2 "Freeze Time" Auto Assembler Script {$STRICT} define(address, GridManager:LateUpdate+a8f) define(bytes, F2 0F 5C C1 F2 0F 5A E8) [ENABLE] assert(address, bytes) address: db 90 90 90 90 [DISABLE] address: db bytes unregisterSymbol(injTimerHook) {Address: GridManager:LateUpdate+a8f AOB Address: GridManager:LateUpdate+a8f GridManager:LateUpdate+a53 - 85 C0 - test eax,eax GridManager:LateUpdate+a55 - 0F85 96060000 - jne GridManager:LateUpdate+10f1 GridManager:LateUpdate+a5b - F3 0F10 86 3C010000 - movss xmm0,[rsi+0000013C] GridManager:LateUpdate+a63 - F3 0F5A C0 - cvtss2sd xmm0,xmm0 GridManager:LateUpdate+a67 - F2 0F11 85 D8FCFFFF - movsd [rbp-00000328],xmm0 GridManager:LateUpdate+a6f - 48 8D AD 00000000 - lea rbp,[rbp+00000000] GridManager:LateUpdate+a76 - 49 BB E0F05D5BBA020000 - mov r11,UnityEngine.Time:get_deltaTime GridManager:LateUpdate+a80 - 41 FF D3 - call r11 GridManager:LateUpdate+a83 - F3 0F5A C8 - cvtss2sd xmm1,xmm0 GridManager:LateUpdate+a87 - F2 0F10 85 D8FCFFFF - movsd xmm0,[rbp-00000328] ----------------------------------- <<<---- Injection point GridManager:LateUpdate+a8f - F2 0F5C C1 - subsd xmm0,xmm1 ------------------------------------ GridManager:LateUpdate+a93 - F2 0F5A E8 - cvtsd2ss xmm5,xmm0 GridManager:LateUpdate+a97 - F3 0F11 AE 3C010000 - movss [rsi+0000013C],xmm5 GridManager:LateUpdate+a9f - F3 0F10 86 3C010000 - movss xmm0,[rsi+0000013C] GridManager:LateUpdate+aa7 - F3 0F5A C0 - cvtss2sd xmm0,xmm0 GridManager:LateUpdate+aab - F2 0F11 85 40FDFFFF - movsd [rbp-000002C0],xmm0 GridManager:LateUpdate+ab3 - 48 8B 4E 48 - mov rcx,[rsi+48] GridManager:LateUpdate+ab7 - 48 63 86 F0000000 - movsxd rax,dword ptr [rsi+000000F0] GridManager:LateUpdate+abe - 4C 8B E9 - mov r13,rcx GridManager:LateUpdate+ac1 - 4C 8B E0 - mov r12,rax GridManager:LateUpdate+ac4 - 83 39 00 - cmp dword ptr [rcx],00 } 4 "Godmode" Auto Assembler Script define(address,PlayerHealth:TakeDamage) define(bytes,55 48 8B EC 48 81 EC 50 01 00 00) [ENABLE] assert(address,bytes) address: ret [DISABLE] address: db bytes // push rbp dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: PlayerHealth:TakeDamage 2B8692BDF56: C6 - db -3A 2B8692BDF57: 22 87 06 08 E0 90 - and al,[rdi-6F1FF7FA] 2B8692BDF5D: BD D7 B9 02 00 - mov ebp,0002B9D7 2B8692BDF62: 00 00 - add [rax],al 2B8692BDF64: 00 00 - add [rax],al 2B8692BDF66: 00 00 - add [rax],al 2B8692BDF68: 00 00 - add [rax],al 2B8692BDF6A: 00 00 - add [rax],al 2B8692BDF6C: 00 00 - add [rax],al 2B8692BDF6E: 00 00 - add [rax],al // ---------- INJECTING HERE ---------- PlayerHealth:TakeDamage: 55 - push rbp // ---------- DONE INJECTING ---------- PlayerHealth:TakeDamage+1: 48 8B EC - mov rbp,rsp PlayerHealth:TakeDamage+4: 48 81 EC 50 01 00 00 - sub rsp,00000150 PlayerHealth:TakeDamage+b: 48 89 75 F0 - mov [rbp-10],rsi PlayerHealth:TakeDamage+f: 48 89 7D F8 - mov [rbp-08],rdi PlayerHealth:TakeDamage+13: 48 8B F9 - mov rdi,rcx PlayerHealth:TakeDamage+16: 48 8B F2 - mov rsi,rdx PlayerHealth:TakeDamage+19: 48 C7 85 E0 FE FF FF 00 00 00 00 - mov qword ptr [rbp-00000120],00000000 PlayerHealth:TakeDamage+24: 48 B8 A0 33 08 90 B9 02 00 00 - mov rax,000002B9900833A0 PlayerHealth:TakeDamage+2e: 48 8B 00 - mov rax,[rax] PlayerHealth:TakeDamage+31: 48 8B 48 18 - mov rcx,[rax+18] }