I dont know the way infinity is calling code for the game but if it can help you somehow heres some code from a CheatEngine Table.
All Rides are Classic:
{ Game : PlanetCoaster.exe
Version:
Date : 2017-07-30
Author : Marcelo
This script does blah blah blah
}
[ENABLE]
//code from here to ‘[DISABLE]’ will be used to enable the cheat
aobscanmodule(INJECT,PlanetCoaster.exe,F2 0F 11 44 F0 08) // should be unique
alloc(newmem,$1000,“PlanetCoaster.exe”+692C69)
label(code)
label(return)
newmem:
code:
mov [rax+rsi8+0c],(float)3.5
jmp return
INJECT:
jmp newmem
nop
return:
registersymbol(INJECT)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
db F2 0F 11 44 F0 08
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: “PlanetCoaster.exe”+692C69
“PlanetCoaster.exe”+692C3B: 74 55 - je PlanetCoaster.exe+692C92
“PlanetCoaster.exe”+692C3D: 48 8B 83 40 02 00 00 - mov rax,[rbx+00000240]
“PlanetCoaster.exe”+692C44: 48 8D 34 7F - lea rsi,[rdi+rdi2]
“PlanetCoaster.exe”+692C48: 80 7C F0 04 00 - cmp byte ptr [rax+rsi8+04],00
“PlanetCoaster.exe”+692C4D: 74 43 - je PlanetCoaster.exe+692C92
“PlanetCoaster.exe”+692C4F: F2 0F 10 44 F0 08 - movsd xmm0,[rax+rsi8+08]
“PlanetCoaster.exe”+692C55: 48 8D 54 24 30 - lea rdx,[rsp+30]
“PlanetCoaster.exe”+692C5A: F2 0F 58 83 08 03 00 00 - addsd xmm0,[rbx+00000308]
“PlanetCoaster.exe”+692C62: 48 8B CB - mov rcx,rbx
“PlanetCoaster.exe”+692C65: 89 7C 24 30 - mov [rsp+30],edi
// ---------- INJECTING HERE ----------
“PlanetCoaster.exe”+692C69: F2 0F 11 44 F0 08 - movsd [rax+rsi8+08],xmm0
// ---------- DONE INJECTING ----------
“PlanetCoaster.exe”+692C6F: E8 7C 02 00 00 - call PlanetCoaster.exe+692EF0
“PlanetCoaster.exe”+692C74: 48 85 C0 - test rax,rax
“PlanetCoaster.exe”+692C77: 74 19 - je PlanetCoaster.exe+692C92
“PlanetCoaster.exe”+692C79: 48 8B 8B 40 02 00 00 - mov rcx,[rbx+00000240]
“PlanetCoaster.exe”+692C80: F2 0F 10 44 F1 08 - movsd xmm0,[rcx+rsi8+08]
“PlanetCoaster.exe”+692C86: 66 0F 5A C0 - cvtpd2ps xmm0,xmm0
“PlanetCoaster.exe”+692C8A: C6 40 04 00 - mov byte ptr [rax+04],00
“PlanetCoaster.exe”+692C8E: F3 0F 11 00 - movss [rax],xmm0
“PlanetCoaster.exe”+692C92: FF C7 - inc edi
“PlanetCoaster.exe”+692C94: 3B BB B4 01 00 00 - cmp edi,[rbx+000001B4]
}
Or
no breaking down for rides and so on
{ Game : PlanetCoaster.exe
Version:
Date : 2017-07-30
Author : Marcelo
This script does blah blah blah
}
[ENABLE]
//code from here to ‘[DISABLE]’ will be used to enable the cheat
aobscanmodule(INJECT,PlanetCoaster.exe,F3 0F 11 9F 84 00 00 00) // should be unique
alloc(newmem,$1000,“PlanetCoaster.exe”+6BCC92)
label(code)
label(return)
newmem:
code:
mov [rdi+00000084],(float)1 //maintenance
mov [rdi+0000008c],0 //Refurbishment
jmp return
INJECT:
jmp newmem
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
db F3 0F 11 9F 84 00 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: “PlanetCoaster.exe”+6BCC92
“PlanetCoaster.exe”+6BCC64: F3 41 0F 5C C1 - subss xmm0,xmm9
“PlanetCoaster.exe”+6BCC69: F3 0F 59 D0 - mulss xmm2,xmm0
“PlanetCoaster.exe”+6BCC6D: 41 0F 28 C1 - movaps xmm0,xmm9
“PlanetCoaster.exe”+6BCC71: F3 0F 5E 80 68 02 00 00 - divss xmm0,[rax+00000268]
“PlanetCoaster.exe”+6BCC79: F3 41 0F 58 D1 - addss xmm2,xmm9
“PlanetCoaster.exe”+6BCC7E: F3 0F 59 C8 - mulss xmm1,xmm0
“PlanetCoaster.exe”+6BCC82: F3 0F 59 D1 - mulss xmm2,xmm1
“PlanetCoaster.exe”+6BCC86: F3 0F 59 D7 - mulss xmm2,xmm7
“PlanetCoaster.exe”+6BCC8A: F3 0F 5C DA - subss xmm3,xmm2
“PlanetCoaster.exe”+6BCC8E: F3 0F 5F DE - maxss xmm3,xmm6
// ---------- INJECTING HERE ----------
“PlanetCoaster.exe”+6BCC92: F3 0F 11 9F 84 00 00 00 - movss [rdi+00000084],xmm3
// ---------- DONE INJECTING ----------
“PlanetCoaster.exe”+6BCC9A: 84 C9 - test cl,cl
“PlanetCoaster.exe”+6BCC9C: 75 07 - jne PlanetCoaster.exe+6BCCA5
“PlanetCoaster.exe”+6BCC9E: 0F 2E DE - ucomiss xmm3,xmm6
“PlanetCoaster.exe”+6BCCA1: 7A 76 - jp PlanetCoaster.exe+6BCD19
“PlanetCoaster.exe”+6BCCA3: 75 74 - jne PlanetCoaster.exe+6BCD19
“PlanetCoaster.exe”+6BCCA5: 48 8B 86 20 02 00 00 - mov rax,[rsi+00000220]
“PlanetCoaster.exe”+6BCCAC: F3 0F 10 90 5C 02 00 00 - movss xmm2,[rax+0000025C]
“PlanetCoaster.exe”+6BCCB4: 0F 2F DA - comiss xmm3,xmm2
“PlanetCoaster.exe”+6BCCB7: 76 05 - jna PlanetCoaster.exe+6BCCBE
“PlanetCoaster.exe”+6BCCB9: 0F 28 CE - movaps xmm1,xmm6
}