52
"Compact View Mode"
Auto Assembler Script
[ENABLE]
{$lua}
--Make parts of the main form invisible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), false)
control_setVisible(wincontrol_getControl(controlMainForm,2), false)
control_setVisible(wincontrol_getControl(controlMainForm,3), false)
[DISABLE]
{$lua}
--Make parts of the main form visible.
controlMainForm = getMainForm()
control_setVisible(wincontrol_getControl(controlMainForm,0), true)
control_setVisible(wincontrol_getControl(controlMainForm,2), true)
control_setVisible(wincontrol_getControl(controlMainForm,3), true)
68
"-----"
1
2
"Find CharacterController Stats"
Auto Assembler Script
///Current health is a float and the game reads it in the pause menu too.
//It's rounded in the pause menu so you have to scan between and such.
[ENABLE]
aobscanmodule(readhealth,GameAssembly.dll,22 48 8B 13 48 8B CB F3 0F 10 B3 88 01 00 00) // should be unique
alloc(newmem,$1000,readhealth)
label(code)
label(return)
globalalloc(_charactercontroller,8)
newmem:
code:
push rax //Push a register to the stack to free it for use.
mov rax,_charactercontroller //Copy our allocated address into it.
mov [rax],rbx //Copy our desired value into where the register is pointing.
pop rax //Restore the value of the register and pretend nothing happened.
movss xmm6,[rbx+00000188]
jmp return
readhealth+07:
jmp newmem
nop 3
return:
registersymbol(readhealth)
[DISABLE]
readhealth+07:
db F3 0F 10 B3 88 01 00 00
unregistersymbol(readhealth)
unregistersymbol(_charactercontroller)
dealloc(newmem)
dealloc(_charactercontroller)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+32E3C42
GameAssembly.dll+32E3C1F: 48 8B CB - mov rcx,rbx
GameAssembly.dll+32E3C22: 48 8B 82 18 04 00 00 - mov rax,[rdx+00000418]
GameAssembly.dll+32E3C29: 48 8B 92 20 04 00 00 - mov rdx,[rdx+00000420]
GameAssembly.dll+32E3C30: FF D0 - call rax
GameAssembly.dll+32E3C32: 0F 57 F6 - xorps xmm6,xmm6
GameAssembly.dll+32E3C35: 0F 2E C6 - ucomiss xmm0,xmm6
GameAssembly.dll+32E3C38: 7A 02 - jp GameAssembly.dll+32E3C3C
GameAssembly.dll+32E3C3A: 74 22 - je GameAssembly.dll+32E3C5E
GameAssembly.dll+32E3C3C: 48 8B 13 - mov rdx,[rbx]
GameAssembly.dll+32E3C3F: 48 8B CB - mov rcx,rbx
// ---------- INJECTING HERE ----------
GameAssembly.dll+32E3C42: F3 0F 10 B3 88 01 00 00 - movss xmm6,[rbx+00000188]
// ---------- DONE INJECTING ----------
GameAssembly.dll+32E3C4A: 48 8B 82 18 04 00 00 - mov rax,[rdx+00000418]
GameAssembly.dll+32E3C51: 48 8B 92 20 04 00 00 - mov rdx,[rdx+00000420]
GameAssembly.dll+32E3C58: FF D0 - call rax
GameAssembly.dll+32E3C5A: F3 0F 5E F0 - divss xmm6,xmm0
GameAssembly.dll+32E3C5E: 48 85 FF - test rdi,rdi
GameAssembly.dll+32E3C61: 74 1D - je GameAssembly.dll+32E3C80
GameAssembly.dll+32E3C63: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+32E3C66: 0F 28 CE - movaps xmm1,xmm6
GameAssembly.dll+32E3C69: 48 8B CF - mov rcx,rdi
GameAssembly.dll+32E3C6C: 48 8B 5C 24 40 - mov rbx,[rsp+40]
}
11
"Base Address"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]
114
"_playerStats"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+178
129
"Max Health"
0
Float
[_charactercontroller]+178
10
80
143
"Max Health (Egg)"
0
Float
[_charactercontroller]+178
14
80
126
"Recovery"
0
000080
Float
[_charactercontroller]+178
10
68
144
"Recovery (Egg)"
0
000080
Float
[_charactercontroller]+178
14
68
124
"Armor"
0
Float
[_charactercontroller]+178
10
58
142
"Armor (Egg)"
0
Float
[_charactercontroller]+178
14
58
118
"Move Speed"
0
Float
[_charactercontroller]+178
10
28
145
"Move Speed (Egg)"
0
Float
[_charactercontroller]+178
14
28
138
"-----"
1
115
"Might (Power)"
0
008000
Float
[_charactercontroller]+178
10
10
146
"Might (Power) (Egg)"
0
008000
Float
[_charactercontroller]+178
14
10
117
"Speed"
0
004080
Float
[_charactercontroller]+178
10
20
147
"Speed (Egg)"
0
004080
Float
[_charactercontroller]+178
14
20
121
"Duration"
0
008080
Float
[_charactercontroller]+178
10
40
148
"Duration (Egg)"
0
008080
Float
[_charactercontroller]+178
14
40
116
"Area"
0
004080
Float
[_charactercontroller]+178
10
18
149
"Area (Egg)"
0
004080
Float
[_charactercontroller]+178
14
18
139
"-----"
1
122
"Cooldown (1+value=)"
0
000080
Float
[_charactercontroller]+178
10
48
150
"Cooldown (1+value=) (Egg)"
0
000080
Float
[_charactercontroller]+178
14
48
123
"Amount"
0
800000
Float
[_charactercontroller]+178
10
50
151
"Amount (Egg)"
0
800000
Float
[_charactercontroller]+178
14
50
133
"Revival"
0
004080
Double
[_charactercontroller]+178
10
A0
152
"Revival (Egg)"
0
004080
Double
[_charactercontroller]+178
18
A0
134
"Magnet"
0
Float
[_charactercontroller]+178
10
88
196
"Magnet (Egg)"
0
Float
[_charactercontroller]+178
14
88
140
"-----"
1
120
"Luck"
0
008000
Float
[_charactercontroller]+178
10
38
153
"Luck (Egg)"
0
008000
Float
[_charactercontroller]+178
14
38
119
"Growth"
0
008080
Float
[_charactercontroller]+178
10
30
154
"Growth (Egg)"
0
008080
Float
[_charactercontroller]+178
14
30
125
"Greed"
0
Float
[_charactercontroller]+178
10
60
155
"Greed (Egg)"
0
Float
[_charactercontroller]+178
14
60
131
"Curse"
0
800080
Float
[_charactercontroller]+178
10
90
156
"Curse (Egg)"
0
800080
Float
[_charactercontroller]+178
14
90
141
"-----"
1
127
"Reroll"
0
Float
[_charactercontroller]+178
10
70
157
"Reroll (Egg)"
0
Float
[_charactercontroller]+178
14
70
128
"Skip"
0
Float
[_charactercontroller]+178
10
78
158
"Skip (Egg)"
0
Float
[_charactercontroller]+178
14
78
132
"Banish"
0
Float
[_charactercontroller]+178
10
98
159
"Banish (Egg)"
0
Float
[_charactercontroller]+178
14
98
209
"-----"
1
207
"Shroud"
0
808000
Float
[_charactercontroller]+160
A8
210
"Shields"
0
808000
Float
[_charactercontroller]+160
AC
211
"Charm"
0
808000
4 Bytes
[_charactercontroller]+160
B0
212
"Defang"
0
808000
Float
[_charactercontroller]+160
B4
107
"Invincibility (Seconds)"
0
Float
[_charactercontroller]+114
111
"HP"
0
Float
[_charactercontroller]+188
113
"Level"
0
4 Bytes
[_charactercontroller]+18c
4
"EXP"
0
Float
[_charactercontroller]+19c
161
"_playeroptions->_config"
0
C0C0C0
Binary
0
1
0
[_charactercontroller]+70
58
175
"Coins"
0
Float
[_charactercontroller]+70
70
50
172
"RunCoins"
0
Float
[_charactercontroller]+70
74
50
184
"Enemies Killed"
0
4 Bytes
[_charactercontroller]+70
78
50
185
"LifetimeCoins"
0
4 Bytes
[_charactercontroller]+70
8C
50
186
"TotalCoins"
0
4 Bytes
[_charactercontroller]+70
90
50
173
"BeginnersLuck"
0
4 Bytes
[_charactercontroller]+70
94
50
174
"Set to 5 for guaranteed 5-item chests."
008000
1
198
"OwO"
0
Binary
0
1
0
[_charactercontroller]+70
AC
50
214
"CheatCodeUsed"
0
Binary
0
1
0
[_charactercontroller]+70
E4
50
199
"ShowPickups"
0
Binary
0
1
0
[_charactercontroller]+70
F8
50
200
"ShowSmallMapIcons"
0
Binary
0
1
0
[_charactercontroller]+70
F9
50
202
"maxWeaponCount"
0
4 Bytes
[_charactercontroller]+20c
206
"maxAccessoryCount"
0
4 Bytes
[_charactercontroller]+210
215
"maxWeaponBonus"
0
4 Bytes
[_charactercontroller]+214
216
"maxAccessoryBonus"
0
4 Bytes
[_charactercontroller]+218
205
"AlwaysCoinBag"
0
Binary
0
1
0
[_charactercontroller]+288
203
"AlwaysRoast"
0
Binary
0
1
0
[_charactercontroller]+289
204
"AlwaysRandomLimitBreak"
0
Binary
0
1
0
[_charactercontroller]+28A
135
"-----"
1
65
"Find Timer"
Auto Assembler Script
//Timer is a float, seconds you see.
[ENABLE]
aobscanmodule(readtimer,GameAssembly.dll,F3 0F 10 B0 00 03 00 00 48 85) // should be unique
alloc(newmem,$1000,readtimer)
label(code)
label(return)
globalalloc(_timerbase,8)
newmem:
code:
push rbx //Push a register to the stack to free it for use.
mov rbx,_timerbase //Copy our allocated address into it.
mov [rbx],rax //Copy our desired value into where rbx is pointing.
pop rbx //Restore the value of rbx and pretend nothing happened.
movss xmm6,[rax+00000300]
jmp return
readtimer:
jmp newmem
nop 3
return:
registersymbol(readtimer)
[DISABLE]
readtimer:
db F3 0F 10 B0 00 03 00 00
unregistersymbol(readtimer)
unregistersymbol(_timerbase)
dealloc(newmem)
dealloc(_timerbase)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+33D5B6C
GameAssembly.dll+33D5B36: 48 89 B4 24 98 00 00 00 - mov [rsp+00000098],rsi
GameAssembly.dll+33D5B3E: 48 8B CF - mov rcx,rdi
GameAssembly.dll+33D5B41: 0F 29 74 24 70 - movaps [rsp+70],xmm6
GameAssembly.dll+33D5B46: E8 85 E6 44 00 - call VampireSurvivors.UI.BaseUIPage.Update
GameAssembly.dll+33D5B4B: 48 8B 05 A6 E3 32 01 - mov rax,[GameAssembly.dll+4703EF8]
GameAssembly.dll+33D5B52: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
GameAssembly.dll+33D5B59: 48 8B 01 - mov rax,[rcx]
GameAssembly.dll+33D5B5C: 48 85 C0 - test rax,rax
GameAssembly.dll+33D5B5F: 0F 84 95 02 00 00 - je GameAssembly.dll+33D5DFA
GameAssembly.dll+33D5B65: 48 8B 8F 58 01 00 00 - mov rcx,[rdi+00000158]
// ---------- INJECTING HERE ----------
GameAssembly.dll+33D5B6C: F3 0F 10 B0 00 03 00 00 - movss xmm6,[rax+00000300]
// ---------- DONE INJECTING ----------
GameAssembly.dll+33D5B74: 48 85 C9 - test rcx,rcx
GameAssembly.dll+33D5B77: 0F 84 7D 02 00 00 - je GameAssembly.dll+33D5DFA
GameAssembly.dll+33D5B7D: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+33D5B80: 33 D2 - xor edx,edx
GameAssembly.dll+33D5B82: E8 D9 1A 53 FE - call System.Text.StringBuilder.set_Length
GameAssembly.dll+33D5B87: 48 8B B7 58 01 00 00 - mov rsi,[rdi+00000158]
GameAssembly.dll+33D5B8E: 0F 28 C6 - movaps xmm0,xmm6
GameAssembly.dll+33D5B91: F3 0F 5E 05 7F 09 F7 00 - divss xmm0,[GameAssembly.dll+4346518]
GameAssembly.dll+33D5B99: E8 2A C8 0C FD - call GameAssembly.dll+4A23C8
GameAssembly.dll+33D5B9E: 48 8B 0D 6B E9 2F 01 - mov rcx,[GameAssembly.dll+46D4510]
}
66
"Seconds"
0
Float
[_timerbase]+300
67
"-----"
1
"pmain.dll"+7297F
------------------1
"pmain.dll"+72991
------------------2