BitKit

7 августа, 2019

@Garik66Вот теперь стало яснее что тут происходит, спасибо

6 августа, 2019

Полный листинг:

Спойлер


<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="28">
  <CheatEntries>
    <CheatEntry>
      <ID>0</ID>
      <Description>"CompactMode"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible    = state; getMainForm().Panel5.Visible    = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))

[DISABLE]
LuaCall(cycleFullCompact(nil,false))
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>141</ID>
      <Description>"[X] &lt;== Warhammer Inquisitor - Martyr v2.1.0b Steam"</Description>
      <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{
===========================================
 Game Title    : Warhammer 40K Inquisitor Martyr
 Game Version  : 2.1.0b
 Game Sponsor  : Myself (with Patreon funds)
 Process Name  : Warhammer.exe
 Relevant Info : 64bits/RPG
 Authors       : Recifense / Zanzer / Gigex
 Features:
 - God Mode
 - Include companions (s1.1)
 - Adrenaline
 - Suppression Resistense
 - Unlimited Ammo
 - No Weapon Heat (new)(s2.0)
 - Quick Kill (new)(s3.0)
 - Quick Warp Heat recover (s4.5)
 - Movement Speed
 - Unlimited Zoom
 - No Cooldown

===========================================
}

[ENABLE]

AOBScanModule(MOPH,Warhammer.exe,49 8d 8e 88 06 00 00 e8 ?? ?? ?? ?? 44 0f 28 c0 49 8b 06 49 8b)
AOBScanModule(GDMD,Warhammer.exe,49 8b f1 4d 8b e8 0f 28 f9 48 8b f9 48 8b 01 ff 90 68 01 00 00)
AOBScanModule(MOHA,Warhammer.exe,45 8B F8 44 0F 28 C1 48 8B F9 4C 8D B1 30 0B 00 00 49 8B C6 B9)
AOBScanModule(MOHS,Warhammer.exe,48 8b 9b b0 0a 00 00 48 85 db ?? ?? 48 8d 4b 08 e8 ?? ?? ?? ?? f3)
AOBScanModule(MOPA,Warhammer.exe,48 8b f1 8b ea 48 83 c1 40 e8 ?? ?? ?? ?? 48 8b ce 8b d8 e8 ??)
AOBScanModule(MOWH,Warhammer.exe,48 89 5c 24 08 57 48 83 ec 40 48 8b d9 0f 29 74 24 30 0f 29 7c)
//=========================================
alloc(MyCode,4096,$process)
//=========================================

// Declaration section
label(_MonPlayerHero)
label(_BackMPH)
label(_GodMode)
label(_BackGMD)
label(_MonHeroAdrenaline)
label(_BackMHA)
label(_MonHeroSupression)
label(_BackMHS)
label(_MonPlayerAmmo)
label(_BackMPA)
label(_MonWeaponHeat)
label(_BackMWH)

label(iEnableGMD)
label(iEnableGMO)
label(iEnableMHA)
label(iEnableMHS)
label(iEnableMPA)
label(iEnableMWH)
label(iEnableMQK)
label(iEnableMHW)

label(pHero)
label(pCredits)
label(pHeroB)
label(pLast)
label(fLast)
label(fBigVal)
label(fSmallval)
label(fressourceinc)
label(fressourcedec)

//=========================================
// Registering Symbols
registersymbol(MyCode)
registersymbol(iEnableGMD)
registersymbol(iEnableGMO)
registersymbol(iEnableMHA)
registersymbol(iEnableMHS)
registersymbol(iEnableMPA)
registersymbol(iEnableMWH)
registersymbol(iEnableMQK)
registersymbol(iEnableMHW)
registersymbol(pHero)
registersymbol(pCredits)
registersymbol(pHeroB)
registersymbol(pLast)
registersymbol(fLast)
registersymbol(fBigVal)
registersymbol(fSmallval)

registersymbol(MOPH)
registersymbol(GDMD)
registersymbol(MOHA)
registersymbol(MOHS)
registersymbol(MOPA)
registersymbol(MOWH)

//=========================================
MyCode:
//========================================= 200b *
// Player Hero at Mission (all the time)
_MonPlayerHero:
 mov [pHero],r14

_ExitMPH:
 lea rcx,[r14+00000688]            // Original code
 jmp _BackMPH                      // Back to main code

//========================================= 200b #
// During Mission (Health points)
_GodMode:
 mov [pLast],rcx
 movss [fLast],xmm1

 cmp rcx,[pHero]
 je _GodMD00

 mov rax,[rcx+00000658]
 test rax,rax
 jz _ExitGMD

 cmp byte ptr [rax+00000174],00
 jne _GodMD01

 cmp dword ptr [iEnableGMO],0
 je _ExitGMD                       // Jump if feature is disabled

_GodMD00:
 cmp dword ptr [iEnableGMD],0
 je _ExitGMD                       // Jump if feature is disabled

 maxss xmm1,[fSmallval]
 jmp _ExitGMD
//--
_GodMD01:
 cmp dword ptr [iEnableMQK],0
 je _ExitGMD                       // Jump if feature is disabled

 minss xmm1,[fBigVal]

_ExitGMD:
 mov rsi,r9                        // Original code
 mov r13,r8                        // Original code
 jmp _BackGMD                      // Back to main code
//---------------
fSmallval:
 dd (float)0.0001
fBigVal:
 dd (float)-16800.0

//========================================= 200b * (s4.5)
// During Mission (Adrenaline) and (Warp Heat s4.5)
_MonHeroAdrenaline:
 cmp rcx,[pHero]
 jne _ExitMHA

 cmp dword ptr [iEnableMHA],0
 je _MonHA00                       // Jump if feature is disabled

 maxss xmm1,[fressourceinc]
 jmp _ExitMHA
//--
_MonHA00:
 cmp dword ptr [iEnableMHW],0
 je _ExitMHA                       // Jump if feature is disabled

 minss xmm1,[fressourcedec]

_ExitMHA:
 mov r15d,r8d                      // Original code
 movaps xmm8,xmm1                  // Original code
 jmp _BackMHA                      // Back to main code

 fressourceinc:
 dd (float)0.0001
fressourcedec:
 dd (float)-100.0

//========================================= 200b * (s2.1)(s4.1 fix)
// During Mission (Supression Resistense)
_MonHeroSupression:
 cmp dword ptr [iEnableMHS],0
 je _ExitMHS                       // Jump if feature is disabled

 cmp rbx,[pHero]
 jne _ExitMHS

 minss xmm6,[fMedVal]

_ExitMHS:
 mov rbx,[rbx+00000AB0]            // Original code
 jmp _BackMHS                      // Back to main code

fMedVal:
 dd (float)-1.00

//========================================= 104 X
// When updating Ammo
_MonPlayerAmmo:
 cmp dword ptr [iEnableMPA],0
 je _ExitMPA                       // Jump if feature is disabled

 cmp rsi,[pHero]
 jne _ExitMPA

 test edx,edx
 jns _ExitMPA

 xor edx,edx

_ExitMPA:
 mov rsi,rcx                       // Original code
 mov ebp,edx                       // Original code
 add rcx,40                        // Original code
 jmp _BackMPA                      // Back to main code

//========================================= new S2.0 104 X
// When updating weapon heat
_MonWeaponHeat:
 cmp dword ptr [iEnableMWH],0
 je _ExitMWH                       // Jump if feature is disabled

 ret
//--
_ExitMWH:
 mov [rsp+08],rbx                  // Original code
 jmp _BackMWH                      // Back to main code

//=========================================
align 10,'='
//=========================================
 db '===============================&gt;'
 db 'CE6.7 Script by Recifense 190621'
//=========================================
// Variables
iEnableGMD:
 dd 0
iEnableGMO:
 dd 0
iEnableMHA:
 dd 0
iEnableMHS:
 dd 0
iEnableMPA:
 dd 0
iEnableMWH:
 dd 0
iEnableMQK:
 dd 0
iEnableMHW:
 dd 0
pHero:
 dq 0
pCredits:
 dq 0
pVal:
 dq 0
pHeroB:
 dq 0
pRAX:
 dq 0
pLast:
 dq 0
fLast:
 dd 0

//=========================================
// Hacking Points
MOPH:
 jmp _MonPlayerHero
 nop
 nop
_BackMPH:

GDMD:
 jmp _GodMode
 nop
_BackGMD:

MOHA:
 jmp _MonHeroAdrenaline
 nop
 nop
_BackMHA:

MOHS:
 jmp _MonHeroSupression
 nop
 nop
_BackMHS:

MOPA:
 jmp _MonPlayerAmmo
 nop
 nop
 nop
 nop
_BackMPA:

MOWH:
 jmp _MonWeaponHeat
_BackMWH:

//=========================================
// Script for Restoring Original Codes
[DISABLE]
MOPH:
// 49 8D 8E 88060000     - lea rcx,[r14+00000688]
 db 49 8d 8e 88 06 00 00

GDMD:
// 49 8B F1              - mov rsi,r9
// 4D 8B E8              - mov r13,r8
 db 49 8b f1 4d 8b e8

MOHA:
// 45 8B F8              - mov r15d,r8d
// 44 0F28 C1            - movaps xmm8,xmm1

 db 45 8B F8 44 0F 28 C1

MOHS:
// 48 8B 9B B00A0000     - mov rbx,[rbx+00000AB0]
 db 48 8b 9b b0 0a 00 00

MOPA:
// 48 8B F1              - mov rsi,rcx
// 8B EA                 - mov ebp,edx
// 48 83 C1 40           - add rcx,40 { 64 }

 db 48 8b f1 8b ea 48 83 c1 40

MOWH:
// 48 89 5C 24 08        - mov [rsp+08],rbx
 db 48 89 5c 24 08

//=========================================
// Unregistering Symbols
unregistersymbol(MyCode)
unregistersymbol(iEnableGMD)
unregistersymbol(iEnableGMO)
unregistersymbol(iEnableMHA)
unregistersymbol(iEnableMHS)
unregistersymbol(iEnableMPA)
unregistersymbol(iEnableMWH)
unregistersymbol(iEnableMQK)
unregistersymbol(iEnableMHW)
unregistersymbol(pHero)
unregistersymbol(pCredits)
unregistersymbol(pHeroB)
unregistersymbol(fLast)
unregistersymbol(pLast)
unregistersymbol(fBigVal)
unregistersymbol(fSmallval)

unregistersymbol(MOPH)
unregistersymbol(GDMD)
unregistersymbol(MOHA)
unregistersymbol(MOHS)
unregistersymbol(MOPA)
unregistersymbol(MOWH)

//=========================================
dealloc(MyCode)
//============= Scripts End ===============

// ****************************************
// NOTES
// ****************************************
{
}

</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>242</ID>
          <Description>"pPlayer"</Description>
          <ShowAsHex>1</ShowAsHex>
          <VariableType>4 Bytes</VariableType>
          <Address>pHero</Address>
          <Offsets>
            <Offset>0</Offset>
          </Offsets>
        </CheatEntry>
        <CheatEntry>
          <ID>96</ID>
          <Description>"[X] &lt;== God Mode"</Description>
          <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableGMD",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableGMD",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
          <CheatEntries>
            <CheatEntry>
              <ID>248</ID>
              <Description>"Monster Damage (Positive value heals)"</Description>
              <LastState Value="0.00009999999747" RealAddress="7FF63D5100AE"/>
              <VariableType>Float</VariableType>
              <Address>fSmallval</Address>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
        <CheatEntry>
          <ID>142</ID>
          <Description>"[X] &lt;== Include Companions"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableGMO",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableGMO",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>144</ID>
          <Description>"[X] &lt;== Unlimited Suppression Resistense"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMHS",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMHS",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>145</ID>
          <Description>"[X] &lt;== Unlimited Ammo (no releoad needed)"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMPA",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMPA",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>229</ID>
          <Description>"[X] &lt;== No Weapon Heat"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMWH",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMWH",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>239</ID>
          <Description>"[X] &lt;== Quick Kill"</Description>
          <Options moHideChildren="1"/>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMQK",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMQK",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
          <CheatEntries>
            <CheatEntry>
              <ID>247</ID>
              <Description>"Player Damage"</Description>
              <LastState Value="-16800" RealAddress="7FF63D5100B2"/>
              <VariableType>Float</VariableType>
              <Address>fBigVal</Address>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
        <CheatEntry>
          <ID>143</ID>
          <Description>"[X] &lt;== Full Adrenaline/Focus/Data-flux (No Warp Heat should be OFF)"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMHA",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMHA",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>241</ID>
          <Description>"[X] &lt;== No Warp Heat (Full Adrenaline should be OFF)"</Description>
          <LastState/>
          <Color>C08000</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[enable]
{$LUA}
writeInteger("iEnableMHW",1)
memrec.Color=0x0004000
{$ASM}

[disable]
{$LUA}
writeInteger("iEnableMHW",0)
memrec.Color=0x0c08000
{$ASM}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>86</ID>
          <Description>"[X] &lt;== Set Movement Speed"</Description>
          <Options moHideChildren="1"/>
          <LastState/>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscanmodule(movement,Warhammer.exe,F3 0F 11 B3 C0 05 00 00)
alloc(newmem,$1000,movement)

//label(code)
label(return)
label(movement_speed)

newmem:
  cmp rbx,[pHero]
  jne code
  push rax
  mov rax,movement_speed
  movss xmm6,[rax]
  pop rax
code:
  movss [rbx+000005C0],xmm6
  jmp return

movement_speed:
  dd (float)200

movement:
  jmp newmem
  nop
  nop
  nop



return:

registersymbol(movement)
registersymbol(movement_speed)

[DISABLE]
movement:
  db F3 0F 11 B3 C0 05 00 00
unregistersymbol(movement)
unregistersymbol(movement_speed)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "Warhammer_x64_11.exe"+32A9B0

"Warhammer_x64_11.exe"+32A989: F3 0F 59 F1              -  mulss xmm6,xmm1
"Warhammer_x64_11.exe"+32A98D: 48 8B 03                 -  mov rax,[rbx]
"Warhammer_x64_11.exe"+32A990: BA 3C 00 00 00           -  mov edx,0000003C
"Warhammer_x64_11.exe"+32A995: 48 8B CB                 -  mov rcx,rbx
"Warhammer_x64_11.exe"+32A998: FF 90 C8 00 00 00        -  call qword ptr [rax+000000C8]
"Warhammer_x64_11.exe"+32A99E: 84 C0                    -  test al,al
"Warhammer_x64_11.exe"+32A9A0: 74 0E                    -  je Warhammer_x64_11.exe+32A9B0
"Warhammer_x64_11.exe"+32A9A2: B9 2B 0C 00 00           -  mov ecx,00000C2B
"Warhammer_x64_11.exe"+32A9A7: E8 34 FE 67 00           -  call Warhammer_x64_11.exe+9AA7E0
"Warhammer_x64_11.exe"+32A9AC: F3 0F 59 F0              -  mulss xmm6,xmm0
// ---------- INJECTING HERE ----------
"Warhammer_x64_11.exe"+32A9B0: F3 0F 11 B3 78 05 00 00  -  movss [rbx+00000578],xmm6
// ---------- DONE INJECTING  ----------
"Warhammer_x64_11.exe"+32A9B8: C6 83 80 05 00 00 00     -  mov byte ptr [rbx+00000580],00
"Warhammer_x64_11.exe"+32A9BF: F3 0F 10 83 78 05 00 00  -  movss xmm0,[rbx+00000578]
"Warhammer_x64_11.exe"+32A9C7: 0F 28 74 24 40           -  movaps xmm6,[rsp+40]
"Warhammer_x64_11.exe"+32A9CC: 0F 28 7C 24 30           -  movaps xmm7,[rsp+30]
"Warhammer_x64_11.exe"+32A9D1: 48 83 C4 50              -  add rsp,50
"Warhammer_x64_11.exe"+32A9D5: 5B                       -  pop rbx
"Warhammer_x64_11.exe"+32A9D6: C3                       -  ret 
"Warhammer_x64_11.exe"+32A9D7: CC                       -  int 3 
"Warhammer_x64_11.exe"+32A9D8: CC                       -  int 3 
"Warhammer_x64_11.exe"+32A9D9: CC                       -  int 3 
}
</AssemblerScript>
          <CheatEntries>
            <CheatEntry>
              <ID>84</ID>
              <Description>"Movement Speed (Set)"</Description>
              <VariableType>Float</VariableType>
              <Address>movement_speed</Address>
            </CheatEntry>
            <CheatEntry>
              <ID>267</ID>
              <Description>"Movement Speed"</Description>
              <VariableType>Float</VariableType>
              <Address>pHero</Address>
              <Offsets>
                <Offset>5C0</Offset>
              </Offsets>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>250</ID>
      <Description>"Unlimited Zoom"</Description>
      <Options moHideChildren="1"/>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
aobscanmodule(zoom,Warhammer.exe,C7 83 30 04 00 00 00 00 80 3F)

zoom:
  //db C7 83 28 04 00 00 00 00 40 40
  db 90 90 90 90 90 90 90 90 90 90

registersymbol(zoom)

[DISABLE]
zoom:
  db C7 83 30 04 00 00 00 00 80 3F
unregistersymbol(zoom)
unregistersymbol(zoom_speed)

{
ORIGINAL CODE - INJECTION POINT: "Warhammer_x64_11.exe"+2E6617

"Warhammer.exe"+2E65FA - 73 0A                 - jae Warhammer.exe+2E6606
"Warhammer.exe+2E65FC - C7 83 30040000 00000000 - mov [rbx+00000430],00000000
"Warhammer.exe"+2E6606 - F3 0F10 05 F2005D01   - movss xmm0,[Warhammer.exe+18B6700]
"Warhammer.exe"+2E660E - 0F2F 83 30040000      - comiss xmm0,[rbx+00000430]
"Warhammer.exe"+2E6615 - 73 0A                 - jae Warhammer.exe+2E6621
"Warhammer.exe"+2E6617 - C7 83 30040000 0000803F - mov [rbx+00000430],3F800000
"Warhammer.exe"+2E6621 - 48 8B 5C 24 40        - mov rbx,[rsp+40]
"Warhammer.exe"+2E6626 - 48 83 C4 30           - add rsp,30
"Warhammer.exe"+2E662A - 5F                    - pop rdi

}
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>261</ID>
      <Description>"No Cooldown"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
aobscanmodule(cooldown,Warhammer.exe,F3 0F 10 87 BC 01 00 00 F3 0F 5C)
cooldown:
  db 0F 57 C0 90 90 90 90 90
registersymbol(cooldown)

[DISABLE]
cooldown:
  db F3 0F 10 87 BC 01 00 00
unregistersymbol(cooldown)

{
// ORIGINAL CODE - INJECTION POINT: "Warhammer_x64_11.exe"+66EE67

Warhammer_x64_11.exe+A196D1 - 76 13                 - jna Warhammer_x64_11.exe+A196E6
Warhammer_x64_11.exe+A196D3 - 44 0F2F 87 B8010000   - comiss xmm8,[rdi+000001B8]
Warhammer_x64_11.exe+A196DB - 76 09                 - jna Warhammer_x64_11.exe+A196E6
Warhammer_x64_11.exe+A196DD - F3 0F11 BC 24 D8000000  - movss [rsp+000000D8],xmm7
Warhammer_x64_11.exe+A196E6 - 0F28 BC 24 90000000   - movaps xmm7,[rsp+00000090]
Warhammer_x64_11.exe+A196EE - F3 0F58 B4 24 D8000000  - addss xmm6,dword ptr [rsp+000000D8]
// ---------- INJECTING HERE ----------
Warhammer_x64_11.exe+A196F7 - F3 0F10 87 BC010000   - movss xmm0,[rdi+000001BC]
// ---------- DONE INJECTING  ----------
Warhammer_x64_11.exe+A196FF - F3 0F5C C6            - subss xmm0,xmm6
Warhammer_x64_11.exe+A19703 - F3 0F11 87 BC010000   - movss [rdi+000001BC],xmm0
Warhammer_x64_11.exe+A1970B - 44 0F2F 8F BC010000   - comiss xmm9,[rdi+000001BC]
Warhammer_x64_11.exe+A19713 - 72 07                 - jb Warhammer_x64_11.exe+A1971C
Warhammer_x64_11.exe+A19715 - 48 89 AF B8010000     - mov [rdi+000001B8],rbp
Warhammer_x64_11.exe+A1971C - 48 8B 87 00020000     - mov rax,[rdi+00000200]
Warhammer_x64_11.exe+A19723 - 8B F5                 - mov esi,ebp

}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols>
    <SymbolEntry>
      <Name>player_ptr</Name>
      <Address>20901240000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>Recifense</Name>
      <Address>20190621</Address>
    </SymbolEntry>
  </UserdefinedSymbols>
</CheatTable>

6 августа, 2019

Спойлер


// Player Hero at Mission (all the time)
_MonPlayerHero:
 mov [pHero],r14

_ExitMPH:
 lea rcx,[r14+00000688]            // Original code
 jmp _BackMPH                      // Back to main code

//========================================= 200b #
// During Mission (Health points)
_GodMode:
 mov [pLast],rcx
 movss [fLast],xmm1

 cmp rcx,[pHero]
 je _GodMD00

 mov rax,[rcx+00000658]
 test rax,rax
 jz _ExitGMD

 cmp byte ptr [rax+00000174],00
 jne _GodMD01

 cmp dword ptr [iEnableGMO],0
 je _ExitGMD                       // Jump if feature is disabled

_GodMD00:
 cmp dword ptr [iEnableGMD],0
 je _ExitGMD                       // Jump if feature is disabled

 maxss xmm1,[fSmallval]
 jmp _ExitGMD
//--
_GodMD01:
 cmp dword ptr [iEnableMQK],0
 je _ExitGMD                       // Jump if feature is disabled

 minss xmm1,[fBigVal]

_ExitGMD:
 mov rsi,r9                        // Original code
 mov r13,r8                        // Original code
 jmp _BackGMD                      // Back to main code
//---------------
fSmallval:
 dd (float)0.0001
fBigVal:
 dd (float)-16800.0

Скрипт взят с fearlessrevolution.com

С первоначальным автором скрипта (для версий до 2.0.0b) связаться не удалось, поэтому пытаюсь сам понять ход его действий, выходит так себе.

К сути. Есть участок кода, отвечающий за бессмертие и быстрое убийство.Чтобы не подыхать на старте задания от действия скрипта происходит проверка "на миссии ли игрок", далее каким то образом происходит проверка "свой чужой". При просмотре адресов и структур, с которыми взаимодействуют приведенные строки кода вменяемая картина тоже не вырисовывается. Значения адресов, с которыми происходит взаимодействие, с каждым шагом приобретают рандомные значения и понять к чему они относятся не удается.

Попытка поиска функций чтения-записи здоровья по поиску экранных значений так же ни к чему не привели - поиск находит 0 адресов по поиску по значению, а тот float, который изменяется от 0 до 1, не помог как точка отсчета.

Итого:

1. Непонятно к чему именно создатель чита привязался для проверки "игрок на миссии".

2. Как он вышел на приведенную функцию и почему использует метод "наибольшее" для бессмертия и "наименьшее" для быстрого убийства.

Войти

BitKit

Постов

Зарегистрирован

Посещение

Победитель дней

Тип контента

Профили

Форумы

Загрузки

Блоги

Сообщения, опубликованные BitKit

[Inquisitor Martyr] быстрое убийство

[Inquisitor Martyr] быстрое убийство

[Inquisitor Martyr] быстрое убийство

Обзор

Активность

Важная информация