52
"Compact View Mode"
Auto Assembler Script
[ENABLE]
{$lua}
--Make parts of the main form invisible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), false)
control_setVisible(wincontrol_getControl(controlMainForm,2), false)
control_setVisible(wincontrol_getControl(controlMainForm,3), false)
[DISABLE]
{$lua}
--Make parts of the main form visible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), true)
control_setVisible(wincontrol_getControl(controlMainForm,2), true)
control_setVisible(wincontrol_getControl(controlMainForm,3), true)
68
"-----"
1
2
"Find CharacterController Stats"
Auto Assembler Script
//Health is a float and is even read in the pause screen.
//Find what's reading that.
//VampireSurvivors.Runtime.dll
//VampireSurvivors.Objects.Characters.CharacterController
[ENABLE]
aobscanmodule(readhealth,GameAssembly.dll,F3 0F 10 BB 58 01 00 00 48 85 C0 74 76) // should be unique
alloc(newmem,$1000,readhealth)
label(code)
label(return)
globalalloc(_charactercontroller,8)
newmem:
code:
push rax //Push a register to the stack to free it for use.
mov rax,_charactercontroller //Copy our allocated address into it.
mov [rax],rbx //Copy our desired value into where rbx is pointing.
pop rax //Restore the value of rbx and pretend nothing happened.
movss xmm7,[rbx+00000158]
jmp return
readhealth:
jmp newmem
nop 3
return:
registersymbol(readhealth)
[DISABLE]
readhealth:
db F3 0F 10 BB 58 01 00 00
unregistersymbol(readhealth)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FFBDFED85F3
7FFBDFED85D3: 84 C0 - test al,al
7FFBDFED85D5: 75 15 - jne 7FFBDFED85EC
7FFBDFED85D7: 0F 2E 35 BE 92 94 00 - ucomiss xmm6,[7FFBE082189C]
7FFBDFED85DE: 7A 02 - jp 7FFBDFED85E2
7FFBDFED85E0: 74 0A - je 7FFBDFED85EC
7FFBDFED85E2: 0F 57 FF - xorps xmm7,xmm7
7FFBDFED85E5: 0F 2E F7 - ucomiss xmm6,xmm7
7FFBDFED85E8: 7A 02 - jp 7FFBDFED85EC
7FFBDFED85EA: 74 63 - je 7FFBDFED864F
7FFBDFED85EC: 48 8B 83 48 01 00 00 - mov rax,[rbx+00000148]
// ---------- INJECTING HERE ----------
7FFBDFED85F3: F3 0F 10 BB 58 01 00 00 - movss xmm7,[rbx+00000158]
// ---------- DONE INJECTING ----------
7FFBDFED85FB: 48 85 C0 - test rax,rax
7FFBDFED85FE: 74 76 - je 7FFBDFED8676
7FFBDFED8600: 48 8B 80 80 00 00 00 - mov rax,[rax+00000080]
7FFBDFED8607: 48 85 C0 - test rax,rax
7FFBDFED860A: 74 6A - je 7FFBDFED8676
7FFBDFED860C: F3 0F 10 70 14 - movss xmm6,[rax+14]
7FFBDFED8611: F3 0F 58 70 10 - addss xmm6,[rax+10]
7FFBDFED8616: 0F 28 C6 - movaps xmm0,xmm6
7FFBDFED8619: E8 F2 B2 76 FE - call 7FFBDE643910
7FFBDFED861E: 84 C0 - test al,al
}
11
"Base"
0
808080
Binary
0
1
0
[_charactercontroller]
107
"Invincibility (Seconds)"
0
Float
[_charactercontroller]+104
114
"Stats"
0
Binary
0
1
0
[_charactercontroller]+148
115
"Power"
0
Float
[_charactercontroller]+148
10
10
116
"Area"
0
Float
[_charactercontroller]+148
10
18
117
"Speed"
0
Float
[_charactercontroller]+148
10
20
118
"MoveSpeed"
0
Float
[_charactercontroller]+148
10
28
119
"Growth"
0
Float
[_charactercontroller]+148
10
30
120
"Luck"
0
Float
[_charactercontroller]+148
10
38
121
"Duration"
0
Float
[_charactercontroller]+148
10
40
122
"Cooldown (1+value=)"
0
Float
[_charactercontroller]+148
10
48
123
"Amount"
0
Float
[_charactercontroller]+148
10
50
124
"Armor"
0
Float
[_charactercontroller]+148
10
58
125
"Greed"
0
Float
[_charactercontroller]+148
10
60
126
"Regen"
0
Float
[_charactercontroller]+148
10
68
127
"Rerolls"
0
Float
[_charactercontroller]+148
10
70
128
"Skips"
0
Float
[_charactercontroller]+148
10
78
129
"MaxHP"
0
Float
[_charactercontroller]+148
10
80
134
"Magnet"
0
Float
[_charactercontroller]+148
10
88
130
"_magnet->body->_radius"
0
Float
[_charactercontroller]+178
44
20
137
"_magnet->Radius->_val"
0
Float
[_charactercontroller]+178
10
68
136
"_magnet->Percentage->_val"
0
Float
[_charactercontroller]+178
10
70
131
"Curse"
0
Float
[_charactercontroller]+148
10
90
132
"Banish"
0
Float
[_charactercontroller]+148
10
98
133
"Revivals"
0
Double
[_charactercontroller]+148
10
A0
111
"HP"
0
Float
[_charactercontroller]+158
113
"Level"
0
4 Bytes
[_charactercontroller]+15C
4
"EXP"
0
Float
[_charactercontroller]+16C
135
"-----"
1
65
"Find Timer"
Auto Assembler Script
//The in-game timer is a float that matches what the game shows you.
//So like 4:28 would be a value of 260 seconds.
[ENABLE]
aobscanmodule(readtimer,GameAssembly.dll,F3 0F 10 B0 28 02 00 00 48) // should be unique
alloc(newmem,$1000,readtimer)
label(code)
label(return)
globalalloc(_gameplaybase,8) //8 bytes for a 64-bit address.
newmem:
code:
push rbx //Push a register to the stack to free it for use.
mov rbx,_gameplaybase //Copy our allocated address into it.
mov [rbx],rax //Copy our desired value into where rbx is pointing.
pop rbx //Restore the value of rbx and pretend nothing happened.
//Original code.
movss xmm6,[rax+00000228]
jmp return
readtimer:
jmp newmem
nop 3
return:
registersymbol(readtimer)
[DISABLE]
readtimer:
db F3 0F 10 B0 28 02 00 00
unregistersymbol(readtimer)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF9CA3EE132
7FF9CA3EE0F5: C6 05 EF 13 2F 01 01 - mov byte ptr [7FF9CB6DF4EB],01
7FF9CA3EE0FC: 48 8B 05 45 DF 08 01 - mov rax,[7FF9CB47C048]
7FF9CA3EE103: 48 89 9C 24 90 00 00 00 - mov [rsp+00000090],rbx
7FF9CA3EE10B: 48 89 B4 24 98 00 00 00 - mov [rsp+00000098],rsi
7FF9CA3EE113: 0F 29 74 24 70 - movaps [rsp+70],xmm6
7FF9CA3EE118: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
7FF9CA3EE11F: 48 8B 01 - mov rax,[rcx]
7FF9CA3EE122: 48 85 C0 - test rax,rax
7FF9CA3EE125: 0F 84 BD 01 00 00 - je 7FF9CA3EE2E8
7FF9CA3EE12B: 48 8B 8F 90 00 00 00 - mov rcx,[rdi+00000090]
// ---------- INJECTING HERE ----------
7FF9CA3EE132: F3 0F 10 B0 28 02 00 00 - movss xmm6,[rax+00000228]
// ---------- DONE INJECTING ----------
7FF9CA3EE13A: 48 85 C9 - test rcx,rcx
7FF9CA3EE13D: 0F 84 A5 01 00 00 - je 7FF9CA3EE2E8
7FF9CA3EE143: 45 33 C0 - xor r8d,r8d
7FF9CA3EE146: 33 D2 - xor edx,edx
7FF9CA3EE148: E8 63 FB 98 FE - call 7FF9C8D7DCB0
7FF9CA3EE14D: 48 8B B7 90 00 00 00 - mov rsi,[rdi+00000090]
7FF9CA3EE154: 0F 28 C6 - movaps xmm0,xmm6
7FF9CA3EE157: F3 0F 5E 05 99 29 D5 00 - divss xmm0,[7FF9CB140AF8]
7FF9CA3EE15F: E8 34 43 64 FD - call 7FF9C7A32498
7FF9CA3EE164: 48 8B 0D 6D DC 06 01 - mov rcx,[7FF9CB45BDD8]
}
66
"Seconds"
0
Float
[_gameplaybase]+228
67
"-----"
1
_charactercontroller
1BCC0390040
"pmain.dll"+7297F
------------------1
"pmain.dll"+72991
------------------2