FearLess Cheat Engine

Code: Select all

{ Game   : sao_hr.exe
  Version: 
  Date   : 2017-11-02
  Author : qweasdzxc17

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(SaoInfHP,sao_hr.exe,44 89 01 C3 CC) // should be unique
alloc(saoinfhpmod,$1000,"sao_hr.exe"+26A8F8)

label(infhporiginalcode)
label(infhpskip)
label(infhpreturn)
label(infhpskip2)

saoinfhpmod:
  pushf
  cmp [rcx+01D0],#1
  je infhporiginalcode
  jmp infhpskip

infhporiginalcode:
  popf
  mov [rcx],r8d
  jmp infhpskip2

infhpskip:
  popf
infhpskip2:
  ret
  int 3
  jmp infhpreturn

SaoInfHP:
  jmp saoinfhpmod
infhpreturn:
registersymbol(SaoInfHP)

[DISABLE]

SaoInfHP:
  db 44 89 01 C3 CC

unregistersymbol(SaoInfHP)
dealloc(saoinfhpmod)

{
// ORIGINAL CODE - INJECTION POINT: "sao_hr.exe"+26A8F8

"sao_hr.exe"+26A8DC: 41 5E                    -  pop r14
"sao_hr.exe"+26A8DE: C3                       -  ret 
"sao_hr.exe"+26A8DF: CC                       -  int 3 
"sao_hr.exe"+26A8E0: 44 8B 01                 -  mov r8d,[rcx]
"sao_hr.exe"+26A8E3: 44 03 C2                 -  add r8d,edx
"sao_hr.exe"+26A8E6: 79 07                    -  jns sao_hr.exe+26A8EF
"sao_hr.exe"+26A8E8: C7 01 00 00 00 00        -  mov [rcx],00000000
"sao_hr.exe"+26A8EE: C3                       -  ret 
"sao_hr.exe"+26A8EF: 44 39 41 04              -  cmp [rcx+04],r8d
"sao_hr.exe"+26A8F3: 44 0F 4C 41 04           -  cmovl r8d,[rcx+04]
// ---------- INJECTING HERE ----------
"sao_hr.exe"+26A8F8: 44 89 01                 -  mov [rcx],r8d
"sao_hr.exe"+26A8FB: C3                       -  ret 
"sao_hr.exe"+26A8FC: CC                       -  int 3 
// ---------- DONE INJECTING  ----------
"sao_hr.exe"+26A8FD: CC                       -  int 3 
"sao_hr.exe"+26A8FE: CC                       -  int 3 
"sao_hr.exe"+26A8FF: CC                       -  int 3 
"sao_hr.exe"+26A900: 83 C1 32                 -  add ecx,32
"sao_hr.exe"+26A903: 45 85 C0                 -  test r8d,r8d
"sao_hr.exe"+26A906: 0F 88 C4 D0 F1 FF        -  js sao_hr.exe+1879D0
"sao_hr.exe"+26A90C: E9 CF D0 F1 FF           -  jmp sao_hr.exe+1879E0
"sao_hr.exe"+26A911: CC                       -  int 3 
"sao_hr.exe"+26A912: CC                       -  int 3 
"sao_hr.exe"+26A913: CC                       -  int 3 
}