Cheat Tool Set

Pro is a professional reverse engineering tool like CE written in #C .NET and C++.

It is more user friendly than CE with unique features. You can download the latest free version: v1.21



Changelog for v121:

Current version in development: 1.22 PRO



The tool is coded and designed from the beginning for dynamic analysis and reverse engineering in general.

If you're a student or hobbyists that requires the right tool for your reverse engineering jobs. This is exactly what you've been waiting for.



The professional X version is available for a one-time payment of $279,00 USD

You must be PayPal verified user to purchase. Instant activation after payment. The PRO version price is reasonable considering the current

and the upcoming future features.



This is the official site of the software. The tool is a work in progress. Cheat Tool Set PRO is the same as the X version.



FEATURES



Memory scanner (Currently uses up to 12 threads depending on your CPU)

Memory viewer / editor

Memory pointer scanner (X)

Debug viewer (X)

IAT (Import Address Table) scanning tool - If nothing else works. Try this.

Windows debugger: Read (Find out what accesses this address), Write (Find out what writes to this address) and Instruction execute (Find out what addresses this instruction accesses).

Disassembler - Includes a built-in assembly signature maker that attempts to generate unique signatures

Dump strings tool

Dump a process and it's modules

A basic DLL injector



MAIN VIEW



The screenshots represents the version 1.20



1264:759





WHAT IS THE DIFFERENCE COMPARED TO THE COMPETITION?



Unique features that the competition does not offer. Some features are simply better and more user friendly.

To mention a few. The float value scan returns exactly what you was after (a reasonable values).

To cut a long story short: Previously unfound values can be found with the tool. The tool's memory viewer itself makes a difference to the competition. Check

below screenshot of the memory viewer. Imagine you would be doing all that manually with CE ...



You will save a lot of time and money when you learn to use the tools unique features such as the "Debug viewer" and custom pointer path scan

(allowing you to connect things from an entry point) speeding your work up to 10 times vs any competition.



MEMORY VIEWER/EDITOR



When the process restarts. The view automatically updates according to the process.



1417:875





DISASSEMBLER



1680:1008





POINTER SCANNER



711:923





NOTES



The tool supports only 64-bit (x86_64) processes.



Supported operating systems: Windows 7/8.x/10

Requires .NET Framework 4.7.2 or newer



All the settings can be edited directly to the INI. Offsets are mainly entered as hex values.



When you use the "Include the result if the value has changed ...", you can no longer press the next scan button because the number of times the value has changed

is not saved in the result files.



By default the disassembler disassembles the current and the next function.



The code and IDA style signatures does not require a mask to be entered.



"Array of bytes" scan supports the following formats:

1.

2.

3.

4.

5.



01 02 03

x01 x02 x03

0x1 0x2 0x3

8B 81 ? ? ? ? 48 8B D9 85 C0 7F 0E







When scanning for sequence of bytes (pattern scan), also known as an array of bytes scan. You will have to press the "Reset scan" button if you wish to scan for a new

signature.



"Exact value" float scan: "Value to find" is automatically truncated to four decimal places double value. No rounding is done to that value.



MEMORY VIEWER



Left click on the first address to select it and then click the node text again to edit the address of the root node.

Right click on the offset to select the action. The default alignment is 8 Bytes.



Pointer scanner



"Generate a pointer map" feature is almost mandatory for scans larger than a level 3 and 0x0400. You do not have generate a pointer map for a custom path scan.

"The first element of pointer must point to virtual function table" enables the "Class pointer rule check".



DEBUGGER



Currently only one HWBP (hardware breakpoint) is supported.



DISASSEMBLER



You can jump to an address (goto address) with the 'g' key. Editing the root node address does the same without opening a new instance or tab.



Tutorials



-



Data types



Byte: 0 - 255

2 Bytes: -32768 - 32767

4 Bytes: -2147483648 - 2147483647



Byte MinValue: 0 Byte MaxValue: 255

Int16 MinValue: -32768 Int16 MaxValue: 32767

UInt16 MinValue: 0 UInt16 MaxValue: 65535

Int32 MinValue: -2147483648 Int32 MaxValue: 2147483647

UInt32 MinValue: 0 UInt32 MaxValue: 4294967295

Int64 MinValue: -9223372036854775808 Int64 MaxValue: 9223372036854775807



The source code



The source code is not currently available to maintain the uniqueness of the software. Therefore the executable is heavily obfuscated. This may result in false positives in AV's.



If you find a bug or a logic issue. Always mention which CTS version and briefly describe the issue.



DOWNLOAD



The free version: Cheat Tool Setis a professional reverse engineering tool like CE written inC .NET and C++.It is more user friendly than CE with unique features. You can download the latest free version: vChangelog for v121: https://overlayhack.com/cheat-tool-set#860 Current version in development:PROThe tool is coded and designed from the beginning for dynamic analysis and reverse engineering in general.If you're a student or hobbyists that requires the right tool for your reverse engineering jobs. This is exactly what you've been waiting for.The professionalversion is available for a one-time payment of279,00 USD https://overlayhack.com/order You must be PayPal verified user to purchase. Instant activation after payment. Theversion price is reasonable considering the currentand the upcoming future features.This is the official site of the software. The tool is a work in progress. Cheat Tool Set PRO is the same as theversion.Memory scanner (Currently uses up to 12 threads depending on your CPU)Memory viewer / editorMemory pointer scanner (Debug viewer (IAT (Import Address Table) scanning tool - If nothing else works. Try this.Windows debugger: Read (Find out what accesses this address), Write (Find out what writes to this address) and Instruction execute (Find out what addresses this instruction accesses).Disassembler - Includes a built-in assembly signature maker that attempts to generate unique signaturesDump strings toolDump a process and it's modulesA basic DLL injectorThe screenshots represents the version 1.20Unique features that the competition does not offer. Some features are simply better and more user friendly.To mention a few. The float value scan returns exactly what you was after (a reasonable values).To cut a long story short:The tool's memory viewer itself makes a difference to the competition. Checkbelow screenshot of the memory viewer. Imagine you would be doing all that manually with CE ...You will save a lot of time and money when you learn to use the tools unique features such as the "Debug viewer" and custom pointer path scan(allowing you to connect things from an entry point) speeding your work up to 10 times vs any competition.When the process restarts. The view automatically updates according to the process.The tool supports only 64-bit () processes.: Windows 7/8.x/10Requires .NET Framework 4.7.2 or newerAll the settings can be edited directly to the INI. Offsets are mainly entered as hex values.When you use the "Include the result if the value has changed ...", you can no longer press the next scan button because the number of times the value has changedis not saved in the result files.By default the disassembler disassembles the current and the next function.The code and IDA style signatures does not require a mask to be entered."Array of bytes" scan supports the following formats:When scanning for sequence of bytes (pattern scan), also known as an array of bytes scan. You will have to press the "Reset scan" button if you wish to scan for a newsignature."Exact value" float scan: "Value to find" is automatically truncated to four decimal places double value. No rounding is done to that value.Left click on the first address to select it and then click the node text again to edit the address of the root node.Right click on the offset to select the action. The default alignment is 8 Bytes."Generate a pointer map" feature is almost mandatory for scans larger than a level 3 and 0x0400. You do not have generate a pointer map for a custom path scan."The first element of pointer must point to virtual function table" enables the "Class pointer rule check".Currently only one HWBP (hardware breakpoint) is supported.You can jump to an address (goto address) with the 'g' key. Editing the root node address does the same without opening a new instance or tab.: 0 - 255: -32768 - 32767: -2147483648 - 2147483647Byte MinValue: 0 Byte MaxValue: 255Int16 MinValue: -32768 Int16 MaxValue: 32767UInt16 MinValue: 0 UInt16 MaxValue: 65535Int32 MinValue: -2147483648 Int32 MaxValue: 2147483647UInt32 MinValue: 0 UInt32 MaxValue: 4294967295Int64 MinValue: -9223372036854775808 Int64 MaxValue: 9223372036854775807The source code is not currently available to maintain the uniqueness of the software. Therefore the executable is heavily obfuscated. This may result in false positives in AV's.If you find a bug or a logic issue. Always mention which CTS version and briefly describe the issue.The free version: https://overlayhack.com/CTS_v121.rar

#44

Title:

mooreb6672 wrote: 06/21/2018 19:03 - 819 days 21 hours 59 minutes

#44

I don't even know where to begin to learn how to get this working through net code or even how to write it.. you sir are a genius.

#50

Title: Cheat Tool Set v1.01

Administrator

06/26/2018 15:19 - 815 days 1 hours 44 minutes

#50

Changelog for 1.01:



- Fixed an issue with "A sequence of values" scan with value type "Hex".

- "A sequence of values" scan supports now also the following data types: "Byte" and "2 Bytes"

- "A sequence of values" scan can now find values that are padded by "n" bytes

- Added "2 Byte" alignment in memory viewer

- Added "Browse this address in memory viewer" option in main view

#52

Title:

x3noic wrote: 06/28/2018 00:25 - 813 days 16 hours 38 minutes

#52

i get error in w10 x64 when try open this

https://imgur.com/ZwHfZmV

#53

Title:

A visitor wrote: 06/28/2018 01:42 - 813 days 15 hours 21 minutes

#53

#52 Originally posted by x3noic :



Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.



Type "winver" into the Start menu, and press Enter to find out which version.

52 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/52 Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.Type "winver" into the Start menu, and press Enter to find out which version.

#56

Title:

x3noic wrote: 06/29/2018 00:24 - 812 days 16 hours 39 minutes

#56

#53 Originally posted by A visitor







#52 Originally posted by x3noic :







Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.







Type "winver" into the Start menu, and press Enter to find out which version.



52 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/52 Which windows 10 version? I just verified. The software started normally on Windows 10 Pro 1709 x64.Type "winver" into the Start menu, and press Enter to find out which version.



my w10 version is 17134.112 x64



maybe is this.



A quote.53 Originally posted by A visitormy w10 version is 17134.112 x64maybe is this.

#58

Title:

Administrator

06/30/2018 21:46 - 810 days 19 hours 17 minutes

#58

#56 Originally posted by x3noic :



What version it exactly is? Please provide a screenshot of "winver" output.



The fix is simple that I've applied. If that does not fix it for you, I have no idea.



You will have to wait for 1.02. 56 Originally posted by x3noic : https://overlayhack.com/cheat-tool-set/56 What version it exactly is? Please provide a screenshot of "winver" output.The fix is simple that I've applied. If that does not fix it for you, I have no idea.You will have to wait for 1.02.

#69

Title: Cheat Tool Set v1.02

Administrator

07/02/2018 21:39 - 808 days 19 hours 24 minutes

#69





- Synchronize concurrent dictionary entries (in memory results of a current scan) accordingly with main view.



- Fixed a possible crash (unhandled exception) upon starting the software that occurred on some systems:



- Unknown initial value scan supports now also the following data types: "Byte" and "2 Bytes"



- Added an option to narrow down results in main view based on a value times changed count



The last feature requires a little more explanation:



Normally when you scan for a byte value (0 or 1). This scan type is the most difficult due to the fact there are a lot more of results compared to any other scan.



You usually use game mechanics to get values changed according to your preference i.e opening or closing something in the menu.



What if those values are constantly changing between 0,1 or changing between any other byte values and there are several hundred or thousands of results and you can't get the list any smaller?



This is exactly where this feature is coming from. You know the exact count as you're using game mechanics ...



Changelog for 1.02:- Synchronize concurrent dictionary entries (in memory results of a current scan) accordingly with main view.- Fixed a possible crash (unhandled exception) upon starting the software that occurred on some systems: https://overlayhack.com/cheat-tool-set/52 - Unknown initial value scan supports now also the following data types: "Byte" and "2 Bytes"The last feature requires a little more explanation:Normally when you scan for a byte value (0 or 1). This scan type is the most difficult due to the fact there are a lot more of results compared to any other scan.You usually use game mechanics to get values changed according to your preference i.e opening or closing something in the menu.What if those values are constantly changing between 0,1 or changing between any other byte values and there are several hundred or thousands of results and you can't get the list any smaller?This is exactly where this feature is coming from. You know the exact count as you're using game mechanics ...

#94

Title: Cheat Tool Set v1.03

Administrator

07/11/2018 22:45 - 799 days 18 hours 18 minutes

#94

Changelog for 1.03:



Main:



Fixed an issue with exact float value scan

Fixed an issue with "Unknown initial value" scan

Fixed an issue with "Decreased value by ..." scan

Fixed an issue with "Increased value by ..." scan



Value finder: Various bug fixes.

Memory viewer: Added 1 Byte alignment



Use interlocked increment in threads instead of a lock.

#110

Title: Cheat Tool Set v1.04

Administrator

07/24/2018 19:55 - 786 days 21 hours 8 minutes

#110

Changelog for 1.04:



Main:



Disable I/O counter for now as it seemed to cause delays in usage update

Fixed an issue with "A sequence of values ..." scan. Produce results according to the scan.



Memory viewer:



Added the following types: Matrix 4x4, Matrix 3x4 and Matrix 3x3

Fixed an issue with switching between types before clearing the type

Added "Browse this address in memory viewer"

#118

Title:

Smokahontas wrote: 08/02/2018 23:56 - 777 days 17 hours 7 minutes

#118

Would be amazing if you implement a ultimap-like tool, based in this program (https://github.com/glmcdona/FunctionHacker) , (https://www.youtube.com/watch?v=P0UXR861WYM)



Cause Ultimap is a shit xD

#122

Title:

Administrator

08/03/2018 17:14 - 776 days 23 hours 49 minutes

#122

#118 Originally posted by Smokahontas



Would be amazing if you implement a ultimap-like tool, based in this program (https://github.com/glmcdona/FunctionHacker) , (https://www.youtube.com/watch?v=P0UXR861WYM)



Cause Ultimap is a shit xD



If you just want to get those values, seemed to me a way too complicated method. There are more important features in my list to be implemented.



Implementing debugger related features are the most difficult and time consuming. However my plan is to add CE equivalent VEH debugger (most of it has already been implemented a long time ago) but I haven't wrote a GUI for it yet.



I have improvements in my mind for CE feature "Find out what addresses this instruction accesses" that I need.



PS. What comes to function call count in the video. What for you need that? Are not you more interested about the calling function etc.? CE's "dissect" etc. What IDA does with XREF's and so forth ...

A quote.118 Originally posted by SmokahontasIf you just want to get those values, seemed to me a way too complicated method. There are more important features in my list to be implemented.Implementing debugger related features are the most difficult and time consuming. However my plan is to add CE equivalent VEH debugger (most of it has already been implemented a long time ago) but I haven't wrote a GUI for it yet.I have improvements in my mind for CE feature "Find out what addresses this instruction accesses" that I need.PS. What comes to function call count in the video. What for you need that? Are not you more interested about the calling function etc.? CE's "dissect" etc. What IDA does with XREF's and so forth ...

#137

Title: Cheat Tool Set v1.05

Administrator

08/14/2018 20:28 - 765 days 20 hours 35 minutes

#137

Changelog for 1.05:



Main:



"A sequence of values ..." scan for float values can be used like an exact float value scan ie. Value1: 5.6119 Value2: -0.1688



Added the "Smaller than ..." and "Bigger than ..." comparison for "Next scan"



"Change value of the selected address" supports now the same data types as "Memory viewer" editor



Fixed most of the UI lag during a scan



"Exact value" float scan is actually a double value scan allowing you to find values that has more than 7 significant digits. This logic also applies for "A sequence of values ..." float scan.



Pointer scanner:



Load results file accordingly to a stored pointer path (no more extra "0x00"'s in a pointer path)



Fixed an issue with re-scan after loading a results file



Fixed an issue with class pointer rule check



Added an option to load plain text results file (results will be converted to a binary format "RESULTS.PTR" upon loading)



Memory viewer:



Resolve imports is now as an option rather than attempting automatically resolve api names



Truncate float values to double values (four decimal places) by default instead of rounding



Added support for displaying unicode strings. A " L " sequence.



Value finder:



Fixed an issue with class pointer rule check

#140

Title: Just wondering why not make this work with 32bit???

A visitor wrote: 08/19/2018 03:19 - 761 days 13 hours 44 minutes

#140

Would love to try this tool, but most things I want to play around with are 32bit. Is there any particular reason you didn't add comparability. I figure it makes things much harder, but just wondering (as a future coder)







Either way, glad I found this. Will keep this in mind for whenever I do plan on hacking away at a 64bit app.







Great work











drp

#144

Title:

Administrator

08/19/2018 20:56 - 760 days 20 hours 7 minutes

#144

#140 Originally posted by A visitor :



It's 2018 ... Are not major games only x64? I never designed the tool for both. After thinking about this. It would be simpler to write a separate version that is x32 only.



However I've no time for that. Unless someone hire me for that. I won't be bothering with anything less than $2499 for that version. Otherwise it is very unlikely to happen that I come with a version that supports 32-bit processes.



There are various features to be added and fixes to be done in the current x64 version. I add each features/fix in an order I need most.



Adding support for 32-bit processes in the current version would just make the software a way too complicated and even more prone to bugs.



I try to provide as soon as possible the source code of the software as a commercial source.



I never realized until now that coding a software like this is a full day job. What I mean by this? A software like this is not an ordinary software that is easy to code.



It requires experience from reverse engineering community. I say this so you know that adding a support for 32-bit processes does not happen by snapping a fingers especially when the software was never designed this way.



140 Originally posted by A visitor : https://overlayhack.com/cheat-tool-set#140 It's 2018 ... Are not major games only x64? I never designed the tool for both. After thinking about this. It would be simpler to write a separate version that is x32 only.However I've no time for that. Unless someone hire me for that. I won't be bothering with anything less than $2499 for that version. Otherwise it is very unlikely to happen that I come with a version that supports 32-bit processes.There are various features to be added and fixes to be done in the current x64 version. I add each features/fix in an order I need most.Adding support for 32-bit processes in the current version would just make the software a way too complicated and even more prone to bugs.I try to provide as soon as possible the source code of the software as a commercial source.I never realized until now that coding a software like this is a full day job. What I mean by this? A software like this is not an ordinary software that is easy to code.It requires experience from reverse engineering community. I say this so you know that adding a support for 32-bit processes does not happen by snapping a fingers especially when the software was never designed this way.

#147

Title: Cheat Tool Set v1.06

Administrator

08/24/2018 16:47 - 756 days 0 hours 16 minutes

#147

Main:



Added "Array of bytes" scan



Pointer scanner:



Pointer map generation is significantly faster than in any prior release

Fixed issues when "Generate a pointer map" was enabled

Results are sortable by a column



Value finder:



The maximum offset can be bigger than 0x7FFF

Fixed an issue with re-scan



Memory viewer:



Execute "Add" on a background thread to avoid UI thread "Stopped from responding" when adding a 102400 bytes

#160

Title: lack......

A visitor wrote: 09/10/2018 16:34 - 739 days 0 hours 29 minutes

#160

Three things,



the first: Manual



Second: Spanish language translator please



Third: I congratulate you, it's a great job.

#181

Title:

Administrator

09/27/2018 10:27 - 722 days 6 hours 36 minutes

#181

#160 Originally posted by A visitor







Three things,





the first: Manual





Second: Spanish language translator please





Third: I congratulate you, it's a great job.



The source code of the software is available for purchase. You can translate it yourself. I only maintain english version of the software. A quote.160 Originally posted by A visitorThe source code of the software is available for purchase. You can translate it yourself. I only maintain english version of the software.

#182

Title: Cheat Tool Set v1.07

Administrator

09/27/2018 10:33 - 722 days 6 hours 30 minutes

#182

Main:



Fixed a 'NullReferenceException' upon finishing a "A sequence of values ..." scan

Fixed an issue in "A sequence of values ..." float scan when (3) values were entered

Fixed an issue with "A sequence of values ..." scan

Fixed an issue with "Unknown initial value" scan "Next scan button" after first scan was completed



Added windows debugger. "Find out what accesses this address" and "Find out what writes to this address"



Pointer scanner:



Added "Keep pointer map in memory" feature for faster subsequent scans

Added a re-scan feature: "Dereference pointer paths continuously"

Fixed an issue while tranforming pointer paths smaller than the maximum level

Fixed an issue with loading plain text result file

Fixed an issue with "The smallest pointer path" after completing a re-scan

Fixed a problem with loading the results file when a pointer map was generated



Memory viewer:



Fixed an unhandled exception 'Cannot access a disposed object.' This should fix also occasional "Cheat Tool Set has stopped from responding" issue



Value Finder:



Use concurrent dictionary instead of a list to avoid "InvalidOperationException" exception while updating the list.



Synchronize concurrent dictionary entries (in memory results of a current scan) accordingly with a view.



Source code:



Various code cleanups and added more documentation.



#212

Title: Cheat Tool Set v1.08

Administrator

10/15/2018 19:10 - 703 days 21 hours 53 minutes

#212

Main:



"First scan" has been optimized a bit and is at least two times faster than in any prior release

"Next scan" has been optimized and is considerably faster than in any prior release



"Unknown initial value" scan: Added an option to dump process memory to file instead of using an in memory copy



"Unknown initial value" scan: Added "Smaller than ..." and "Bigger than ..." comparison

Renamed "Value finder" to "Debug viewer" as it is more appropriate name

Restored I/O stats (seems to work reliably now)



The cancel button should work now



Debugger:



Resolve prior assembly instruction more reliably



Added 'Replace with code that does nothing (NOP)'

Added 'Restore the original instruction' for your convenience

Fixed an issue that prevented some instructions from appearing in the list

Attempt to show also "register + offset" value in the output



Debug viewer:



Fixed an issue with "String value" scan that prevented results from appearing in the list

Added unicode string support



Minor other bug fixes

#252

Title: Cheat Tool Set v1.09

Administrator

11/05/2018 14:26 - 683 days 1 hours 37 minutes

#252

The main view:



Added INI settings file

Added general settings to the edit menu

Added general setting "Remember window positions" and an option to save current positions with a click of a button

Added general setting "Check for update at program startup". The default is to check for update.

Added general setting "Minimize console upon starting the software".



Added "String" scan including Unicode (UTF-16) string support

Added "Pointer scan for this address"



"Unknown initial value" scan has been optimized. "First scan" and "Next scan" is considerably faster than in any prior version.

"A sequence of values" scan has been optimized. It is about 3 times faster than in any prior version.

Added 8 Bytes support for "A sequence of values ..." scan



Added an option to add address manually to the list



Debugger:



Resolve prior assembly instruction correctly.



Memory viewer:



Added "Scan for pointers for this address"

Added "Scan for pointers for pointer value"

#508

Title:

Administrator

01/14/2019 01:25 - 613 days 14 hours 38 minutes

#508

I've taken the download off for now ...

#532

Title:

teknically wrote: 01/19/2019 18:32 - 607 days 21 hours 31 minutes

#532

When will the tool be back

#582

Title: Cheat Tool Set v1.10

Administrator

02/07/2019 11:37 - 589 days 4 hours 26 minutes

#582

Added "Dump strings" tool



The main view:



Added support for double value scans

Addressess can now be sorted by a column

Fixed an issue when adding a 8 bytes value manually

Fixed an issue when removing manually added addresses



Memory viewer:



Fixed an issue with the "Clear type" for the following types: Vector2, Vector3 and Vector4

Display possible double values when alignment is 8 bytes

Added an option to restore the original value



Added a disassembler. "Disassemble this memory region"



Pointer scanner:



Fixed an issue when "Include pointers that point to my module" was enabled



Debug viewer:



Added "Unknown initial value" scan

Removed string scan type

Added support for hex values



Rescan can now scan for: Increased value, Increased value by, Decreased value, Decreased value by, Changed value, Unchanged value, Smaller than, Bigger than



PS.



Some of the features are only available in the professional version, which will be available later. Professional version requires registration.

#630

Title: Cheat Tool Set v1.11

Administrator

03/06/2019 22:00 - 561 days 18 hours 3 minutes

#630

Memory editor: Added "Modify the value as double value"

Debug viewer: Added support for double value scans



Debugger: Fixed an issue with GUI when items are added to list



Settings: Added "Use this directory for result files"



Dump strings:



Remove new line characters from a string

Added "Match case".



PS.



The professional version will soon be available under a different name. It's free but requires registration.

#714

Title: Cheat Tool Set v1.12

Administrator

04/28/2019 13:48 - 509 days 3 hours 15 minutes

#714



The main view:



Allow a wildcard byte "?" in "Array of bytes" scan. (Applies also to the free version)

Added a mini disassembler

Process list: Verify that the current process has rights to open a process before listing it



Memory viewer:



Added "Disassemble from this address"

Added "Round values". By default the values are truncated to a 4 decimal places without rounding

Added "Virtual function table (vtable)" support



Added "Copy hex value". This works when the mode is "Disassembly" or when the type has been defined as Virtual function table (vtable)



Added the signature maker in the disassembler

Minor bug fixes



The professional version is available but requires registration.

#717

Title:

x3noic wrote: 05/01/2019 02:23 - 506 days 14 hours 39 minutes

#717

the debug function is detected when is used in bfv?

#721

Title:

Administrator

05/02/2019 18:10 - 504 days 22 hours 53 minutes

#721

https://overlayhack.com/battlefield-5-v-cheats This thread is for CTS support. Please keep questions related to the software.

#762

Title: Cheat Tool Set v1.13

Administrator

06/19/2019 18:56 - 456 days 22 hours 7 minutes

#762

Pointer scanner:



Fixed an issue with re-scanning that occurred after the result file was loaded. Added "A pointer path must have at least one static address"



Memory viewer: Resolve imports has been moved to the settings (there is a slightly longer delay while starting the software if you enable this setting)



Disassembler:



Signature maker bug fixes. Execute signature generation on a separate thread. Resolve the previous instruction more reliably.



When the instruction address has been entered. Attempts to find the beginning of the function and disassembles the current function.



After NOP'ing an instruction, update the change accordingly in the disassembly view.



Settings: Added "Resolve imports (function names)"



PS. There are a LOT to do but I do not discuss about future features. Once a feature has been implemented, I will list it. Who knows what tomorrow exactly brings?



As far I tested. The signature maker in the disassembler is more reliable than the one in IDA. (I refer to the original IDA SigMaker plugin).



For obvious reasons signature generator and verification is significantly faster in CTS vs IDA SigMaker plugin. Array of bytes scan in the main view supports scanning for IDA style signatures. And of course you want to untick the "MEM_PRIVATE" option while scanning for the patterns.





#765

Title:

Wesleyy1993 wrote: 06/23/2019 01:00 - 453 days 16 hours 3 minutes

#765

CTS Pro V 1.12 doesnt scan.exe`s at all and the cmd output shows



Cheat Tool Set Professional (CTS) version: 1.12

22:56:10.433 The process (csrss) could not be opened at this time. Maybe you need higher access.

22:56:10.489 The process (wininit) could not be opened at this time. Maybe you need higher access.

22:56:12.78 The process (MsMpEng) could not be opened at this time. Maybe you need higher access.

22:56:12.329 The process (SecurityHealthService) could not be opened at this time. Maybe you need higher access.

22:56:12.749 The process (Memory Compression) could not be opened at this time. Maybe you need higher access.

22:56:12.892 The process (svchost) could not be opened at this time. Maybe you need higher access.

22:56:12.992 The process (NisSrv) could not be opened at this time. Maybe you need higher access.

22:56:13.58 The process (Registry) could not be opened at this time. Maybe you need higher access.

22:56:13.222 The process (SgrmBroker) could not be opened at this time. Maybe you need higher access.

22:56:13.262 The process (smss) could not be opened at this time. Maybe you need higher access.

22:56:13.898 The process (csrss) could not be opened at this time. Maybe you need higher access.

22:56:14.4 The process (services) could not be opened at this time. Maybe you need higher access.

22:56:14.119 The process (System) could not be opened at this time. Maybe you need higher access.

22:56:14.131 The process (Idle) could not be opened at this time. Maybe you need higher access.

#768

Title: Cheat Tool Set v1.14

Administrator

07/01/2019 18:00 - 444 days 23 hours 3 minutes

#768

Disassembler Signature generator bug fixes. GetFunctionStart() is more reliable. Added "Write a RETN". Removed "debug" echo and popups that I mistakenly forgot on in prior versions.



There is no more direct download available. The professional version requires a registration. Use a temporary email provider and your download will not be activated.



#765



People does not seem to have time to say thanks. Therefore I will neither have time to provide premium support nor tutorials.

Softwares like this are not coded in 15 mins or after a 3 months coding courses ...



Based on the info you provided, it's all a guessing game what you actually tried to do. I am sorry, I've no time for guess games.



Try v1.14, and see if "your" issue got solved. The software requires administrator privileges because some processes are run under an administrator user.



Also I assume you noticed that the tool supports only x64 processes. There is no way I will add a 32-bit support. It will simply take too much of my time.

#779

Title: Cheat Tool Set v1.15

Administrator

07/23/2019 10:23 - 423 days 6 hours 39 minutes

#779

Memory viewer:



Bug fixes. Also show possible long values (INT64). "Highlight" the selected node with a rectangle.



Most of the "flicker" problem has been fixed when a process is updating memory constantly.



Debug viewer: Added "String" scan type. The results will be echoed only on the console.



Settings:



Memory viewer: The update delay can be customized. The minimum allowed delay is 100ms.

Memory viewer: The number of decimals can be customized when a floating or double value is displayed.

Memory viewer (Disassembler): Added "Resolve function address".



Disassembler:



Added "Go to address" with the 'g' key. Editing the root node address does the same without opening a new instance.

#839

Title: Cheat Tool Set v1.16

Administrator

11/29/2019 12:14 - 294 days 3 hours 48 minutes

#839

The executable name has been changed to "CTS.exe". Therefore: To preserve your settings. Rename "Cheat Tool Set.ini" to "CTS.ini".



Main view:



The first scan of the main view uses as many threads as the processor has physical cores. Only four threads are used in the rescan because there are four result files.



UI "fixes"

"Add address manually" has been moved to the file menu

Added "Dump executable"



Use the path specified in the settings for "Dump process memory to file"

Fixed an issue "Non-negative number required. Parameter name: count" when dumping a process memory to file.

Fixed an issue with "Array of bytes scan" when "MEM_PRIVATE" was disabled

Fixed an issue in result view with "times changed" for float values



Settings: Check that the coordinates are within bounds before restoring the previous position



Pointer scanner:



Added "Browse the pointer value in the memory viewer"

When "Generate a pointer map" is enabled, scanning is multi-threaded. A pointer map can be generated when scanning a custom path.



Therefore, static addresses that are pointing to the same pointer value are also included in the results.

The scan is always threaded when the pointer map is generated.



Memory viewer: Fixed occasional "Cannot access a disposed object" exception.



Debug viewer: Added reasonable value checks for float and double value types. A minor bug fixes.



Memory viewer->Disassembler: Added a multi-threaded disassembler. "Find the code execution references (XREF) for this address"

#841

Title:

Maniac088 wrote: 12/06/2019 22:39 - 286 days 17 hours 24 minutes

#841

#839 Originally posted by Administrator







The executable name has been changed to "CTS.exe". Therefore: To preserve your settings. Rename "Cheat Tool Set.ini" to "CTS.ini".



Main view:



The first scan of the main view uses as many threads as the processor has physical cores. Only four threads are used in the rescan because there are four result files.



UI "fixes"

"Add address manually" has been moved to the file menu

Added "Dump executable"



Use the path specified in the settings for "Dump process memory to file"

Fixed an issue "Non-negative number required. Parameter name: count" when dumping a process memory to file.

Fixed an issue with "Array of bytes scan" when "MEM_PRIVATE" was disabled

Fixed an issue in result view with "times changed" for float values



Settings: Check that the coordinates are within bounds before restoring the previous position



Pointer scanner:



Added "Browse the pointer value in the memory viewer"

When "Generate a pointer map" is enabled, scanning is multi-threaded. A pointer map can be generated when scanning a custom path.



Therefore, static addresses that are pointing to the same pointer value are also included in the results.

The scan is always threaded when the pointer map is generated.



Memory viewer: Fixed occasional "Cannot access a disposed object" exception.



Debug viewer: Added reasonable value checks for float and double value types. A minor bug fixes.



Memory viewer->Disassembler: Added a multi-threaded disassembler. "Find the code execution references (XREF) for this address"



How do I download v1.16? A quote.839 Originally posted by AdministratorHow do I download v1.16?

#842

Title:

Administrator

12/07/2019 10:50 - 286 days 5 hours 13 minutes

#842

#841 Originally posted by Maniac088 :



Currently you need to register an account, and use the order button. The software must be ordered through the system (free). Using a temporary email provider will get your account to be removed. The order is activated manually to your account.

841 Originally posted by Maniac088 : https://overlayhack.com/cheat-tool-set#841 Currently you need to register an account, and use the order button. The software must be ordered through the system (free). Using a temporary email provider will get your account to be removed. The order is activated manually to your account.

#851

Title: C T S - v1.17

Administrator

01/11/2020 00:07 - 251 days 15 hours 56 minutes

#851

Main view



The process list is more decent. The list can be scrolled down using the first letter of a process name.

Added a simple DLL injector to the file menu.

Fixed logic issue with "Unknown initial value" scan.

Improved rescan scanning speed as the previous version has a bug

Fixed an issue when the string to be scanned in "Array of bytes" scan was a code style signature.



Memory viewer



Fixed an issue with extending the view when the pointer values were changing too fast so the extended portion was not drawn.

Use the tab instead of the new instance for "Browse this address in the memory viewer" and "Disassemble from this address"

Fixed an issue with "Find the code execution references (XREF) for the selected address". Currently, the list is displayed on the console.



Disassembler



Resolve the function address more reliably from the given address.



Signature generator: Limit the signature length to 64 bytes, effectively preventing an infinite loop when generating a signature.



Added "Browse the address pointed by the instruction in the memory viewer"



Debugger



Added "Show this address in the disassembler"

#852

Title:

nchawk wrote: 01/17/2020 23:06 - 244 days 16 hours 56 minutes

#852

Requested subscription, dunno how often you approve them, but would really like to test!

#853

Title: Cheat Tool Set Professional v1.18

Administrator

02/07/2020 11:45 - 224 days 4 hours 18 minutes

#853

Main view



The following optimizations have been done:



* The main memory scanner scanning speed is pretty much comparable to CE 7.0.



Memory usage is normalized for "Unknown initial value" scan.

Optimized "A sequence of values" scan. At best, scanning can be up to ten times faster than any previous version.

Added "Smaller than ..." and "Bigger than ..." comparison for "First scan"

Fixed an issue with "Float" and "Double" value scan. Results should now appear normally.

Fixed an issue with progress bar for "Next scan"

Fixed an issue with some missing results



Added "reasonable" value checks for "Float" and "Double" value memory scans. This will slow down the scan a bit but in turn provides a cleaner results.



Debugger



Fixed an issue with "Find out what addresses this instruction accesses". The results were equal with CE's 7.0 VEH according to my test. There might have been some missing results with prior versions.



*



The thing to note is that Lazarus FPC compiler for CE makes the native executable. In .NET, the program is basically run in a VM.



Also depending on an obfuscator used, that may add more or less overheat. The scanning speed is not therefore directly comparable.



At least I am happy with the current speed of the main memory scanner. While I optimized the scanner, I fixed many bugs and now the results are reliable.



https://youtu.be/clkw998stIo



The following optimizations have been done:* The main memory scanner scanning speed is pretty muchto CE 7.0.Memory usage is normalized for "Unknown initial value" scan.Optimized "A sequence of values" scan. At best, scanning can be up to ten times faster than any previous version.Added "Smaller than ..." and "Bigger than ..." comparison for "First scan"Fixed an issue with "Float" and "Double" value scan. Results should now appear normally.Fixed an issue with progress bar for "Next scan"Fixed an issue with some missing resultsAdded "reasonable" value checks for "Float" and "Double" value memory scans. This will slow down the scan a bit but in turn provides a cleaner results.Fixed an issue with "Find out what addresses this instruction accesses". The results were equal with CE's 7.0 VEH according to my test. There might have been some missing results with prior versions.The thing to note is that Lazarus FPC compiler for CE makes the native executable. In .NET, the program is basically run in a VM.Also depending on an obfuscator used, that may add more or less overheat. The scanning speed is not therefore directly comparable.At least I am happy with the current speed of the main memory scanner. While I optimized the scanner, I fixed many bugs and now the results are reliable.

#856

Title: Cheat Tool Set Professional v119

Administrator

04/10/2020 15:15 - 161 days 1 hours 48 minutes

#856

Main view



Removed "Dump executable" from the file menu. Added "Dump a module" tool

Added to the settings "Use the disassembly mode by default"

When scanning for sequence of bytes (Array of bytes), use only the data in the CODE sections

Settings: The memory viewer colors are customizable for a traditional view

When scanning for an array of bytes, that is a sequence of bytes. No need to tick what regions to scan as only the CODE sections will automatically be scanned regardless what is selected.



Memory viewer



Fixed an issue with resolving imports.

Fixed an issue that prevented unicode strings from appearing on some occasions

Added "Switch mode" functionality. This allows you to switch between the traditional and the disassembly mode without opening a new instance and/or window.

Update the changes real time in the disassembly mode as well.

Added "Peek behind the pointer" feature.

Added a work round to the TreeView's horizontal scroll bar issue. The horizontal scroll bar is now visible in every tab by default.

Show section category by default

Added setting "Pointers must be 32-bit aligned"

Added setting "Peek behind the pointer"

When selecting a row, highlight the entire row

Added "Open a new tab"

Extending a node is considerably faster vs any prior version. Mostly notable on a bigger add.



Disassembler



Fixed an issue after resolving a function address. Scroll to the entered instruction address programmatically and highlight the node.

Improved function entry detection logic.

Show string references



Debugger



Windows debugger: Fixed an issue that caused unexpected behavior on some occasions

Added "Browse this address in the memory viewer"



Pointer scanner



Debug viewer



Added support for "8 Bytes" value type

Added "Smaller than ..." and "Bigger than ..." comparison also to first scan

Fixed an issue with multi level pointers in rescan.



IAT



Fixed an issue with auto-detection. Resolving an import address table is notably faster than in any previous version.

#858

Title: Cheat Tool Set X v120

Administrator

05/11/2020 13:09 - 130 days 3 hours 54 minutes

#858

Changes marked with an [X] are only available in the professional (Paid version of the software). The newly added features will speed up your work up to 10-100 times vs any competition. If the competition can even do what the listed features does.



Yes, once you learn to utilize the tool unique features, literally the time wasted will decrease to 1/10.



Memory viewer



Added support for automatic pointer path deferencing. i.e. "A static pointer" 0x7FFF 0x0040 0x0010. The nodes will get automatically expanded according to a pointer path. [X]



Disassembler



Show assembly jump instructions with lines.

Show string references.

Show static pointer values.

Show API names (function calls)

Show the section category.

The colors of the disassembler are customizable.

Update the view real time also in the disassembly mode.



If the memory viewer was in disassembly mode and the process was closed. Restore the view as it was when attaching to the same process again.



Added "Bypass the selected instruction with a jump". Pretty much equivalent to CE's code injection.



Pointer scanner



The maximum offset can be larger than 32767 (0x7FFF)

Added "Dereference the selected path in the memory viewer" [X]

Added "The pointer must have a code execution reference before the result is added" [X]

Fixed an issue with "Include pointers that point to my module" when a pointer map generation was enabled



When "Generate a pointer map" is selected and the custom path scan is disabled, the scan will be multi-threaded. This is subject to a further optimization.

#860

Title: Cheat Tool Set X v121

Administrator

06/18/2020 19:54 - 91 days 21 hours 9 minutes

#860

Changes marked with an [X] are only available in the professional (Paid version of the software).



Main view



Show processed items in the list view. Reduced the load time upon starting the software or selecting a process.



Memory viewer



The minimum length of the string is adjustable in the settings.

Added "Modify the value of the selected address as 8 Bytes"



Disassembler



You can scroll the view with the up and down arrow keys.



Added:



Follow the address pointed by the instruction in the current view

Go back to the previous instruction



Debugger



Added "Read the value as"



8 Bytes

Hex

Vector 3



Memory pointer scanner [X]



The best implementation so far. The first scan is approx up to 9-10 times faster vs any prior version when "Generate a pointer map" is checked. Distribute the results evenly among the result files when "Generate a pointer map" is enabled. The re-scan is optimized.



Fixed an issue with adding the result to the list view when "The pointer must have a code execution reference before the result is added" is checked.



"Scan a custom path with a pointer map" has been removed to make the logic simpler.



Fixed an issue with "Keep the pointer map in memory".

#881

Title:

Administrator

09/15/2020 10:10 - 3 days 6 hours 53 minutes

#881

There has not been that much of interests towards the tool so.



I've stopped updating CTS. At least no more public versions will be available. It's been almost 4 years now, in terms of coding.



There is no way I will include any kernel driver or anything for free that bypasses the most advanced anti-cheats.



The required skill level for a tool like this is at least senior level (those guys gets paid easily 5k/month in real jobs).



You all are good enough with math to calculate how much the tool full source is worth of, if you was to hire someone to code a tool like this.



The question is. Why I should waste any of my time providing free updates? They got all time to nag but how many said even "Hi"?



There are not much of options. I either sell the full source to some bigger company or I have to start selling the tool for $499-999$ price per copy after I release the updated version with IDA PRO equivalent features.



The point is, they did not had time to even say "Thx". I will neither have time to provide free updates. Fair enough?



Anyway there are features implemented that detects malware modifications etc. etc. A lot of good stuff is coming...



Perhaps I will provide only videos from to show what you all missed in terms of saving time. Anyway CTS v1.21 was the last free version for now.





Post a comment