1
"Loot 5x the credit$"
Auto Assembler Script
{$lua}
LaunchMonoDataCollector()
{$asm}
define(address,GameManager:LocalGainCurrency+71)
define(bytes,03 CF 89 48 5C)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
add ecx,edi
add ecx,edi
add ecx,edi
add ecx,edi
code:
add ecx,edi
mov [eax+5C],ecx
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// add ecx,edi
// mov [eax+5C],ecx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameManager:LocalGainCurrency+71
GameManager:LocalGainCurrency+56: 50 - push eax
GameManager:LocalGainCurrency+57: 51 - push ecx
GameManager:LocalGainCurrency+58: 39 00 - cmp [eax],eax
GameManager:LocalGainCurrency+5a: E8 D9 09 5C EB - call System.Collections.Generic.List`1[System.Object]:GetEnumerator
GameManager:LocalGainCurrency+5f: 83 C4 0C - add esp,0C
GameManager:LocalGainCurrency+62: EB 12 - jmp GameManager:LocalGainCurrency+76
GameManager:LocalGainCurrency+64: 8D 64 24 00 - lea esp,[esp+00]
GameManager:LocalGainCurrency+68: 8B 5D C4 - mov ebx,[ebp-3C]
GameManager:LocalGainCurrency+6b: 8B 43 4C - mov eax,[ebx+4C]
GameManager:LocalGainCurrency+6e: 8B 48 5C - mov ecx,[eax+5C]
// ---------- INJECTING HERE ----------
GameManager:LocalGainCurrency+71: 03 CF - add ecx,edi
// ---------- DONE INJECTING ----------
GameManager:LocalGainCurrency+73: 89 48 5C - mov [eax+5C],ecx
GameManager:LocalGainCurrency+76: 8D 45 B8 - lea eax,[ebp-48]
GameManager:LocalGainCurrency+79: BA BC C2 E2 1A - mov edx,1AE2C2BC
GameManager:LocalGainCurrency+7e: 83 EC 0C - sub esp,0C
GameManager:LocalGainCurrency+81: 50 - push eax
GameManager:LocalGainCurrency+82: E8 61 0A 5C EB - call System.Collections.Generic.List`1+Enumerator[System.Object]:MoveNext
GameManager:LocalGainCurrency+87: 83 C4 10 - add esp,10
GameManager:LocalGainCurrency+8a: 85 C0 - test eax,eax
GameManager:LocalGainCurrency+8c: 75 DA - jne GameManager:LocalGainCurrency+68
GameManager:LocalGainCurrency+8e: 83 EC 0C - sub esp,0C
}
4
"Get Addresses"
Auto Assembler Script
{$lua}
LaunchMonoDataCollector()
{$asm}
define(address,6B1EB389)
define(bytes,83 EC 0C 50 39 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(player)
newmem:
mov [player],eax
code:
sub esp,0C
push eax
cmp [eax],eax
jmp return
player:
dd 0
address:
jmp newmem
nop
return:
registersymbol(player)
[DISABLE]
address:
db bytes
// sub esp,0C
// push eax
// cmp [eax],eax
dealloc(newmem)
unregistersymbol(player)
{
// ORIGINAL CODE - INJECTION POINT: HealthCounter:Update+19
HealthCounter:Update: 55 - push ebp
HealthCounter:Update+1: 8B EC - mov ebp,esp
HealthCounter:Update+3: 83 EC 08 - sub esp,08
HealthCounter:Update+6: 8B 45 08 - mov eax,[ebp+08]
HealthCounter:Update+9: 8B 48 10 - mov ecx,[eax+10]
HealthCounter:Update+c: 8B D1 - mov edx,ecx
HealthCounter:Update+e: 39 12 - cmp [edx],edx
HealthCounter:Update+10: 8B 49 60 - mov ecx,[ecx+60]
HealthCounter:Update+13: 89 4D FC - mov [ebp-04],ecx
HealthCounter:Update+16: 8B 40 10 - mov eax,[eax+10]
// ---------- INJECTING HERE ----------
HealthCounter:Update+19: 83 EC 0C - sub esp,0C
// ---------- DONE INJECTING ----------
HealthCounter:Update+1c: 50 - push eax
HealthCounter:Update+1d: 39 00 - cmp [eax],eax
HealthCounter:Update+1f: E8 2C 00 00 00 - call BaseStatData:get_MaxHealth
HealthCounter:Update+24: 83 C4 10 - add esp,10
HealthCounter:Update+27: 8B C8 - mov ecx,eax
HealthCounter:Update+29: 8B 45 FC - mov eax,[ebp-04]
HealthCounter:Update+2c: 83 EC 04 - sub esp,04
HealthCounter:Update+2f: 51 - push ecx
HealthCounter:Update+30: 50 - push eax
HealthCounter:Update+31: FF 75 08 - push [ebp+08]
}
5
"BaseStatData"
0
1
player
0
7
"Health"
0
0000FF
4 Bytes
+60
15
"energy"
FF0000
4 Bytes
[player]+74
6
"Opals (credit$)"
0
008000
4 Bytes
+5c
8
"charisma"
0
4 Bytes
+1C
9
"endurance"
0
4 Bytes
+28
10
"agility"
0
4 Bytes
+10
11
"faith"
0
4 Bytes
+34
12
"intellect"
0
4 Bytes
+40
13
"spirit"
0
4 Bytes
+4C
14
"strength"
0
4 Bytes
+58
16
"basePhysAttack"
0
4 Bytes
+84
17
"baseMagAttack"
0
4 Bytes
+90
18
"baseHealPower"
0
4 Bytes
+9C
19
"basePhysDefense"
0
4 Bytes
+A8
20
"baseMagDefense"
0
4 Bytes
+B4
21
"baseEnergyRecoverRate"
0
Float
+C4
22
"baseSpeed"
0
Float
+C8
23
"baseAttackSpeed"
0
Float
+E0
24
"isInvincible"
0
0000FF
Byte
+E5
25
"revivesRemaining"
0
4 Bytes
+E8