have to press the "Reset scan" button if you wish to scan for a new
signature.

"Exact value" float scan: "Value to find" is automatically truncated to four decimal places double value. No rounding is done to that value.

MEMORY VIEWER

Left click on the first address to select it and then click the node text again to edit the address of the root node.
Right click on the offset to select the action. The default alignment is 8 Bytes.

Pointer scanner

"Generate a pointer map" feature is almost mandatory for scans larger than a level 3 and 0x0400. You do not have generate a pointer map for a custom path scan.
"The first element of pointer must point to virtual function table" enables the "Class pointer rule check".

DEBUGGER

Currently only one HWBP (hardware breakpoint) is supported.

DISASSEMBLER

You can jump to an address (goto address) with the 'g' key. Editing the root node address does the same without opening a new instance or tab.

Tutorials

-

Data types

Byte: 0 - 255
2 Bytes: -32768 - 32767
4 Bytes: -2147483648 - 2147483647

Byte MinValue: 0 Byte MaxValue: 255
Int16 MinValue: -32768 Int16 MaxValue: 32767
UInt16 MinValue: 0 UInt16 MaxValue: 65535
Int32 MinValue: -2147483648 Int32 MaxValue: 2147483647
UInt32 MinValue: 0 UInt32 MaxValue: 4294967295
Int64 MinValue: -9223372036854775808 Int64 MaxValue: 9223372036854775807

The source code

The source code is not currently available to maintain the uniqueness of the software. Therefore the executable is heavily obfuscated. This may result in false positives in AV's.

If you find a bug or a logic issue. Always mention which CTS version and briefly describe the issue.

DOWNLOAD

The free version: https://overlayhack.com/CTS_v121.rar
#44
Title:
mooreb6672 wrote:
06/21/2018 19:03 - 775 days 18 hours 47 minutes
#44
I don't even know where to begin to learn how to get this working through net code or even how to write it.. you sir are a genius.
#50
Title: Cheat Tool Set v1.01
Administrator
06/26/2018 15:19 - 770 days 22 hours 32 minutes
#50
Changelog for 1.01:

- Fixed an issue with "A sequence of values" scan with value type "Hex".
- "A sequence of values" scan supports now also the following data types: "Byte" and "2 Bytes"
- "A sequence of values" scan can now find values that are padded by "n" bytes
- Added "2 Byte" alignment in memory viewer
- Added "Browse this address in memory viewer" option in main view
#52
Title:
x3noic wrote:
06/28/2018 00:25 - 769 days 13 hours 25 minutes
#52
i get error in w10 x64 when try open this
https://imgur.com/ZwHfZmV
#53
Title:
A visitor wrote:
06/28/2018 01:42 - 769 days 12 hours 8 minutes
#53
#52 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/52

Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.

Type "winver" into the Start menu, and press Enter to find out which version.
#56
Title:
x3noic wrote:
06/29/2018 00:24 - 768 days 13 hours 27 minutes
#56
A quote. #53 Originally posted by A visitor



#52 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/52



Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.



Type "winver" into the Start menu, and press Enter to find out which version.



my w10 version is 17134.112 x64

maybe is this.

#58
Title:
Administrator
06/30/2018 21:46 - 766 days 16 hours 5 minutes
#58
#56 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/56

What version it exactly is? Please provide a screenshot of "winver" output.

The fix is simple that I've applied. If that does not fix it for you, I have no idea.

You will have to wait for 1.02.
#69
Title: Cheat Tool Set v1.02
Administrator
07/02/2018 21:39 - 764 days 16 hours 12 minutes
#69
Changelog for 1.02:

- Synchronize concurrent dictionary entries (in memory results of a current scan) accordingly with main view.

- Fixed a possible crash (unhandled exception) upon starting the software that occurred on some systems: https://overlayhack.com/cheat-tool-set/52

- Unknown initial value scan supports now also the following data types: "Byte" and "2 Bytes"

- Added an option to narrow down results in main view based on a value times changed count

The last feature requires a little more explanation:

Normally when you scan for a byte value (0 or 1). This scan type is the most difficult due to the fact there are a lot more of results compared to any other scan.

You usually use game mechanics to get values changed according to your preference i.e opening or closing something in the menu.

What if those values are constantly changing between 0,1 or changing between any other byte values and there are several hundred or thousands of results and you can't get the list any smaller?

This is exactly where this feature is coming from. You know the exact count as you're using game mechanics ...

#94
Title: Cheat Tool Set v1.03
Administrator
07/11/2018 22:45 - 755 days 15 hours 6 minutes
#94
Changelog for 1.03:

Main:

Fixed an issue with exact float value scan
Fixed an issue with "Unknown initial value" scan
Fixed an issue with "Decreased value by ..." scan
Fixed an issue with "Increased value by ..." scan

Value finder: Various bug fixes.
Memory viewer: Added 1 Byte alignment

Use interlocked increment in threads instead of a lock.
#110
Title: Cheat Tool Set v1.04
Administrator
07/24/2018 19:55 - 742 days 17 hours 55 minutes
#110
Changelog for 1.04:

Main:

Disable I/O counter for now as it seemed to cause delays in usage update
Fixed an issue with "A sequence of values ..." scan. Produce results according to the scan.

Memory viewer:

Added the following types: Matrix 4x4, Matrix 3x4 and Matrix 3x3
Fixed an issue with switching between types before clearing the type
Added "Browse this address in memory viewer"
#118
Title:
Smokahontas wrote:
08/02/2018 23:56 - 733 days 13 hours 55 minutes
#118
Would be amazing if you implement a ultimap-like tool, based in this program (https://github.com/glmcdona/FunctionHacker) , (https://www.youtube.com/watch?v=P0UXR861WYM)

Cause Ultimap is a shit xD
#122
Title:
Administrator
08/03/2018 17:14 - 732 days 20 hours 37 minutes
#122
A quote. #118 Originally posted by Smokahontas

Would be amazing if you implement a ultimap-like tool, based in this program (https://github.com/glmcdona/FunctionHacker) , (https://www.youtube.com/watch?v=P0UXR861WYM)

Cause Ultimap is a shit xD


If you just want to get those values, seemed to me a way too complicated method. There are more important features in my list to be implemented.

Implementing debugger related features are the most difficult and time consuming. However my plan is to add CE equivalent VEH debugger (most of it has already been implemented a long time ago) but I haven't wrote a GUI for it yet.

I have improvements in my mind for CE feature "Find out what addresses this instruction accesses" that I need.

PS. What comes to function call count in the video. What for you need that? Are not you more interested about the calling function etc.? CE's "dissect" etc. What IDA does with XREF's and so forth ...
#137
Title: Cheat Tool Set v1.05
Administrator
08/14/2018 20:28 - 721 days 17 hours 23 minutes
#137
Changelog for 1.05:

Main:

"A sequence of values ..." scan for float values can be used like an exact float value scan ie. Value1: 5.6119 Value2: -0.1688

Added the "Smaller than ..." and "Bigger than ..." comparison for "Next scan"

"Change value of the selected address" supports now the same data types as "Memory viewer" editor

Fixed most of the UI lag during a scan

"Exact value" float scan is actually a double value scan allowing you to find values that has more than 7 significant digits. This logic also applies for "A sequence of values ..." float scan.

Pointer scanner:

Load results file accordingly to a stored pointer path (no more extra "0x00"'s in a pointer path)

Fixed an issue with re-scan after loading a results file

Fixed an issue with class pointer rule check

Added an option to load plain text results file (results will be converted to a binary format "RESULTS.PTR" upon loading)

Memory viewer:

Resolve imports is now as an option rather than attempting automatically resolve api names

Truncate float values to double values (four decimal places) by default instead of rounding

Added support for displaying unicode strings. A " L " sequence.

Value finder:

Fixed an issue with class pointer rule check
#140
Title: Just wondering why not make this work with 32bit???
A visitor wrote:
08/19/2018 03:19 - 717 days 10 hours 32 minutes
#140
Would love to try this tool, but most things I want to play around with are 32bit. Is there any particular reason you didn't add comparability. I figure it makes things much harder, but just wondering (as a future coder)



Either way, glad I found this. Will keep this in mind for whenever I do plan on hacking away at a 64bit app.



Great work





drp
#144
Title:
Administrator
08/19/2018 20:56 - 716 days 16 hours 55 minutes
#144
#140 Originally posted by A visitor : https://overlayhack.com/cheat-tool-set#140

It's 2018 ... Are not major games only x64? I never designed the tool for both. After thinking about this. It would be simpler to write a separate version that is x32 only.

However I've no time for that. Unless someone hire me for that. I won't be bothering with anything less than $2499 for that version. Otherwise it is very unlikely to happen that I come with a version that supports 32-bit processes.

There are various features to be added and fixes to be done in the current x64 version. I add each features/fix in an order I need most.

Adding support for 32-bit processes in the current version would just make the software a way too complicated and even more prone to bugs.

I try to provide as soon as possible the source code of the software as a commercial source.

I never realized until now that coding a software like this is a full day job. What I mean by this? A software like this is not an ordinary software that is easy to code.

It requires experience from reverse engineering community. I say this so you know that adding a support for 32-bit processes does not happen by snapping a fingers especially when the software was never designed this way.

#147
Title: Cheat Tool Set v1.06
Administrator
08/24/2018 16:47 - 711 days 21 hours 4 minutes
#147
Main:

Added "Array of bytes" scan

Pointer scanner:

Pointer map generation is significantly faster than in any prior release
Fixed issues when "Generate a pointer map" was enabled
Results are sortable by a column

Value finder:

The maximum offset can be bigger than 0x7FFF
Fixed an issue with re-scan

Memory viewer:

Execute "Add" on a background thread to avoid UI thread "Stopped from responding" when adding a 102400 bytes
#160
Title: lack......
A visitor wrote:
09/10/2018 16:34 - 694 days 21 hours 17 minutes
#160
Three things,

the first: Manual

Second: Spanish language translator please

Third: I congratulate you, it's a great job.
#181
Title:
Administrator
09/27/2018 10:27 - 678 days 3 hours 24 minutes
#181
A quote. #160 Originally posted by A visitor



Three things,


the first: Manual


Second: Spanish language translator please


Third: I congratulate you, it's a great job.


The source code of the software is available for purchase. You can translate it yourself. I only maintain english version of the software.
#182
Title: Cheat Tool Set v1.07
Administrator
09/27/2018 10:33 - 678 days 3 hours 18 minutes
#182
Main:

Fixed a 'NullReferenceException' upon finishing a "A sequence of values ..." scan
Fixed an issue in "A sequence of values ..." float scan when (3) values were entered
Fixed an issue with "A sequence of values ..." scan
Fixed an issue with "Unknown initial value" scan "Next scan button" after first scan was completed

Added windows debugger. "Find out what accesses this address" and "Find out what writes to this address"

Pointer scanner:

Added "Keep pointer map in memory" feature for faster subsequent scans
Added a re-scan feature: "Dereference pointer paths continuously"
Fixed an issue while tranforming pointer paths smaller than the maximum level
Fixed an issue with loading plain text result file
Fixed an issue with "The smallest pointer path" after completing a re-scan
Fixed a problem with loading the results file when a pointer map was generated

Memory viewer:

Fixed an unhandled exception 'Cannot access a disposed object.' This should fix also occasional "Cheat Tool Set has stopped from responding" issue

Value Finder:

Use concurrent dictionary instead of a list to avoid "InvalidOperationException" exception while updating the list.

Synchronize concurrent dictionary entries (in memory results of a current scan) accordingly with a view.

Source code:

Various code cleanups and added more documentation.
#212
Title: Cheat Tool Set v1.08
Administrator
10/15/2018 19:10 - 659 days 18 hours 41 minutes
#212
Main:

"First scan" has been optimized a bit and is at least two times faster than in any prior release
"Next scan" has been optimized and is considerably faster than in any prior release

"Unknown initial value" scan: Added an option to dump process memory to file instead of using an in memory copy

"Unknown initial value" scan: Added "Smaller than ..." and "Bigger than ..." comparison
Renamed "Value finder" to "Debug viewer" as it is more appropriate name
Restored I/O stats (seems to work reliably now)

The cancel button should work now

Debugger:

Resolve prior assembly instruction more reliably

Added 'Replace with code that does nothing (NOP)'
Added 'Restore the original instruction' for your convenience
Fixed an issue that prevented some instructions from appearing in the list
Attempt to show also "register + offset" value in the output

Debug viewer:

Fixed an issue with "String value" scan that prevented results from appearing in the list
Added unicode string support

Minor other bug fixes
#252
Title: Cheat Tool Set v1.09
Administrator
11/05/2018 14:26 - 638 days 22 hours 25 minutes
#252
The main view:

Added INI settings file
Added general settings to the edit menu
Added general setting "Remember window positions" and an option to save current positions with a click of a button
Added general setting "Check for update at program startup". The default is to check for update.
Added general setting "Minimize console upon starting the software".

Added "String" scan including Unicode (UTF-16) string support
Added "Pointer scan for this address"

"Unknown initial value" scan has been optimized. "First scan" and "Next scan" is considerably faster than in any prior version.
"A sequence of values" scan has been optimized. It is about 3 times faster than in any prior version.
Added 8 Bytes support for "A sequence of values ..." scan

Added an option to add address manually to the list

Debugger:

Resolve prior assembly instruction correctly.

Memory viewer:

Added "Scan for pointers for this address"
Added "Scan for pointers for pointer value"
#508
Title:
Administrator
01/14/2019 01:25 - 569 days 11 hours 26 minutes
#508
I've taken the download off for now ...
#532
Title:
teknically wrote:
01/19/2019 18:32 - 563 days 18 hours 19 minutes
#532
When will the tool be back
#582
Title: Cheat Tool Set v1.10
Administrator
02/07/2019 11:37 - 545 days 1 hours 14 minutes
#582
Added "Dump strings" tool

The main view:

Added support for double value scans
Addressess can now be sorted by a column
Fixed an issue when adding a 8 bytes value manually
Fixed an issue when removing manually added addresses

Memory viewer:

Fixed an issue with the "Clear type" for the following types: Vector2, Vector3 and Vector4
Display possible double values when alignment is 8 bytes
Added an option to restore the original value

Added a disassembler. "Disassemble this memory region"

Pointer scanner:

Fixed an issue when "Include pointers that point to my module" was enabled

Debug viewer:

Added "Unknown initial value" scan
Removed string scan type
Added support for hex values

Rescan can now scan for: Increased value, Increased value by, Decreased value, Decreased value by, Changed value, Unchanged value, Smaller than, Bigger than

PS.

Some of the features are only available in the professional version, which will be available later. Professional version requires registration.
#630
Title: Cheat Tool Set v1.11
Administrator
03/06/2019 22:00 - 517 days 14 hours 50 minutes
#630
Memory editor: Added "Modify the value as double value"
Debug viewer: Added support for double value scans

Debugger: Fixed an issue with GUI when items are added to list

Settings: Added "Use this directory for result files"

Dump strings:

Remove new line characters from a string
Added "Match case".

PS.

The professional version will soon be available under a different name. It's free but requires registration.
#714
Title: Cheat Tool Set v1.12
Administrator
04/28/2019 13:48 - 465 days 0 hours 3 minutes
#714

The main view:

Allow a wildcard byte "?" in "Array of bytes" scan. (Applies also to the free version)
Added a mini disassembler
Process list: Verify that the current process has rights to open a process before listing it

Memory viewer:

Added "Disassemble from this address"
Added "Round values". By default the values are truncated to a 4 decimal places without rounding
Added "Virtual function table (vtable)" support

Added "Copy hex value". This works when the mode is "Disassembly" or when the type has been defined as Virtual function table (vtable)

Added the signature maker in the disassembler
Minor bug fixes

The professional version is available but requires registration.
#717
Title:
x3noic wrote:
05/01/2019 02:23 - 462 days 11 hours 27 minutes
#717
the debug function is detected when is used in bfv?
#721
Title:
Administrator
05/02/2019 18:10 - 460 days 19 hours 41 minutes
#721
https://overlayhack.com/battlefield-5-v-cheats This thread is for CTS support. Please keep questions related to the software.
#762
Title: Cheat Tool Set v1.13
Administrator
06/19/2019 18:56 - 412 days 18 hours 55 minutes
#762
Pointer scanner:

Fixed an issue with re-scanning that occurred after the result file was loaded. Added "A pointer path must have at least one static address"

Memory viewer: Resolve imports has been moved to the settings (there is a slightly longer delay while starting the software if you enable this setting)

Disassembler:

Signature maker bug fixes. Execute signature generation on a separate thread. Resolve the previous instruction more reliably.

When the instruction address has been entered. Attempts to find the beginning of the function and disassembles the current function.

After NOP'ing an instruction, update the change accordingly in the disassembly view.

Settings: Added "Resolve imports (function names)"

PS. There are a LOT to do but I do not discuss about future features. Once a feature has been implemented, I will list it. Who knows what tomorrow exactly brings?

As far I tested. The signature maker in the disassembler is more reliable than the one in IDA. (I refer to the original IDA SigMaker plugin).

For obvious reasons signature generator and verification is significantly faster in CTS vs IDA SigMaker plugin. Array of bytes scan in the main view supports scanning for IDA style signatures. And of course you want to untick the "MEM_PRIVATE" option while scanning for the patterns.

#765
Title:
Wesleyy1993 wrote:
06/23/2019 01:00 - 409 days 12 hours 51 minutes
#765
CTS Pro V 1.12 doesnt scan.exe`s at all and the cmd output shows

Cheat Tool Set Professional (CTS) version: 1.12
22:56:10.433 The process (csrss) could not be opened at this time. Maybe you need higher access.
22:56:10.489 The process (wininit) could not be opened at this time. Maybe you need higher access.
22:56:12.78 The process (MsMpEng) could not be opened at this time. Maybe you need higher access.
22:56:12.329 The process (SecurityHealthService) could not be opened at this time. Maybe you need higher access.
22:56:12.749 The process (Memory Compression) could not be opened at this time. Maybe you need higher access.
22:56:12.892 The process (svchost) could not be opened at this time. Maybe you need higher access.
22:56:12.992 The process (NisSrv) could not be opened at this time. Maybe you need higher access.
22:56:13.58 The process (Registry) could not be opened at this time. Maybe you need higher access.
22:56:13.222 The process (SgrmBroker) could not be opened at this time. Maybe you need higher access.
22:56:13.262 The process (smss) could not be opened at this time. Maybe you need higher access.
22:56:13.898 The process (csrss) could not be opened at this time. Maybe you need higher access.
22:56:14.4 The process (services) could not be opened at this time. Maybe you need higher access.
22:56:14.119 The process (System) could not be opened at this time. Maybe you need higher access.
22:56:14.131 The process (Idle) could not be opened at this time. Maybe you need higher access.
#768
Title: Cheat Tool Set v1.14
Administrator
07/01/2019 18:00 - 400 days 19 hours 51 minutes
#768
Disassembler Signature generator bug fixes. GetFunctionStart() is more reliable. Added "Write a RETN". Removed "debug" echo and popups that I mistakenly forgot on in prior versions.

There is no more direct download available. The professional version requires a registration. Use a temporary email provider and your download will not be activated.

#765

People does not seem to have time to say thanks. Therefore I will neither have time to provide premium support nor tutorials.
Softwares like this are not coded in 15 mins or after a 3 months coding courses ...

Based on the info you provided, it's all a guessing game what you actually tried to do. I am sorry, I've no time for guess games.

Try v1.14, and see if "your" issue got solved. The software requires administrator privileges because some processes are run under an administrator user.

Also I assume you noticed that the tool supports only x64 processes. There is no way I will add a 32-bit support. It will simply take too much of my time.
#779
Title: Cheat Tool Set v1.15
Administrator
07/23/2019 10:23 - 379 days 3 hours 27 minutes
#779
Memory viewer:

Bug fixes. Also show possible long values (INT64). "Highlight" the selected node with a rectangle.

Most of the "flicker" problem has been fixed when a process is updating memory constantly.

Debug viewer: Added "String" scan type. The results will be echoed only on the console.

Settings:

Memory viewer: The update delay can be customized. The minimum allowed delay is 100ms.
Memory viewer: The number of decimals can be customized when a floating or double value is displayed.
Memory viewer (Disassembler): Added "Resolve function address".

Disassembler:

Added "Go to address" with the 'g' key. Editing the root node address does the same without opening a new instance.
#839
Title: Cheat Tool Set v1.16
Administrator
11/29/2019 12:14 - 250 days 0 hours 36 minutes
#839
The executable name has been changed to "CTS.exe". Therefore: To preserve your settings. Rename "Cheat Tool Set.ini" to "CTS.ini".

Main view:

The first scan of the main view uses as many threads as the processor has physical cores. Only four threads are used in the rescan because there are four result files.

UI "fixes"
"Add address manually" has been moved to the file menu
Added "Dump executable"

Use the path specified in the settings for "Dump process memory to file"
Fixed an issue "Non-negative number required. Parameter name: count" when dumping a process memory to file.
Fixed an issue with "Array of bytes scan" when "MEM_PRIVATE" was disabled
Fixed an issue in result view with "times changed" for float values

Settings: Check that the coordinates are within bounds before restoring the previous position

Pointer scanner:

Added "Browse the pointer value in the memory viewer"
When "Generate a pointer map" is enabled, scanning is multi-threaded. A pointer map can be generated when scanning a custom path.

Therefore, static addresses that are pointing to the same pointer value are also included in the results.
The scan is always threaded when the pointer map is generated.

Memory viewer: Fixed occasional "Cannot access a disposed object" exception.

Debug viewer: Added reasonable value checks for float and double value types. A minor bug fixes.

Memory viewer->Disassembler: Added a multi-threaded disassembler. "Find the code execution references (XREF) for this address"
#841
Title:
Maniac088 wrote:
12/06/2019 22:39 - 242 days 14 hours 12 minutes
#841
A quote. #839 Originally posted by Administrator



The executable name has been changed to "CTS.exe". Therefore: To preserve your settings. Rename "Cheat Tool Set.ini" to "CTS.ini".

Main view:

The first scan of the main view uses as many threads as the processor has physical cores. Only four threads are used in the rescan because there are four result files.

UI "fixes"
"Add address manually" has been moved to the file menu
Added "Dump executable"

Use the path specified in the settings for "Dump process memory to file"
Fixed an issue "Non-negative number required. Parameter name: count" when dumping a process memory to file.
Fixed an issue with "Array of bytes scan" when "MEM_PRIVATE" was disabled
Fixed an issue in result view with "times changed" for float values

Settings: Check that the coordinates are within bounds before restoring the previous position

Pointer scanner:

Added "Browse the pointer value in the memory viewer"
When "Generate a pointer map" is enabled, scanning is multi-threaded. A pointer map can be generated when scanning a custom path.

Therefore, static addresses that are pointing to the same pointer value are also included in the results.
The scan is always threaded when the pointer map is generated.

Memory viewer: Fixed occasional "Cannot access a disposed object" exception.

Debug viewer: Added reasonable value checks for float and double value types. A minor bug fixes.

Memory viewer->Disassembler: Added a multi-threaded disassembler. "Find the code execution references (XREF) for this address"


How do I download v1.16?
#842
Title:
Administrator
12/07/2019 10:50 - 242 days 2 hours 1 minutes
#842
#841 Originally posted by Maniac088 : https://overlayhack.com/cheat-tool-set#841

Currently you need to register an account, and use the order button. The software must be ordered through the system (free). Using a temporary email provider will get your account to be removed. The order is activated manually to your account.
#851
Title: C T S - v1.17
Administrator
01/11/2020 00:07 - 207 days 12 hours 44 minutes
#851
Main view

The process list is more decent. The list can be scrolled down using the first letter of a process name.
Added a simple DLL injector to the file menu.
Fixed logic issue with "Unknown initial value" scan.
Improved rescan scanning speed as the previous version has a bug
Fixed an issue when the string to be scanned in "Array of bytes" scan was a code style signature.

Memory viewer

Fixed an issue with extending the view when the pointer values were changing too fast so the extended portion was not drawn.
Use the tab instead of the new instance for "Browse this address in the memory viewer" and "Disassemble from this address"
Fixed an issue with "Find the code execution references (XREF) for the selected address". Currently, the list is displayed on the console.

Disassembler

Resolve the function address more reliably from the given address.

Signature generator: Limit the signature length to 64 bytes, effectively preventing an infinite loop when generating a signature.

Added "Browse the address pointed by the instruction in the memory viewer"

Debugger

Added "Show this address in the disassembler"
#852
Title:
nchawk wrote:
01/17/2020 23:06 - 200 days 13 hours 44 minutes
#852
Requested subscription, dunno how often you approve them, but would really like to test!
#853
Title: Cheat Tool Set Professional v1.18
Administrator
02/07/2020 11:45 - 180 days 1 hours 6 minutes
#853
Main view

The following optimizations have been done:

* The main memory scanner scanning speed is pretty much comparable to CE 7.0.

Memory usage is normalized for "Unknown initial value" scan.
Optimized "A sequence of values" scan. At best, scanning can be up to ten times faster than any previous version.
Added "Smaller than ..." and "Bigger than ..." comparison for "First scan"
Fixed an issue with "Float" and "Double" value scan. Results should now appear normally.
Fixed an issue with progress bar for "Next scan"
Fixed an issue with some missing results

Added "reasonable" value checks for "Float" and "Double" value memory scans. This will slow down the scan a bit but in turn provides a cleaner results.

Debugger

Fixed an issue with "Find out what addresses this instruction accesses". The results were equal with CE's 7.0 VEH according to my test. There might have been some missing results with prior versions.

*

The thing to note is that Lazarus FPC compiler for CE makes the native executable. In .NET, the program is basically run in a VM.

Also depending on an obfuscator used, that may add more or less overheat. The scanning speed is not therefore directly comparable.

At least I am happy with the current speed of the main memory scanner. While I optimized the scanner, I fixed many bugs and now the results are reliable.

https://youtu.be/clkw998stIo

#856
Title: Cheat Tool Set Professional v119
Administrator
04/10/2020 15:15 - 116 days 22 hours 36 minutes
#856
Main view

Removed "Dump executable" from the file menu. Added "Dump a module" tool
Added to the settings "Use the disassembly mode by default"
When scanning for sequence of bytes (Array of bytes), use only the data in the CODE sections
Settings: The memory viewer colors are customizable for a traditional view
When scanning for an array of bytes, that is a sequence of bytes. No need to tick what regions to scan as only the CODE sections will automatically be scanned regardless what is selected.

Memory viewer

Fixed an issue with resolving imports.
Fixed an issue that prevented unicode strings from appearing on some occasions
Added "Switch mode" functionality. This allows you to switch between the traditional and the disassembly mode without opening a new instance and/or window.
Update the changes real time in the disassembly mode as well.
Added "Peek behind the pointer" feature.
Added a work round to the TreeView's horizontal scroll bar issue. The horizontal scroll bar is now visible in every tab by default.
Show section category by default
Added setting "Pointers must be 32-bit aligned"
Added setting "Peek behind the pointer"
When selecting a row, highlight the entire row
Added "Open a new tab"
Extending a node is considerably faster vs any prior version. Mostly notable on a bigger add.

Disassembler

Fixed an issue after resolving a function address. Scroll to the entered instruction address programmatically and highlight the node.
Improved function entry detection logic.
Show string references

Debugger

Windows debugger: Fixed an issue that caused unexpected behavior on some occasions
Added "Browse this address in the memory viewer"

Pointer scanner

Debug viewer

Added support for "8 Bytes" value type
Added "Smaller than ..." and "Bigger than ..." comparison also to first scan
Fixed an issue with multi level pointers in rescan.

IAT

Fixed an issue with auto-detection. Resolving an import address table is notably faster than in any previous version.
#858
Title: Cheat Tool Set X v120
Administrator
05/11/2020 13:09 - 86 days 0 hours 41 minutes
#858
Changes marked with an [X] are only available in the professional (Paid version of the software). The newly added features will speed up your work up to 10-100 times vs any competition. If the competition can even do what the listed features does.

Yes, once you learn to utilize the tool unique features, literally the time wasted will decrease to 1/10.

Memory viewer

Added support for automatic pointer path deferencing. i.e. "A static pointer" 0x7FFF 0x0040 0x0010. The nodes will get automatically expanded according to a pointer path. [X]

Disassembler

Show assembly jump instructions with lines.
Show string references.
Show static pointer values.
Show API names (function calls)
Show the section category.
The colors of the disassembler are customizable.
Update the view real time also in the disassembly mode.

If the memory viewer was in disassembly mode and the process was closed. Restore the view as it was when attaching to the same process again.

Added "Bypass the selected instruction with a jump". Pretty much equivalent to CE's code injection.

Pointer scanner

The maximum offset can be larger than 32767 (0x7FFF)
Added "Dereference the selected path in the memory viewer" [X]
Added "The pointer must have a code execution reference before the result is added" [X]
Fixed an issue with "Include pointers that point to my module" when a pointer map generation was enabled

When "Generate a pointer map" is selected and the custom path scan is disabled, the scan will be multi-threaded. This is subject to a further optimization.
#860
Title: Cheat Tool Set X v121
Administrator
06/18/2020 19:54 - 47 days 17 hours 57 minutes
#860
Changes marked with an [X] are only available in the professional (Paid version of the software).

Main view

Show processed items in the list view. Reduced the load time upon starting the software or selecting a process.

Memory viewer

The minimum length of the string is adjustable in the settings.
Added "Modify the value of the selected address as 8 Bytes"

Disassembler

You can scroll the view with the up and down arrow keys.

Added:

Follow the address pointed by the instruction in the current view
Go back to the previous instruction

Debugger

Added "Read the value as"

8 Bytes
Hex
Vector 3

Memory pointer scanner [X]

The best implementation so far. The first scan is approx up to 9-10 times faster vs any prior version when "Generate a pointer map" is checked. Distribute the results evenly among the result files when "Generate a pointer map" is enabled. The re-scan is optimized.

Fixed an issue with adding the result to the list view when "The pointer must have a code execution reference before the result is added" is checked.

"Scan a custom path with a pointer map" has been removed to make the logic simpler.

Fixed an issue with "Keep the pointer map in memory".

Post a comment

Registered users do not have to enter captcha. A line in the code tag is currently limited to maxium of 160 characters.
Posting guidelines: You may not post any personal information. When you report an issue: Always mention which version and operating system and briefly describe the issue. Any support request post that does not include this information will be removed as spam without a reply.
Title
Tags You may use the following tags: [QUOTE] [/QUOTE] [B] [/B] [URL] [/URL] [CODE] [/CODE]
Captcha Please enter the text you see (case insensitive). The listed characters must be entered clockwise starting from twelve o'clock.
Comments are moderated Y