SunBeam wrote: ↑Fri Mar 01, 2019 9:11 am
It's this one:
viewtopic.php?t=2433 Adapted, of course. Big props to
mgr.inz.Player for the major kick-ass movement calculation.
well, haven't expected it was that easy to open the console, but i can't type anything into it
MetroExodus.exe+AD1EFF - 83 3D 768BAF00 00 - cmp dword ptr [MetroExodus.exe+15CAA7C],00 { (0),0 }
Toggles Benchmark FPS Screen xD
i wonder if typing needs to be enabled seperatly or if its already enabled but i have no focus on the console window, hmmmm xD
MetroExodus.exe+3BE2D9 - 80 3D 34692101 00 - cmp byte ptr [MetroExodus.exe+15D4C14],00 { (0.01),0 }
Pauses the game
Code: Select all
[ENABLE]
aobscanmodule(_GetConsole,MetroExodus.exe,44 0F B6 61 50) // should be unique
alloc(newmem,$1000,MetroExodus.exe)
alloc(_pConsole,8)
registersymbol(_pConsole)
registersymbol(_GetConsole)
newmem:
mov [_pConsole],rcx
mov byte ptr [rcx+50],1
mov byte ptr [MetroExodus.exe+15D4C14],1
code:
movzx r12d,byte ptr [rcx+50]
jmp return
_GetConsole:
jmp newmem
return:
_pConsole:
dd 0
[DISABLE]
_GetConsole:
db 44 0F B6 61 50
unregistersymbol(_GetConsole)
unregistersymbol(_pConsole)
dealloc(_pConsole)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "MetroExodus.exe"+1212A484
"MetroExodus.exe"+1212A450: E8 7B 60 9A EE - call MetroExodus.exe+AD04D0
"MetroExodus.exe"+1212A455: E8 D6 FD 92 EE - call MetroExodus.exe+A5A230
"MetroExodus.exe"+1212A45A: 48 8B 0D D7 06 4A EF - mov rcx,[MetroExodus.exe+15CAB38]
"MetroExodus.exe"+1212A461: 0F B6 5D 50 - movzx ebx,byte ptr [rbp+50]
"MetroExodus.exe"+1212A465: 0F 57 C9 - xorps xmm1,xmm1
"MetroExodus.exe"+1212A468: 8B 05 DA 64 4A EF - mov eax,[MetroExodus.exe+15D0948]
"MetroExodus.exe"+1212A46E: 0F 57 D2 - xorps xmm2,xmm2
"MetroExodus.exe"+1212A471: F3 0F 10 1D C7 34 28 EF - movss xmm3,[MetroExodus.exe+13AD940]
"MetroExodus.exe"+1212A479: 0F 28 C3 - movaps xmm0,xmm3
"MetroExodus.exe"+1212A47C: F3 0F 10 35 98 33 28 EF - movss xmm6,[MetroExodus.exe+13AD81C]
// ---------- INJECTING HERE ----------
"MetroExodus.exe"+1212A484: 44 0F B6 61 50 - movzx r12d,byte ptr [rcx+50]
// ---------- DONE INJECTING ----------
"MetroExodus.exe"+1212A489: F3 0F 10 25 F7 30 28 EF - movss xmm4,[MetroExodus.exe+13AD588]
"MetroExodus.exe"+1212A491: F3 48 0F 2A C8 - cvtsi2ss xmm1,rax
"MetroExodus.exe"+1212A496: 8B 05 B0 64 4A EF - mov eax,[MetroExodus.exe+15D094C]
"MetroExodus.exe"+1212A49C: F3 48 0F 2A D0 - cvtsi2ss xmm2,rax
"MetroExodus.exe"+1212A4A1: F3 0F 5E C1 - divss xmm0,xmm1
"MetroExodus.exe"+1212A4A5: 0F 28 F8 - movaps xmm7,xmm0
"MetroExodus.exe"+1212A4A8: F3 0F 59 FE - mulss xmm7,xmm6
"MetroExodus.exe"+1212A4AC: F3 0F 5E F2 - divss xmm6,xmm2
"MetroExodus.exe"+1212A4B0: 4C 39 79 08 - cmp [rcx+08],r15
"MetroExodus.exe"+1212A4B4: 74 74 - je MetroExodus.exe+1212A52A
}