70185
"Set Items 99"
Auto Assembler Script
[ENABLE]
aobscanmodule(setItems,GameAssembly.dll,8B 4F 78 03 CB) // should be unique
alloc(newmem,$64,setItems)
label(code)
label(return)
newmem:
code:
mov [rdi+78],#99
mov ecx,[rdi+78]
add ecx,ebx
jmp return
setItems:
jmp newmem
return:
registersymbol(setItems)
[DISABLE]
setItems:
db 8B 4F 78 03 CB
unregistersymbol(setItems)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+6C0AAA
GameAssembly.dll+6C0A87: 85 DB - test ebx,ebx
GameAssembly.dll+6C0A89: 74 38 - je GameAssembly.dll+6C0AC3
GameAssembly.dll+6C0A8B: 4C 8B 05 FE 84 EB 02 - mov r8,[GameAssembly.dll+3578F90]
GameAssembly.dll+6C0A92: 33 D2 - xor edx,edx
GameAssembly.dll+6C0A94: 48 8B 0D 25 0D EB 02 - mov rcx,[GameAssembly.dll+35717C0]
GameAssembly.dll+6C0A9B: E8 40 57 33 00 - call GameAssembly.dll+9F61E0
GameAssembly.dll+6C0AA0: 8B CB - mov ecx,ebx
GameAssembly.dll+6C0AA2: 0F AF 4F 38 - imul ecx,[rdi+38]
GameAssembly.dll+6C0AA6: 3B C1 - cmp eax,ecx
GameAssembly.dll+6C0AA8: 7C 19 - jl GameAssembly.dll+6C0AC3
// ---------- INJECTING HERE ----------
GameAssembly.dll+6C0AAA: 8B 4F 78 - mov ecx,[rdi+78]
// ---------- DONE INJECTING ----------
GameAssembly.dll+6C0AAD: 03 CB - add ecx,ebx
GameAssembly.dll+6C0AAF: 81 F9 E8 03 00 00 - cmp ecx,000003E8
GameAssembly.dll+6C0AB5: 0F 9C C0 - setl al
GameAssembly.dll+6C0AB8: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+6C0ABD: 48 83 C4 20 - add rsp,20
GameAssembly.dll+6C0AC1: 5F - pop rdi
GameAssembly.dll+6C0AC2: C3 - ret
GameAssembly.dll+6C0AC3: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+6C0AC8: 32 C0 - xor al,al
GameAssembly.dll+6C0ACA: 48 83 C4 20 - add rsp,20
}
313
"Get Ghost"
Auto Assembler Script
{ Game : Phasmophobia.exe
Version: 0.2
Date : 2020-12-12
Author : Zephirot
Mono : Assembly-CSharp.dll -> GhostAI:Update()
}
define(GhostAI_address,GhostAI.Update)
define(GhostAI_bytes,40 57 48 83 EC 60)
[ENABLE]
assert(GhostAI_address,GhostAI_bytes)
alloc(newmem,$100,GhostAI.Update)
label(GhostAI_code)
label(GhostAI_exit)
label(_GhostAI)
registersymbol(_GhostAI)
newmem:
GhostAI_code:
push rdi
sub rsp,60
mov [_GhostAI],rcx
jmp GhostAI_exit
_GhostAI:
dq 0
GhostAI_address:
jmp GhostAI_code
db 90
GhostAI_exit:
[DISABLE]
GhostAI_address:
db GhostAI_bytes
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GhostAI
GameAssembly.dll+F49946: CC - int 3
GameAssembly.dll+F49947: CC - int 3
GameAssembly.dll+F49948: CC - int 3
GameAssembly.dll+F49949: CC - int 3
GameAssembly.dll+F4994A: CC - int 3
GameAssembly.dll+F4994B: CC - int 3
GameAssembly.dll+F4994C: CC - int 3
GameAssembly.dll+F4994D: CC - int 3
GameAssembly.dll+F4994E: CC - int 3
GameAssembly.dll+F4994F: CC - int 3
// ---------- INJECTING HERE ----------
GhostAI: 40 53 - push rbx
// ---------- DONE INJECTING ----------
GameAssembly.dll+F49952: 48 83 EC 40 - sub rsp,40
GameAssembly.dll+F49956: 80 3D 49 3E 9D 01 00 - cmp byte ptr [GameAssembly.dll+291D7A6],00
GameAssembly.dll+F4995D: 48 8B D9 - mov rbx,rcx
GameAssembly.dll+F49960: 75 12 - jne GameAssembly.dll+F49974
GameAssembly.dll+F49962: 8B 0D 34 98 29 01 - mov ecx,[GameAssembly.dll+21E319C]
GameAssembly.dll+F49968: E8 73 FD 19 FF - call GameAssembly.dll+E96E0
GameAssembly.dll+F4996D: C6 05 32 3E 9D 01 01 - mov byte ptr [GameAssembly.dll+291D7A6],01
GameAssembly.dll+F49974: 48 8B 4B 28 - mov rcx,[rbx+28]
GameAssembly.dll+F49978: 48 89 7C 24 50 - mov [rsp+50],rdi
GameAssembly.dll+F4997D: 0F 29 74 24 30 - movaps [rsp+30],xmm6
}
314
"Name"
0:null
1:Spirit
2:Wraith
3:Phantom
4:Poltergeist
5:Banshee
6:Jinn
7:Mare
8:Revenant
9:Shade
10:Demon
11:Yurei
12:Oni
0
String
25
1
0
1
_GhostAI
14
48
38
316
"Favourite Room"
0
String
25
1
0
1
_GhostAI
14
60
70
38
317
"Type (English)"
0:Spirit
1:Wraith
2:Phantom
3:Poltergeist
4:Banshee
5:Jinn
6:Mare
7:Revenant
8:Shade
9:Demon
10:Yurei
11:Oni
12:Yokai
13:Hantu
14:Goryo
15:Myling
16:Onryo
17:The Twins
18:Raiju
19:Obake
20:The Mimic
21:Moroi
22:Deogen
23:Thaye
0
4 Bytes
_GhostAI
28
38
1406
"Hunting (Visual)"
1:On
0:Off
1
Byte
_GhostAI
D8
1407
"Ghost Speed (Host Only)"
1
Float
_GhostAI
D0
70176
"Get Players"
Auto Assembler Script
[ENABLE]
// 48 8B 47 38 48 85 C0 0F 84 58 01 00 00 48 8B 88 F0 00 00 00 48 85 C9 0F 84 43 01 00 00 48 8B 41 28 48 85 C0 0F 84 31 01 00 00 80 78 48 00
// 48 8B 47 38 48 85 C0 0F 84 58 01 00 00 48 8B 88 F0 00 00 00 48 85 C9 0F 84 ?? ?? ?? ?? 48 8B 41 28 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 41 28
// 48 8B 47 38 48 85 C0 0F 84 BE 00 00 00 80 78 28 00 75 93 48 8B 88 B8 00 00 00 48 85 C9 0F 84 A2 00 00 00 F3 0F 58 71 30 F3 0F 11 B4 24 C0
// 48 8B 4E 38 48 85 C9 0F 84 40 02 00 00 48 8B 91 C0 00 00 00 48 85 D2 0F 84 30 02 00 00 3B 5F 18 0F 83 2D 02 00 00 66 0F 6E C0 0F 28 CF 0F
// 48 8B 47 38 48 85 C0 0F 84 ?? ?? 00 00 80 78 28 00 75 93 ?? ?? ?? ?? 00 00 00 48 85 C9 0F 84 A2 00 00 00 F3 0F 58 71 30 F3 0F 11 B4 24 C0
aobscanmodule(getPlayers,GameAssembly.dll,48 8B 47 38 48 85 C0 0F 84 ?? ?? 00 00 80 78 28 00 75 93 ?? ?? ?? ?? 00 00 00 48 85 C9 0F 84 A2 00 00 00 F3 0F 58 71 30 F3 0F 11 B4 24 C0) // should be unique
alloc(newmem,$64,getPlayers)
label(code)
label(return)
label(gPlayers)
registersymbol(gPlayers)
newmem:
code:
cmp [gPlayers+8],rsi
jne @f
mov [gPlayers],rdi
@@:
mov rax,[rdi+38]
test rax,rax
jmp return
gPlayers:
dq 0
getPlayers:
jmp newmem
nop 2
return:
registersymbol(getPlayers)
[DISABLE]
getPlayers:
db 48 8B 47 38 48 85 C0
unregistersymbol(getPlayers)
dealloc(newmem)
unregistersymbol(gPlayers)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+D5D5B8
GameAssembly.dll+D5D58D: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+D5D590: BA 03 00 00 00 - mov edx,00000003
GameAssembly.dll+D5D595: B9 FE FF FF FF - mov ecx,FFFFFFFE
GameAssembly.dll+D5D59A: E8 E1 14 AB 03 - call UnityEngine.Random.Range
GameAssembly.dll+D5D59F: 48 85 FF - test rdi,rdi
GameAssembly.dll+D5D5A2: 0F 84 5A 02 00 00 - je GameAssembly.dll+D5D802
GameAssembly.dll+D5D5A8: 3B 5F 18 - cmp ebx,[rdi+18]
GameAssembly.dll+D5D5AB: 0F 83 57 02 00 00 - jae GameAssembly.dll+D5D808
GameAssembly.dll+D5D5B1: 48 63 CB - movsxd rcx,ebx
GameAssembly.dll+D5D5B4: 89 44 8F 20 - mov [rdi+rcx*4+20],eax
// ---------- INJECTING HERE ----------
GameAssembly.dll+D5D5B8: 48 8B 4E 38 - mov rcx,[rsi+38]
// ---------- DONE INJECTING ----------
GameAssembly.dll+D5D5BC: 48 85 C9 - test rcx,rcx
GameAssembly.dll+D5D5BF: 0F 84 3D 02 00 00 - je GameAssembly.dll+D5D802
GameAssembly.dll+D5D5C5: 48 8B 91 B8 00 00 00 - mov rdx,[rcx+000000B8]
GameAssembly.dll+D5D5CC: 48 85 D2 - test rdx,rdx
GameAssembly.dll+D5D5CF: 0F 84 2D 02 00 00 - je GameAssembly.dll+D5D802
GameAssembly.dll+D5D5D5: 3B 5F 18 - cmp ebx,[rdi+18]
GameAssembly.dll+D5D5D8: 0F 83 2A 02 00 00 - jae GameAssembly.dll+D5D808
GameAssembly.dll+D5D5DE: 66 0F 6E C0 - movd xmm0,eax
GameAssembly.dll+D5D5E2: 0F 28 CF - movaps xmm1,xmm7
GameAssembly.dll+D5D5E5: 0F 5B C0 - cvtdq2ps xmm0,xmm0
}
70177
"Player"
0:Player 1
1:Player 2
2:Player 3
3:Player 4
0
4 Bytes
gPlayers+8
70178
"Name"
0
String
16
1
0
1
gPlayers
14
20
70
20
38
70179
"Location"
0
String
16
1
0
1
gPlayers
14
60
60
38
70180
"Inventory Size"
0
4 Bytes
gPlayers
18
48
130
38
70181
"Inventory Size"
0
4 Bytes
gPlayers
18
10
48
130
38
70182
"Sanity"
0
Float
gPlayers
30
C0
38
70183
"In Light"
0
4 Bytes
gPlayers
48
C0
38
70165
"Complete All Objectives"
Auto Assembler Script
[ENABLE]
aobscanregion(MissionsComplete,ObjectiveManager.GetCompletedObjectivesAmount,ObjectiveManager.GetCompletedObjectivesAmount+FD,0F B6 58 20 FF C6)
aobscanregion(GhostComplete,ObjectiveManager.GetCompletedObjectivesAmount,ObjectiveManager.GetCompletedObjectivesAmount+FD,80 79 20 00 8D 47 01)
alloc(newmem,128,MissionsComplete)
alloc(newmem1,128,GhostComplete)
registersymbol(MissionsComplete GhostComplete MissionsCompleteOrig GhostCompleteOrig)
label(return return1 MissionsCompleteOrig GhostCompleteOrig)
newmem:
mov byte ptr [rax+20],1
MissionsCompleteOrig:
readmem(MissionsComplete,6)
jmp return
newmem1:
mov byte ptr [rcx+20],01
GhostCompleteOrig:
readmem(GhostComplete,7)
jmp return1
MissionsComplete:
jmp newmem
db 90
return:
GhostComplete:
jmp newmem1
db 90 90
return1:
[DISABLE]
MissionsComplete:
readmem(MissionsCompleteOrig,6)
GhostComplete:
readmem(GhostCompleteOrig,7)
unregistersymbol(*)
dealloc(*)
Code :movss xmm6,[rdi+30]
GameAssembly.dll+5790F6
05
9A
56
03
03
F3
0F
10
77
30
48
8B
88
B8
00
Info about this table: