70
"Master Symbol Script (Activate FIRST)"
0000FF
Auto Assembler Script
[ENABLE]
label(basePlayerAddyInjection starGain_on starGain_val)
label(basePlayerMovementInjection fly_on flyHeight floatHeight)
registersymbol(basePlayerAddyInjection symbolMaster starGain_on starGain_val)
registersymbol(basePlayerMovementInjection fly_on flyHeight floatHeight)
alloc(symbolMaster,$1000)
symbolMaster:
basePlayerAddyInjection:
dq 0
starGain_on:
dd 0
starGain_val:
dd #1337
basePlayerMovementInjection:
dq 0
flyHeight:
dd (float)20
fly_on:
dd 0
floatHeight:
dd (float).15
[DISABLE]
unregistersymbol(*)
dealloc(*)
68
"Master Script (Activate 2nd)"
0000FF
Auto Assembler Script
{ Game : PowerWash Simulator
Version:
Date : 2022-08-28
Author : CrazySquirrel
This script is a master script for all other scripts here, to save space for allocation.
I did not keep the original code from a lot of the AOB Scans here, so it may create some issues on trying to rebuild in the future.
}
[ENABLE]
aobscanmodule(Test_inject,GameAssembly.dll,F3 0F 59 67 78 0F 28 C3 8B 87 34 01 00 00) // should be unique
aobscanmodule(starGain,GameAssembly.dll,66 89 43 14 48 8B 05 2A 6F 51 02)
aobscanmodule(playerLoc,UnityPlayer.dll,F3 44 0F 11 B6 54 01 00 00 F3 44 0F 11 BE 58 01 00 00)
aobscanmodule(levitate,UnityPlayer.dll,8B 81 60 01 00 00 89 42 04 8B 81 64 01 00 00)
aobscanmodule(flying,UnityPlayer.dll,F3 0F 58 71 14 E8 6A)
alloc(newmem,$1000,symbolMaster)
label(codePlayerInject)
label(returnPlayerInject)
label(starGain_mem playerLocNewCode levitateNewCode flyingNewCode)
label(starGain_code playerLocOrigCode levitateOrigCode flyingOrigCode)
label(returnStarGain returnPlayerLoc returnLevitate returnFlying)
newmem:
//Start of allocated memory, also for PlayerInjection
mov [basePlayerAddyInjection],rdi // rdi holds player Base Address
jmp codePlayerInject
// ==========================================
flyingNewCode:
cmp [fly_on],0
je flyingOrigCode
fld [flyHeight]
fstp [rcx+14]
jmp flyingOrigCode
flyingOrigCode:
addss xmm6,[rcx+14]
call "UnityPlayer.dll"+844980
movaps xmm14,[rsp+60]
jmp returnFlying
// ==========================================
levitateNewCode:
cmp [fly_on],0
je levitateOrigCode
mov eax,(float).15
mov [rdx+04],eax
mov eax,[rcx+00000164]
jmp returnLevitate
levitateOrigCode:
mov eax,[rcx+00000160]
mov [rdx+04],eax
mov eax,[rcx+00000164]
jmp returnLevitate
// ==========================================
starGain_mem:
cmp [starGain_on],#1
jne starGain_code
mov rax,[starGain_val] //#1337
jmp starGain_code
starGain_code:
mov [rbx+14],ax
mov rax,[GameAssembly.dll+2A40350]
jmp returnStarGain
// ===========================================
playerLocNewCode:
mov [basePlayerMovementInjection],rsi
jmp playerLocOrigCode
playerLocOrigCode:
movss [rsi+00000154],xmm14
movss [rsi+00000158],xmm15
jmp returnPlayerLoc
// ============================================
codePlayerInject:
//Original Code from Injection Point
mulss xmm4,[rdi+78]
movaps xmm0,xmm3
mov eax,[rdi+00000134]
jmp returnPlayerInject
// ============================================
Test_inject:
jmp far newmem
returnPlayerInject:
registersymbol(Test_inject starGain levitate playerLoc flying)
starGain:
jmp starGain_mem
nop 6
returnStarGain:
levitate:
jmp far levitateNewCode
nop
returnLevitate:
flying:
jmp far flyingNewCode
nop 2
returnFlying:
playerLoc:
jmp far playerLocNewCode
nop 4
returnPlayerLoc:
[DISABLE]
Test_inject:
db F3 0F 59 67 78 0F 28 C3 8B 87 34 01 00 00
starGain:
db 66 89 43 14 48 8B 05 2A 6F 51 02
playerLoc:
db F3 44 0F 11 B6 54 01 00 00 F3 44 0F 11 BE 58 01 00 00
levitate:
db 8B 81 60 01 00 00 89 42 04 8B 81 64 01 00 00
flying:
db F3 0F 58 71 14 E8 6A 53 65 FF 44 0F 28 74 24 60
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: basePlayerInjection
GameAssembly.dll+460D38: 45 33 C9 - xor r9d,r9d
GameAssembly.dll+460D3B: 48 8D 4C 24 60 - lea rcx,[rsp+60]
GameAssembly.dll+460D40: 0F 28 D4 - movaps xmm2,xmm4
GameAssembly.dll+460D43: 48 8B D7 - mov rdx,rdi
GameAssembly.dll+460D46: E8 55 F3 FF FF - call PWS.PhysicalCharacterController.ClimbInputVelocity
GameAssembly.dll+460D4B: F2 0F 10 00 - movsd xmm0,[rax]
GameAssembly.dll+460D4F: 8B 40 08 - mov eax,[rax+08]
GameAssembly.dll+460D52: F2 0F 11 44 24 70 - movsd [rsp+70],xmm0
GameAssembly.dll+460D58: EB 63 - jmp GameAssembly.dll+460DBD
GameAssembly.dll+460D5A: F2 0F 10 9F 2C 01 00 00 - movsd xmm3,[rdi+0000012C]
// ---------- INJECTING HERE ----------
basePlayerInjection: F3 0F 59 67 78 - mulss xmm4,[rdi+78]
// ---------- DONE INJECTING ----------
GameAssembly.dll+460D67: 0F 28 C3 - movaps xmm0,xmm3
GameAssembly.dll+460D6A: 8B 87 34 01 00 00 - mov eax,[rdi+00000134]
GameAssembly.dll+460D70: 0F 28 CB - movaps xmm1,xmm3
GameAssembly.dll+460D73: F2 0F 11 45 C0 - movsd [rbp-40],xmm0
GameAssembly.dll+460D78: F2 0F 11 5C 24 50 - movsd [rsp+50],xmm3
GameAssembly.dll+460D7E: 0F 28 D1 - movaps xmm2,xmm1
GameAssembly.dll+460D81: 89 45 C8 - mov [rbp-38],eax
GameAssembly.dll+460D84: F3 0F 10 45 C8 - movss xmm0,[rbp-38]
GameAssembly.dll+460D89: F3 0F 59 C4 - mulss xmm0,xmm4
GameAssembly.dll+460D8D: 89 44 24 58 - mov [rsp+58],eax
}
{
// ORIGINAL CODE - INJECTION POINT: starScript
GameAssembly.dll+5293E5: 48 8D 4C 24 28 - lea rcx,[rsp+28]
GameAssembly.dll+5293EA: E8 41 1C E9 FF - call PlayFab.Public.PlayFabLogger.UploadLog
GameAssembly.dll+5293EF: 48 8B 8C 24 A8 00 00 00 - mov rcx,[rsp+000000A8]
GameAssembly.dll+5293F7: 48 85 C9 - test rcx,rcx
GameAssembly.dll+5293FA: 0F 85 86 00 00 00 - jne GameAssembly.dll+529486
GameAssembly.dll+529400: 48 8B 9C 24 90 00 00 00 - mov rbx,[rsp+00000090]
GameAssembly.dll+529408: F3 0F 10 B4 24 A0 00 00 00 - movss xmm6,[rsp+000000A0]
GameAssembly.dll+529411: F3 0F 2C C6 - cvttss2si eax,xmm6
GameAssembly.dll+529415: 66 3B 43 14 - cmp ax,[rbx+14]
GameAssembly.dll+529419: 74 4C - je GameAssembly.dll+529467
// ---------- INJECTING HERE ----------
GameAssembly.dll+52941B: 66 89 43 14 - mov [rbx+14],ax
// ---------- DONE INJECTING ----------
GameAssembly.dll+52941F: 48 8B 05 2A 6F 51 02 - mov rax,[GameAssembly.dll+2A40350]
GameAssembly.dll+529426: F6 80 33 01 00 00 04 - test byte ptr [rax+00000133],04
GameAssembly.dll+52942D: 74 18 - je GameAssembly.dll+529447
GameAssembly.dll+52942F: 83 B8 E0 00 00 00 00 - cmp dword ptr [rax+000000E0],00
GameAssembly.dll+529436: 75 0F - jne GameAssembly.dll+529447
GameAssembly.dll+529438: 48 8B C8 - mov rcx,rax
GameAssembly.dll+52943B: E8 F0 32 D8 FF - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+529440: 48 8B 05 09 6F 51 02 - mov rax,[GameAssembly.dll+2A40350]
GameAssembly.dll+529447: 48 8B 80 B8 00 00 00 - mov rax,[rax+000000B8]
GameAssembly.dll+52944E: 48 8B 48 08 - mov rcx,[rax+08]
}
72
"Star Gain (Gain one while on)"
00E1E1
Auto Assembler Script
[ENABLE]
starGain_on:
dd #1
[DISABLE]
starGain_on:
dd #0
71
"Star Gain"
0
4 Bytes
starGain_val
Toggle Activation
0
73
"Jump Allowance (higher = more jumps)"
0.5:Double Jump
.75:Triple Jump
1:Many Jumps
100:Infinite jumps
0
58AC20
Float
basePlayerAddyInjection
B0
69
"Sprint Modifier"
0
C6C600
Float
basePlayerAddyInjection
7C
74
"Movement Speed"
0
FF0000
Float
basePlayerAddyInjection
78
75
"Jump Height"
0
FF8000
Float
basePlayerAddyInjection
D4
76
"Player Height"
0
FF0080
Float
basePlayerAddyInjection
168
77
"Climbing Mode (freeze at 1)"
0:Off
1:On
0
4 Bytes
basePlayerAddyInjection
c4
126
"Fly Toggle"
Auto Assembler Script
[ENABLE]
fly_on:
dd 1
[DISABLE]
fly_on:
dd 0
127
"Fly Height (=,- for up and down)"
0
Float
flyHeight
Increase Value
187
3
Increase Height
0
Decrease Value
189
3
Decrease Height
1
120
"Player Location"
1
114
"Player Up"
0
Float
basePlayerMovementInjection
154
115
"Player Forward/Back"
0
Float
basePlayerMovementInjection
158
116
"Player Left/Right"
0
Float
basePlayerMovementInjection
150
117
"Player VelTest"
0
Float
basePlayerMovementInjection
160
121
"Player VelTest"
0
4 Bytes
basePlayerMovementInjection
124
0
"Infinite Cleaner (buy one in SP)"
Auto Assembler Script
{ Game : PowerWash Simulator
Version:
Date : 2022-08-27
Author : CrazySquirrel
Buy one soap, changes to infinite forever.
}
[ENABLE]
aobscanmodule(addBottles,GameAssembly.dll,40 53 57 48 83 EC 38 80 3D * * * * 00 48 8B F9 75 4F) // should be unique
alloc(newmem,$1000,addBottles)
label(code)
label(return)
label(bottleAdd)
newmem:
push rax
mov rax,[bottleAdd]
mov [rcx+1C],rax
pop rax
jmp code
bottleAdd:
dd #1
code:
push rbx
push rdi
sub rsp,38
jmp return
addBottles:
jmp newmem
nop 2
return:
registersymbol(addBottles)
[DISABLE]
addBottles:
db 40 53 57 48 83 EC 38
unregistersymbol(addBottles)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PWS.CleaningLiquidSaveData.AddBottle
GameAssembly.dll+4D5E26: CC - int 3
GameAssembly.dll+4D5E27: CC - int 3
GameAssembly.dll+4D5E28: CC - int 3
GameAssembly.dll+4D5E29: CC - int 3
GameAssembly.dll+4D5E2A: CC - int 3
GameAssembly.dll+4D5E2B: CC - int 3
GameAssembly.dll+4D5E2C: CC - int 3
GameAssembly.dll+4D5E2D: CC - int 3
GameAssembly.dll+4D5E2E: CC - int 3
GameAssembly.dll+4D5E2F: CC - int 3
// ---------- INJECTING HERE ----------
PWS.CleaningLiquidSaveData.AddBottle: 40 53 - push rbx
// ---------- DONE INJECTING ----------
GameAssembly.dll+4D5E32: 57 - push rdi
GameAssembly.dll+4D5E33: 48 83 EC 38 - sub rsp,38
GameAssembly.dll+4D5E37: 80 3D C6 AB 74 02 00 - cmp byte ptr [GameAssembly.dll+2C20A04],00
GameAssembly.dll+4D5E3E: 48 8B F9 - mov rdi,rcx
GameAssembly.dll+4D5E41: 75 4F - jne GameAssembly.dll+4D5E92
GameAssembly.dll+4D5E43: 48 8D 0D DE 8C 56 02 - lea rcx,[GameAssembly.dll+2A3EB28]
GameAssembly.dll+4D5E4A: E8 61 FA E5 FF - call GameAssembly.dll+3358B0
GameAssembly.dll+4D5E4F: 48 8D 0D 02 61 58 02 - lea rcx,[GameAssembly.dll+2A5BF58]
GameAssembly.dll+4D5E56: E8 55 FA E5 FF - call GameAssembly.dll+3358B0
GameAssembly.dll+4D5E5B: 48 8D 0D 66 2F 5A 02 - lea rcx,[GameAssembly.dll+2A78DC8]
}
18
"Infinite Money (1337)"
008000
Auto Assembler Script
{ Game : PowerWashSimulator.exe
Version:
Date : 2022-08-27
Author : CrazySquirrel
This script will change your money as soon as you get some.
Currently set at 1333337.
}
[ENABLE]
aobscanmodule(Money,GameAssembly.dll,F3 0F 11 73 18 48 8B 05) // should be unique
alloc(newmem_money,$1000,Money)
label(code_money)
label(return_money)
label(money_val)
registersymbol(money_val)
newmem_money:
movss xmm6,[money_val]
jmp code_money
money_val:
dd (float)1333337
code_money:
movss [rbx+18],xmm6
jmp return_money
Money:
jmp newmem_money
return_money:
registersymbol(Money)
[DISABLE]
Money:
db F3 0F 11 73 18
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+522DBE
GameAssembly.dll+522D8D: 48 8B D9 - mov rbx,rcx
GameAssembly.dll+522D90: 0F 29 74 24 20 - movaps [rsp+20],xmm6
GameAssembly.dll+522D95: 0F 28 F1 - movaps xmm6,xmm1
GameAssembly.dll+522D98: 75 1F - jne GameAssembly.dll+522DB9
GameAssembly.dll+522D9A: 48 8D 0D 37 92 53 02 - lea rcx,[GameAssembly.dll+2A5BFD8]
GameAssembly.dll+522DA1: E8 0A 2B E1 FF - call GameAssembly.dll+3358B0
GameAssembly.dll+522DA6: 48 8D 0D A3 D5 51 02 - lea rcx,[GameAssembly.dll+2A40350]
GameAssembly.dll+522DAD: E8 FE 2A E1 FF - call GameAssembly.dll+3358B0
GameAssembly.dll+522DB2: C6 05 62 DE 6F 02 01 - mov byte ptr [GameAssembly.dll+2C20C1B],01
GameAssembly.dll+522DB9: F3 0F 58 73 18 - addss xmm6,[rbx+18]
// ---------- INJECTING HERE ----------
GameAssembly.dll+522DBE: F3 0F 11 73 18 - movss [rbx+18],xmm6
// ---------- DONE INJECTING ----------
GameAssembly.dll+522DC3: 48 8B 05 86 D5 51 02 - mov rax,[GameAssembly.dll+2A40350]
GameAssembly.dll+522DCA: F6 80 33 01 00 00 04 - test byte ptr [rax+00000133],04
GameAssembly.dll+522DD1: 74 18 - je GameAssembly.dll+522DEB
GameAssembly.dll+522DD3: 83 B8 E0 00 00 00 00 - cmp dword ptr [rax+000000E0],00
GameAssembly.dll+522DDA: 75 0F - jne GameAssembly.dll+522DEB
GameAssembly.dll+522DDC: 48 8B C8 - mov rcx,rax
GameAssembly.dll+522DDF: E8 4C 99 D8 FF - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+522DE4: 48 8B 05 65 D5 51 02 - mov rax,[GameAssembly.dll+2A40350]
GameAssembly.dll+522DEB: 48 8B 80 B8 00 00 00 - mov rax,[rax+000000B8]
GameAssembly.dll+522DF2: 48 8B 08 - mov rcx,[rax]
}
13
"Infinite Soap (SP)"
FF0000
Auto Assembler Script
{ Game : PowerWashSimulator.exe
Version:
Date : 2022-08-27
Author : CrazySquirrel
This script will give you infinite soap, different than Infinite Cleaner since it's
not permanent.
}
[ENABLE]
aobscanmodule(InfiniteSoap,GameAssembly.dll,AE C3 00 F3 0F 11 43 10) // should be unique
alloc(newmem,$1000,InfiniteSoap)
label(code)
label(return)
label(soap)
registersymbol(soap)
newmem:
movss xmm0,[soap]
jmp code
soap:
dd (float)100.00
code:
movss [rbx+10],xmm0
jmp return
InfiniteSoap+03:
jmp newmem
return:
registersymbol(InfiniteSoap)
[DISABLE]
InfiniteSoap+03:
db F3 0F 11 43 10
unregistersymbol(InfiniteSoap)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+4D5061
GameAssembly.dll+4D502F: 48 8D 0D DA B3 56 02 - lea rcx,[GameAssembly.dll+2A40410]
GameAssembly.dll+4D5036: E8 75 08 E6 FF - call GameAssembly.dll+3358B0
GameAssembly.dll+4D503B: C6 05 C1 B9 74 02 01 - mov byte ptr [GameAssembly.dll+2C20A03],01
GameAssembly.dll+4D5042: F3 0F 10 73 10 - movss xmm6,[rbx+10]
GameAssembly.dll+4D5047: 45 33 C9 - xor r9d,r9d
GameAssembly.dll+4D504A: F3 0F 10 15 B2 93 E7 01 - movss xmm2,[GameAssembly.dll+234E404]
GameAssembly.dll+4D5052: 0F 28 C6 - movaps xmm0,xmm6
GameAssembly.dll+4D5055: F3 0F 5C C7 - subss xmm0,xmm7
GameAssembly.dll+4D5059: 0F 57 C9 - xorps xmm1,xmm1
GameAssembly.dll+4D505C: E8 FF AE C3 00 - call UnityEngine.Mathf.Clamp
// ---------- INJECTING HERE ----------
GameAssembly.dll+4D5061: F3 0F 11 43 10 - movss [rbx+10],xmm0
// ---------- DONE INJECTING ----------
GameAssembly.dll+4D5066: 0F 28 C8 - movaps xmm1,xmm0
GameAssembly.dll+4D5069: 0F 28 C6 - movaps xmm0,xmm6
GameAssembly.dll+4D506C: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+4D506F: E8 5C F3 59 01 - call UnityEngine.Mathf.Approximately
GameAssembly.dll+4D5074: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
GameAssembly.dll+4D5079: 84 C0 - test al,al
GameAssembly.dll+4D507B: 75 4A - jne GameAssembly.dll+4D50C7
GameAssembly.dll+4D507D: 48 8B 05 8C B3 56 02 - mov rax,[GameAssembly.dll+2A40410]
GameAssembly.dll+4D5084: F6 80 33 01 00 00 04 - test byte ptr [rax+00000133],04
GameAssembly.dll+4D508B: 74 18 - je GameAssembly.dll+4D50A5
}
21
"Wash Settings (Be sure to freeze children when changing)"
4 Bytes
"GameAssembly.dll"+02A63F08
0
88
58
60
0
B8
22
"Water Beams Per Second"
0
4 Bytes
"GameAssembly.dll"+02A63F08
54
88
58
60
0
B8
23
"Horizontal Angle"
0
Float
"GameAssembly.dll"+02A63F08
14
B0
88
58
60
0
B8
24
"Vertical Angle"
0
Float
"GameAssembly.dll"+02A63F08
18
B0
88
58
60
0
B8
25
"Max Range"
0
Float
"GameAssembly.dll"+02A63F08
1C
B0
88
58
60
0
B8
26
"Turbo Angle"
0
Float
"GameAssembly.dll"+02A63F08
20
B0
88
58
60
0
B8
27
"Turbo Speed"
0
Float
"GameAssembly.dll"+02A63F08
24
B0
88
58
60
0
B8
37
"Player Push Modifier"
0
Float
"GameAssembly.dll"+02A63F08
30
B0
88
58
60
0
B8
29
"Object Push Modifier"
0
Float
"GameAssembly.dll"+02A63F08
34
B0
88
58
60
0
B8
28
"Power Modifier"
0
Float
"GameAssembly.dll"+02A63F08
54
B0
88
58
60
0
B8
30
"Surface Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
38
B0
88
58
60
0
B8
31
"Encrusted Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
3C
B0
88
58
60
0
B8
32
"Embedded Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
40
B0
88
58
60
0
B8
33
"Tough Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
44
B0
88
58
60
0
B8
34
"Stubborn Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
48
B0
88
58
60
0
B8
35
"Ingrained Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
4C
B0
88
58
60
0
B8
36
"Oily Cleaning Power"
0
Float
"GameAssembly.dll"+02A63F08
50
B0
88
58
60
0
B8
43
"Gameplay Settings"
0
4 Bytes
"GameAssembly.dll"+029F0638
88
0
B8
44
"Cleaning Multiplier (1 is max)"
0
Float
"GameAssembly.dll"+029F0638
2C
88
0
B8
45
"Surface Cleaned TH (?)"
0
Float
"GameAssembly.dll"+029F0638
18
88
0
B8
46
"Wash Minimum %"
0
Float
"GameAssembly.dll"+029F0638
28
88
0
B8
48
"Render Settings"
0
4 Bytes
"GameAssembly.dll"+029F0638
0
80
0
B8
49
"Dirt Granularity Scale"
0
Float
"GameAssembly.dll"+029F0638
60
80
0
B8
50
"Dirt Granularity Amount"
0
Float
"GameAssembly.dll"+029F0638
64
80
0
B8
51
"Wetness Random Scale"
0
Float
"GameAssembly.dll"+029F0638
70
80
0
B8
52
"Wetness Drying Scale"
0
Float
"GameAssembly.dll"+029F0638
74
80
0
B8
53
"Wetness Color"
3900000000:Cyan
2900000000:Red/Black?
0
8 Bytes
"GameAssembly.dll"+029F0638
78
80
0
B8
54
"Wetness Color Amount / Mod"
0
Float
"GameAssembly.dll"+029F0638
88
80
0
B8
55
"Wetness Smoothing"
0
Float
"GameAssembly.dll"+029F0638
8C
80
0
B8
56
"Wetness Scale"
0
Float
"GameAssembly.dll"+029F0638
98
80
0
B8
Change of movsd [rsi+00000144],xmm0
GameAssembly.dll+462AF4
80
F2
0F
10
00
F2
0F
11
86
44
01
00
00
8B
40
08
89
86
Change of movsd [rsi+00000144],xmm0
GameAssembly.dll+4626BB
C9
F2
0F
10
00
F2
0F
11
86
44
01
00
00
8B
40
08
89
86
Change of movss xmm6,[rbx+24]
GameAssembly.dll+484790
E8
50
E0
FF
FF
F3
0F
10
73
24
33
D2
48
8B
CF
Change of movss [rbx+24],xmm6
GameAssembly.dll+4847CC
0F
11
74
24
40
F3
0F
11
73
24
0F
28
74
24
20
Change of movss [rbx+24],xmm0
GameAssembly.dll+486C9C
0F
11
44
24
40
F3
0F
11
43
24
0F
84
9E
00
00
Change of mov eax,[rcx+00000160]
UnityPlayer.dll+11EFC58
01
00
00
89
02
8B
81
60
01
00
00
89
42
04
8B
81
Change of movss xmm0,[r8+0C]
UnityPlayer.dll+12A4A2B
58
03
44
8B
D1
F3
41
0F
10
40
0C
8B
F3
41
0F
28
Change of mov [rcx+000000F8],eax
UnityPlayer.dll+1239916
00
00
8B
41
48
89
81
F8
00
00
00
E9
28
04
00
00
Change of repe movsb
aesop64.sys+9F94
74
24
30
8B
C8
F3
A4
C7
44
24
20
00
Change of mov [rbx+00000100],eax
UnityPlayer.dll+11EA26D
00
00
8B
43
74
89
83
00
01
00
00
8B
43
78
89
83
Change of dec [rdx+00000094]
UnityPlayer.dll+122EDE3
93
88
00
00
00
FF
8A
94
00
00
00
48
85
C0
74
0D
Change of inc [rax+00000094]
UnityPlayer.dll+121AEA3
60
49
0F
45
CF
FF
80
94
00
00
00
48
85
C9
74
0D
SkillManager_savedAOB
0100295F
Item_savedAOB
010839EE
Skill_savedAOB
010209E3
address
00624F9A
"Game.exe"+56700
camera
"Game.exe"+58F51
Current area investigating for experience.
"Game.exe"+78297
Check for /players being higher than 8 (nopped out)
"Game.exe"+7C760
ret for turn off waypoint gui and discovery
"Game.exe"+155487
Was originally push 04, think this is what changes that back
"Game.exe"+1554EF
7 test unique
"Game.exe"+1554F7
7 test unique (6 before)
"Game.exe"+1555A9
Testing Rarity
2 = common
4 = magic
6 = rare
7 = unique?
8 = custom (orange)?
9 = set
"Game.exe"+15580F
changed from 7 to 6
"Game.exe"+155981
changes from 6 to 4
"Game.exe"+156E2C
Start of Item Drops
"Game.exe"+156E80
2 / 47
"Game.exe"+156E85
EAX + 4 = Item ID (Can be used to make only certain items drop)
"Game.exe"+220574
Pushing 4 to Item at offset 0, 4 means valid item?
"Game.exe"+223A16
Entity List is held within [ESI]
"Game.exe"+233C64
Highest Item ID is 659, checking for that.
"Game.exe"+23CEB5
[EAX+C] = Pointer
"Game.exe"+2635E8
ECX + 2 @ 510 = all act WP