Control Cheat Table
Features
Features
- God Mode
- infinite ammo
- flyhack
godmode:
{ Game : Control_DX11.exe
Version:
Date : 2019-09-01
Author : ChrisFaytePC
This script does blah blah blah
}
[ENABLE]
aobscanmodule(health1,Control_DX11.exe,F3 0F 11 73 64) // should be unique
alloc(newmem,$1000,"Control_DX11.exe"+2C834A)
label(code)
label(return)
newmem:
cmp [rbx+88],#500
jne code
mov [rbx+64],(float)1
jmp return
code:
movss [rbx+64],xmm6
jmp return
health1:
jmp newmem
return:
registersymbol(health1)
[DISABLE]
health1:
db F3 0F 11 73 64
unregistersymbol(health1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Control_DX11.exe"+2C834A
"Control_DX11.exe"+2C8321: 66 0F 38 14 FA - blendvps xmm7,xmm2,xmm0
"Control_DX11.exe"+2C8326: 80 BB A4 00 00 00 00 - cmp byte ptr [rbx+000000A4],00
"Control_DX11.exe"+2C832D: 41 0F 28 C0 - movaps xmm0,xmm8
"Control_DX11.exe"+2C8331: 0F 28 D8 - movaps xmm3,xmm0
"Control_DX11.exe"+2C8334: 0F 28 C5 - movaps xmm0,xmm5
"Control_DX11.exe"+2C8337: F3 41 0F 5C C1 - subss xmm0,xmm9
"Control_DX11.exe"+2C833C: 0F 28 F0 - movaps xmm6,xmm0
"Control_DX11.exe"+2C833F: 0F 28 C7 - movaps xmm0,xmm7
"Control_DX11.exe"+2C8342: F3 0F 5F F7 - maxss xmm6,xmm7
"Control_DX11.exe"+2C8346: F3 0F 5D F3 - minss xmm6,xmm3
// ---------- INJECTING HERE ----------
"Control_DX11.exe"+2C834A: F3 0F 11 73 64 - movss [rbx+64],xmm6
// ---------- DONE INJECTING ----------
"Control_DX11.exe"+2C834F: 0F 84 CE 00 00 00 - je Control_DX11.exe+2C8423
"Control_DX11.exe"+2C8355: F3 0F 10 8B B0 00 00 00 - movss xmm1,[rbx+000000B0]
"Control_DX11.exe"+2C835D: 0F 2F CC - comiss xmm1,xmm4
"Control_DX11.exe"+2C8360: 72 3F - jb Control_DX11.exe+2C83A1
"Control_DX11.exe"+2C8362: F3 0F 5C EE - subss xmm5,xmm6
"Control_DX11.exe"+2C8366: 0F 2F EC - comiss xmm5,xmm4
"Control_DX11.exe"+2C8369: 76 36 - jna Control_DX11.exe+2C83A1
"Control_DX11.exe"+2C836B: 0F 2F A3 80 00 00 00 - comiss xmm4,[rbx+00000080]
"Control_DX11.exe"+2C8372: F3 0F 58 6B 7C - addss xmm5,dword ptr [rbx+7C]
"Control_DX11.exe"+2C8377: 0F 28 C5 - movaps xmm0,xmm5
}
Infinite Ammo:
{ Game : Control_DX11.exe
Version:
Date : 2019-09-01
Author : ChrisFaytePC
This script does blah blah blah
}
[ENABLE]
aobscanmodule(ammo1,Control_DX11.exe,F3 0F 5D DA F3 0F 11 99 F0 01 00 00 48) // should be unique
alloc(newmem,$1000,"Control_DX11.exe"+357D9F)
label(code)
label(return)
newmem:
code:
movss xmm3,xmm0
movss [rcx+000001F0],xmm3
jmp return
ammo1:
jmp newmem
nop
nop
nop
nop
nop
nop
nop
return:
registersymbol(ammo1)
[DISABLE]
ammo1:
db F3 0F 5D DA F3 0F 11 99 F0 01 00 00
unregistersymbol(ammo1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Control_DX11.exe"+357D9F
"Control_DX11.exe"+357D6C: F3 0F 10 81 F8 01 00 00 - movss xmm0,[rcx+000001F8]
"Control_DX11.exe"+357D74: 0F 57 DB - xorps xmm3,xmm3
"Control_DX11.exe"+357D77: 0F 57 05 A2 41 AE 00 - xorps xmm0,[Control_DX11.exe+E3BF20]
"Control_DX11.exe"+357D7E: 0F 57 C9 - xorps xmm1,xmm1
"Control_DX11.exe"+357D81: 0F 57 25 98 41 AE 00 - xorps xmm4,[Control_DX11.exe+E3BF20]
"Control_DX11.exe"+357D88: F3 0F 10 C8 - movss xmm1,xmm0
"Control_DX11.exe"+357D8C: F3 0F 58 A1 F0 01 00 00 - addss xmm4,dword ptr [rcx+000001F0]
"Control_DX11.exe"+357D94: 0F 28 C2 - movaps xmm0,xmm2
"Control_DX11.exe"+357D97: F3 0F 10 DC - movss xmm3,xmm4
"Control_DX11.exe"+357D9B: F3 0F 5F D9 - maxss xmm3,xmm1
// ---------- INJECTING HERE ----------
"Control_DX11.exe"+357D9F: F3 0F 5D DA - minss xmm3,xmm2
"Control_DX11.exe"+357DA3: F3 0F 11 99 F0 01 00 00 - movss [rcx+000001F0],xmm3
// ---------- DONE INJECTING ----------
"Control_DX11.exe"+357DAB: 48 81 C1 D8 00 00 00 - add rcx,000000D8
"Control_DX11.exe"+357DB2: 48 8D 15 5B 01 E4 00 - lea rdx,[Control_DX11.exe+1197F14]
"Control_DX11.exe"+357DB9: 45 33 C0 - xor r8d,r8d
"Control_DX11.exe"+357DBC: 48 FF 25 1D 70 98 00 - jmp qword ptr [Control_DX11.exe+CDEDE0]
"Control_DX11.exe"+357DC3: C3 - ret
"Control_DX11.exe"+357DC4: CC - int 3
"Control_DX11.exe"+357DC5: CC - int 3
"Control_DX11.exe"+357DC6: CC - int 3
"Control_DX11.exe"+357DC7: CC - int 3
"Control_DX11.exe"+357DC8: CC - int 3
}
Fly hack:
{ Game : Control_DX11.exe
Version:
Date : 2019-09-09
Author : ChrisFaytePC
This script does blah blah blah
}
[ENABLE]
aobscanmodule(coord,Control_DX11.exe,0F 10 80 D0 00 00 00 0F 11 47) // should be unique
alloc(newmem,$1000,"Control_DX11.exe"+10FF41)
label(code)
label(return)
label(ycoord)
registersymbol(ycoord)
newmem:
code:
mov [ycoord],rax
//mov [rax+D4],(float)-31
movups xmm0,[rax+000000D0]
jmp return
newmem+500:
ycoord:
dq 0
coord:
jmp newmem
nop
nop
return:
registersymbol(coord)
[DISABLE]
coord:
db 0F 10 80 D0 00 00 00
unregistersymbol(coord)
unregistersymbol(ycoord)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Control_DX11.exe"+10FF41
"Control_DX11.exe"+10FF1C: 0F B6 41 18 - movzx eax,byte ptr [rcx+18]
"Control_DX11.exe"+10FF20: F3 0F 10 41 64 - movss xmm0,[rcx+64]
"Control_DX11.exe"+10FF25: F3 0F 11 44 24 54 - movss [rsp+54],xmm0
"Control_DX11.exe"+10FF2B: 88 44 24 58 - mov [rsp+58],al
"Control_DX11.exe"+10FF2F: 8B 47 14 - mov eax,[rdi+14]
"Control_DX11.exe"+10FF32: 41 39 46 28 - cmp [r14+28],eax
"Control_DX11.exe"+10FF36: 75 4D - jne Control_DX11.exe+10FF85
"Control_DX11.exe"+10FF38: 48 8B 43 20 - mov rax,[rbx+20]
"Control_DX11.exe"+10FF3C: 48 85 C0 - test rax,rax
"Control_DX11.exe"+10FF3F: 74 10 - je Control_DX11.exe+10FF51
// ---------- INJECTING HERE ----------
"Control_DX11.exe"+10FF41: 0F 10 80 D0 00 00 00 - movups xmm0,[rax+000000D0]
// ---------- DONE INJECTING ----------
"Control_DX11.exe"+10FF48: 0F 11 47 20 - movups [rdi+20],xmm0
"Control_DX11.exe"+10FF4C: E9 C8 00 00 00 - jmp Control_DX11.exe+110019
"Control_DX11.exe"+10FF51: 49 8B 06 - mov rax,[r14]
"Control_DX11.exe"+10FF54: 48 8D 54 24 20 - lea rdx,[rsp+20]
"Control_DX11.exe"+10FF59: 49 8B CE - mov rcx,r14
"Control_DX11.exe"+10FF5C: FF 90 90 02 00 00 - call qword ptr [rax+00000290]
"Control_DX11.exe"+10FF62: 0F 57 C9 - xorps xmm1,xmm1
"Control_DX11.exe"+10FF65: F3 0F 10 40 08 - movss xmm0,[rax+08]
"Control_DX11.exe"+10FF6A: F3 0F 10 50 04 - movss xmm2,[rax+04]
"Control_DX11.exe"+10FF6F: F3 0F 10 18 - movss xmm3,[rax]
}
