114982
"<=== Attach to process"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("DragonkinTheBanished-Win64-Shipping.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
{$asm}
[DISABLE]
114993
"Get Addresses (not working in town)"
Auto Assembler Script
[ENABLE]
aobscanmodule(get_localplayer,DragonkinTheBanished-Win64-Shipping.exe,49 8B 07 48 8D 95 60 03 00 00) // should be unique
alloc(newmem,$100,get_localplayer)
label(code)
label(return)
label(localplayeraddress)
newmem:
mov [localplayeraddress],r15
code:
mov rax,[r15]
lea rdx,[rbp+00000360]
jmp return
localplayeraddress:
dq 0
get_localplayer:
jmp newmem
nop 5
return:
registersymbol(get_localplayer localplayeraddress)
[DISABLE]
get_localplayer:
db 49 8B 07 48 8D 95 60 03 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DragonkinTheBanished-Win64-Shipping.exe+38F73E0
DragonkinTheBanished-Win64-Shipping.exe+38F73A8: F2 4C 0F 2C C1 - cvttsd2si r8,xmm1
DragonkinTheBanished-Win64-Shipping.exe+38F73AD: 44 89 44 24 44 - mov [rsp+44],r8d
DragonkinTheBanished-Win64-Shipping.exe+38F73B2: 41 8D 04 10 - lea eax,[r8+rdx]
DragonkinTheBanished-Win64-Shipping.exe+38F73B6: 89 44 24 54 - mov [rsp+54],eax
DragonkinTheBanished-Win64-Shipping.exe+38F73BA: 48 8B 44 24 50 - mov rax,[rsp+50]
DragonkinTheBanished-Win64-Shipping.exe+38F73BF: 48 89 86 28 01 00 00 - mov [rsi+00000128],rax
DragonkinTheBanished-Win64-Shipping.exe+38F73C6: 48 89 8E 48 01 00 00 - mov [rsi+00000148],rcx
DragonkinTheBanished-Win64-Shipping.exe+38F73CD: 48 8D 8D 60 03 00 00 - lea rcx,[rbp+00000360]
DragonkinTheBanished-Win64-Shipping.exe+38F73D4: 48 89 86 50 01 00 00 - mov [rsi+00000150],rax
DragonkinTheBanished-Win64-Shipping.exe+38F73DB: E8 20 56 97 FF - call DragonkinTheBanished-Win64-Shipping.exe+326CA00
// ---------- INJECTING HERE ----------
DragonkinTheBanished-Win64-Shipping.exe+38F73E0: 49 8B 07 - mov rax,[r15]
// ---------- DONE INJECTING ----------
DragonkinTheBanished-Win64-Shipping.exe+38F73E3: 48 8D 95 60 03 00 00 - lea rdx,[rbp+00000360]
DragonkinTheBanished-Win64-Shipping.exe+38F73EA: 49 8B CF - mov rcx,r15
DragonkinTheBanished-Win64-Shipping.exe+38F73ED: FF 90 C8 02 00 00 - call qword ptr [rax+000002C8]
DragonkinTheBanished-Win64-Shipping.exe+38F73F3: 41 83 FE FF - cmp r14d,-01
DragonkinTheBanished-Win64-Shipping.exe+38F73F7: 74 19 - je DragonkinTheBanished-Win64-Shipping.exe+38F7412
DragonkinTheBanished-Win64-Shipping.exe+38F73F9: 48 8B 0D 50 BB D7 05 - mov rcx,[GEngine]
DragonkinTheBanished-Win64-Shipping.exe+38F7400: 33 D2 - xor edx,edx
DragonkinTheBanished-Win64-Shipping.exe+38F7402: E8 C9 43 50 00 - call DragonkinTheBanished-Win64-Shipping.exe+3DFB7D0
DragonkinTheBanished-Win64-Shipping.exe+38F7407: 84 C0 - test al,al
DragonkinTheBanished-Win64-Shipping.exe+38F7409: 74 07 - je DragonkinTheBanished-Win64-Shipping.exe+38F7412
}
114994
"Local Player"
0
1
localplayeraddress
0
115009
"PlayerController"
0
1
+30
115010
"Health"
0
Float
+0
48
C8
180
10
8D0
388
340
115011
"Mana"
0
Float
+0
b8
C8
180
10
8D0
388
340
115014
"XP"
0
Float
+0
168
C8
180
10
8D0
388
340
115015
"Values via Pointer-Chain"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FC0
88
18
"Health Current"
0
Float
+8
115007
"Mana"
0
Float
+78
115017
"XP"
0
Float
+0
168
C8
180
10
8D0
388
340
115006
"Backup Pointers"
C0C0C0
1
114999
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FC0
88
115001
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+09672E58
40
0
178
FC0
3E8
115002
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FB0
80
115003
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+09672E58
40
0
178
FB0
3E0