2702
"Remnant 1/REMNANET 2"
280592
1
2703
"Youtube"
208FFF
Auto Assembler Script
{$lua}
[ENABLE]
shellExecute("https://www.youtube.com/user/droelke");
createThread(function();sleep(100);memrec.Active=false;end);
[DISABLE]
2704
"OCT Profile"
208FFF
Auto Assembler Script
{$lua}
[ENABLE]
shellExecute("https://opencheattables.com/memberlist.php?mode=viewprofile&u=85");
createThread(function();sleep(100);memrec.Active=false;end);
[DISABLE]
13
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
0000FF
1
39
"Table Author: XxDaRealSlimballinxX"
FC94B0
1
40
"Visit us today @ GBA Services!"
C080FF
1
1337110746
"Discord @ DaRealSlimballin"
008080
1
1337110747
"[X] <=== For Full Tool View"
00FF00
Auto Assembler Script
[ENABLE]
// Script Creaded By mgr.inz.Player On CE Forums
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
5
"Cheats"
FF00FF
1
9
"xxxxxxxxxxxxxxxxxxxxxxx"
1
1337142906
"Remnant 1"
FFFF00
1
46464
"Dax_PeT3R"
4080FF
Auto Assembler Script
{ Game : Win64-Shipping.exe | NHA's Cheat Engine Lua Library!
Version:
Date : 2023-07-18
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(plaw,Remnant2-Win64-Shipping.exe,48 8B 00 48 8B 00 48 85 C0 74 15 48 8B 40 30) // should be unique
alloc(newmem,$1000,plaw)
registersymbol(plaw Dax_PeT3R)
label(code Dax_PeT3R)
label(return)
newmem:
mov [Dax_PeT3R],rax
jmp return
Dax_PeT3R:
dq 0
code:
mov rax,[rax]
mov rax,[rax]
test rax,rax
jmp return
plaw:
jmp newmem
nop
return:
[DISABLE]
plaw:
db 48 8B 00 48 85 C0
unregistersymbol(plaw Dax_PeT3R)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant-Win64-Shipping.exe+1C3EE1A
Remnant-Win64-Shipping.exe+1C3EDFB: 40 0F 95 C6 - setne sil
Remnant-Win64-Shipping.exe+1C3EDFF: 48 85 C9 - test rcx,rcx
Remnant-Win64-Shipping.exe+1C3EE02: 74 33 - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE04: 48 85 FF - test rdi,rdi
Remnant-Win64-Shipping.exe+1C3EE07: 74 2E - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE09: 48 8B D7 - mov rdx,rdi
Remnant-Win64-Shipping.exe+1C3EE0C: E8 BF 5D 00 00 - call Remnant-Win64-Shipping.exe+1C44BD0
Remnant-Win64-Shipping.exe+1C3EE11: 83 78 08 00 - cmp dword ptr [rax+08],00
Remnant-Win64-Shipping.exe+1C3EE15: 74 20 - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE17: - mov rax,[rax]
// ---------- INJECTING HERE ----------
Remnant-Win64-Shipping.exe+1C3EE1A: 48 8B 00 - mov rax,[rax]
// ---------- DONE INJECTING ----------
Remnant-Win64-Shipping.exe+1C3EE1D: 48 85 C0 - test rax,rax
Remnant-Win64-Shipping.exe+1C3EE20: 74 15 - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE22: 48 8B 40 30 - mov rax,[rax+30]
Remnant-Win64-Shipping.exe+1C3EE26: 48 85 C0 - test rax,rax
Remnant-Win64-Shipping.exe+1C3EE29: 74 0C - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE2B: F6 80 E0 04 00 00 02 - test byte ptr [rax+000004E0],02
Remnant-Win64-Shipping.exe+1C3EE32: 74 03 - je Remnant-Win64-Shipping.exe+1C3EE37
Remnant-Win64-Shipping.exe+1C3EE34: 40 B6 01 - mov sil,01
Remnant-Win64-Shipping.exe+1C3EE37: 48 8B 03 - mov rax,[rbx]
Remnant-Win64-Shipping.exe+1C3EE3A: 41 0F B6 D5 - movzx edx,r13b
}
46493
"_____________________________________"
00FFFF
Auto Assembler Script
{$lua}
[ENABLE]
GodMode = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+FA9]',1)
Untargetable = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+FC8]',1)
StatusEffectsApplied = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+1378]',0)
Stamina = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+EA8]+140]',100)
SkipWallChecks = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+A51]',1)
TraitPoints = writePointer('[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+CF8]+124]',100)
TraitPointsSpent = writePointer('[[[[[[[[Dax_PeT3R]+10]+20]+38]+0]+30]+360]+CF8]+120]',0)
{$ASM}
[DISABLE]
46410
"Move Faster"
FFFF00
Auto Assembler Script
{ Game : Win64-Shipping.exe | NHA's Cheat Engine Lua Library!
Version:
Date : 2023-07-18
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(P_sped,Remnant-Win64-Shipping.exe,F3 0F 11 B3 C0 00 00 00 48 8B) // should be unique
alloc(newmem,$100,P_sped)
label(code)
label(return)
newmem:
mov [rbx+c0],(float)2//Time Dialation
jmp return
code:
movss [rbx+000000C0],xmm6
jmp return
P_sped:
jmp newmem
nop 3
return:
registersymbol(P_sped)
[DISABLE]
P_sped:
db F3 0F 11 B3 C0 00 00 00
unregistersymbol(P_sped)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant-Win64-Shipping.exe+6DA678
Remnant-Win64-Shipping.exe+6DA654: 0F 2F F0 - comiss xmm6,xmm0
Remnant-Win64-Shipping.exe+6DA657: 72 0B - jb Remnant-Win64-Shipping.exe+6DA664
Remnant-Win64-Shipping.exe+6DA659: 0F 28 C2 - movaps xmm0,xmm2
Remnant-Win64-Shipping.exe+6DA65C: F3 0F 58 C1 - addss xmm0,xmm1
Remnant-Win64-Shipping.exe+6DA660: F3 0F 5D C6 - minss xmm0,xmm6
Remnant-Win64-Shipping.exe+6DA664: 40 84 ED - test bpl,bpl
Remnant-Win64-Shipping.exe+6DA667: 74 05 - je Remnant-Win64-Shipping.exe+6DA66E
Remnant-Win64-Shipping.exe+6DA669: F3 0F 11 46 6C - movss [rsi+6C],xmm0
Remnant-Win64-Shipping.exe+6DA66E: F3 0F 11 83 C0 00 00 00 - movss [rbx+000000C0],xmm0
Remnant-Win64-Shipping.exe+6DA676: EB 08 - jmp Remnant-Win64-Shipping.exe+6DA680
// ---------- INJECTING HERE ----------
Remnant-Win64-Shipping.exe+6DA678: F3 0F 11 B3 C0 00 00 00 - movss [rbx+000000C0],xmm6
// ---------- DONE INJECTING ----------
Remnant-Win64-Shipping.exe+6DA680: 48 8B 5C 24 50 - mov rbx,[rsp+50]
Remnant-Win64-Shipping.exe+6DA685: 48 8B 6C 24 60 - mov rbp,[rsp+60]
Remnant-Win64-Shipping.exe+6DA68A: 48 8B 74 24 68 - mov rsi,[rsp+68]
Remnant-Win64-Shipping.exe+6DA68F: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
Remnant-Win64-Shipping.exe+6DA694: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
Remnant-Win64-Shipping.exe+6DA699: 48 83 C4 40 - add rsp,40
Remnant-Win64-Shipping.exe+6DA69D: 5F - pop rdi
Remnant-Win64-Shipping.exe+6DA69E: C3 - ret
Remnant-Win64-Shipping.exe+6DA69F: CC - int 3
Remnant-Win64-Shipping.exe+6DA6A0: 4C 8B DC - mov r11,rsp
}
46420
"Traders Pocket"
FFFF80
Auto Assembler Script
{ Game : Remnant-Win64-Shipping.exe
Version:
Date : 2023-07-18
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(buy_sell,Remnant-Win64-Shipping.exe,41 2B C7 89 41 2C) // should be unique
alloc(newmem,$400,buy_sell)
label(code)
label(return)
newmem:
mov r15d,99
add eax,r15d
mov [rcx+2C],eax
jmp return
code:
sub eax,r15d
mov [rcx+2C],eax
jmp return
buy_sell:
jmp newmem
nop
return:
registersymbol(buy_sell)
[DISABLE]
free buy:
db 41 2B C7 89 41 2C
unregistersymbol(buy_sell)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant-Win64-Shipping.exe+79C51D
Remnant-Win64-Shipping.exe+79C503: 48 8B 74 24 50 - mov rsi,[rsp+50]
Remnant-Win64-Shipping.exe+79C508: 48 83 C4 20 - add rsp,20
Remnant-Win64-Shipping.exe+79C50C: 41 5F - pop r15
Remnant-Win64-Shipping.exe+79C50E: 41 5E - pop r14
Remnant-Win64-Shipping.exe+79C510: 5F - pop rdi
Remnant-Win64-Shipping.exe+79C511: C3 - ret
Remnant-Win64-Shipping.exe+79C512: 8B 41 2C - mov eax,[rcx+2C]
Remnant-Win64-Shipping.exe+79C515: 41 3B C7 - cmp eax,r15d
Remnant-Win64-Shipping.exe+79C518: 7E 12 - jle Remnant-Win64-Shipping.exe+79C52C
Remnant-Win64-Shipping.exe+79C51A: 41 2B C7 -
// ---------- INJECTING HERE ----------
Remnant-Win64-Shipping.exe+79C51D: 89 41 2C - mov [rcx+2C],eax
// ---------- DONE INJECTING ----------
Remnant-Win64-Shipping.exe+79C520: 48 8B CD - mov rcx,rbp
Remnant-Win64-Shipping.exe+79C523: E8 98 A5 FF FF - call Remnant-Win64-Shipping.exe+796AC0
Remnant-Win64-Shipping.exe+79C528: B0 01 - mov al,01
Remnant-Win64-Shipping.exe+79C52A: EB CD - jmp Remnant-Win64-Shipping.exe+79C4F9
Remnant-Win64-Shipping.exe+79C52C: 48 83 7A 20 00 - cmp qword ptr [rdx+20],00
Remnant-Win64-Shipping.exe+79C531: 74 0B - je Remnant-Win64-Shipping.exe+79C53E
Remnant-Win64-Shipping.exe+79C533: 41 B0 01 - mov r8l,01
Remnant-Win64-Shipping.exe+79C536: 48 8B CD - mov rcx,rbp
Remnant-Win64-Shipping.exe+79C539: E8 B2 97 00 00 - call Remnant-Win64-Shipping.exe+7A5CF0
Remnant-Win64-Shipping.exe+79C53E: 41 8B 4E 08 - mov ecx,[r14+08]
}
46465
"ptr"
1
0
000000
8 Bytes
Dax_PeT3R
46466
"Level"
0
Byte
Dax_PeT3R
858
360
30
0
38
20
10
46467
"HealthNormalized"
Float
Dax_PeT3R
870
360
30
0
38
20
10
46468
"bSkipWallChecks"
Byte
Dax_PeT3R
A51
360
30
0
38
20
10
46469
"Inventory"
1
8 Bytes
Dax_PeT3R
AB0
360
30
0
38
20
10
46470
"bHasAggro"
Byte
Dax_PeT3R
AF0
360
30
0
38
20
10
46471
"Progression"
1
8 Bytes
Dax_PeT3R
CF0
360
30
0
38
20
10
46472
"StartingLevel"
4 Bytes
Dax_PeT3R
100
CF0
360
30
0
38
20
10
46473
"InitialRequiredExperience"
Float
Dax_PeT3R
104
CF0
360
30
0
38
20
10
46474
"RequiredExperienceInc"
Float
Dax_PeT3R
108
CF0
360
30
0
38
20
10
46475
"RequiredExperienceExp"
Float
Dax_PeT3R
10C
CF0
360
30
0
38
20
10
46476
"MaxRequiredExperience"
Float
Dax_PeT3R
110
CF0
360
30
0
38
20
10
46477
"IncomingExperienceScalar"
Float
Dax_PeT3R
114
CF0
360
30
0
38
20
10
46478
"RequiredExperienceRound"
4 Bytes
Dax_PeT3R
118
CF0
360
30
0
38
20
10
46479
"MaxLevel"
4 Bytes
Dax_PeT3R
11C
CF0
360
30
0
38
20
10
46480
"Level"
4 Bytes
Dax_PeT3R
120
CF0
360
30
0
38
20
10
46481
"Experience"
4 Bytes
Dax_PeT3R
124
CF0
360
30
0
38
20
10
46482
"QueuedExperience"
4 Bytes
Dax_PeT3R
128
CF0
360
30
0
38
20
10
46483
"AutoAcquireExperience"
Byte
Dax_PeT3R
12C
CF0
360
30
0
38
20
10
46484
"QueueExperience"
Byte
Dax_PeT3R
12D
CF0
360
30
0
38
20
10
46485
"SharedExperience"
Byte
Dax_PeT3R
12E
CF0
360
30
0
38
20
10
46486
"SharedExperienceRange"
Float
Dax_PeT3R
130
CF0
360
30
0
38
20
10
46487
"MaxValidExperienceOverTime"
4 Bytes
Dax_PeT3R
148
CF0
360
30
0
38
20
10
46488
"ExpTimeOutSeconds"
Float
Dax_PeT3R
14C
CF0
360
30
0
38
20
10
46489
"Traits"
1
8 Bytes
Dax_PeT3R
CF8
360
30
0
38
20
10
46409
"DefaultTraitLevel"
4 Bytes
Dax_PeT3R
120
CF8
360
30
0
38
20
10
46490
"TraitPoints"
4 Bytes
Dax_PeT3R
124
CF8
360
30
0
38
20
10
46491
"TraitPointsSpent"
4 Bytes
Dax_PeT3R
128
CF8
360
30
0
38
20
10
46412
"Stamina"
1
8 Bytes
Dax_PeT3R
EA8
360
30
0
38
20
10
46413
"Value"
Float
Dax_PeT3R
140
EA8
360
30
0
38
20
10
46414
"AimCast"
Byte
Dax_PeT3R
FA8
360
30
0
38
20
10
46415
"God Mode"
Byte
Dax_PeT3R
FA9
360
30
0
38
20
10
1337142904
"Untargetable"
Byte
Dax_PeT3R
FC8
360
30
0
38
20
10
46492
"StatusEffectsApplied"
4 Bytes
Dax_PeT3R
1378
360
30
0
38
20
10
1337142905
"HasEquippedHarsgaardRootGun"
Byte
Dax_PeT3R
1390
360
30
0
38
20
10
46419
"bJoiningMustSpectate"
Byte
Dax_PeT3R
754
30
0
38
20
10
1337143010
"REMNANET 2 [Epic/Steam]"
FF80FF
1
1337143030
"xxxx Player Options xxxxx"
C080FF
1
1337143073
"GodMode team"
00FF00
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Team_OHK,Remnant2-Win64-Shipping.exe,0F 2F B7 90 08 00 00) // should be unique
alloc(newmem,$1000,Team_OHK)
label(code maoi)
label(return)
newmem:
cmp [rdi+68],00000002
//cmp [rdi+180],DB9FBA40
jne code
mov [maoi],rdi
mov [rdi+00001231],1
//mov [rdi+00000890],(float)1000001
jmp return
maoi:
dq 0
code:
comiss xmm6,[rdi+00000890]
jmp return
Team_OHK:
jmp newmem
nop 2
return:
registersymbol(Team_OHK maoi)
[DISABLE]
Team_OHK:
db 0F 2F B7 90 08 00 00
unregistersymbol(INJECT maoi)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F7D724
Remnant2-WinGDK-Shipping.exe+1F7D6FC: E8 FF B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D701: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D704: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1F7D71C
Remnant2-WinGDK-Shipping.exe+1F7D706: E9 FA 00 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D70B: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+1F7D70E: E8 ED B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D713: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D716: 0F 84 E9 00 00 00 - je Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D71C: 0F 29 74 24 70 - movaps [rsp+70],xmm6
Remnant2-WinGDK-Shipping.exe+1F7D721: 0F 57 F6 - xorps xmm6,xmm6
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F7D724: 0F 2F B7 90 08 00 00 - comiss xmm6,[rdi+00000890]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F7D72B: 0F 83 CF 00 00 00 - jae Remnant2-WinGDK-Shipping.exe+1F7D800
Remnant2-WinGDK-Shipping.exe+1F7D731: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D738: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D73F: 0F 29 7C 24 60 - movaps [rsp+60],xmm7
Remnant2-WinGDK-Shipping.exe+1F7D744: 44 0F 29 44 24 50 - movaps [rsp+50],xmm8
Remnant2-WinGDK-Shipping.exe+1F7D74A: FF 50 48 - call qword ptr [rax+48]
Remnant2-WinGDK-Shipping.exe+1F7D74D: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D754: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D75B: 0F 28 F8 - movaps xmm7,xmm0
Remnant2-WinGDK-Shipping.exe+1F7D75E: FF 50 50 - call qword ptr [rax+50]
}
1337143074
"->"
1
0
8 Bytes
maoi
1337143075
"current Health"
0
Float
maoi
890
1337145316
"current Health"
00:off
01:on
1
0
Byte
maoi
1231
1337143079
"Team GodMode 1 OHk [Not Safe for Boss fights]"
FF80FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Team_OHK,Remnant2-Win64-Shipping.exe,0F 2F B7 90 08 00 00) // should be unique
alloc(newmem,$1000,Team_OHK)
label(code maoi Pussy)
label(return)
newmem:
cmp [rdi+68],00000002
//cmp [rdi+180],DB9FBA40
jne Pussy
mov [maoi],rdi
mov [rdi+00001231],1
//mov [rdi+00000890],(float)1000001
jmp return
maoi:
dq 0
Pussy:
sub [rdi+00000890],(float)300000
mov [rdi+00000890],(float)0.00001
jmp return
code:
comiss xmm6,[rdi+00000890]
jmp return
Team_OHK:
jmp newmem
nop 2
return:
registersymbol(Team_OHK maoi Pussy)
[DISABLE]
Team_OHK:
db 0F 2F B7 90 08 00 00
unregistersymbol(INJECT maoi Pussy)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F7D724
Remnant2-WinGDK-Shipping.exe+1F7D6FC: E8 FF B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D701: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D704: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1F7D71C
Remnant2-WinGDK-Shipping.exe+1F7D706: E9 FA 00 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D70B: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+1F7D70E: E8 ED B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D713: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D716: 0F 84 E9 00 00 00 - je Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D71C: 0F 29 74 24 70 - movaps [rsp+70],xmm6
Remnant2-WinGDK-Shipping.exe+1F7D721: 0F 57 F6 - xorps xmm6,xmm6
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F7D724: 0F 2F B7 90 08 00 00 - comiss xmm6,[rdi+00000890]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F7D72B: 0F 83 CF 00 00 00 - jae Remnant2-WinGDK-Shipping.exe+1F7D800
Remnant2-WinGDK-Shipping.exe+1F7D731: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D738: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D73F: 0F 29 7C 24 60 - movaps [rsp+60],xmm7
Remnant2-WinGDK-Shipping.exe+1F7D744: 44 0F 29 44 24 50 - movaps [rsp+50],xmm8
Remnant2-WinGDK-Shipping.exe+1F7D74A: FF 50 48 - call qword ptr [rax+48]
Remnant2-WinGDK-Shipping.exe+1F7D74D: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D754: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D75B: 0F 28 F8 - movaps xmm7,xmm0
Remnant2-WinGDK-Shipping.exe+1F7D75E: FF 50 50 - call qword ptr [rax+50]
}
1337143080
"->"
1
0
8 Bytes
maoi
1337143081
"current Health"
0
00FFFF
Float
maoi
890
1337145317
"God Mode"
00:off
01:on
1
0
0000FF
Byte
maoi
1231
1337143098
"Map hack"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-12-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Map_hack,Remnant2-Win64-Shipping.exe,0F 2F 81 68 02 00 00) // should be unique
alloc(newmem,$1000,Map_hack)
registersymbol(Map_hack Enemys Team)
label(code Enemys Team)
label(return)
newmem:
//cmp [rcx+88],00000000
//cmp [rcx+8c],00000000//compare with offset
cmp [rcx+8c],00000100
//cmp [rcx+2d8],00000001
je Enemys
mov [Team],rcx//My guys
mov [rcx+00000268],(float)100001//Team gets health boost
//register restore//register restore
jmp return
Team:
dq 0
Enemys:
//sub [rcx+00000268],(float)1//subtraction to health
mov [rcx+00000268],(float)0.00001//Enemy gets health
sub [rcx+00000268],(float)1//subtraction to health
jmp return
code:
comiss xmm0,[rcx+00000268]
jmp return
Map_hack:
jmp newmem
nop 2
return:
registersymbol(Map_hack Enemys Team)
[DISABLE]
Map_hack:
db 0F 2F 81 68 02 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F6C6B3
Remnant2-WinGDK-Shipping.exe+1F6C6A7: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A8: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A9: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AA: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AB: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AC: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AD: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6B0: 0F 57 C0 - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F6C6B3: 0F 2F 81 68 02 00 00 - comiss xmm0,[rcx+00000268]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F6C6BA: 0F 92 C0 - setb al
Remnant2-WinGDK-Shipping.exe+1F6C6BD: C3 - ret
Remnant2-WinGDK-Shipping.exe+1F6C6BE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6BF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6C0: 48 8B C4 - mov rax,rsp
Remnant2-WinGDK-Shipping.exe+1F6C6C3: 48 89 58 10 - mov [rax+10],rbx
Remnant2-WinGDK-Shipping.exe+1F6C6C7: 48 89 70 18 - mov [rax+18],rsi
Remnant2-WinGDK-Shipping.exe+1F6C6CB: 48 89 78 20 - mov [rax+20],rdi
Remnant2-WinGDK-Shipping.exe+1F6C6CF: 55 - push rbp
Remnant2-WinGDK-Shipping.exe+1F6C6D0: 41 54 - push r12
}
1337143097
"No description"
1
0
8 Bytes
Team
1337143040
"xxxxx Crafting/upgrades options xxxxxxx"
FFFF80
1
1337143021
"Tax Return"
0000FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-29
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(buyfree,Remnant2-Win64-Shipping.exe,49 8B CF 89 42 2C E8 * * * * B0 01) // should be unique
alloc(newmem,$1000,buyfree)
label(code)
label(return)
newmem:
code:
add eax,999
mov [rdx+2C],eax
call Remnant2-Win64-Shipping.exe+20CC1C0
jmp return
buyfree+3:
jmp newmem
nop 3
return:
registersymbol(buyfree)
[DISABLE]
buyfree+3:
db 89 42 2C E8 CD 9D FF FF
unregistersymbol(buyfree)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+20D23EB
Remnant2-WinGDK-Shipping.exe+20D23D5: 41 5E - pop r14
Remnant2-WinGDK-Shipping.exe+20D23D7: 41 5D - pop r13
Remnant2-WinGDK-Shipping.exe+20D23D9: 41 5C - pop r12
Remnant2-WinGDK-Shipping.exe+20D23DB: 5F - pop rdi
Remnant2-WinGDK-Shipping.exe+20D23DC: C3 - ret
Remnant2-WinGDK-Shipping.exe+20D23DD: 8B 42 2C - mov eax,[rdx+2C]
Remnant2-WinGDK-Shipping.exe+20D23E0: 41 3B C5 - cmp eax,r13d
Remnant2-WinGDK-Shipping.exe+20D23E3: 7E 12 - jle Remnant2-WinGDK-Shipping.exe+20D23F7
Remnant2-WinGDK-Shipping.exe+20D23E5: 41 2B C5 - sub eax,r13d
Remnant2-WinGDK-Shipping.exe+20D23E8: 49 8B CF - mov rcx,r15
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+20D23EB: 89 42 2C - mov [rdx+2C],eax
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+20D23EE: E8 CD 9D FF FF - call Remnant2-WinGDK-Shipping.exe+20CC1C0
Remnant2-WinGDK-Shipping.exe+20D23F3: B0 01 - mov al,01
Remnant2-WinGDK-Shipping.exe+20D23F5: EB C9 - jmp Remnant2-WinGDK-Shipping.exe+20D23C0
Remnant2-WinGDK-Shipping.exe+20D23F7: 89 6A 2C - mov [rdx+2C],ebp
Remnant2-WinGDK-Shipping.exe+20D23FA: 33 D2 - xor edx,edx
Remnant2-WinGDK-Shipping.exe+20D23FC: 48 8B 4B 18 - mov rcx,[rbx+18]
Remnant2-WinGDK-Shipping.exe+20D2400: 48 83 C1 30 - add rcx,30
Remnant2-WinGDK-Shipping.exe+20D2404: E8 17 36 93 FE - call Remnant2-WinGDK-Shipping.exe+A05A20
Remnant2-WinGDK-Shipping.exe+20D2409: 48 39 6B 20 - cmp [rbx+20],rbp
Remnant2-WinGDK-Shipping.exe+20D240D: 74 0E - je Remnant2-WinGDK-Shipping.exe+20D241D
}
1337143023
"Give Trait Points"
FFFF80
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-29
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(T_points,Remnant2-Win64-Shipping.exe,8B B1 D4 00 00 00 48) // should be unique
alloc(newmem,$1000,T_points)
label(code Traits_p)
label(return)
newmem:
mov [Traits_p],rcx
jmp return
Traits_p:
dq 0
code:
mov esi,[rcx+000000D4]
jmp return
T_points:
jmp newmem
nop
return:
registersymbol(T_points Traits_p)
[DISABLE]
T_points:
db 8B B1 D4 00 00 00
unregistersymbol(T_points Traits_p)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+2122996
Remnant2-WinGDK-Shipping.exe+212297B: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297C: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297D: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297E: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297F: CC - int 3
Remnant2-WinGDK-Shipping.exe+2122980: 48 89 5C 24 08 - mov [rsp+08],rbx
Remnant2-WinGDK-Shipping.exe+2122985: 48 89 74 24 10 - mov [rsp+10],rsi
Remnant2-WinGDK-Shipping.exe+212298A: 57 - push rdi
Remnant2-WinGDK-Shipping.exe+212298B: 48 83 EC 20 - sub rsp,20
Remnant2-WinGDK-Shipping.exe+212298F: 48 8B B9 90 00 00 00 - mov rdi,[rcx+00000090]
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+2122996: 8B B1 D4 00 00 00 - mov esi,[rcx+000000D4]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+212299C: 48 8B 07 - mov rax,[rdi]
Remnant2-WinGDK-Shipping.exe+212299F: 48 8B 98 D0 06 00 00 - mov rbx,[rax+000006D0]
Remnant2-WinGDK-Shipping.exe+21229A6: E8 D5 C3 F2 FF - call Remnant2-WinGDK-Shipping.exe+204ED80
Remnant2-WinGDK-Shipping.exe+21229AB: 48 8B D0 - mov rdx,rax
Remnant2-WinGDK-Shipping.exe+21229AE: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+21229B1: FF D3 - call rbx
Remnant2-WinGDK-Shipping.exe+21229B3: 48 8B D8 - mov rbx,rax
Remnant2-WinGDK-Shipping.exe+21229B6: 48 85 C0 - test rax,rax
Remnant2-WinGDK-Shipping.exe+21229B9: 74 29 - je Remnant2-WinGDK-Shipping.exe+21229E4
Remnant2-WinGDK-Shipping.exe+21229BB: E8 10 A8 01 00 - call Remnant2-WinGDK-Shipping.exe+213D1D0
}
1337143024
"p"
1
0
000000
8 Bytes
Traits_p
1337143025
"Set -> Amount Total Trait points"
4 Bytes
Traits_p
D4
1337145297
"Set Item Amount"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-12-07
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Mil,Remnant2-Win64-Shipping.exe,41 8B 47 2C 89 47 18) // should be unique
alloc(newmem,$1000,Mil)
label(code Milo)
label(return)
newmem:
mov [Milo],r15
//mov [Milo+18],99999
jmp return
Milo:
dq 0
code:
mov eax,[r15+2C]
mov [rdi+18],eax
jmp return
Mil:
jmp newmem
nop 2
return:
registersymbol(Mil Milo)
[DISABLE]
Mil:
db 41 8B 47 2C 89 47 18
unregistersymbol(Mil Milo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+211761B
Remnant2-WinGDK-Shipping.exe+21175FB: 89 47 14 - mov [rdi+14],eax
Remnant2-WinGDK-Shipping.exe+21175FE: 4D 85 FF - test r15,r15
Remnant2-WinGDK-Shipping.exe+2117601: 75 0C - jne Remnant2-WinGDK-Shipping.exe+211760F
Remnant2-WinGDK-Shipping.exe+2117603: 4C 8B BE E0 02 00 00 - mov r15,[rsi+000002E0]
Remnant2-WinGDK-Shipping.exe+211760A: 4D 85 FF - test r15,r15
Remnant2-WinGDK-Shipping.exe+211760D: 74 13 - je Remnant2-WinGDK-Shipping.exe+2117622
Remnant2-WinGDK-Shipping.exe+211760F: 85 ED - test ebp,ebp
Remnant2-WinGDK-Shipping.exe+2117611: 79 05 - jns Remnant2-WinGDK-Shipping.exe+2117618
Remnant2-WinGDK-Shipping.exe+2117613: 41 0F B6 6F 28 - movzx ebp,byte ptr [r15+28]
Remnant2-WinGDK-Shipping.exe+2117618: 89 6F 14 - mov [rdi+14],ebp
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+211761B: 41 8B 47 2C - mov eax,[r15+2C]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+211761F: 89 47 18 - mov [rdi+18],eax
Remnant2-WinGDK-Shipping.exe+2117622: 48 8D 54 24 48 - lea rdx,[rsp+48]
Remnant2-WinGDK-Shipping.exe+2117627: 48 8B CE - mov rcx,rsi
Remnant2-WinGDK-Shipping.exe+211762A: E8 61 1B 00 00 - call Remnant2-WinGDK-Shipping.exe+2119190
Remnant2-WinGDK-Shipping.exe+211762F: 48 8B 57 30 - mov rdx,[rdi+30]
Remnant2-WinGDK-Shipping.exe+2117633: 48 8B 08 - mov rcx,[rax]
Remnant2-WinGDK-Shipping.exe+2117636: 48 89 4F 30 - mov [rdi+30],rcx
Remnant2-WinGDK-Shipping.exe+211763A: 48 8B 48 08 - mov rcx,[rax+08]
Remnant2-WinGDK-Shipping.exe+211763E: 48 89 10 - mov [rax],rdx
Remnant2-WinGDK-Shipping.exe+2117641: 48 8B 57 38 - mov rdx,[rdi+38]
}
1337145298
"No description"
1
0
8 Bytes
Milo
1337145302
"Ammo"
4 Bytes
Milo
50
1337145303
"AmmoInClip"
4 Bytes
Milo
54
1337145304
"Mods.Mods"
1
8 Bytes
Milo
40
1337145307
"[0] ModSlot"
Byte
Milo
0
40
1337145308
"[0] Mod"
1
8 Bytes
Milo
8
40
1337145315
"[0] ModItemID"
0
4 Bytes
Milo
10
40
1337145309
"[0] ModLevel"
Byte
Milo
14
40
1337145310
"[1] ModSlot"
Byte
Milo
18
40
1337145311
"Mutator"
1
8 Bytes
Milo
20
40
1337145312
"MutatorID"
4 Bytes
Milo
28
40
1337145313
"MutatorLevel"
Byte
Milo
2C
40
1337145305
"Mods.Mods_size"
4 Bytes
Milo
48
1337145306
"Mods.Mods_sizes"
4 Bytes
Milo
4C
1337145300
"level"
4 Bytes
Milo
28
1337145299
"amount"
0
8 Bytes
Milo
2c
1337143043
"World Options"
00FF00
1
1337143071
"mAX dROP RATE"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(dROP_RTAE,Remnant2-Win64-Shipping.exe,BF 63 00 00 00 66 0F 6E C0 0F 5B C0 F3 0F 59 C6 F3 0F 2C C0 3B C7) // should be unique
registersymbol(dROP_RTAE)
dROP_RTAE+05:
db 66 0F 57 C0
[DISABLE]
dROP_RTAE+05:
db 66 0F 6E C0
unregistersymbol(dROP_RTAE)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+2170080
Remnant2-WinGDK-Shipping.exe+2170059: C1 E8 09 - shr eax,09
Remnant2-WinGDK-Shipping.exe+217005C: 0D 00 00 80 3F - or eax,3F800000
Remnant2-WinGDK-Shipping.exe+2170061: 66 0F 6E C8 - movd xmm1,eax
Remnant2-WinGDK-Shipping.exe+2170065: F3 0F 5C CF - subss xmm1,xmm7
Remnant2-WinGDK-Shipping.exe+2170069: F3 41 0F 59 C8 - mulss xmm1,xmm8
Remnant2-WinGDK-Shipping.exe+217006E: F3 0F 2C F9 - cvttss2si edi,xmm1
Remnant2-WinGDK-Shipping.exe+2170072: EB 24 - jmp Remnant2-WinGDK-Shipping.exe+2170098
Remnant2-WinGDK-Shipping.exe+2170074: FF 15 6E 8E 2D 03 - call qword ptr [Remnant2-WinGDK-Shipping.exe+5448EE8]
Remnant2-WinGDK-Shipping.exe+217007A: 25 FF 7F 00 00 - and eax,00007FFF
Remnant2-WinGDK-Shipping.exe+217007F: BF - db BF
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+2170080: 63 00 - movsxd rax,dword ptr [rax]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+2170082: 00 00 - add [rax],al
Remnant2-WinGDK-Shipping.exe+2170084: 66 0F 6E C0 - movd xmm0,eax
Remnant2-WinGDK-Shipping.exe+2170088: 0F 5B C0 - cvtdq2ps xmm0,xmm0
Remnant2-WinGDK-Shipping.exe+217008B: F3 0F 59 C6 - mulss xmm0,xmm6
Remnant2-WinGDK-Shipping.exe+217008F: F3 0F 2C C0 - cvttss2si eax,xmm0
Remnant2-WinGDK-Shipping.exe+2170093: 3B C7 - cmp eax,edi
Remnant2-WinGDK-Shipping.exe+2170095: 0F 4C F8 - cmovl edi,eax
Remnant2-WinGDK-Shipping.exe+2170098: 49 8B D5 - mov rdx,r13
Remnant2-WinGDK-Shipping.exe+217009B: 48 8B CE - mov rcx,rsi
Remnant2-WinGDK-Shipping.exe+217009E: FF C7 - inc edi
}
1337143046
"iNF mOD cHARGES"
FF80FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(mOD_CHARGES,Remnant2-Win64-Shipping.exe,40 2A C6 88 * * * 00 00 0F 85 * * 00 00 80 * * * 00 00 02) // should be unique
registersymbol(mOD_CHARGES)
mOD_CHARGES+1:
db 2C 00
[DISABLE]
mOD_CHARGES+1:
db 2A C6
unregistersymbol(mOD_CHARGES)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1D25783
Remnant2-WinGDK-Shipping.exe+1D25759: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1D2575C: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1D25774
Remnant2-WinGDK-Shipping.exe+1D2575E: E9 ED 01 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1D25950
Remnant2-WinGDK-Shipping.exe+1D25763: 48 8B CB - mov rcx,rbx
Remnant2-WinGDK-Shipping.exe+1D25766: E8 95 32 13 02 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1D2576B: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1D2576E: 0F 84 DC 01 00 00 - je Remnant2-WinGDK-Shipping.exe+1D25950
Remnant2-WinGDK-Shipping.exe+1D25774: 0F B6 83 64 0C 00 00 - movzx eax,byte ptr [rbx+00000C64]
Remnant2-WinGDK-Shipping.exe+1D2577B: 3B C6 - cmp eax,esi
Remnant2-WinGDK-Shipping.exe+1D2577D: 0F 8C CD 01 00 00 - jl Remnant2-WinGDK-Shipping.exe+1D25950
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1D25783: 2C 00 - sub al,00
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1D25785: 90 - nop
Remnant2-WinGDK-Shipping.exe+1D25786: 88 83 64 0C 00 00 - mov [rbx+00000C64],al
Remnant2-WinGDK-Shipping.exe+1D2578C: 0F 85 B6 01 00 00 - jne Remnant2-WinGDK-Shipping.exe+1D25948
Remnant2-WinGDK-Shipping.exe+1D25792: 80 BB F0 0C 00 00 02 - cmp byte ptr [rbx+00000CF0],02
Remnant2-WinGDK-Shipping.exe+1D25799: 0F 85 A9 01 00 00 - jne Remnant2-WinGDK-Shipping.exe+1D25948
Remnant2-WinGDK-Shipping.exe+1D2579F: 4C 89 B4 24 00 01 00 00 - mov [rsp+00000100],r14
Remnant2-WinGDK-Shipping.exe+1D257A7: 48 8B CB - mov rcx,rbx
Remnant2-WinGDK-Shipping.exe+1D257AA: 0F 29 B4 24 C0 00 00 00 - movaps [rsp+000000C0],xmm6
Remnant2-WinGDK-Shipping.exe+1D257B2: E8 E9 1B 13 02 - call Remnant2-WinGDK-Shipping.exe+3E573A0
Remnant2-WinGDK-Shipping.exe+1D257B7: 8B 4D B3 - mov ecx,[rbp-4D]
}
1337143047
"Inf Buff Timer"
0080FF
Auto Assembler Script
{ Game : Remnant2-Win64-Shipping.exe
Version:
Date : 2023-08-25
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(BUUF_LONGER,Remnant2-Win64-Shipping.exe,75 * * * * FF * * * 00 00 F3 0F 58 * * * 00 00 F3 0F 10) // should be unique
registersymbol(BUUF_LONGER)
BUUF_LONGER+0b:
db F3 0F 10
[DISABLE]
BUUF_LONGER+0b:
db F3 0F 58
unregistersymbol(BUUF_LONGER)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-Win64-Shipping.exe+1D4D5E9
Remnant2-Win64-Shipping.exe+1D4D5C0: 40 56 - push rsi
Remnant2-Win64-Shipping.exe+1D4D5C2: 48 83 EC 40 - sub rsp,40
Remnant2-Win64-Shipping.exe+1D4D5C6: 0F 29 74 24 30 - movaps [rsp+30],xmm6
Remnant2-Win64-Shipping.exe+1D4D5CB: 48 8B F1 - mov rsi,rcx
Remnant2-Win64-Shipping.exe+1D4D5CE: 0F 29 7C 24 20 - movaps [rsp+20],xmm7
Remnant2-Win64-Shipping.exe+1D4D5D3: 0F 28 F1 - movaps xmm6,xmm1
Remnant2-Win64-Shipping.exe+1D4D5D6: 0F 57 FF - xorps xmm7,xmm7
Remnant2-Win64-Shipping.exe+1D4D5D9: 0F 2F B9 80 03 00 00 - comiss xmm7,[rcx+00000380]
Remnant2-Win64-Shipping.exe+1D4D5E0: 73 57 - jae Remnant2-Win64-Shipping.exe+1D4D639
Remnant2-Win64-Shipping.exe+1D4D5E2: 80 B9 A4 03 00 00 00 - cmp byte ptr [rcx+000003A4],00
// ---------- INJECTING HERE ----------
Remnant2-Win64-Shipping.exe+1D4D5E9: 75 4E - jne Remnant2-Win64-Shipping.exe+1D4D639
// ---------- DONE INJECTING ----------
Remnant2-Win64-Shipping.exe+1D4D5EB: 48 8B 01 - mov rax,[rcx]
Remnant2-Win64-Shipping.exe+1D4D5EE: FF 90 60 03 00 00 - call qword ptr [rax+00000360]
Remnant2-Win64-Shipping.exe+1D4D5F4: F3 0F 58 86 9C 03 00 00 - addss xmm0,[rsi+0000039C]
Remnant2-Win64-Shipping.exe+1D4D5FC: F3 0F 10 8E 80 03 00 00 - movss xmm1,[rsi+00000380]
Remnant2-Win64-Shipping.exe+1D4D604: 0F 2F C1 - comiss xmm0,xmm1
Remnant2-Win64-Shipping.exe+1D4D607: F3 0F 11 86 9C 03 00 00 - movss [rsi+0000039C],xmm0
Remnant2-Win64-Shipping.exe+1D4D60F: 72 28 - jb Remnant2-Win64-Shipping.exe+1D4D639
Remnant2-Win64-Shipping.exe+1D4D611: 48 8B CE - mov rcx,rsi
Remnant2-Win64-Shipping.exe+1D4D614: F3 0F 11 8E 9C 03 00 00 - movss [rsi+0000039C],xmm1
Remnant2-Win64-Shipping.exe+1D4D61C: E8 EF B3 25 00 - call Remnant2-Win64-Shipping.exe+1FA8A10
}
1337144702
"Inf. Ammo Clip"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteClipFlag,Remnant2-Win64-Shipping.exe,40 38 B3 30 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteClipFlag)
label(code)
label(return)
newmem:
code:
or sil,1
mov byte ptr[rbx+C00],sil
cmp [rbx+00000C30],sil
jmp return
aobReadInfiniteClipFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteClipFlag)
[DISABLE]
aobReadInfiniteClipFlag:
db 40 38 B3 30 0C 00 00
unregistersymbol(aobReadInfiniteClipFlag)
dealloc(newmem)
1337144703
"Inf. Reserve Ammo"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteReserveFlag,Remnant2-Win64-Shipping.exe,40 38 BB 31 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteReserveFlag)
label(code)
label(return)
newmem:
code:
or dil,1
mov byte ptr[rbx+C31],dil
cmp [rbx+00000C31],dil
jmp return
aobReadInfiniteReserveFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteReserveFlag)
[DISABLE]
aobReadInfiniteReserveFlag:
db 40 38 BB 31 0C 00 00
unregistersymbol(aobReadInfiniteReserveFlag)
dealloc(newmem)
1337143082
"R-N-D"
FF8000
1
1337143069
"Clone world Rewind"
C080FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-29
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(g_pop,Remnant2-Win64-Shipping.exe,0F 2F 81 68 02 00 00) // should be unique
alloc(newmem,$1000,g_pop)
label(code)
label(dm_Rewind)
label(return)
newmem:
//cmp [rcx+000004a8],00000000
cmp [rcx+000003A0],00010100
jne code
mov [dm_Rewind],rcx
//mov [rcx+11E9],1// GoD Mode
jmp return
dm_Rewind:
dq 0
code:
comiss xmm0,[rcx+00000268]
jmp return
g_pop:
jmp newmem
nop 2
return:
registersymbol(g_pop dm_Rewind)
[DISABLE]
g_pop:
db 0F 2F 81 68 02 00 00
unregistersymbol(g_pop dm_Rewind)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F6C6B3
Remnant2-WinGDK-Shipping.exe+1F6C6A7: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A8: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A9: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AA: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AB: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AC: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AD: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6B0: 0F 57 C0 - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F6C6B3: 0F 2F 81 68 02 00 00 - comiss xmm0,[rcx+00000268]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F6C6BA: 0F 92 C0 - setb al
Remnant2-WinGDK-Shipping.exe+1F6C6BD: C3 - ret
Remnant2-WinGDK-Shipping.exe+1F6C6BE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6BF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6C0: 48 8B C4 - mov rax,rsp
Remnant2-WinGDK-Shipping.exe+1F6C6C3: 48 89 58 10 - mov [rax+10],rbx
Remnant2-WinGDK-Shipping.exe+1F6C6C7: 48 89 70 18 - mov [rax+18],rsi
Remnant2-WinGDK-Shipping.exe+1F6C6CB: 48 89 78 20 - mov [rax+20],rdi
Remnant2-WinGDK-Shipping.exe+1F6C6CF: 55 - push rbp
Remnant2-WinGDK-Shipping.exe+1F6C6D0: 41 54 - push r12
}
1337143070
"->"
1
0
8 Bytes
dm_Rewind
1337143026
"InFinite Dragon Hearts"
80FF00
Auto Assembler Script
{ Game : Remnant2-Win64-Shipping.exe
Version:
Date : 2023-08-06
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(dragon_herts,Remnant2-WinGDK-Shipping.exe,66 0F 6E CB 0F 5B C9 F3 0F 58 * F3 0F 2C D8) // should be unique
registersymbol(dragon_herts)
dragon_herts+7:
db BB DE 03 00 00 0F 1F 00
[DISABLE]
dragon_herts+7:
db F3 0F 58 C1 F3 0F 2C D8
unregistersymbol(*)
{
// ---------- INJECTING HERE ----------
Remnant2-Win64-Shipping.exe+1D809A3: 66 0F 6E CB - movd xmm1,ebx
// ---------- DONE INJECTING ----------
Remnant2-Win64-Shipping.exe+1D809A7: 0F 5B C9 - cvtdq2ps xmm1,xmm1
Remnant2-Win64-Shipping.exe+1D809AA: F3 0F 58 C1 - addss xmm0,xmm1
Remnant2-Win64-Shipping.exe+1D809AE: F3 0F 2C D8 - cvttss2si ebx,xmm0
Remnant2-Win64-Shipping.exe+1D809B2: 8B 87 40 07 00 00 - mov eax,[rdi+00000740]
}
1337143044
"iNFN aMMO"
FFFF00
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Ammo,Remnant2-WinGDK-Shipping.exe,F3 0F 11 B3 F0 00 00 00 B0) // should be unique
alloc(newmem,$70,Ammo)
registersymbol(Ammo Am_mo Guns)
label(code Am_mo Guns)
label(return)
newmem:
//cmp [rbx+3EC],00000000
cmp [rbx+168],00000000
jne Guns
mov [Am_mo],rbx
mov [rbx+000000F0],(float)1000
jmp return
Am_mo:
dq 0
Guns:
mov [rbx+000000F0],(float)1000
jmp return
code:
movss [rbx+000000F0],xmm6
jmp return
Ammo:
jmp newmem
nop 3
return:
[DISABLE]
Ammo:
db F3 0F 11 B3 F0 00 00 00
unregistersymbol(Ammo Am_mo Guns)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F52100
Remnant2-WinGDK-Shipping.exe+1F520DE: 0F 57 C0 - xorps xmm0,xmm0
Remnant2-WinGDK-Shipping.exe+1F520E1: 0F 28 C8 - movaps xmm1,xmm0
Remnant2-WinGDK-Shipping.exe+1F520E4: F3 0F 58 CF - addss xmm1,xmm7
Remnant2-WinGDK-Shipping.exe+1F520E8: 0F 2F CE - comiss xmm1,xmm6
Remnant2-WinGDK-Shipping.exe+1F520EB: 72 08 - jb Remnant2-WinGDK-Shipping.exe+1F520F5
Remnant2-WinGDK-Shipping.exe+1F520ED: 0F 28 F1 - movaps xmm6,xmm1
Remnant2-WinGDK-Shipping.exe+1F520F0: F3 41 0F 5D F0 - minss xmm6,xmm8
Remnant2-WinGDK-Shipping.exe+1F520F5: 0F 2E F0 - ucomiss xmm6,xmm0
Remnant2-WinGDK-Shipping.exe+1F520F8: 44 0F 28 44 24 20 - movaps xmm8,[rsp+20]
Remnant2-WinGDK-Shipping.exe+1F520FE: 74 1A - je Remnant2-WinGDK-Shipping.exe+1F5211A
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F52100: F3 0F 11 B3 F0 00 00 00 - movss [rbx+000000F0],xmm6
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F52108: B0 01 - mov al,01
Remnant2-WinGDK-Shipping.exe+1F5210A: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
Remnant2-WinGDK-Shipping.exe+1F5210F: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
Remnant2-WinGDK-Shipping.exe+1F52114: 48 83 C4 50 - add rsp,50
Remnant2-WinGDK-Shipping.exe+1F52118: 5B - pop rbx
Remnant2-WinGDK-Shipping.exe+1F52119: C3 - ret
Remnant2-WinGDK-Shipping.exe+1F5211A: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
Remnant2-WinGDK-Shipping.exe+1F5211F: 32 C0 - xor al,al
Remnant2-WinGDK-Shipping.exe+1F52121: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
Remnant2-WinGDK-Shipping.exe+1F52126: 48 83 C4 50 - add rsp,50
}
1337143083
"->"
1
0
8 Bytes
Am_mo
0
1337143084
"Dragon Hearts"
00FFFF
Float
Am_mo
F0
1337143045
"nO rELOAD"
80FF80
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(No_reloading,Remnant2-WinGDK-Shipping.exe,29 68 54 F7 DD) // should be unique
registersymbol(No_reloading)
No_reloading:
db 90 90 90 90 90
[DISABLE]
No_reloading:
db 29 68 54 F7 DD
unregistersymbol(No_reloading)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+20B3A78
Remnant2-WinGDK-Shipping.exe+20B3A50: FF 50 08 - call qword ptr [rax+08]
Remnant2-WinGDK-Shipping.exe+20B3A53: 0F B6 C0 - movzx eax,al
Remnant2-WinGDK-Shipping.exe+20B3A56: 0F 57 C0 - xorps xmm0,xmm0
Remnant2-WinGDK-Shipping.exe+20B3A59: 66 0F 6E C8 - movd xmm1,eax
Remnant2-WinGDK-Shipping.exe+20B3A5D: 0F 5B C9 - cvtdq2ps xmm1,xmm1
Remnant2-WinGDK-Shipping.exe+20B3A60: 0F 2E C8 - ucomiss xmm1,xmm0
Remnant2-WinGDK-Shipping.exe+20B3A63: 75 27 - jne Remnant2-WinGDK-Shipping.exe+20B3A8C
Remnant2-WinGDK-Shipping.exe+20B3A65: 48 8D 8F C8 F9 FF FF - lea rcx,[rdi-00000638]
Remnant2-WinGDK-Shipping.exe+20B3A6C: E8 7F E3 FE FF - call Remnant2-WinGDK-Shipping.exe+20A1DF0
Remnant2-WinGDK-Shipping.exe+20B3A71: 48 8D 8F C8 F9 FF FF - lea rcx,[rdi-00000638]
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+20B3A78: 29 68 54 - sub [rax+54],ebp
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+20B3A7B: F7 DD - neg ebp
Remnant2-WinGDK-Shipping.exe+20B3A7D: 48 8B 87 C8 F9 FF FF - mov rax,[rdi-00000638]
Remnant2-WinGDK-Shipping.exe+20B3A84: 8B D5 - mov edx,ebp
Remnant2-WinGDK-Shipping.exe+20B3A86: FF 90 20 09 00 00 - call qword ptr [rax+00000920]
Remnant2-WinGDK-Shipping.exe+20B3A8C: 48 8B 6C 24 38 - mov rbp,[rsp+38]
Remnant2-WinGDK-Shipping.exe+20B3A91: 48 8B 74 24 40 - mov rsi,[rsp+40]
Remnant2-WinGDK-Shipping.exe+20B3A96: 48 83 C4 20 - add rsp,20
Remnant2-WinGDK-Shipping.exe+20B3A9A: 5F - pop rdi
Remnant2-WinGDK-Shipping.exe+20B3A9B: C3 - ret
Remnant2-WinGDK-Shipping.exe+20B3A9C: CC - int 3
}
1337092351
"Remnant 2_ Gamepass"
000000
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.3) then
ShowMessage('Warning! CE version should be 7.3 or above')
error()
end
---------------
local pcss = 'Remnant2-Wingdk-Shipping.exe'
local msg = 'The process Remnant2-WinGDK-Shipping.exe is NOT found!'
OpenProcess(pcss)
if process ~= pcss and (readInteger(process) == nil) then
ShowMessage(msg)
error()
end
-- mono_initialize()
-- LaunchMonoDataCollector()
{$asm}
//LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
{$lua}
if monopipe~=nil then monopipe.Destroy() ; monopipe=nil end -- mono disable
{$asm}
//LuaCall(cycleFullCompact(nil,false))
88116
"Enable Console Commands"
0000FF
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
function GetLocalPlayerController()
local Engine = executeCodeEx(0,nil,Find,0,-1,{type = 4,value = "GameEngine"},1)
local p = allocateMemory(64)
executeCodeEx(0,nil,FindObjectsOfClass,Engine,p,0,0)
local Size = readInteger(p+0x8)
local Array = readPointer(p)
local pEngine = readPointer(Array+(Size-1)*8)
local Instance = readPointer(pEngine+0xFC0)
local LocalPlayerArray = readPointer(Instance+0x38)
local LocalPlayer = readPointer(LocalPlayerArray)
local PC = readPointer(LocalPlayer+0x30)
return PC
end
function StaticFind(name)
local ClassPtr = executeCodeEx(0,nil,Find,0,-1,{type = 4,value = name},1)
return ClassPtr
end
function FindObjectOfClass(classname)
local p = allocateMemory(64)
local Instance = 0
local ClassPtr = executeCodeEx(0,nil,Find,0,-1,{type = 4,value = classname},1)
executeCodeEx(0,nil,FindObjectsOfClass,ClassPtr,p,0,0)
local Size = readInteger(p+0x8)
local Array = readPointer(p)
local Instance = readPointer(Array+(Size-1)*8)
deAlloc(p)
return Instance
end
AutoAssemble([[
// CallFunctionByNameWithArguments:
aobscanmodule(aobCheckFlag,$process,F7 80 B0 00 00 00 00 02 00 00) // should be unique
registersymbol(aobCheckFlag)
aobscanmodule(aobStaticFind,$process,48 8B C4 48 89 58 08 48 89 68 18 48 89 70 20 57 41 56 41 57 48 83 EC 60 48 83 FA FF 48 8B FA 48 8B E9 41 0F B6 F1 41 0F 94 C6 48 8D 48 D0)
registersymbol(aobStaticFind)
aobscanmodule(aobFindObjectsOfClass,$process,48 83 EC 48 48 8D 44 24 58 48 89 54 24 58 48 89 44 24 38 48 8D 54 24 30)
registersymbol(aobFindObjectsOfClass)
aobscanmodule(aobStaticConstruct,$process,** ** ** ** ** ** ** ** ** ** 55 57 41 54 41 56 41 57 48 8D AC 24 80 FE FF FF 48 81 EC 80 02 00 00 48 8B 05 ** ** ** ** 48 33 C4 48 89 85 70 01 00 00 48 8B 31 48 8B D9 4C 8B 61 08)
registersymbol(aobStaticConstruct)
aobscanmodule(aobFindFProperty,$process,48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57 48 83 EC 40 41 0F B6 E8 48 8B F9 45 33 C0 48 8D 4C 24 20)
registersymbol(aobFindFProperty)
aobscanmodule(aobFNameFName,$process,48 89 5C 24 08 57 48 83 EC 30 48 8B D9 41 8B F8 33 C9 4C 8B DA 44 8B D1 4C 8B CA 48 85 D2)
registersymbol(aobFNameFName)
aobscanmodule(aobFNameToString,$process,48 89 5C 24 10 48 89 74 24 18 57 48 83 EC 20 80 3D ** ** ** ** 00 48 8B FA 8B 19 48 8B F1 74 09 4C 8D 05 ** ** ** ** EB 16 48 8D 0D ** ** ** ** E8 ** ** ** ** 4C 8B C0 C6 05 ** ** ** ** 01 8B CB 0F B7 C3 C1 E9 10 89 4C 24 30 8B D1 89 44 24 34 48 8B 44 24 )
registersymbol(aobFNameToString)
aobscanmodule(aobGetFullName,$process,40 55 56 57 48 8D AC 24 A0 FE FF FF 48 81 EC 60 02 00 00 48 8B 05 ** ** ** ** 48 33 C4 48 89 85 50 01 00 00 C6 44 24 48 00)
registersymbol(aobGetFullName)
//Leads to the RemanantCheatManager:GetPrivateStaticClass call:
//aobscanmodule(aobGetCheatManager,$process,74 70 E8 ** ** ** ** 48 8B BF F8 03 00 00 4C 8B D0 48 85 FF)
//registersymbol(aobGetCheatManager)
aobscanmodule(Object_ProcessEvent,$process,** ** ** ** ** ** 41 55 41 56 41 57 48 81 EC 10 01 00 00 48 8D 6C 24 30 48 89 9D 38 01 00 00)
registersymbol(Object_ProcessEvent)
aobscanmodule(aobGetCurrentRangedWeapon,$process,40 53 48 83 EC 20 48 8B 81 ** ** 00 00 48 85 C0 74 ** 48 8B 91 ** ** 00 00)
registersymbol(aobGetCurrentRangedWeapon)
]])
Find = getAddress("aobStaticFind")
FindObjectsOfClass = getAddress("aobFindObjectsOfClass")
StaticConstruct = getAddress("aobStaticConstruct")
FindFProperty = getAddress("aobFindFProperty")
FName_FName = getAddress( "aobFNameFName" )
pWeaponStats = allocateMemory(32)
unregisterSymbol("pWStats")
registerSymbol("pWStats",pWeaponStats)
[DISABLE]
deAlloc(pWeaponStats)
88137
"Patch AddExperience Command"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobAddExperienceAllowed,$process,0F 84 BD 00 00 00 8B 47 08 C1 E8 04 48 89 74 24 38 A8 01)
registersymbol(aobAddExperienceAllowed)
aobAddExperienceAllowed:
nop 6
[DISABLE]
88117
"Patch Summon Command"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobSummon,$process,,48 89 5C 24 18 55 56 57 41 56 41 57 48 8D 6C 24 90 48 81 EC 70 01 00 00 48 8B 05 ** ** ** ** 48 33 C4 48 89 45 60 48 8B F2 33 DB 41 B9 01 00 00 00 48 89 5C 24 30 4C 8B F1) // should be unique
alloc(newmem,$1000,aobSummon)
aobscanmodule(aobStaticLoadObject,$process,40 55 53 56 57 41 54 41 55 41 56 41 57 48 8D AC 24 A8 FE FF FF 48 81 EC 58 02 00 00 48 8B 05 ** ** ** ** 48 33 C4 48 89 85 48 01 00 00 48 8B 85 C8 01 00 00 33 DB)
registersymbol(aobStaticLoadObject)
label(code)
label(return)
label(Skip)
newmem:
code:
push rax
push rbx
push rcx
push rdx
push rbp
push rdi
push rsi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
sub rsp,60
xor rcx,rcx
mov rdx,-1
mov r8,szObject
mov r9,1
call aobStaticFind
test rax,rax
je Skip
mov r8,[rsp+B8]
mov r8,[r8]
mov [rsp+38],0
xor r9d,r9d
mov byte ptr [rsp+30],01
xor edx,edx
mov [rsp+28],0
mov [rsp+20],0
mov rcx,rax
call aobStaticLoadObject
Skip:
add rsp,60
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rsi
pop rdi
pop rbp
pop rdx
pop rcx
pop rbx
pop rax
mov [rsp+18],rbx
jmp return
szObject:
dw 'Object',0
aobSummon:
jmp newmem
return:
registersymbol(aobSummon)
[DISABLE]
aobSummon:
db 48 89 5C 24 18
unregistersymbol(aobSummon)
dealloc(newmem)
88061
"Patch Exec Flag "
Auto Assembler Script
{ Game : Remnant2-Win64-Shipping.exe
Version:
Date : 2023-07-22
Author : cfe
This script does blah blah blah
}
define(address,aobCheckFlag)
define(bytes,F7 80 B0 00 00 00 00 02 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,aobCheckFlag)
label(code)
label(return)
newmem:
code:
or [rax+b0],200
test [rax+000000B0],00000200
jmp return
address:
jmp newmem
nop 5
return:
[DISABLE]
address:
db bytes
// test [rax+000000B0],00000200
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: aobCheckFlag
Remnant2-Win64-Shipping.exe+2507F85: 85 D2 - test edx,edx
Remnant2-Win64-Shipping.exe+2507F87: 75 0A - jne Remnant2-Win64-Shipping.exe+2507F93
Remnant2-Win64-Shipping.exe+2507F89: 44 39 7D 6C - cmp [rbp+6C],r15d
Remnant2-Win64-Shipping.exe+2507F8D: 0F 84 E6 08 00 00 - je Remnant2-Win64-Shipping.exe+2508879
Remnant2-Win64-Shipping.exe+2507F93: 48 8B 4E 10 - mov rcx,[rsi+10]
Remnant2-Win64-Shipping.exe+2507F97: 41 B8 01 00 00 00 - mov r8d,00000001
Remnant2-Win64-Shipping.exe+2507F9D: E8 EE 6B F2 FF - call Remnant2-Win64-Shipping.exe+242EB90
Remnant2-Win64-Shipping.exe+2507FA2: 4C 8B E0 - mov r12,rax
Remnant2-Win64-Shipping.exe+2507FA5: 48 85 C0 - test rax,rax
Remnant2-Win64-Shipping.exe+2507FA8: 0F 84 CB 08 00 00 - je Remnant2-Win64-Shipping.exe+2508879
// ---------- INJECTING HERE ----------
aobCheckFlag: F7 80 B0 00 00 00 00 02 00 00 - test [rax+000000B0],00000200
// ---------- DONE INJECTING ----------
Remnant2-Win64-Shipping.exe+2507FB8: 75 0D - jne Remnant2-Win64-Shipping.exe+2507FC7
Remnant2-Win64-Shipping.exe+2507FBA: 44 38 BD 80 02 00 00 - cmp [rbp+00000280],r15b
Remnant2-Win64-Shipping.exe+2507FC1: 0F 84 B2 08 00 00 - je Remnant2-Win64-Shipping.exe+2508879
Remnant2-Win64-Shipping.exe+2507FC7: 48 8B 40 50 - mov rax,[rax+50]
Remnant2-Win64-Shipping.exe+2507FCB: 48 8D 4D 70 - lea rcx,[rbp+70]
Remnant2-Win64-Shipping.exe+2507FCF: 4D 8B EF - mov r13,r15
Remnant2-Win64-Shipping.exe+2507FD2: 48 89 45 78 - mov [rbp+78],rax
Remnant2-Win64-Shipping.exe+2507FD6: 44 88 AD 86 00 00 00 - mov [rbp+00000086],r13b
Remnant2-Win64-Shipping.exe+2507FDD: 4C 89 65 70 - mov [rbp+70],r12
Remnant2-Win64-Shipping.exe+2507FE1: C7 85 80 00 00 00 FF FF FF FF - mov [rbp+00000080],FFFFFFFF
}
88119
"Enable Console"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local Engine = executeCodeEx(0,nil,Find,0,-1,{type = 4,value = "GameEngine"},1)
local p = allocateMemory(64)
executeCodeEx(0,nil,FindObjectsOfClass,Engine,p,0,0)
local Size = readInteger(p+0x8)
local Array = readPointer(p)
local pEngine = readPointer(Array+(Size-1)*8)
local Prop = executeCodeEx(0,nil,FindFProperty,Engine,{type = 4,value = "ConsoleClass"},7)
local ConsoleClassOffset = readInteger(Prop+0x4C)
Prop = executeCodeEx(0,nil,FindFProperty,Engine,{type = 4,value = "GameViewport"},7)
local ViewportOffset = readInteger(Prop+0x4C)
local ConsoleClass = readPointer(pEngine+ConsoleClassOffset)
local Viewport = readPointer(pEngine+ViewportOffset)
local FStaticConstructObjectParameters = allocateMemory(64)
writeQword(FStaticConstructObjectParameters,ConsoleClass)
writeQword(FStaticConstructObjectParameters+8,Viewport)
local Console = executeCodeEx(0,nil,StaticConstruct,FStaticConstructObjectParameters)
--local ViewportClass = readPointer(Viewport+0x10)
local ViewportClass = StaticFind("GameViewportClient")
Prop = executeCodeEx(0,nil,FindFProperty,ViewportClass,{type = 4,value = "ViewportConsole"})
local ViewportConsoleOffset = readInteger(Prop+0x4C)
writeQword(Viewport+ViewportConsoleOffset,Console)
deAlloc(p)
deAlloc(FStaticConstructObjectParameters)
[DISABLE]
88121
"Cheat Manager ( Enable In Main Menu )"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobPlayerControllerPost,Remnant2-Win64-Shipping.exe,83 8B B0 04 00 00 10 48 8D) // should be unique
alloc(newmem,$1000,aobPlayerControllerPost)
label(code)
label(return)
newmem:
code:
push rax
push rbx
push rcx
push rdx
push rbp
push rdi
push rsi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
sub rsp,70
lea rcx,[rsp+20]
mov rax,[rbx+400]
mov [rsp+20],rax
mov [rsp+28],rbx
xorps xmm0,xmm0
movups [rsp+30],xmm0
movups [rsp+40],xmm0
movups [rsp+50],xmm0
call aobStaticConstruct
mov [rbx+3F8],rax
add rsp,70
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rsi
pop rdi
pop rbp
pop rdx
pop rcx
pop rbx
pop rax
or dword ptr [rbx+000004B0],10
jmp return
aobPlayerControllerPost:
jmp newmem
nop 2
return:
registersymbol(aobPlayerControllerPost)
[DISABLE]
aobPlayerControllerPost:
db 83 8B B0 04 00 00 10
unregistersymbol(aobPlayerControllerPost)
dealloc(newmem)
88120
"Set Console-Key To F1"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local InputSettings = executeCodeEx(0,nil,Find,0,-1,{type = 4,value = "Default__InputSettings"},1)
if InputSettings == 0 then print("Error : InputSettings not found") error("inputsettings") return end
local InputSettingsClass = readPointer(InputSettings+0x10)
local InputSettingsKeysProperty = executeCodeEx(0,nil,FindFProperty,InputSettingsClass,{type = 4,value = "ConsoleKeys"},7)
local KeysOffset = readInteger(InputSettingsKeysProperty+0x4C)
local Keys = readPointer(InputSettings+KeysOffset)
local s = "F1"
local p = allocateMemory( 64 )
executeCodeEx( 0, nil, FName_FName, p, {type=4,value=s}, 1 )
local FName_F1 = readInteger(p)
writeInteger(Keys,FName_F1)
deAlloc(p)
[DISABLE]
88122
"Try Give Resource"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
-- Resources:
-- Material_Scraps_C
-- Material_Iron_C
-- Material_ForgedIron_C
-- Material_GalvanizedIron_C
-- Material_HardenedIron_C
-- Material_LumeniteCrystal_C
-- Material_LumeniteCorrupted_C
-- Material_RelicDust_C
-- Material_TomeOfKnowledge_C ( +1 trait point )
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("K2_AddItem")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PlayerPawn+0x10),{type = 4,value = "CachedInventory"},7)
local Inv = readPointer(PlayerPawn+readInteger(Prop+0x4C))
local szItem = inputQuery("Give Item Class|Amount","Example: Material_Scraps_C|100","")
if szItem == nil then error("Cancel") return end
local stringPart, numberPart = szItem:match("([^|]+)|([^|]+)")
local Amount = tonumber(numberPart)
if Amount == nil then print("Wrong Format") error("format") return end
local item = StaticFind(stringPart)
-- stop the exec if the class is not found = prevent crash
if item == 0 then print("Error: Item Class Not Found") error("noitem") return end
local p = allocateMemory(64)
writeQword(p,item)
writeInteger(p+8,Amount) -- Qty
writeInteger(p+0xC,0) -- ItemLevel
writeBytes(p+0x10,1) -- EItemNotifyReason::PickedUp
writeBytes(p+0x11,0) -- bAllowAutoEquip
executeCodeEx(0,nil,ObjectProcessEvent,Inv,func,p)
deAlloc(p)
[DISABLE]
88123
"+1 Trait Point"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("AddTraitPoints")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PlayerPawn+0x10),{type = 4,value = "Traits"},7)
local TraitsComponent = readPointer(PlayerPawn+readInteger(Prop+0x4C))
local p = allocateMemory(64)
writeInteger(p,1) -- Amount
writeBytes(p+4,1) -- BroadcastNotify
executeCodeEx(0,nil,ObjectProcessEvent,TraitsComponent,func,p)
deAlloc(p)
[DISABLE]
88124
"Refund Trait Points"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("RefundAllTraitPoints")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local p = allocateMemory(64)
executeCodeEx(0,nil,ObjectProcessEvent,PlayerPawn,func,p)
deAlloc(p)
[DISABLE]
88125
"Replenish All"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("ReplenishAllResources")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local p = allocateMemory(64)
executeCodeEx(0,nil,ObjectProcessEvent,PlayerPawn,func,p)
deAlloc(p)
[DISABLE]
88126
"Replenish Dragon Hearts"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("ReplenishResources")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local p = allocateMemory(64)
writeBytes(p+0x2,1)
executeCodeEx(0,nil,ObjectProcessEvent,PlayerPawn,func,p)
deAlloc(p)
[DISABLE]
88127
"Replenish Ammo"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("ReplenishResources")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local p = allocateMemory(64)
writeBytes(p+0x1,1)
executeCodeEx(0,nil,ObjectProcessEvent,PlayerPawn,func,p)
deAlloc(p)
[DISABLE]
88128
"Charge Mod"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local ObjectProcessEvent = getAddress("Object_ProcessEvent")
local func = StaticFind("Charge Mod")
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
local p = allocateMemory(64)
executeCodeEx(0,nil,ObjectProcessEvent,PlayerPawn,func,p)
deAlloc(p)
[DISABLE]
88149
"Get Current Weapon Stats"
FF8000
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local function SetDamage(Stats,StatID,dam)
local Stats = readPointer(Stats+0x128)
--printf("%x",Stats)
local Found = 0
for i=0,99 do
local ID = readInteger(Stats+i*4)
if ID == StatID then
--writeFloat((Stats+i*4)+0x8,dam)
local t = (Stats+i*4)+0x8
writeQword(StatsPtr+0x10,t)
Found = 1
end
end
if Found == 0 then
print("Error: Damage Stats not found") error("not found")
end
end
StatsPtr = getAddress("pWStats")
local s = "Damage"
local p = allocateMemory( 64 )
executeCodeEx( 0, nil, FName_FName, p, {type=4,value=s}, 1 )
local StatsName = readInteger(p)
deAlloc(p)
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
if PlayerPawn > 0 then
local pCurrentWeapon = executeCodeEx(0,nil,getAddress("aobGetCurrentRangedWeapon"),PlayerPawn)
if pCurrentWeapon == 0 then print("Error: No Weapon Found") error("no weapon") return end
writeQword(StatsPtr,pCurrentWeapon+0x6C0)
writeQword(StatsPtr+0x8,pCurrentWeapon+0x6B8)
local StatsComp = readPointer(pCurrentWeapon+0x540)
SetDamage(StatsComp,StatsName,fDamage)
end
[DISABLE]
88150
"Full Auto?"
0
Byte
pWStats
0
88151
"Fire-Rate"
0
Float
pWStats+8
0
88152
"Damage"
0
Float
pWStats+10
0
88131
"No Damage Fall Off At Range"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local GunfireSettings = FindObjectOfClass("GunfireSettings")
if GunfireSettings == 0 then print("Error: GunfireSettings not found") error("nullptr") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(GunfireSettings+0x10),{type = 4,value = "FalloffDamagePenalty"},7)
writeFloat(GunfireSettings+readInteger(Prop+0x4C),1)
[DISABLE]
local GunfireSettings = FindObjectOfClass("GunfireSettings")
if GunfireSettings == 0 then print("Error: GunfireSettings not found") error("nullptr") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(GunfireSettings+0x10),{type = 4,value = "FalloffDamagePenalty"},7)
writeFloat(GunfireSettings+readInteger(Prop+0x4C),0.2)
88132
"God Mode"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
if PlayerPawn == 0 then error("no pawn") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PlayerPawn+0x10),{type = 4,value = "God Mode"},7)
local GodOffset = readInteger(Prop+0x4C)
writeBytes(PlayerPawn+GodOffset,0x1)
[DISABLE]
local PC = GetLocalPlayerController()
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PC+0x10),{type = 4,value = "Pawn"},7)
local PlayerPawn = readPointer(PC+readInteger(Prop+0x4C))
if PlayerPawn == 0 then error("no pawn") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(PlayerPawn+0x10),{type = 4,value = "God Mode"},7)
local GodOffset = readInteger(Prop+0x4C)
writeBytes(PlayerPawn+GodOffset,0)
88133
"Disable Sway"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local GunfireSettings = FindObjectOfClass("GunfireSettings")
if GunfireSettings == 0 then print("Error: GunfireSettings not found") error("nullptr") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(GunfireSettings+0x10),{type = 4,value = "GlobalSwayScale"},7)
writeFloat(GunfireSettings+readInteger(Prop+0x4C),0)
[DISABLE]
local GunfireSettings = FindObjectOfClass("GunfireSettings")
if GunfireSettings == 0 then print("Error: GunfireSettings not found") error("nullptr") return end
local Prop = executeCodeEx(0,nil,FindFProperty,readPointer(GunfireSettings+0x10),{type = 4,value = "GlobalSwayScale"},7)
writeFloat(GunfireSettings+readInteger(Prop+0x4C),1)
88134
"No Recoil"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobApplyRecoil,Remnant2-WinGDK-Shipping.exe,48 8B C4 48 89 70 20 57 48 81 EC A0 00 00 00 48) // should be unique
aobApplyRecoil:
db C3
registersymbol(aobApplyRecoil)
[DISABLE]
aobApplyRecoil:
db 48
unregistersymbol(aobApplyRecoil)
88142
"Inf. Ammo Clip"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteClipFlag,Remnant2-WinGDK-Shipping.exe,40 38 B3 30 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteClipFlag)
label(code)
label(return)
newmem:
code:
or sil,1
mov byte ptr[rbx+C00],sil
cmp [rbx+00000C30],sil
jmp return
aobReadInfiniteClipFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteClipFlag)
[DISABLE]
aobReadInfiniteClipFlag:
db 40 38 B3 30 0C 00 00
unregistersymbol(aobReadInfiniteClipFlag)
dealloc(newmem)
88143
"Inf. Reserve Ammo"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteReserveFlag,Remnant2-WinGDK-Shipping.exe,40 38 BB 31 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteReserveFlag)
label(code)
label(return)
newmem:
code:
or dil,1
mov byte ptr[rbx+C31],dil
cmp [rbx+00000C31],dil
jmp return
aobReadInfiniteReserveFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteReserveFlag)
[DISABLE]
aobReadInfiniteReserveFlag:
db 40 38 BB 31 0C 00 00
unregistersymbol(aobReadInfiniteReserveFlag)
dealloc(newmem)
88118
"Patch Exec Flag"
Auto Assembler Script
define(address,aobCheckFlag)
define(bytes,F7 80 B0 00 00 00 00 02 00 00)
[ENABLE]
aobscanmodule(aobAllowCheats,$process,30 5F C3 CC CC CC 48 8B 42 20 33 C9 48 85 C0 0F 95 C1 48 03 C8 48 89 4A 20 41 C6 00 00) // should be unique
registersymbol(aobAllowCheats)
aobAllowCheats+1c:
db 01
[DISABLE]
aobAllowCheats+1c:
db 00
1337145323
"REMNANET 2 [ Gamepass Version"
00FFFF
1
1337145324
"xxxx Player Options xxxxx"
C080FF
1
1337145325
"GodMode team"
00FF00
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Team_OHK,Remnant2-WinGDK-Shipping.exe,0F 2F B7 90 08 00 00) // should be unique
alloc(newmem,$1000,Team_OHK)
label(code maoi)
label(return)
newmem:
cmp [rdi+68],00000002
//cmp [rdi+180],DB9FBA40
jne code
mov [maoi],rdi
mov [rdi+00001231],1
//mov [rdi+00000890],(float)1000001
jmp return
maoi:
dq 0
code:
comiss xmm6,[rdi+00000890]
jmp return
Team_OHK:
jmp newmem
nop 2
return:
registersymbol(Team_OHK maoi)
[DISABLE]
Team_OHK:
db 0F 2F B7 90 08 00 00
unregistersymbol(INJECT maoi)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F7D724
Remnant2-WinGDK-Shipping.exe+1F7D6FC: E8 FF B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D701: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D704: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1F7D71C
Remnant2-WinGDK-Shipping.exe+1F7D706: E9 FA 00 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D70B: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+1F7D70E: E8 ED B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D713: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D716: 0F 84 E9 00 00 00 - je Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D71C: 0F 29 74 24 70 - movaps [rsp+70],xmm6
Remnant2-WinGDK-Shipping.exe+1F7D721: 0F 57 F6 - xorps xmm6,xmm6
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F7D724: 0F 2F B7 90 08 00 00 - comiss xmm6,[rdi+00000890]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F7D72B: 0F 83 CF 00 00 00 - jae Remnant2-WinGDK-Shipping.exe+1F7D800
Remnant2-WinGDK-Shipping.exe+1F7D731: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D738: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D73F: 0F 29 7C 24 60 - movaps [rsp+60],xmm7
Remnant2-WinGDK-Shipping.exe+1F7D744: 44 0F 29 44 24 50 - movaps [rsp+50],xmm8
Remnant2-WinGDK-Shipping.exe+1F7D74A: FF 50 48 - call qword ptr [rax+48]
Remnant2-WinGDK-Shipping.exe+1F7D74D: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D754: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D75B: 0F 28 F8 - movaps xmm7,xmm0
Remnant2-WinGDK-Shipping.exe+1F7D75E: FF 50 50 - call qword ptr [rax+50]
}
1337145326
"->"
1
0
8 Bytes
maoi
1337145327
"current Health"
0
Float
maoi
890
1337145328
"current Health"
00:off
01:on
1
0
Byte
maoi
1231
1337145329
"Team GodMode 1 OHk [Not Safe for Boss fights]"
FF80FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Team_OHK,Remnant2-WinGDK-Shipping.exe,0F 2F B7 90 08 00 00) // should be unique
alloc(newmem,$1000,Team_OHK)
label(code maoi Pussy)
label(return)
newmem:
cmp [rdi+68],00000002
//cmp [rdi+180],DB9FBA40
jne Pussy
mov [maoi],rdi
mov [rdi+00001231],1
//mov [rdi+00000890],(float)1000001
jmp return
maoi:
dq 0
Pussy:
sub [rdi+00000890],(float)300000
mov [rdi+00000890],(float)0.00001
jmp return
code:
comiss xmm6,[rdi+00000890]
jmp return
Team_OHK:
jmp newmem
nop 2
return:
registersymbol(Team_OHK maoi Pussy)
[DISABLE]
Team_OHK:
db 0F 2F B7 90 08 00 00
unregistersymbol(INJECT maoi Pussy)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F7D724
Remnant2-WinGDK-Shipping.exe+1F7D6FC: E8 FF B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D701: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D704: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1F7D71C
Remnant2-WinGDK-Shipping.exe+1F7D706: E9 FA 00 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D70B: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+1F7D70E: E8 ED B2 ED 01 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1F7D713: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1F7D716: 0F 84 E9 00 00 00 - je Remnant2-WinGDK-Shipping.exe+1F7D805
Remnant2-WinGDK-Shipping.exe+1F7D71C: 0F 29 74 24 70 - movaps [rsp+70],xmm6
Remnant2-WinGDK-Shipping.exe+1F7D721: 0F 57 F6 - xorps xmm6,xmm6
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F7D724: 0F 2F B7 90 08 00 00 - comiss xmm6,[rdi+00000890]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F7D72B: 0F 83 CF 00 00 00 - jae Remnant2-WinGDK-Shipping.exe+1F7D800
Remnant2-WinGDK-Shipping.exe+1F7D731: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D738: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D73F: 0F 29 7C 24 60 - movaps [rsp+60],xmm7
Remnant2-WinGDK-Shipping.exe+1F7D744: 44 0F 29 44 24 50 - movaps [rsp+50],xmm8
Remnant2-WinGDK-Shipping.exe+1F7D74A: FF 50 48 - call qword ptr [rax+48]
Remnant2-WinGDK-Shipping.exe+1F7D74D: 48 8B 87 28 06 00 00 - mov rax,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D754: 48 8D 8F 28 06 00 00 - lea rcx,[rdi+00000628]
Remnant2-WinGDK-Shipping.exe+1F7D75B: 0F 28 F8 - movaps xmm7,xmm0
Remnant2-WinGDK-Shipping.exe+1F7D75E: FF 50 50 - call qword ptr [rax+50]
}
1337145330
"->"
1
0
8 Bytes
maoi
1337145331
"current Health"
0
00FFFF
Float
maoi
890
1337145332
"God Mode"
00:off
01:on
1
0
0000FF
Byte
maoi
1231
1337145333
"Map hack"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-12-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Map_hack,Remnant2-WinGDK-Shipping.exe,0F 2F 81 68 02 00 00) // should be unique
alloc(newmem,$1000,Map_hack)
registersymbol(Map_hack Enemys Team)
label(code Enemys Team)
label(return)
newmem:
//cmp [rcx+88],00000000
//cmp [rcx+8c],00000000//compare with offset
cmp [rcx+8c],00000100
//cmp [rcx+2d8],00000001
je Enemys
mov [Team],rcx//My guys
mov [rcx+00000268],(float)100001//Team gets health boost
//register restore//register restore
jmp return
Team:
dq 0
Enemys:
//sub [rcx+00000268],(float)1//subtraction to health
mov [rcx+00000268],(float)0.00001//Enemy gets health
sub [rcx+00000268],(float)1//subtraction to health
jmp return
code:
comiss xmm0,[rcx+00000268]
jmp return
Map_hack:
jmp newmem
nop 2
return:
registersymbol(Map_hack Enemys Team)
[DISABLE]
Map_hack:
db 0F 2F 81 68 02 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1F6C6B3
Remnant2-WinGDK-Shipping.exe+1F6C6A7: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A8: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6A9: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AA: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AB: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AC: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AD: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6AF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6B0: 0F 57 C0 - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1F6C6B3: 0F 2F 81 68 02 00 00 - comiss xmm0,[rcx+00000268]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1F6C6BA: 0F 92 C0 - setb al
Remnant2-WinGDK-Shipping.exe+1F6C6BD: C3 - ret
Remnant2-WinGDK-Shipping.exe+1F6C6BE: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6BF: CC - int 3
Remnant2-WinGDK-Shipping.exe+1F6C6C0: 48 8B C4 - mov rax,rsp
Remnant2-WinGDK-Shipping.exe+1F6C6C3: 48 89 58 10 - mov [rax+10],rbx
Remnant2-WinGDK-Shipping.exe+1F6C6C7: 48 89 70 18 - mov [rax+18],rsi
Remnant2-WinGDK-Shipping.exe+1F6C6CB: 48 89 78 20 - mov [rax+20],rdi
Remnant2-WinGDK-Shipping.exe+1F6C6CF: 55 - push rbp
Remnant2-WinGDK-Shipping.exe+1F6C6D0: 41 54 - push r12
}
1337145334
"No description"
1
0
8 Bytes
Team
1337145335
"xxxxx Crafting/upgrades options xxxxxxx"
FFFF80
1
1337145336
"Tax Return"
0000FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-29
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(buyfree,Remnant2-WinGDK-Shipping.exe,49 8B CF 89 42 2C E8 * * * * B0 01) // should be unique
alloc(newmem,$1000,buyfree)
label(code)
label(return)
newmem:
code:
add eax,999
mov [rdx+2C],eax
call Remnant2-WinGDK-Shipping.exe+20CC1C0
jmp return
buyfree+3:
jmp newmem
nop 3
return:
registersymbol(buyfree)
[DISABLE]
buyfree+3:
db 89 42 2C E8 CD 9D FF FF
unregistersymbol(buyfree)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+20D23EB
Remnant2-WinGDK-Shipping.exe+20D23D5: 41 5E - pop r14
Remnant2-WinGDK-Shipping.exe+20D23D7: 41 5D - pop r13
Remnant2-WinGDK-Shipping.exe+20D23D9: 41 5C - pop r12
Remnant2-WinGDK-Shipping.exe+20D23DB: 5F - pop rdi
Remnant2-WinGDK-Shipping.exe+20D23DC: C3 - ret
Remnant2-WinGDK-Shipping.exe+20D23DD: 8B 42 2C - mov eax,[rdx+2C]
Remnant2-WinGDK-Shipping.exe+20D23E0: 41 3B C5 - cmp eax,r13d
Remnant2-WinGDK-Shipping.exe+20D23E3: 7E 12 - jle Remnant2-WinGDK-Shipping.exe+20D23F7
Remnant2-WinGDK-Shipping.exe+20D23E5: 41 2B C5 - sub eax,r13d
Remnant2-WinGDK-Shipping.exe+20D23E8: 49 8B CF - mov rcx,r15
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+20D23EB: 89 42 2C - mov [rdx+2C],eax
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+20D23EE: E8 CD 9D FF FF - call Remnant2-WinGDK-Shipping.exe+20CC1C0
Remnant2-WinGDK-Shipping.exe+20D23F3: B0 01 - mov al,01
Remnant2-WinGDK-Shipping.exe+20D23F5: EB C9 - jmp Remnant2-WinGDK-Shipping.exe+20D23C0
Remnant2-WinGDK-Shipping.exe+20D23F7: 89 6A 2C - mov [rdx+2C],ebp
Remnant2-WinGDK-Shipping.exe+20D23FA: 33 D2 - xor edx,edx
Remnant2-WinGDK-Shipping.exe+20D23FC: 48 8B 4B 18 - mov rcx,[rbx+18]
Remnant2-WinGDK-Shipping.exe+20D2400: 48 83 C1 30 - add rcx,30
Remnant2-WinGDK-Shipping.exe+20D2404: E8 17 36 93 FE - call Remnant2-WinGDK-Shipping.exe+A05A20
Remnant2-WinGDK-Shipping.exe+20D2409: 48 39 6B 20 - cmp [rbx+20],rbp
Remnant2-WinGDK-Shipping.exe+20D240D: 74 0E - je Remnant2-WinGDK-Shipping.exe+20D241D
}
1337145337
"Give Trait Points"
FFFF80
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-29
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(T_points,Remnant2-WinGDK-Shipping.exe,8B B1 D4 00 00 00 48) // should be unique
alloc(newmem,$1000,T_points)
label(code Traits_p)
label(return)
newmem:
mov [Traits_p],rcx
jmp return
Traits_p:
dq 0
code:
mov esi,[rcx+000000D4]
jmp return
T_points:
jmp newmem
nop
return:
registersymbol(T_points Traits_p)
[DISABLE]
T_points:
db 8B B1 D4 00 00 00
unregistersymbol(T_points Traits_p)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+2122996
Remnant2-WinGDK-Shipping.exe+212297B: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297C: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297D: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297E: CC - int 3
Remnant2-WinGDK-Shipping.exe+212297F: CC - int 3
Remnant2-WinGDK-Shipping.exe+2122980: 48 89 5C 24 08 - mov [rsp+08],rbx
Remnant2-WinGDK-Shipping.exe+2122985: 48 89 74 24 10 - mov [rsp+10],rsi
Remnant2-WinGDK-Shipping.exe+212298A: 57 - push rdi
Remnant2-WinGDK-Shipping.exe+212298B: 48 83 EC 20 - sub rsp,20
Remnant2-WinGDK-Shipping.exe+212298F: 48 8B B9 90 00 00 00 - mov rdi,[rcx+00000090]
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+2122996: 8B B1 D4 00 00 00 - mov esi,[rcx+000000D4]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+212299C: 48 8B 07 - mov rax,[rdi]
Remnant2-WinGDK-Shipping.exe+212299F: 48 8B 98 D0 06 00 00 - mov rbx,[rax+000006D0]
Remnant2-WinGDK-Shipping.exe+21229A6: E8 D5 C3 F2 FF - call Remnant2-WinGDK-Shipping.exe+204ED80
Remnant2-WinGDK-Shipping.exe+21229AB: 48 8B D0 - mov rdx,rax
Remnant2-WinGDK-Shipping.exe+21229AE: 48 8B CF - mov rcx,rdi
Remnant2-WinGDK-Shipping.exe+21229B1: FF D3 - call rbx
Remnant2-WinGDK-Shipping.exe+21229B3: 48 8B D8 - mov rbx,rax
Remnant2-WinGDK-Shipping.exe+21229B6: 48 85 C0 - test rax,rax
Remnant2-WinGDK-Shipping.exe+21229B9: 74 29 - je Remnant2-WinGDK-Shipping.exe+21229E4
Remnant2-WinGDK-Shipping.exe+21229BB: E8 10 A8 01 00 - call Remnant2-WinGDK-Shipping.exe+213D1D0
}
1337145338
"p"
1
0
000000
8 Bytes
Traits_p
1337145339
"Set -> Amount Total Trait points"
4 Bytes
Traits_p
D4
1337145399
"Set Item Amount"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-12-07
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Mil,Remnant2-WinGDK-Shipping.exe,41 8B 47 2C 89 47 18) // should be unique
alloc(newmem,$1000,Mil)
label(code Milo)
label(return)
newmem:
mov [Milo],r15
//mov [Milo+18],99999
jmp return
Milo:
dq 0
code:
mov eax,[r15+2C]
mov [rdi+18],eax
jmp return
Mil:
jmp newmem
nop 2
return:
registersymbol(Mil Milo)
[DISABLE]
Mil:
db 41 8B 47 2C 89 47 18
unregistersymbol(Mil Milo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+211761B
Remnant2-WinGDK-Shipping.exe+21175FB: 89 47 14 - mov [rdi+14],eax
Remnant2-WinGDK-Shipping.exe+21175FE: 4D 85 FF - test r15,r15
Remnant2-WinGDK-Shipping.exe+2117601: 75 0C - jne Remnant2-WinGDK-Shipping.exe+211760F
Remnant2-WinGDK-Shipping.exe+2117603: 4C 8B BE E0 02 00 00 - mov r15,[rsi+000002E0]
Remnant2-WinGDK-Shipping.exe+211760A: 4D 85 FF - test r15,r15
Remnant2-WinGDK-Shipping.exe+211760D: 74 13 - je Remnant2-WinGDK-Shipping.exe+2117622
Remnant2-WinGDK-Shipping.exe+211760F: 85 ED - test ebp,ebp
Remnant2-WinGDK-Shipping.exe+2117611: 79 05 - jns Remnant2-WinGDK-Shipping.exe+2117618
Remnant2-WinGDK-Shipping.exe+2117613: 41 0F B6 6F 28 - movzx ebp,byte ptr [r15+28]
Remnant2-WinGDK-Shipping.exe+2117618: 89 6F 14 - mov [rdi+14],ebp
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+211761B: 41 8B 47 2C - mov eax,[r15+2C]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+211761F: 89 47 18 - mov [rdi+18],eax
Remnant2-WinGDK-Shipping.exe+2117622: 48 8D 54 24 48 - lea rdx,[rsp+48]
Remnant2-WinGDK-Shipping.exe+2117627: 48 8B CE - mov rcx,rsi
Remnant2-WinGDK-Shipping.exe+211762A: E8 61 1B 00 00 - call Remnant2-WinGDK-Shipping.exe+2119190
Remnant2-WinGDK-Shipping.exe+211762F: 48 8B 57 30 - mov rdx,[rdi+30]
Remnant2-WinGDK-Shipping.exe+2117633: 48 8B 08 - mov rcx,[rax]
Remnant2-WinGDK-Shipping.exe+2117636: 48 89 4F 30 - mov [rdi+30],rcx
Remnant2-WinGDK-Shipping.exe+211763A: 48 8B 48 08 - mov rcx,[rax+08]
Remnant2-WinGDK-Shipping.exe+211763E: 48 89 10 - mov [rax],rdx
Remnant2-WinGDK-Shipping.exe+2117641: 48 8B 57 38 - mov rdx,[rdi+38]
}
1337145400
"No description"
1
0
8 Bytes
Milo
1337145401
"Ammo"
4 Bytes
Milo
50
1337145402
"AmmoInClip"
4 Bytes
Milo
54
1337145403
"Level"
Byte
Milo
28
1337145404
"Quantity"
4 Bytes
Milo
2C
1337145405
"Mods.Mods"
1
0
8 Bytes
Milo
50
1337145406
"[0] ModSlot"
0
Byte
Milo
0
50
1337145407
"[0] Mod"
1
0
8 Bytes
Milo
8
50
1337145408
"[0] ModItemID"
0
4 Bytes
Milo
10
50
1337145409
"[0] ModLevel"
0
Byte
Milo
14
50
1337145410
"[1] ModSlot"
0
Byte
Milo
18
50
1337145411
"Mutator"
1
0
8 Bytes
Milo
20
50
1337145412
"MutatorID"
0
4 Bytes
Milo
28
50
1337145413
"MutatorLevel"
0
Byte
Milo
2C
50
1337145414
"Mods.Mods_size"
0
4 Bytes
Milo
58
1337145415
"Mods.Mods_sizes"
0
4 Bytes
Milo
5C
1337145416
"level"
4 Bytes
Milo
28
1337145417
"amount"
0
8 Bytes
Milo
2c
1337145357
"World Options"
00FF00
1
1337145358
"mAX dROP RATE"
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(dROP_RTAE,Remnant2-WinGDK-Shipping.exe,BF 63 00 00 00 66 0F 6E C0 0F 5B C0 F3 0F 59 C6 F3 0F 2C C0 3B C7) // should be unique
registersymbol(dROP_RTAE)
dROP_RTAE+05:
db 66 0F 57 C0
[DISABLE]
dROP_RTAE+05:
db 66 0F 6E C0
unregistersymbol(dROP_RTAE)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+2170080
Remnant2-WinGDK-Shipping.exe+2170059: C1 E8 09 - shr eax,09
Remnant2-WinGDK-Shipping.exe+217005C: 0D 00 00 80 3F - or eax,3F800000
Remnant2-WinGDK-Shipping.exe+2170061: 66 0F 6E C8 - movd xmm1,eax
Remnant2-WinGDK-Shipping.exe+2170065: F3 0F 5C CF - subss xmm1,xmm7
Remnant2-WinGDK-Shipping.exe+2170069: F3 41 0F 59 C8 - mulss xmm1,xmm8
Remnant2-WinGDK-Shipping.exe+217006E: F3 0F 2C F9 - cvttss2si edi,xmm1
Remnant2-WinGDK-Shipping.exe+2170072: EB 24 - jmp Remnant2-WinGDK-Shipping.exe+2170098
Remnant2-WinGDK-Shipping.exe+2170074: FF 15 6E 8E 2D 03 - call qword ptr [Remnant2-WinGDK-Shipping.exe+5448EE8]
Remnant2-WinGDK-Shipping.exe+217007A: 25 FF 7F 00 00 - and eax,00007FFF
Remnant2-WinGDK-Shipping.exe+217007F: BF - db BF
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+2170080: 63 00 - movsxd rax,dword ptr [rax]
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+2170082: 00 00 - add [rax],al
Remnant2-WinGDK-Shipping.exe+2170084: 66 0F 6E C0 - movd xmm0,eax
Remnant2-WinGDK-Shipping.exe+2170088: 0F 5B C0 - cvtdq2ps xmm0,xmm0
Remnant2-WinGDK-Shipping.exe+217008B: F3 0F 59 C6 - mulss xmm0,xmm6
Remnant2-WinGDK-Shipping.exe+217008F: F3 0F 2C C0 - cvttss2si eax,xmm0
Remnant2-WinGDK-Shipping.exe+2170093: 3B C7 - cmp eax,edi
Remnant2-WinGDK-Shipping.exe+2170095: 0F 4C F8 - cmovl edi,eax
Remnant2-WinGDK-Shipping.exe+2170098: 49 8B D5 - mov rdx,r13
Remnant2-WinGDK-Shipping.exe+217009B: 48 8B CE - mov rcx,rsi
Remnant2-WinGDK-Shipping.exe+217009E: FF C7 - inc edi
}
1337145359
"iNF mOD cHARGES"
FF80FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-11-30
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(mOD_CHARGES,Remnant2-WinGDK-Shipping.exe,40 2A C6 88 * * * 00 00 0F 85 * * 00 00 80 * * * 00 00 02) // should be unique
registersymbol(mOD_CHARGES)
mOD_CHARGES+1:
db 2C 00
[DISABLE]
mOD_CHARGES+1:
db 2A C6
unregistersymbol(mOD_CHARGES)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1D25783
Remnant2-WinGDK-Shipping.exe+1D25759: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1D2575C: 75 16 - jne Remnant2-WinGDK-Shipping.exe+1D25774
Remnant2-WinGDK-Shipping.exe+1D2575E: E9 ED 01 00 00 - jmp Remnant2-WinGDK-Shipping.exe+1D25950
Remnant2-WinGDK-Shipping.exe+1D25763: 48 8B CB - mov rcx,rbx
Remnant2-WinGDK-Shipping.exe+1D25766: E8 95 32 13 02 - call Remnant2-WinGDK-Shipping.exe+3E58A00
Remnant2-WinGDK-Shipping.exe+1D2576B: 83 F8 03 - cmp eax,03
Remnant2-WinGDK-Shipping.exe+1D2576E: 0F 84 DC 01 00 00 - je Remnant2-WinGDK-Shipping.exe+1D25950
Remnant2-WinGDK-Shipping.exe+1D25774: 0F B6 83 64 0C 00 00 - movzx eax,byte ptr [rbx+00000C64]
Remnant2-WinGDK-Shipping.exe+1D2577B: 3B C6 - cmp eax,esi
Remnant2-WinGDK-Shipping.exe+1D2577D: 0F 8C CD 01 00 00 - jl Remnant2-WinGDK-Shipping.exe+1D25950
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1D25783: 2C 00 - sub al,00
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1D25785: 90 - nop
Remnant2-WinGDK-Shipping.exe+1D25786: 88 83 64 0C 00 00 - mov [rbx+00000C64],al
Remnant2-WinGDK-Shipping.exe+1D2578C: 0F 85 B6 01 00 00 - jne Remnant2-WinGDK-Shipping.exe+1D25948
Remnant2-WinGDK-Shipping.exe+1D25792: 80 BB F0 0C 00 00 02 - cmp byte ptr [rbx+00000CF0],02
Remnant2-WinGDK-Shipping.exe+1D25799: 0F 85 A9 01 00 00 - jne Remnant2-WinGDK-Shipping.exe+1D25948
Remnant2-WinGDK-Shipping.exe+1D2579F: 4C 89 B4 24 00 01 00 00 - mov [rsp+00000100],r14
Remnant2-WinGDK-Shipping.exe+1D257A7: 48 8B CB - mov rcx,rbx
Remnant2-WinGDK-Shipping.exe+1D257AA: 0F 29 B4 24 C0 00 00 00 - movaps [rsp+000000C0],xmm6
Remnant2-WinGDK-Shipping.exe+1D257B2: E8 E9 1B 13 02 - call Remnant2-WinGDK-Shipping.exe+3E573A0
Remnant2-WinGDK-Shipping.exe+1D257B7: 8B 4D B3 - mov ecx,[rbp-4D]
}
1337145360
"Inf Buff Timer"
0080FF
Auto Assembler Script
{ Game : Remnant2-WinGDK-Shipping.exe
Version:
Date : 2023-08-25
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscanmodule(BUUF_LONGER,Remnant2-WinGDK-Shipping.exe,75 * * * * FF * * * 00 00 F3 0F 58 * * * 00 00 F3 0F 10) // should be unique
registersymbol(BUUF_LONGER)
BUUF_LONGER+0b:
db F3 0F 10
[DISABLE]
BUUF_LONGER+0b:
db F3 0F 58
unregistersymbol(BUUF_LONGER)
{
// ORIGINAL CODE - INJECTION POINT: Remnant2-WinGDK-Shipping.exe+1D4D5E9
Remnant2-WinGDK-Shipping.exe+1D4D5C0: 40 56 - push rsi
Remnant2-WinGDK-Shipping.exe+1D4D5C2: 48 83 EC 40 - sub rsp,40
Remnant2-WinGDK-Shipping.exe+1D4D5C6: 0F 29 74 24 30 - movaps [rsp+30],xmm6
Remnant2-WinGDK-Shipping.exe+1D4D5CB: 48 8B F1 - mov rsi,rcx
Remnant2-WinGDK-Shipping.exe+1D4D5CE: 0F 29 7C 24 20 - movaps [rsp+20],xmm7
Remnant2-WinGDK-Shipping.exe+1D4D5D3: 0F 28 F1 - movaps xmm6,xmm1
Remnant2-WinGDK-Shipping.exe+1D4D5D6: 0F 57 FF - xorps xmm7,xmm7
Remnant2-WinGDK-Shipping.exe+1D4D5D9: 0F 2F B9 80 03 00 00 - comiss xmm7,[rcx+00000380]
Remnant2-WinGDK-Shipping.exe+1D4D5E0: 73 57 - jae Remnant2-WinGDK-Shipping.exe+1D4D639
Remnant2-WinGDK-Shipping.exe+1D4D5E2: 80 B9 A4 03 00 00 00 - cmp byte ptr [rcx+000003A4],00
// ---------- INJECTING HERE ----------
Remnant2-WinGDK-Shipping.exe+1D4D5E9: 75 4E - jne Remnant2-WinGDK-Shipping.exe+1D4D639
// ---------- DONE INJECTING ----------
Remnant2-WinGDK-Shipping.exe+1D4D5EB: 48 8B 01 - mov rax,[rcx]
Remnant2-WinGDK-Shipping.exe+1D4D5EE: FF 90 60 03 00 00 - call qword ptr [rax+00000360]
Remnant2-WinGDK-Shipping.exe+1D4D5F4: F3 0F 58 86 9C 03 00 00 - addss xmm0,[rsi+0000039C]
Remnant2-WinGDK-Shipping.exe+1D4D5FC: F3 0F 10 8E 80 03 00 00 - movss xmm1,[rsi+00000380]
Remnant2-WinGDK-Shipping.exe+1D4D604: 0F 2F C1 - comiss xmm0,xmm1
Remnant2-WinGDK-Shipping.exe+1D4D607: F3 0F 11 86 9C 03 00 00 - movss [rsi+0000039C],xmm0
Remnant2-WinGDK-Shipping.exe+1D4D60F: 72 28 - jb Remnant2-WinGDK-Shipping.exe+1D4D639
Remnant2-WinGDK-Shipping.exe+1D4D611: 48 8B CE - mov rcx,rsi
Remnant2-WinGDK-Shipping.exe+1D4D614: F3 0F 11 8E 9C 03 00 00 - movss [rsi+0000039C],xmm1
Remnant2-WinGDK-Shipping.exe+1D4D61C: E8 EF B3 25 00 - call Remnant2-WinGDK-Shipping.exe+1FA8A10
}
1337145361
"Inf. Ammo Clip"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteClipFlag,Remnant2-WinGDK-Shipping.exe,40 38 B3 30 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteClipFlag)
label(code)
label(return)
newmem:
code:
or sil,1
mov byte ptr[rbx+C00],sil
cmp [rbx+00000C30],sil
jmp return
aobReadInfiniteClipFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteClipFlag)
[DISABLE]
aobReadInfiniteClipFlag:
db 40 38 B3 30 0C 00 00
unregistersymbol(aobReadInfiniteClipFlag)
dealloc(newmem)
1337145362
"Inf. Reserve Ammo"
Auto Assembler Script
[ENABLE]
aobscanmodule(aobReadInfiniteReserveFlag,Remnant2-WinGDK-Shipping.exe,40 38 BB 31 0C 00 00) // should be unique
alloc(newmem,$1000,aobReadInfiniteReserveFlag)
label(code)
label(return)
newmem:
code:
or dil,1
mov byte ptr[rbx+C31],dil
cmp [rbx+00000C31],dil
jmp return
aobReadInfiniteReserveFlag:
jmp newmem
nop 2
return:
registersymbol(aobReadInfiniteReserveFlag)
[DISABLE]
aobReadInfiniteReserveFlag:
db 40 38 BB 31 0C 00 00
unregistersymbol(aobReadInfiniteReserveFlag)
dealloc(newmem)
Hood_Man_Hook
7FF70DA04C28
PE_SEGMENTS
7FF778C10348
pWStats
1FEC40A0000