Click to view comment #532
Cheat Tool Set
Cheat Tool Set (C T S) is a tool like CE written in #C .NET https://youtu.be/zrUvtsg9BKk
Current version C T S: 1.17 Changelog: https://overlayhack.com/cheat-tool-set#851
FEATURES
Memory scanner
Memory viewer / editor
Memory pointer scanner
IAT (Import Address Table) scanning tool
Debug viewer
Windows debugger: Read, Write and instruction execute (Find out what addresses this instruction accesses).
Disassembler - Includes built-in signature maker plugin that attempts to generate unique signatures just like the original IDA signature maker plugin.
Dump strings tool
Dump executable
A basic DLL injector
MAIN VIEW
1239:602
What is the difference compared to Cheat Engine (CE)?
- One of a kind memory viewer/editor. The memory viewer has a traditional view and a disassembly mode.
- The software has unique functionality that is worth trying out. There are some optimizations missing but they come on time.
- The core functionality is pretty much the same.
- There is no x86 (32-bit) support
Memory viewer itself in the tool makes the distinction to the competition.
To cut a long story short: Previously unfound values can be found with the tool. The tool is a work in progress.
The purpose of the program is to enhance the functionality of the CE. That's why the software has only the most important CE equivalent features
and new features that are not available in other similar programs.
To mention one enhanced functionality: Pointer scanner level one static pointer scan takes less than five seconds and memory consumption is almost non-existent.
As of version v1.17. There is a proper alternative to IDA Pro signature maker plugin.
MEMORY VIEWER/EDITOR
930:856
MEMORY VIEWER DISASSEMBLER
1451:954
POINTER SCANNER
714:901
How do I get the tool?
To get the updated version of the software. You must register an account and "order" the software via the system. All this is free of charge.
Once your "order" has been approved, the download will be activated to your account.
The first review: http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/Cheat-Tool-Set.shtml Thanks.
NOTES
Runs on: Windows 7 or 10 64-bit
Requires .NET Framework 4.7.2 or newer
The software is a portable application. No installation is required. The software does not modify your computer registry.
The tool supports only x64 (64-bit) processes.
Offsets are mainly entered as hex values.
No personal data is sent upon checking for an update.
When you use the "Include the result if the value has changed ...", you can no longer press the next scan button because the number of times the value has changed
is not saved in the result files.
By default the disassembler disassembles the current and the next function.
"Array of bytes" scan supports the following formats:
01 02 03
\x01 \x02 \x03
0x1 0x2 0x3
48 8B 05 ? ? ? ? 48 89 47 40
When scanning for sequence of bytes (pattern scan), also known as an array of bytes scan. You will have to press the "Reset scan" button if you wish to scan for a new
pattern.
"Exact value" float scan: "Value to find" is automatically truncated to four decimal places double value. No rounding is done to that value.
MEMORY VIEWER
Left click on the first address to select it and then click the node text again to edit the address of the root node.
Right click on the offset to select the action. The default alignment is 8 Bytes.
Pointer scanner
"Generate a pointer map" feature is almost mandatory for scans larger than a level 3 and 0x0400. You do not have generate a pointer map for a custom path scan.
"The first element of pointer must point to virtual function table" enables the "Class pointer rule check". Pros: Those pointers paths are more likely valid after game has been restarted.
DEBUGGER
Currently only one HWBP (hardware breakpoint) is supported.
DISASSEMBLER
You can jump to an address (goto address) with the 'g' key. Editing the root node address does the same without opening a new instance.
Tutorials
-
Data types
Byte: 0 - 255
2 Bytes: -32768 - 32767
4 Bytes: -2147483648 - 2147483647
The source code
The source code is not available to maintain the uniqueness of the software. Therefore the executable is heavily obfuscated. This may result in false positives in AV's.
CREDITS: See the about box.
If you find a bug or a logic issue. Always mention which CTS version and briefly describe the issue.
DONATIONS
Developing the software like this takes a lot of time. You can donate using this link via PayPal: https://overlayhack.com/donate.html
DOWNLOAD
https://overlayhack.com/CTS_v117.rar : https://www.virustotal.com/gui/file/9ce4fc4b23599c399cf3ba363772db9b4928f0b50f18ff134dc420b22d26ab6d/detection
For the updates the software must be ordered through the system (free). Using a temporary email provider will get your account to be removed.
The order is activated manually to your account.
Current version C T S: 1.17 Changelog: https://overlayhack.com/cheat-tool-set#851
FEATURES
Memory scanner
Memory viewer / editor
Memory pointer scanner
IAT (Import Address Table) scanning tool
Debug viewer
Windows debugger: Read, Write and instruction execute (Find out what addresses this instruction accesses).
Disassembler - Includes built-in signature maker plugin that attempts to generate unique signatures just like the original IDA signature maker plugin.
Dump strings tool
Dump executable
A basic DLL injector
MAIN VIEW
1239:602
What is the difference compared to Cheat Engine (CE)?
- One of a kind memory viewer/editor. The memory viewer has a traditional view and a disassembly mode.
- The software has unique functionality that is worth trying out. There are some optimizations missing but they come on time.
- The core functionality is pretty much the same.
- There is no x86 (32-bit) support
Memory viewer itself in the tool makes the distinction to the competition.
To cut a long story short: Previously unfound values can be found with the tool. The tool is a work in progress.
The purpose of the program is to enhance the functionality of the CE. That's why the software has only the most important CE equivalent features
and new features that are not available in other similar programs.
To mention one enhanced functionality: Pointer scanner level one static pointer scan takes less than five seconds and memory consumption is almost non-existent.
As of version v1.17. There is a proper alternative to IDA Pro signature maker plugin.
MEMORY VIEWER/EDITOR
930:856
MEMORY VIEWER DISASSEMBLER
1451:954
POINTER SCANNER
714:901
How do I get the tool?
To get the updated version of the software. You must register an account and "order" the software via the system. All this is free of charge.
Once your "order" has been approved, the download will be activated to your account.
The first review: http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/Cheat-Tool-Set.shtml Thanks.
NOTES
Runs on: Windows 7 or 10 64-bit
Requires .NET Framework 4.7.2 or newer
The software is a portable application. No installation is required. The software does not modify your computer registry.
The tool supports only x64 (64-bit) processes.
Offsets are mainly entered as hex values.
No personal data is sent upon checking for an update.
When you use the "Include the result if the value has changed ...", you can no longer press the next scan button because the number of times the value has changed
is not saved in the result files.
By default the disassembler disassembles the current and the next function.
"Array of bytes" scan supports the following formats:
1.
2.
3.
4.
5.
2.
3.
4.
5.
01 02 03
\x01 \x02 \x03
0x1 0x2 0x3
48 8B 05 ? ? ? ? 48 89 47 40
When scanning for sequence of bytes (pattern scan), also known as an array of bytes scan. You will have to press the "Reset scan" button if you wish to scan for a new
pattern.
"Exact value" float scan: "Value to find" is automatically truncated to four decimal places double value. No rounding is done to that value.
MEMORY VIEWER
Left click on the first address to select it and then click the node text again to edit the address of the root node.
Right click on the offset to select the action. The default alignment is 8 Bytes.
Pointer scanner
"Generate a pointer map" feature is almost mandatory for scans larger than a level 3 and 0x0400. You do not have generate a pointer map for a custom path scan.
"The first element of pointer must point to virtual function table" enables the "Class pointer rule check". Pros: Those pointers paths are more likely valid after game has been restarted.
DEBUGGER
Currently only one HWBP (hardware breakpoint) is supported.
DISASSEMBLER
You can jump to an address (goto address) with the 'g' key. Editing the root node address does the same without opening a new instance.
Tutorials
-
Data types
Byte: 0 - 255
2 Bytes: -32768 - 32767
4 Bytes: -2147483648 - 2147483647
The source code
The source code is not available to maintain the uniqueness of the software. Therefore the executable is heavily obfuscated. This may result in false positives in AV's.
CREDITS: See the about box.
If you find a bug or a logic issue. Always mention which CTS version and briefly describe the issue.
DONATIONS
Developing the software like this takes a lot of time. You can donate using this link via PayPal: https://overlayhack.com/donate.html
DOWNLOAD
https://overlayhack.com/CTS_v117.rar : https://www.virustotal.com/gui/file/9ce4fc4b23599c399cf3ba363772db9b4928f0b50f18ff134dc420b22d26ab6d/detection
For the updates the software must be ordered through the system (free). Using a temporary email provider will get your account to be removed.
The order is activated manually to your account.
When will the tool be back
