52
"Compact View Mode"
Auto Assembler Script
[ENABLE]
{$lua}
--Make parts of the main form invisible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), false)
control_setVisible(wincontrol_getControl(controlMainForm,2), false)
control_setVisible(wincontrol_getControl(controlMainForm,3), false)
[DISABLE]
{$lua}
--Make parts of the main form visible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), true)
control_setVisible(wincontrol_getControl(controlMainForm,2), true)
control_setVisible(wincontrol_getControl(controlMainForm,3), true)
68
"-----"
1
2
"Find CharacterController Stats"
Auto Assembler Script
///Current health is a float and the game reads it in the pause menu too.
[ENABLE]
aobscanmodule(readhealth,GameAssembly.dll,F3 0F 10 BB 68 01 00 00 48 85 C0 74 76) // should be unique
alloc(newmem,$1000,readhealth)
label(code)
label(return)
globalalloc(_charactercontroller,8)
newmem:
code:
push rax //Push a register to the stack to free it for use.
mov rax,_charactercontroller //Copy our allocated address into it.
mov [rax],rbx //Copy our desired value into where the register is pointing.
pop rax //Restore the value of the register and pretend nothing happened.
movss xmm7,[rbx+00000168]
jmp return
readhealth:
jmp newmem
nop 3
return:
registersymbol(readhealth)
[DISABLE]
readhealth:
db F3 0F 10 BB 68 01 00 00
unregistersymbol(readhealth)
unregistersymbol(_charactercontroller)
dealloc(newmem)
dealloc(_charactercontroller)
{
// ORIGINAL CODE - INJECTION POINT: 7FFA9BA4E8C3
7FFA9BA4E8A3: 84 C0 - test al,al
7FFA9BA4E8A5: 75 15 - jne 7FFA9BA4E8BC
7FFA9BA4E8A7: 0F 2E 35 2E 17 DE 00 - ucomiss xmm6,[7FFA9C82FFDC]
7FFA9BA4E8AE: 7A 02 - jp 7FFA9BA4E8B2
7FFA9BA4E8B0: 74 0A - je 7FFA9BA4E8BC
7FFA9BA4E8B2: 0F 57 FF - xorps xmm7,xmm7
7FFA9BA4E8B5: 0F 2E F7 - ucomiss xmm6,xmm7
7FFA9BA4E8B8: 7A 02 - jp 7FFA9BA4E8BC
7FFA9BA4E8BA: 74 63 - je 7FFA9BA4E91F
7FFA9BA4E8BC: 48 8B 83 58 01 00 00 - mov rax,[rbx+00000158]
// ---------- INJECTING HERE ----------
7FFA9BA4E8C3: F3 0F 10 BB 68 01 00 00 - movss xmm7,[rbx+00000168]
// ---------- DONE INJECTING ----------
7FFA9BA4E8CB: 48 85 C0 - test rax,rax
7FFA9BA4E8CE: 74 76 - je 7FFA9BA4E946
7FFA9BA4E8D0: 48 8B 80 80 00 00 00 - mov rax,[rax+00000080]
7FFA9BA4E8D7: 48 85 C0 - test rax,rax
7FFA9BA4E8DA: 74 6A - je 7FFA9BA4E946
7FFA9BA4E8DC: F3 0F 10 70 14 - movss xmm6,[rax+14]
7FFA9BA4E8E1: F3 0F 58 70 10 - addss xmm6,[rax+10]
7FFA9BA4E8E6: 0F 28 C6 - movaps xmm0,xmm6
7FFA9BA4E8E9: E8 72 9F B5 FE - call 7FFA9A5A8860
7FFA9BA4E8EE: 84 C0 - test al,al
}
11
"Base Address"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]
114
"_playerStats"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+150
129
"Max Health"
0
Float
[_charactercontroller]+158
10
80
143
"Max Health (Egg)"
0
Float
[_charactercontroller]+150
14
80
126
"Recovery"
0
000080
Float
[_charactercontroller]+158
10
68
144
"Recovery (Egg)"
0
000080
Float
[_charactercontroller]+150
14
68
124
"Armor"
0
Float
[_charactercontroller]+158
10
58
142
"Armor (Egg)"
0
Float
[_charactercontroller]+150
14
58
118
"Move Speed"
0
Float
[_charactercontroller]+158
10
28
145
"Move Speed (Egg)"
0
Float
[_charactercontroller]+150
14
28
138
"-----"
1
115
"Might (Power)"
0
008000
Float
[_charactercontroller]+158
10
10
146
"Might (Power) (Egg)"
0
008000
Float
[_charactercontroller]+150
14
10
117
"Speed"
0
004080
Float
[_charactercontroller]+158
10
20
147
"Speed (Egg)"
0
004080
Float
[_charactercontroller]+150
14
20
121
"Duration"
0
008080
Float
[_charactercontroller]+158
10
40
148
"Duration (Egg)"
0
008080
Float
[_charactercontroller]+150
14
40
116
"Area"
0
004080
Float
[_charactercontroller]+158
10
18
149
"Area (Egg)"
0
004080
Float
[_charactercontroller]+150
14
18
139
"-----"
1
122
"Cooldown (1+value=)"
0
000080
Float
[_charactercontroller]+158
10
48
150
"Cooldown (1+value=) (Egg)"
0
000080
Float
[_charactercontroller]+150
14
48
123
"Amount"
0
800000
Float
[_charactercontroller]+158
10
50
151
"Amount (Egg)"
0
800000
Float
[_charactercontroller]+150
14
50
133
"Revival"
0
004080
Double
[_charactercontroller]+158
10
A0
152
"Revival (Egg)"
0
004080
Double
[_charactercontroller]+150
14
A0
134
"Magnet"
0
Float
[_charactercontroller]+158
10
88
140
"-----"
1
120
"Luck"
0
008000
Float
[_charactercontroller]+158
10
38
153
"Luck (Egg)"
0
008000
Float
[_charactercontroller]+150
14
38
119
"Growth"
0
008080
Float
[_charactercontroller]+158
10
30
154
"Growth (Egg)"
0
008080
Float
[_charactercontroller]+150
14
30
125
"Greed"
0
Float
[_charactercontroller]+158
10
60
155
"Greed (Egg)"
0
Float
[_charactercontroller]+150
14
60
131
"Curse"
0
800080
Float
[_charactercontroller]+158
10
90
156
"Curse (Egg)"
0
800080
Float
[_charactercontroller]+150
14
90
141
"-----"
1
127
"Reroll"
0
Float
[_charactercontroller]+158
10
70
157
"Reroll (Egg)"
0
Float
[_charactercontroller]+150
14
70
128
"Skip"
0
Float
[_charactercontroller]+158
10
78
158
"Skip (Egg)"
0
Float
[_charactercontroller]+150
14
78
132
"Banish"
0
Float
[_charactercontroller]+158
10
98
159
"Banish (Egg)"
0
Float
[_charactercontroller]+150
14
98
107
"Invincibility (Seconds)"
0
Float
[_charactercontroller]+10C
111
"HP"
0
Float
[_charactercontroller]+168
113
"Level"
0
4 Bytes
[_charactercontroller]+16C
4
"EXP"
0
Float
[_charactercontroller]+17C
161
"_playeroptions->_config"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+70
58
191
"playerID"
0
4 Bytes
[_charactercontroller]+70
10
58
192
"Max Weapons"
0
4 Bytes
[_charactercontroller]+70
54
58
175
"Coins"
0
Float
[_charactercontroller]+70
60
58
172
"RunCoins"
0
Float
[_charactercontroller]+70
64
58
184
"Enemies Killed"
0
4 Bytes
[_charactercontroller]+70
68
58
185
"LifetimeCoins"
0
4 Bytes
[_charactercontroller]+70
7C
58
186
"TotalCoins"
0
4 Bytes
[_charactercontroller]+70
80
58
173
"BeginnersLuck"
0
4 Bytes
[_charactercontroller]+70
84
58
174
"Set to 5 for guaranteed 5-item chests."
008000
1
135
"-----"
1
65
"Find Timer"
Auto Assembler Script
//The in-game timer is a float that matches what the game shows you.
//So like 4:28 would be a value of 260 seconds.
//The game rounds it to a whole number.
[ENABLE]
aobscanmodule(readtimer,GameAssembly.dll,F3 0F 10 B0 90 02 00 00 48 85) // should be unique
alloc(newmem,$1000,readtimer)
label(code)
label(return)
globalalloc(_timerbase,8)
newmem:
code:
push rbx //Push a register to the stack to free it for use.
mov rbx,_timerbase //Copy our allocated address into it.
mov [rbx],rax //Copy our desired value into where rbx is pointing.
pop rbx //Restore the value of rbx and pretend nothing happened.
movss xmm6,[rax+00000290]
jmp return
readtimer:
jmp newmem
nop 3
return:
registersymbol(readtimer)
[DISABLE]
readtimer:
db F3 0F 10 B0 90 02 00 00
unregistersymbol(readtimer)
unregistersymbol(_timerbase)
dealloc(newmem)
dealloc(_timerbase)
{
// ORIGINAL CODE - INJECTION POINT: 7FFA9BA3DDCC
7FFA9BA3DD96: 48 89 B4 24 98 00 00 00 - mov [rsp+00000098],rsi
7FFA9BA3DD9E: 48 8B CF - mov rcx,rdi
7FFA9BA3DDA1: 0F 29 74 24 70 - movaps [rsp+70],xmm6
7FFA9BA3DDA6: E8 25 5D 2C 00 - call VampireSurvivors.UI.BaseUIPage.Update
7FFA9BA3DDAB: 48 8B 05 A6 8F 14 01 - mov rax,[7FFA9CB86D58]
7FFA9BA3DDB2: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
7FFA9BA3DDB9: 48 8B 01 - mov rax,[rcx]
7FFA9BA3DDBC: 48 85 C0 - test rax,rax
7FFA9BA3DDBF: 0F 84 95 02 00 00 - je 7FFA9BA3E05A
7FFA9BA3DDC5: 48 8B 8F 28 01 00 00 - mov rcx,[rdi+00000128]
// ---------- INJECTING HERE ----------
7FFA9BA3DDCC: F3 0F 10 B0 90 02 00 00 - movss xmm6,[rax+00000290]
// ---------- DONE INJECTING ----------
7FFA9BA3DDD4: 48 85 C9 - test rcx,rcx
7FFA9BA3DDD7: 0F 84 7D 02 00 00 - je 7FFA9BA3E05A
7FFA9BA3DDDD: 45 33 C0 - xor r8d,r8d
7FFA9BA3DDE0: 33 D2 - xor edx,edx
7FFA9BA3DDE2: E8 B9 39 97 FE - call System.Text.StringBuilder.set_Length
7FFA9BA3DDE7: 48 8B B7 28 01 00 00 - mov rsi,[rdi+00000128]
7FFA9BA3DDEE: 0F 28 C6 - movaps xmm0,xmm6
7FFA9BA3DDF1: F3 0F 5E 05 17 1B DF 00 - divss xmm0,[7FFA9C82F910]
7FFA9BA3DDF9: E8 1A 1E 5F FD - call 7FFA9902FC18
7FFA9BA3DDFE: 48 8B 0D EB 8D 12 01 - mov rcx,[7FFA9CB66BF0]
}
66
"Seconds"
0
Float
[_timerbase]+290
67
"-----"
1
"pmain.dll"+7297F
------------------1
"pmain.dll"+72991
------------------2