133017
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "Death Stranding: Director's Cut"
local gameProcess = "ds.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2022 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF. All other sources are allowed with permission.")
else
end
[DISABLE]
132971
"[POINTERS]"
1
133078
"Pointers"
Auto Assembler Script
[ENABLE]
define(DS_Player,ds.exe+7BB5B28)
define(DS_DataBat,ds.exe+7BEB0F8)
define(DS_GL,ds.exe+7BE5948)
registersymbol(DS_Player)
registersymbol(DS_DataBat)
registersymbol(DS_GL)
[DISABLE]
unregistersymbol(DS_Player)
unregistersymbol(DS_DataBat)
unregistersymbol(DS_GL)
133039
"Data"
1
133041
"Grenade Launcher"
1
133081
"Clip Size (Hematic)"
0
4 Bytes
DS_GL
58
28
88
48
10
378
133086
"Clip Size (Explosive)"
0
4 Bytes
DS_GL
58
68
88
48
10
378
133087
"Clip Size (Slip)"
0
4 Bytes
DS_GL
58
A8
88
48
10
378
133085
"Clip Size (Tranquilizer)"
0
4 Bytes
DS_GL
58
E8
88
48
10
378
133049
"Metals"
1
133059
"50"
4 Bytes
"ds.exe"+079A0A08
48
30
590
10
133063
"100"
0
4 Bytes
"ds.exe"+079A0A08
48
30
5D0
10
133065
"200"
0
4 Bytes
"ds.exe"+079A0A08
48
30
690
10
133064
"400"
0
4 Bytes
"ds.exe"+079A0A08
48
30
628
10
133066
"Chemicals"
1
133067
"30"
0
4 Bytes
"ds.exe"+079A0A08
48
30
5C0
10
133068
"60"
0
4 Bytes
"ds.exe"+079A0A08
48
30
648
10
133069
"High 240"
0
4 Bytes
"ds.exe"+079A0A08
48
30
818
10
133047
"Special Alloys"
1
133044
"60"
4 Bytes
"ds.exe"+079A09C8
48
10
40
48
133045
"120"
0
4 Bytes
"ds.exe"+079A09C8
48
90
40
48
133057
"Battery Packs"
1
133056
"Level 1"
0
Float
DS_DataBat
284
8
133055
"Level 2"
0
Float
DS_DataBat
288
8
133058
"Level 3"
0
Float
DS_DataBat
28C
8
133053
"Level 4"
0
Float
DS_DataBat
290
8
133054
"Battery"
0
Float
DS_DataBat
2D8
8
132994
"Character"
1
133012
"??"
0
Float
DS_Player
5D8
98
54E0
10
48
133027
"??"
0
Float
DS_Player
5D8
98
54E0
10
48
133014
"Current Weight"
0
Float
DS_Player
5DC
98
54E0
10
48
133013
"??"
0
Float
DS_Player
5E0
98
54E0
10
48
133015
"Max Weight"
0
Float
DS_Player
5EC
98
54E0
10
48
133005
"Max Weight Threshold"
0
Float
DS_Player
1454
98
54E0
10
48
133006
"Min Weight Threshold"
0
Float
DS_Player
1458
98
54E0
10
48
133010
"Blood"
0
Float
DS_Player
C0
54E0
10
48
133011
"Max"
0
Float
DS_Player
C4
54E0
10
48
133000
"Conciousness"
0
Float
DS_Player
DC
54E0
10
48
133001
"Max"
0
Float
DS_Player
E4
54E0
10
48
132995
"Stamina"
0
Float
DS_Player
140
54E0
10
48
132996
"Max"
0
Float
DS_Player
110
54E0
10
48
132997
"Total Max"
0
Float
DS_Player
148
54E0
10
48
132998
"Boots"
0
Float
DS_Player
32C
54E0
10
48
132999
"Max"
0
Float
DS_Player
330
54E0
10
48
133028
"Run Played (Time)"
0
Float
DS_Player
1FC
54E0
10
48
132992
"Chiralium"
0
4 Bytes
DS_Player
2498
54C8
10
48
132993
"Chiralium (Max)"
0
4 Bytes
DS_Player
249C
54C8
10
48
132970
"Cryptobiote"
0
4 Bytes
DS_Player
24E0
54C8
10
48
132975
"Cryptobiote (Max)"
0
4 Bytes
DS_Player
24E4
54C8
10
48
132977
"D-Cryptobiote"
0
4 Bytes
DS_Player
2528
54C8
10
48
132978
"D-Cryptobiote (Max)"
0
4 Bytes
DS_Player
252C
54C8
10
48
132969
"Skeleton Battery"
0
Float
DS_Player
4810
54C8
10
48
133018
"[SCRIPTS]"
1
132963
"Get Selected Cargo"
Auto Assembler Script
[ENABLE]
aobscanmodule(getItem,ds.exe,48 8B 46 28 45 33 E4) // should be unique
alloc(newmem,$64,getItem)
label(code)
label(return)
registersymbol(gItem)
label(gItem)
newmem:
code:
mov [gItem],rsi
mov rax,[rsi+28]
xor r12d,r12d
jmp return
gItem:
dq 0
getItem:
jmp newmem
nop
nop
return:
registersymbol(getItem)
[DISABLE]
getItem:
db 48 8B 46 28 45 33 E4
unregistersymbol(getItem)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2746678
ds.exe+274664A: C5 FA 58 8B 28 04 00 00 - vaddss xmm1,xmm0,[rbx+00000428]
ds.exe+2746652: 84 C9 - test cl,cl
ds.exe+2746654: C5 FA 11 8B 28 04 00 00 - vmovss [rbx+00000428],xmm1
ds.exe+274665C: 0F 95 C0 - setne al
ds.exe+274665F: 08 83 30 04 00 00 - or [rbx+00000430],al
ds.exe+2746665: 48 85 FF - test rdi,rdi
ds.exe+2746668: 74 0E - je ds.exe+2746678
ds.exe+274666A: 48 8B CE - mov rcx,rsi
ds.exe+274666D: E8 FE 4C 58 00 - call ds.exe+2CCB370
ds.exe+2746672: 88 83 1E 04 00 00 - mov [rbx+0000041E],al
// ---------- INJECTING HERE ----------
ds.exe+2746678: 48 8B 46 28 - mov rax,[rsi+28]
// ---------- DONE INJECTING ----------
ds.exe+274667C: 45 33 E4 - xor r12d,r12d
ds.exe+274667F: 48 85 C0 - test rax,rax
ds.exe+2746682: 74 14 - je ds.exe+2746698
ds.exe+2746684: 8B 40 54 - mov eax,[rax+54]
ds.exe+2746687: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
ds.exe+274668B: C4 E1 FA 2A C0 - vcvtsi2ss xmm0,rax,rax
ds.exe+2746690: C5 FA 11 83 20 04 00 00 - vmovss [rbx+00000420],xmm0
ds.exe+2746698: 48 8B 83 F0 03 00 00 - mov rax,[rbx+000003F0]
ds.exe+274669F: 0F B6 4C 24 23 - movzx ecx,byte ptr [rsp+23]
ds.exe+27466A4: 48 3B C7 - cmp rax,rdi
}
132964
"Baggage"
1
25369
"Base"
0
Byte
gItem
0
28
132982
"DestroyObject (hover item, set to 0, then close Inventory to get it destroyed)"
0
Byte
gItem
21
28
25367
"??"
0
Byte
gItem
3C
28
132981
"Type"
listCargoType
0
Byte
gItem
3D
28
25418
"Size"
listCargoSize
0
Byte
gItem
3E
28
25417
"Quantity/Ammo/Energy"
0
4 Bytes
gItem
48
28
25420
"Weight"
0
Float
gItem
50
28
25374
"Max. Damage"
0
4 Bytes
gItem
5C
28
25375
"Max. Container Damage"
0
4 Bytes
gItem
58
28
25421
"Base"
0
4 Bytes
gItem
0
132979
"Cargo Type Pointer"
1
0
4 Bytes
gItem
28
132983
"Cargo Health (Damage)"
0
Float
gItem
34
25368
"Container Health (Damage)"
0
Float
gItem
30
132989
"Lost Cargo Data"
1
132968
"ID"
listDestinations
1
4 Bytes
gItem
B0
132985
"ID Visual"
listDestinations
1
4 Bytes
gItem
B8
132990
"Steam ID"
listDestinations
1
8 Bytes
gItem
B0
132991
"Steam ID Visual"
listDestinations
1
8 Bytes
gItem
B8
132984
"Max Likes"
1
4 Bytes
gItem
CC
132980
"??"
1
4 Bytes
gItem
D4
25370
"Max Amount (Float)"
0
Float
gItem
100
25371
"Magazine"
0
2 Bytes
gItem
10A
87531
"Clip"
1
2 Bytes
gItem
108
130657
"Always Light Weight"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT,ds.exe,C5 7A 11 4E 14) // should be unique
alloc(newmem,$64,INJECT)
label(code)
label(return)
label(test)
newmem:
code:
vmovss xmm9,[test]
vmovss [rsi+14],xmm9
jmp return
test:
dq (float)0.00
INJECT:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db C5 7A 11 4E 14
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2C99431
ds.exe+2C993F9: C4 C1 7A 11 7D 38 - vmovss [r13+38],xmm7
ds.exe+2C993FF: C5 32 58 CF - vaddss xmm9,xmm9,xmm7
ds.exe+2C99403: 4C 3B E3 - cmp r12,rbx
ds.exe+2C99406: 0F 85 74 FF FF FF - jne ds.exe+2C99380
ds.exe+2C9940C: 48 8B 5C 24 20 - mov rbx,[rsp+20]
ds.exe+2C99411: 48 8B 74 24 28 - mov rsi,[rsp+28]
ds.exe+2C99416: 8B AC 24 C8 00 00 00 - mov ebp,[rsp+000000C8]
ds.exe+2C9941D: 4C 8B B4 24 D0 00 00 00 - mov r14,[rsp+000000D0]
ds.exe+2C99425: 4C 8B BC 24 C0 00 00 00 - mov r15,[rsp+000000C0]
ds.exe+2C9942D: 48 8B 46 28 - mov rax,[rsi+28]
// ---------- INJECTING HERE ----------
ds.exe+2C99431: C5 7A 11 4E 14 - vmovss [rsi+14],xmm9
// ---------- DONE INJECTING ----------
ds.exe+2C99436: C5 B2 58 40 0C - vaddss xmm0,xmm9,[rax+0C]
ds.exe+2C9943B: C5 FA 11 40 0C - vmovss [rax+0C],xmm0
ds.exe+2C99440: 48 85 DB - test rbx,rbx
ds.exe+2C99443: 74 09 - je ds.exe+2C9944E
ds.exe+2C99445: 48 8B CB - mov rcx,rbx
ds.exe+2C99448: FF 15 12 31 E9 00 - call qword ptr [ds.exe+3B2C560]
ds.exe+2C9944E: FF C5 - inc ebp
ds.exe+2C99450: 49 83 C6 08 - add r14,08
ds.exe+2C99454: 89 AC 24 C8 00 00 00 - mov [rsp+000000C8],ebp
ds.exe+2C9945B: 4C 89 B4 24 D0 00 00 00 - mov [rsp+000000D0],r14
}
132957
"All Items 1 KG (Game)"
Auto Assembler Script
[ENABLE]
aobscanmodule(getItemWeight,ds.exe,C5 7A 10 41 50 74) // should be unique
alloc(newmem,$64,getItemWeight)
label(code)
label(return)
newmem:
code:
mov [rcx+50],(float)1.0
vmovss xmm8,[rcx+50]
jmp return
getItemWeight:
jmp newmem
return:
registersymbol(getItemWeight)
[DISABLE]
getItemWeight:
db C5 7A 10 41 50
unregistersymbol(getItemWeight)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2C9943E
ds.exe+2C9941B: 49 8D 04 37 - lea rax,[r15+rsi]
ds.exe+2C9941F: 49 C1 EF 03 - shr r15,03
ds.exe+2C99423: 48 3B F0 - cmp rsi,rax
ds.exe+2C99426: 4C 0F 47 F9 - cmova r15,rcx
ds.exe+2C9942A: 4D 85 FF - test r15,r15
ds.exe+2C9942D: 74 46 - je ds.exe+2C99475
ds.exe+2C9942F: 90 - nop
ds.exe+2C99430: 48 8B 2E - mov rbp,[rsi]
ds.exe+2C99433: F6 85 08 02 00 00 80 - test byte ptr [rbp+00000208],-80
ds.exe+2C9943A: 48 8B 4D 28 - mov rcx,[rbp+28]
// ---------- INJECTING HERE ----------
ds.exe+2C9943E: C5 7A 10 41 50 - vmovss xmm8,[rcx+50]
// ---------- DONE INJECTING ----------
ds.exe+2C99443: 74 1D - je ds.exe+2C99462
ds.exe+2C99445: E8 56 CC 79 00 - call ds.exe+34360A0
ds.exe+2C9944A: 48 8B CD - mov rcx,rbp
ds.exe+2C9944D: C5 F8 28 F0 - vmovaps xmm6,xmm0
ds.exe+2C99451: E8 3A 61 FB FF - call ds.exe+2C4F590
ds.exe+2C99456: C5 BA 5C CE - vsubss xmm1,xmm8,xmm6
ds.exe+2C9945A: C5 FA 59 D1 - vmulss xmm2,xmm0,xmm1
ds.exe+2C9945E: C5 6A 58 C6 - vaddss xmm8,xmm2,xmm6
ds.exe+2C99462: 48 83 C6 08 - add rsi,08
ds.exe+2C99466: 49 FF C6 - inc r14
}
132959
"All Items 1 KG (Cargo Management)"
Auto Assembler Script
[ENABLE]
aobscanmodule(getItemWeight,ds.exe,C5 FA 10 79 50 74) // should be unique
alloc(newmem,$64,getItemWeight)
label(code)
label(return)
newmem:
code:
mov [rcx+50],(float)1.0
vmovss xmm7,[rcx+50]
jmp return
getItemWeight:
jmp newmem
return:
registersymbol(getItemWeight)
[DISABLE]
getItemWeight:
db C5 FA 10 79 50
unregistersymbol(getItemWeight)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2C5AECA
ds.exe+2C5AEAC: CC - int 3
ds.exe+2C5AEAD: CC - int 3
ds.exe+2C5AEAE: CC - int 3
ds.exe+2C5AEAF: CC - int 3
ds.exe+2C5AEB0: 40 53 - push rbx
ds.exe+2C5AEB2: 48 83 EC 40 - sub rsp,40
ds.exe+2C5AEB6: 48 8B D9 - mov rbx,rcx
ds.exe+2C5AEB9: C5 F8 29 7C 24 20 - vmovaps [rsp+20],xmm7
ds.exe+2C5AEBF: 48 8B 49 28 - mov rcx,[rcx+28]
ds.exe+2C5AEC3: F6 83 08 02 00 00 80 - test byte ptr [rbx+00000208],-80
// ---------- INJECTING HERE ----------
ds.exe+2C5AECA: C5 FA 10 79 50 - vmovss xmm7,[rcx+50]
// ---------- DONE INJECTING ----------
ds.exe+2C5AECF: 74 39 - je ds.exe+2C5AF0A
ds.exe+2C5AED1: C5 F8 29 74 24 30 - vmovaps [rsp+30],xmm6
ds.exe+2C5AED7: E8 C4 B1 7D 00 - call ds.exe+34360A0
ds.exe+2C5AEDC: 48 8B CB - mov rcx,rbx
ds.exe+2C5AEDF: C5 F8 28 F0 - vmovaps xmm6,xmm0
ds.exe+2C5AEE3: E8 A8 46 FF FF - call ds.exe+2C4F590
ds.exe+2C5AEE8: C5 F8 28 C8 - vmovaps xmm1,xmm0
ds.exe+2C5AEEC: C5 C2 5C C6 - vsubss xmm0,xmm7,xmm6
ds.exe+2C5AEF0: C5 F2 59 C8 - vmulss xmm1,xmm1,xmm0
ds.exe+2C5AEF4: C5 F2 58 C6 - vaddss xmm0,xmm1,xmm6
}
133020
"Get Shelter Materials"
Auto Assembler Script
{ Game : ds.exe
Version:
Date : 2022-09-04
Author : Marcus101RR
Get Material from Shelter
}
[ENABLE]
aobscanmodule(getMaterials,ds.exe,48 8B 44 1A 30) // should be unique
alloc(newmem,$64,getMaterials)
label(code)
label(return)
label(gMaterials)
registersymbol(gMaterials)
newmem:
code:
mov rax,rdx
add rax,rbx
mov [gMaterials],rax
mov rax,[rdx+rbx+30]
jmp return
gMaterials:
dq 0
getMaterials:
jmp newmem
return:
registersymbol(getMaterials)
[DISABLE]
getMaterials:
db 48 8B 44 1A 30
unregistersymbol(getMaterials)
dealloc(newmem)
unregistersymbol(gMaterials)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+3435DC0
ds.exe+3435DA0: 48 8B D1 - mov rdx,rcx
ds.exe+3435DA3: 41 0F 4C F8 - cmovl edi,r8d
ds.exe+3435DA7: 2C 03 - sub al,03
ds.exe+3435DA9: 3C 01 - cmp al,01
ds.exe+3435DAB: 76 2C - jna ds.exe+3435DD9
ds.exe+3435DAD: 48 63 CF - movsxd rcx,edi
ds.exe+3435DB0: 85 FF - test edi,edi
ds.exe+3435DB2: 0F 8E 19 01 00 00 - jng ds.exe+3435ED1
ds.exe+3435DB8: 48 2B D3 - sub rdx,rbx
ds.exe+3435DBB: 0F 1F 44 00 00 - nop dword ptr [rax+rax+00]
// ---------- INJECTING HERE ----------
ds.exe+3435DC0: 48 8B 44 1A 30 - mov rax,[rdx+rbx+30]
// ---------- DONE INJECTING ----------
ds.exe+3435DC5: 48 89 03 - mov [rbx],rax
ds.exe+3435DC8: 48 8D 5B 08 - lea rbx,[rbx+08]
ds.exe+3435DCC: 48 83 E9 01 - sub rcx,01
ds.exe+3435DD0: 75 EE - jne ds.exe+3435DC0
ds.exe+3435DD2: 8B C7 - mov eax,edi
ds.exe+3435DD4: E9 FA 00 00 00 - jmp ds.exe+3435ED3
ds.exe+3435DD9: 8B 91 90 00 00 00 - mov edx,[rcx+00000090]
ds.exe+3435DDF: 48 8B 0D DA 17 55 04 - mov rcx,[ds.exe+79875C0]
ds.exe+3435DE6: 48 63 F7 - movsxd rsi,edi
ds.exe+3435DE9: E8 32 CE 81 FF - call ds.exe+2C52C20
}
133021
"Chiral Crystals"
0
4 Bytes
gMaterials
8
133023
"Resins"
0
4 Bytes
gMaterials
10
133022
"Metals"
0
4 Bytes
gMaterials
18
133025
"Ceramics"
0
4 Bytes
gMaterials
20
133024
"Chemicals"
0
4 Bytes
gMaterials
28
133026
"Special Alloys"
0
4 Bytes
gMaterials
30
133033
"Get Structure Materials"
Auto Assembler Script
{ Game : ds.exe
Version:
Date : 2022-09-04
Author : Marcus101RR
Obtain Structure Materials
}
[ENABLE]
aobscanmodule(getStructMat,ds.exe,44 8B 89 10 02 00 00) // should be unique
alloc(newmem,$64,getStructMat)
label(code)
label(return)
label(gStructMat)
registersymbol(gStructMat)
newmem:
code:
mov [gStructMat],rcx
mov r9d,[rcx+00000210]
jmp return
gStructMat:
dq 0
getStructMat:
jmp newmem
nop 2
return:
registersymbol(getStructMat)
[DISABLE]
getStructMat:
db 44 8B 89 10 02 00 00
unregistersymbol(getStructMat)
dealloc(newmem)
unregistersymbol(gStructMat)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2C5433F
ds.exe+2C5431E: CC - int 3
ds.exe+2C5431F: CC - int 3
ds.exe+2C54320: 48 89 5C 24 08 - mov [rsp+08],rbx
ds.exe+2C54325: 48 89 74 24 10 - mov [rsp+10],rsi
ds.exe+2C5432A: 48 89 7C 24 18 - mov [rsp+18],rdi
ds.exe+2C5432F: 33 C0 - xor eax,eax
ds.exe+2C54331: 48 8B F1 - mov rsi,rcx
ds.exe+2C54334: 48 89 02 - mov [rdx],rax
ds.exe+2C54337: 48 89 42 08 - mov [rdx+08],rax
ds.exe+2C5433B: 48 89 42 10 - mov [rdx+10],rax
// ---------- INJECTING HERE ----------
ds.exe+2C5433F: 44 8B 89 10 02 00 00 - mov r9d,[rcx+00000210]
// ---------- DONE INJECTING ----------
ds.exe+2C54346: 44 89 0A - mov [rdx],r9d
ds.exe+2C54349: 44 8B 91 14 02 00 00 - mov r10d,[rcx+00000214]
ds.exe+2C54350: 44 03 52 04 - add r10d,[rdx+04]
ds.exe+2C54354: 44 89 52 04 - mov [rdx+04],r10d
ds.exe+2C54358: 44 8B 81 18 02 00 00 - mov r8d,[rcx+00000218]
ds.exe+2C5435F: 44 03 42 08 - add r8d,[rdx+08]
ds.exe+2C54363: 44 89 42 08 - mov [rdx+08],r8d
ds.exe+2C54367: 44 8B 99 1C 02 00 00 - mov r11d,[rcx+0000021C]
ds.exe+2C5436E: 44 03 5A 0C - add r11d,[rdx+0C]
ds.exe+2C54372: 44 89 5A 0C - mov [rdx+0C],r11d
}
133034
"Chiral Crystals"
0
4 Bytes
gStructMat
210
133035
"Resin"
0
4 Bytes
gStructMat
214
133038
"Metals"
0
4 Bytes
gStructMat
218
133036
"Chemicals"
0
4 Bytes
gStructMat
220
133037
"Special Alloys"
0
4 Bytes
gStructMat
224
132950
"Vehicle"
Auto Assembler Script
{ Game : ds.exe
Version:
Date : 2022-04-06
Author : 19712
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,ds.exe,C5 FA 11 47 78 * * * * D0) // should be unique
alloc(newmem,$1000,INJECT)
alloc(vehs,8,ds.exe)
label(code)
label(return)
registersymbol(vehs)
newmem:
code:
mov [vehs],rdi
vmovss [rdi+78],xmm0
jmp return
vehs:
dq 00
INJECT:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db C5 FA 11 47 78
unregistersymbol(vehs)
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+2F82CA1
ds.exe+2F82C77: C5 BA 5E 41 6C - vdivss xmm0,xmm8,[rcx+6C]
ds.exe+2F82C7C: C5 FA 59 CB - vmulss xmm1,xmm0,xmm3
ds.exe+2F82C80: C4 C1 72 59 D1 - vmulss xmm2,xmm1,xmm9
ds.exe+2F82C85: C5 C2 5C FA - vsubss xmm7,xmm7,xmm2
ds.exe+2F82C89: C5 F8 2F F7 - vcomiss xmm6,xmm7
ds.exe+2F82C8D: 76 06 - jna ds.exe+2F82C95
ds.exe+2F82C8F: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
ds.exe+2F82C93: EB 04 - jmp ds.exe+2F82C99
ds.exe+2F82C95: C5 E2 5D C7 - vminss xmm0,xmm3,xmm7
ds.exe+2F82C99: C5 FA 10 BF 84 00 00 00 - vmovss xmm7,[rdi+00000084]
// ---------- INJECTING HERE ----------
ds.exe+2F82CA1: C5 FA 11 47 78 - vmovss [rdi+78],xmm0
// ---------- DONE INJECTING ----------
ds.exe+2F82CA6: C5 F8 2F B3 D0 05 00 00 - vcomiss xmm6,[rbx+000005D0]
ds.exe+2F82CAE: 76 39 - jna ds.exe+2F82CE9
ds.exe+2F82CB0: 8B 83 60 05 00 00 - mov eax,[rbx+00000560]
ds.exe+2F82CB6: C1 E8 1E - shr eax,1E
ds.exe+2F82CB9: 41 84 C6 - test r14l,al
ds.exe+2F82CBC: 75 2B - jne ds.exe+2F82CE9
ds.exe+2F82CBE: 48 8B 83 98 08 00 00 - mov rax,[rbx+00000898]
ds.exe+2F82CC5: 44 84 70 48 - test [rax+48],r14l
ds.exe+2F82CC9: 75 1E - jne ds.exe+2F82CE9
ds.exe+2F82CCB: 48 8D 4B 58 - lea rcx,[rbx+58]
}
132951
"Current Durability"
0
Float
vehs
78
132953
"Max Durability"
0
Float
vehs
7c
132952
"Visual Condition (0 = Rustic, 1 = Clean)"
0
Float
vehs
84
130643
"Vehicle Battery"
Auto Assembler Script
{ Game : ds.exe
Version:
Date : 2022-04-02
Author : 19712
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,ds.exe,24 C0 00 00 00 C5 FA 10 40 08) // should be unique
alloc(newmem,$1000,INJECT)
alloc(vehb,8,ds.exe)
registersymbol(vehb)
label(code)
label(return)
newmem:
code:
mov [vehb],rax
vmovss xmm0,[rax+08]
jmp return
vehb:
dq 0
INJECT+05:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT+05:
db C5 FA 10 40 08
unregistersymbol(vehb)
unregistersymbol(INJECT)
dealloc(newmem)
dealloc(vehb)
{
// ORIGINAL CODE - INJECTION POINT: ds.exe+26E4D9C
ds.exe+26E4D73: 48 85 C0 - test rax,rax
ds.exe+26E4D76: 74 6A - je ds.exe+26E4DE2
ds.exe+26E4D78: 48 8B 40 68 - mov rax,[rax+68]
ds.exe+26E4D7C: 48 85 C0 - test rax,rax
ds.exe+26E4D7F: 48 8D 48 E0 - lea rcx,[rax-20]
ds.exe+26E4D83: 48 0F 44 CD - cmove rcx,rbp
ds.exe+26E4D87: 48 85 C9 - test rcx,rcx
ds.exe+26E4D8A: 74 56 - je ds.exe+26E4DE2
ds.exe+26E4D8C: 48 8B 81 98 08 00 00 - mov rax,[rcx+00000898]
ds.exe+26E4D93: C5 F8 29 B4 24 C0 00 00 00 - vmovaps [rsp+000000C0],xmm6
// ---------- INJECTING HERE ----------
ds.exe+26E4D9C: C5 FA 10 40 08 - vmovss xmm0,[rax+08]
// ---------- DONE INJECTING ----------
ds.exe+26E4DA1: C5 FA 5E 48 0C - vdivss xmm1,xmm0,[rax+0C]
ds.exe+26E4DA6: C5 FA 11 0F - vmovss [rdi],xmm1
ds.exe+26E4DAA: C5 FA 10 B1 E8 06 00 00 - vmovss xmm6,[rcx+000006E8]
ds.exe+26E4DB2: 48 83 C1 58 - add rcx,58
ds.exe+26E4DB6: E8 45 5E 6F FF - call ds.exe+1DDAC00
ds.exe+26E4DBB: C5 CA 5E 80 2C 01 00 00 - vdivss xmm0,xmm6,[rax+0000012C]
ds.exe+26E4DC3: C5 F8 28 B4 24 C0 00 00 00 - vmovaps xmm6,[rsp+000000C0]
ds.exe+26E4DCC: C5 FA 11 03 - vmovss [rbx],xmm0
ds.exe+26E4DD0: 41 C6 06 01 - mov byte ptr [r14],01
ds.exe+26E4DD4: EB 0C - jmp ds.exe+26E4DE2
}
130644
"Current Battery"
0
Float
vehb
8
130645
"Max Battery"
0
Float
vehb
C
132986
"[DEBUG]"
1
132987
"DEFINITIONS"
1
132988
"listCargoSize"
0:S
1:M
2:L
3:XL
1
133016
"listCargoType"
0:Cargo
1:Tool
2:Utility
4:Material
1
19
"Fetch Base Addresses"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"48 8B 05 ?? ?? ?? ?? 48 8D 15 ?? ?? ?? ?? C5 FA 5A D0 48 8B 48 18 48 8B 01",
"48 8B 05 ?? ?? ?? ?? F6 80 54 D7 05 00 10 75 ?? F6 45 54 02"
}
local aobNames = {
"DS_Player (+658)",
"Data_Battery"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: ds.exe+%X",aobNames[i],address))
end
[DISABLE]
Code :mov rcx,[rbx+18]
ds.exe+2E39461
FF
48
89
46
18
48
8B
4B
18
48
03
4E
20
E8
Code :mov ecx,[rax+58]
ds.exe+312048C
48
85
C0
74
36
8B
48
58
89
4F
3C
48
8B
Add Likes
ds.exe+2E0243E
4F
CA
48
8B
C1
49
89
40
08
48
8B
CD
48
8B
1.2
- Updated for 1.02
Battery AOB
00 00 C8 43 00 80 09 44 00 00 2F 44 00 00 7A 44