23 "Activate Mono" Auto Assembler Script [ENABLE] {$lua} LaunchMonoDataCollector() {$asm} [DISABLE] 1 "Get 999.999 Gold" Auto Assembler Script define(address,InventoryList.Init+29b) define(bytes,8B 70 50 33 C9) [ENABLE] assert(address,bytes) alloc(newmem,$1000,InventoryList.Init+29b) label(code) label(return) newmem: mov [rax+50],#999999 code: mov esi,[rax+50] xor ecx,ecx jmp return address: jmp newmem return: [DISABLE] address: db bytes // mov esi,[rax+50] // xor ecx,ecx dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+1788B9B // InventoryList.Init+29b "GameAssembly.dll"+1788B6D: 48 8B C8 - mov rcx,rax "GameAssembly.dll"+1788B70: E8 5B FE 23 00 - call GameAssembly.dll+19C89D0 "GameAssembly.dll"+1788B75: 48 85 C0 - test rax,rax "GameAssembly.dll"+1788B78: 0F 84 D9 01 00 00 - je GameAssembly.dll+1788D57 "GameAssembly.dll"+1788B7E: 4C 8B 00 - mov r8,[rax] "GameAssembly.dll"+1788B81: 48 8B C8 - mov rcx,rax "GameAssembly.dll"+1788B84: 49 8B 90 80 03 00 00 - mov rdx,[r8+00000380] "GameAssembly.dll"+1788B8B: 41 FF 90 78 03 00 00 - call qword ptr [r8+00000378] "GameAssembly.dll"+1788B92: 48 85 C0 - test rax,rax "GameAssembly.dll"+1788B95: 0F 84 B6 01 00 00 - je GameAssembly.dll+1788D51 // ---------- INJECTING HERE ---------- "GameAssembly.dll"+1788B9B: 8B 70 50 - mov esi,[rax+50] "GameAssembly.dll"+1788B9E: 33 C9 - xor ecx,ecx // ---------- DONE INJECTING ---------- "GameAssembly.dll"+1788BA0: E8 5B 9B 5C FF - call GameAssembly.dll+D52700 "GameAssembly.dll"+1788BA5: 80 3D 09 12 36 02 00 - cmp byte ptr [GameAssembly.dll+3AE9DB5],00 "GameAssembly.dll"+1788BAC: 48 8B E8 - mov rbp,rax "GameAssembly.dll"+1788BAF: 75 11 - jne GameAssembly.dll+1788BC2 "GameAssembly.dll"+1788BB1: B9 22 BE 00 00 - mov ecx,0000BE22 "GameAssembly.dll"+1788BB6: E8 F5 A6 87 FE - call GameAssembly.dll+32B0 "GameAssembly.dll"+1788BBB: C6 05 F3 11 36 02 01 - mov byte ptr [GameAssembly.dll+3AE9DB5],01 "GameAssembly.dll"+1788BC2: 48 8B 0D 8F EC 2A 02 - mov rcx,[GameAssembly.dll+3A37858] "GameAssembly.dll"+1788BC9: F6 81 27 01 00 00 02 - test byte ptr [rcx+00000127],02 "GameAssembly.dll"+1788BD0: 74 0E - je GameAssembly.dll+1788BE0 } 7 "Bandages and Potions from Inventory do not decrease when healing after combat" Auto Assembler Script define(address,Inventory.RemoveItem+11c) define(bytes,29 79 10 BA 00 00 00 00) [ENABLE] assert(address,bytes) alloc(newmem,$1000,Inventory.RemoveItem+11c) label(code) label(return) newmem: code: // sub [rcx+10],edi mov edx,0 jmp return address: jmp newmem nop 3 return: [DISABLE] address: db bytes // sub [rcx+10],edi // mov edx,System.CodeDom.Compiler.CodeGenerator.GenerateRemoveEventStatement dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+177DFFC // Inventory.RemoveItem+11c "GameAssembly.dll"+177DFD0: 48 85 ED - test rbp,rbp "GameAssembly.dll"+177DFD3: 0F 84 24 02 00 00 - je GameAssembly.dll+177E1FD "GameAssembly.dll"+177DFD9: 48 8B 6D 18 - mov rbp,[rbp+18] "GameAssembly.dll"+177DFDD: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+177DFE0: 0F 84 11 02 00 00 - je GameAssembly.dll+177E1F7 "GameAssembly.dll"+177DFE6: 3B 59 18 - cmp ebx,[rcx+18] "GameAssembly.dll"+177DFE9: 0F 83 F8 01 00 00 - jae GameAssembly.dll+177E1E7 "GameAssembly.dll"+177DFEF: 49 8B 0C 06 - mov rcx,[r14+rax] "GameAssembly.dll"+177DFF3: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+177DFF6: 0F 84 E5 01 00 00 - je GameAssembly.dll+177E1E1 // ---------- INJECTING HERE ---------- "GameAssembly.dll"+177DFFC: 29 79 10 - sub [rcx+10],edi "GameAssembly.dll"+177DFFF: BA 00 00 00 00 - mov edx,00000000 // ---------- DONE INJECTING ---------- "GameAssembly.dll"+177E004: 8B 41 10 - mov eax,[rcx+10] "GameAssembly.dll"+177E007: 0F 48 C2 - cmovs eax,edx "GameAssembly.dll"+177E00A: 89 41 10 - mov [rcx+10],eax "GameAssembly.dll"+177E00D: 85 C0 - test eax,eax "GameAssembly.dll"+177E00F: 7F 35 - jg GameAssembly.dll+177E046 "GameAssembly.dll"+177E011: 49 8B 4D 48 - mov rcx,[r13+48] "GameAssembly.dll"+177E015: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+177E018: 0F 84 A5 01 00 00 - je GameAssembly.dll+177E1C3 "GameAssembly.dll"+177E01E: 3B 59 18 - cmp ebx,[rcx+18] "GameAssembly.dll"+177E021: 0F 83 8C 01 00 00 - jae GameAssembly.dll+177E1B3 } 9 "900k EXP on the current level (select characters in skill-menu to fill value)" Auto Assembler Script define(address,MenuCharacterSelector.Refresh+4bb) define(bytes,8B 78 3C 33 C9) [ENABLE] assert(address,bytes) alloc(newmem,$1000,MenuCharacterSelector.Refresh+4bb) label(code) label(return) newmem: mov [rax+3c],#900000 code: mov edi,[rax+3C] xor ecx,ecx jmp return address: jmp newmem return: [DISABLE] address: db bytes // mov edi,[rax+3C] // xor ecx,ecx dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+15D1F2B // MenuCharacterSelector.Refresh+4bb "GameAssembly.dll"+15D1EF9: 48 8B C8 - mov rcx,rax "GameAssembly.dll"+15D1EFC: E8 3F DD AD FE - call GameAssembly.dll+AFC40 "GameAssembly.dll"+15D1F01: 48 8B 05 98 AA 4F 02 - mov rax,[GameAssembly.dll+3ACC9A0] "GameAssembly.dll"+15D1F08: 48 8B 80 B8 00 00 00 - mov rax,[rax+000000B8] "GameAssembly.dll"+15D1F0F: 48 8B 08 - mov rcx,[rax] "GameAssembly.dll"+15D1F12: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+15D1F15: 0F 84 F5 01 00 00 - je GameAssembly.dll+15D2110 "GameAssembly.dll"+15D1F1B: 48 8B 81 38 01 00 00 - mov rax,[rcx+00000138] "GameAssembly.dll"+15D1F22: 48 85 C0 - test rax,rax "GameAssembly.dll"+15D1F25: 0F 84 DF 01 00 00 - je GameAssembly.dll+15D210A // ---------- INJECTING HERE ---------- "GameAssembly.dll"+15D1F2B: 8B 78 3C - mov edi,[rax+3C] "GameAssembly.dll"+15D1F2E: 33 C9 - xor ecx,ecx // ---------- DONE INJECTING ---------- "GameAssembly.dll"+15D1F30: E8 7B B5 EF FF - call GameAssembly.dll+14CD4B0 "GameAssembly.dll"+15D1F35: 48 85 C0 - test rax,rax "GameAssembly.dll"+15D1F38: 0F 84 C6 01 00 00 - je GameAssembly.dll+15D2104 "GameAssembly.dll"+15D1F3E: 33 D2 - xor edx,edx "GameAssembly.dll"+15D1F40: 48 8B C8 - mov rcx,rax "GameAssembly.dll"+15D1F43: E8 58 B8 EF FF - call GameAssembly.dll+14CD7A0 "GameAssembly.dll"+15D1F48: 48 85 C0 - test rax,rax "GameAssembly.dll"+15D1F4B: 0F 84 AD 01 00 00 - je GameAssembly.dll+15D20FE "GameAssembly.dll"+15D1F51: 48 8B 48 60 - mov rcx,[rax+60] "GameAssembly.dll"+15D1F55: 48 8B 05 44 AA 4F 02 - mov rax,[GameAssembly.dll+3ACC9A0] } 18 "Available Skill Points do not decrease when spent" Auto Assembler Script define(address1,SkillTreePage.BuySelectedSkill+91) define(bytes1,FF 48 44 EB 23) define(address2,SkillTreePage.BuySelectedSkill+b6) define(bytes2,FF 48 48 48 8B 48 30) [ENABLE] assert(address1,bytes1) assert(address2,bytes2) address1: nop nop nop address2: nop nop nop [DISABLE] address1: db bytes1 address2: db bytes2 dealloc(newmem) { // SkillTreePage.BuySelectedSkill+91 // SkillTreePage.BuySelectedSkill+b6 "GameAssembly.dll"+15A8DD6: 84 C0 - test al,al "GameAssembly.dll"+15A8DD8: 49 0F 45 D0 - cmovne rdx,r8 "GameAssembly.dll"+15A8DDC: 48 85 D2 - test rdx,rdx "GameAssembly.dll"+15A8DDF: 74 25 - je GameAssembly.dll+15A8E06 "GameAssembly.dll"+15A8DE1: 48 8B 83 80 00 00 00 - mov rax,[rbx+00000080] "GameAssembly.dll"+15A8DE8: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8DEB: 0F 84 69 03 00 00 - je GameAssembly.dll+15A915A "GameAssembly.dll"+15A8DF1: 48 8B 80 38 01 00 00 - mov rax,[rax+00000138] "GameAssembly.dll"+15A8DF8: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8DFB: 0F 84 53 03 00 00 - je GameAssembly.dll+15A9154 // ---------- INJECTING HERE ---------- "GameAssembly.dll"+15A8E01: FF 48 44 - dec [rax+44] "GameAssembly.dll"+15A8E04: EB 23 - jmp GameAssembly.dll+15A8E29 // ---------- DONE INJECTING ---------- "GameAssembly.dll"+15A8E06: 48 8B 83 80 00 00 00 - mov rax,[rbx+00000080] "GameAssembly.dll"+15A8E0D: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8E10: 0F 84 D4 03 00 00 - je GameAssembly.dll+15A91EA "GameAssembly.dll"+15A8E16: 48 8B 80 38 01 00 00 - mov rax,[rax+00000138] "GameAssembly.dll"+15A8E1D: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8E20: 0F 84 BE 03 00 00 - je GameAssembly.dll+15A91E4 "GameAssembly.dll"+15A8E26: FF 48 48 - dec [rax+48] "GameAssembly.dll"+15A8E29: 48 8B 48 30 - mov rcx,[rax+30] "GameAssembly.dll"+15A8E2D: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+15A8E30: 74 07 - je GameAssembly.dll+15A8E39 - test rcx,rcx "GameAssembly.dll"+15A8DF8: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8DFB: 0F 84 53 03 00 00 - je GameAssembly.dll+15A9154 "GameAssembly.dll"+15A8E01: FF 48 44 - dec [rax+44] "GameAssembly.dll"+15A8E04: EB 23 - jmp GameAssembly.dll+15A8E29 "GameAssembly.dll"+15A8E06: 48 8B 83 80 00 00 00 - mov rax,[rbx+00000080] "GameAssembly.dll"+15A8E0D: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8E10: 0F 84 D4 03 00 00 - je GameAssembly.dll+15A91EA "GameAssembly.dll"+15A8E16: 48 8B 80 38 01 00 00 - mov rax,[rax+00000138] "GameAssembly.dll"+15A8E1D: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8E20: 0F 84 BE 03 00 00 - je GameAssembly.dll+15A91E4 // ---------- INJECTING HERE ---------- "GameAssembly.dll"+15A8E26: FF 48 48 - dec [rax+48] "GameAssembly.dll"+15A8E29: 48 8B 48 30 - mov rcx,[rax+30] // ---------- DONE INJECTING ---------- "GameAssembly.dll"+15A8E2D: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+15A8E30: 74 07 - je GameAssembly.dll+15A8E39 "GameAssembly.dll"+15A8E32: 33 D2 - xor edx,edx "GameAssembly.dll"+15A8E34: E8 07 82 6D 00 - call GameAssembly.dll+1C81040 "GameAssembly.dll"+15A8E39: 48 8B 83 90 00 00 00 - mov rax,[rbx+00000090] "GameAssembly.dll"+15A8E40: 48 89 74 24 38 - mov [rsp+38],rsi "GameAssembly.dll"+15A8E45: 83 CE FF - or esi,-01 "GameAssembly.dll"+15A8E48: 48 85 C0 - test rax,rax "GameAssembly.dll"+15A8E4B: 0F 84 8D 03 00 00 - je GameAssembly.dll+15A91DE "GameAssembly.dll"+15A8E51: 48 8B 48 40 - mov rcx,[rax+40] } 12 "Attribute Points do not decrease when spent" Auto Assembler Script define(address,SkillTreeStatsPanel.ChangeAddedPoints+ec) define(bytes,29 70 40 48 8B 48 30) [ENABLE] assert(address,bytes) address: nop nop nop [DISABLE] address: db bytes dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+16B809C // SkillTreeStatsPanel.ChangeAddedPoints+ec "GameAssembly.dll"+16B8071: E8 3A E8 B8 00 - call GameAssembly.dll+22468B0 "GameAssembly.dll"+16B8076: 48 85 C0 - test rax,rax "GameAssembly.dll"+16B8079: 0F 84 B5 00 00 00 - je GameAssembly.dll+16B8134 "GameAssembly.dll"+16B807F: 49 8B D6 - mov rdx,r14 "GameAssembly.dll"+16B8082: 48 8B C8 - mov rcx,rax "GameAssembly.dll"+16B8085: E8 66 96 95 FE - call GameAssembly.dll+116F0 "GameAssembly.dll"+16B808A: 01 30 - add [rax],esi "GameAssembly.dll"+16B808C: 48 8B 87 38 01 00 00 - mov rax,[rdi+00000138] "GameAssembly.dll"+16B8093: 48 85 C0 - test rax,rax "GameAssembly.dll"+16B8096: 0F 84 92 00 00 00 - je GameAssembly.dll+16B812E // ---------- INJECTING HERE ---------- "GameAssembly.dll"+16B809C: 29 70 40 - sub [rax+40],esi "GameAssembly.dll"+16B809F: 48 8B 48 30 - mov rcx,[rax+30] // ---------- DONE INJECTING ---------- "GameAssembly.dll"+16B80A3: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+16B80A6: 74 07 - je GameAssembly.dll+16B80AF "GameAssembly.dll"+16B80A8: 33 D2 - xor edx,edx "GameAssembly.dll"+16B80AA: E8 C1 E7 5F 00 - call GameAssembly.dll+1CB6870 "GameAssembly.dll"+16B80AF: 48 8B 8F E0 00 00 00 - mov rcx,[rdi+000000E0] "GameAssembly.dll"+16B80B6: 48 85 C9 - test rcx,rcx "GameAssembly.dll"+16B80B9: 74 6D - je GameAssembly.dll+16B8128 "GameAssembly.dll"+16B80BB: 44 8B 84 24 80 00 00 00 - mov r8d,[rsp+00000080] "GameAssembly.dll"+16B80C3: 45 33 C9 - xor r9d,r9d "GameAssembly.dll"+16B80C6: 44 03 C6 - add r8d,esi } 22 "Weight frozen to 11" Auto Assembler Script define(address,Inventory.set_CurrentWeight+19) define(bytes,F3 0F 11 49 54) [ENABLE] assert(address,bytes) alloc(newmem,$1000,Inventory.set_CurrentWeight+19) alloc(number,4) label(code) label(return) number: dd (float)11.0 newmem: movss xmm1,[number] movss xmm6,[number] code: movss [rcx+54],xmm1 jmp return address: jmp newmem return: [DISABLE] address: db bytes // movss [rcx+54],xmm1 dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+177D869 // Inventory.set_CurrentWeight+19 "GameAssembly.dll"+177D84D: CC - int 3 "GameAssembly.dll"+177D84E: CC - int 3 "GameAssembly.dll"+177D84F: CC - int 3 "GameAssembly.dll"+177D850: 40 53 - push rbx "GameAssembly.dll"+177D852: 48 83 EC 30 - sub rsp,30 "GameAssembly.dll"+177D856: 0F 57 C0 - xorps xmm0,xmm0 "GameAssembly.dll"+177D859: 0F 29 74 24 20 - movaps [rsp+20],xmm6 "GameAssembly.dll"+177D85E: 0F 2F C1 - comiss xmm0,xmm1 "GameAssembly.dll"+177D861: 48 8B D9 - mov rbx,rcx "GameAssembly.dll"+177D864: F3 0F 10 71 54 - movss xmm6,[rcx+54] // ---------- INJECTING HERE ---------- "GameAssembly.dll"+177D869: F3 0F 11 49 54 - movss [rcx+54],xmm1 // ---------- DONE INJECTING ---------- "GameAssembly.dll"+177D86E: 76 07 - jna GameAssembly.dll+177D877 "GameAssembly.dll"+177D870: C7 41 54 00 00 00 00 - mov [rcx+54],00000000 "GameAssembly.dll"+177D877: 33 D2 - xor edx,edx "GameAssembly.dll"+177D879: E8 92 FE FF FF - call GameAssembly.dll+177D710 "GameAssembly.dll"+177D87E: 48 85 C0 - test rax,rax "GameAssembly.dll"+177D881: 74 47 - je GameAssembly.dll+177D8CA "GameAssembly.dll"+177D883: F3 0F 2C CE - cvttss2si ecx,xmm6 "GameAssembly.dll"+177D887: 3B 48 2C - cmp ecx,[rax+2C] "GameAssembly.dll"+177D88A: 7D 2D - jnl GameAssembly.dll+177D8B9 "GameAssembly.dll"+177D88C: F3 0F 10 73 54 - movss xmm6,[rbx+54] } 20 "Randomia-Bar is always full" Auto Assembler Script define(address,RandomiaGauge.AddValue+de) define(bytes,01 6B 2C 8B EF) [ENABLE] assert(address,bytes) alloc(newmem,$1000,RandomiaGauge.AddValue+de) label(code) label(return) newmem: mov [rbx+2c],#100 code: add [rbx+2C],ebp mov ebp,edi jmp return address: jmp newmem return: [DISABLE] address: db bytes // add [rbx+2C],ebp // mov ebp,edi dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+167413E // RandomiaGauge.AddValue+de "GameAssembly.dll"+167411D: 48 85 C0 - test rax,rax "GameAssembly.dll"+1674120: 0F 84 8D 01 00 00 - je GameAssembly.dll+16742B3 "GameAssembly.dll"+1674126: 8B 4B 30 - mov ecx,[rbx+30] "GameAssembly.dll"+1674129: 33 D2 - xor edx,edx "GameAssembly.dll"+167412B: 89 48 14 - mov [rax+14],ecx "GameAssembly.dll"+167412E: 48 89 7C 24 38 - mov [rsp+38],rdi "GameAssembly.dll"+1674133: 33 FF - xor edi,edi "GameAssembly.dll"+1674135: 89 78 10 - mov [rax+10],edi "GameAssembly.dll"+1674138: 8B 4B 2C - mov ecx,[rbx+2C] "GameAssembly.dll"+167413B: 89 48 18 - mov [rax+18],ecx // ---------- INJECTING HERE ---------- "GameAssembly.dll"+167413E: 01 6B 2C - add [rbx+2C],ebp "GameAssembly.dll"+1674141: 8B EF - mov ebp,edi // ---------- DONE INJECTING ---------- "GameAssembly.dll"+1674143: 8B 4B 2C - mov ecx,[rbx+2C] "GameAssembly.dll"+1674146: 01 48 1C - add [rax+1C],ecx "GameAssembly.dll"+1674149: 48 8B CB - mov rcx,rbx "GameAssembly.dll"+167414C: E8 1F DD FF FF - call GameAssembly.dll+1671E70 "GameAssembly.dll"+1674151: 48 85 C0 - test rax,rax "GameAssembly.dll"+1674154: 0F 84 1D 01 00 00 - je GameAssembly.dll+1674277 "GameAssembly.dll"+167415A: 66 0F 1F 44 00 00 - nop word ptr [rax+rax+00] "GameAssembly.dll"+1674160: 48 8B 40 28 - mov rax,[rax+28] "GameAssembly.dll"+1674164: 48 85 C0 - test rax,rax "GameAssembly.dll"+1674167: 0F 84 40 01 00 00 - je GameAssembly.dll+16742AD }