114982
"<=== Attach to process"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("EternalStrandsSteam-Win64-Shipping.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
{$asm}
[DISABLE]
115012
"when converting mats to ressources gain one instead of spending it "
Auto Assembler Script
[ENABLE]
aobscanmodule(mats,EternalStrandsSteam-Win64-Shipping.exe,0E 01 7B 28 48 8B 5C 24 30) // should be unique
alloc(newmem,$100,mats)
label(code)
label(return)
newmem:
code:
add [rbx+28],1
mov rbx,[rsp+30]
jmp return
mats+01:
jmp newmem
nop 3
return:
registersymbol(mats)
[DISABLE]
mats+01:
db 01 7B 28 48 8B 5C 24 30
unregistersymbol(mats)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "EternalStrandsSteam-Win64-Shipping.exe"+45AC287
"EternalStrandsSteam-Win64-Shipping.exe"+45AC265: 74 2E - je "EternalStrandsSteam-Win64-Shipping.exe"+45AC295
"EternalStrandsSteam-Win64-Shipping.exe"+45AC267: E8 24 3C E8 FF - call "EternalStrandsSteam-Win64-Shipping.exe"+442FE90
"EternalStrandsSteam-Win64-Shipping.exe"+45AC26C: 48 8B 4B 10 - mov rcx,[rbx+10]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC270: 48 83 C0 30 - add rax,30
"EternalStrandsSteam-Win64-Shipping.exe"+45AC274: 48 63 50 08 - movsxd rdx,dword ptr [rax+08]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC278: 3B 51 38 - cmp edx,[rcx+38]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC27B: 7F 18 - jg "EternalStrandsSteam-Win64-Shipping.exe"+45AC295
"EternalStrandsSteam-Win64-Shipping.exe"+45AC27D: 48 8B 49 30 - mov rcx,[rcx+30]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC281: 48 39 04 D1 - cmp [rcx+rdx*8],rax
"EternalStrandsSteam-Win64-Shipping.exe"+45AC285: 75 0E - jne "EternalStrandsSteam-Win64-Shipping.exe"+45AC295
// ---------- INJECTING HERE ----------
"EternalStrandsSteam-Win64-Shipping.exe"+45AC287: 01 7B 28 - add [rbx+28],edi
// ---------- DONE INJECTING ----------
"EternalStrandsSteam-Win64-Shipping.exe"+45AC28A: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC28F: 48 83 C4 20 - add rsp,20
"EternalStrandsSteam-Win64-Shipping.exe"+45AC293: 5F - pop rdi
"EternalStrandsSteam-Win64-Shipping.exe"+45AC294: C3 - ret
"EternalStrandsSteam-Win64-Shipping.exe"+45AC295: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"EternalStrandsSteam-Win64-Shipping.exe"+45AC29A: 33 C0 - xor eax,eax
"EternalStrandsSteam-Win64-Shipping.exe"+45AC29C: 01 78 28 - add [rax+28],edi
"EternalStrandsSteam-Win64-Shipping.exe"+45AC29F: 48 83 C4 20 - add rsp,20
"EternalStrandsSteam-Win64-Shipping.exe"+45AC2A3: 5F - pop rdi
"EternalStrandsSteam-Win64-Shipping.exe"+45AC2A4: C3 - ret
}
115037
"Set all Mats-Stacks >2 to 99 when opening the inventory (press "I")"
Auto Assembler Script
{ Game : EternalStrandsSteam-Win64-Shipping.exe
Version:
Date : 2025-03-15
Author : Marc
When opening the inventory pressing "i", ALL Mats are being read.
And with this cheat, automatically set to stacks of 99
}
[ENABLE]
aobscanmodule(givemats,EternalStrandsSteam-Win64-Shipping.exe,8B 43 28 48 8B 5C 24 20 48 83 C4 28 C3 B8 01 00 00 00 48 83 C4 28 C3 40) // should be unique
alloc(newmem,$100,givemats)
label(code)
label(return)
newmem:
mov eax,#99
mov [rbx+28],eax
code:
mov eax,[rbx+28]
mov rbx,[rsp+20]
jmp return
givemats:
jmp newmem
nop 3
return:
registersymbol(givemats)
[DISABLE]
givemats:
db 8B 43 28 48 8B 5C 24 20
unregistersymbol(givemats)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "EternalStrandsSteam-Win64-Shipping.exe"+4593CB9
"EternalStrandsSteam-Win64-Shipping.exe"+4593C99: 48 8B 53 10 - mov rdx,[rbx+10]
"EternalStrandsSteam-Win64-Shipping.exe"+4593C9D: 4C 8D 40 30 - lea r8,[rax+30]
"EternalStrandsSteam-Win64-Shipping.exe"+4593CA1: 48 63 40 38 - movsxd rax,dword ptr [rax+38]
"EternalStrandsSteam-Win64-Shipping.exe"+4593CA5: 3B 42 38 - cmp eax,[rdx+38]
"EternalStrandsSteam-Win64-Shipping.exe"+4593CA8: 7F 0D - jg "EternalStrandsSteam-Win64-Shipping.exe"+4593CB7
"EternalStrandsSteam-Win64-Shipping.exe"+4593CAA: 48 8B C8 - mov rcx,rax
"EternalStrandsSteam-Win64-Shipping.exe"+4593CAD: 48 8B 42 30 - mov rax,[rdx+30]
"EternalStrandsSteam-Win64-Shipping.exe"+4593CB1: 4C 39 04 C8 - cmp [rax+rcx*8],r8
"EternalStrandsSteam-Win64-Shipping.exe"+4593CB5: 74 02 - je "EternalStrandsSteam-Win64-Shipping.exe"+4593CB9
"EternalStrandsSteam-Win64-Shipping.exe"+4593CB7: 33 DB - xor ebx,ebx
// ---------- INJECTING HERE ----------
"EternalStrandsSteam-Win64-Shipping.exe"+4593CB9: 8B 43 28 - mov eax,[rbx+28]
// ---------- DONE INJECTING ----------
"EternalStrandsSteam-Win64-Shipping.exe"+4593CBC: 48 8B 5C 24 20 - mov rbx,[rsp+20]
"EternalStrandsSteam-Win64-Shipping.exe"+4593CC1: 48 83 C4 28 - add rsp,28
"EternalStrandsSteam-Win64-Shipping.exe"+4593CC5: C3 - ret
"EternalStrandsSteam-Win64-Shipping.exe"+4593CC6: B8 01 00 00 00 - mov eax,00000001
"EternalStrandsSteam-Win64-Shipping.exe"+4593CCB: 48 83 C4 28 - add rsp,28
"EternalStrandsSteam-Win64-Shipping.exe"+4593CCF: C3 - ret
"EternalStrandsSteam-Win64-Shipping.exe"+4593CD0: 40 53 - push rbx
"EternalStrandsSteam-Win64-Shipping.exe"+4593CD2: 48 83 EC 20 - sub rsp,20
"EternalStrandsSteam-Win64-Shipping.exe"+4593CD6: 33 C0 - xor eax,eax
"EternalStrandsSteam-Win64-Shipping.exe"+4593CD8: 48 8B DA - mov rbx,rdx
}
115027
"Base Address *** CHANGE ME ***"
0
FF00FF
1
19D0C6265B0
114993
"Current Health"
0
0000FF
Float
+c
114994
"Max Health ?"
0
Float
+18
114995
"Max Health ?"
0
Float
+1c
114996
"Endurance 1"
0
Float
+28
114997
"Endurance 2"
0
Float
+2c
114998
"?"
0
Float
+38
114999
"?"
0
Float
+3c
115000
"?"
0
Float
+48
115001
"?"
0
Float
+4c
115002
"Current Mana"
0
Float
+58
115003
"Mana %"
0
Float
+5c
115028
"Debug"
C0C0C0
1
115014
"danach ist ein dynamischer jump...."
Auto Assembler Script
[ENABLE]
aobscanmodule(god,EternalStrandsSteam-Win64-Shipping.exe,F3 0F 10 40 0C E9) // should be unique
alloc(newmem,$100,god)
label(code)
label(return)
label(enemy)
newmem:
cmp [rax+12c],0
jne enemy
mov [rax+0c],44BB8000 // float 1500
enemy:
mov [rax+0c],0
code:
movss xmm0,[rax+0C]
jmp return
god:
jmp newmem
return:
registersymbol(god)
[DISABLE]
god:
db F3 0F 10 40 0C
unregistersymbol(god)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "EternalStrandsSteam-Win64-Shipping.exe"+3C7F610
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5EE: 74 10 - je "EternalStrandsSteam-Win64-Shipping.exe"+3C7F600
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5F0: 48 8B 42 08 - mov rax,[rdx+08]
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5F4: 8B 48 10 - mov ecx,[rax+10]
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5F7: 48 C1 E9 14 - shr rcx,14
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5FB: F6 C1 01 - test cl,01
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F5FE: 75 03 - jne "EternalStrandsSteam-Win64-Shipping.exe"+3C7F603
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F600: 49 8B D4 - mov rdx,r12
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F603: 48 63 42 44 - movsxd rax,dword ptr [rdx+44]
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F607: 49 03 C7 - add rax,r15
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F60A: 0F 84 BD FE FF FF - je "EternalStrandsSteam-Win64-Shipping.exe"+3C7F4CD
// ---------- INJECTING HERE ----------
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F610: F3 0F 10 40 0C - movss xmm0,[rax+0C]
// ---------- DONE INJECTING ----------
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F615: E9 B6 FE FF FF - jmp "EternalStrandsSteam-Win64-Shipping.exe"+3C7F4D0
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61A: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61B: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61C: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61D: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61E: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F61F: CC - int 3
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F620: 48 89 6C 24 18 - mov [rsp+18],rbp
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F625: 56 - push rsi
"EternalStrandsSteam-Win64-Shipping.exe"+3C7F626: 57 - push rdi
}
115023
"Get Address"
Auto Assembler Script
[ENABLE]
aobscanmodule(data,EternalStrandsSteam-Win64-Shipping.exe,48 8B 03 48 8B CB F3 41 0F 10 4D) // should be unique
alloc(newmem,$1000,data)
label(code)
label(return)
label(addy)
newmem:
cmp [rbx+60],0
jne code
mov [addy],rbx
code:
mov rax,[rbx]
mov rcx,rbx
jmp return
addy:
dq 0
data:
jmp newmem
nop
return:
registersymbol(data addy)
[DISABLE]
data:
db 48 8B 03 48 8B CB
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "EternalStrandsSteam-Win64-Shipping.exe"+3C9167E
"EternalStrandsSteam-Win64-Shipping.exe"+3C91658: 75 03 - jne "EternalStrandsSteam-Win64-Shipping.exe"+3C9165D
"EternalStrandsSteam-Win64-Shipping.exe"+3C9165A: 48 8B D6 - mov rdx,rsi
"EternalStrandsSteam-Win64-Shipping.exe"+3C9165D: 48 63 5A 44 - movsxd rbx,dword ptr [rdx+44]
"EternalStrandsSteam-Win64-Shipping.exe"+3C91661: 4D 8B C5 - mov r8,r13
"EternalStrandsSteam-Win64-Shipping.exe"+3C91664: 49 8B 04 24 - mov rax,[r12]
"EternalStrandsSteam-Win64-Shipping.exe"+3C91668: 49 03 DC - add rbx,r12
"EternalStrandsSteam-Win64-Shipping.exe"+3C9166B: 48 8B 54 24 60 - mov rdx,[rsp+60]
"EternalStrandsSteam-Win64-Shipping.exe"+3C91670: 49 8B CC - mov rcx,r12
"EternalStrandsSteam-Win64-Shipping.exe"+3C91673: F3 0F 10 73 0C - movss xmm6,[rbx+0C]
"EternalStrandsSteam-Win64-Shipping.exe"+3C91678: FF 90 D0 02 00 00 - call qword ptr [rax+000002D0]
// ---------- INJECTING HERE ----------
"EternalStrandsSteam-Win64-Shipping.exe"+3C9167E: 48 8B 03 - mov rax,[rbx]
// ---------- DONE INJECTING ----------
"EternalStrandsSteam-Win64-Shipping.exe"+3C91681: 48 8B CB - mov rcx,rbx
"EternalStrandsSteam-Win64-Shipping.exe"+3C91684: F3 41 0F 10 4D 00 - movss xmm1,[r13+00]
"EternalStrandsSteam-Win64-Shipping.exe"+3C9168A: FF 50 08 - call qword ptr [rax+08]
"EternalStrandsSteam-Win64-Shipping.exe"+3C9168D: 49 8B 04 24 - mov rax,[r12]
"EternalStrandsSteam-Win64-Shipping.exe"+3C91691: 0F 28 D6 - movaps xmm2,xmm6
"EternalStrandsSteam-Win64-Shipping.exe"+3C91694: F3 41 0F 10 5D 00 - movss xmm3,[r13+00]
"EternalStrandsSteam-Win64-Shipping.exe"+3C9169A: 49 8B CC - mov rcx,r12
"EternalStrandsSteam-Win64-Shipping.exe"+3C9169D: 48 8B 54 24 60 - mov rdx,[rsp+60]
"EternalStrandsSteam-Win64-Shipping.exe"+3C916A2: FF 90 D8 02 00 00 - call qword ptr [rax+000002D8]
"EternalStrandsSteam-Win64-Shipping.exe"+3C916A8: 48 8B 5C 24 68 - mov rbx,[rsp+68]
}
3
"always 1500 HP (works, but has interesting side effects)"
Auto Assembler Script
[ENABLE]
aobscanmodule(health,EternalStrandsSteam-Win64-Shipping.exe,F3 41 0F 10 4D 00 FF) // should be unique
alloc(newmem,$1000,health)
label(code)
label(return)
label(value)
newmem:
push rax
mov rax,[value]
mov [r13+00],rax
pop rax
code:
movss xmm1,[r13+00]
jmp return
value:
dd (float)1500.00
health:
jmp newmem
nop
return:
registersymbol(health)
[DISABLE]
health:
db F3 41 0F 10 4D 00
unregistersymbol(health)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: EternalStrandsSteam-Win64-Shipping.exe+3C91684
EternalStrandsSteam-Win64-Shipping.exe+3C9165D: 48 63 5A 44 - movsxd rbx,dword ptr [rdx+44]
EternalStrandsSteam-Win64-Shipping.exe+3C91661: 4D 8B C5 - mov r8,r13
EternalStrandsSteam-Win64-Shipping.exe+3C91664: 49 8B 04 24 - mov rax,[r12]
EternalStrandsSteam-Win64-Shipping.exe+3C91668: 49 03 DC - add rbx,r12
EternalStrandsSteam-Win64-Shipping.exe+3C9166B: 48 8B 54 24 60 - mov rdx,[rsp+60]
EternalStrandsSteam-Win64-Shipping.exe+3C91670: 49 8B CC - mov rcx,r12
EternalStrandsSteam-Win64-Shipping.exe+3C91673: F3 0F 10 73 0C - movss xmm6,[rbx+0C]
EternalStrandsSteam-Win64-Shipping.exe+3C91678: FF 90 D0 02 00 00 - call qword ptr [rax+000002D0]
EternalStrandsSteam-Win64-Shipping.exe+3C9167E: 48 8B 03 - mov rax,[rbx]
EternalStrandsSteam-Win64-Shipping.exe+3C91681: 48 8B CB - mov rcx,rbx
// ---------- INJECTING HERE ----------
EternalStrandsSteam-Win64-Shipping.exe+3C91684: F3 41 0F 10 4D 00 - movss xmm1,[r13+00]
// ---------- DONE INJECTING ----------
EternalStrandsSteam-Win64-Shipping.exe+3C9168A: FF 50 08 - call qword ptr [rax+08]
EternalStrandsSteam-Win64-Shipping.exe+3C9168D: 49 8B 04 24 - mov rax,[r12]
EternalStrandsSteam-Win64-Shipping.exe+3C91691: 0F 28 D6 - movaps xmm2,xmm6
EternalStrandsSteam-Win64-Shipping.exe+3C91694: F3 41 0F 10 5D 00 - movss xmm3,[r13+00]
EternalStrandsSteam-Win64-Shipping.exe+3C9169A: 49 8B CC - mov rcx,r12
EternalStrandsSteam-Win64-Shipping.exe+3C9169D: 48 8B 54 24 60 - mov rdx,[rsp+60]
EternalStrandsSteam-Win64-Shipping.exe+3C916A2: FF 90 D8 02 00 00 - call qword ptr [rax+000002D8]
EternalStrandsSteam-Win64-Shipping.exe+3C916A8: 48 8B 5C 24 68 - mov rbx,[rsp+68]
EternalStrandsSteam-Win64-Shipping.exe+3C916AD: 48 8B 6C 24 70 - mov rbp,[rsp+70]
EternalStrandsSteam-Win64-Shipping.exe+3C916B2: 48 8B 74 24 78 - mov rsi,[rsp+78]
}
Groupscan for Data: f:1500 w:8 f:1500 f:1500 w:8 f:100 f:100