10
"Activate Mono"
Auto Assembler Script
[ENABLE]
{$lua}
LaunchMonoDataCollector()
{$asm}
[DISABLE]
105208
"Get Player"
Auto Assembler Script
define(address,"GameAssembly.dll"+485A44)
define(bytes,F3 0F 10 86 CC 00 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(player)
newmem:
mov [player],esi
code:
movss xmm0,[esi+000000CC]
jmp return
player:
dw 0
address:
jmp newmem
nop 3
return:
registersymbol(player)
[DISABLE]
address:
db bytes
// movss xmm0,[esi+000000CC]
dealloc(newmem)
unregistersymbol(player)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll.il2cpp+2A0A44
GameAssembly.dll.il2cpp+2A0A25: E8 F6 1E D3 FF - call GameAssembly.dll.text+1B6920
GameAssembly.dll.il2cpp+2A0A2A: 83 C4 04 - add esp,04
GameAssembly.dll.il2cpp+2A0A2D: C6 05 FC DD 55 08 01 - mov byte ptr [GameAssembly.dll+1BDDDFC],01
GameAssembly.dll.il2cpp+2A0A34: 53 - push ebx
GameAssembly.dll.il2cpp+2A0A35: 56 - push esi
GameAssembly.dll.il2cpp+2A0A36: 8B 75 08 - mov esi,[ebp+08]
GameAssembly.dll.il2cpp+2A0A39: 0F 57 C0 - xorps xmm0,xmm0
GameAssembly.dll.il2cpp+2A0A3C: 66 0F 13 45 F0 - movlpd [ebp-10],xmm0
GameAssembly.dll.il2cpp+2A0A41: 57 - push edi
GameAssembly.dll.il2cpp+2A0A42: 6A 00 - push 00
// ---------- INJECTING HERE ----------
GameAssembly.dll.il2cpp+2A0A44: F3 0F 10 86 CC 00 00 00 - movss xmm0,[esi+000000CC]
// ---------- DONE INJECTING ----------
GameAssembly.dll.il2cpp+2A0A4C: F3 0F 11 45 08 - movss [ebp+08],xmm0
GameAssembly.dll.il2cpp+2A0A51: E8 3A 1E B5 00 - call UnityEngine.Time.get_deltaTime
GameAssembly.dll.il2cpp+2A0A56: D8 45 08 - fadd dword ptr [ebp+08]
GameAssembly.dll.il2cpp+2A0A59: 6A 00 - push 00
GameAssembly.dll.il2cpp+2A0A5B: F3 0F 10 86 BC 00 00 00 - movss xmm0,[esi+000000BC]
GameAssembly.dll.il2cpp+2A0A63: D9 9E CC 00 00 00 - fstp dword ptr [esi+000000CC]
GameAssembly.dll.il2cpp+2A0A69: F3 0F 11 45 08 - movss [ebp+08],xmm0
GameAssembly.dll.il2cpp+2A0A6E: E8 1D 1E B5 00 - call UnityEngine.Time.get_deltaTime
GameAssembly.dll.il2cpp+2A0A73: D8 45 08 - fadd dword ptr [ebp+08]
GameAssembly.dll.il2cpp+2A0A76: 6A 00 - push 00
}
105209
"Player"
0
4 Bytes
player
0
105210
"Wallet"
0
1
+6c
0
105211
"Coins"
0
4 Bytes
+34
105212
"Gems"
0
4 Bytes
+38
105213
"Steed"
0
1
+a4
0
105214
"WalkSpeed"
0
Float
+ec
105215
"RunSpeed"
0
Float
+f0
105216
"StaminaDecrease when Running"
0
Float
+fc
105217
"Hore is Tired for...."
0
Float
+124
105203
"Get Only Addresses for Gold+Gems"
Auto Assembler Script
define(address,"GameAssembly.dll"+398EFC)
define(bytes,FF 76 34 50 E8 4B 8D 15 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(gold)
newmem:
mov [gold],esi
code:
push [esi+34]
push eax
call CoinBag.ShowCoins
jmp return
gold:
dq deadbeef
address:
jmp newmem
nop 4
return:
registersymbol(gold)
[DISABLE]
address:
db bytes
// push [esi+34]
// push eax
// call CoinBag.ShowCoins
dealloc(newmem)
unregistersymbol(gold)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll.il2cpp+1B3EFC
GameAssembly.dll.il2cpp+1B3EE1: 50 - push eax
GameAssembly.dll.il2cpp+1B3EE2: E8 79 AF CC 00 - call UnityEngine.GameObject.SetActive
GameAssembly.dll.il2cpp+1B3EE7: 83 C4 0C - add esp,0C
GameAssembly.dll.il2cpp+1B3EEA: 80 7E 33 00 - cmp byte ptr [esi+33],00
GameAssembly.dll.il2cpp+1B3EEE: 74 18 - je GameAssembly.dll.il2cpp+1B3F08
GameAssembly.dll.il2cpp+1B3EF0: 8B 46 3C - mov eax,[esi+3C]
GameAssembly.dll.il2cpp+1B3EF3: 85 C0 - test eax,eax
GameAssembly.dll.il2cpp+1B3EF5: 74 15 - je GameAssembly.dll.il2cpp+1B3F0C
GameAssembly.dll.il2cpp+1B3EF7: 6A 00 - push 00
GameAssembly.dll.il2cpp+1B3EF9: FF 76 38 - push [esi+38]
// ---------- INJECTING HERE ----------
GameAssembly.dll.il2cpp+1B3EFC: FF 76 34 - push [esi+34]
// ---------- DONE INJECTING ----------
GameAssembly.dll.il2cpp+1B3EFF: 50 - push eax
GameAssembly.dll.il2cpp+1B3F00: E8 4B 8D 15 00 - call CoinBag.ShowCoins
GameAssembly.dll.il2cpp+1B3F05: 83 C4 10 - add esp,10
GameAssembly.dll.il2cpp+1B3F08: 5F - pop edi
GameAssembly.dll.il2cpp+1B3F09: 5E - pop esi
GameAssembly.dll.il2cpp+1B3F0A: 5D - pop ebp
GameAssembly.dll.il2cpp+1B3F0B: C3 - ret
GameAssembly.dll.il2cpp+1B3F0C: E8 7F EB E1 FF - call GameAssembly.dll.text+1B6A90
GameAssembly.dll.il2cpp+1B3F11: CC - int 3
GameAssembly.dll.il2cpp+1B3F12: CC - int 3
}
105204
"Gold"
0
4 Bytes
gold
34
105205
"Gems"
0
4 Bytes
gold
38
00000000
06020000
_Coin
06020020