theHunter™: Call of the Wild

[Usurper]

it was taken out bc of the new trophy rating system from the latest update

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[tauro]

ok makes sense, i guess it will be way harder now to implement it again or create it

[Kingofwoods]

@Pigeon,

Big thx for doing this man. Do you have a readme somewhere that explains everything in your massive table a bit more. I Do understand a lot, but not everything. Also, does anyone else experience the game stays in blurmode when zooming in/out with a gun or go into the Game menu when you use the table?
I now have to load the table, pick what I want and close the entire cheat engine program. Than the game is playable.

I would rly like to see your progress and how you figure things out, so if you ever feel free to make a Youtube tutorial video for alm animals for example? That would be super awesome.
I'v tried to fiddle with cheat engine myself, but apart from ammo , money and experience I can't rly find other values.

[Kingofwoods]

Anyone else have this problem?

When I launch cheat engine, and I pick you are table @pidgeon. After a minute in game, my mouse suddenly shows up on screen and I can't use it anymore in game. I feel like Cheat engine took the front screen and Even when I go back in game, I can only shoot, but not looking with mouse. Also when I press ESC to go in menu, nothing shows and I get a blurry screen. I have to ALT + F4 the game each time.

EDIT: Apparently there were some hotkeys configured that I didn't know about. I kept pressing them in game and that made it crash.

[pigeon]

Usurper
I remember I was able to find weight values for the animals, but hard to say where it "comes from". I mean, exactly when you killed animal or when you just started the game... Here is AOB and code snippet for the instruction that read animals weight (seems like not overall, but those that you can spot)

Spoiler

F3 0F 10 81 94 01 00 00

// ORIGINAL CODE - INJECTION POINT: "theHunterCotW_F.exe"+6B6349

"theHunterCotW_F.exe"+6B6317: 48 85 C0 - test rax,rax
"theHunterCotW_F.exe"+6B631A: 74 0D - je theHunterCotW_F.exe+6B6329
"theHunterCotW_F.exe"+6B631C: 80 B8 A4 00 00 00 00 - cmp byte ptr [rax+000000A4],00
"theHunterCotW_F.exe"+6B6323: 74 04 - je theHunterCotW_F.exe+6B6329
"theHunterCotW_F.exe"+6B6325: 0F 57 C0 - xorps xmm0,xmm0
"theHunterCotW_F.exe"+6B6328: C3 - ret
"theHunterCotW_F.exe"+6B6329: F3 0F 10 88 08 03 00 00 - movss xmm1,[rax+00000308]
"theHunterCotW_F.exe"+6B6331: F3 0F 5F 88 C0 02 00 00 - maxss xmm1,[rax+000002C0]
"theHunterCotW_F.exe"+6B6339: F3 0F 10 90 04 03 00 00 - movss xmm2,[rax+00000304]
"theHunterCotW_F.exe"+6B6341: F3 0F 5D 90 BC 02 00 00 - minss xmm2,[rax+000002BC]
// ---------- INJECTING HERE ----------
"theHunterCotW_F.exe"+6B6349: F3 0F 10 81 94 01 00 00 - movss xmm0,[rcx+00000194]
// ---------- DONE INJECTING ----------
"theHunterCotW_F.exe"+6B6351: F3 0F 5C C2 - subss xmm0,xmm2
"theHunterCotW_F.exe"+6B6355: F3 0F 5C CA - subss xmm1,xmm2
"theHunterCotW_F.exe"+6B6359: F3 0F 5E C1 - divss xmm0,xmm1
"theHunterCotW_F.exe"+6B635D: 0F 57 C9 - xorps xmm1,xmm1
"theHunterCotW_F.exe"+6B6360: F3 0F 5F C1 - maxss xmm0,xmm1
"theHunterCotW_F.exe"+6B6364: F3 0F 5D 05 64 CE F4 00 - minss xmm0,[theHunterCotW_F.exe+16031D0]
"theHunterCotW_F.exe"+6B636C: C3 - ret
"theHunterCotW_F.exe"+6B636D: CC - int 3
"theHunterCotW_F.exe"+6B636E: CC - int 3
"theHunterCotW_F.exe"+6B636F: CC - int 3

and same but for the case when you spot animal with binoculars:

Spoiler

F3 0F 10 B1 94 01 00 00

// ORIGINAL CODE - INJECTION POINT: "theHunterCotW_F.exe"+6B624E

"theHunterCotW_F.exe"+6B621A: 80 B8 A4 00 00 00 00 - cmp byte ptr [rax+000000A4],00
"theHunterCotW_F.exe"+6B6221: 74 08 - je theHunterCotW_F.exe+6B622B
"theHunterCotW_F.exe"+6B6223: 0F 57 FF - xorps xmm7,xmm7
"theHunterCotW_F.exe"+6B6226: 0F 28 F7 - movaps xmm6,xmm7
"theHunterCotW_F.exe"+6B6229: EB 43 - jmp theHunterCotW_F.exe+6B626E
"theHunterCotW_F.exe"+6B622B: F3 0F 10 88 04 03 00 00 - movss xmm1,[rax+00000304]
"theHunterCotW_F.exe"+6B6233: 0F 57 FF - xorps xmm7,xmm7
"theHunterCotW_F.exe"+6B6236: F3 0F 5D 88 BC 02 00 00 - minss xmm1,[rax+000002BC]
"theHunterCotW_F.exe"+6B623E: F3 0F 10 80 08 03 00 00 - movss xmm0,[rax+00000308]
"theHunterCotW_F.exe"+6B6246: F3 0F 5F 80 C0 02 00 00 - maxss xmm0,[rax+000002C0]
// ---------- INJECTING HERE ----------
"theHunterCotW_F.exe"+6B624E: F3 0F 10 B1 94 01 00 00 - movss xmm6,[rcx+00000194]
// ---------- DONE INJECTING ----------
"theHunterCotW_F.exe"+6B6256: F3 0F 5C F1 - subss xmm6,xmm1
"theHunterCotW_F.exe"+6B625A: F3 0F 5C C1 - subss xmm0,xmm1
"theHunterCotW_F.exe"+6B625E: F3 0F 5E F0 - divss xmm6,xmm0
"theHunterCotW_F.exe"+6B6262: F3 0F 5F F7 - maxss xmm6,xmm7
"theHunterCotW_F.exe"+6B6266: F3 0F 5D 35 62 CF F4 00 - minss xmm6,[theHunterCotW_F.exe+16031D0]
"theHunterCotW_F.exe"+6B626E: E8 2D 00 00 00 - call theHunterCotW_F.exe+6B62A0
"theHunterCotW_F.exe"+6B6273: F3 0F 58 C6 - addss xmm0,xmm6
"theHunterCotW_F.exe"+6B6277: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
"theHunterCotW_F.exe"+6B627C: F3 0F 59 05 D0 55 F7 00 - mulss xmm0,[theHunterCotW_F.exe+162B854]
"theHunterCotW_F.exe"+6B6284: F3 0F 5F C7 - maxss xmm0,xmm7

Do not really know though how to get for the instruction where those values are taken from originally :/


tauro
I guess it's actually still should work, but I just doesn't want to mess with it anymore since my priority is visual stuff. I mean, you can try to copy/paste that script from old table to new one and see if it's working (I guess it's still should work as expecting).


Kingofwoods
I thought about readme since, yeah, there is some things that can be hard to notice without of pointing to it o description... I'll probably make it during this weekend.

This is weird issue with blur. Which exact scripts you are using when you have problems with blur?

Mouse issue probably happen when you are pressing Shift+Q keys for some reason? Are at the same time HUD disappearing and you can notice how render distance and foliage quality slightly increasing? If yes, you can "fix" that issue by manually changing hotkeys in this cheat table for two scripts:
- select (just press once with left mouse button) "noHUD" script and press Ctrl+H;
- you'll see new window where you can assign/edit/delete hotkeys for that script. So if you doesn't need that hotkey at all in CE, just press on "Shift+Q" line with right mouse button and choose "Delete;
- Do the same thing with "Foliage -> Better_Foliage" script;
- Don't forget to save changes by saving cheat table (Alt+Ctrl+S).
I have an idea how to make it easier by applying that hotkey to a specific single script by default, so with future table updates you'll be able to delete that specific script and that's it.

I'm not native English speaker and I have only few minutes by talking in English by voice, so I can't make tutorials :) You can see from first message in this topic that I started to work on this tables 3 years ago and it was very simple and basic scripts. During all this time I slowly learning and still there is a lot of things that I doesn't understand and doesn't know how to do :) But if you want to learn how to do various stuff, I would suggest [Link] and [Link] YT channels, as well as just googling various things for more examples and descriptions. And for finding exact values... It's just some kind of "games with logic", when you got an idea how to get to some specific value and you checking this... I think for that there is couldn't be any real tutorials. For example I'm still, even after 1+ year, can't find how to edit rain/snow render distance values because I can't "find" them :)

[Lucasino27]

The max trophy diamond script doesn't work anymore, it's such a shame. It says : Error while scanning for AOB's : trophy_rating.
If you could update it, it would be really nice and great

[pigeon]

Updated first message in this topic with the last table update and description for the scripts. For the future I'll keep share tables in the same first message here. As it was mentioned in the updated message (decided to duplicate it here, just in case), if anyone will want to "stick" particular message with your own table updates, I can put direct link for this in the first message.

Lucasino27
Sorry, but I want to avoid stuff that not necessary for the visuals :/ I don't mind though if anyone else will update it or share here anything else based on that or any other of my scripts.

[ctl3d32]

My LUA script to remove weapon sway, recoil and bullet gravity.

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")

debug_removeBreakpoint(weapon_address)

debug_setBreakpoint(weapon_address)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim +0x168,0.0) --Bullet Gravity
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

[Lucasino27]

Lucasino27
Sorry, but I want to avoid stuff that not necessary for the visuals :/ I don't mind though if anyone else will update it or share here anything else based on that or any other of my scripts.

[ctl3d32]

My LUA script to:
a) remove weapon sway, recoil and bullet gravity.
b) Every animal is indefinitely spotted by default (blinking red)

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")
spot_address   = getAddress("theHunterCotW_F.exe+75359A")

debug_removeBreakpoint(weapon_address)
debug_removeBreakpoint(spot_address)

debug_setBreakpoint(weapon_address)
debug_setBreakpoint(spot_address)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim+0x168,0.0) --Bullet Gravity
  elseif (RIP == spot_address) then
    writeFloat(RBX+0x2A8,1.0)
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--Weapon_Address

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

--Spot Address

--theHunterCotW_F.exe+753592 - F3 0F10 05 3E44A301   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0,00) }
--========================================================================================
--theHunterCotW_F.exe+75359A - 0F2E 83 A8020000      - ucomiss xmm0,[rbx+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7535A1 - 0F85 BC000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535A7 - F3 0F10 05 2D44A301   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0,00) }
--theHunterCotW_F.exe+7535AF - 0F2E 83 AC020000      - ucomiss xmm0,[rbx+000002AC]
--theHunterCotW_F.exe+7535B6 - 0F85 A7000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535BC - F3 0F10 05 1C44A301   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0,00) }
--theHunterCotW_F.exe+7535C4 - 0F2E 83 B0020000      - ucomiss xmm0,[rbx+000002B0]
--theHunterCotW_F.exe+7535CB - 0F84 9D000000         - je theHunterCotW_F.exe+75366E
--theHunterCotW_F.exe+7535D1 - E9 8D000000           - jmp theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535D6 - 0FB6 83 68030000      - movzx eax,byte ptr [rbx+00000368]
--theHunterCotW_F.exe+7535DD - 3C 01                 - cmp al,01 { 1 }
--theHunterCotW_F.exe+7535DF - 75 0E                 - jne theHunterCotW_F.exe+7535EF
--theHunterCotW_F.exe+7535E1 - F3 0F10 0F            - movss xmm1,[rdi]
--theHunterCotW_F.exe+7535E5 - 48 8B CB              - mov rcx,rbx

[Kingofwoods]

My LUA script to:
a) remove weapon sway, recoil and bullet gravity.
b) Every animal is indefinitely spotted by default (blinking red)

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")
spot_address   = getAddress("theHunterCotW_F.exe+75359A")

debug_removeBreakpoint(weapon_address)
debug_removeBreakpoint(spot_address)

debug_setBreakpoint(weapon_address)
debug_setBreakpoint(spot_address)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim+0x168,0.0) --Bullet Gravity
  elseif (RIP == spot_address) then
    writeFloat(RBX+0x2A8,1.0)
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--Weapon_Address

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

--Spot Address

--theHunterCotW_F.exe+753592 - F3 0F10 05 3E44A301   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0,00) }
--========================================================================================
--theHunterCotW_F.exe+75359A - 0F2E 83 A8020000      - ucomiss xmm0,[rbx+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7535A1 - 0F85 BC000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535A7 - F3 0F10 05 2D44A301   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0,00) }
--theHunterCotW_F.exe+7535AF - 0F2E 83 AC020000      - ucomiss xmm0,[rbx+000002AC]
--theHunterCotW_F.exe+7535B6 - 0F85 A7000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535BC - F3 0F10 05 1C44A301   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0,00) }
--theHunterCotW_F.exe+7535C4 - 0F2E 83 B0020000      - ucomiss xmm0,[rbx+000002B0]
--theHunterCotW_F.exe+7535CB - 0F84 9D000000         - je theHunterCotW_F.exe+75366E
--theHunterCotW_F.exe+7535D1 - E9 8D000000           - jmp theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535D6 - 0FB6 83 68030000      - movzx eax,byte ptr [rbx+00000368]
--theHunterCotW_F.exe+7535DD - 3C 01                 - cmp al,01 { 1 }
--theHunterCotW_F.exe+7535DF - 75 0E                 - jne theHunterCotW_F.exe+7535EF
--theHunterCotW_F.exe+7535E1 - F3 0F10 0F            - movss xmm1,[rdi]
--theHunterCotW_F.exe+7535E5 - 48 8B CB              - mov rcx,rbx

Dumb question probbly, but how do I get this to work?
I searched the internet, but every thing I try I keep getting errors. I'm probbly doing something wrong.

[ctl3d32]

My LUA script to:
a) remove weapon sway, recoil and bullet gravity.
b) Every animal is indefinitely spotted by default (blinking red)

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")
spot_address   = getAddress("theHunterCotW_F.exe+75359A")

debug_removeBreakpoint(weapon_address)
debug_removeBreakpoint(spot_address)

debug_setBreakpoint(weapon_address)
debug_setBreakpoint(spot_address)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim+0x168,0.0) --Bullet Gravity
  elseif (RIP == spot_address) then
    writeFloat(RBX+0x2A8,1.0)
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--Weapon_Address

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

--Spot Address

--theHunterCotW_F.exe+753592 - F3 0F10 05 3E44A301   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0,00) }
--========================================================================================
--theHunterCotW_F.exe+75359A - 0F2E 83 A8020000      - ucomiss xmm0,[rbx+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7535A1 - 0F85 BC000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535A7 - F3 0F10 05 2D44A301   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0,00) }
--theHunterCotW_F.exe+7535AF - 0F2E 83 AC020000      - ucomiss xmm0,[rbx+000002AC]
--theHunterCotW_F.exe+7535B6 - 0F85 A7000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535BC - F3 0F10 05 1C44A301   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0,00) }
--theHunterCotW_F.exe+7535C4 - 0F2E 83 B0020000      - ucomiss xmm0,[rbx+000002B0]
--theHunterCotW_F.exe+7535CB - 0F84 9D000000         - je theHunterCotW_F.exe+75366E
--theHunterCotW_F.exe+7535D1 - E9 8D000000           - jmp theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535D6 - 0FB6 83 68030000      - movzx eax,byte ptr [rbx+00000368]
--theHunterCotW_F.exe+7535DD - 3C 01                 - cmp al,01 { 1 }
--theHunterCotW_F.exe+7535DF - 75 0E                 - jne theHunterCotW_F.exe+7535EF
--theHunterCotW_F.exe+7535E1 - F3 0F10 0F            - movss xmm1,[rdi]
--theHunterCotW_F.exe+7535E5 - 48 8B CB              - mov rcx,rbx

Dumb question probbly, but how do I get this to work?
I searched the internet, but every thing I try I keep getting errors. I'm probbly doing something wrong.

1. Open Cheat Engine
2. Go to File->Open Process (and select game process)
3. Click "Memory View"
4. In Memory Viewer, go to Tools->Lua Engine
5. Paste code above and click Execute

[ctl3d32]

New version of LUA script to:

a) remove weapon sway, recoil and bullet gravity
b) every animal is highlighted (you can choose the color by mixing the RGB values from 0.0 to 1.0)
c) animals can be spoted so that they will look different from the others

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")
spot_address   = getAddress("theHunterCotW_F.exe+7A8DA1")
spot_address2   = getAddress("theHunterCotW_F.exe+75359A")


debug_removeBreakpoint(weapon_address)
debug_removeBreakpoint(spot_address)
debug_removeBreakpoint(spot_address2)

debug_setBreakpoint(weapon_address)
debug_setBreakpoint(spot_address)
debug_setBreakpoint(spot_address2)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim+0x168,0.0) --Bullet Gravity
  elseif (RIP == spot_address) then
    writeFloat(RAX+0x2A8,0) --red
    writeFloat(RAX+0x2AC,0) --green
    writeFloat(RAX+0x2B0,0) --blue
    writeFloat(RBX,10.0)
  elseif (RIP == spot_address2) then
    writeFloat(RBX+0x2A8,0)    --red
    writeFloat(RBX+0x2AC,1.0)  --green
    writeFloat(RBX+0x2B0,0)    --blue
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--Weapon_Address

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

--Spot Address

--theHunterCotW_F.exe+7A8D99 - F3 0F10 05 37EC9D01   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0.00) }
--========================================================================================
--theHunterCotW_F.exe+7A8DA1 - 0F2E 80 A8020000      - ucomiss xmm0,[rax+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7A8DA8 - 75 69                 - jne theHunterCotW_F.exe+7A8E13
--theHunterCotW_F.exe+7A8DAA - F3 0F10 05 2AEC9D01   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0.00) }
--theHunterCotW_F.exe+7A8DB2 - 0F2E 80 AC020000      - ucomiss xmm0,[rax+000002AC]
--theHunterCotW_F.exe+7A8DB9 - 75 58                 - jne theHunterCotW_F.exe+7A8E13
--theHunterCotW_F.exe+7A8DBB - F3 0F10 05 1DEC9D01   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0.00) }
--theHunterCotW_F.exe+7A8DC3 - 0F2E 80 B0020000      - ucomiss xmm0,[rax+000002B0]
--theHunterCotW_F.exe+7A8DCA - 75 47                 - jne theHunterCotW_F.exe+7A8E13
--theHunterCotW_F.exe+7A8DCC - 48 8D 55 A8           - lea rdx,[rbp-58]
--theHunterCotW_F.exe+7A8DD0 - 48 8B 0D C119AB01     - mov rcx,[theHunterCotW_F.exe+225A798] { (188005B6800) }
--theHunterCotW_F.exe+7A8DD7 - E8 64F61800           - call theHunterCotW_F.exe+938440
--theHunterCotW_F.exe+7A8DDC - F3 0F10 45 A8         - movss xmm0,[rbp-58]
--theHunterCotW_F.exe+7A8DE1 - F3 0F11 45 D8         - movss [rbp-28],xmm0
--theHunterCotW_F.exe+7A8DE6 - F3 0F10 4D AC         - movss xmm1,[rbp-54]

--Spot Address 2

--theHunterCotW_F.exe+753592 - F3 0F10 05 3E44A301   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0,00) }
--========================================================================================
--theHunterCotW_F.exe+75359A - 0F2E 83 A8020000      - ucomiss xmm0,[rbx+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7535A1 - 0F85 BC000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535A7 - F3 0F10 05 2D44A301   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0,00) }
--theHunterCotW_F.exe+7535AF - 0F2E 83 AC020000      - ucomiss xmm0,[rbx+000002AC]
--theHunterCotW_F.exe+7535B6 - 0F85 A7000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535BC - F3 0F10 05 1C44A301   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0,00) }
--theHunterCotW_F.exe+7535C4 - 0F2E 83 B0020000      - ucomiss xmm0,[rbx+000002B0]
--theHunterCotW_F.exe+7535CB - 0F84 9D000000         - je theHunterCotW_F.exe+75366E
--theHunterCotW_F.exe+7535D1 - E9 8D000000           - jmp theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535D6 - 0FB6 83 68030000      - movzx eax,byte ptr [rbx+00000368]
--theHunterCotW_F.exe+7535DD - 3C 01                 - cmp al,01 { 1 }
--theHunterCotW_F.exe+7535DF - 75 0E                 - jne theHunterCotW_F.exe+7535EF
--theHunterCotW_F.exe+7535E1 - F3 0F10 0F            - movss xmm1,[rdi]
--theHunterCotW_F.exe+7535E5 - 48 8B CB              - mov rcx,rbx

[Kingofwoods]

My LUA script to:
a) remove weapon sway, recoil and bullet gravity.
b) Every animal is indefinitely spotted by default (blinking red)

Code: Select all

debugProcess(2)  -- Attach Debugger to the process.

weapon_address = getAddress("theHunterCotW_F.exe+66D5D3")
spot_address   = getAddress("theHunterCotW_F.exe+75359A")

debug_removeBreakpoint(weapon_address)
debug_removeBreakpoint(spot_address)

debug_setBreakpoint(weapon_address)
debug_setBreakpoint(spot_address)

function debugger_onBreakpoint()
  debug_getContext(true)
  if (RIP == weapon_address) then
    pAim = readPointer(R8 + 0x280)

    writeFloat(pAim +0x38,0.0) --Sway

    writeFloat(pAim +0xB8,0.0) --Recoil
    writeFloat(pAim +0xBC,0.0) --Recoil
    writeFloat(pAim +0xC0,0.0) --Recoil
    writeFloat(pAim +0xC4,0.0) --Recoil

    writeFloat(pAim+0x168,0.0) --Bullet Gravity
  elseif (RIP == spot_address) then
    writeFloat(RBX+0x2A8,1.0)
  end
  debug_continueFromBreakpoint(co_run)
  return 1
end

--Weapon_Address

--theHunterCotW_F.exe+66D5B3 - 48 8B 81 E0020000     - mov rax,[rcx+000002E0]
--theHunterCotW_F.exe+66D5BA - 48 8B 91 F8020000     - mov rdx,[rcx+000002F8]
--theHunterCotW_F.exe+66D5C1 - 48 8B 14 D0           - mov rdx,[rax+rdx*8]
--theHunterCotW_F.exe+66D5C5 - 0FB6 82 A9000000      - movzx eax,byte ptr [rdx+000000A9]
--theHunterCotW_F.exe+66D5CC - EB 02                 - jmp theHunterCotW_F.exe+66D5D0
--theHunterCotW_F.exe+66D5CE - 32 C0                 - xor al,al
--theHunterCotW_F.exe+66D5D0 - 0FB6 C8               - movzx ecx,al
--========================================================================================
--theHunterCotW_F.exe+66D5D3 - 49 8B 80 10020000     - mov rax,[r8+00000210]
--========================================================================================
--theHunterCotW_F.exe+66D5DA - 8B 14 C8              - mov edx,[rax+rcx*8]
--theHunterCotW_F.exe+66D5DD - 48 8B 0D 9C74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }
--theHunterCotW_F.exe+66D5E4 - 48 81 C1 68020000     - add rcx,00000268 { 616 }
--theHunterCotW_F.exe+66D5EB - E9 B09F2600           - jmp theHunterCotW_F.exe+8D75A0
--theHunterCotW_F.exe+66D5F0 - 40 53                 - push rbx
--theHunterCotW_F.exe+66D5F2 - 48 83 EC 20           - sub rsp,20 { 32 }
--theHunterCotW_F.exe+66D5F6 - 8B D1                 - mov edx,ecx
--theHunterCotW_F.exe+66D5F8 - 45 33 C9              - xor r9d,r9d
--theHunterCotW_F.exe+66D5FB - 48 8B 0D 7E74BC01     - mov rcx,[theHunterCotW_F.exe+2234A80] { (1B27AB10000) }

--Spot Address

--theHunterCotW_F.exe+753592 - F3 0F10 05 3E44A301   - movss xmm0,[theHunterCotW_F.exe+21879D8] { (0,00) }
--========================================================================================
--theHunterCotW_F.exe+75359A - 0F2E 83 A8020000      - ucomiss xmm0,[rbx+000002A8]
--========================================================================================
--theHunterCotW_F.exe+7535A1 - 0F85 BC000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535A7 - F3 0F10 05 2D44A301   - movss xmm0,[theHunterCotW_F.exe+21879DC] { (0,00) }
--theHunterCotW_F.exe+7535AF - 0F2E 83 AC020000      - ucomiss xmm0,[rbx+000002AC]
--theHunterCotW_F.exe+7535B6 - 0F85 A7000000         - jne theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535BC - F3 0F10 05 1C44A301   - movss xmm0,[theHunterCotW_F.exe+21879E0] { (0,00) }
--theHunterCotW_F.exe+7535C4 - 0F2E 83 B0020000      - ucomiss xmm0,[rbx+000002B0]
--theHunterCotW_F.exe+7535CB - 0F84 9D000000         - je theHunterCotW_F.exe+75366E
--theHunterCotW_F.exe+7535D1 - E9 8D000000           - jmp theHunterCotW_F.exe+753663
--theHunterCotW_F.exe+7535D6 - 0FB6 83 68030000      - movzx eax,byte ptr [rbx+00000368]
--theHunterCotW_F.exe+7535DD - 3C 01                 - cmp al,01 { 1 }
--theHunterCotW_F.exe+7535DF - 75 0E                 - jne theHunterCotW_F.exe+7535EF
--theHunterCotW_F.exe+7535E1 - F3 0F10 0F            - movss xmm1,[rdi]
--theHunterCotW_F.exe+7535E5 - 48 8B CB              - mov rcx,rbx

Dumb question probbly, but how do I get this to work?
I searched the internet, but every thing I try I keep getting errors. I'm probbly doing something wrong.

1. Open Cheat Engine
2. Go to File->Open Process (and select game process)
3. Click "Memory View"
4. In Memory Viewer, go to Tools->Lua Engine
5. Paste code above and click Execute

Thanks man. I did that and nothing happened? I still had wobble, recoil etc.. Also, no animal was highlighted. Highlight worked normal after script with binos. For a few seconds I outline them. So I don't know what I did wrong.

[ctl3d32]

Dumb question probbly, but how do I get this to work?
I searched the internet, but every thing I try I keep getting errors. I'm probbly doing something wrong.

1. Open Cheat Engine
2. Go to File->Open Process (and select game process)
3. Click "Memory View"
4. In Memory Viewer, go to Tools->Lua Engine
5. Paste code above and click Execute

Thanks man. I did that and nothing happened? I still had wobble, recoil etc.. Also, no animal was highlighted. Highlight worked normal after script with binos. For a few seconds I outline them. So I don't know what I did wrong.

I converted it into a table. Check if it helps you.
PS.: Made for game version 1768129. Might not work with your game version if it differs.

What it has:
a) weapon mod: no sway and no recoil
b) highlighted animals (works like wallhack)