52
"Compact View Mode"
Auto Assembler Script
[ENABLE]
{$lua}
--Make parts of the main form invisible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), false)
control_setVisible(wincontrol_getControl(controlMainForm,2), false)
control_setVisible(wincontrol_getControl(controlMainForm,3), false)
[DISABLE]
{$lua}
--Make parts of the main form visible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), true)
control_setVisible(wincontrol_getControl(controlMainForm,2), true)
control_setVisible(wincontrol_getControl(controlMainForm,3), true)
68
"-----"
1
2
"Find CharacterController Stats"
Auto Assembler Script
//Health is a float and is even read in the pause screen.
//Find what's reading that.
//VampireSurvivors.Runtime.dll
//VampireSurvivors.Objects.Characters.CharacterController
[ENABLE]
aobscanmodule(readhealth,GameAssembly.dll,F3 0F 10 BB 60 01 00 00 48 85 C0 74 76) // should be unique
alloc(newmem,$1000,readhealth)
label(code)
label(return)
globalalloc(_charactercontroller,8)
newmem:
code:
push rax //Push a register to the stack to free it for use.
mov rax,_charactercontroller //Copy our allocated address into it.
mov [rax],rbx //Copy our desired value into where the register is pointing.
pop rax //Restore the value of the register and pretend nothing happened.
movss xmm7,[rbx+00000160]
jmp return
readhealth:
jmp newmem
nop 3
return:
registersymbol(readhealth)
[DISABLE]
readhealth:
db F3 0F 10 BB 60 01 00 00
unregistersymbol(readhealth)
unregistersymbol(_charactercontroller)
dealloc(newmem)
dealloc(_charactercontroller)
{
// ORIGINAL CODE - INJECTION POINT: 7FF9F708B383
7FF9F708B363: 84 C0 - test al,al
7FF9F708B365: 75 15 - jne 7FF9F708B37C
7FF9F708B367: 0F 2E 35 9E E6 93 00 - ucomiss xmm6,[7FF9F79C9A0C]
7FF9F708B36E: 7A 02 - jp 7FF9F708B372
7FF9F708B370: 74 0A - je 7FF9F708B37C
7FF9F708B372: 0F 57 FF - xorps xmm7,xmm7
7FF9F708B375: 0F 2E F7 - ucomiss xmm6,xmm7
7FF9F708B378: 7A 02 - jp 7FF9F708B37C
7FF9F708B37A: 74 63 - je 7FF9F708B3DF
7FF9F708B37C: 48 8B 83 50 01 00 00 - mov rax,[rbx+00000150]
// ---------- INJECTING HERE ----------
7FF9F708B383: F3 0F 10 BB 60 01 00 00 - movss xmm7,[rbx+00000160]
// ---------- DONE INJECTING ----------
7FF9F708B38B: 48 85 C0 - test rax,rax
7FF9F708B38E: 74 76 - je 7FF9F708B406
7FF9F708B390: 48 8B 80 80 00 00 00 - mov rax,[rax+00000080]
7FF9F708B397: 48 85 C0 - test rax,rax
7FF9F708B39A: 74 6A - je 7FF9F708B406
7FF9F708B39C: F3 0F 10 70 14 - movss xmm6,[rax+14]
7FF9F708B3A1: F3 0F 58 70 10 - addss xmm6,[rax+10]
7FF9F708B3A6: 0F 28 C6 - movaps xmm0,xmm6
7FF9F708B3A9: E8 A2 10 72 FE - call 7FF9F57AC450
7FF9F708B3AE: 84 C0 - test al,al
}
11
"Base Address"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]
114
"_playerStats"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+150
129
"Max Health"
0
Float
[_charactercontroller]+150
10
80
143
"Max Health (Egg)"
0
Float
[_charactercontroller]+150
14
80
126
"Recovery"
0
000080
Float
[_charactercontroller]+150
10
68
144
"Recovery (Egg)"
0
000080
Float
[_charactercontroller]+150
14
68
124
"Armor"
0
Float
[_charactercontroller]+150
10
58
142
"Armor (Egg)"
0
Float
[_charactercontroller]+150
14
58
118
"Move Speed"
0
Float
[_charactercontroller]+150
10
28
145
"Move Speed (Egg)"
0
Float
[_charactercontroller]+150
14
28
138
"-----"
1
115
"Might (Power)"
0
008000
Float
[_charactercontroller]+150
10
10
146
"Might (Power) (Egg)"
0
008000
Float
[_charactercontroller]+150
14
10
117
"Speed"
0
004080
Float
[_charactercontroller]+150
10
20
147
"Speed (Egg)"
0
004080
Float
[_charactercontroller]+150
14
20
121
"Duration"
0
008080
Float
[_charactercontroller]+150
10
40
148
"Duration (Egg)"
0
008080
Float
[_charactercontroller]+150
14
40
116
"Area"
0
004080
Float
[_charactercontroller]+150
10
18
149
"Area (Egg)"
0
004080
Float
[_charactercontroller]+150
14
18
139
"-----"
1
122
"Cooldown (1+value=)"
0
000080
Float
[_charactercontroller]+150
10
48
150
"Cooldown (1+value=) (Egg)"
0
000080
Float
[_charactercontroller]+150
14
48
123
"Amount"
0
800000
Float
[_charactercontroller]+150
10
50
151
"Amount (Egg)"
0
800000
Float
[_charactercontroller]+150
14
50
133
"Revival"
0
004080
Double
[_charactercontroller]+150
10
A0
152
"Revival (Egg)"
0
004080
Double
[_charactercontroller]+150
14
A0
134
"Magnet"
0
Float
[_charactercontroller]+150
10
88
140
"-----"
1
120
"Luck"
0
008000
Float
[_charactercontroller]+150
10
38
153
"Luck (Egg)"
0
008000
Float
[_charactercontroller]+150
14
38
119
"Growth"
0
008080
Float
[_charactercontroller]+150
10
30
154
"Growth (Egg)"
0
008080
Float
[_charactercontroller]+150
14
30
125
"Greed"
0
Float
[_charactercontroller]+150
10
60
155
"Greed (Egg)"
0
Float
[_charactercontroller]+150
14
60
131
"Curse"
0
800080
Float
[_charactercontroller]+150
10
90
156
"Curse (Egg)"
0
800080
Float
[_charactercontroller]+150
14
90
141
"-----"
1
127
"Reroll"
0
Float
[_charactercontroller]+150
10
70
157
"Reroll (Egg)"
0
Float
[_charactercontroller]+150
14
70
128
"Skip"
0
Float
[_charactercontroller]+150
10
78
158
"Skip (Egg)"
0
Float
[_charactercontroller]+150
14
78
132
"Banish"
0
Float
[_charactercontroller]+150
10
98
159
"Banish (Egg)"
0
Float
[_charactercontroller]+150
14
98
107
"Invincibility (Seconds)"
0
Float
[_charactercontroller]+10C
111
"HP"
0
Float
[_charactercontroller]+160
113
"Level"
0
4 Bytes
[_charactercontroller]+164
4
"EXP"
0
Float
[_charactercontroller]+174
161
"_playeroptions->_config"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+70
50
191
"playerID"
0
4 Bytes
[_charactercontroller]+70
10
50
192
"Max Weapons"
0
4 Bytes
[_charactercontroller]+70
54
50
175
"Coins"
0
Float
[_charactercontroller]+70
60
50
172
"RunCoins"
0
Float
[_charactercontroller]+70
64
50
184
"Enemies Killed"
0
4 Bytes
[_charactercontroller]+70
68
50
185
"LifetimeCoins"
0
4 Bytes
[_charactercontroller]+70
7C
50
186
"TotalCoins"
0
4 Bytes
[_charactercontroller]+70
80
50
173
"BeginnersLuck"
0
4 Bytes
[_charactercontroller]+70
84
50
174
"Set to 5 for guaranteed 5-item chests."
008000
1
135
"-----"
1
65
"Find Timer"
Auto Assembler Script
//The in-game timer is a float that matches what the game shows you.
//So like 4:28 would be a value of 260 seconds.
[ENABLE]
aobscanmodule(readtimer,GameAssembly.dll,F3 0F 10 B0 30 02 00 00 48 85 C9 0F 84 A5) // should be unique
alloc(newmem,$1000,readtimer)
label(code)
label(return)
globalalloc(_timerbase,8)
newmem:
code:
push rbx //Push a register to the stack to free it for use.
mov rbx,_timerbase //Copy our allocated address into it.
mov [rbx],rax //Copy our desired value into where rbx is pointing.
pop rbx //Restore the value of rbx and pretend nothing happened.
movss xmm6,[rax+00000230]
jmp return
readtimer:
jmp newmem
nop 3
return:
registersymbol(readtimer)
[DISABLE]
readtimer:
db F3 0F 10 B0 30 02 00 00
unregistersymbol(readtimer)
unregistersymbol(_timerbase)
dealloc(newmem)
dealloc(_timerbase)
{
// ORIGINAL CODE - INJECTION POINT: 7FF9F891D2A2
7FF9F891D265: C6 05 89 08 34 01 01 - mov byte ptr [7FF9F9C5DAF5],01
7FF9F891D26C: 48 8B 05 1D A2 0D 01 - mov rax,[7FF9F99F7490]
7FF9F891D273: 48 89 9C 24 90 00 00 00 - mov [rsp+00000090],rbx
7FF9F891D27B: 48 89 B4 24 98 00 00 00 - mov [rsp+00000098],rsi
7FF9F891D283: 0F 29 74 24 70 - movaps [rsp+70],xmm6
7FF9F891D288: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
7FF9F891D28F: 48 8B 01 - mov rax,[rcx]
7FF9F891D292: 48 85 C0 - test rax,rax
7FF9F891D295: 0F 84 BD 01 00 00 - je 7FF9F891D458
7FF9F891D29B: 48 8B 8F 90 00 00 00 - mov rcx,[rdi+00000090]
// ---------- INJECTING HERE ----------
7FF9F891D2A2: F3 0F 10 B0 30 02 00 00 - movss xmm6,[rax+00000230]
// ---------- DONE INJECTING ----------
7FF9F891D2AA: 48 85 C9 - test rcx,rcx
7FF9F891D2AD: 0F 84 A5 01 00 00 - je 7FF9F891D458
7FF9F891D2B3: 45 33 C0 - xor r8d,r8d
7FF9F891D2B6: 33 D2 - xor edx,edx
7FF9F891D2B8: E8 E3 80 97 FE - call System.Text.StringBuilder.set_Length
7FF9F891D2BD: 48 8B B7 90 00 00 00 - mov rsi,[rdi+00000090]
7FF9F891D2C4: 0F 28 C6 - movaps xmm0,xmm6
7FF9F891D2C7: F3 0F 5E 05 79 C0 D8 00 - divss xmm0,[7FF9F96A9348]
7FF9F891D2CF: E8 C4 04 61 FD - call 7FF9F5F2D798
7FF9F891D2D4: 48 8B 0D AD A6 0B 01 - mov rcx,[7FF9F99D7988]
}
66
"Seconds"
0
Float
[_timerbase]+230
67
"-----"
1
"pmain.dll"+7297F
------------------1
"pmain.dll"+72991
------------------2