2
"start here (active then shoot gun)"
Auto Assembler Script
{ Game : Onirism
Version:
Date : 2023-10-10
Author : nbarr
This script does blah blah blah
}
[ENABLE]
usemono()
aobscan(tales_weapon_base,89 88 38 01 00 00 48 8B 85 78) // should be unique
alloc(newmem,$1000,tales_weapon_base)
label(code)
label(return)
registersymbol(talesgunbase)
label(talesgunbase)
newmem:
mov [rax+00000138],ecx
mov [talesgunbase],rax
jmp return
talesgunbase:
dq 1
code:
mov [rax+00000138],ecx
jmp return
tales_weapon_base:
jmp newmem
nop
return:
registersymbol(tales_weapon_base)
[DISABLE]
tales_weapon_base:
db 89 88 38 01 00 00
unregistersymbol(tales_weapon_base)
unregistersymbol(talesgunbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 015193C2
0151938E: 48 8B 85 78 F5 FF FF - mov rax,[rbp-00000A88]
01519395: F3 0F 10 48 58 - movss xmm1,[rax+58]
0151939A: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
0151939E: 66 0F 2F C8 - comisd xmm1,xmm0
015193A2: 0F 8A 97 3E 00 00 - jp 0151D23F
015193A8: 0F 83 91 3E 00 00 - jae 0151D23F
015193AE: 48 8B 85 78 F5 FF FF - mov rax,[rbp-00000A88]
015193B5: 48 8B 40 48 - mov rax,[rax+48]
015193B9: 48 63 88 38 01 00 00 - movsxd rcx,dword ptr [rax+00000138]
015193C0: FF C9 - dec ecx
// ---------- INJECTING HERE ----------
015193C2: 89 88 38 01 00 00 - mov [rax+00000138],ecx
// ---------- DONE INJECTING ----------
015193C8: 48 8B 85 78 F5 FF FF - mov rax,[rbp-00000A88]
015193CF: 48 8B 40 48 - mov rax,[rax+48]
015193D3: 66 0F 57 C0 - xorpd xmm0,xmm0
015193D7: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
015193DB: F3 0F 11 A8 64 01 00 00 - movss [rax+00000164],xmm5
015193E3: 48 8B 85 78 F5 FF FF - mov rax,[rbp-00000A88]
015193EA: 48 8B 40 48 - mov rax,[rax+48]
015193EE: 66 0F 57 C0 - xorpd xmm0,xmm0
015193F2: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
015193F6: F3 0F 11 A8 4C 01 00 00 - movss [rax+0000014C],xmm5
}
84
"Player stats"
0
4 Bytes
talesgunbase
70
c8
87
"current health"
0
Float
talesgunbase
28
70
c8
88
"max health"
0
4 Bytes
talesgunbase
4c
70
c8
89
"pearls"
0
Float
talesgunbase
50
70
c8
90
"max stamina"
0
Float
talesgunbase
58
70
c8
74
"Current weapon"
1
3
"weapon base address"
0
4 Bytes
talesgunbase
0
59
"max clip"
0
4 Bytes
talesgunbase
134
58
"current clip"
0
4 Bytes
talesgunbase
138
86
"current reserve ammo"
0
Float
talesgunbase
14
18
70
c8
91
"max reserve ammo"
0
Float
talesgunbase
18
18
70
c8
60
"reload time"
0
Float
talesgunbase
144
61
"fire rate cooldown"
0
Float
talesgunbase
14c
62
"shots fired per trigger pull (my favorite cheat! set to something like 100 and test)"
0
4 Bytes
talesgunbase
15c
65
"ammo type"
0:energy
2:fireworks
1:water
3:darts
7:starting weapon
0
4 Bytes
talesgunbase
1e8
64
"multiplayer damage multiplier"
0
Float
talesgunbase
1f4
63
"is upgraded"
0:no
1:yes
0
Byte
talesgunbase
31
118
69
"clip size multiplier"
0
Float
talesgunbase
34
118
67
"damage multiplier"
0
Float
talesgunbase
38
118
68
"fire rate multiplier"
0
Float
talesgunbase
3c
118
77
"weapon spread"
0
Float
talesgunbase
20c
96
"unlock abilities"
1
92
"ledge grab"
0:no
1:yes
0
4 Bytes
talesgunbase
28
78
28
c8
93
"dodge"
0:no
1:yes
0
4 Bytes
talesgunbase
38
80
28
c8
94
"climb"
0:no
1:yes
0
4 Bytes
talesgunbase
20
a0
28
c8
95
"monkey bars"
0:no
1:yes
0
4 Bytes
talesgunbase
10
c0
28
c8
97
"double jump (can be used in tales if enabled)"
0:no
1:yes
0
4 Bytes
talesgunbase
54
58
28
c8
98
"other cheats"
1
83
"infinite sprint"
6:off
0:on
0
Float
talesgunbase
1c
40
28
c8
82
"sprint multiplier"
1.25:normal
2.5:double
3.75:triple
5:quadruple
0
Float
talesgunbase
18
40
28
c8
81
"super double jump"
1:level 1
2:level 2
3:level 3
4:level 4
5:level 5
6:level 6
7:level 7
8:level 8
0
Float
talesgunbase
58
58
28
c8
80
"infinite jump (turn on and lock)"
0:on
1:off
0
4 Bytes
talesgunbase
56
58
28
c8
85
"useful adresses (for finding more values)"
34CE00
1
75
"Player Base"
1
76
"Player base address"
0
4 Bytes
talesgunbase
c8
78
"carol controller"
0
4 Bytes
talesgunbase
28
c8