114982
"<=== Attach to process"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("DragonkinTheBanished-Win64-Shipping.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
{$asm}
[DISABLE]
114993
"Get Addresses (not working in town)"
Auto Assembler Script
[ENABLE]
aobscanmodule(get_localplayer,DragonkinTheBanished-Win64-Shipping.exe,49 8B 07 48 8D 95 60 03 00 00) // should be unique
alloc(newmem,$100,get_localplayer)
label(code)
label(return)
label(localplayeraddress)
newmem:
mov [localplayeraddress],r15
code:
mov rax,[r15]
lea rdx,[rbp+00000360]
jmp return
localplayeraddress:
dq 0
get_localplayer:
jmp newmem
nop 5
return:
registersymbol(get_localplayer localplayeraddress)
[DISABLE]
get_localplayer:
db 49 8B 07 48 8D 95 60 03 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DragonkinTheBanished-Win64-Shipping.exe+38F73E0
DragonkinTheBanished-Win64-Shipping.exe+38F73A8: F2 4C 0F 2C C1 - cvttsd2si r8,xmm1
DragonkinTheBanished-Win64-Shipping.exe+38F73AD: 44 89 44 24 44 - mov [rsp+44],r8d
DragonkinTheBanished-Win64-Shipping.exe+38F73B2: 41 8D 04 10 - lea eax,[r8+rdx]
DragonkinTheBanished-Win64-Shipping.exe+38F73B6: 89 44 24 54 - mov [rsp+54],eax
DragonkinTheBanished-Win64-Shipping.exe+38F73BA: 48 8B 44 24 50 - mov rax,[rsp+50]
DragonkinTheBanished-Win64-Shipping.exe+38F73BF: 48 89 86 28 01 00 00 - mov [rsi+00000128],rax
DragonkinTheBanished-Win64-Shipping.exe+38F73C6: 48 89 8E 48 01 00 00 - mov [rsi+00000148],rcx
DragonkinTheBanished-Win64-Shipping.exe+38F73CD: 48 8D 8D 60 03 00 00 - lea rcx,[rbp+00000360]
DragonkinTheBanished-Win64-Shipping.exe+38F73D4: 48 89 86 50 01 00 00 - mov [rsi+00000150],rax
DragonkinTheBanished-Win64-Shipping.exe+38F73DB: E8 20 56 97 FF - call DragonkinTheBanished-Win64-Shipping.exe+326CA00
// ---------- INJECTING HERE ----------
DragonkinTheBanished-Win64-Shipping.exe+38F73E0: 49 8B 07 - mov rax,[r15]
// ---------- DONE INJECTING ----------
DragonkinTheBanished-Win64-Shipping.exe+38F73E3: 48 8D 95 60 03 00 00 - lea rdx,[rbp+00000360]
DragonkinTheBanished-Win64-Shipping.exe+38F73EA: 49 8B CF - mov rcx,r15
DragonkinTheBanished-Win64-Shipping.exe+38F73ED: FF 90 C8 02 00 00 - call qword ptr [rax+000002C8]
DragonkinTheBanished-Win64-Shipping.exe+38F73F3: 41 83 FE FF - cmp r14d,-01
DragonkinTheBanished-Win64-Shipping.exe+38F73F7: 74 19 - je DragonkinTheBanished-Win64-Shipping.exe+38F7412
DragonkinTheBanished-Win64-Shipping.exe+38F73F9: 48 8B 0D 50 BB D7 05 - mov rcx,[GEngine]
DragonkinTheBanished-Win64-Shipping.exe+38F7400: 33 D2 - xor edx,edx
DragonkinTheBanished-Win64-Shipping.exe+38F7402: E8 C9 43 50 00 - call DragonkinTheBanished-Win64-Shipping.exe+3DFB7D0
DragonkinTheBanished-Win64-Shipping.exe+38F7407: 84 C0 - test al,al
DragonkinTheBanished-Win64-Shipping.exe+38F7409: 74 07 - je DragonkinTheBanished-Win64-Shipping.exe+38F7412
}
114994
"Local Player"
0
1
localplayeraddress
0
115009
"PlayerController"
0
1
+30
115010
"Health"
0
Float
+0
48
C8
180
10
8D0
388
340
115011
"Mana"
0
Float
+0
b8
C8
180
10
8D0
388
340
115014
"XP"
0
Float
+0
168
C8
180
10
8D0
388
340
115027
"Damage (Takes a few seconds to make a difference)"
0
Float
+0
17C
C8
180
10
8D0
388
340
115028
"Defense (Takes a few seconds to make a difference)"
0
Float
+0
62C
C8
180
10
8D0
388
340
115022
"Gain 999 gold when looting"
Auto Assembler Script
[ENABLE]
aobscanmodule(gold,DragonkinTheBanished-Win64-Shipping.exe,48 8B D9 01 82 60 01 00 00) // should be unique
alloc(newmem,$100,gold)
label(code)
label(return)
newmem:
mov eax,#999
code:
mov rbx,rcx
add [rdx+00000160],eax
jmp return
gold:
jmp newmem
nop 4
return:
registersymbol(gold)
[DISABLE]
gold:
db 48 8B D9 01 82 60 01 00 00
unregistersymbol(gold)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DragonkinTheBanished-Win64-Shipping.exe"+4F03A17
"DragonkinTheBanished-Win64-Shipping.exe"+4F039FC: CC - int 3
"DragonkinTheBanished-Win64-Shipping.exe"+4F039FD: CC - int 3
"DragonkinTheBanished-Win64-Shipping.exe"+4F039FE: CC - int 3
"DragonkinTheBanished-Win64-Shipping.exe"+4F039FF: CC - int 3
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A00: 48 89 5C 24 10 - mov [rsp+10],rbx
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A05: 48 89 6C 24 18 - mov [rsp+18],rbp
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A0A: 48 89 74 24 20 - mov [rsp+20],rsi
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A0F: 57 - push rdi
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A10: 48 83 EC 30 - sub rsp,30
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A14: 8B 41 08 - mov eax,[rcx+08]
// ---------- INJECTING HERE ----------
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A17: 48 8B D9 - mov rbx,rcx
// ---------- DONE INJECTING ----------
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A1A: 01 82 60 01 00 00 - add [rdx+00000160],eax
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A20: 48 8B EA - mov rbp,rdx
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A23: 48 8B 09 - mov rcx,[rcx]
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A26: E8 A5 8D 01 00 - call "DragonkinTheBanished-Win64-Shipping.exe"+4F1C7D0
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A2B: 48 85 C0 - test rax,rax
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A2E: 74 0F - je "DragonkinTheBanished-Win64-Shipping.exe"+4F03A3F
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A30: 44 8B 43 08 - mov r8d,[rbx+08]
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A34: 48 8B D5 - mov rdx,rbp
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A37: 48 8B C8 - mov rcx,rax
"DragonkinTheBanished-Win64-Shipping.exe"+4F03A3A: E8 21 68 21 00 - call "DragonkinTheBanished-Win64-Shipping.exe"+511A260
}
115006
"Backup Pointers"
C0C0C0
1
114999
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FC0
88
115001
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+09672E58
40
0
178
FC0
3E8
115002
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FB0
80
115003
"pointerscan result"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+09672E58
40
0
178
FB0
3E0
115015
"Values via Pointer-Chain"
Float
"DragonkinTheBanished-Win64-Shipping.exe"+091CD178
40
0
178
FC0
88
18
"Health Current"
0
Float
+8
115007
"Mana"
0
Float
+78
115017
"XP"
0
Float
+0
168
C8
180
10
8D0
388
340