FearLess Cheat Engine

Code: Select all

{ Game   : theHunterCotW_F.exe
  Version: 
  Date   : 2020-06-27 (Edited Date)
  Author : ctl3d32

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(animalHealth,theHunterCotW_F.exe,2B F3 0F 10 80 8C 01 00 00) // should be unique
alloc(newmem,$1000,"theHunterCotW_F.exe"+54E9D6)

label(code)
label(return)
label(isAlive)
label(red)
label(green)
label(male)
label(female)
label(percentage)

registersymbol(percentage)

newmem:
  cmp [rax+0000018C],0 // is animal alive?
  jg  isAlive                                                            //<-- Change this to "jg code".
  mov [rax+000002C0],(float)0.9  //red
  mov [rax+000002C4],(float)0.0  //green
  mov [rax+000002C8],(float)0.5  //blue
  jmp code
isAlive:
  cmp  rax,[tagged]
  je   code
  push rbx
//  mov  bl,byte ptr [rax+88]
//  and  bl,1
//  test bl,bl //check if is male (male = odd, female = even)
//  jz   female
male:
  mov  rbx,[rax+D0]
  movss xmm0,[rax+1AC] //current weight
  divss xmm0,[rbx+310] //max male weight
  comiss xmm0,[percentage]
  pop  rbx
  jae  red
  jmp  green
female:  //is female
//  mov  rbx,[rax+D0]
//  movss xmm0,[rax+194] //current weight
//  divss xmm0,[rbx+308] //max female weight
//  //comiss xmm0,[rbx+370]
//  comiss xmm0,[percentage]
//  pop  rbx
//  jb  green
red:
  mov [rax+000002C0],(float)1.0  //red
  mov [rax+000002C4],(float)0.0  //green
  mov [rax+000002C8],(float)0.0  //blue
  jmp code
green:
  mov [rax+000002C0],(float)0.0  //red
  mov [rax+000002C4],(float)1.0  //green
  mov [rax+000002C8],(float)0.0  //blue
  jmp code

percentage:
  dd (float)0.95

code:
  movups xmm0,[rax+0000018C]
  jmp return

animalHealth+02:
  jmp newmem
  nop 2
return:
registersymbol(animalHealth)

[DISABLE]

animalHealth+02:
  db 0F 10 80 8C 01 00 00

unregistersymbol(animalHealth)
dealloc(newmem)
unregistersymbol(percentage)

{
// ORIGINAL CODE - INJECTION POINT: "theHunterCotW_F.exe"+54E9D6

"theHunterCotW_F.exe"+54E9B5: 75 03                    -  jne theHunterCotW_F.exe+54E9BA
"theHunterCotW_F.exe"+54E9B7: 48 8B C7                 -  mov rax,rdi
"theHunterCotW_F.exe"+54E9BA: 48 8B 88 78 33 00 00     -  mov rcx,[rax+00003378]
"theHunterCotW_F.exe"+54E9C1: 48 8B 74 24 38           -  mov rsi,[rsp+38]
"theHunterCotW_F.exe"+54E9C6: 48 85 C9                 -  test rcx,rcx
"theHunterCotW_F.exe"+54E9C9: 74 42                    -  je theHunterCotW_F.exe+54EA0D
"theHunterCotW_F.exe"+54E9CB: E8 D0 5B FB FF           -  call theHunterCotW_F.exe+5045A0
"theHunterCotW_F.exe"+54E9D0: 48 85 C0                 -  test rax,rax
"theHunterCotW_F.exe"+54E9D3: 74 2B                    -  je theHunterCotW_F.exe+54EA00
"theHunterCotW_F.exe"+54E9D5: F3 0F 10 80 8C 01 00     - db F3 0F 10 80 8C 01 00  // SHORTENED TO HIT INJECTION FROM:  movss xmm0,[rax+0000018C]
// ---------- INJECTING HERE ----------
"theHunterCotW_F.exe"+54E9DC: 00 F3                    -  add bl,dh
// ---------- DONE INJECTING  ----------
"theHunterCotW_F.exe"+54E9DE: 0F 5E 80 88 01 00 00     -  divps xmm0,[rax+00000188]
"theHunterCotW_F.exe"+54E9E5: F3 0F 59 05 57 4E 13 01  -  mulss xmm0,[theHunterCotW_F.exe+1683844]
"theHunterCotW_F.exe"+54E9ED: 0F 2F 45 14              -  comiss xmm0,[rbp+14]
"theHunterCotW_F.exe"+54E9F1: 77 0D                    -  ja theHunterCotW_F.exe+54EA00
"theHunterCotW_F.exe"+54E9F3: B0 01                    -  mov al,01
"theHunterCotW_F.exe"+54E9F5: 48 8B 6C 24 40           -  mov rbp,[rsp+40]
"theHunterCotW_F.exe"+54E9FA: 48 83 C4 20              -  add rsp,20
"theHunterCotW_F.exe"+54E9FE: 5F                       -  pop rdi
"theHunterCotW_F.exe"+54E9FF: C3                       -  ret 
"theHunterCotW_F.exe"+54EA00: 32 C0                    -  xor al,al
}