Close to the Sun Cheats 2020-07-22

{ Game   : ctts-Win64-Shipping.exe
  Version:
  Date   : 2019-05-04
  Author : ChrisFaytePC

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(coords,ctts-Win64-Shipping.exe,41 0F 28 4F 10) // should be unique
alloc(newmem,$1000,"ctts-Win64-Shipping.exe"+F1167D)
alloc(xcoord,8)

label(code)
label(return)
registersymbol(xcoord)

xcoord:
dq 0

newmem:
cmp [r15+798],0
jne code
mov [xcoord],r15

code:
  movaps xmm1,[r15+10]
  jmp return

coords:
  jmp newmem
return:
registersymbol(coords)

[DISABLE]

coords:
  db 41 0F 28 4F 10

unregistersymbol(coords)
unregistersymbol(xcoord)
dealloc(newmem)
dealloc(xcoord)

{
// ORIGINAL CODE - INJECTION POINT: "ctts-Win64-Shipping.exe"+F1167D

"ctts-Win64-Shipping.exe"+F1164D: 41 57                    -  push r15
"ctts-Win64-Shipping.exe"+F1164F: 48 8D AC 24 70 FF FF FF  -  lea rbp,[rsp-00000090]
"ctts-Win64-Shipping.exe"+F11657: 48 81 EC 90 01 00 00     -  sub rsp,00000190
"ctts-Win64-Shipping.exe"+F1165E: 48 8B 05 FB 3F A0 01     -  mov rax,[ctts-Win64-Shipping.exe+2915660]
"ctts-Win64-Shipping.exe"+F11665: 48 33 C4                 -  xor rax,rsp
"ctts-Win64-Shipping.exe"+F11668: 48 89 45 E0              -  mov [rbp-20],rax
"ctts-Win64-Shipping.exe"+F1166C: 4C 8D B9 80 01 00 00     -  lea r15,[rcx+00000180]
"ctts-Win64-Shipping.exe"+F11673: 45 33 E4                 -  xor r12d,r12d
"ctts-Win64-Shipping.exe"+F11676: 41 0F 28 07              -  movaps xmm0,[r15]
"ctts-Win64-Shipping.exe"+F1167A: 45 8B F1                 -  mov r14d,r9d
// ---------- INJECTING HERE ----------
"ctts-Win64-Shipping.exe"+F1167D: 41 0F 28 4F 10           -  movaps xmm1,[r15+10]
// ---------- DONE INJECTING  ----------
"ctts-Win64-Shipping.exe"+F11682: 49 8B D8                 -  mov rbx,r8
"ctts-Win64-Shipping.exe"+F11685: 0F 29 45 80              -  movaps [rbp-80],xmm0
"ctts-Win64-Shipping.exe"+F11689: 48 8B FA                 -  mov rdi,rdx
"ctts-Win64-Shipping.exe"+F1168C: 41 0F 28 47 20           -  movaps xmm0,[r15+20]
"ctts-Win64-Shipping.exe"+F11691: 48 8B F1                 -  mov rsi,rcx
"ctts-Win64-Shipping.exe"+F11694: 0F 29 45 A0              -  movaps [rbp-60],xmm0
"ctts-Win64-Shipping.exe"+F11698: 0F 29 4D 90              -  movaps [rbp-70],xmm1
"ctts-Win64-Shipping.exe"+F1169C: 4C 89 64 24 20           -  mov [rsp+20],r12
"ctts-Win64-Shipping.exe"+F116A1: 4D 3B C4                 -  cmp r8,r12
"ctts-Win64-Shipping.exe"+F116A4: 0F 84 25 06 00 00        -  je ctts-Win64-Shipping.exe+F11CCF
}

{ Game   : ctts-Win64-Shipping.exe
  Version:
  Date   : 2019-05-05
  Author : ChrisFaytePC

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(jump_height,ctts-Win64-Shipping.exe,8B 83 9C 01 00 00 45) // should be unique
alloc(newmem,$1000,"ctts-Win64-Shipping.exe"+EBF95F)

label(code)
label(return)

newmem:

code:
mov [rbx+0000019C],(float)800
  mov eax,[rbx+0000019C]
  jmp return

jump_height:
  jmp newmem
  nop
return:
registersymbol(jump_height)

[DISABLE]

jump_height:
  db 8B 83 9C 01 00 00

unregistersymbol(jump_height)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "ctts-Win64-Shipping.exe"+EBF95F

"ctts-Win64-Shipping.exe"+EBF933: 74 51                    -  je ctts-Win64-Shipping.exe+EBF986
"ctts-Win64-Shipping.exe"+EBF935: E8 56 ED FB FF           -  call ctts-Win64-Shipping.exe+E7E690
"ctts-Win64-Shipping.exe"+EBF93A: 84 C0                    -  test al,al
"ctts-Win64-Shipping.exe"+EBF93C: 74 48                    -  je ctts-Win64-Shipping.exe+EBF986
"ctts-Win64-Shipping.exe"+EBF93E: F6 83 10 01 00 00 01     -  test byte ptr [rbx+00000110],01
"ctts-Win64-Shipping.exe"+EBF945: 74 18                    -  je ctts-Win64-Shipping.exe+EBF95F
"ctts-Win64-Shipping.exe"+EBF947: F3 0F 10 83 20 01 00 00  -  movss xmm0,[rbx+00000120]
"ctts-Win64-Shipping.exe"+EBF94F: 0F 54 05 1A 8D D0 00     -  andps xmm0,[ctts-Win64-Shipping.exe+1BC8670]
"ctts-Win64-Shipping.exe"+EBF956: 0F 2E 05 3B 8B D0 00     -  ucomiss xmm0,[ctts-Win64-Shipping.exe+1BC8498]
"ctts-Win64-Shipping.exe"+EBF95D: 74 27                    -  je ctts-Win64-Shipping.exe+EBF986
// ---------- INJECTING HERE ----------
"ctts-Win64-Shipping.exe"+EBF95F: 8B 83 9C 01 00 00        -  mov eax,[rbx+0000019C]
// ---------- DONE INJECTING  ----------
"ctts-Win64-Shipping.exe"+EBF965: 45 33 C0                 -  xor r8d,r8d
"ctts-Win64-Shipping.exe"+EBF968: 89 83 0C 01 00 00        -  mov [rbx+0000010C],eax
"ctts-Win64-Shipping.exe"+EBF96E: 48 8B CB                 -  mov rcx,rbx
"ctts-Win64-Shipping.exe"+EBF971: 48 8B 03                 -  mov rax,[rbx]
"ctts-Win64-Shipping.exe"+EBF974: 41 8D 50 03              -  lea edx,[r8+03]
"ctts-Win64-Shipping.exe"+EBF978: FF 90 50 05 00 00        -  call qword ptr [rax+00000550]
"ctts-Win64-Shipping.exe"+EBF97E: B0 01                    -  mov al,01
"ctts-Win64-Shipping.exe"+EBF980: 48 83 C4 20              -  add rsp,20
"ctts-Win64-Shipping.exe"+EBF984: 5B                       -  pop rbx
"ctts-Win64-Shipping.exe"+EBF985: C3                       -  ret
}