FearLess Cheat Engine

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>143</ID>
      <Description>"Infinite Combo Timer V2"</Description>
      <LastState Activated="1"/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(TestComboTimer,re4.exe,C6 F2 0F 58 C8 0F 57 C0) // should be unique
alloc(newmem,$1000,TestComboTimer)

label(code)
label(return)

newmem:

code:
//  addsd xmm1,xmm0
  xorps xmm0,xmm0
  jmp return

TestComboTimer+01:
  jmp newmem
  nop 2
return:
registersymbol(TestComboTimer)

[DISABLE]

TestComboTimer+01:
  db F2 0F 58 C8 0F 57 C0

unregistersymbol(TestComboTimer)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+1CB4C02

re4.exe+1CB4BE5: 48 89 4F 24     - mov [rdi+24],rcx
re4.exe+1CB4BE9: 89 4F 30        - mov [rdi+30],ecx
re4.exe+1CB4BEC: 89 4F 20        - mov [rdi+20],ecx
re4.exe+1CB4BEF: EB 66           - jmp re4.exe+1CB4C57
re4.exe+1CB4BF1: 8B 47 30        - mov eax,[rdi+30]
re4.exe+1CB4BF4: 85 C0           - test eax,eax
re4.exe+1CB4BF6: 7F 37           - jg re4.exe+1CB4C2F
re4.exe+1CB4BF8: 0F 5A C8        - cvtps2pd xmm1,xmm0
re4.exe+1CB4BFB: 0F 57 C0        - xorps xmm0,xmm0
re4.exe+1CB4BFE: F3 0F 5A C6     - cvtss2sd xmm0,xmm6
// ---------- INJECTING HERE ----------
re4.exe+1CB4C02: F2 0F 58 C8     - addsd xmm1,xmm0
// ---------- DONE INJECTING  ----------
re4.exe+1CB4C06: 0F 57 C0        - xorps xmm0,xmm0
re4.exe+1CB4C09: F3 0F 5A C3     - cvtss2sd xmm0,xmm3
re4.exe+1CB4C0D: 66 0F 5A C9     - cvtpd2ps xmm1,xmm1
re4.exe+1CB4C11: 0F 5A D1        - cvtps2pd xmm2,xmm1
re4.exe+1CB4C14: F3 0F 11 4F 24  - movss [rdi+24],xmm1
re4.exe+1CB4C19: 66 0F 2F C2     - comisd xmm0,xmm2
re4.exe+1CB4C1D: 77 3B           - ja re4.exe+1CB4C5A
re4.exe+1CB4C1F: 83 7F 28 00     - cmp dword ptr [rdi+28],00
re4.exe+1CB4C23: 7E 35           - jle re4.exe+1CB4C5A
re4.exe+1CB4C25: 41 C6 06 01     - mov byte ptr [r14],01
}
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>138</ID>
      <Description>"Infinite Gun Mayhem Time"</Description>
      <LastState Activated="1"/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(GunMayhem,re4.exe,F2 0F 5C D9 66 0F 5A D3 0F 2F D0 F3 0F 11 53) // should be unique
alloc(newmem,$1000,GunMayhem)

label(code)
label(return)

newmem:

code:
  //subsd xmm3,xmm1
  cvtpd2ps xmm2,xmm3
  jmp return

GunMayhem:
  jmp newmem
  nop 3
return:
registersymbol(GunMayhem)

[DISABLE]

GunMayhem:
  db F2 0F 5C D9 66 0F 5A D3

unregistersymbol(GunMayhem)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+192D4F0

re4.exe+192D4CD: F3 0F 2A C0           - cvtsi2ss xmm0,eax
re4.exe+192D4D1: 0F 5A DB              - cvtps2pd xmm3,xmm3
re4.exe+192D4D4: 0F 5A C8              - cvtps2pd xmm1,xmm0
re4.exe+192D4D7: 0F 57 C0              - xorps xmm0,xmm0
re4.exe+192D4DA: F2 0F 59 D1           - mulsd xmm2,xmm1
re4.exe+192D4DE: F3 0F 5A C6           - cvtss2sd xmm0,xmm6
re4.exe+192D4E2: F2 0F 58 D0           - addsd xmm2,xmm0
re4.exe+192D4E6: 66 0F 5A C2           - cvtpd2ps xmm0,xmm2
re4.exe+192D4EA: 0F 5A C8              - cvtps2pd xmm1,xmm0
re4.exe+192D4ED: 0F 57 C0              - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
re4.exe+192D4F0: F2 0F 5C D9           - subsd xmm3,xmm1
// ---------- DONE INJECTING  ----------
re4.exe+192D4F4: 66 0F 5A D3           - cvtpd2ps xmm2,xmm3
re4.exe+192D4F8: 0F 2F D0              - comiss xmm2,xmm0
re4.exe+192D4FB: F3 0F 11 53 20        - movss [rbx+20],xmm2
re4.exe+192D500: 0F 87 98 00 00 00     - ja re4.exe+192D59E
re4.exe+192D506: 40 38 6B 60           - cmp [rbx+60],bpl
re4.exe+192D50A: 75 45                 - jne re4.exe+192D551
re4.exe+192D50C: 48 8B 05 85 6E 91 0B  - mov rax,[re4.exe+D244398]
re4.exe+192D513: 48 8B 78 40           - mov rdi,[rax+40]
re4.exe+192D517: 48 85 FF              - test rdi,rdi
re4.exe+192D51A: 74 31                 - je re4.exe+192D54D
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

Code: Select all

re4.exe+333C834 - 4C 8B BC 24 A8000000  - mov r15,[rsp+000000A8] //Add Quest item