SunBeam wrote: ↑Wed Jan 26, 2022 1:58 pm
Mister Modification wrote: ↑Wed Jan 26, 2022 1:21 pm
I am trying to get more clear:
In your table I can not search stuff because I can not see what adresses a instruction accesses. Break and trace is disabled too. So basically I can not do anything in your table but use the things you made. Thats the reason I put my stuff in aSwedishMagyar's table.
What.. the actual.. fuck? Do you understand that what you're explaining are Cheat Engine features and are not related to my table whatsoever? One possible reason you may not be able to do whatever is cuz you need CE 7.4 (as my table was saved with CE 7.4). Time to upgrade, please? »
[Link]. Thanks.
P.S.: Please don't go into the "but it's a virus" subject. It's a false positive and I've already explained
here how you should install it.
Already installed it. Thank you for that great advice. Because now it works.
Reworked kill All Enemies script to filter out father and son.
Code: Select all
[ENABLE]
aobscanmodule(killEnemies,GoW.exe,48 8D 48 F8 48 0F 44 CB 48 85 C9 4C 8D 69) // should be unique
alloc(newmem,$1000,killEnemies)
label(code)
label(return)
newmem:
code:
lea rcx,[rax-08]
cmove rcx,rbx
mov r13,[rcx+20]
mov r13,[r13+30]
cmp [r13+24],30616F72 //Kratos
je return
cmp [r13+24],0030306E //Boooyyy
je return
mov r13,[rcx+18]
mov [r13+00000388],00 // Everyone else dies
jmp return
killEnemies:
jmp newmem
nop 3
return:
registersymbol(killEnemies)
[DISABLE]
killEnemies:
db 48 8D 48 F8 48 0F 44 CB
unregistersymbol(killEnemies)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GoW.exe+744A1C
GoW.exe+7449F4: 4C 8D 35 05 B6 8B FF - lea r14,[GoW.exe]
GoW.exe+7449FB: 48 C1 E2 06 - shl rdx,06
GoW.exe+7449FF: 49 03 D0 - add rdx,r8
GoW.exe+744A02: 49 C1 E7 04 - shl r15,04
GoW.exe+744A06: 4C 03 FD - add r15,rbp
GoW.exe+744A09: 48 89 54 24 38 - mov [rsp+38],rdx
GoW.exe+744A0E: 4C 89 44 24 28 - mov [rsp+28],r8
GoW.exe+744A13: 4C 8B E2 - mov r12,rdx
GoW.exe+744A16: 49 8B 07 - mov rax,[r15]
GoW.exe+744A19: 48 85 C0 - test rax,rax
// ---------- INJECTING HERE ----------
GoW.exe+744A1C: 48 8D 48 F8 - lea rcx,[rax-08]
// ---------- DONE INJECTING ----------
GoW.exe+744A20: 48 0F 44 CB - cmove rcx,rbx
GoW.exe+744A24: 48 85 C9 - test rcx,rcx
GoW.exe+744A27: 4C 8D 69 08 - lea r13,[rcx+08]
GoW.exe+744A2B: 49 8B C5 - mov rax,r13
GoW.exe+744A2E: 48 0F 44 C3 - cmove rax,rbx
GoW.exe+744A32: 49 3B C7 - cmp rax,r15
GoW.exe+744A35: 0F 84 45 04 00 00 - je GoW.exe+744E80
GoW.exe+744A3B: 48 8B 71 18 - mov rsi,[rcx+18]
GoW.exe+744A3F: 48 8B 8E 58 3A 00 00 - mov rcx,[rsi+00003A58]
GoW.exe+744A46: 48 85 C9 - test rcx,rcx
}
EDIT:
For those who killed boooyyy here is infinite health to make him T-pose no more.
Code: Select all
[ENABLE]
aobscanmodule(makeBoyGreatAgain,GoW.exe,48 85 C9 4C 8D 69 08) // should be unique
alloc(newmem,$1000,makeBoyGreatAgain)
label(code)
label(return)
newmem:
code:
test rcx,rcx
lea r13,[rcx+08]
mov rax,[rcx+20]
mov rax,[rax+30]
cmp [rax+24],0030306E //Breath Boooyyyy
jne return
mov rax,[rcx+18]
mov [rax+00000388],461c4000 //Highly protected float
jmp return
makeBoyGreatAgain:
jmp newmem
nop 2
return:
registersymbol(makeBoyGreatAgain)
[DISABLE]
makeBoyGreatAgain:
db 48 85 C9 4C 8D 69 08
unregistersymbol(makeBoyGreatAgain)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GoW.exe+744A24
GoW.exe+7449FF: 49 03 D0 - add rdx,r8
GoW.exe+744A02: 49 C1 E7 04 - shl r15,04
GoW.exe+744A06: 4C 03 FD - add r15,rbp
GoW.exe+744A09: 48 89 54 24 38 - mov [rsp+38],rdx
GoW.exe+744A0E: 4C 89 44 24 28 - mov [rsp+28],r8
GoW.exe+744A13: 4C 8B E2 - mov r12,rdx
GoW.exe+744A16: 49 8B 07 - mov rax,[r15]
GoW.exe+744A19: 48 85 C0 - test rax,rax
killEnemies: E9 DF B5 8A FF - jmp 7FF638AE0000
GoW.exe+744A21: 0F 1F 00 - nop dword ptr [rax]
// ---------- INJECTING HERE ----------
GoW.exe+744A24: 48 85 C9 - test rcx,rcx
// ---------- DONE INJECTING ----------
GoW.exe+744A27: 4C 8D 69 08 - lea r13,[rcx+08]
GoW.exe+744A2B: 49 8B C5 - mov rax,r13
GoW.exe+744A2E: 48 0F 44 C3 - cmove rax,rbx
GoW.exe+744A32: 49 3B C7 - cmp rax,r15
GoW.exe+744A35: 0F 84 45 04 00 00 - je GoW.exe+744E80
GoW.exe+744A3B: 48 8B 71 18 - mov rsi,[rcx+18]
GoW.exe+744A3F: 48 8B 8E 58 3A 00 00 - mov rcx,[rsi+00003A58]
GoW.exe+744A46: 48 85 C9 - test rcx,rcx
GoW.exe+744A49: 75 05 - jne GoW.exe+744A50
GoW.exe+744A4B: 48 8B EB - mov rbp,rbx