{ Game : NOTD
Version:
Date : 2024-11-05
Author : Admin
装备枪子弹
}
define(address,"LF-Win64-Shipping.exe"+45D5720)
define(bytes,41 89 46 28 45 89 6E 2C)
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
assert(address,bytes)
alloc(newmem,$1000,"LF-Win64-Shipping.exe"+45D5720)
label(code)
label(return)
newmem:
mov [r14+28],#5//装备枪子弹
code:
//mov [r14+28],eax
mov [r14+2C],r13d
jmp return
address:
jmp newmem
nop 3
return:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
address:
db bytes
// mov [r14+28],eax
// mov [r14+2C],r13d
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: LF-Win64-Shipping.exe+45D5720
LF-Win64-Shipping.exe+45D56F8: 74 30 - je LF-Win64-Shipping.exe+45D572A
LF-Win64-Shipping.exe+45D56FA: 49 8B 4C 24 08 - mov rcx,[r12+08]
LF-Win64-Shipping.exe+45D56FF: 49 8B 04 24 - mov rax,[r12]
LF-Win64-Shipping.exe+45D5703: 0F 10 00 - movups xmm0,[rax]
LF-Win64-Shipping.exe+45D5706: 41 0F 11 06 - movups [r14],xmm0
LF-Win64-Shipping.exe+45D570A: 0F 10 01 - movups xmm0,[rcx]
LF-Win64-Shipping.exe+45D570D: 41 0F 11 46 10 - movups [r14+10],xmm0
LF-Win64-Shipping.exe+45D5712: F2 0F 10 49 10 - movsd xmm1,[rcx+10]
LF-Win64-Shipping.exe+45D5717: F2 41 0F 11 4E 20 - movsd [r14+20],xmm1
LF-Win64-Shipping.exe+45D571D: 8B 41 18 - mov eax,[rcx+18]
// ---------- INJECTING HERE ----------
LF-Win64-Shipping.exe+45D5720: 41 89 46 28 - mov [r14+28],eax
// ---------- DONE INJECTING ----------
LF-Win64-Shipping.exe+45D5724: 45 89 6E 2C - mov [r14+2C],r13d
LF-Win64-Shipping.exe+45D5728: EB 03 - jmp LF-Win64-Shipping.exe+45D572D
LF-Win64-Shipping.exe+45D572A: 45 33 F6 - xor r14d,r14d
LF-Win64-Shipping.exe+45D572D: BA 10 00 00 00 - mov edx,00000010
LF-Win64-Shipping.exe+45D5732: 49 8B CE - mov rcx,r14
LF-Win64-Shipping.exe+45D5735: E8 56 6C 5B FC - call LF-Win64-Shipping.exe+B8C390
LF-Win64-Shipping.exe+45D573A: 8B 4B 08 - mov ecx,[rbx+08]
LF-Win64-Shipping.exe+45D573D: 4C 8B C8 - mov r9,rax
LF-Win64-Shipping.exe+45D5740: 2B 4B 34 - sub ecx,[rbx+34]
LF-Win64-Shipping.exe+45D5743: 44 8B E7 - mov r12d,edi
}