Mad Max Cheats 2020-07-23

[ENABLE]

aobscanmodule(health1,MadMax.exe,F3 0F 11 6B 1C 44) // should be unique
alloc(newmem,$1000,"MadMax.exe"+1F7CD02)
globalalloc(my_health,8)

label(code)
label(return)

newmem:

code:
mov [my_health],rbx
 //movss [rbx+1C],xmm5
  jmp return

health1:
  jmp newmem
return:
registersymbol(health1)

[DISABLE]

health1:
  db F3 0F 11 6B 1C

unregistersymbol(health1)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MadMax.exe"+1F7CD02

"MadMax.exe"+1F7CCDC: 0F 28 CF              -  movaps xmm1,xmm7
"MadMax.exe"+1F7CCDF: 0F 28 C1              -  movaps xmm0,xmm1
"MadMax.exe"+1F7CCE2: F3 0F 5C C5           -  subss xmm0,xmm5
"MadMax.exe"+1F7CCE6: 0F 2F C7              -  comiss xmm0,xmm7
"MadMax.exe"+1F7CCE9: 73 03                 -  jae MadMax.exe+1F7CCEE
"MadMax.exe"+1F7CCEB: 0F 28 E9              -  movaps xmm5,xmm1
"MadMax.exe"+1F7CCEE: 0F 28 7C 24 40        -  movaps xmm7,[rsp+40]
"MadMax.exe"+1F7CCF3: F3 44 0F 5C CE        -  subss xmm9,xmm6
"MadMax.exe"+1F7CCF8: 0F 28 74 24 50        -  movaps xmm6,[rsp+50]
"MadMax.exe"+1F7CCFD: F3 45 0F 5C C1        -  subss xmm8,xmm9
// ---------- INJECTING HERE ----------
"MadMax.exe"+1F7CD02: F3 0F 11 6B 1C        -  movss [rbx+1C],xmm5
// ---------- DONE INJECTING  ----------
"MadMax.exe"+1F7CD07: 44 0F 28 4C 24 20     -  movaps xmm9,[rsp+20]
"MadMax.exe"+1F7CD0D: 41 0F 28 C0           -  movaps xmm0,xmm8
"MadMax.exe"+1F7CD11: 44 0F 28 44 24 30     -  movaps xmm8,[rsp+30]
"MadMax.exe"+1F7CD17: 48 83 C4 60           -  add rsp,60
"MadMax.exe"+1F7CD1B: 5B                    -  pop rbx
"MadMax.exe"+1F7CD1C: C3                    -  ret
"MadMax.exe"+1F7CD1D: CC                    -  int 3
"MadMax.exe"+1F7CD1E: CC                    -  int 3
"MadMax.exe"+1F7CD1F: 90                    -  nop
"MadMax.exe"+1F7CD20: 53                    -  push rbx
}

[ENABLE]

aobscanmodule(nitro,MadMax.exe,0F 10 09 48 89 D1 E8)
alloc(newmem,2048,nitro)
label(returnhere)
//label(car)
label(originalcode)

newmem:
cmp [rcx+38],8D5613DD
jne originalcode

mov [rcx],(float)10


{car:
mov [rcx],(float)2000
movups xmm1,[rcx]
mov rcx,rdx
jmp returnhere}

originalcode:
{cmp [rcx+78],74EE24FD
je car}
movups xmm1,[rcx]
mov rcx,rdx
jmp returnhere

nitro:
jmp newmem
nop
returnhere:
registersymbol(nitro)

[DISABLE]
nitro:
db 0F 10 09 48 89 D1

{ Game   : MadMax.exe
  Version:
  Date   : 2017-08-01
  Author : ChrisFayte

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(thunder2,MadMax.exe,0F B7 40 04 C3 00) // should be unique
alloc(newmem,$100,"MadMax.exe"+1FFFB86)

label(code)
label(return)

newmem:

code:
 mov word ptr [rax+04],63
  movzx eax,word ptr [rax+04]
  ret
  jmp return

thunder2:
  jmp newmem
return:
registersymbol(thunder2)

[DISABLE]

thunder2:
  db 0F B7 40 04 C3

unregistersymbol(thunder2)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MadMax.exe"+1FFFB86

"MadMax.exe"+1FFFB6E: 66 90                                         -  nop
"MadMax.exe"+1FFFB70: 39 08                                         -  cmp [rax],ecx
"MadMax.exe"+1FFFB72: 75 06                                         -  jne MadMax.exe+1FFFB7A
"MadMax.exe"+1FFFB74: 80 78 06 00                                   -  cmp byte ptr [rax+06],00
"MadMax.exe"+1FFFB78: 75 0C                                         -  jne MadMax.exe+1FFFB86
"MadMax.exe"+1FFFB7A: 48 83 C0 08                                   -  add rax,08
"MadMax.exe"+1FFFB7E: 4C 39 C0                                      -  cmp rax,r8
"MadMax.exe"+1FFFB81: 75 ED                                         -  jne MadMax.exe+1FFFB70
"MadMax.exe"+1FFFB83: 31 C0                                         -  xor eax,eax
"MadMax.exe"+1FFFB85: C3                                            -  ret
// ---------- INJECTING HERE ----------
"MadMax.exe"+1FFFB86: 0F B7 40 04                                   -  movzx eax,word ptr [rax+04]
"MadMax.exe"+1FFFB8A: C3                                            -  ret
// ---------- DONE INJECTING  ----------
"MadMax.exe"+1FFFB8B: 00 00                                         -  add [rax],al
"MadMax.exe"+1FFFB8D: 00 00                                         -  add [rax],al
"MadMax.exe"+1FFFB8F: CC                                            -  int 3
"MadMax.exe"+1FFFB90: CC                                            -  int 3
"MadMax.exe"+1FFFB91: CC                                            -  int 3
"MadMax.exe"+1FFFB92: CC                                            -  int 3
"MadMax.exe"+1FFFB93: CC                                            -  int 3
"MadMax.exe"+1FFFB94: 66 66 66 2E 0F 1F 84 00 00 00 00 00           -  nop cs:[rax+rax+00000000]
"MadMax.exe"+1FFFBA0: 48 8B 01                                      -  mov rax,[rcx]
"MadMax.exe"+1FFFBA3: 4C 8B 41 08                                   -  mov r8,[rcx+08]
}