I updated Hylian Z's
Concentration script to game version 1.0.1 and 1.0.2. It could probably be made better by not tying it to a specific address and using more AOB bytes but it's not my code so I don't want to change it.
Version 1.0.1
Code: Select all
<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="31">
<CheatEntries>
<CheatEntry>
<ID>26509</ID>
<Description>"Concentrate!"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : HorizonZeroDawn.exe
Version:
Date : 2020-08-07
Author : Hylian
Inf Concentration
}
define(address,"HorizonZeroDawn.exe"+14945BA)
define(bytes,C5 FA 11 43 5C)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"HorizonZeroDawn.exe"+1494584)
label(code)
label(return)
newmem:
code:
nop
nop
nop
nop
nop
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// vmovss [rbx+5C],xmm0
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "HorizonZeroDawn.exe"+14922BA
"HorizonZeroDawn.exe"+1492284: C5 FA 10 45 24 - vmovss xmm0,[rbp+24]
"HorizonZeroDawn.exe"+1492289: 48 8B 05 10 4F C9 05 - mov rax,[HorizonZeroDawn.exe+71271A0]
"HorizonZeroDawn.exe"+1492290: 48 8B 4B 30 - mov rcx,[rbx+30]
"HorizonZeroDawn.exe"+1492294: C5 FA 5E 90 8C 01 00 00 - vdivss xmm2,xmm0,[rax+0000018C]
"HorizonZeroDawn.exe"+149229C: C5 FA 10 05 9C B6 5F 00 - vmovss xmm0,[HorizonZeroDawn.exe+1A8D940]
"HorizonZeroDawn.exe"+14922A4: C5 FA 5E 49 2C - vdivss xmm1,xmm0,[rcx+2C]
"HorizonZeroDawn.exe"+14922A9: C5 EA 59 D9 - vmulss xmm3,xmm2,xmm1
"HorizonZeroDawn.exe"+14922AD: C5 FA 10 53 5C - vmovss xmm2,[rbx+5C]
"HorizonZeroDawn.exe"+14922B2: C5 EA 5C C3 - vsubss xmm0,xmm2,xmm3
"HorizonZeroDawn.exe"+14922B6: C5 F8 2F F0 - vcomiss xmm6,xmm0,xmm0
// ---------- INJECTING HERE ----------
"HorizonZeroDawn.exe"+14922BA: C5 FA 11 43 5C - vmovss [rbx+5C],xmm0
// ---------- DONE INJECTING ----------
"HorizonZeroDawn.exe"+14922BF: 0F 82 99 00 00 00 - jb HorizonZeroDawn.exe+149235E
"HorizonZeroDawn.exe"+14922C5: 48 8B 41 38 - mov rax,[rcx+38]
"HorizonZeroDawn.exe"+14922C9: C5 FA 10 50 34 - vmovss xmm2,[rax+34]
"HorizonZeroDawn.exe"+14922CE: EB 0D - jmp HorizonZeroDawn.exe+14922DD
"HorizonZeroDawn.exe"+14922D0: 48 8B 43 30 - mov rax,[rbx+30]
"HorizonZeroDawn.exe"+14922D4: 48 8B 48 38 - mov rcx,[rax+38]
"HorizonZeroDawn.exe"+14922D8: C5 FA 10 51 34 - vmovss xmm2,[rcx+34]
"HorizonZeroDawn.exe"+14922DD: 48 8B 0D BC 4E C9 05 - mov rcx,[HorizonZeroDawn.exe+71271A0]
"HorizonZeroDawn.exe"+14922E4: 48 8D 53 64 - lea rdx,[rbx+64]
"HorizonZeroDawn.exe"+14922E8: 48 8B 89 88 09 00 00 - mov rcx,[rcx+00000988]
}
</AssemblerScript>
</CheatEntry>
</CheatEntries>
<UserdefinedSymbols/>
</CheatTable>
Version 1.0.2 (August 19, 2020)
Code: Select all
<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="31">
<CheatEntries>
<CheatEntry>
<ID>26509</ID>
<Description>"Concentrate!"</Description>
<LastState Activated="1"/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : HorizonZeroDawn.exe
Version:
Date : 2020-08-07
Author : Hylian
Inf Concentration
}
define(address,"HorizonZeroDawn.exe"+1494E9A)
define(bytes,C5 FA 11 43 5C)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"HorizonZeroDawn.exe"+1494E64)
label(code)
label(return)
newmem:
code:
nop
nop
nop
nop
nop
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// vmovss [rbx+5C],xmm0
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "HorizonZeroDawn.exe"+14922BA
"HorizonZeroDawn.exe"+1492284: C5 FA 10 45 24 - vmovss xmm0,[rbp+24]
"HorizonZeroDawn.exe"+1492289: 48 8B 05 10 4F C9 05 - mov rax,[HorizonZeroDawn.exe+71271A0]
"HorizonZeroDawn.exe"+1492290: 48 8B 4B 30 - mov rcx,[rbx+30]
"HorizonZeroDawn.exe"+1492294: C5 FA 5E 90 8C 01 00 00 - vdivss xmm2,xmm0,[rax+0000018C]
"HorizonZeroDawn.exe"+149229C: C5 FA 10 05 9C B6 5F 00 - vmovss xmm0,[HorizonZeroDawn.exe+1A8D940]
"HorizonZeroDawn.exe"+14922A4: C5 FA 5E 49 2C - vdivss xmm1,xmm0,[rcx+2C]
"HorizonZeroDawn.exe"+14922A9: C5 EA 59 D9 - vmulss xmm3,xmm2,xmm1
"HorizonZeroDawn.exe"+14922AD: C5 FA 10 53 5C - vmovss xmm2,[rbx+5C]
"HorizonZeroDawn.exe"+14922B2: C5 EA 5C C3 - vsubss xmm0,xmm2,xmm3
"HorizonZeroDawn.exe"+14922B6: C5 F8 2F F0 - vcomiss xmm6,xmm0,xmm0
// ---------- INJECTING HERE ----------
"HorizonZeroDawn.exe"+14922BA: C5 FA 11 43 5C - vmovss [rbx+5C],xmm0
// ---------- DONE INJECTING ----------
"HorizonZeroDawn.exe"+14922BF: 0F 82 99 00 00 00 - jb HorizonZeroDawn.exe+149235E
"HorizonZeroDawn.exe"+14922C5: 48 8B 41 38 - mov rax,[rcx+38]
"HorizonZeroDawn.exe"+14922C9: C5 FA 10 50 34 - vmovss xmm2,[rax+34]
"HorizonZeroDawn.exe"+14922CE: EB 0D - jmp HorizonZeroDawn.exe+14922DD
"HorizonZeroDawn.exe"+14922D0: 48 8B 43 30 - mov rax,[rbx+30]
"HorizonZeroDawn.exe"+14922D4: 48 8B 48 38 - mov rcx,[rax+38]
"HorizonZeroDawn.exe"+14922D8: C5 FA 10 51 34 - vmovss xmm2,[rcx+34]
"HorizonZeroDawn.exe"+14922DD: 48 8B 0D BC 4E C9 05 - mov rcx,[HorizonZeroDawn.exe+71271A0]
"HorizonZeroDawn.exe"+14922E4: 48 8D 53 64 - lea rdx,[rbx+64]
"HorizonZeroDawn.exe"+14922E8: 48 8B 89 88 09 00 00 - mov rcx,[rcx+00000988]
}
</AssemblerScript>
</CheatEntry>
</CheatEntries>
<UserdefinedSymbols/>
</CheatTable>