FearLess Cheat Engine

Vee_ wrote: ↑

Sat Jul 08, 2017 7:51 pm

Zero weight script

Code: Select all

Game Name       : Two Worlds 2
Version         : Unknown
Process Name    : TwoWorlds2_DX10.exe
Author          : Vee_
CRC32           : 80a145a8
Table Version   : 1.0
Table Creation  : 2017-06-23
///////////////////////////////////////////////////////////////////////////////////
Credits       : Vee_
///////////////////////////////////////////////////////////////////////////////////
Link: http://fearlessrevolution.com/viewtopic.php?f=4&t=1166&p=12507#p12507
---------------------------------------------------------------

[ENABLE]

aobscanmodule(zero_w2,TwoWorlds2_DX10.exe,8B 8E 5C 0D 00 00) // should be unique
alloc(newmem,$1000)

label(code2)
label(return)

newmem:

code2:
  mov [esi+00000D5C],0
  mov ecx,[esi+00000D5C]
  jmp return

zero_w2:
  jmp newmem
  nop
return:
registersymbol(zero_w2)

[DISABLE]

zero_w2:
  db 8B 8E 5C 0D 00 00

unregistersymbol(zero_w2)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "TwoWorlds2_DX10.exe"+232F35

"TwoWorlds2_DX10.exe"+232F1E: CC                       -  int 3 
"TwoWorlds2_DX10.exe"+232F1F: CC                       -  int 3 
"TwoWorlds2_DX10.exe"+232F20: 55                       -  push ebp
"TwoWorlds2_DX10.exe"+232F21: 8B EC                    -  mov ebp,esp
"TwoWorlds2_DX10.exe"+232F23: 83 E4 F0                 -  and esp,-10
"TwoWorlds2_DX10.exe"+232F26: 83 EC 18                 -  sub esp,18
"TwoWorlds2_DX10.exe"+232F29: 56                       -  push esi
"TwoWorlds2_DX10.exe"+232F2A: 8B F1                    -  mov esi,ecx
"TwoWorlds2_DX10.exe"+232F2C: 8B 86 A0 10 00 00        -  mov eax,[esi+000010A0]
"TwoWorlds2_DX10.exe"+232F32: 83 38 01                 -  cmp dword ptr [eax],01
// ---------- INJECTING HERE ----------
"TwoWorlds2_DX10.exe"+232F35: 8B 8E 5C 0D 00 00        -  mov ecx,[esi+00000D5C]
// ---------- DONE INJECTING  ----------
"TwoWorlds2_DX10.exe"+232F3B: 57                       -  push edi
"TwoWorlds2_DX10.exe"+232F3C: 75 07                    -  jne TwoWorlds2_DX10.exe+232F45
"TwoWorlds2_DX10.exe"+232F3E: B8 FF FF FF 3F           -  mov eax,3FFFFFFF
"TwoWorlds2_DX10.exe"+232F43: EB 0F                    -  jmp TwoWorlds2_DX10.exe+232F54
"TwoWorlds2_DX10.exe"+232F45: 8B 96 20 0A 00 00        -  mov edx,[esi+00000A20]
"TwoWorlds2_DX10.exe"+232F4B: 0F BF 42 14              -  movsx eax,word ptr [edx+14]
"TwoWorlds2_DX10.exe"+232F4F: 35 39 6A 00 00           -  xor eax,00006A39
"TwoWorlds2_DX10.exe"+232F54: 3B C8                    -  cmp ecx,eax
"TwoWorlds2_DX10.exe"+232F56: 0F 8E AD 00 00 00        -  jng TwoWorlds2_DX10.exe+233009
"TwoWorlds2_DX10.exe"+232F5C: 8B 86 48 0C 00 00        -  mov eax,[esi+00000C48]
}

fearlessfan1 wrote: ↑

Tue Jun 27, 2017 2:30 am

Here is the pointer for ver 2.0 released on June 20th, 2017 on steam for the horse race timer. After the horse race begins it will show how many milliseconds you have, you can then adjust it or freeze it. While I haven't had any issues, it might be good to turn it off before you finish.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="26">
  <CheatEntries>
    <CheatEntry>
      <ID>4</ID>
      <Description>"Horse Race Timer Milliseconds"</Description>
      <LastState Value="508396" RealAddress="2762F820"/>
      <VariableType>4 Bytes</VariableType>
      <Address>"TwoWorlds2_DX10.exe"+009E1F38</Address>
      <Offsets>
        <Offset>0</Offset>
        <Offset>11C</Offset>
        <Offset>0</Offset>
        <Offset>94</Offset>
      </Offsets>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols/>
</CheatTable>

This is my first shared cheat, and I don't understand how AoB works or a method to convert it to do so, but figured the horse race was aggravating enough that I should help fellows on the path.