114982
"<=== Attach to process and activate mono"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("SongsOfConquest.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
LaunchMonoDataCollector()
{$asm}
// LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
// LuaCall(cycleFullCompact(nil,false))
114985
"Get Essences in combat (cast something to update)"
Auto Assembler Script
define(address,SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+e8)
define(bytes,41 B8 01 00 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+e8)
alloc(essences,8)
label(code)
label(return)
newmem:
mov [essences],rax
code:
mov r8d,00000001
jmp return
address:
jmp newmem
nop
return:
registersymbol(essences)
[DISABLE]
address:
db bytes
// mov r8d,00000001
dealloc(*)
unregistersymbol(essences)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+e8
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+b6: 49 BA 68 8E EE ED 98 01 00 00 - mov r10,00000198EDEE8E68
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+c0: FF 50 80 - call qword ptr [rax-80]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+c3: 4C 8B F0 - mov r14,rax
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+c6: E9 32 01 00 00 - jmp SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+1fd
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+cb: 48 8B CF - mov rcx,rdi
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+ce: 48 8B 07 - mov rax,[rdi]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+d1: 49 BA 40 63 1B 1E 99 01 00 00 - mov r10,000001991E1B6340
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+db: FF 50 88 - call qword ptr [rax-78]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+de: 49 8B 97 E0 00 00 00 - mov rdx,[r15+000000E0]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+e5: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+e8: 41 B8 01 00 00 00 - mov r8d,00000001
// ---------- DONE INJECTING ----------
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+ee: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+f1: 49 BA 38 6F 44 1E 99 01 00 00 - mov r10,000001991E446F38
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+fb: FF 50 F8 - call qword ptr [rax-08]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+fe: 85 C0 - test eax,eax
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+100: 0F 84 D0 00 00 00 - je SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+1d6
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+106: 49 8B 87 E0 00 00 00 - mov rax,[r15+000000E0]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+10d: 48 8B C8 - mov rcx,rax
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+110: 48 8B D7 - mov rdx,rdi
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+113: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Client.UI.SpellbookSpellDetails:SetCastText+116: 49 BA C0 78 27 9C 98 01 00 00 - mov r10,000001989C2778C0
}
114986
"Essences"
0
1
essences
0
114987
"Order"
0
4 Bytes
+10
114988
"Creation "
0
4 Bytes
+14
114989
"Chaos"
0
4 Bytes
+18
114990
"Arcana"
0
4 Bytes
+1c
114991
"Destruction"
0
4 Bytes
+20
11
"Unlimited Movement Points on map"
Auto Assembler Script
define(address,SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken)
define(bytes,48 83 EC 18 48 89 0C 24)
[ENABLE]
assert(address,bytes)
address:
ret
nop 3
return:
[DISABLE]
address:
db bytes
// sub rsp,18
// mov [rsp],rcx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken
1FE58A472FC: 00 00 - add [rax],al
1FE58A472FE: 00 00 - add [rax],al
1FE58A47300: 00 00 - add [rax],al
1FE58A47302: 00 00 - add [rax],al
1FE58A47304: 00 00 - add [rax],al
1FE58A47306: 00 00 - add [rax],al
1FE58A47308: 00 00 - add [rax],al
1FE58A4730A: 00 00 - add [rax],al
1FE58A4730C: 00 00 - add [rax],al
1FE58A4730E: 00 00 - add [rax],al
// ---------- INJECTING HERE ----------
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken: 48 83 EC 18 - sub rsp,18
// ---------- DONE INJECTING ----------
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+4: 48 89 0C 24 - mov [rsp],rcx
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+8: F3 0F 11 4C 24 08 - movss [rsp+08],xmm1
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+e: F3 0F 10 44 24 08 - movss xmm0,[rsp+08]
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+14: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+18: 48 8B 04 24 - mov rax,[rsp]
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+1c: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+20: F3 0F 11 A8 E0 00 00 00 - movss [rax+000000E0],xmm5
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+28: 48 83 C4 18 - add rsp,18
SongsOfConquest.Common.Gamestate.Commander.CommanderState:set_MovesTaken+2c: C3 - ret
1FE58A4733D: 00 00 - add [rax],al
}
115009
"don't spend ressources when building"
Auto Assembler Script
define(address,SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+5b)
define(bytes,2B D0)
[ENABLE]
assert(address,bytes)
address:
nop
nop
[DISABLE]
address:
db bytes
// sub edx,eax
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+5b
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+37: FF 50 D8 - call qword ptr [rax-28]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+3a: 48 8B F8 - mov rdi,rax
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+3d: 48 63 45 E0 - movsxd rax,dword ptr [rbp-20]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+41: 83 3F 00 - cmp dword ptr [rdi],00
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+44: 48 63 4F 14 - movsxd rcx,dword ptr [rdi+14]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+48: 3B C1 - cmp eax,ecx
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+4a: 0F 8F 31 00 00 00 - jg SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+81
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+50: 83 3F 00 - cmp dword ptr [rdi],00
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+53: 48 63 57 14 - movsxd rdx,dword ptr [rdi+14]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+57: 48 63 45 E0 - movsxd rax,dword ptr [rbp-20]
// ---------- INJECTING HERE ----------
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+5b: 2B D0 - sub edx,eax
// ---------- DONE INJECTING ----------
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+5d: 48 8B CF - mov rcx,rdi
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+60: 83 3F 00 - cmp dword ptr [rdi],00
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+63: 66 66 90 - nop 3
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+66: 49 BB D0 BD C6 1F 66 01 00 00 - mov r11,SongsOfConquest.Common.Economy.Resource:set_Amount
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+70: 41 FF D3 - call r11
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+73: 48 8B 75 F0 - mov rsi,[rbp-10]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+77: 48 8B 7D F8 - mov rdi,[rbp-08]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+7b: 48 8D 65 00 - lea rsp,[rbp+00]
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+7f: 5D - pop rbp
SongsOfConquest.Common.Gamestate.TeamResourcesStateExtensions:WithdrawResource+80: C3 - ret
}
32
"Get Hero Data (click on other commander to change view)"
Auto Assembler Script
define(address,SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+58)
define(bytes,48 8B C8 48 8B 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$100,SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+58)
alloc(commander,8)
label(code)
label(return)
newmem:
mov [commander],rax
code:
mov rcx,rax
mov rax,[rax]
jmp return
address:
jmp newmem
nop
return:
registersymbol(commander)
[DISABLE]
address:
db bytes
// mov rcx,rax
// mov rax,[rax]
dealloc(newmem)
unregistersymbol(commander)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+58
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+26: 49 BB 80 D4 97 17 03 02 00 00 - mov r11,SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:Get
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+30: 41 FF D3 - call r11
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+33: 4C 8B F0 - mov r14,rax
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+36: 45 33 ED - xor r13d,r13d
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+39: 4D 85 F6 - test r14,r14
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+3c: 0F 84 42 00 00 00 - je SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+84
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+42: 49 8B CE - mov rcx,r14
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+45: 49 8B 06 - mov rax,[r14]
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+48: 49 BA F0 0E DD A6 02 02 00 00 - mov r10,00000202A6DD0EF0
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+52: FF 90 70 FF FF FF - call qword ptr [rax-00000090]
// ---------- INJECTING HERE ----------
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+58: 48 8B C8 - mov rcx,rax
// ---------- DONE INJECTING ----------
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+5b: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+5e: 49 BA E8 0D D7 67 02 02 00 00 - mov r10,0000020267D70DE8
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+68: FF 50 88 - call qword ptr [rax-78]
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+6b: 48 8B C8 - mov rcx,rax
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+6e: 48 8B D6 - mov rdx,rsi
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+71: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+74: 49 BA 48 1C D7 67 02 02 00 00 - mov r10,0000020267D71C48
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+7e: FF 50 A8 - call qword ptr [rax-58]
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+81: 4C 8B E8 - mov r13,rax
SongsOfConquest.Common.Gamestate.Facade.CommonCommanderFacade:GetTotalEssenceIncome+84: 49 8B CF - mov rcx,r15
}
22
"CommanderStats (see the dissect data window)"
0
4 Bytes
commander
0
23
"_experience"
4 Bytes
+B4
24
"_defense"
4 Bytes
+B8
25
"_offense"
4 Bytes
+BC
26
"_movement"
Float
+C0
27
"_viewRadius"
Float
+C4
28
"_xpMultiplier"
4 Bytes
+C8
29
"_essenceLeech"
4 Bytes
+CC
30
"_diplomacyBonus"
Float
+D0
31
"_tutorPercent"
4 Bytes
+D4
45
"Push all Ressources to 9.999 when looting any ressource"
Auto Assembler Script
define(address,SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e1)
define(bytes,83 39 00 4C 63 68 14)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e1)
label(code)
label(return)
newmem:
cmp [rcx+14],#9999
jge code
mov [rcx+14],#9999
code:
cmp dword ptr [rcx],00
movsxd r13,dword ptr [rax+14]
jmp return
address:
jmp newmem
nop 2
return:
[DISABLE]
address:
db bytes
// cmp dword ptr [rcx],00
// movsxd r13,dword ptr [rax+14]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e1
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+b4: 48 8B CB - mov rcx,rbx
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+b7: 48 8B 03 - mov rax,[rbx]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+ba: 49 BA 28 70 0A AC 39 02 00 00 - mov r10,00000239AC0A7028
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+c4: FF 50 F0 - call qword ptr [rax-10]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+c7: 49 63 56 40 - movsxd rdx,dword ptr [r14+40]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+cb: 48 8B C8 - mov rcx,rax
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+ce: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+d1: 49 BA 08 CD 09 AC 39 02 00 00 - mov r10,00000239AC09CD08
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+db: FF 50 D8 - call qword ptr [rax-28]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+de: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e1: 83 39 00 - cmp dword ptr [rcx],00
// ---------- DONE INJECTING ----------
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e4: 4C 63 68 14 - movsxd r13,dword ptr [rax+14]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+e8: 48 8B 47 18 - mov rax,[rdi+18]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+ec: 48 8B C8 - mov rcx,rax
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+ef: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+f2: 49 BA 38 34 09 AE 39 02 00 00 - mov r10,00000239AE093438
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+fc: FF 90 70 FF FF FF - call qword ptr [rax-00000090]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+102: 48 89 45 C0 - mov [rbp-40],rax
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+106: 48 8B CB - mov rcx,rbx
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+109: 48 8B 03 - mov rax,[rbx]
SongsOfConquest.Client.Adventure.ResourceHUD:RefreshResources+10c: 49 BA F0 27 DE AB 39 02 00 00 - mov r10,00000239ABDE27F0
}
115040
"Debug (works somehow but not as desired)"
C0C0C0
1
115029
"Set Troop Amount high"
Auto Assembler Script
define(address,SongsOfConquest.Common.Gamestate.TroopStats:get_Size+4)
define(bytes,48 89 0C 24 48 8B C1)
[ENABLE]
assert(address,bytes)
alloc(newmem,$100,SongsOfConquest.Common.Gamestate.TroopStats:get_Size+4)
label(code)
label(return)
label(enemy)
newmem:
mov [rsp],rcx
mov rax,rcx
cmp [rax+1d4],0
jne enemy
mov [rax+c0],#50
jmp code
enemy:
cmp [rax+c0],#1
jle code
mov [rax+c0],#1
code:
jmp return
address:
jmp newmem
nop 2
return:
[DISABLE]
address:
db bytes
// mov [rsp],rcx
// mov rax,rcx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Common.Gamestate.TroopStats:get_Size+4
2340A606B1B: 05 04 03 01 50 - add eax,50010304
2340A606B20: 00 00 - add [rax],al
2340A606B22: 00 00 - add [rax],al
2340A606B24: 00 00 - add [rax],al
2340A606B26: 00 00 - add [rax],al
2340A606B28: 00 00 - add [rax],al
2340A606B2A: 00 00 - add [rax],al
2340A606B2C: 00 00 - add [rax],al
2340A606B2E: 00 00 - add [rax],al
SongsOfConquest.Common.Gamestate.TroopStats:get_Size: 48 83 EC 08 - sub rsp,08
// ---------- INJECTING HERE ----------
SongsOfConquest.Common.Gamestate.TroopStats:get_Size+4: 48 89 0C 24 - mov [rsp],rcx
// ---------- DONE INJECTING ----------
SongsOfConquest.Common.Gamestate.TroopStats:get_Size+8: 48 8B C1 - mov rax,rcx
SongsOfConquest.Common.Gamestate.TroopStats:get_Size+b: 48 63 80 C0 00 00 00 - movsxd rax,dword ptr [rax+000000C0]
SongsOfConquest.Common.Gamestate.TroopStats:get_Size+12: 48 83 C4 08 - add rsp,08
SongsOfConquest.Common.Gamestate.TroopStats:get_Size+16: C3 - ret
2340A606B47: 00 01 - add [rcx],al
2340A606B49: 04 01 - add al,01
2340A606B4B: 00 04 02 - add [rdx+rax],al
2340A606B4E: 00 00 - add [rax],al
2340A606B50: 00 00 - add [rax],al
2340A606B52: 00 00 - add [rax],al
}
115039
"Fill up troups on mouseover << does not help in Battle :("
Auto Assembler Script
// triggers on mouseover of our troups
define(address,SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ce)
define(bytes,48 8B C8 48 8B 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ce)
label(code)
label(return)
newmem:
mov rcx,rax
// load max unit size and copy it to current unit size
push ebx
mov ebx,[rax+b4]
mov [rax+c0],ebx
pop ebx
mov rax,[rax]
code:
jmp return
address:
jmp newmem
nop
return:
[DISABLE]
address:
db bytes
// mov rcx,rax
// mov rax,[rax]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ce
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+195: 48 05 48 FF FF FF - add rax,FFFFFFFFFFFFFF48
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+19b: 4C 8B 8D 38 FF FF FF - mov r9,[rbp-000000C8]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1a2: 4C 89 8D 48 FF FF FF - mov [rbp-000000B8],r9
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1a9: 4C 8B 8D 40 FF FF FF - mov r9,[rbp-000000C0]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1b0: 4C 89 8D 50 FF FF FF - mov [rbp-000000B0],r9
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1b7: 4C 8D 08 - lea r9,[rax]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ba: 48 8B 07 - mov rax,[rdi]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1bd: 49 BA 78 50 A9 F2 1F 02 00 00 - mov r10,0000021FF2A95078
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1c7: FF 50 A0 - call qword ptr [rax-60]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ca: 49 8B 47 58 - mov rax,[r15+58]
// ---------- INJECTING HERE ----------
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1ce: 48 8B C8 - mov rcx,rax
// ---------- DONE INJECTING ----------
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1d1: 48 8B 00 - mov rax,[rax]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1d4: 49 BA 88 C0 06 F3 1F 02 00 00 - mov r10,0000021FF306C088
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1de: FF 50 E8 - call qword ptr [rax-18]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1e1: 85 C0 - test eax,eax
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1e3: 0F 8E 7F 00 00 00 - jng SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+268
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1e9: 48 8B 85 B0 FE FF FF - mov rax,[rbp-00000150]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1f0: 48 8B 50 10 - mov rdx,[rax+10]
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1f4: 48 B9 40 BD 5C B8 20 02 00 00 - mov rcx,00000220B85CBD40
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+1fe: 49 BB C0 43 E9 E6 20 02 00 00 - mov r11,SongsOfConquest.Common.Localization.LocalizationStringExtensions:Localize
SongsOfConquest.Client.Gamestate.Facade.AdventureTroopDetails:Draw+208: 41 FF D3 - call r11
}
Change of jne SongsOfConquest.Common.Entities.Adventure.CommonIsBuildingComponent:set_State+37
212120AE953
8B
F9
48
85
C0
75
02
EB
09
48
8B
CF