Guns, Gore & Cannolis 2 Cheat Table
Features
Features
- God mode
- one hit kills
- infinite ammo
- coordinates
god mode cheat:
{ Game : ggc2.exe
Version:
Date : 2018-03-03
Author : ChrisPC
This script does blah blah blah
}
[ENABLE]
aobscan(health1,F3 0F 11 AE C0 01 00 00) // should be unique
alloc(newmem,$100,health1)
label(code)
label(return)
label(health_base)
label(health_check)
label(kill)
label(one_hit)
registersymbol(health_base)
registersymbol(one_hit)
newmem:
cmp [rsi+1D0],00
je health_check
cmp [rsi+1BC],00
je health_check
mov [health_base],rsi
mov [rsi+000001C0],(float)200
jmp return
one_hit:
dd 0
health_check:
cmp [one_hit],01
je kill
code:
movss [rsi+000001C0],xmm5
jmp return
kill:
mov [rsi+1C0],(float)0
jmp return
health_base:
dd 0
health1:
jmp newmem
nop
nop
nop
return:
registersymbol(health1)
[DISABLE]
health1:
db F3 0F 11 AE C0 01 00 00
unregistersymbol(health1)
unregistersymbol(health_base)
unregistersymbol(one_hit)
dealloc(newmem)
dealloc(one_hit)
{
// ORIGINAL CODE - INJECTION POINT: 2776B9EF
""+2776B9BD: F3 0F 10 45 F0 - movss xmm0,[rbp-10]
""+2776B9C2: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
""+2776B9C6: F3 0F 10 8E C0 01 00 00 - movss xmm1,[rsi+000001C0]
""+2776B9CE: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
""+2776B9D2: 66 0F 2F C8 - comisd xmm1,xmm0
""+2776B9D6: 0F 8A 61 00 00 00 - jp 2776BA3D
""+2776B9DC: 0F 83 5B 00 00 00 - jae 2776BA3D
""+2776B9E2: F3 0F 10 45 F0 - movss xmm0,[rbp-10]
""+2776B9E7: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
""+2776B9EB: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
""+2776B9EF: F3 0F 11 AE C0 01 00 00 - movss [rsi+000001C0],xmm5
// ---------- DONE INJECTING ----------
""+2776B9F7: 48 8B CE - mov rcx,rsi
""+2776B9FA: 48 83 EC 20 - sub rsp,20
""+2776B9FE: 49 BB 50 C2 AA 25 00 00 00 00 - mov r11,0000000025AAC250
""+2776BA08: 41 FF D3 - call r11
""+2776BA0B: 48 83 C4 20 - add rsp,20
""+2776BA0F: 85 C0 - test eax,eax
""+2776BA11: 74 09 - je 2776BA1C
""+2776BA13: 8B 46 20 - mov eax,[rsi+20]
""+2776BA16: 83 C8 01 - or eax,01
""+2776BA19: 89 46 20 - mov [rsi+20],eax
}
get ammo addresses:
{ Game : ggc2.exe
Version:
Date : 2018-03-03
Author : ChrisPC
This script does blah blah blah
}
[ENABLE]
aobscan(ammo,48 63 40 1C 89 46 24) // should be unique
alloc(newmem,$1000,25B91E1F)
label(code)
label(return)
newmem:
code:
mov [rax+1C],#999
movsxd rax,dword ptr [rax+1C]
mov [rsi+24],eax
jmp return
ammo:
jmp newmem
nop
nop
return:
registersymbol(ammo)
[DISABLE]
ammo:
db 48 63 40 1C 89 46 24
unregistersymbol(ammo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 25B91E1F
""+25B91DF9: 48 8B F1 - mov rsi,rcx
""+25B91DFC: 48 83 EC 20 - sub rsp,20
""+25B91E00: 49 BB C0 1B B9 25 00 00 00 00 - mov r11,0000000025B91BC0
""+25B91E0A: 41 FF D3 - call r11
""+25B91E0D: 48 83 C4 20 - add rsp,20
""+25B91E11: 85 C0 - test eax,eax
""+25B91E13: 74 16 - je 25B91E2B
""+25B91E15: 48 8B 46 18 - mov rax,[rsi+18]
""+25B91E19: 48 8B C8 - mov rcx,rax
""+25B91E1C: 83 39 00 - cmp dword ptr [rcx],00
// ---------- INJECTING HERE ----------
""+25B91E1F: 48 63 40 1C - movsxd rax,dword ptr [rax+1C]
""+25B91E23: 89 46 24 - mov [rsi+24],eax
// ---------- DONE INJECTING ----------
""+25B91E26: E9 4D 00 00 00 - jmp 25B91E78
""+25B91E2B: 48 8B 46 18 - mov rax,[rsi+18]
""+25B91E2F: 48 8B C8 - mov rcx,rax
""+25B91E32: 48 83 EC 20 - sub rsp,20
""+25B91E36: 83 38 00 - cmp dword ptr [rax],00
""+25B91E39: 49 BB 70 1B B9 25 00 00 00 00 - mov r11,0000000025B91B70
""+25B91E43: 41 FF D3 - call r11
""+25B91E46: 48 83 C4 20 - add rsp,20
""+25B91E4A: 85 C0 - test eax,eax
""+25B91E4C: 75 2A - jne 25B91E78
}
infinite ammo:
[ENABLE]
aobscan(ammo_gun2,89 47 24 48 8B CF 48) // should be unique
alloc(newmem,$1000,25A9C7E3)
label(code)
label(return)
newmem:
code:
mov eax,63
mov [rdi+24],eax
mov rcx,rdi
jmp return
ammo_gun2:
jmp newmem
nop
return:
registersymbol(ammo_gun2)
[DISABLE]
ammo_gun2:
db 89 47 24 48 8B CF
unregistersymbol(ammo_gun2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 25A9C7E3
""+25A9C7CA: 00 00 - add [rax],al
""+25A9C7CC: 00 00 - add [rax],al
""+25A9C7CE: 00 00 - add [rax],al
""+25A9C7D0: 55 - push rbp
""+25A9C7D1: 48 8B EC - mov rbp,rsp
""+25A9C7D4: 57 - push rdi
""+25A9C7D5: 48 83 EC 08 - sub rsp,08
""+25A9C7D9: 48 8B F9 - mov rdi,rcx
""+25A9C7DC: 48 89 55 F0 - mov [rbp-10],rdx
""+25A9C7E0: 48 8B C2 - mov rax,rdx
// ---------- INJECTING HERE ----------
""+25A9C7E3: 89 47 24 - mov [rdi+24],eax
""+25A9C7E6: 48 8B CF - mov rcx,rdi
// ---------- DONE INJECTING ----------
""+25A9C7E9: 48 83 EC 20 - sub rsp,20
""+25A9C7ED: 49 BB 30 C8 A9 25 00 00 00 00 - mov r11,0000000025A9C830
""+25A9C7F7: 41 FF D3 - call r11
""+25A9C7FA: 48 83 C4 20 - add rsp,20
""+25A9C7FE: 48 8B 7D F8 - mov rdi,[rbp-08]
""+25A9C802: C9 - leave
""+25A9C803: C3 - ret
""+25A9C804: 00 00 - add [rax],al
""+25A9C806: 00 00 - add [rax],al
""+25A9C808: 00 00 - add [rax],al
}
