24
"Player"
FF7171
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-25
*/
[ENABLE]
aobscanmodule(aob_PlayerCoordsHook,GhostOfTsushima.exe,0F 5C 81 20 01 00 00 0F 59 D1 0F 58 D1 0F 59 D0 0F 11 91 40 02 00 00 41)
registersymbol(aob_PlayerCoordsHook pbase tpf savef)
alloc(newmem_PlayerCoordsHook,1024,GhostOfTsushima.exe)
label(return_PlayerCoordsHook)
alloc(pbase,8,aob_PlayerCoordsHook)
alloc(savef,8,aob_PlayerCoordsHook)
alloc(tpf,8,aob_PlayerCoordsHook)
newmem_PlayerCoordsHook:
cmp [rcx+8],1
je @f
mov [pbase],rcx
@@:
subps xmm0,[rcx+00000120]
jmp return_PlayerCoordsHook
pbase:
dd 00
savef:
db 00
tpf:
db 00
aob_PlayerCoordsHook:
jmp newmem_PlayerCoordsHook
nop 2
return_PlayerCoordsHook:
{$lua}
if syntaxcheck then return end
local savedx = 0
local savedy = 0
local savedz = 0
local function fc_loop()
while fc_loop_running
do
-- do whatever here
synchronize(function()
local saveflag = readByte('savef')
local tpf = readByte('tpf')
if(saveflag == 1)then
savedx = readFloat('[pbase]+120')
savedy = readFloat('[pbase]+124')
savedz = readFloat('[pbase]+128')
writeByte('savef',0)
--ShowMessage('Saved X: ' + savedx)
end
if(tpf == 1)then
writeFloat('[pbase]+120',savedx)
writeFloat('[pbase]+124',savedy)
writeFloat('[pbase]+128',savedz)
writeByte('tpf',0)
end
end)
sleep(200) -- thread sleep time
end
end
fc_loop_running = true
fc_thread = createThread(fc_loop)
{$asm}
[DISABLE]
aob_PlayerCoordsHook:
db 0F 5C 81 20 01 00 00
unregistersymbol(*)
dealloc(*)
{$lua}
if syntaxcheck then return end
fc_loop_running = false
fc_thread.terminate()
fc_thread = nil
{$asm}
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+874615
GhostOfTsushima.exe+8745C2: 0F 59 D0 - mulps xmm2,xmm0
GhostOfTsushima.exe+8745C5: 0F 11 91 40 02 00 00 - movups [rcx+00000240],xmm2
GhostOfTsushima.exe+8745CC: 0F 11 91 00 02 00 00 - movups [rcx+00000200],xmm2
GhostOfTsushima.exe+8745D3: 0F 10 02 - movups xmm0,[rdx]
GhostOfTsushima.exe+8745D6: 0F 11 81 20 02 00 00 - movups [rcx+00000220],xmm0
GhostOfTsushima.exe+8745DD: C3 - ret
GhostOfTsushima.exe+8745DE: CC - int 3
GhostOfTsushima.exe+8745DF: CC - int 3
GhostOfTsushima.exe+8745E0: 80 B9 48 01 00 00 01 - cmp byte ptr [rcx+00000148],01
GhostOfTsushima.exe+8745E7: 75 0A - jne GhostOfTsushima.exe+8745F3
GhostOfTsushima.exe+8745E9: F3 0F 10 05 C7 B6 C0 00 - movss xmm0,[GhostOfTsushima.AmdPowerXpressRequestHighPerformance+5B14]
GhostOfTsushima.exe+8745F1: EB 08 - jmp GhostOfTsushima.exe+8745FB
GhostOfTsushima.exe+8745F3: F3 0F 10 05 9D B6 C0 00 - movss xmm0,[GhostOfTsushima.AmdPowerXpressRequestHighPerformance+5AF4]
GhostOfTsushima.exe+8745FB: 0F C6 C0 00 - shufps xmm0,xmm0,00
GhostOfTsushima.exe+8745FF: 0F 57 D2 - xorps xmm2,xmm2
GhostOfTsushima.exe+874602: 0F 53 C8 - rcpps xmm1,xmm0
GhostOfTsushima.exe+874605: 0F 59 C1 - mulps xmm0,xmm1
GhostOfTsushima.exe+874608: 0F 5C 05 D1 C8 87 00 - subps xmm0,[GhostOfTsushima.D3D12SDKVersion+63B0]
GhostOfTsushima.exe+87460F: 0F 5C D0 - subps xmm2,xmm0
GhostOfTsushima.exe+874612: 0F 10 02 - movups xmm0,[rdx]
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+874615: 0F 5C 81 20 01 00 00 - subps xmm0,[rcx+00000120]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+87461C: 0F 59 D1 - mulps xmm2,xmm1
GhostOfTsushima.exe+87461F: 0F 58 D1 - addps xmm2,xmm1
GhostOfTsushima.exe+874622: 0F 59 D0 - mulps xmm2,xmm0
GhostOfTsushima.exe+874625: 0F 11 91 40 02 00 00 - movups [rcx+00000240],xmm2
GhostOfTsushima.exe+87462C: 41 0F 10 00 - movups xmm0,[r8]
GhostOfTsushima.exe+874630: 0F 11 81 00 02 00 00 - movups [rcx+00000200],xmm0
GhostOfTsushima.exe+874637: 0F 10 0A - movups xmm1,[rdx]
GhostOfTsushima.exe+87463A: 0F 11 89 20 02 00 00 - movups [rcx+00000220],xmm1
GhostOfTsushima.exe+874641: C3 - ret
GhostOfTsushima.exe+874642: CC - int 3
GhostOfTsushima.exe+874643: CC - int 3
GhostOfTsushima.exe+874644: CC - int 3
GhostOfTsushima.exe+874645: CC - int 3
GhostOfTsushima.exe+874646: CC - int 3
GhostOfTsushima.exe+874647: CC - int 3
GhostOfTsushima.exe+874648: CC - int 3
GhostOfTsushima.exe+874649: CC - int 3
GhostOfTsushima.exe+87464A: CC - int 3
GhostOfTsushima.exe+87464B: CC - int 3
GhostOfTsushima.exe+87464C: CC - int 3
}
45
"Godmode (Don't use while fast travel)"
Auto Assembler Script
{ Game : GhostOfTsushima.exe
Version:
Date : 2024-05-27
Author : nightfall
}
[ENABLE]
aobscanmodule(healthScript,GhostOfTsushima.exe,F3 0F 11 89 74 19 00 00) // should be unique
alloc(newmem,$1000,healthScript)
label(code)
label(return)
label(ohk)
newmem:
cmp [rcx+8],3
jne @f
push rbp
mov rbp,[rcx+1970] //1970 == maxHealth / 1974 == currentHealth
mov [rcx+1974],rbp
pop rbp
jmp return
onehit:
cmp [ohk],0
je @f
mov [rcx+1974],0
jmp return
code:
movss [rcx+00001974],xmm1
jmp return
maxHealth:
dd 00
ohk:
db 00
healthScript:
jmp newmem
nop 3
return:
registersymbol(healthScript ohk)
[DISABLE]
healthScript:
db F3 0F 11 89 74 19 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+68B585
GhostOfTsushima.exe+68B55D: CC - int 3
GhostOfTsushima.exe+68B55E: CC - int 3
GhostOfTsushima.exe+68B55F: CC - int 3
GhostOfTsushima.exe+68B560: 48 89 5C 24 08 - mov [rsp+08],rbx
GhostOfTsushima.exe+68B565: 57 - push rdi
GhostOfTsushima.exe+68B566: 48 81 EC D0 00 00 00 - sub rsp,000000D0
GhostOfTsushima.exe+68B56D: 48 8B D9 - mov rbx,rcx
GhostOfTsushima.exe+68B570: 0F 29 B4 24 C0 00 00 00 - movaps [rsp+000000C0],xmm6
GhostOfTsushima.exe+68B578: F3 0F 10 B1 74 19 00 00 - movss xmm6,[rcx+00001974]
GhostOfTsushima.exe+68B580: BA 75 00 00 00 - mov edx,00000075
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+68B585: F3 0F 11 89 74 19 00 00 - movss [rcx+00001974],xmm1
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+68B58D: 48 8B 89 F8 16 00 00 - mov rcx,[rcx+000016F8]
GhostOfTsushima.exe+68B594: 0F 2F 8B 70 19 00 00 - comiss xmm1,[rbx+00001970]
GhostOfTsushima.exe+68B59B: 73 07 - jae GhostOfTsushima.exe+68B5A4
GhostOfTsushima.exe+68B59D: E8 1E 37 43 00 - call GhostOfTsushima.exe+ABECC0
GhostOfTsushima.exe+68B5A2: EB 05 - jmp GhostOfTsushima.exe+68B5A9
GhostOfTsushima.exe+68B5A4: E8 57 58 43 00 - call GhostOfTsushima.exe+AC0E00
GhostOfTsushima.exe+68B5A9: 48 8D 4C 24 30 - lea rcx,[rsp+30]
GhostOfTsushima.exe+68B5AE: E8 0D ED EC FF - call GhostOfTsushima.exe+55A2C0
GhostOfTsushima.exe+68B5B3: 41 B8 0E 00 00 00 - mov r8d,0000000E
GhostOfTsushima.exe+68B5B9: 48 8D 4C 24 30 - lea rcx,[rsp+30]
}
550
"Onehit Kills"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('ohk',1)
[DISABLE]
writeByte('ohk',0)
51
"Inf Focus"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-27
*/
[ENABLE]
aobscanmodule(aob_infFocus,GhostOfTsushima.exe,F3 0F 11 89 A4 43 00 00)
registersymbol(aob_infFocus)
alloc(newmem_infFocus,1024,GhostOfTsushima.exe)
label(return_infFocus)
newmem_infFocus:
movss xmm1,xmm0
movss [rcx+000043A4],xmm1
jmp return_infFocus
aob_infFocus:
jmp newmem_infFocus
nop 3
return_infFocus:
[DISABLE]
aob_infFocus:
db F3 0F 11 89 A4 43 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+927D0D
GhostOfTsushima.exe+927CD7: C3 - ret
GhostOfTsushima.exe+927CD8: CC - int 3
GhostOfTsushima.exe+927CD9: CC - int 3
GhostOfTsushima.exe+927CDA: CC - int 3
GhostOfTsushima.exe+927CDB: CC - int 3
GhostOfTsushima.exe+927CDC: CC - int 3
GhostOfTsushima.exe+927CDD: CC - int 3
GhostOfTsushima.exe+927CDE: CC - int 3
GhostOfTsushima.exe+927CDF: CC - int 3
GhostOfTsushima.exe+927CE0: 48 8B C4 - mov rax,rsp
GhostOfTsushima.exe+927CE3: 48 89 58 10 - mov [rax+10],rbx
GhostOfTsushima.exe+927CE7: 48 89 70 18 - mov [rax+18],rsi
GhostOfTsushima.exe+927CEB: 4C 89 70 20 - mov [rax+20],r14
GhostOfTsushima.exe+927CEF: 55 - push rbp
GhostOfTsushima.exe+927CF0: 48 8D 68 A9 - lea rbp,[rax-57]
GhostOfTsushima.exe+927CF4: 48 81 EC D0 00 00 00 - sub rsp,000000D0
GhostOfTsushima.exe+927CFB: 0F 29 70 E8 - movaps [rax-18],xmm6
GhostOfTsushima.exe+927CFF: 4D 8B F0 - mov r14,r8
GhostOfTsushima.exe+927D02: F3 0F 10 B1 A4 43 00 00 - movss xmm6,[rcx+000043A4]
GhostOfTsushima.exe+927D0A: 48 8B D9 - mov rbx,rcx
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+927D0D: F3 0F 11 89 A4 43 00 00 - movss [rcx+000043A4],xmm1
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+927D15: 48 39 0D 54 8B B9 02 - cmp [GhostOfTsushima.exe+34C0870],rcx
GhostOfTsushima.exe+927D1C: 41 0F B6 F1 - movzx esi,r9b
GhostOfTsushima.exe+927D20: 75 5A - jne GhostOfTsushima.exe+927D7C
GhostOfTsushima.exe+927D22: 48 8D 0D 27 F0 3A 01 - lea rcx,[GhostOfTsushima.exe+1CD6D50]
GhostOfTsushima.exe+927D29: 48 89 78 08 - mov [rax+08],rdi
GhostOfTsushima.exe+927D2D: E8 FE C2 BF FF - call GhostOfTsushima.exe+524030
GhostOfTsushima.exe+927D32: 48 8B BB B8 00 00 00 - mov rdi,[rbx+000000B8]
GhostOfTsushima.exe+927D39: 48 85 FF - test rdi,rdi
GhostOfTsushima.exe+927D3C: 74 36 - je GhostOfTsushima.exe+927D74
GhostOfTsushima.exe+927D3E: 0F B6 05 8F 42 B4 02 - movzx eax,byte ptr [GhostOfTsushima.exe+346BFD4]
GhostOfTsushima.exe+927D45: 38 47 04 - cmp [rdi+04],al
GhostOfTsushima.exe+927D48: 75 2A - jne GhostOfTsushima.exe+927D74
GhostOfTsushima.exe+927D4A: E8 A1 77 DC FF - call GhostOfTsushima.exe+6EF4F0
GhostOfTsushima.exe+927D4F: 4C 8B C0 - mov r8,rax
GhostOfTsushima.exe+927D52: BA 0D 00 00 00 - mov edx,0000000D
GhostOfTsushima.exe+927D57: 48 8B CF - mov rcx,rdi
GhostOfTsushima.exe+927D5A: E8 91 84 F3 FF - call GhostOfTsushima.exe+8601F0
GhostOfTsushima.exe+927D5F: 48 85 C0 - test rax,rax
GhostOfTsushima.exe+927D62: 74 10 - je GhostOfTsushima.exe+927D74
GhostOfTsushima.exe+927D64: F3 0F 10 8B A4 43 00 00 - movss xmm1,[rbx+000043A4]
}
88
"Inf Ghost"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-27
*/
[ENABLE]
aobscanmodule(aob_ghostAbility,GhostOfTsushima.exe,8B 68 04 48 8B CB)
registersymbol(aob_ghostAbility)
alloc(newmem_ghostAbility,1024,GhostOfTsushima.exe)
label(return_ghostAbility)
newmem_ghostAbility:
mov [rax+04],#7
mov ebp,[rax+04]
mov rcx,rbx
jmp return_ghostAbility
aob_ghostAbility:
jmp newmem_ghostAbility
nop
return_ghostAbility:
[DISABLE]
aob_ghostAbility:
db 8B 68 04 48 8B CB
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+B52DBA
GhostOfTsushima.exe+B52D71: E8 1A C4 FF FF - call GhostOfTsushima.exe+B4F190
GhostOfTsushima.exe+B52D76: 33 F6 - xor esi,esi
GhostOfTsushima.exe+B52D78: 85 C0 - test eax,eax
GhostOfTsushima.exe+B52D7A: 0F 8E D7 00 00 00 - jng GhostOfTsushima.exe+B52E57
GhostOfTsushima.exe+B52D80: 48 8D 0D 09 4B 35 01 - lea rcx,[GhostOfTsushima.exe+1EA7890]
GhostOfTsushima.exe+B52D87: 48 89 6C 24 50 - mov [rsp+50],rbp
GhostOfTsushima.exe+B52D8C: E8 0F 41 A3 FF - call GhostOfTsushima.exe+586EA0
GhostOfTsushima.exe+B52D91: 84 C0 - test al,al
GhostOfTsushima.exe+B52D93: 74 04 - je GhostOfTsushima.exe+B52D99
GhostOfTsushima.exe+B52D95: 8B EE - mov ebp,esi
GhostOfTsushima.exe+B52D97: EB 24 - jmp GhostOfTsushima.exe+B52DBD
GhostOfTsushima.exe+B52D99: 48 8B 43 48 - mov rax,[rbx+48]
GhostOfTsushima.exe+B52D9D: 48 8B 48 38 - mov rcx,[rax+38]
GhostOfTsushima.exe+B52DA1: E8 2A 23 DC FF - call GhostOfTsushima.exe+9150D0
GhostOfTsushima.exe+B52DA6: 84 C0 - test al,al
GhostOfTsushima.exe+B52DA8: 75 04 - jne GhostOfTsushima.exe+B52DAE
GhostOfTsushima.exe+B52DAA: 8B EE - mov ebp,esi
GhostOfTsushima.exe+B52DAC: EB 0F - jmp GhostOfTsushima.exe+B52DBD
GhostOfTsushima.exe+B52DAE: 48 8D 0D C3 3F 18 01 - lea rcx,[GhostOfTsushima.exe+1CD6D78]
GhostOfTsushima.exe+B52DB5: E8 06 53 9C FF - call GhostOfTsushima.exe+5180C0
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+B52DBA: 8B 68 04 - mov ebp,[rax+04]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+B52DBD: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+B52DC0: E8 CB C3 FF FF - call GhostOfTsushima.exe+B4F190
GhostOfTsushima.exe+B52DC5: 3B E8 - cmp ebp,eax
GhostOfTsushima.exe+B52DC7: 48 8B 6C 24 50 - mov rbp,[rsp+50]
GhostOfTsushima.exe+B52DCC: 0F 8C 85 00 00 00 - jl GhostOfTsushima.exe+B52E57
GhostOfTsushima.exe+B52DD2: 0F 29 74 24 30 - movaps [rsp+30],xmm6
GhostOfTsushima.exe+B52DD7: 48 39 37 - cmp [rdi],rsi
GhostOfTsushima.exe+B52DDA: 74 0A - je GhostOfTsushima.exe+B52DE6
GhostOfTsushima.exe+B52DDC: F3 0F 10 35 D4 FA 5C 00 - movss xmm6,[GhostOfTsushima.exe+11228B8]
GhostOfTsushima.exe+B52DE4: EB 08 - jmp GhostOfTsushima.exe+B52DEE
GhostOfTsushima.exe+B52DE6: F3 0F 10 35 C2 FA 5C 00 - movss xmm6,[GhostOfTsushima.exe+11228B0]
GhostOfTsushima.exe+B52DEE: 48 8B 43 48 - mov rax,[rbx+48]
GhostOfTsushima.exe+B52DF2: 48 8D 0D 97 93 96 02 - lea rcx,[GhostOfTsushima.exe+34BC190]
GhostOfTsushima.exe+B52DF9: 41 B8 00 04 08 00 - mov r8d,00080400
GhostOfTsushima.exe+B52DFF: 48 8B 50 38 - mov rdx,[rax+38]
GhostOfTsushima.exe+B52E03: E8 48 A2 D3 FF - call GhostOfTsushima.exe+88D050
GhostOfTsushima.exe+B52E08: 0F 2F C6 - comiss xmm0,xmm6
GhostOfTsushima.exe+B52E0B: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
GhostOfTsushima.exe+B52E10: 73 45 - jae GhostOfTsushima.exe+B52E57
GhostOfTsushima.exe+B52E12: 48 39 37 - cmp [rdi],rsi
}
4
"Inf Items"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-25
*/
[ENABLE]
aobscanmodule(aob_writeItems,GhostOfTsushima.exe,89 74 38 08 80 BB 18 13 09 00 00)
aob_writeItems:
db 90 90 90 90 80 BB 18 13 09 00 00
[DISABLE]
aob_writeItems:
db 89 74 38 08 80 BB 18 13 09 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+520DE1
GhostOfTsushima.exe+520D91: 85 F6 - test esi,esi
GhostOfTsushima.exe+520D93: 7E 21 - jle GhostOfTsushima.exe+520DB6
GhostOfTsushima.exe+520D95: 41 F6 C0 01 - test r8b,01
GhostOfTsushima.exe+520D99: 75 1B - jne GhostOfTsushima.exe+520DB6
GhostOfTsushima.exe+520D9B: 44 0F B6 8C 24 A0 00 00 00 - movzx r9d,byte ptr [rsp+000000A0]
GhostOfTsushima.exe+520DA4: 41 83 E0 FD - and r8d,-03
GhostOfTsushima.exe+520DA8: 41 83 C8 01 - or r8d,01
GhostOfTsushima.exe+520DAC: 8B D5 - mov edx,ebp
GhostOfTsushima.exe+520DAE: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+520DB1: E8 FA 0D 00 00 - call GhostOfTsushima.exe+521BB0
GhostOfTsushima.exe+520DB6: 48 8D 0D D3 6A 98 01 - lea rcx,[GhostOfTsushima.exe+1EA7890]
GhostOfTsushima.exe+520DBD: E8 DE 60 06 00 - call GhostOfTsushima.exe+586EA0
GhostOfTsushima.exe+520DC2: 84 C0 - test al,al
GhostOfTsushima.exe+520DC4: 75 17 - jne GhostOfTsushima.exe+520DDD
GhostOfTsushima.exe+520DC6: 48 8D 0D C3 6A 98 01 - lea rcx,[GhostOfTsushima.exe+1EA7890]
GhostOfTsushima.exe+520DCD: E8 DE 60 06 00 - call GhostOfTsushima.exe+586EB0
GhostOfTsushima.exe+520DD2: 84 C0 - test al,al
GhostOfTsushima.exe+520DD4: BF 50 0C 00 00 - mov edi,00000C50
GhostOfTsushima.exe+520DD9: 49 0F 45 FF - cmovne rdi,r15
GhostOfTsushima.exe+520DDD: 48 8D 04 AB - lea rax,[rbx+rbp*4]
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+520DE1: 89 74 38 08 - mov [rax+rdi+08],esi
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+520DE5: 80 BB 18 13 09 00 00 - cmp byte ptr [rbx+00091318],00
GhostOfTsushima.exe+520DEC: 74 13 - je GhostOfTsushima.exe+520E01
GhostOfTsushima.exe+520DEE: FF 83 20 13 09 00 - inc [rbx+00091320]
GhostOfTsushima.exe+520DF4: 80 8B 24 13 09 00 01 - or byte ptr [rbx+00091324],01
GhostOfTsushima.exe+520DFB: FF 83 1C 13 09 00 - inc [rbx+0009131C]
GhostOfTsushima.exe+520E01: 41 B0 01 - mov r8b,01
GhostOfTsushima.exe+520E04: 33 D2 - xor edx,edx
GhostOfTsushima.exe+520E06: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+520E09: E8 F2 91 FF FF - call GhostOfTsushima.exe+51A000
GhostOfTsushima.exe+520E0E: 48 8D 84 24 98 00 00 00 - lea rax,[rsp+00000098]
GhostOfTsushima.exe+520E16: BA 7B 00 00 00 - mov edx,0000007B
GhostOfTsushima.exe+520E1B: 48 89 44 24 30 - mov [rsp+30],rax
GhostOfTsushima.exe+520E20: 4C 8D 8C 24 80 00 00 00 - lea r9,[rsp+00000080]
GhostOfTsushima.exe+520E28: 48 8D 84 24 A0 00 00 00 - lea rax,[rsp+000000A0]
GhostOfTsushima.exe+520E30: 48 89 44 24 28 - mov [rsp+28],rax
GhostOfTsushima.exe+520E35: 4C 8D 84 24 88 00 00 00 - lea r8,[rsp+00000088]
GhostOfTsushima.exe+520E3D: 48 8D 84 24 90 00 00 00 - lea rax,[rsp+00000090]
GhostOfTsushima.exe+520E45: 48 8D 0D 74 2A 98 01 - lea rcx,[GhostOfTsushima.exe+1EA38C0]
GhostOfTsushima.exe+520E4C: 48 89 44 24 20 - mov [rsp+20],rax
GhostOfTsushima.exe+520E51: E8 CA 4B FE FF - call GhostOfTsushima.exe+505A20
}
129
"Wallhack (use sight ability)"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-29
*/
[ENABLE]
aobscanmodule(aob_walls1,GhostOfTsushima.exe,0F 84 EA 01 00 00 85 C0 0F)
aobscanmodule(aob_walls2,GhostOfTsushima.exe,0F 84 27 01 00 00 83 F8)
aobscanmodule(aob_walls3,GhostOfTsushima.exe,0F 84 E3 FE FF FF 66)
aob_walls1:
db 90 90 90 90 90 90
registersymbol(aob_walls2)
alloc(newmem_walls2,420,GhostOfTsushima.exe)
label(return_walls2)
newmem_walls2:
jmp GhostOfTsushima.exe+AA001B
jmp return_walls2
aob_walls2:
jmp newmem_walls2
nop
return_walls2:
aob_walls3:
db 90 90 90 90 90 90
GhostOfTsushima.exe+AA005E:
db 90 90
GhostOfTsushima.exe+AA0067:
db 90 90 90 90 90 90
GhostOfTsushima.exe+AA0076:
db 90 90 90 90 90 90
aobscanmodule(aob_drawStrength,GhostOfTsushima.exe,F3 0F 11 B3 8C 02 00 00)
registersymbol(aob_drawStrength)
alloc(newmem_drawStrength,1024,GhostOfTsushima.exe)
label(return_drawStrength)
newmem_drawStrength:
mov [rbx+0000028C],(float)1
jmp return_drawStrength
aob_drawStrength:
jmp newmem_drawStrength
nop 3
return_drawStrength:
[DISABLE]
aob_walls1:
db 0F 84 EA 01 00 00
aob_walls2:
db 0F 84 27 01 00 00
aob_walls3:
db 0F 84 E3 FE FF FF
GhostOfTsushima.exe+AA005E:
db 72 50
GhostOfTsushima.exe+AA0067:
db 0F 84 AC 00 00 00
GhostOfTsushima.exe+AA0076:
db 0F 84 9D 00 00 00
aob_drawStrength:
db F3 0F 11 B3 8C 02 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+A9FED1
GhostOfTsushima.exe+A9FE81: 0F 59 C2 - mulps xmm0,xmm2
GhostOfTsushima.exe+A9FE84: 0F 59 C4 - mulps xmm0,xmm4
GhostOfTsushima.exe+A9FE87: 0F 5C 05 52 20 65 00 - subps xmm0,[GhostOfTsushima.D3D12SDKVersion+63B0]
GhostOfTsushima.exe+A9FE8E: 0F 5C C8 - subps xmm1,xmm0
GhostOfTsushima.exe+A9FE91: 0F 28 05 08 C0 66 00 - movaps xmm0,[GhostOfTsushima.exe+110BEA0]
GhostOfTsushima.exe+A9FE98: 0F 59 C2 - mulps xmm0,xmm2
GhostOfTsushima.exe+A9FE9B: 0F 59 C8 - mulps xmm1,xmm0
GhostOfTsushima.exe+A9FE9E: 0F 58 CA - addps xmm1,xmm2
GhostOfTsushima.exe+A9FEA1: 0F 59 CC - mulps xmm1,xmm4
GhostOfTsushima.exe+A9FEA4: 0F 54 CB - andps xmm1,xmm3
GhostOfTsushima.exe+A9FEA7: E8 64 88 A2 FF - call GhostOfTsushima.exe+4C8710
GhostOfTsushima.exe+A9FEAC: F3 41 0F 59 C0 - mulss xmm0,xmm8
GhostOfTsushima.exe+A9FEB1: 44 0F 28 44 24 40 - movaps xmm8,[rsp+40]
GhostOfTsushima.exe+A9FEB7: 0F 2F C6 - comiss xmm0,xmm6
GhostOfTsushima.exe+A9FEBA: 72 07 - jb GhostOfTsushima.exe+A9FEC3
GhostOfTsushima.exe+A9FEBC: 0F 28 F0 - movaps xmm6,xmm0
GhostOfTsushima.exe+A9FEBF: F3 0F 5D F7 - minss xmm6,xmm7
GhostOfTsushima.exe+A9FEC3: 8B 83 A4 02 00 00 - mov eax,[rbx+000002A4]
GhostOfTsushima.exe+A9FEC9: 45 33 F6 - xor r14d,r14d
GhostOfTsushima.exe+A9FECC: 0F 28 7C 24 50 - movaps xmm7,[rsp+50]
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+A9FED1: F3 0F 11 B3 8C 02 00 00 - movss [rbx+0000028C],xmm6
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+A9FED9: F2 0F 10 35 57 AC 66 00 - movsd xmm6,[GhostOfTsushima.exe+110AB38]
GhostOfTsushima.exe+A9FEE1: 8B E8 - mov ebp,eax
GhostOfTsushima.exe+A9FEE3: 83 F8 FF - cmp eax,-01
GhostOfTsushima.exe+A9FEE6: 0F 84 EA 01 00 00 - je GhostOfTsushima.exe+AA00D6
GhostOfTsushima.exe+A9FEEC: 85 C0 - test eax,eax
GhostOfTsushima.exe+A9FEEE: 0F 84 27 01 00 00 - je GhostOfTsushima.exe+AA001B
GhostOfTsushima.exe+A9FEF4: 83 F8 01 - cmp eax,01
GhostOfTsushima.exe+A9FEF7: 74 5A - je GhostOfTsushima.exe+A9FF53
GhostOfTsushima.exe+A9FEF9: 83 F8 02 - cmp eax,02
GhostOfTsushima.exe+A9FEFC: 0F 85 17 02 00 00 - jne GhostOfTsushima.exe+AA0119
GhostOfTsushima.exe+A9FF02: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+A9FF05: E8 16 FA FF FF - call GhostOfTsushima.exe+A9F920
GhostOfTsushima.exe+A9FF0A: 84 C0 - test al,al
GhostOfTsushima.exe+A9FF0C: 75 2B - jne GhostOfTsushima.exe+A9FF39
GhostOfTsushima.exe+A9FF0E: 48 8B 4B 38 - mov rcx,[rbx+38]
GhostOfTsushima.exe+A9FF12: 48 85 C9 - test rcx,rcx
GhostOfTsushima.exe+A9FF15: 0F 84 FE 01 00 00 - je GhostOfTsushima.exe+AA0119
GhostOfTsushima.exe+A9FF1B: 8B 93 A4 02 00 00 - mov edx,[rbx+000002A4]
GhostOfTsushima.exe+A9FF21: 83 FA 01 - cmp edx,01
GhostOfTsushima.exe+A9FF24: 0F 84 EF 01 00 00 - je GhostOfTsushima.exe+AA0119
}
105
"Invisible"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-29
*/
[ENABLE]
aobscanmodule(aob_visibility,GhostOfTsushima.exe,48 89 6C 24 18 48 89 7C 24 20 41 56 48 83 EC 30 80)
aob_visibility:
db C3 89 6C 24 18
[DISABLE]
aob_visibility:
db 48 89 6C 24 18
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+88DC50
GhostOfTsushima.exe+88DC10: F3 44 0F 10 C0 - movss xmm8,xmm0
GhostOfTsushima.exe+88DC15: 45 0F C6 C0 C6 - shufps xmm8,xmm8,-3A
GhostOfTsushima.exe+88DC1A: F3 45 0F 10 C1 - movss xmm8,xmm9
GhostOfTsushima.exe+88DC1F: 44 0F 28 4C 24 30 - movaps xmm9,[rsp+30]
GhostOfTsushima.exe+88DC25: 45 0F C6 C0 27 - shufps xmm8,xmm8,27
GhostOfTsushima.exe+88DC2A: F3 44 0F 10 C1 - movss xmm8,xmm1
GhostOfTsushima.exe+88DC2F: 45 0F C6 C0 39 - shufps xmm8,xmm8,39
GhostOfTsushima.exe+88DC34: 44 0F 11 83 00 01 00 00 - movups [rbx+00000100],xmm8
GhostOfTsushima.exe+88DC3C: 44 0F 28 44 24 40 - movaps xmm8,[rsp+40]
GhostOfTsushima.exe+88DC42: 48 83 C4 60 - add rsp,60
GhostOfTsushima.exe+88DC46: 5B - pop rbx
GhostOfTsushima.exe+88DC47: C3 - ret
GhostOfTsushima.exe+88DC48: CC - int 3
GhostOfTsushima.exe+88DC49: CC - int 3
GhostOfTsushima.exe+88DC4A: CC - int 3
GhostOfTsushima.exe+88DC4B: CC - int 3
GhostOfTsushima.exe+88DC4C: CC - int 3
GhostOfTsushima.exe+88DC4D: CC - int 3
GhostOfTsushima.exe+88DC4E: CC - int 3
GhostOfTsushima.exe+88DC4F: CC - int 3
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+88DC50: 48 89 6C 24 18 - mov [rsp+18],rbp
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+88DC55: 48 89 7C 24 20 - mov [rsp+20],rdi
GhostOfTsushima.exe+88DC5A: 41 56 - push r14
GhostOfTsushima.exe+88DC5C: 48 83 EC 30 - sub rsp,30
GhostOfTsushima.exe+88DC60: 80 B9 3C 04 00 00 00 - cmp byte ptr [rcx+0000043C],00
GhostOfTsushima.exe+88DC67: 41 8B E9 - mov ebp,r9d
GhostOfTsushima.exe+88DC6A: 45 8B F0 - mov r14d,r8d
GhostOfTsushima.exe+88DC6D: 48 8B F9 - mov rdi,rcx
GhostOfTsushima.exe+88DC70: 0F 84 C8 01 00 00 - je GhostOfTsushima.exe+88DE3E
GhostOfTsushima.exe+88DC76: 48 89 5C 24 40 - mov [rsp+40],rbx
GhostOfTsushima.exe+88DC7B: 48 89 74 24 48 - mov [rsp+48],rsi
GhostOfTsushima.exe+88DC80: 8B 74 24 60 - mov esi,[rsp+60]
GhostOfTsushima.exe+88DC84: 41 83 F8 01 - cmp r8d,01
GhostOfTsushima.exe+88DC88: 74 3F - je GhostOfTsushima.exe+88DCC9
GhostOfTsushima.exe+88DC8A: 41 83 F9 01 - cmp r9d,01
GhostOfTsushima.exe+88DC8E: 74 39 - je GhostOfTsushima.exe+88DCC9
GhostOfTsushima.exe+88DC90: 83 FE 01 - cmp esi,01
GhostOfTsushima.exe+88DC93: 74 34 - je GhostOfTsushima.exe+88DCC9
GhostOfTsushima.exe+88DC95: 48 85 D2 - test rdx,rdx
GhostOfTsushima.exe+88DC98: 0F 84 96 01 00 00 - je GhostOfTsushima.exe+88DE34
GhostOfTsushima.exe+88DC9E: 48 8D 59 50 - lea rbx,[rcx+50]
}
134
"Free Equipment Upgrades"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-30
*/
[ENABLE]
aobscanmodule(aob_freeUpgrade,GhostOfTsushima.exe,3B 43 04 7C 1B)
registersymbol(aob_freeUpgrade)
alloc(newmem_freeUpgrade,1024,GhostOfTsushima.exe)
label(return_freeUpgrade)
newmem_freeUpgrade:
mov [rbx+4],0
mov [rbx+C],0
mov [rbx+14],0
mov [rbx+1C],0
cmp eax,[rbx+04]
jl GhostOfTsushima.exe+905C2D
jmp return_freeUpgrade
aob_freeUpgrade:
jmp newmem_freeUpgrade
return_freeUpgrade:
[DISABLE]
aob_freeUpgrade:
db 3B 43 04 7C 1B
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+905C0D
GhostOfTsushima.exe+905BC0: 48 3B C1 - cmp rax,rcx
GhostOfTsushima.exe+905BC3: 75 EB - jne GhostOfTsushima.exe+905BB0
GhostOfTsushima.exe+905BC5: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+905BC8: E8 73 FE FF FF - call GhostOfTsushima.exe+905A40
GhostOfTsushima.exe+905BCD: 8B D0 - mov edx,eax
GhostOfTsushima.exe+905BCF: 48 8D 0D 3A 99 A9 02 - lea rcx,[GhostOfTsushima.exe+339F510]
GhostOfTsushima.exe+905BD6: E8 55 A4 DA FF - call GhostOfTsushima.exe+6B0030
GhostOfTsushima.exe+905BDB: 84 C0 - test al,al
GhostOfTsushima.exe+905BDD: 74 4E - je GhostOfTsushima.exe+905C2D
GhostOfTsushima.exe+905BDF: 48 8B 43 28 - mov rax,[rbx+28]
GhostOfTsushima.exe+905BE3: 48 8B 98 B0 00 00 00 - mov rbx,[rax+000000B0]
GhostOfTsushima.exe+905BEA: 48 63 80 B8 00 00 00 - movsxd rax,dword ptr [rax+000000B8]
GhostOfTsushima.exe+905BF1: 48 8D 3C C3 - lea rdi,[rbx+rax*8]
GhostOfTsushima.exe+905BF5: 48 3B DF - cmp rbx,rdi
GhostOfTsushima.exe+905BF8: 74 21 - je GhostOfTsushima.exe+905C1B
GhostOfTsushima.exe+905BFA: 66 0F 1F 44 00 00 - nop word ptr [rax+rax+00]
GhostOfTsushima.exe+905C00: 8B 13 - mov edx,[rbx]
GhostOfTsushima.exe+905C02: 45 33 C0 - xor r8d,r8d
GhostOfTsushima.exe+905C05: 48 8B CE - mov rcx,rsi
GhostOfTsushima.exe+905C08: E8 C3 A9 00 00 - call GhostOfTsushima.exe+9105D0
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+905C0D: 3B 43 04 - cmp eax,[rbx+04]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+905C10: 7C 1B - jl GhostOfTsushima.exe+905C2D
GhostOfTsushima.exe+905C12: 48 83 C3 08 - add rbx,08
GhostOfTsushima.exe+905C16: 48 3B DF - cmp rbx,rdi
GhostOfTsushima.exe+905C19: 75 E5 - jne GhostOfTsushima.exe+905C00
GhostOfTsushima.exe+905C1B: B0 01 - mov al,01
GhostOfTsushima.exe+905C1D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GhostOfTsushima.exe+905C22: 48 8B 74 24 38 - mov rsi,[rsp+38]
GhostOfTsushima.exe+905C27: 48 83 C4 20 - add rsp,20
GhostOfTsushima.exe+905C2B: 5F - pop rdi
GhostOfTsushima.exe+905C2C: C3 - ret
GhostOfTsushima.exe+905C2D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GhostOfTsushima.exe+905C32: 32 C0 - xor al,al
GhostOfTsushima.exe+905C34: 48 8B 74 24 38 - mov rsi,[rsp+38]
GhostOfTsushima.exe+905C39: 48 83 C4 20 - add rsp,20
GhostOfTsushima.exe+905C3D: 5F - pop rdi
GhostOfTsushima.exe+905C3E: C3 - ret
GhostOfTsushima.exe+905C3F: CC - int 3
GhostOfTsushima.exe+905C40: 48 89 5C 24 10 - mov [rsp+10],rbx
GhostOfTsushima.exe+905C45: 48 89 6C 24 18 - mov [rsp+18],rbp
GhostOfTsushima.exe+905C4A: 56 - push rsi
}
30
"X"
0
Float
[pbase]+120
31
"Y"
0
Float
[pbase]+124
32
"Z"
0
Float
[pbase]+128
Increase Value
103
500
0
Decrease Value
100
250
1
127
"Save Location"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('savef',1)
showMessage('Saved')
[DISABLE]
128
"Teleport"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('tpf',1)
[DISABLE]
78
"Items"
1
77
"Resources"
0
4 Bytes
GhostOfTsushima.exe+1CD7A50
1
"Flowers"
4 Bytes
GhostOfTsushima.exe+1CD7A58
135
"GhostFlowers"
0
4 Bytes
GhostOfTsushima.exe+1CD7A54
79
"Bamboo"
0
4 Bytes
GhostOfTsushima.exe+1CD79F4
80
"Wood"
0
4 Bytes
GhostOfTsushima.exe+1CD7A48
81
"Iron"
0
4 Bytes
GhostOfTsushima.exe+1CD7920
82
"Metal"
0
4 Bytes
GhostOfTsushima.exe+1CD7A24
83
"Gold"
0
4 Bytes
GhostOfTsushima.exe+1CD7A20
84
"Linen"
0
4 Bytes
GhostOfTsushima.exe+1CD7A3C
85
"Leather"
0
4 Bytes
GhostOfTsushima.exe+1CD7A40
50
"Stats"
1
48
"Focus"
Float
[pbase]+43A4
49
"CurrentHealth"
Float
[pbase]+1974
33
"xVelocity"
0
Float
[pbase]+1E0
56
"yVelocity"
0
Float
[pbase]+1E4
55
"zVelocity"
0
Float
[pbase]+1E8
27
"pbase"
0
808080
4 Bytes
[pbase]
75
"World"
4242FF
1
72
"Change time of day"
Auto Assembler Script
{ Game : GhostOfTsushima.exe
Version:
Date : 2024-05-27
Author : nightfall
}
[ENABLE]
aobscanmodule(photoTime,GhostOfTsushima.exe,F3 0F 11 83 E0 00 00 00 44)
alloc(newmem,$1000,photoTime)
label(code)
label(return)
alloc(newDayTime,16,photoTime)
/*
0.6:noon
0.25:morning
*/
newmem:
cmp [newDayTime],0
je @f
push rbp
mov rbp,[newDayTime]
mov [rbx+E0],rbp
pop rbp
mov [newDayTime],0
jmp return
code:
movss [rbx+000000E0],xmm0 //currentTime
jmp return
newDayTime:
dd 00
photoTime:
jmp newmem
nop 3
return:
registersymbol(photoTime newDayTime)
[DISABLE]
photoTime:
db F3 0F 11 83 E0 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+646358
GhostOfTsushima.exe+64632F: CC - int 3
GhostOfTsushima.exe+646330: 48 89 5C 24 08 - mov [rsp+08],rbx
GhostOfTsushima.exe+646335: 57 - push rdi
GhostOfTsushima.exe+646336: 48 81 EC C0 00 00 00 - sub rsp,000000C0
GhostOfTsushima.exe+64633D: 0F 28 C1 - movaps xmm0,xmm1
GhostOfTsushima.exe+646340: 48 8B D9 - mov rbx,rcx
GhostOfTsushima.exe+646343: F3 0F 10 0D 25 CC D4 00 - movss xmm1,[GhostOfTsushima.exe+1392F70]
GhostOfTsushima.exe+64634B: E8 30 25 E8 FF - call GhostOfTsushima.exe+4C8880
GhostOfTsushima.exe+646350: 8B BB E4 00 00 00 - mov edi,[rbx+000000E4]
GhostOfTsushima.exe+646356: 33 C0 - xor eax,eax
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+646358: F3 0F 11 83 E0 00 00 00 - movss [rbx+000000E0],xmm0
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+646360: 44 8D 40 03 - lea r8d,[rax+03]
GhostOfTsushima.exe+646364: 0F 1F 40 00 - nop dword ptr [rax+00]
GhostOfTsushima.exe+646368: 0F 1F 84 00 00 00 00 00 - nop dword ptr [rax+rax+00000000]
GhostOfTsushima.exe+646370: 48 63 C8 - movsxd rcx,eax
GhostOfTsushima.exe+646373: 48 6B D1 2C - imul rdx,rcx,2C
GhostOfTsushima.exe+646377: 0F 2F 84 1A 0C 01 00 00 - comiss xmm0,[rdx+rbx+0000010C]
GhostOfTsushima.exe+64637F: 72 09 - jb GhostOfTsushima.exe+64638A
GhostOfTsushima.exe+646381: FF C0 - inc eax
GhostOfTsushima.exe+646383: 83 F8 04 - cmp eax,04
GhostOfTsushima.exe+646386: 75 E8 - jne GhostOfTsushima.exe+646370
}
73
"New Time [num1-3]"
0.4:noon
0.25:morning
0.000001:night
0
Float
newDayTime
Set Value
97
0.25
Morning
0
Morning
Set Value
98
0.4
Day
1
Day
Set Value
99
0.000001
Night
2
Night
74
"Freeze time of day"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-27
*/
[ENABLE]
aobscanmodule(aob_freezeTime,GhostOfTsushima.exe,F3 0F 11 83 E0 00 00 00 44)
registersymbol(aob_freezeTime)
alloc(newmem_freezeTime,400,GhostOfTsushima.exe)
label(return_freezeTime)
newmem_freezeTime:
jmp return_freezeTime
aob_freezeTime:
jmp newmem_freezeTime
nop 3
return_freezeTime:
[DISABLE]
aob_freezeTime:
db F3 0F 11 83 E0 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+646358
GhostOfTsushima.exe+64631E: CC - int 3
GhostOfTsushima.exe+64631F: CC - int 3
GhostOfTsushima.exe+646320: F3 0F 11 0D 98 8B E4 00 - movss [GhostOfTsushima.exe+148EEC0],xmm1
GhostOfTsushima.exe+646328: C3 - ret
GhostOfTsushima.exe+646329: CC - int 3
GhostOfTsushima.exe+64632A: CC - int 3
GhostOfTsushima.exe+64632B: CC - int 3
GhostOfTsushima.exe+64632C: CC - int 3
GhostOfTsushima.exe+64632D: CC - int 3
GhostOfTsushima.exe+64632E: CC - int 3
GhostOfTsushima.exe+64632F: CC - int 3
GhostOfTsushima.exe+646330: 48 89 5C 24 08 - mov [rsp+08],rbx
GhostOfTsushima.exe+646335: 57 - push rdi
GhostOfTsushima.exe+646336: 48 81 EC C0 00 00 00 - sub rsp,000000C0
GhostOfTsushima.exe+64633D: 0F 28 C1 - movaps xmm0,xmm1
GhostOfTsushima.exe+646340: 48 8B D9 - mov rbx,rcx
GhostOfTsushima.exe+646343: F3 0F 10 0D 25 CC D4 00 - movss xmm1,[GhostOfTsushima.exe+1392F70]
GhostOfTsushima.exe+64634B: E8 30 25 E8 FF - call GhostOfTsushima.exe+4C8880
GhostOfTsushima.exe+646350: 8B BB E4 00 00 00 - mov edi,[rbx+000000E4]
GhostOfTsushima.exe+646356: 33 C0 - xor eax,eax
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+646358: F3 0F 11 83 E0 00 00 00 - movss [rbx+000000E0],xmm0
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+646360: 44 8D 40 03 - lea r8d,[rax+03]
GhostOfTsushima.exe+646364: 0F 1F 40 00 - nop dword ptr [rax+00]
GhostOfTsushima.exe+646368: 0F 1F 84 00 00 00 00 00 - nop dword ptr [rax+rax+00000000]
GhostOfTsushima.exe+646370: 48 63 C8 - movsxd rcx,eax
GhostOfTsushima.exe+646373: 48 6B D1 2C - imul rdx,rcx,2C
GhostOfTsushima.exe+646377: 0F 2F 84 1A 0C 01 00 00 - comiss xmm0,[rdx+rbx+0000010C]
GhostOfTsushima.exe+64637F: 72 09 - jb GhostOfTsushima.exe+64638A
GhostOfTsushima.exe+646381: FF C0 - inc eax
GhostOfTsushima.exe+646383: 83 F8 04 - cmp eax,04
GhostOfTsushima.exe+646386: 75 E8 - jne GhostOfTsushima.exe+646370
GhostOfTsushima.exe+646388: EB 17 - jmp GhostOfTsushima.exe+6463A1
GhostOfTsushima.exe+64638A: 44 8D 40 03 - lea r8d,[rax+03]
GhostOfTsushima.exe+64638E: 41 81 E0 03 00 00 80 - and r8d,80000003
GhostOfTsushima.exe+646395: 7D 0A - jnl GhostOfTsushima.exe+6463A1
GhostOfTsushima.exe+646397: 41 FF C8 - dec r8d
GhostOfTsushima.exe+64639A: 41 83 C8 FC - or r8d,-04
GhostOfTsushima.exe+64639E: 41 FF C0 - inc r8d
GhostOfTsushima.exe+6463A1: 48 8D 0D 18 B7 E5 02 - lea rcx,[GhostOfTsushima.exe+34A1AC0]
GhostOfTsushima.exe+6463A8: 44 89 83 E4 00 00 00 - mov [rbx+000000E4],r8d
GhostOfTsushima.exe+6463AF: E8 EC DE 14 00 - call GhostOfTsushima.exe+7942A0
}
548
"RevealMap"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-31
*/
[ENABLE]
aobscanmodule(aob_revealFog,GhostOfTsushima.exe,F3 0F 10 84 9F A8 43 00 00)
registersymbol(aob_revealFog)
alloc(newmem_revealFog,1024,GhostOfTsushima.exe)
label(return_revealFog)
newmem_revealFog:
//mov [rdi+rbx*4+000043A8]
push rcx
lea rcx,[rdi+rbx*4+000043A8]
cmp cl,AC
je @f
pop rcx
jmp code
revealit:
lea rcx,[rdi+rbx*4]
mov [rcx+43A8],(float)10000
pop rcx
code:
movss xmm0,[rdi+rbx*4+000043A8]
jmp return_revealFog
aob_revealFog:
jmp newmem_revealFog
nop 4
return_revealFog:
[DISABLE]
aob_revealFog:
db F3 0F 10 84 9F A8 43 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+917C85
GhostOfTsushima.exe+917C57: 48 8B 7C 24 30 - mov rdi,[rsp+30]
GhostOfTsushima.exe+917C5C: 48 8B 5C 24 38 - mov rbx,[rsp+38]
GhostOfTsushima.exe+917C61: 48 83 C4 20 - add rsp,20
GhostOfTsushima.exe+917C65: 5E - pop rsi
GhostOfTsushima.exe+917C66: C3 - ret
GhostOfTsushima.exe+917C67: CC - int 3
GhostOfTsushima.exe+917C68: CC - int 3
GhostOfTsushima.exe+917C69: CC - int 3
GhostOfTsushima.exe+917C6A: CC - int 3
GhostOfTsushima.exe+917C6B: CC - int 3
GhostOfTsushima.exe+917C6C: CC - int 3
GhostOfTsushima.exe+917C6D: CC - int 3
GhostOfTsushima.exe+917C6E: CC - int 3
GhostOfTsushima.exe+917C6F: CC - int 3
GhostOfTsushima.exe+917C70: 48 89 5C 24 08 - mov [rsp+08],rbx
GhostOfTsushima.exe+917C75: 57 - push rdi
GhostOfTsushima.exe+917C76: 48 83 EC 20 - sub rsp,20
GhostOfTsushima.exe+917C7A: 48 63 DA - movsxd rbx,edx
GhostOfTsushima.exe+917C7D: 48 8B F9 - mov rdi,rcx
GhostOfTsushima.exe+917C80: E8 8B 48 F5 FF - call GhostOfTsushima.exe+86C510
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+917C85: F3 0F 10 84 9F A8 43 00 00 - movss xmm0,[rdi+rbx*4+000043A8]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+917C8E: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GhostOfTsushima.exe+917C93: 48 83 C4 20 - add rsp,20
GhostOfTsushima.exe+917C97: 5F - pop rdi
GhostOfTsushima.exe+917C98: C3 - ret
GhostOfTsushima.exe+917C99: CC - int 3
GhostOfTsushima.exe+917C9A: CC - int 3
GhostOfTsushima.exe+917C9B: CC - int 3
GhostOfTsushima.exe+917C9C: CC - int 3
GhostOfTsushima.exe+917C9D: CC - int 3
GhostOfTsushima.exe+917C9E: CC - int 3
GhostOfTsushima.exe+917C9F: CC - int 3
GhostOfTsushima.exe+917CA0: 48 89 5C 24 08 - mov [rsp+08],rbx
GhostOfTsushima.exe+917CA5: 57 - push rdi
GhostOfTsushima.exe+917CA6: 48 83 EC 20 - sub rsp,20
GhostOfTsushima.exe+917CAA: 80 B9 70 40 00 00 00 - cmp byte ptr [rcx+00004070],00
GhostOfTsushima.exe+917CB1: 48 8B D9 - mov rbx,rcx
GhostOfTsushima.exe+917CB4: 74 18 - je GhostOfTsushima.exe+917CCE
GhostOfTsushima.exe+917CB6: 48 8B 89 78 40 00 00 - mov rcx,[rcx+00004078]
GhostOfTsushima.exe+917CBD: 48 85 C9 - test rcx,rcx
GhostOfTsushima.exe+917CC0: 74 0C - je GhostOfTsushima.exe+917CCE
}
54
"Testing"
2E2E2E
1
90
"Auto Assemble script"
Auto Assembler Script
{ Game : GhostOfTsushima.exe
Version:
Date : 2024-05-28
Author : nightfall
}
[ENABLE]
aobscanmodule(velocityV2,GhostOfTsushima.exe,0F 10 07 0F 11 43 20)
alloc(newmem,$1000,velocityV2)
label(code)
label(return)
alloc(velomod,8,velocityV2)
alloc(xmmbuffer,16,velocityV2)
label(base)
newmem:
mov [base],rdi
sub [base],120
//multiplyVelocityFromHere
push rcx
push rdx
movups [rcx],xmm1 //save register
movups xmm1,[xmmbuffer] //clear register
mov rdx,[pbase]
//movss xmm1,[rbp] //mov xVelocity into xmm1
movups xmm1,[rcx] //cleanup
pop rdx
pop rcx
code:
movups xmm0,[rdi]
movups [rbx+20],xmm0
jmp return
velomod:
dd (float)2
xmmbuffer:
dd (float)0 (float)0 (float)0 (float)0
base:
dd 00
velocityV2:
jmp newmem
nop 2
return:
registersymbol(velocityV2 base)
[DISABLE]
velocityV2:
db 0F 10 07 0F 11 43 20
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+B29ED7
GhostOfTsushima.exe+B29EAE: 0F C2 0D AA 2F 5F 00 01 - cmpltps xmm1,dqword ptr [GhostOfTsushima.exe+111CE60]
GhostOfTsushima.exe+B29EB6: 0F 50 C1 - movmskps eax,xmm1
GhostOfTsushima.exe+B29EB9: 83 F8 0F - cmp eax,0F
GhostOfTsushima.exe+B29EBC: 75 19 - jne GhostOfTsushima.exe+B29ED7
GhostOfTsushima.exe+B29EBE: F3 0F 10 15 32 63 5C 00 - movss xmm2,[GhostOfTsushima.D3D12SDKVersion+46C8]
GhostOfTsushima.exe+B29EC6: 0F 28 C6 - movaps xmm0,xmm6
GhostOfTsushima.exe+B29EC9: F3 0F 10 49 30 - movss xmm1,[rcx+30]
GhostOfTsushima.exe+B29ECE: E8 4D E0 99 FF - call GhostOfTsushima.exe+4C7F20
GhostOfTsushima.exe+B29ED3: 84 C0 - test al,al
GhostOfTsushima.exe+B29ED5: 75 0C - jne GhostOfTsushima.exe+B29EE3
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+B29ED7: 0F 10 07 - movups xmm0,[rdi]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+B29EDA: 0F 11 43 20 - movups [rbx+20],xmm0
GhostOfTsushima.exe+B29EDE: F3 0F 11 73 30 - movss [rbx+30],xmm6
GhostOfTsushima.exe+B29EE3: 48 8B 5C 24 40 - mov rbx,[rsp+40]
GhostOfTsushima.exe+B29EE8: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
GhostOfTsushima.exe+B29EED: 48 83 C4 30 - add rsp,30
GhostOfTsushima.exe+B29EF1: 5F - pop rdi
GhostOfTsushima.exe+B29EF2: C3 - ret
GhostOfTsushima.exe+B29EF3: CC - int 3
GhostOfTsushima.exe+B29EF4: CC - int 3
GhostOfTsushima.exe+B29EF5: CC - int 3
}
91
"base"
0
4 Bytes
[base]
92
"xVelocity"
0
Float
[base]+1E0
116
"writeVisibility"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-29
*/
[ENABLE]
aobscanmodule(aob_writeBis,GhostOfTsushima.exe,F3 0F 11 92 A8 00 00 00)
registersymbol(aob_writeBis)
alloc(newmem_writeBis,1024,GhostOfTsushima.exe)
label(return_writeBis)
newmem_writeBis:
movss [rdx+000000A8],xmm2
jmp return_writeBis
aob_writeBis:
jmp newmem_writeBis
nop 3
return_writeBis:
[DISABLE]
aob_writeBis:
db F3 0F 11 92 A8 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+886547
GhostOfTsushima.exe+8864F9: C6 44 24 28 01 - mov byte ptr [rsp+28],01
GhostOfTsushima.exe+8864FE: 8B 43 0C - mov eax,[rbx+0C]
GhostOfTsushima.exe+886501: 49 8B CE - mov rcx,r14
GhostOfTsushima.exe+886504: 89 44 24 20 - mov [rsp+20],eax
GhostOfTsushima.exe+886508: E8 03 1D 00 00 - call GhostOfTsushima.exe+888210
GhostOfTsushima.exe+88650D: EB 92 - jmp GhostOfTsushima.exe+8864A1
GhostOfTsushima.exe+88650F: CC - int 3
GhostOfTsushima.exe+886510: 40 53 - push rbx
GhostOfTsushima.exe+886512: 56 - push rsi
GhostOfTsushima.exe+886513: 57 - push rdi
GhostOfTsushima.exe+886514: 48 83 EC 50 - sub rsp,50
GhostOfTsushima.exe+886518: 48 8B 05 21 7A 0F 01 - mov rax,[GhostOfTsushima.exe+197DF40]
GhostOfTsushima.exe+88651F: 48 33 C4 - xor rax,rsp
GhostOfTsushima.exe+886522: 48 89 44 24 30 - mov [rsp+30],rax
GhostOfTsushima.exe+886527: F3 0F 5D 15 41 C7 B0 00 - minss xmm2,[GhostOfTsushima.exe+1392C70]
GhostOfTsushima.exe+88652F: 41 8B F1 - mov esi,r9d
GhostOfTsushima.exe+886532: 48 8B DA - mov rbx,rdx
GhostOfTsushima.exe+886535: 48 8B F9 - mov rdi,rcx
GhostOfTsushima.exe+886538: F3 0F 5F 92 A8 00 00 00 - maxss xmm2,[rdx+000000A8]
GhostOfTsushima.exe+886540: 0F 2F 15 29 C7 B0 00 - comiss xmm2,[GhostOfTsushima.exe+1392C70]
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+886547: F3 0F 11 92 A8 00 00 00 - movss [rdx+000000A8],xmm2
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+88654F: 0F 82 DB 00 00 00 - jb GhostOfTsushima.exe+886630
GhostOfTsushima.exe+886555: 83 BA 80 00 00 00 03 - cmp dword ptr [rdx+00000080],03
GhostOfTsushima.exe+88655C: 0F 84 CE 00 00 00 - je GhostOfTsushima.exe+886630
GhostOfTsushima.exe+886562: 48 8B 52 70 - mov rdx,[rdx+70]
GhostOfTsushima.exe+886566: 48 8B 49 08 - mov rcx,[rcx+08]
GhostOfTsushima.exe+88656A: E8 21 81 DF FF - call GhostOfTsushima.exe+67E690
GhostOfTsushima.exe+88656F: 84 C0 - test al,al
GhostOfTsushima.exe+886571: 0F 84 B9 00 00 00 - je GhostOfTsushima.exe+886630
GhostOfTsushima.exe+886577: 44 8B CE - mov r9d,esi
GhostOfTsushima.exe+88657A: 41 B8 03 00 00 00 - mov r8d,00000003
GhostOfTsushima.exe+886580: 48 8B D3 - mov rdx,rbx
GhostOfTsushima.exe+886583: 48 8B CF - mov rcx,rdi
GhostOfTsushima.exe+886586: E8 F5 72 00 00 - call GhostOfTsushima.exe+88D880
GhostOfTsushima.exe+88658B: 8B 83 A0 00 00 00 - mov eax,[rbx+000000A0]
GhostOfTsushima.exe+886591: 39 05 FD 96 BF 00 - cmp [GhostOfTsushima.AmdPowerXpressRequestHighPerformance+5AF0],eax
GhostOfTsushima.exe+886597: 0F 85 93 00 00 00 - jne GhostOfTsushima.exe+886630
GhostOfTsushima.exe+88659D: 48 8B D3 - mov rdx,rbx
GhostOfTsushima.exe+8865A0: 48 8B CF - mov rcx,rdi
GhostOfTsushima.exe+8865A3: E8 A8 1A 00 00 - call GhostOfTsushima.exe+888050
GhostOfTsushima.exe+8865A8: 84 C0 - test al,al
}
119
"DrawStrengh"
Auto Assembler Script
{ Game : GhostOfTsushima.exe
Version:
Date : 2024-05-29
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(spotted,GhostOfTsushima.exe,F3 0F 11 B3 8C 02 00 00) // should be unique
alloc(newmem,$1000,spotted)
label(code)
label(return)
newmem:
code:
//movss [rbx+0000028C],xmm6
mov [rbx+28C],(float)1
jmp return
spotted:
jmp newmem
nop 3
return:
registersymbol(spotted)
[DISABLE]
spotted:
db F3 0F 11 B3 8C 02 00 00
unregistersymbol(spotted)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+A9FD91
GhostOfTsushima.exe+A9FD67: E8 A4 89 A2 FF - call GhostOfTsushima.exe+4C8710
GhostOfTsushima.exe+A9FD6C: F3 41 0F 59 C0 - mulss xmm0,xmm8
GhostOfTsushima.exe+A9FD71: 44 0F 28 44 24 40 - movaps xmm8,[rsp+40]
GhostOfTsushima.exe+A9FD77: 0F 2F C6 - comiss xmm0,xmm6
GhostOfTsushima.exe+A9FD7A: 72 07 - jb GhostOfTsushima.exe+A9FD83
GhostOfTsushima.exe+A9FD7C: 0F 28 F0 - movaps xmm6,xmm0
GhostOfTsushima.exe+A9FD7F: F3 0F 5D F7 - minss xmm6,xmm7
GhostOfTsushima.exe+A9FD83: 8B 83 A4 02 00 00 - mov eax,[rbx+000002A4]
GhostOfTsushima.exe+A9FD89: 45 33 F6 - xor r14d,r14d
GhostOfTsushima.exe+A9FD8C: 0F 28 7C 24 50 - movaps xmm7,[rsp+50]
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+A9FD91: F3 0F 11 B3 8C 02 00 00 - movss [rbx+0000028C],xmm6
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+A9FD99: F2 0F 10 35 97 AD 66 00 - movsd xmm6,[GhostOfTsushima.exe+110AB38]
GhostOfTsushima.exe+A9FDA1: 8B E8 - mov ebp,eax
GhostOfTsushima.exe+A9FDA3: 83 F8 FF - cmp eax,-01
GhostOfTsushima.exe+A9FDA6: 0F 84 EA 01 00 00 - je GhostOfTsushima.exe+A9FF96
GhostOfTsushima.exe+A9FDAC: 85 C0 - test eax,eax
GhostOfTsushima.exe+A9FDAE: 0F 84 27 01 00 00 - je GhostOfTsushima.exe+A9FEDB
GhostOfTsushima.exe+A9FDB4: 83 F8 01 - cmp eax,01
GhostOfTsushima.exe+A9FDB7: 74 5A - je GhostOfTsushima.exe+A9FE13
GhostOfTsushima.exe+A9FDB9: 83 F8 02 - cmp eax,02
GhostOfTsushima.exe+A9FDBC: 0F 85 17 02 00 00 - jne GhostOfTsushima.exe+A9FFD9
}
122
"TeleportFlag"
0
Byte
tpf
123
"saveflag"
0
Byte
savef
137
"Call FogErease"
Auto Assembler Script
/*
Game Executable : GhostOfTsushima.exe
Author : nightfallct
Script Date : 2024-05-31
*/
[ENABLE]
aobscanmodule(aob_fogofwar,GhostOfTsushima.exe,0F 10 81 20 01 00 00 0F 11 02 C3)
registersymbol(aob_fogofwar cflag)
alloc(newmem_fogofwar,$420,GhostOfTsushima.exe)
label(return_fogofwar)
alloc(buffer1,8,aob_fogofwar)
alloc(buffer2,8,aob_fogofwar)
alloc(cflag,2,aob_fogofwar)
alloc(param1,16,aob_fogofwar)
newmem_fogofwar:
cmp [cflag],0
je @f
push rax
push rbx
push rcx
push rdx
push rsi
push rdi
push rbp
push rsp
push [buffer1]
push [buffer2]
call GhostOfTsushima.exe+7E4910
pop [buffer2]
pop [buffer1]
pop rsp
pop rbp
pop rdi
pop rsi
pop rdx
pop rcx
pop rbx
pop rax
mov [cflag],00
code:
movups xmm0,[rcx+00000120]
jmp return_fogofwar
param1:
dq 00 //param1 should be base of fog I guess
cflag:
db 00
buffer1:
dd 00
buffer2:
dd 00
aob_fogofwar:
jmp newmem_fogofwar
nop 2
return_fogofwar:
[DISABLE]
aob_fogofwar:
db 0F 10 81 20 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostOfTsushima.exe+87300B
GhostOfTsushima.exe+872FBC: 48 63 91 F0 00 00 00 - movsxd rdx,dword ptr [rcx+000000F0]
GhostOfTsushima.exe+872FC3: 0F 28 05 16 EF 87 00 - movaps xmm0,[GhostOfTsushima.D3D12SDKVersion+63B0]
GhostOfTsushima.exe+872FCA: 48 FF C2 - inc rdx
GhostOfTsushima.exe+872FCD: 0F C6 C2 A0 - shufps xmm0,xmm2,-60
GhostOfTsushima.exe+872FD1: 0F C6 D0 24 - shufps xmm2,xmm0,24
GhostOfTsushima.exe+872FD5: 0F 28 CA - movaps xmm1,xmm2
GhostOfTsushima.exe+872FD8: 48 C1 E2 06 - shl rdx,06
GhostOfTsushima.exe+872FDC: 49 03 90 78 02 00 00 - add rdx,[r8+00000278]
GhostOfTsushima.exe+872FE3: 0F 28 C2 - movaps xmm0,xmm2
GhostOfTsushima.exe+872FE6: 0F C6 CA 55 - shufps xmm1,xmm2,55
GhostOfTsushima.exe+872FEA: 0F C6 C2 00 - shufps xmm0,xmm2,00
GhostOfTsushima.exe+872FEE: 0F C6 D2 AA - shufps xmm2,xmm2,-56
GhostOfTsushima.exe+872FF2: 0F 59 4A 10 - mulps xmm1,[rdx+10]
GhostOfTsushima.exe+872FF6: 0F 59 02 - mulps xmm0,[rdx]
GhostOfTsushima.exe+872FF9: 0F 59 52 20 - mulps xmm2,[rdx+20]
GhostOfTsushima.exe+872FFD: 0F 58 C8 - addps xmm1,xmm0
GhostOfTsushima.exe+873000: 0F 58 CA - addps xmm1,xmm2
GhostOfTsushima.exe+873003: 0F 58 4A 30 - addps xmm1,[rdx+30]
GhostOfTsushima.exe+873007: 0F 11 08 - movups [rax],xmm1
GhostOfTsushima.exe+87300A: C3 - ret
// ---------- INJECTING HERE ----------
GhostOfTsushima.exe+87300B: 0F 10 81 20 01 00 00 - movups xmm0,[rcx+00000120]
// ---------- DONE INJECTING ----------
GhostOfTsushima.exe+873012: 0F 11 02 - movups [rdx],xmm0
GhostOfTsushima.exe+873015: C3 - ret
GhostOfTsushima.exe+873016: CC - int 3
GhostOfTsushima.exe+873017: CC - int 3
GhostOfTsushima.exe+873018: CC - int 3
GhostOfTsushima.exe+873019: CC - int 3
GhostOfTsushima.exe+87301A: CC - int 3
GhostOfTsushima.exe+87301B: CC - int 3
GhostOfTsushima.exe+87301C: CC - int 3
GhostOfTsushima.exe+87301D: CC - int 3
GhostOfTsushima.exe+87301E: CC - int 3
GhostOfTsushima.exe+87301F: CC - int 3
GhostOfTsushima.exe+873020: 40 53 - push rbx
GhostOfTsushima.exe+873022: 48 83 EC 20 - sub rsp,20
GhostOfTsushima.exe+873026: 48 8B DA - mov rbx,rdx
GhostOfTsushima.exe+873029: 4C 8D 49 10 - lea r9,[rcx+10]
GhostOfTsushima.exe+87302D: 48 8B 51 20 - mov rdx,[rcx+20]
GhostOfTsushima.exe+873031: 45 33 C0 - xor r8d,r8d
GhostOfTsushima.exe+873034: 48 8B CB - mov rcx,rbx
GhostOfTsushima.exe+873037: E8 84 00 00 00 - call GhostOfTsushima.exe+8730C0
}
138
"CallFog"
0
Byte
cflag
0
"Compact UI Cheat engine"
808080
Auto Assembler Script
[ENABLE]
luacall(function cycleFullCompact(sender,force); local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full view Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu(); if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
luacall(cycleFullCompact(nil,false))
speedhack_wantedspeed
1BA259D0000
breath 0-1f
"GhostOfTsushima.exe"+520DE1
dec tems
"GhostOfTsushima.exe"+54F7B1
jmp erease fog of war
"GhostOfTsushima.exe"+68B585
writeHealth
"GhostOfTsushima.exe"+87674F
writeCurrentVelocity