Evil Within Cheat Table
Features
Sample Scripts
Features
- God Mode
- Infinite Stamina
- Infinite Ammo
- Skill points
- infinite ammo
- infinite stealth
Sample Scripts
Activate Health Cheat:
[ENABLE]
aobscanmodule(health1,EvilWithin.exe,F3 0F 10 81 C4 08 00 00 C3)
aobscanmodule(health2,EvilWithin.exe,F3 0F 11 89 C4 08 00 00) // should be unique
alloc(newmema,$100,"EvilWithin.exe"+886E18)
alloc(newmem,$1000,"EvilWithin.exe"+7BBD50)
alloc(double2,8)
alloc(health_addy,8)
alloc(noclip,8)
alloc(double1,16)
label(double4)
label(code)
label(return)
label(noclip)
label(insta2)
label(hero2)
registersymbol(health_addy)
registersymbol(noclip)
registersymbol(double1)
registersymbol(insta2)
health_addy:
double1:
dq 7FF766564B78
noclip:
newmem:
//mov [rbx+00008C18],02
cmp rax,[double1]
jne code
hero2:
mov [health_addy],rcx
movss xmm0,[rcx+000008C0]
movss [rcx+000008C4],xmm0
movss xmm0,[rcx+000008C4]
jmp return
double4:
dq 7FF729CB4B78
code:
cmp rax,[double4]
je hero2
push rdx
mov rdx,r15
mov [noclip],rdx
pop rdx
movss xmm0,[rcx+000008C4]
jmp return
health1:
jmp newmem
nop
nop
nop
return:
registersymbol(health1)
double2:
dq 7FF766564B78
newmema:
cmp rax,[double2]
jne instacheck2
hero:
movss [rcx+000008C4],xmm0
jmp returna
instacheck2:
cmp [insta2],01
je onehit2
codea:
movss [rcx+000008C4],xmm1
jmp returna
insta2:
dd 0
double3:
dq 7FF766645D28
onehit2:
cmp rax,[double3]
je hero
cmp [rcx+000008C4],(float)1
jle codea
mov [rcx+000008C4],(float)1
//movss [rcx+000008C4],xmm5
jmp returna
health2:
jmp newmema
nop
nop
nop
returna:
registersymbol(health2)
[DISABLE]
health1:
db F3 0F 10 81 C4 08 00 00
health2:
db F3 0F 11 89 C4 08 00 00
unregistersymbol(health2)
unregistersymbol(double2)
unregistersymbol(insta2)
unregistersymbol(double3)
unregistersymbol(health1)
unregistersymbol(health_addy)
unregistersymbol(double1)
unregistersymbol(noclip)
dealloc(newmem)
dealloc(health_addy)
dealloc(double1)
dealloc(noclip)
dealloc(newmema)
dealloc(double2)
{
// ORIGINAL CODE - INJECTION POINT: "EvilWithin.exe"+7BBD50
"EvilWithin.exe"+7BBD3F: 48 83 C4 28 - add rsp,28
"EvilWithin.exe"+7BBD43: E9 B8 D8 5D 00 - jmp EvilWithin.exe+D99600
"EvilWithin.exe"+7BBD48: CC - int 3
"EvilWithin.exe"+7BBD49: CC - int 3
"EvilWithin.exe"+7BBD4A: CC - int 3
"EvilWithin.exe"+7BBD4B: CC - int 3
"EvilWithin.exe"+7BBD4C: CC - int 3
"EvilWithin.exe"+7BBD4D: CC - int 3
"EvilWithin.exe"+7BBD4E: CC - int 3
"EvilWithin.exe"+7BBD4F: CC - int 3
// ---------- INJECTING HERE ----------
"EvilWithin.exe"+7BBD50: F3 0F 10 81 C4 08 00 00 - movss xmm0,[rcx+000008C4]
// ---------- DONE INJECTING ----------
"EvilWithin.exe"+7BBD58: C3 - ret
"EvilWithin.exe"+7BBD59: CC - int 3
"EvilWithin.exe"+7BBD5A: CC - int 3
"EvilWithin.exe"+7BBD5B: CC - int 3
"EvilWithin.exe"+7BBD5C: CC - int 3
"EvilWithin.exe"+7BBD5D: CC - int 3
"EvilWithin.exe"+7BBD5E: CC - int 3
"EvilWithin.exe"+7BBD5F: CC - int 3
"EvilWithin.exe"+7BBD60: 48 83 EC 28 - sub rsp,28
"EvilWithin.exe"+7BBD64: 45 33 C0 - xor r8d,r8d
}
God Mode:
{$lua}
[ENABLE]
writeInteger('["health_addy"]+8C18',02)
[DISABLE]
writeInteger('["health_addy"]+8C18',00)
Infinite Stamina:
[ENABLE]
aobscanmodule(stamina,EvilWithin.exe,76 13 F3 0F 58 BE F0 10 00 00)
registersymbol(stamina)
stamina:
db EB
[DISABLE]
stamina:
db 76 13 F3 0F 58 BE F0 10 00 00
unregistersymbol(stamina)
{
// ORIGINAL CODE - INJECTION POINT: "EvilWithin.exe"+7FE720
"EvilWithin.exe"+7FE6F3: 44 0F 2F C8 - comiss xmm9,xmm0
"EvilWithin.exe"+7FE6F7: 76 05 - jna EvilWithin.exe+7FE6FE
"EvilWithin.exe"+7FE6F9: F3 41 0F 59 FD - mulss xmm7,xmm13
"EvilWithin.exe"+7FE6FE: 40 32 FF - xor dil,dil
"EvilWithin.exe"+7FE701: 80 BE E8 16 00 00 01 - cmp byte ptr [rsi+000016E8],01
"EvilWithin.exe"+7FE708: 75 2B - jne EvilWithin.exe+7FE735
"EvilWithin.exe"+7FE70A: 0F B7 96 AA 1B 00 00 - movzx edx,word ptr [rsi+00001BAA]
"EvilWithin.exe"+7FE711: 49 8B CE - mov rcx,r14
"EvilWithin.exe"+7FE714: E8 B7 9D 10 00 - call EvilWithin.exe+9084D0
"EvilWithin.exe"+7FE719: 0F 2F 05 0C FA DD 00 - comiss xmm0,[EvilWithin.exe+15DE12C]
// ---------- INJECTING HERE ----------
"EvilWithin.exe"+7FE720: 76 13 - jna EvilWithin.exe+7FE735
"EvilWithin.exe"+7FE722: F3 0F 58 BE F0 10 00 00 - addss xmm7,[rsi+000010F0]
// ---------- DONE INJECTING ----------
"EvilWithin.exe"+7FE72A: F3 0F 11 BE F0 10 00 00 - movss [rsi+000010F0],xmm7
"EvilWithin.exe"+7FE732: 40 B7 01 - mov dil,01
"EvilWithin.exe"+7FE735: F3 0F 10 86 F0 10 00 00 - movss xmm0,[rsi+000010F0]
"EvilWithin.exe"+7FE73D: 41 0F 2F C2 - comiss xmm0,xmm10
"EvilWithin.exe"+7FE741: 76 3E - jna EvilWithin.exe+7FE781
"EvilWithin.exe"+7FE743: F3 44 0F 11 96 F0 10 00 00 - movss [rsi+000010F0],xmm10
"EvilWithin.exe"+7FE74C: 41 0F 28 D0 - movaps xmm2,xmm8
"EvilWithin.exe"+7FE750: 0F B7 96 0E 1C 00 00 - movzx edx,word ptr [rsi+00001C0E]
"EvilWithin.exe"+7FE757: 49 8B CE - mov rcx,r14
"EvilWithin.exe"+7FE75A: E8 41 AD 10 00 - call EvilWithin.exe+9094A0
}
Infinite Stealth Cheat:
[ENABLE]
aobscanmodule(stealth1,EvilWithin.exe,0F 87 3E 02 00 00 F6 87 00 22 00 00 08)
registersymbol(stealth1)
stealth1:
db E9 3F 02 00 00 90 F6
aobscanmodule(stealth2,EvilWithin.exe,F3 0F 58 B7 A4 22 00 00)
aobscanmodule(stealth3,EvilWithin.exe,89 83 A4 22 00 00 8B 83 FC)
aobscanmodule(stealth4,EvilWithin.exe,00 8B BB E0 22 00 00)
alloc(newmem,$100,"EvilWithin.exe"+8D9C63)
alloc(newmemb,$100,"EvilWithin.exe"+8D0ACF)
alloc(newmema,$100,"EvilWithin.exe"+7CBA5A)
label(codea)
label(returna)
label(codeb)
label(returnb)
label(code)
label(return)
newmema:
codea:
mov [rdi+000022A4],(float)500
addss xmm6,[rdi+000022A4]
jmp returna
stealth2:
jmp newmema
nop
nop
nop
returna:
registersymbol(stealth2)
newmemb:
codeb:
mov eax,(float)500
mov [rbx+000022A4],eax
jmp returnb
stealth3:
jmp newmemb
nop
returnb:
registersymbol(stealth3)
newmem:
code:
mov [rbx+000022E0],05
mov edi,[rbx+000022E0]
jmp return
stealth4+01:
jmp newmem
nop
return:
registersymbol(stealth4)
[DISABLE]
stealth1:
db 0F 87 3E 02 00 00 F6 87 00 22 00 00 08
stealth2:
db F3 0F 58 B7 A4 22 00 00
stealth3:
db 89 83 A4 22 00 00
stealth4+01:
db 8B BB E0 22 00 00
dealloc(newmem)
dealloc(newmemb)
dealloc(newmema)
unregistersymbol(stealth4)
unregistersymbol(stealth3)
unregistersymbol(stealth2)
unregistersymbol(stealth1)
