Community Cheat Tables of Cheat Engine
https://fearlessrevolution.com/
DDS made a trainer already but it costs money so...HardRom wrote: ↑Mon Dec 03, 2018 9:31 pmI was able to find the initial addresses for weapon1 and weapon2 with a 4byte scan on their values. Easily done, but I don't how to AOB.
DDS is enroute with his trainer, nothing heard from CH yet... hopefully a quick release with health and ammo comes. So far, that's all I have needed.
Code: Select all
<AssemblerScript>
define(address,"JustCause4.exe"+912954A)
define(bytes,89 B4 B9 28 02 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"JustCause4.exe"+912954A)
label(code)
label(return)
newmem:
code:
mov esi,#100
mov [rcx+rdi*4+00000228],esi
jmp return
address:
jmp newmem
nop
nop
return:
[DISABLE]
address:
db bytes
// mov [rcx+rdi*4+00000228],esi
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "JustCause4.exe"+912954A
"JustCause4.exe"+9129522: 41 57 - push r15
"JustCause4.exe"+9129524: 48 83 EC 20 - sub rsp,20
"JustCause4.exe"+9129528: 48 63 FA - movsxd rdi,edx
"JustCause4.exe"+912952B: 48 89 CB - mov rbx,rcx
"JustCause4.exe"+912952E: 45 0F B6 F1 - movzx r14d,r9l
"JustCause4.exe"+9129532: 45 89 C7 - mov r15d,r8d
"JustCause4.exe"+9129535: 8B B4 B9 DC 02 00 00 - mov esi,[rcx+rdi*4+000002DC]
"JustCause4.exe"+912953C: 41 39 F0 - cmp r8d,esi
"JustCause4.exe"+912953F: 8B AC B9 28 02 00 00 - mov ebp,[rcx+rdi*4+00000228]
"JustCause4.exe"+9129546: 41 0F 4C F0 - cmovl esi,r8d
// ---------- INJECTING HERE ----------
"JustCause4.exe"+912954A: 89 B4 B9 28 02 00 00 - mov [rcx+rdi*4+00000228],esi
// ---------- DONE INJECTING ----------
"JustCause4.exe"+9129551: 48 8B 89 E8 07 00 00 - mov rcx,[rcx+000007E8]
"JustCause4.exe"+9129558: 48 85 C9 - test rcx,rcx
"JustCause4.exe"+912955B: 74 38 - je JustCause4.exe+9129595
"JustCause4.exe"+912955D: E8 4E 8A 39 F7 - call JustCause4.exe+4C1FB0
"JustCause4.exe"+9129562: 84 C0 - test al,al
"JustCause4.exe"+9129564: 74 2F - je JustCause4.exe+9129595
"JustCause4.exe"+9129566: 83 FF 0E - cmp edi,0E
"JustCause4.exe"+9129569: 75 09 - jne JustCause4.exe+9129574
"JustCause4.exe"+912956B: 48 8D 0D 1E C2 A5 F8 - lea rcx,[JustCause4.exe+1B85790]
"JustCause4.exe"+9129572: EB 0C - jmp JustCause4.exe+9129580
}
</AssemblerScript>