worked on these things for fun, here you go 3 scripts:
1. No personal shield cooldown
2. No jetpack cooldown
3. No stationary turret overheat
Code: Select all
{ Game : helldivers2.exe
Version:
Date : 2024-03-03
Author : admin
This script does blah blah blah
}
[ENABLE]
aobscanmodule(shield,game.dll,F3 41 0F 5C CA F3 42) // should be unique
registersymbol(shield)
shield:
db F3 0F 5C C9 90
[DISABLE]
shield:
db F3 41 0F 5C CA
{
// ORIGINAL CODE - INJECTION POINT: game.dll+4E1758
game.dll+4E172C: 74 17 - je game.dll+4E1745
game.dll+4E172E: 41 88 04 24 - mov [r12],al
game.dll+4E1732: 4D 8B C4 - mov r8,r12
game.dll+4E1735: 49 8B 07 - mov rax,[r15]
game.dll+4E1738: BA 28 D1 9A B1 - mov edx,B19AD128
game.dll+4E173D: 8B 48 10 - mov ecx,[rax+10]
game.dll+4E1740: E8 8B 63 47 00 - call game.dll+957AD0
game.dll+4E1745: F3 42 0F 10 8C F6 38 18 00 00 - movss xmm1,[rsi+r14*8+00001838]
game.dll+4E174F: 0F 2F CF - comiss xmm1,xmm7
game.dll+4E1752: 0F 86 03 01 00 00 - jbe game.dll+4E185B
// ---------- INJECTING HERE ----------
game.dll+4E1758: F3 41 0F 5C CA - subss xmm1,xmm10
// ---------- DONE INJECTING ----------
game.dll+4E175D: F3 42 0F 11 8C F6 38 18 00 00 - movss [rsi+r14*8+00001838],xmm1
game.dll+4E1767: 0F 28 D1 - movaps xmm2,xmm1
game.dll+4E176A: 41 80 7C 24 01 00 - cmp byte ptr [r12+01],00
game.dll+4E1770: 0F 84 89 00 00 00 - je game.dll+4E17FF
game.dll+4E1776: 0F 28 C1 - movaps xmm0,xmm1
game.dll+4E1779: F3 41 0F 58 C2 - addss xmm0,xmm10
game.dll+4E177E: 41 0F 2F C3 - comiss xmm0,xmm11
game.dll+4E1782: 76 7B - jna game.dll+4E17FF
game.dll+4E1784: 44 0F 2F D9 - comiss xmm11,xmm1
game.dll+4E1788: 72 75 - jb game.dll+4E17FF
}
Code: Select all
{ Game : helldivers2.exe
Version:
Date : 2024-03-03
Author : admin
This script does blah blah blah
}
[ENABLE]
aobscanmodule(jetpack,game.dll,8B 08 89 8C BE ?? ?? 00 00) // should be unique
registersymbol(jetpack)
jetpack+2:
db 90 90 90 90 90 90 90
[DISABLE]
jetpack+2:
db 89 8C BE A8 2D 00 00
unregistersymbol(jetpack)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: game.dll+521A81
game.dll+521A61: 49 8B C6 - mov rax,r14
game.dll+521A64: 39 18 - cmp [rax],ebx
game.dll+521A66: 75 7B - jne game.dll+521AE3
game.dll+521A68: 8B 48 04 - mov ecx,[rax+04]
game.dll+521A6B: 83 F9 FF - cmp ecx,-01
game.dll+521A6E: 74 73 - je game.dll+521AE3
game.dll+521A70: 8B F9 - mov edi,ecx
game.dll+521A72: 48 8B 8C CE 28 20 00 00 - mov rcx,[rsi+rcx*8+00002028]
game.dll+521A7A: E8 31 49 E3 FF - call game.dll+3563B0
game.dll+521A7F: 8B 08 - mov ecx,[rax]
// ---------- INJECTING HERE ----------
game.dll+521A81: 89 8C BE A8 2D 00 00 - mov [rsi+rdi*4+00002DA8],ecx
// ---------- DONE INJECTING ----------
game.dll+521A88: 83 FD 01 - cmp ebp,01
game.dll+521A8B: 75 56 - jne game.dll+521AE3
game.dll+521A8D: 8B CB - mov ecx,ebx
game.dll+521A8F: 89 6C 24 30 - mov [rsp+30],ebp
game.dll+521A93: E8 38 9D 41 00 - call game.dll+93B7D0
game.dll+521A98: 48 8B 15 31 88 1E 01 - mov rdx,[game.dll+170A2D0]
game.dll+521A9F: 4C 8D 4C 24 40 - lea r9,[rsp+40]
game.dll+521AA4: 48 89 44 24 38 - mov [rsp+38],rax
game.dll+521AA9: 0F 28 44 24 30 - movaps xmm0,[rsp+30]
game.dll+521AAE: 48 8B 05 BB 5C 15 01 - mov rax,[game.dll+1677770]
}
Code: Select all
{ Game : helldivers2.exe
Version:
Date : 2024-03-04
Author : admin
This script does blah blah blah
}
[ENABLE]
aobscanmodule(turrets,game.dll,F3 0F 11 84 30 ?? ?? 00 00 41 8B 47 ??) // should be unique
registersymbol(turrets)
turrets:
db 90 90 90 90 90 90 90 90 90
[DISABLE]
turrets:
db F3 0F 11 84 30 48 7A 00 00
unregistersymbol(turrets)
{
// ORIGINAL CODE - INJECTION POINT: game.dll+380B6C
game.dll+380B3E: F3 48 0F 2C C6 - cvttss2si rax,xmm6
game.dll+380B43: 89 45 24 - mov [rbp+24],eax
game.dll+380B46: 4C 8B 64 24 48 - mov r12,[rsp+48]
game.dll+380B4B: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
game.dll+380B50: 48 8B 44 24 70 - mov rax,[rsp+70]
game.dll+380B55: 0F 57 D2 - xorps xmm2,xmm2
game.dll+380B58: F3 41 0F 10 47 1C - movss xmm0,[r15+1C]
game.dll+380B5E: 8B D3 - mov edx,ebx
game.dll+380B60: 48 8B CE - mov rcx,rsi
game.dll+380B63: F3 0F 58 84 30 48 7A 00 00 - addss xmm0,[rax+rsi+00007A48]
// ---------- INJECTING HERE ----------
game.dll+380B6C: F3 0F 11 84 30 48 7A 00 00 - movss [rax+rsi+00007A48],xmm0
// ---------- DONE INJECTING ----------
game.dll+380B75: 41 8B 47 38 - mov eax,[r15+38]
game.dll+380B79: 89 45 04 - mov [rbp+04],eax
game.dll+380B7C: E8 0F F8 FF FF - call game.dll+380390
game.dll+380B81: 41 80 7F 44 00 - cmp byte ptr [r15+44],00
game.dll+380B86: 4C 8B 7C 24 30 - mov r15,[rsp+30]
game.dll+380B8B: 4C 8B 74 24 38 - mov r14,[rsp+38]
game.dll+380B90: 48 8B 7C 24 50 - mov rdi,[rsp+50]
game.dll+380B95: 48 8B 74 24 58 - mov rsi,[rsp+58]
game.dll+380B9A: 48 8B 9C 24 80 00 00 00 - mov rbx,[rsp+00000080]
game.dll+380BA2: 74 07 - je game.dll+380BAB
}