FearLess Cheat Engine

Code: Select all

{ Game   : eldenring.exe
  Version: 
  Date   : 2022-02-26
  Author : Bliseer

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(infFP,eldenring.exe,48 0F 4F C1 8B 00 89 87 44) // should be unique
//alloc(newmem,$1000,infFP)
//
//label(code)
//label(return)
//
//newmem:
//
//code:
//  cmovg rax,rcx
//  mov eax,[rax]
//  jmp return

infFP:
//  jmp newmem
//  nop
  cmovle rax,rcx

//return:
registersymbol(infFP)

[DISABLE]

infFP:
  db 48 0F 4F C1 8B 00

unregistersymbol(infFP)
//dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: eldenring.exe+42F4F9

eldenring.exe+42F4D4: 84 C0                    - test al,al
eldenring.exe+42F4D6: 75 2D                    - jne eldenring.exe+42F505
eldenring.exe+42F4D8: C7 44 24 40 00 00 00 00  - mov [rsp+40],00000000
eldenring.exe+42F4E0: 48 8D 8F 48 01 00 00     - lea rcx,[rdi+00000148]
eldenring.exe+42F4E7: 85 F6                    - test esi,esi
eldenring.exe+42F4E9: 79 07                    - jns eldenring.exe+42F4F2
eldenring.exe+42F4EB: 48 8D 44 24 40           - lea rax,[rsp+40]
eldenring.exe+42F4F0: EB 0B                    - jmp eldenring.exe+42F4FD
eldenring.exe+42F4F2: 3B 31                    - cmp esi,[rcx]
eldenring.exe+42F4F4: 48 8D 44 24 48           - lea rax,[rsp+48]
// ---------- INJECTING HERE ----------
eldenring.exe+42F4F9: 48 0F 4F C1              - cmovg rax,rcx
// ---------- DONE INJECTING  ----------
eldenring.exe+42F4FD: 8B 00                    - mov eax,[rax]
eldenring.exe+42F4FF: 89 87 44 01 00 00        - mov [rdi+00000144],eax
eldenring.exe+42F505: 48 8B 5C 24 50           - mov rbx,[rsp+50]
eldenring.exe+42F50A: 48 8B 74 24 58           - mov rsi,[rsp+58]
eldenring.exe+42F50F: 48 83 C4 30              - add rsp,30
eldenring.exe+42F513: 5F                       - pop rdi
eldenring.exe+42F514: C3                       - ret 
eldenring.exe+42F515: 66 0F 1F 44 00 00        - nop word ptr [rax+rax+00]
eldenring.exe+42F51B: E9 40 F6 A5 01           - jmp eldenring.exe+1E8EB60
eldenring.exe+42F520: 80 A1 96 01 00 00 BF     - and byte ptr [rcx+00000196],-41
}