52
"Dragon Forge"
00FFFF
1
13
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
0000FF
1
39
"Table Author: XxDaRealSlimballinxX"
FC94B0
1
40
"Visit us today @ GBA Services!"
C080FF
1
1337110746
"Discord @ SlimBallin#1687"
008080
1
1337110747
"[X] <=== For Full Tool View"
00FF00
Auto Assembler Script
[ENABLE]
// Script Creaded By mgr.inz.Player On CE Forums
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
5
"Cheats"
FF00FF
1
1337110937
"Press "Tild Key" For Dev ConSole "
C0C0C0
1
1337110938
"Type "help" to get Commands"
FFFF00
1
9
"xxxxxxxxxxxxxxxxxxxxxxx"
1
10
"God Mode"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(G_da,F3 0F 11 AE A4 00 00 00 4C) // should be unique
alloc(newmem,$100,G_da)
label(code HoodMan)
label(return)
newmem:
push rsi
mov [HoodMan],rsi
pop rsi
jmp code
code:
xorps xmm5,xmm5
movss [rsi+000000A4],xmm5
mov [rsi+A0],#1000000
jmp return
HoodMan:
dq
G_da:
jmp newmem
nop 3
return:
registersymbol(G_da HoodMan)
[DISABLE]
G_da:
db F3 0F 11 AE A4 00 00 00
unregistersymbol(G_da HoodMan)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Legend.Damageable:Awake+b4
Legend.Damageable:Awake+81: 48 8D 64 24 00 - lea rsp,[rsp+00]
Legend.Damageable:Awake+86: 49 BB F0 C1 45 24 51 01 00 00 - mov r11,UnityEngine.GameObject:get_layer
Legend.Damageable:Awake+90: 41 FF D3 - call r11
Legend.Damageable:Awake+93: 89 86 F0 00 00 00 - mov [rsi+000000F0],eax
Legend.Damageable:Awake+99: 0F B6 86 AB 00 00 00 - movzx eax,byte ptr [rsi+000000AB]
Legend.Damageable:Awake+a0: 85 C0 - test eax,eax
Legend.Damageable:Awake+a2: 75 18 - jne Legend.Damageable:Awake+bc
Legend.Damageable:Awake+a4: F3 0F 10 86 A0 00 00 00 - movss xmm0,[rsi+000000A0]
Legend.Damageable:Awake+ac: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.Damageable:Awake+b0: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
Legend.Damageable:Awake+b4: F3 0F 11 AE A4 00 00 00 - movss [rsi+000000A4],xmm5
// ---------- DONE INJECTING ----------
Legend.Damageable:Awake+bc: 4C 8B 6E 28 - mov r13,[rsi+28]
Legend.Damageable:Awake+c0: 4D 85 ED - test r13,r13
Legend.Damageable:Awake+c3: 74 0F - je Legend.Damageable:Awake+d4
Legend.Damageable:Awake+c5: 33 C0 - xor eax,eax
Legend.Damageable:Awake+c7: 49 63 4D 10 - movsxd rcx,dword ptr [r13+10]
Legend.Damageable:Awake+cb: 3B C1 - cmp eax,ecx
Legend.Damageable:Awake+cd: 73 05 - jae Legend.Damageable:Awake+d4
Legend.Damageable:Awake+cf: 45 33 E4 - xor r12d,r12d
Legend.Damageable:Awake+d2: EB 06 - jmp Legend.Damageable:Awake+da
Legend.Damageable:Awake+d4: 41 BC 01 00 00 00 - mov r12d,00000001
}
1337110777
"Symbol to Dissect Structure [Vaule]"
1
0
8 Bytes
HoodMan
0
1337110936
"DamageAbles [OffSets]"
1
0
FF00FF
8 Bytes
HoodMan
0
1337110916
"IsImmuneToTouchDamage"
0
Byte
+A9
1337110917
"IsImmuneToExplosionDamage"
0
Byte
+AA
1337110918
"InvulnerableTime"
0
Float
+AC
1337110919
"IsTargetable"
0
Byte
+B0
1337110920
"DamageAmountFactor"
0
Float
+B8
1337110921
"ProjectileScaleFactor"
0
Float
+BC
1337110922
"Shield"
0
Float
+C0
1337110923
"MaxShield"
0
Float
+C4
1337110924
"DisableCollidersOnDie"
0
Byte
+C8
1337110925
"IsDestroyOnDie"
0
Byte
+C9
1337110926
"DestroyOnDieDelay"
0
Float
+CC
1337110927
"IsShrinkOnDie"
0
Byte
+D0
1337110928
"DamageTaken"
0
Float
+D4
1337110929
"TakesDamageEvenWhenDead"
0
Byte
+D8
1337110930
"LastDamageTime"
0
Float
+DC
1337110931
"invulnerableUntil"
0
Double
+E0
1337110932
"vulnerableUntil"
0
Float
+E8
1337110933
"isStarted"
0
Byte
+EC
1337110934
"isBlinking"
0
Byte
+100
1337110935
"OnInvulnerableHitSound"
1
0
8 Bytes
+70
8
"xxxxxxxxxxxxxxxxxxxxxxx"
1
54
"Don't USE Till You Have [XP]"
0000FF
1
51
"Max XP"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(X_P,F3 0F 11 6E 1C 48 8B 46) // should be unique
alloc(newmem,$100,X_P)
label(code Eper)
label(return)
newmem:
push rsi
mov [Eper],rsi
pop rsi
jmp code
code:
xorps xmm5,xmm5
movss [rsi+1C],xmm5
mov [rsi+1C],(float)9999999
jmp return
Eper:
dq
X_P:
jmp code
return:
registersymbol(X_P Eper)
[DISABLE]
X_P:
db F3 0F 11 6E 1C
unregistersymbol(X_P Eper)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Legend.ExperienceSystem:GiveXp+58
Legend.ExperienceSystem:GiveXp+30: 7A 09 - jp Legend.ExperienceSystem:GiveXp+3b
Legend.ExperienceSystem:GiveXp+32: 72 07 - jb Legend.ExperienceSystem:GiveXp+3b
Legend.ExperienceSystem:GiveXp+34: 33 C0 - xor eax,eax
Legend.ExperienceSystem:GiveXp+36: E9 E9 03 00 00 - jmp Legend.ExperienceSystem:GiveXp+424
Legend.ExperienceSystem:GiveXp+3b: F3 0F 10 46 1C - movss xmm0,[rsi+1C]
Legend.ExperienceSystem:GiveXp+40: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.ExperienceSystem:GiveXp+44: F3 0F 10 8D 38 FF FF FF - movss xmm1,[rbp-000000C8]
Legend.ExperienceSystem:GiveXp+4c: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
Legend.ExperienceSystem:GiveXp+50: F2 0F 58 C1 - addsd xmm0,xmm1
Legend.ExperienceSystem:GiveXp+54: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
Legend.ExperienceSystem:GiveXp+58: F3 0F 11 6E 1C - movss [rsi+1C],xmm5
// ---------- DONE INJECTING ----------
Legend.ExperienceSystem:GiveXp+5d: 48 8B 46 10 - mov rax,[rsi+10]
Legend.ExperienceSystem:GiveXp+61: 0F B6 40 19 - movzx eax,byte ptr [rax+19]
Legend.ExperienceSystem:GiveXp+65: 85 C0 - test eax,eax
Legend.ExperienceSystem:GiveXp+67: 0F 84 56 03 00 00 - je Legend.ExperienceSystem:GiveXp+3c3
Legend.ExperienceSystem:GiveXp+6d: F3 0F 10 85 38 FF FF FF - movss xmm0,[rbp-000000C8]
Legend.ExperienceSystem:GiveXp+75: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.ExperienceSystem:GiveXp+79: F3 0F 10 0D BF 03 00 00 - movss xmm1,[Legend.ExperienceSystem:GiveXp+440]
Legend.ExperienceSystem:GiveXp+81: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
Legend.ExperienceSystem:GiveXp+85: 66 0F 2F C8 - comisd xmm1,xmm0
Legend.ExperienceSystem:GiveXp+89: 0F 8A 34 03 00 00 - jp Legend.ExperienceSystem:GiveXp+3c3
}
1337110891
"Script is Working"
00: ON
01:OFF
1
0
4080FF
Byte
Eper
1337110939
"XP Alt Script"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-06
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(X_po,F3 0F 11 6E 1C 48 8B 46) // should be unique
alloc(newmem,$100,X_po)
label(code)
label(return)
newmem:
code:
mov [rsi+1C],(float)987789987
jmp return
X_po:
jmp code
return:
registersymbol(X_po)
[DISABLE]
X_po:
db F3 0F 11 6E 1C
unregistersymbol(X_po)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 26DCFD53628
26DCFD53600: 7A 09 - jp 26DCFD5360B
26DCFD53602: 72 07 - jb 26DCFD5360B
26DCFD53604: 33 C0 - xor eax,eax
26DCFD53606: E9 E9 03 00 00 - jmp 26DCFD539F4
26DCFD5360B: F3 0F 10 46 1C - movss xmm0,[rsi+1C]
26DCFD53610: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
26DCFD53614: F3 0F 10 8D 38 FF FF FF - movss xmm1,[rbp-000000C8]
26DCFD5361C: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
26DCFD53620: F2 0F 58 C1 - addsd xmm0,xmm1
26DCFD53624: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
26DCFD53628: F3 0F 11 6E 1C - movss [rsi+1C],xmm5
// ---------- DONE INJECTING ----------
26DCFD5362D: 48 8B 46 10 - mov rax,[rsi+10]
26DCFD53631: 0F B6 40 19 - movzx eax,byte ptr [rax+19]
26DCFD53635: 85 C0 - test eax,eax
26DCFD53637: 0F 84 56 03 00 00 - je 26DCFD53993
26DCFD5363D: F3 0F 10 85 38 FF FF FF - movss xmm0,[rbp-000000C8]
26DCFD53645: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
26DCFD53649: F3 0F 10 0D BF 03 00 00 - movss xmm1,[26DCFD53A10]
26DCFD53651: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
26DCFD53655: 66 0F 2F C8 - comisd xmm1,xmm0
26DCFD53659: 0F 8A 34 03 00 00 - jp 26DCFD53993
}
56
"xxxxxxxxxxxxxxxxxxxxxx"
1
55
"InF Fireball"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(F_re,89 48 0C B8 01 00 00 00 E9 FB) // should be unique
alloc(newmem,$100,F_re)
label(code Fla_3)
label(return)
newmem:
push rax
mov [Fla_3],rax
pop rax
jmp code
code:
mov ecx,#10
mov [rax+0C],ecx
mov eax,00000001
jmp return
Fla_3:
dq
F_re:
jmp code
nop 3
return:
registersymbol(F_re Fla_3)
[DISABLE]
F_re:
db 89 48 0C B8 01 00 00 00
unregistersymbol(F_re Fla_3)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 22953D7EDC2
22953D7ED9B: 83 F8 01 - cmp eax,01
22953D7ED9E: 75 2F - jne 22953D7EDCF
22953D7EDA0: 48 63 CF - movsxd rcx,edi
22953D7EDA3: 41 39 4D 18 - cmp [r13+18],ecx
22953D7EDA7: 0F 86 D4 05 00 00 - jbe 22953D7F381
22953D7EDAD: 48 C1 E1 04 - shl rcx,04
22953D7EDB1: 49 8B C5 - mov rax,r13
22953D7EDB4: 48 03 C1 - add rax,rcx
22953D7EDB7: 48 83 C0 20 - add rax,20
22953D7EDBB: 48 63 8D 58 FF FF FF - movsxd rcx,dword ptr [rbp-000000A8]
// ---------- INJECTING HERE ----------
22953D7EDC2: 89 48 0C - mov [rax+0C],ecx
// ---------- DONE INJECTING ----------
22953D7EDC5: B8 01 00 00 00 - mov eax,00000001
22953D7EDCA: E9 FB 03 00 00 - jmp 22953D7F1CA
22953D7EDCF: 0F B6 85 50 FF FF FF - movzx eax,byte ptr [rbp-000000B0]
22953D7EDD6: 83 F8 02 - cmp eax,02
22953D7EDD9: 0F 84 0D 04 00 00 - je 22953D7F1EC
22953D7EDDF: 33 C0 - xor eax,eax
22953D7EDE1: E9 E4 03 00 00 - jmp 22953D7F1CA
22953D7EDE6: 48 63 CF - movsxd rcx,edi
22953D7EDE9: 41 39 4D 18 - cmp [r13+18],ecx
22953D7EDED: 0F 86 87 05 00 00 - jbe 22953D7F37A
}
1337110892
"Script is Working"
00: ON
01:OFF
1
0
4080FF
Byte
Fla_3
82
"xxxxxxxxxxxxxxxxxxxxxxx"
1
81
"Fly Forever [Fly then activate]"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(Fl_y,F3 0F 11 6F 10 F3 0F 10 46) // should be unique
alloc(newmem,$100,Fl_y)
label(code HooMan)
label(return)
newmem:
push rdi
mov [HooMan],rdi
pop rdi
jmp code
code:
xorps xmm5,xmm5
movss [rdi+10],xmm5
mov [rdi+10],(float)999999999999
jmp return
HooMan:
dq
Fl_y:
jmp newmem
return:
registersymbol(Fl_y HooMan)
[DISABLE]
Fl_y:
db F3 0F 11 6F 10
unregistersymbol(Fl_y HooMan)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Legend.StaminaSystem:Consume+f3
Legend.StaminaSystem:Consume+c6: F3 0F 11 6D DC - movss [rbp-24],xmm5
Legend.StaminaSystem:Consume+cb: F3 0F 10 45 DC - movss xmm0,[rbp-24]
Legend.StaminaSystem:Consume+d0: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.StaminaSystem:Consume+d4: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
Legend.StaminaSystem:Consume+d8: F3 0F 11 6D DC - movss [rbp-24],xmm5
Legend.StaminaSystem:Consume+dd: F3 0F 10 4D DC - movss xmm1,[rbp-24]
Legend.StaminaSystem:Consume+e2: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
Legend.StaminaSystem:Consume+e6: F2 0F 10 45 E8 - movsd xmm0,[rbp-18]
Legend.StaminaSystem:Consume+eb: F2 0F 5C C1 - subsd xmm0,xmm1
Legend.StaminaSystem:Consume+ef: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
Legend.StaminaSystem:Consume+f3: F3 0F 11 6F 10 - movss [rdi+10],xmm5
// ---------- DONE INJECTING ----------
Legend.StaminaSystem:Consume+f8: F3 0F 10 46 10 - movss xmm0,[rsi+10]
Legend.StaminaSystem:Consume+fd: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.StaminaSystem:Consume+101: 66 0F 57 C9 - xorpd xmm1,xmm1
Legend.StaminaSystem:Consume+105: 66 0F 2F C8 - comisd xmm1,xmm0
Legend.StaminaSystem:Consume+109: 0F 82 14 00 00 00 - jb Legend.StaminaSystem:Consume+123
Legend.StaminaSystem:Consume+10f: 48 8B CE - mov rcx,rsi
Legend.StaminaSystem:Consume+112: 48 8D 6D 00 - lea rbp,[rbp+00]
Legend.StaminaSystem:Consume+116: 49 BB 10 AF D2 AE 3B 01 00 00 - mov r11,Legend.StaminaSystem:Exhausted
Legend.StaminaSystem:Consume+120: 41 FF D3 - call r11
Legend.StaminaSystem:Consume+123: B8 01 00 00 00 - mov eax,00000001
}
1337110778
"Symbol to Dissect Structure [Vaule]"
1
0
8 Bytes
HooMan
6
"xxxxxxxxxxxxxxxxxxxxxxx"
1
1337110750
"Race Timer Hack [Start Race then Activate]"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-02
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(R_ace,C0 F3 0F 10 87 A0 00 00 00) // should be unique
alloc(newmem,$1000,R_ace)
label(code Rac)
label(return)
newmem:
mov [Rac],rdi
pop rdi
jmp code
code:
mov [rdi+000000A0],(float)99999
jmp return
Rac:
dq 0
R_ace+01:
jmp code
nop 3
return:
registersymbol(R_ace Rac)
[DISABLE]
R_ace+01:
db F3 0F 10 87 A0 00 00 00
unregistersymbol(R_ace Rac)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Legend.Collectable:<Begin>b__31_0+2f
Legend.Collectable:<Begin>b__31_0+1: 48 8B EC - mov rbp,rsp
Legend.Collectable:<Begin>b__31_0+4: 48 81 EC 80 00 00 00 - sub rsp,00000080
Legend.Collectable:<Begin>b__31_0+b: 48 89 7D F8 - mov [rbp-08],rdi
Legend.Collectable:<Begin>b__31_0+f: 48 8B F9 - mov rdi,rcx
Legend.Collectable:<Begin>b__31_0+12: 48 89 55 D0 - mov [rbp-30],rdx
Legend.Collectable:<Begin>b__31_0+16: 48 8B CA - mov rcx,rdx
Legend.Collectable:<Begin>b__31_0+19: BA 01 00 00 00 - mov edx,00000001
Legend.Collectable:<Begin>b__31_0+1e: 49 BB 70 32 71 66 39 01 00 00 - mov r11,Legend.Utility:_
Legend.Collectable:<Begin>b__31_0+28: 41 FF D3 - call r11
Legend.Collectable:<Begin>b__31_0+2b: 48 89 45 C0 - mov [rbp-40],rax
// ---------- INJECTING HERE ----------
Legend.Collectable:<Begin>b__31_0+2f: F3 0F 10 87 A0 00 00 00 - movss xmm0,[rdi+000000A0]
// ---------- DONE INJECTING ----------
Legend.Collectable:<Begin>b__31_0+37: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Legend.Collectable:<Begin>b__31_0+3b: F2 0F 11 45 A0 - movsd [rbp-60],xmm0
Legend.Collectable:<Begin>b__31_0+40: 48 B9 E0 CC D5 41 39 01 00 00 - mov rcx,0000013941D5CCE0
Legend.Collectable:<Begin>b__31_0+4a: 48 8D 6D 00 - lea rbp,[rbp+00]
Legend.Collectable:<Begin>b__31_0+4e: 49 BB 80 10 DB D8 37 01 00 00 - mov r11,System.Object:__icall_wrapper_ves_icall_object_new_specific
Legend.Collectable:<Begin>b__31_0+58: 41 FF D3 - call r11
Legend.Collectable:<Begin>b__31_0+5b: F2 0F 10 45 A0 - movsd xmm0,[rbp-60]
Legend.Collectable:<Begin>b__31_0+60: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
Legend.Collectable:<Begin>b__31_0+64: F3 0F 11 68 10 - movss [rax+10],xmm5
Legend.Collectable:<Begin>b__31_0+69: 48 89 45 B8 - mov [rbp-48],rax
}
1337110890
"Symbol to Dissect Structure [Vaule]"
1
0
8 Bytes
Rac
1337110767
"xxxxxxxxxxxxxxxxxxxxxxxxxxx"
1
1337110779
"Player Info Structuter"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-03
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(PLay,48 8B 10 48 8B CE 66 66 90 49 BB 80 65) // should be unique
alloc(newmem,$1000,PLay)
label(code Ho_pE)
label(return)
newmem:
push rax
mov [Ho_pE],rax
pop rax
jmp code
code:
mov rdx,[rax]
mov rcx,rsi
jmp return
Ho_pE:
dq 0
PLay:
jmp newmem
nop
return:
registersymbol(PLay Ho_pE)
[DISABLE]
PLay:
db 48 8B 10 48 8B CE
unregistersymbol(PLay Ho_pE)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Legend.Player:Update+f5
Legend.Player:Update+bf: F3 0F 10 0D 79 0E 00 00 - movss xmm1,[Legend.Player:Update+f40]
Legend.Player:Update+c7: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
Legend.Player:Update+cb: 66 0F 2F C8 - comisd xmm1,xmm0
Legend.Player:Update+cf: 0F 86 16 00 00 00 - jbe Legend.Player:Update+eb
Legend.Player:Update+d5: 48 8B CE - mov rcx,rsi
Legend.Player:Update+d8: 48 8D 64 24 00 - lea rsp,[rsp+00]
Legend.Player:Update+dd: 90 - nop
Legend.Player:Update+de: 49 BB 86 3B 01 52 82 02 00 00 - mov r11,0000028252013B86
Legend.Player:Update+e8: 41 FF D3 - call r11
Legend.Player:Update+eb: 48 B8 28 37 E5 A4 81 02 00 00 - mov rax,00000281A4E53728
// ---------- INJECTING HERE ----------
Legend.Player:Update+f5: 48 8B 10 - mov rdx,[rax]
// ---------- DONE INJECTING ----------
Legend.Player:Update+f8: 48 8B CE - mov rcx,rsi
Legend.Player:Update+fb: 66 66 90 - nop 3
Legend.Player:Update+fe: 49 BB 80 65 2D 52 82 02 00 00 - mov r11,UnityEngine.Object:op_Equality
Legend.Player:Update+108: 41 FF D3 - call r11
Legend.Player:Update+10b: 85 C0 - test eax,eax
Legend.Player:Update+10d: 0F 84 BC 0D 00 00 - je Legend.Player:Update+ecf
Legend.Player:Update+113: 48 8B 8E B0 00 00 00 - mov rcx,[rsi+000000B0]
Legend.Player:Update+11a: 33 D2 - xor edx,edx
Legend.Player:Update+11c: 66 90 - nop 2
Legend.Player:Update+11e: 49 BB 20 80 2D 52 82 02 00 00 - mov r11,UnityEngine.Object:op_Inequality
}
1337110780
"Symbol to Dissect Structure [Vaule]"
1
0
8 Bytes
Ho_pE
0
0
1337110781
"Base"
1
0
8 Bytes
+0
1337110782
"ExperienceSystem"
1
0
8 Bytes
+110
1337110783
"Player"
1
0
8 Bytes
+10
1337110784
"Player Stuff Pointers"
1
0
FFFF00
1
Ho_pE
0
0
1337110785
"xxxxxxxxxxxxxxxxxxxxxxxx"
1
1337110786
"Symbol"
1
8 Bytes
Ho_pE
1337110787
"Base"
1
8 Bytes
Ho_pE
0
1337110789
"isServer"
Byte
Ho_pE
18
0
1337110790
"isLocalPlayer"
Byte
Ho_pE
19
0
1337110791
"hasAuthority"
Byte
Ho_pE
1A
0
1337110792
"IsActivatedOnContact"
Byte
Ho_pE
20
0
1337110793
"<SelectableWhenNotActivatable>k__BackingField"
Byte
Ho_pE
21
0
1337110794
"ReviveSounds"
1
8 Bytes
Ho_pE
28
0
1337110795
"LevelUpPrefab"
1
8 Bytes
Ho_pE
30
0
1337110796
"LevelUpSounds"
1
8 Bytes
Ho_pE
38
0
1337110797
"ReloadSounds"
1
8 Bytes
Ho_pE
40
0
1337110798
"PlacementIndicator"
1
8 Bytes
Ho_pE
48
0
1337110799
"BuildingSounds"
1
8 Bytes
Ho_pE
50
0
1337110800
"DeathSounds"
1
8 Bytes
Ho_pE
58
0
1337110801
"EggPrefab"
1
8 Bytes
Ho_pE
60
0
1337110802
"LaunchParticlesPrefab"
1
8 Bytes
Ho_pE
68
0
1337110803
"LaunchSpawnSound"
1
8 Bytes
Ho_pE
70
0
1337110804
"LaunchWindSound"
1
8 Bytes
Ho_pE
78
0
1337110805
"HatchingEggPrefab"
1
8 Bytes
Ho_pE
80
0
1337110806
"LaunchLandingSound"
1
8 Bytes
Ho_pE
88
0
1337110807
"LaunchLandingParticlesPrefab"
1
8 Bytes
Ho_pE
90
0
1337110808
"Animal"
1
8 Bytes
Ho_pE
98
0
1337110809
"Visuals"
1
8 Bytes
Ho_pE
A0
0
1337110810
"Health"
1
8 Bytes
Ho_pE
A8
0
1337110811
"Movement"
1
8 Bytes
Ho_pE
B0
0
1337110812
"Aim"
1
8 Bytes
Ho_pE
B8
0
1337110813
"Carrier"
1
8 Bytes
Ho_pE
C0
0
1337110814
"FirePoint"
1
8 Bytes
Ho_pE
C8
0
1337110815
"CameraTarget"
1
8 Bytes
Ho_pE
D0
0
1337110816
"OverheadFollowCameras"
1
8 Bytes
Ho_pE
D8
0
1337110817
"Selected"
1
8 Bytes
Ho_pE
E0
0
1337110818
"SelectedItem"
4 Bytes
Ho_pE
E8
0
1337110819
"SpawnedBoss"
1
8 Bytes
Ho_pE
108
0
1337110820
"ExperienceSystem"
1
8 Bytes
Ho_pE
110
0
1337110821
"Player"
1
8 Bytes
Ho_pE
10
110
0
1337110822
"m_CachedPtr"
4 Bytes
Ho_pE
10
10
110
0
1337110823
"isServer"
Byte
Ho_pE
18
10
110
0
1337110824
"isLocalPlayer"
Byte
Ho_pE
19
10
110
0
1337110825
"hasAuthority"
Byte
Ho_pE
1A
10
110
0
1337110826
"IsActivatedOnContact"
Byte
Ho_pE
20
10
110
0
1337110827
"<SelectableWhenNotActivatable>k__BackingField"
Byte
Ho_pE
21
10
110
0
1337110828
"ReviveSounds"
1
8 Bytes
Ho_pE
28
10
110
0
1337110829
"LevelUpPrefab"
1
8 Bytes
Ho_pE
30
10
110
0
1337110830
"LevelUpSounds"
1
8 Bytes
Ho_pE
38
10
110
0
1337110831
"ReloadSounds"
1
8 Bytes
Ho_pE
40
10
110
0
1337110832
"PlacementIndicator"
1
8 Bytes
Ho_pE
48
10
110
0
1337110833
"BuildingSounds"
1
8 Bytes
Ho_pE
50
10
110
0
1337110834
"DeathSounds"
1
8 Bytes
Ho_pE
58
10
110
0
1337110835
"EggPrefab"
1
8 Bytes
Ho_pE
60
10
110
0
1337110836
"LaunchParticlesPrefab"
1
8 Bytes
Ho_pE
68
10
110
0
1337110837
"LaunchSpawnSound"
1
8 Bytes
Ho_pE
70
10
110
0
1337110838
"LaunchWindSound"
1
8 Bytes
Ho_pE
78
10
110
0
1337110839
"HatchingEggPrefab"
1
8 Bytes
Ho_pE
80
10
110
0
1337110840
"LaunchLandingSound"
1
8 Bytes
Ho_pE
88
10
110
0
1337110841
"LaunchLandingParticlesPrefab"
1
8 Bytes
Ho_pE
90
10
110
0
1337110842
"Animal"
1
8 Bytes
Ho_pE
98
10
110
0
1337110843
"Visuals"
1
8 Bytes
Ho_pE
A0
10
110
0
1337110844
"Health"
1
8 Bytes
Ho_pE
A8
10
110
0
1337110845
"Movement"
1
8 Bytes
Ho_pE
B0
10
110
0
1337110846
"Aim"
1
8 Bytes
Ho_pE
B8
10
110
0
1337110847
"Carrier"
1
8 Bytes
Ho_pE
C0
10
110
0
1337110848
"FirePoint"
1
8 Bytes
Ho_pE
C8
10
110
0
1337110849
"CameraTarget"
1
8 Bytes
Ho_pE
D0
10
110
0
1337110850
"OverheadFollowCameras"
1
8 Bytes
Ho_pE
D8
10
110
0
1337110851
"Selected"
1
8 Bytes
Ho_pE
E0
10
110
0
1337110852
"SelectedItem"
4 Bytes
Ho_pE
E8
10
110
0
1337110853
"SpawnedBoss"
1
8 Bytes
Ho_pE
108
10
110
0
1337110854
"ExperienceSystem"
1
8 Bytes
Ho_pE
110
10
110
0
1337110855
"Stamina"
1
8 Bytes
Ho_pE
118
10
110
0
1337110856
"Ammo"
1
8 Bytes
Ho_pE
120
10
110
0
1337110857
"Inventory"
1
8 Bytes
Ho_pE
128
10
110
0
1337110858
"Counters"
1
8 Bytes
Ho_pE
130
10
110
0
1337110859
"QuestData"
1
8 Bytes
Ho_pE
138
10
110
0
1337110860
"Input"
1
8 Bytes
Ho_pE
140
10
110
0
1337110861
"colliders"
1
8 Bytes
Ho_pE
148
10
110
0
1337110862
"hits"
1
8 Bytes
Ho_pE
150
10
110
0
1337110863
"egg"
1
8 Bytes
Ho_pE
158
10
110
0
1337110864
"HitScanLayers"
4 Bytes
Ho_pE
160
10
110
0
1337110865
"ActivatableLayers"
4 Bytes
Ho_pE
164
10
110
0
1337110866
"CameraMode"
4 Bytes
Ho_pE
168
10
110
0
1337110867
"ActionBarSelectedIndex"
4 Bytes
Ho_pE
16C
10
110
0
1337110868
"AvoidUsingCurrentUseButtonPress"
Byte
Ho_pE
170
10
110
0
1337110869
"AccountId"
8 Bytes
Ho_pE
178
10
110
0
1337110870
"IsTargetable"
Byte
Ho_pE
180
10
110
0
1337110871
"damageLevel"
Float
Ho_pE
184
10
110
0
1337110872
"AttackRateLevel"
Float
Ho_pE
188
10
110
0
1337110873
"AmmoRate"
Float
Ho_pE
18C
10
110
0
1337110874
"PickupCount"
4 Bytes
Ho_pE
190
10
110
0
1337110875
"RunStart"
Float
Ho_pE
194
10
110
0
1337110876
"KillCount"
4 Bytes
Ho_pE
198
10
110
0
1337110877
"DamageDoneCount"
Float
Ho_pE
19C
10
110
0
1337110878
"KnockedDownCount"
4 Bytes
Ho_pE
1A0
10
110
0
1337110879
"SaveCount"
4 Bytes
Ho_pE
1A4
10
110
0
1337110880
"Score"
4 Bytes
Ho_pE
1A8
10
110
0
1337110881
"WalkSpeed"
Float
Ho_pE
1AC
10
110
0
1337110882
"FlySpeed"
Float
Ho_pE
1B0
10
110
0
1337110883
"Age"
Float
Ho_pE
1B4
10
110
0
1337110884
"DebugTargeting"
Byte
Ho_pE
1B8
10
110
0
1337110885
"startTime"
Float
Ho_pE
1BC
10
110
0
1337110886
"hit"
4 Bytes
Ho_pE
1C0
10
110
0
1337110887
"LastHitScanPosition"
4 Bytes
Ho_pE
1EC
10
110
0
1337110888
"Level"
4 Bytes
Ho_pE
18
110
0
1337110889
"Xp"
Float
Ho_pE
1C
110
0
1337110915
"IsDefaultInvulnerable"
Byte
+
A8
1337110957
"xxxxxxxxx Camera Controls xxxxxxxxxxx"
FF00FF
1
1337110941
"Camera Hook"
00FFFF
Auto Assembler Script
{ Game : Dragon Forge.exe
Version:
Date : 2022-08-06
Author : slimb
This script does blah blah blah
}
[ENABLE]
aobscan(Ovr_Cam_Zom,FE F3 0F 10 4E 54) // should be unique
alloc(newmem,$1000,Ovr_Cam_Zom)
label(code) Zoim)
label(return)
newmem:
push rsi
mov [Zoim],rsi
pop rsi
jmp code
code:
xorps xmm1,xmm1
movss xmm1,[rsi+54]
jmp return
Zoim:
dq
Ovr_Cam_Zom+01:
jmp newmem
return:
registersymbol(Ovr_Cam_Zom Zoim)
[DISABLE]
Ovr_Cam_Zom+01:
db F3 0F 10 4E 54
unregistersymbol(Ovr_Cam_Zom Zoim)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 26DD0BE2F1E
26DD0BE2EFE: 00 00 - add [rax],al
26DD0BE2F00: 55 - push rbp
26DD0BE2F01: 48 8B EC - mov rbp,rsp
26DD0BE2F04: 48 83 EC 70 - sub rsp,70
26DD0BE2F08: 48 89 75 E0 - mov [rbp-20],rsi
26DD0BE2F0C: 48 89 7D E8 - mov [rbp-18],rdi
26DD0BE2F10: 4C 89 75 F0 - mov [rbp-10],r14
26DD0BE2F14: 4C 89 7D F8 - mov [rbp-08],r15
26DD0BE2F18: 48 8B F1 - mov rsi,rcx
26DD0BE2F1B: 4C 8B FE - mov r15,rsi
// ---------- INJECTING HERE ----------
26DD0BE2F1E: F3 0F 10 4E 54 - movss xmm1,[rsi+54]
// ---------- DONE INJECTING ----------
26DD0BE2F23: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
26DD0BE2F27: F3 0F 10 46 48 - movss xmm0,[rsi+48]
26DD0BE2F2C: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
26DD0BE2F30: F2 0F 5A E9 - cvtsd2ss xmm5,xmm1
26DD0BE2F34: F3 0F 11 6D DC - movss [rbp-24],xmm5
26DD0BE2F39: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
26DD0BE2F3D: F3 0F 11 6D D8 - movss [rbp-28],xmm5
26DD0BE2F42: F3 0F 10 45 DC - movss xmm0,[rbp-24]
26DD0BE2F47: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
26DD0BE2F4B: F3 0F 10 4D D8 - movss xmm1,[rbp-28]
}
1337110942
"Symbol Ptr"
1
0
000000
8 Bytes
Zoim
0
1337110949
"ZoomMin"
4080FF
Float
Zoim
48
1337110950
"ZoomMax"
4080FF
Float
Zoim
4C
1337110951
"ZoomSpeed"
4080FF
Float
Zoim
50
1337110952
"ZoomLevel"
4080FF
Float
Zoim
54
1337110953
"Mode"
4080FF
4 Bytes
Zoim
64
1337110954
"lastMode"
4080FF
4 Bytes
Zoim
68
1337110956
"previousZoomLevel"
4080FF
Float
Zoim
98
1337110955
"hit"
4080FF
4 Bytes
Zoim
6C
1337110958
"xxxxxxxxxx Mode Ptrs xxxxxxx"
00FF80
1
1337110944
"BirdsEyeCamera"
1
8 Bytes
Zoim
20
1337110943
"Following"
1
8 Bytes
Zoim
18
1337110945
"ShooterCamera"
1
8 Bytes
Zoim
28
1337110946
"SniperCamera"
1
8 Bytes
Zoim
30
1337110947
"FreeLookCamera"
1
8 Bytes
Zoim
38
1337110948
"NoPlayerTimeline"
1
8 Bytes
Zoim
40
Code :mov rdx,[rax]
28251FC1951
A4
81
02
00
00
48
8B
10
48
8B
CE
45
33