8
"Launch Mono and cheats"
Auto Assembler Script
[ENABLE]
{$lua}
LaunchMonoDataCollector()
{$asm}
[DISABLE]
42
"GodMode"
Auto Assembler Script
define(address,Ellada.Game.Players.Player:GetHit+36)
define(bytes,7E 07 33 C0 E9 4E 02 00 00)
[ENABLE]
assert(address,bytes)
address:
db 78 07 // js Ellada.Game.Players.Player:GetHit+3f
return:
[DISABLE]
address:
db bytes
// jle Ellada.Game.Players.Player:GetHit+3f
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Ellada.Game.Players.Player:GetHit+36
Ellada.Game.Players.Player:GetHit+18: 8D 6D 00 - lea ebp,[ebp+00]
Ellada.Game.Players.Player:GetHit+1b: E8 D8 02 00 00 - call Ellada.Game.Players.Player:get_InvulEffect
Ellada.Game.Players.Player:GetHit+20: 8B C8 - mov ecx,eax
Ellada.Game.Players.Player:GetHit+22: 8B 45 E4 - mov eax,[ebp-1C]
Ellada.Game.Players.Player:GetHit+25: 89 4C 24 04 - mov [esp+04],ecx
Ellada.Game.Players.Player:GetHit+29: 89 04 24 - mov [esp],eax
Ellada.Game.Players.Player:GetHit+2c: 39 00 - cmp [eax],eax
Ellada.Game.Players.Player:GetHit+2e: 90 - nop
Ellada.Game.Players.Player:GetHit+2f: E8 FC 02 00 00 - call Ellada.Game.Rpgs.EffectList:GetEffectCount
Ellada.Game.Players.Player:GetHit+34: 85 C0 - test eax,eax
// ---------- INJECTING HERE ----------
Ellada.Game.Players.Player:GetHit+36: 7E 07 - jle Ellada.Game.Players.Player:GetHit+3f
// ---------- DONE INJECTING ----------
Ellada.Game.Players.Player:GetHit+38: 33 C0 - xor eax,eax
Ellada.Game.Players.Player:GetHit+3a: E9 4E 02 00 00 - jmp Ellada.Game.Players.Player:GetHit+28d
Ellada.Game.Players.Player:GetHit+3f: 89 7C 24 04 - mov [esp+04],edi
Ellada.Game.Players.Player:GetHit+43: 8B 45 08 - mov eax,[ebp+08]
Ellada.Game.Players.Player:GetHit+46: 89 04 24 - mov [esp],eax
Ellada.Game.Players.Player:GetHit+49: 8B C0 - mov eax,eax
Ellada.Game.Players.Player:GetHit+4b: E8 50 03 00 00 - call Ellada.Game.Actors.Actor:GetHit
Ellada.Game.Players.Player:GetHit+50: 85 C0 - test eax,eax
Ellada.Game.Players.Player:GetHit+52: 75 07 - jne Ellada.Game.Players.Player:GetHit+5b
Ellada.Game.Players.Player:GetHit+54: 33 C0 - xor eax,eax
}
30
"Increase each loot (if at least one of these items is already in bag) at looting&crafting"
Auto Assembler Script
define(address,Ellada.Game.Packs.Pack:Add+34)
define(bytes,03 C7 89 46 28)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
add eax,30
code:
add eax,edi
mov [esi+28],eax
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// add eax,edi
// mov [esi+28],eax
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Ellada.Game.Packs.Pack:Add+34
Ellada.Game.Packs.Pack:Add+19: 8B C0 - mov eax,eax
Ellada.Game.Packs.Pack:Add+1b: E8 98 8F FF FF - call Ellada.Game.Packs.Pack:get_StackSize
Ellada.Game.Packs.Pack:Add+20: 8B C8 - mov ecx,eax
Ellada.Game.Packs.Pack:Add+22: 8B 45 F4 - mov eax,[ebp-0C]
Ellada.Game.Packs.Pack:Add+25: 3B C1 - cmp eax,ecx
Ellada.Game.Packs.Pack:Add+27: 0F 4F C1 - cmovg eax,ecx
Ellada.Game.Packs.Pack:Add+2a: 8B 4E 28 - mov ecx,[esi+28]
Ellada.Game.Packs.Pack:Add+2d: 8B F8 - mov edi,eax
Ellada.Game.Packs.Pack:Add+2f: 2B F9 - sub edi,ecx
Ellada.Game.Packs.Pack:Add+31: 8B 46 28 - mov eax,[esi+28]
// ---------- INJECTING HERE ----------
Ellada.Game.Packs.Pack:Add+34: 03 C7 - add eax,edi
// ---------- DONE INJECTING ----------
Ellada.Game.Packs.Pack:Add+36: 89 46 28 - mov [esi+28],eax
Ellada.Game.Packs.Pack:Add+39: 8B 46 08 - mov eax,[esi+08]
Ellada.Game.Packs.Pack:Add+3c: 85 C0 - test eax,eax
Ellada.Game.Packs.Pack:Add+3e: 74 14 - je Ellada.Game.Packs.Pack:Add+54
Ellada.Game.Packs.Pack:Add+40: 8B 46 08 - mov eax,[esi+08]
Ellada.Game.Packs.Pack:Add+43: 89 74 24 04 - mov [esp+04],esi
Ellada.Game.Packs.Pack:Add+47: 89 04 24 - mov [esp],eax
Ellada.Game.Packs.Pack:Add+4a: 39 00 - cmp [eax],eax
Ellada.Game.Packs.Pack:Add+4c: 8D 6D 00 - lea ebp,[ebp+00]
Ellada.Game.Packs.Pack:Add+4f: E8 04 B2 FE FF - call Ellada.Game.Packs.PackManager:PackChangeNotify
}
32
"Ressources/Ammo does not decrease when used/sold"
Auto Assembler Script
define(address,Ellada.Game.Packs.Pack:Remove+19)
define(bytes,2B C7 89 46 28)
[ENABLE]
address:
nop 2
return:
[DISABLE]
address:
db bytes
// sub eax,edi
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Ellada.Game.Packs.Pack:Remove+19
Ellada.Game.Packs.Pack:Remove+1: 8B EC - mov ebp,esp
Ellada.Game.Packs.Pack:Remove+3: 57 - push edi
Ellada.Game.Packs.Pack:Remove+4: 56 - push esi
Ellada.Game.Packs.Pack:Remove+5: 83 EC 20 - sub esp,20
Ellada.Game.Packs.Pack:Remove+8: 8B 75 08 - mov esi,[ebp+08]
Ellada.Game.Packs.Pack:Remove+b: 8B 7D 0C - mov edi,[ebp+0C]
Ellada.Game.Packs.Pack:Remove+e: 8B 46 28 - mov eax,[esi+28]
Ellada.Game.Packs.Pack:Remove+11: 3B F8 - cmp edi,eax
Ellada.Game.Packs.Pack:Remove+13: 0F 4F F8 - cmovg edi,eax
Ellada.Game.Packs.Pack:Remove+16: 8B 46 28 - mov eax,[esi+28]
// ---------- INJECTING HERE ----------
Ellada.Game.Packs.Pack:Remove+19: 2B C7 - sub eax,edi
// ---------- DONE INJECTING ----------
Ellada.Game.Packs.Pack:Remove+1b: 89 46 28 - mov [esi+28],eax
Ellada.Game.Packs.Pack:Remove+1e: 8B 46 08 - mov eax,[esi+08]
Ellada.Game.Packs.Pack:Remove+21: 85 C0 - test eax,eax
Ellada.Game.Packs.Pack:Remove+23: 74 13 - je Ellada.Game.Packs.Pack:Remove+38
Ellada.Game.Packs.Pack:Remove+25: 8B 46 08 - mov eax,[esi+08]
Ellada.Game.Packs.Pack:Remove+28: 89 74 24 04 - mov [esp+04],esi
Ellada.Game.Packs.Pack:Remove+2c: 89 04 24 - mov [esp],eax
Ellada.Game.Packs.Pack:Remove+2f: 39 00 - cmp [eax],eax
Ellada.Game.Packs.Pack:Remove+31: 8B C0 - mov eax,eax
Ellada.Game.Packs.Pack:Remove+33: E8 18 B1 FE FF - call Ellada.Game.Packs.PackManager:PackChangeNotify
}
37
"make the game believe we have unlimited ressources for crafting"
Auto Assembler Script
define(address,Ellada.Game.Inventories.Inventory:GetItemCount)
define(bytes,55 8B EC 53 57)
[ENABLE]
assert(address,bytes)
address:
ret
[DISABLE]
address:
db bytes
// push ebp
// mov ebp,esp
// push ebx
// push edi
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Ellada.Game.Inventories.Inventory:GetItemCount
14C7EE96: 44 - inc esp
14C7EE97: E8 11 E9 62 12 - call 272AD7AD
14C7EE9C: CC - int 3
14C7EE9D: EE - out dx,al
14C7EE9E: 00 00 - add [eax],al
14C7EEA0: 68 B0 8D 35 26 - push 26358DB0
14C7EEA5: E9 56 12 CC EE - jmp 03940100
14C7EEAA: 00 00 - add [eax],al
14C7EEAC: 00 00 - add [eax],al
14C7EEAE: 00 00 - add [eax],al
// ---------- INJECTING HERE ----------
Ellada.Game.Inventories.Inventory:GetItemCount: 55 - push ebp
// ---------- DONE INJECTING ----------
Ellada.Game.Inventories.Inventory:GetItemCount+1: 8B EC - mov ebp,esp
Ellada.Game.Inventories.Inventory:GetItemCount+3: 53 - push ebx
Ellada.Game.Inventories.Inventory:GetItemCount+4: 57 - push edi
Ellada.Game.Inventories.Inventory:GetItemCount+5: 56 - push esi
Ellada.Game.Inventories.Inventory:GetItemCount+6: 83 EC 1C - sub esp,1C
Ellada.Game.Inventories.Inventory:GetItemCount+9: 33 FF - xor edi,edi
Ellada.Game.Inventories.Inventory:GetItemCount+b: BE 04 00 00 00 - mov esi,00000004
Ellada.Game.Inventories.Inventory:GetItemCount+10: EB 31 - jmp Ellada.Game.Inventories.Inventory:GetItemCount+43
Ellada.Game.Inventories.Inventory:GetItemCount+12: 8D AD 00 00 00 00 - lea ebp,[ebp+00000000]
Ellada.Game.Inventories.Inventory:GetItemCount+18: 89 74 24 04 - mov [esp+04],esi
}
3
"Get Playerbase address"
Auto Assembler Script
define(address,Ellada.Game.Actors.ActorManager:get_Player+24)
define(bytes,8B 07 8B 00 8B 40 08)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
//alloc(playerbase,8)
label(code)
label(return)
label(playerbase)
newmem:
mov [playerbase],edi
code:
mov eax,[edi]
mov eax,[eax]
mov eax,[eax+08]
jmp return
playerbase:
dq 0
address:
jmp newmem
nop 2
return:
registersymbol(playerbase)
[DISABLE]
address:
db bytes
// mov eax,[edi]
// mov eax,[eax]
// mov eax,[eax+08]
dealloc(*)
unregistersymbol(*)
{
// ORIGINAL CODE - INJECTION POINT: Ellada.Game.Actors.ActorManager:get_Player+24
Ellada.Game.Actors.ActorManager:get_Player+8: 8B 7D 08 - mov edi,[ebp+08]
Ellada.Game.Actors.ActorManager:get_Player+b: 0F B7 47 46 - movzx eax,word ptr [edi+46]
Ellada.Game.Actors.ActorManager:get_Player+f: 89 44 24 04 - mov [esp+04],eax
Ellada.Game.Actors.ActorManager:get_Player+13: 89 3C 24 - mov [esp],edi
Ellada.Game.Actors.ActorManager:get_Player+16: 90 - nop
Ellada.Game.Actors.ActorManager:get_Player+17: E8 34 00 00 00 - call Ellada.Game.Actors.ActorManager:GetActor
Ellada.Game.Actors.ActorManager:get_Player+1c: 8B F8 - mov edi,eax
Ellada.Game.Actors.ActorManager:get_Player+1e: 8B F7 - mov esi,edi
Ellada.Game.Actors.ActorManager:get_Player+20: 85 FF - test edi,edi
Ellada.Game.Actors.ActorManager:get_Player+22: 74 13 - je Ellada.Game.Actors.ActorManager:get_Player+37
// ---------- INJECTING HERE ----------
Ellada.Game.Actors.ActorManager:get_Player+24: 8B 07 - mov eax,[edi]
// ---------- DONE INJECTING ----------
Ellada.Game.Actors.ActorManager:get_Player+26: 8B 00 - mov eax,[eax]
Ellada.Game.Actors.ActorManager:get_Player+28: 8B 40 08 - mov eax,[eax+08]
Ellada.Game.Actors.ActorManager:get_Player+2b: 8B 40 10 - mov eax,[eax+10]
Ellada.Game.Actors.ActorManager:get_Player+2e: 3D 68 8D D3 14 - cmp eax,14D38D68
Ellada.Game.Actors.ActorManager:get_Player+33: 74 02 - je Ellada.Game.Actors.ActorManager:get_Player+37
Ellada.Game.Actors.ActorManager:get_Player+35: 33 F6 - xor esi,esi
Ellada.Game.Actors.ActorManager:get_Player+37: 8B C6 - mov eax,esi
Ellada.Game.Actors.ActorManager:get_Player+39: 8D 65 F8 - lea esp,[ebp-08]
Ellada.Game.Actors.ActorManager:get_Player+3c: 8D 65 F8 - lea esp,[ebp-08]
Ellada.Game.Actors.ActorManager:get_Player+3f: 5E - pop esi
}
4
"Ellada.Game.Players.Player"
0
1
[playerbase]
5
"Player Name (from Steam)"
0
String
20
1
0
1
playerbase
C
14
6
"max HP"
0
4 Bytes
+70
7
"money"
0
4 Bytes
+11c
10
"Experiences"
0
FF0000
1
+98
0
c
11
"Mining"
0
4 Bytes
+10
12
"Building"
0
4 Bytes
+14
13
"Alchemy"
0
4 Bytes
+18
14
"Woodchopper"
0
4 Bytes
+1c
15
"Cooking"
0
4 Bytes
+20
16
"Warrior"
0
4 Bytes
+24
17
"Hunter"
0
4 Bytes
+28
18
"Skill-Levels"
0
FF0000
1
+98
0
10
19
"Mining"
0
4 Bytes
+10
20
"Building"
0
4 Bytes
+14
21
"Alchemy"
0
4 Bytes
+18
22
"Woodchopper"
0
4 Bytes
+1c
23
"Cooking"
0
4 Bytes
+20
24
"Warrior"
0
4 Bytes
+24
25
"Hunter"
0
4 Bytes
+28
38
"mStunCounter"
0
4 Bytes
+78
39
"mBleedingCounter"
0
4 Bytes
+7C
40
"mPoisonCounter"
0
4 Bytes
+80
41
"mBurningCounter"
0
4 Bytes
+84
43
"Food"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
CC
C
14
24
B0
84
5E8
96
"Health"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
C
0
108
95
"Backup Pointers to Health"
C0C0C0
1
97
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
B8
84
5E8
98
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
6C
274
18
108
99
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
6C
274
0
110
100
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
74
5E8
101
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
74
5E8
102
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
58
984
103
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
A0
984
104
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
58
984
105
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
A0
984
106
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
CC
10
9CC
107
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
B4
10
9CC
108
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
C
284
10
0
108
109
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
C
C
274
18
108
110
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+003A399C
14
B0
28
C
C
274
0
110
111
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
60
84
5E8
112
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
8
7C
5E8
113
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
B0
84
5E8
114
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
14
78
5E8
115
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
10
60
5E8
116
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
C
64
5E8
117
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
C
64
5E8
118
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
B8
84
18
8
5E8
119
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
B0
84
5E8
120
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
14
78
5E8
121
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
8
7C
5E8
122
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
10
60
5E8
123
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
60
84
5E8
124
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
58
C
980
125
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
A0
C
980
126
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
58
C
980
127
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
A0
C
980
128
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
14
C0
984
129
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
10
64
984
130
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
10
64
984
131
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
68
50
5C
984
132
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
1C
B8
984
133
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
14
C0
984
134
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
10
68
984
135
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
50
64
984
136
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
24
1C
B8
984
137
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
10
68
984
138
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
3C
50
64
984
139
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
68
CC
10
C
A4C
140
"pointerscan result"
4 Bytes
"mono-2.0-bdwgc.dll"+0039B56C
14
B0
8
18
B4
10
C
A4C
Change of jne Ellada.Game.Players.Player:get_InvulEffect+1f
14DB376E
63
4F
0C
85
C0
75
07
B8
F0
0F
D4
03