https://ibb.co/1KfPs0k

	if (tok[t].reading == 0x89)
	{
		t = ++t;
		if (tok[t].reading == 0x50)
		{
			t = ++t;
			if (tok[t].reading == 0x4E)
			{
				t = ++t;
				if (tok[t].reading == 0x47)
				{
					return true;

 

aobscanmodule(INJECT,UnityPlayer.dll,0F 10 47 08 49 8B 8E E8 01 00 00) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)

alloc(foo,32)
label(fltValue)
foo:
  align 10 cc
fltValue:
  dd (float)3.12
  dd (float)4.36

newmem:

code:
  movups xmm0,[fltValue]
  movups [r14+000001F0],xmm0
  jmp return

INJECT:
  jmp newmem
  nop 6
return:
registersymbol(INJECT)

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
  db 0F 10 47 08 49 8B 8E E8 01 00 00

unregistersymbol(INJECT)
dealloc(newmem)

 

код

{ Game   : warspear.exe
  Version: 1.0
  Date   : 09-14-21
  Author : [open aamaker.lua and pastle Author]

  This script does blah blah blah
  
  Make by aamaker Lua plagin 
}

[ENABLE]

aobscanmodule(INJECT,PPPP,8bxxxxxxxxxx85xx79xx33xxebxx8bxxxxxxxxxx3bxx0f4fxx3bxxxxxxxxxx75xx8bxxxxxxxxxx3bxxxxxxxxxx0f84xxxxxxxx8dxxxxxx8bxxe8xxxxxxxxa1xxxxxxxx8bxxxx8bxxxx0fb7xxxxxxxxxxxxc1xxxxf7xxxx0facxxxxc1xxxxc1xxxx89xxxx66xxxxxx66xxxx75xxc1xxxx66xxxxxx74xx8bxx8dxxxxxx8bxxffxxxx8bxxe8xxxxxxxxc6xxxxxx8bxxxxxxxxxx85xx79xx33xxebxx8bxxxxxxxxxx3bxx0f4fxx89xxxxxxxxxx8bxxxxxxxxxx83xxxx8dxxxx89xxxxxxxxxxe8xxxxxxxx83xxxx8dxxxxxx8dxxxxxxxxxxc7xxxxxxxxxxxxe8xxxxxxxx8bxxxx8dxxxxeb)
alloc(newmem,$1000)

label(code)
label(return)
registersymbol(INJECT)

newmem:
    push dword ptr [ebx+000000FC]
    pop dword ptr [ebx+000000F4]
code:
    mov ecx,[ebx+000000FC]
    jmp return

INJECT:
    jmp newmem
    nop

return:


[DISABLE]

INJECT:
    mov ecx,[ebx+000000FC]

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: PPPP

warspear.exe+4355D9: EB 02 - jmp 008355DD
warspear.exe+4355DB: B3 01 - mov bl,01
warspear.exe+4355DD: 88 5D F0  - mov [ebp-10],bl
warspear.exe+4355E0: FF 75 F0  - push [ebp-10]
warspear.exe+4355E3: 8D B7 54060000  - lea esi,[edi+00000654]
warspear.exe+4355E9: 8B CE  - mov ecx,esi
warspear.exe+4355EB: E8 405EFDFF - call 0080B430
warspear.exe+4355F0: 84 DB  - test bl,bl
warspear.exe+4355F2: 0F84 E9000000 - je 008356E1
warspear.exe+4355F8: 8B 9F C4000000  - mov ebx,[edi+000000C4]
// ---------- INJECTING HERE ----------
PPPP: 8B 8B FC000000  - mov ecx,[ebx+000000FC]
// ---------- DONE INJECTING  ----------
warspear.exe+435604: 85 C9  - test ecx,ecx
warspear.exe+435606: 79 04 - jns 0083560C
warspear.exe+435608: 33 C9  - xor ecx,ecx
warspear.exe+43560A: EB 0B - jmp 00835617
warspear.exe+43560C: 8B 83 00010000  - mov eax,[ebx+00000100]
warspear.exe+435612: 3B C8  - cmp ecx,eax
warspear.exe+435614: 0F4F C8  - cmovg ecx,eax
warspear.exe+435617: 3B 8F 684F0000  - cmp ecx,[edi+00004F68]
warspear.exe+43561D: 75 12 - jne 00835631
warspear.exe+43561F: 8B 83 00010000  - mov eax,[ebx+00000100]
}

 

{ Game   : SR2_pc.exe
  Version: 
  Date   : 2021-05-02
  Author : Pitronic

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(_good_mode_,SR2_pc.exe,D8 * * * * * * * F6 * * 75 * B0 * * 83 * * * * * * 0F 9D)
alloc(newmem,$1000)

label(code)
label(return)

newmem:
// [edx+00001120] здесь максимальное значение здоровья гг, но тип 4 байта.

code:
fcomp dword ptr [edx+00001124] //  здесь здорове гг, но тип float.
jmp return

// задача, записать максимальное здоровье гг, в фактический адрес здоровья гг.

_good_mode_:
  jmp newmem
db 90
return:
registersymbol(_good_mode_)

[DISABLE]

_good_mode_:
fcomp dword ptr [edx+00001124]

unregistersymbol(_good_mode_)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: SR2_pc.exe.text+584661

SR2_pc.exe.text+584647: C1 E1 04              - shl ecx,04
SR2_pc.exe.text+58464A: 8B 89 64 9C 14 02     - mov ecx,[ecx+SR2_pc.exe+1D49C64]
SR2_pc.exe.text+584650: 85 C9                 - test ecx,ecx
SR2_pc.exe.text+584652: 74 05                 - je SR2_pc.exe.text+584659
SR2_pc.exe.text+584654: 39 41 44              - cmp [ecx+44],eax
SR2_pc.exe.text+584657: 74 02                 - je SR2_pc.exe.text+58465B
SR2_pc.exe.text+584659: 33 C9                 - xor ecx,ecx
SR2_pc.exe.text+58465B: 3B CA                 - cmp ecx,edx
SR2_pc.exe.text+58465D: 75 0F                 - jne SR2_pc.exe.text+58466E
SR2_pc.exe.text+58465F: D9 EE                 - fldz 
// ---------- INJECTING HERE ----------
SR2_pc.exe.text+584661: D8 9A 24 11 00 00     - fcomp dword ptr [edx+00001124]
// ---------- DONE INJECTING  ----------
SR2_pc.exe.text+584667: DF E0                 - fnstsw ax
SR2_pc.exe.text+584669: F6 C4 01              - test ah,01
SR2_pc.exe.text+58466C: 75 03                 - jne SR2_pc.exe.text+584671
SR2_pc.exe.text+58466E: B0 01                 - mov al,01
SR2_pc.exe.text+584670: C3                    - ret 
SR2_pc.exe.text+584671: 83 BA 8C 0F 00 00 00  - cmp dword ptr [edx+00000F8C],00
SR2_pc.exe.text+584678: 0F 9D C0              - setge al
SR2_pc.exe.text+58467B: C3                    - ret 
SR2_pc.exe.text+58467C: CC                    - int 3 
SR2_pc.exe.text+58467D: CC                    - int 3 
}

 

#include<windows.h>

unsigned char WatchdogsStop[5] = {0x90, 0x90, 0x90, 0x90, 0x90}; WriteProcessMemory(GetCurrentProcess(), (void*)0x14196FF45, WatchdogsStop, 5, 0);

[ENABLE]
alloc(newmem,$1000,7FF4FD5CCBE8)

label(code)
label(return)

newmem:

code:
  add [rax],al
  cmp byte ptr [rdi+00000000],00
  jmp return

INJECT:
  jmp newmem
  nop 4
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db 00 00 80 BF 00 00 00 00 00

unregistersymbol(INJECT)
dealloc(newmem)

  cmp byte ptr [rdi+00000000],00

[ENABLE]

alloc(EffectID,4)
registersymbol(EffectID)
alloc(ApplyEffect,128,DarkSoulsIII.exe)
registersymbol(ApplyEffect)
createthread(ApplyEffect)

EffectID:
dd #130134131

ApplyEffect:
 mov    edx, [EffectID]
 mov    rbx, [DarkSoulsIII.exe+4768E78]
 mov    rbx, [rbx+80]
 mov    r8, rbx
 mov    rcx, rbx
 sub    rsp, 48
 call   140886C40
 add    rsp, 48
 ret

[DISABLE]

dealloc(ApplyEffect)
unregistersymbol(ApplyEffect)
dealloc(EffectID)
unregistersymbol(EffectID)

[ENABLE]
{$lua}
if syntaxcheck then return end
disableMemrec(memrec)

local t=createTimer(nil)
t.OnTimer=disableSelf
t.Interval=100
t.Enabled=true
for i = 0, 14 do
autoAssemble([[
alloc(EffectID,4)
registersymbol(EffectID)
alloc(ApplyEffect,128,DarkSoulsIII.exe)
registersymbol(ApplyEffect)
createthread(ApplyEffect)

EffectID:
dd #130134131

ApplyEffect:
 mov    edx, [EffectID]
 mov    rbx, [DarkSoulsIII.exe+4768E78]
 mov    rbx, [rbx+80]
 mov    r8, rbx
 mov    rcx, rbx
 sub    rsp, 48
 call   140886C40
 add    rsp, 48
 ret
]])
end
[DISABLE]
{$asm}

dealloc(ApplyEffect)
unregistersymbol(ApplyEffect)
dealloc(EffectID)
unregistersymbol(EffectID)