46
"Enable Mono"
Auto Assembler Script
[ENABLE]
{$lua}
LaunchMonoDataCollector()
{$asm}
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
35
"don't spend money"
Auto Assembler Script
define(address,Wallet:Withdraw+1e)
define(bytes,2B C6 89 47 28)
[ENABLE]
assert(address,bytes)
address:
nop
nop
[DISABLE]
address:
db bytes
// sub eax,esi
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Wallet:Withdraw+1e
Wallet:Withdraw+5: 57 - push rdi
Wallet:Withdraw+6: 48 8B F9 - mov rdi,rcx
Wallet:Withdraw+9: 48 8B F2 - mov rsi,rdx
Wallet:Withdraw+c: 48 63 47 28 - movsxd rax,dword ptr [rdi+28]
Wallet:Withdraw+10: 2B C6 - sub eax,esi
Wallet:Withdraw+12: 85 C0 - test eax,eax
Wallet:Withdraw+14: 7D 04 - jnl Wallet:Withdraw+1a
Wallet:Withdraw+16: 33 C0 - xor eax,eax
Wallet:Withdraw+18: EB 29 - jmp Wallet:Withdraw+43
Wallet:Withdraw+1a: 48 63 47 28 - movsxd rax,dword ptr [rdi+28]
// ---------- INJECTING HERE ----------
Wallet:Withdraw+1e: 2B C6 - sub eax,esi
// ---------- DONE INJECTING ----------
Wallet:Withdraw+20: 89 47 28 - mov [rdi+28],eax
Wallet:Withdraw+23: 48 8B CF - mov rcx,rdi
Wallet:Withdraw+26: 48 8B D6 - mov rdx,rsi
Wallet:Withdraw+29: 48 83 EC 20 - sub rsp,20
Wallet:Withdraw+2d: 49 BB 40 A3 72 0A 00 00 00 00 - mov r11,Wallet:AnnounceWithdrawEvent
Wallet:Withdraw+37: 41 FF D3 - call r11
Wallet:Withdraw+3a: 48 83 C4 20 - add rsp,20
Wallet:Withdraw+3e: B8 01 00 00 00 - mov eax,00000001
Wallet:Withdraw+43: 48 8D 65 F0 - lea rsp,[rbp-10]
Wallet:Withdraw+47: 5F - pop rdi
}
51
"no Cooldown for spells"
Auto Assembler Script
// since the address is not accepted by CE when using it for a full injection
// with CE7.4, there are two ways: exchange the monoscript.lua with a version
// patched by DarkByte or using THIS way, shown to me by kaizerv :)
[ENABLE]
alloc(newmem,$1000,Player+SkillState:StartCooldownTimer)
label(code)
newmem:
cmp rcx,0
je code
mov rax,[rcx+40]
cmp rax,0
je code
mov [rax+38],5
code:
ret
Player+SkillState:StartCooldownTimer:
jmp newmem
[DISABLE]
Player+SkillState:StartCooldownTimer:
db 55 48 8B EC 57
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Player+SkillState:StartCooldownTimer
4EEFA5FC: 01 50 00 - add [rax+00],edx
4EEFA5FF: 00 00 - add [rax],al
4EEFA601: 00 E8 - add al,ch
4EEFA603: F9 - stc
4EEFA604: 59 - pop rcx
4EEFA605: 59 - pop rcx
4EEFA606: B9 04 50 3D 9F - mov ecx,9F3D5004
4EEFA60B: 33 00 - xor eax,[rax]
4EEFA60D: 00 00 - add [rax],al
4EEFA60F: 00 - db 00
// ---------- INJECTING HERE ----------
Player+SkillState:StartCooldownTimer: 55 - push rbp
// ---------- DONE INJECTING ----------
Player+SkillState:StartCooldownTimer+1: 48 8B EC - mov rbp,rsp
Player+SkillState:StartCooldownTimer+4: 57 - push rdi
Player+SkillState:StartCooldownTimer+5: 41 54 - push r12
Player+SkillState:StartCooldownTimer+7: 48 83 EC 30 - sub rsp,30
Player+SkillState:StartCooldownTimer+b: 48 8B F9 - mov rdi,rcx
Player+SkillState:StartCooldownTimer+e: F3 0F 11 4D D8 - movss [rbp-28],xmm1
Player+SkillState:StartCooldownTimer+13: 4C 89 45 D0 - mov [rbp-30],r8
Player+SkillState:StartCooldownTimer+17: 0F B6 87 9C 00 00 00 - movzx eax,byte ptr [rdi+0000009C]
Player+SkillState:StartCooldownTimer+1e: 85 C0 - test eax,eax
Player+SkillState:StartCooldownTimer+20: 74 16 - je Player+SkillState:StartCooldownTimer+38
}
25
"Get Address of Player"
Auto Assembler Script
[ENABLE]
{$lua}
LaunchMonoDataCollector()
{$asm}
alloc(players,4)
// label(players)
players:
readmem(GameController:Update+14,4)
registersymbol(players)
[DISABLE]
dealloc(players)
unregistersymbol(players)
//code from here till the end of the code will be used to disable the cheat
26
"List of Players (Player[])"
1
0
1
players
0
0
27
"Player 1"
0
1
+20
0
28
"Health"
0
1
+40
0
29
"Invulnerable (0=off, 1=on)"
0:Off
1:On
0
0000FF
Byte
+1c4
30
"HealthStat"
0
1
+c8
0
31
"Current Health"
0
0000FF
Float
+28
32
"MaxHealth"
0
Float
+2c
54
"Wallet"
0
1
"mono.dll"+00296BC8
0
B8
240
20
55
"Gold"
0
4 Bytes
+28
56
"BlueShells"
0
4 Bytes
-38