104290
"<=== attach to process"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
OpenProcess("murphy-Win64-Shipping.exe")
{$asm}
[DISABLE]
104812
"Attribute Points (only in Character Generation)"
FF0000
4 Bytes
"murphy-Win64-Shipping.exe"+048FEAC0
340
280
360
104818
"God Mode and One-Hit-Kills"
Auto Assembler Script
[ENABLE]
aobscanmodule(godmode,murphy-Win64-Shipping.exe,29 73 50 83 7B 50 00 4C 8B 74 24 78) // should be unique
alloc(newmem,$1000,godmode)
label(code)
label(return)
label(enemy)
newmem:
cmp [rbx+64],0 // check if its a player-character
jne enemy // if not, goto enemy-code
mov [rbx+50],#999 // else set current health to 999
mov [rbx+30],#999 // ... and maximum health, too :)
mov esi,0 // ... and set received damage to 0
jmp code // then continue with normal code
enemy:
mov esi,#9999 // deal 9999 damage instead of usual damage ^^
code:
sub [rbx+50],esi
cmp dword ptr [rbx+50],00
jmp return
godmode:
jmp newmem
nop 2
return:
registersymbol(godmode)
[DISABLE]
godmode:
db 29 73 50 83 7B 50 00
unregistersymbol(godmode)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "murphy-Win64-Shipping.exe"+D73B1E
"murphy-Win64-Shipping.exe"+D73AF0: E8 7B 29 FF FF - call "murphy-Win64-Shipping.exe"+D66470
"murphy-Win64-Shipping.exe"+D73AF5: 48 8B 4D 78 - mov rcx,[rbp+78]
"murphy-Win64-Shipping.exe"+D73AF9: 48 8D 15 B0 EE 08 00 - lea rdx,["murphy-Win64-Shipping.exe"+E029B0]
"murphy-Win64-Shipping.exe"+D73B00: 44 89 7C 24 38 - mov [rsp+38],r15d
"murphy-Win64-Shipping.exe"+D73B05: 4C 8B C8 - mov r9,rax
"murphy-Win64-Shipping.exe"+D73B08: 89 74 24 30 - mov [rsp+30],esi
"murphy-Win64-Shipping.exe"+D73B0C: 4C 8B C3 - mov r8,rbx
"murphy-Win64-Shipping.exe"+D73B0F: 44 89 64 24 28 - mov [rsp+28],r12d
"murphy-Win64-Shipping.exe"+D73B14: 4C 89 74 24 20 - mov [rsp+20],r14
"murphy-Win64-Shipping.exe"+D73B19: E8 72 18 FE FF - call "murphy-Win64-Shipping.exe"+D55390
// ---------- INJECTING HERE ----------
"murphy-Win64-Shipping.exe"+D73B1E: 29 73 50 - sub [rbx+50],esi
// ---------- DONE INJECTING ----------
"murphy-Win64-Shipping.exe"+D73B21: 83 7B 50 00 - cmp dword ptr [rbx+50],00
"murphy-Win64-Shipping.exe"+D73B25: 4C 8B 74 24 78 - mov r14,[rsp+78]
"murphy-Win64-Shipping.exe"+D73B2A: 4C 8B 64 24 70 - mov r12,[rsp+70]
"murphy-Win64-Shipping.exe"+D73B2F: 48 8B 7C 24 68 - mov rdi,[rsp+68]
"murphy-Win64-Shipping.exe"+D73B34: 48 8B 6C 24 60 - mov rbp,[rsp+60]
"murphy-Win64-Shipping.exe"+D73B39: 7F 12 - jg "murphy-Win64-Shipping.exe"+D73B4D
"murphy-Win64-Shipping.exe"+D73B3B: B2 01 - mov dl,01
"murphy-Win64-Shipping.exe"+D73B3D: 48 8B CB - mov rcx,rbx
"murphy-Win64-Shipping.exe"+D73B40: 48 83 C4 40 - add rsp,40
"murphy-Win64-Shipping.exe"+D73B44: 41 5F - pop r15
}
14
"Get additional 10.000 XP when gaining some XP"
Auto Assembler Script
[ENABLE]
aobscanmodule(experience,murphy-Win64-Shipping.exe,49 03 90 B8 02 00 00) // should be unique
alloc(newmem,$1000,experience)
label(code)
label(return)
newmem:
add [r8+2b8],#10000
code:
add rdx,[r8+000002B8]
jmp return
experience:
jmp newmem
nop 2
return:
registersymbol(experience)
[DISABLE]
experience:
db 49 03 90 B8 02 00 00
unregistersymbol(experience)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "murphy-Win64-Shipping.exe"+E3E0B5
"murphy-Win64-Shipping.exe"+E3E092: 7E 3F - jle "murphy-Win64-Shipping.exe"+E3E0D3
"murphy-Win64-Shipping.exe"+E3E094: 8B D3 - mov edx,ebx
"murphy-Win64-Shipping.exe"+E3E096: 48 8B CE - mov rcx,rsi
"murphy-Win64-Shipping.exe"+E3E099: E8 F2 84 F2 FF - call "murphy-Win64-Shipping.exe"+D66590
"murphy-Win64-Shipping.exe"+E3E09E: 4C 8B C0 - mov r8,rax
"murphy-Win64-Shipping.exe"+E3E0A1: 48 8B 40 48 - mov rax,[rax+48]
"murphy-Win64-Shipping.exe"+E3E0A5: 83 78 54 00 - cmp dword ptr [rax+54],00
"murphy-Win64-Shipping.exe"+E3E0A9: 75 16 - jne "murphy-Win64-Shipping.exe"+E3E0C1
"murphy-Win64-Shipping.exe"+E3E0AB: 48 8B 15 9E BA AC 03 - mov rdx,["murphy-Win64-Shipping.exe"+4909B50]
"murphy-Win64-Shipping.exe"+E3E0B2: 49 8B C8 - mov rcx,r8
// ---------- INJECTING HERE ----------
"murphy-Win64-Shipping.exe"+E3E0B5: 49 03 90 B8 02 00 00 - add rdx,[r8+000002B8]
// ---------- DONE INJECTING ----------
"murphy-Win64-Shipping.exe"+E3E0BC: E8 AF 3F F3 FF - call "murphy-Win64-Shipping.exe"+D72070
"murphy-Win64-Shipping.exe"+E3E0C1: 8B 1D E5 81 AC 03 - mov ebx,["murphy-Win64-Shipping.exe"+49062AC]
"murphy-Win64-Shipping.exe"+E3E0C7: FF C3 - inc ebx
"murphy-Win64-Shipping.exe"+E3E0C9: 89 1D DD 81 AC 03 - mov ["murphy-Win64-Shipping.exe"+49062AC],ebx
"murphy-Win64-Shipping.exe"+E3E0CF: 3B DF - cmp ebx,edi
"murphy-Win64-Shipping.exe"+E3E0D1: 7C C1 - jl "murphy-Win64-Shipping.exe"+E3E094
"murphy-Win64-Shipping.exe"+E3E0D3: BB 3D 00 00 00 - mov ebx,0000003D
"murphy-Win64-Shipping.exe"+E3E0D8: EB 6F - jmp "murphy-Win64-Shipping.exe"+E3E149
"murphy-Win64-Shipping.exe"+E3E0DA: BF 01 00 00 00 - mov edi,00000001
"murphy-Win64-Shipping.exe"+E3E0DF: 4C 8D 05 0A 8D AD 02 - lea r8,["murphy-Win64-Shipping.exe"+3916DF0]
}
104822
"set gold to 9.999 for each character you look at in the camp"
Auto Assembler Script
[ENABLE]
aobscanmodule(gold,murphy-Win64-Shipping.exe,48 8B 55 58 48 8D 4C 24 30) // should be unique
alloc(newmem,$1000,gold)
label(code)
label(return)
newmem:
mov [rbp+58],#9999
code:
mov rdx,[rbp+58]
lea rcx,[rsp+30]
jmp return
gold:
jmp newmem
nop 4
return:
registersymbol(gold)
[DISABLE]
gold:
db CC 8B 55 58 48 8D 4C 24 30
unregistersymbol(gold)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "murphy-Win64-Shipping.exe"+E3AC61
"murphy-Win64-Shipping.exe"+E3AC2D: E8 CE 06 01 00 - call "murphy-Win64-Shipping.exe"+E4B300
"murphy-Win64-Shipping.exe"+E3AC32: E8 99 0C 01 00 - call "murphy-Win64-Shipping.exe"+E4B8D0
"murphy-Win64-Shipping.exe"+E3AC37: E8 94 0C 01 00 - call "murphy-Win64-Shipping.exe"+E4B8D0
"murphy-Win64-Shipping.exe"+E3AC3C: 48 8D 0D AD BA AD 02 - lea rcx,["murphy-Win64-Shipping.exe"+39166F0]
"murphy-Win64-Shipping.exe"+E3AC43: E8 B8 06 01 00 - call "murphy-Win64-Shipping.exe"+E4B300
"murphy-Win64-Shipping.exe"+E3AC48: 8B 4D 6C - mov ecx,[rbp+6C]
"murphy-Win64-Shipping.exe"+E3AC4B: BA 03 00 00 00 - mov edx,00000003
"murphy-Win64-Shipping.exe"+E3AC50: E8 3B 0A 01 00 - call "murphy-Win64-Shipping.exe"+E4B690
"murphy-Win64-Shipping.exe"+E3AC55: 48 8D 0D A4 BA AD 02 - lea rcx,["murphy-Win64-Shipping.exe"+3916700]
"murphy-Win64-Shipping.exe"+E3AC5C: E8 9F 06 01 00 - call "murphy-Win64-Shipping.exe"+E4B300
// ---------- INJECTING HERE ----------
"murphy-Win64-Shipping.exe"+E3AC61: 48 8B 55 58 - mov rdx,[rbp+58]
// ---------- DONE INJECTING ----------
"murphy-Win64-Shipping.exe"+E3AC65: 48 8D 4C 24 30 - lea rcx,[rsp+30]
"murphy-Win64-Shipping.exe"+E3AC6A: E8 01 A2 F9 FF - call "murphy-Win64-Shipping.exe"+DD4E70
"murphy-Win64-Shipping.exe"+E3AC6F: F2 0F 10 44 24 30 - movsd xmm0,[rsp+30]
"murphy-Win64-Shipping.exe"+E3AC75: 48 8D 54 24 50 - lea rdx,[rsp+50]
"murphy-Win64-Shipping.exe"+E3AC7A: 8B 44 24 38 - mov eax,[rsp+38]
"murphy-Win64-Shipping.exe"+E3AC7E: 48 8D 4C 24 20 - lea rcx,[rsp+20]
"murphy-Win64-Shipping.exe"+E3AC83: BB 01 00 00 00 - mov ebx,00000001
"murphy-Win64-Shipping.exe"+E3AC88: F2 0F 11 44 24 20 - movsd [rsp+20],xmm0
"murphy-Win64-Shipping.exe"+E3AC8E: 89 44 24 28 - mov [rsp+28],eax
"murphy-Win64-Shipping.exe"+E3AC92: 8B F3 - mov esi,ebx
}
104825
"always fully identify enemies"
Auto Assembler Script
define(address1,"murphy-Win64-Shipping.exe"+11920CB)
define(bytes1,74 1D 4C 8B 13)
define(address2,"murphy-Win64-Shipping.exe"+11920EE)
define(bytes2,74 10 4C 8B C7)
[ENABLE]
assert(address1,bytes1)
assert(address2,bytes2)
address1:
nop 2
address2:
nop 2
[DISABLE]
address1:
db bytes1
address2:
db bytes2
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MurphyCombatManager_C.Update Enemy Identification+3B
MurphyCombatManager_C.Update Enemy Identification+1C: 49 8B F8 - mov rdi,r8
MurphyCombatManager_C.Update Enemy Identification+1F: 48 8B 01 - mov rax,[rcx]
MurphyCombatManager_C.Update Enemy Identification+22: 48 8B EA - mov rbp,rdx
MurphyCombatManager_C.Update Enemy Identification+25: 45 33 C0 - xor r8d,r8d
MurphyCombatManager_C.Update Enemy Identification+28: 49 8B D6 - mov rdx,r14
MurphyCombatManager_C.Update Enemy Identification+2B: 48 8B D9 - mov rbx,rcx
MurphyCombatManager_C.Update Enemy Identification+2E: FF 90 28 02 00 00 - call qword ptr [rax+00000228]
MurphyCombatManager_C.Update Enemy Identification+34: 33 F6 - xor esi,esi
MurphyCombatManager_C.Update Enemy Identification+36: 44 8B F8 - mov r15d,eax
MurphyCombatManager_C.Update Enemy Identification+39: A8 01 - test al,01
// ---------- INJECTING HERE ----------
MurphyCombatManager_C.Update Enemy Identification+3B: 74 1D - je "MurphyCombatManager_C.Update Enemy Identification"+5A
// ---------- DONE INJECTING ----------
MurphyCombatManager_C.Update Enemy Identification+3D: 4C 8B 13 - mov r10,[rbx]
MurphyCombatManager_C.Update Enemy Identification+40: 49 8B D6 - mov rdx,r14
MurphyCombatManager_C.Update Enemy Identification+43: 4C 8B 4D 78 - mov r9,[rbp+78]
MurphyCombatManager_C.Update Enemy Identification+47: 48 8B CB - mov rcx,rbx
MurphyCombatManager_C.Update Enemy Identification+4A: 4C 8B 45 28 - mov r8,[rbp+28]
MurphyCombatManager_C.Update Enemy Identification+4E: 48 89 74 24 20 - mov [rsp+20],rsi
MurphyCombatManager_C.Update Enemy Identification+53: 41 FF 92 30 02 00 00 - call qword ptr [r10+00000230]
MurphyCombatManager_C.Update Enemy Identification+5A: 41 F6 C7 02 - test r15b,02
// ---------- INJECTING HERE ----------
MurphyCombatManager_C.Update Enemy Identification+5E: 74 10 - je "MurphyCombatManager_C.Update Enemy Identification"+70
// ---------- DONE INJECTING ----------
MurphyCombatManager_C.Update Enemy Identification+60: 4C 8B C7 - mov r8,rdi
MurphyCombatManager_C.Update Enemy Identification+63: 48 8B D5 - mov rdx,rbp
MurphyCombatManager_C.Update Enemy Identification+66: 48 8B CB - mov rcx,rbx
MurphyCombatManager_C.Update Enemy Identification+69: E8 A2 00 00 00 - call "murphy-Win64-Shipping.exe"+11921A0
MurphyCombatManager_C.Update Enemy Identification+6E: EB 79 - jmp "MurphyCombatManager_C.Update Enemy Identification"+E9
MurphyCombatManager_C.Update Enemy Identification+70: 49 8B CE - mov rcx,r14
MurphyCombatManager_C.Update Enemy Identification+73: E8 58 A3 E9 FF - call "murphy-Win64-Shipping.exe"+102C460
MurphyCombatManager_C.Update Enemy Identification+78: 48 8B D8 - mov rbx,rax
MurphyCombatManager_C.Update Enemy Identification+7B: 48 85 C0 - test rax,rax
MurphyCombatManager_C.Update Enemy Identification+7E: 74 69 - je "MurphyCombatManager_C.Update Enemy Identification"+E9
}
104831
"Get PlayerController and CheatManager"
Auto Assembler Script
[ENABLE]
aobscanmodule(get_playercontroller,murphy-Win64-Shipping.exe,55 48 8B 10 48 8B C8) // should be unique
alloc(newmem,$1000,get_playercontroller)
label(code)
label(return)
label(pc_addy)
label(cheatmgr)
newmem:
mov [pc_addy],rax
mov rdx,[rax+338]
mov [cheatmgr],rdx
code:
mov rdx,[rax]
mov rcx,rax
jmp return
pc_addy:
dq 0
cheatmgr:
dq 0
get_playercontroller+01:
jmp newmem
nop
return:
registersymbol(get_playercontroller pc_addy cheatmgr)
[DISABLE]
get_playercontroller+01:
db 48 8B 10 48 8B C8
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "murphy-Win64-Shipping.exe"+C108EE
"murphy-Win64-Shipping.exe"+C108C8: 0F 8D E5 00 00 00 - jnl "murphy-Win64-Shipping.exe"+C109B3
"murphy-Win64-Shipping.exe"+C108CE: 48 63 C8 - movsxd rcx,eax
"murphy-Win64-Shipping.exe"+C108D1: 48 8B 02 - mov rax,[rdx]
"murphy-Win64-Shipping.exe"+C108D4: 48 8D 0C C8 - lea rcx,[rax+rcx*8]
"murphy-Win64-Shipping.exe"+C108D8: E8 93 76 59 00 - call "murphy-Win64-Shipping.exe"+11A7F70
"murphy-Win64-Shipping.exe"+C108DD: 48 8B F8 - mov rdi,rax
"murphy-Win64-Shipping.exe"+C108E0: 48 85 C0 - test rax,rax
"murphy-Win64-Shipping.exe"+C108E3: 74 5E - je "murphy-Win64-Shipping.exe"+C10943
"murphy-Win64-Shipping.exe"+C108E5: F6 80 94 02 00 00 02 - test byte ptr [rax+00000294],02
"murphy-Win64-Shipping.exe"+C108EC: 74 55 - je "murphy-Win64-Shipping.exe"+C10943
// ---------- INJECTING HERE ----------
"murphy-Win64-Shipping.exe"+C108EE: 48 8B 10 - mov rdx,[rax]
// ---------- DONE INJECTING ----------
"murphy-Win64-Shipping.exe"+C108F1: 48 8B C8 - mov rcx,rax
"murphy-Win64-Shipping.exe"+C108F4: FF 92 C8 06 00 00 - call qword ptr [rdx+000006C8]
"murphy-Win64-Shipping.exe"+C108FA: 84 C0 - test al,al
"murphy-Win64-Shipping.exe"+C108FC: 74 45 - je "murphy-Win64-Shipping.exe"+C10943
"murphy-Win64-Shipping.exe"+C108FE: 48 8D 9E 00 04 00 00 - lea rbx,[rsi+00000400]
"murphy-Win64-Shipping.exe"+C10905: 4C 63 73 68 - movsxd r14,dword ptr [rbx+68]
"murphy-Win64-Shipping.exe"+C10909: 41 8D 46 01 - lea eax,[r14+01]
"murphy-Win64-Shipping.exe"+C1090D: 89 43 68 - mov [rbx+68],eax
"murphy-Win64-Shipping.exe"+C10910: 3B 43 6C - cmp eax,[rbx+6C]
"murphy-Win64-Shipping.exe"+C10913: 7E 0B - jle "murphy-Win64-Shipping.exe"+C10920
}
104832
"PlayerController"
0
1
pc_addy
0
104838
"CheatManager"
0
1
cheatmgr
0
104890
"Character 1"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
0
130
104913
"Data"
0
String
1000
1
0
1
+28
0
104897
"Race"
0
Byte
+38
104898
"Class"
0
Byte
+39
104899
"Alignment"
0
Byte
+3A
104900
"AgeInWeeks"
0
4 Bytes
+3C
104901
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104902
"MaxHP"
0
4 Bytes
+48
30
104914
"BonusACForCombat"
4 Bytes
+48
34
104915
"SilenceDurationInRounds"
4 Bytes
+48
3C
104916
"CurrentHP"
4 Bytes
+48
50
104917
"Gold"
8 Bytes
+58
104918
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104919
"Item 2 LegacyItemID"
Byte
+2A8
2B
8
104920
"Character 2"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
8
130
104921
"Data"
0
String
1000
1
0
1
+28
0
104922
"Race"
0
Byte
+38
104923
"Class"
0
Byte
+39
104924
"Alignment"
0
Byte
+3A
104925
"AgeInWeeks"
0
4 Bytes
+3C
104926
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104927
"MaxHP"
0
4 Bytes
+48
30
104928
"BonusACForCombat"
4 Bytes
+48
34
104929
"SilenceDurationInRounds"
4 Bytes
+48
3C
104930
"CurrentHP"
4 Bytes
+48
50
104931
"Gold"
8 Bytes
+58
104932
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104933
"Item 2 LegacyItemID"
Byte
+2A8
2B
8
104934
"Character 3"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
10
130
104935
"Data"
0
String
1000
1
0
1
+28
0
104936
"Race"
0
Byte
+38
104937
"Class"
0
Byte
+39
104938
"Alignment"
0
Byte
+3A
104939
"AgeInWeeks"
0
4 Bytes
+3C
104940
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104941
"MaxHP"
0
4 Bytes
+48
30
104942
"BonusACForCombat"
4 Bytes
+48
34
104943
"SilenceDurationInRounds"
4 Bytes
+48
3C
104944
"CurrentHP"
4 Bytes
+48
50
104945
"Gold"
8 Bytes
+58
104946
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104947
"Item 2 LegacyItemID"
Byte
+2A8
2B
8
104948
"Character 4"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
18
130
104949
"Data"
0
String
1000
1
0
1
+28
0
104950
"Race"
0
Byte
+38
104951
"Class"
0
Byte
+39
104952
"Alignment"
0
Byte
+3A
104953
"AgeInWeeks"
0
4 Bytes
+3C
104954
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104955
"MaxHP"
0
4 Bytes
+48
30
104956
"BonusACForCombat"
4 Bytes
+48
34
104957
"SilenceDurationInRounds"
4 Bytes
+48
3C
104958
"CurrentHP"
4 Bytes
+48
50
104959
"Gold"
8 Bytes
+58
104960
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104961
"Item 2 LegacyItemID"
Byte
+2A8
2B
8
104962
"Character 5"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
20
130
104963
"Data"
0
String
1000
1
0
1
+28
0
104964
"Race"
0
Byte
+38
104965
"Class"
0
Byte
+39
104966
"Alignment"
0
Byte
+3A
104967
"AgeInWeeks"
0
4 Bytes
+3C
104968
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104969
"MaxHP"
0
4 Bytes
+48
30
104970
"BonusACForCombat"
4 Bytes
+48
34
104971
"SilenceDurationInRounds"
4 Bytes
+48
3C
104972
"CurrentHP"
4 Bytes
+48
50
104973
"Gold"
8 Bytes
+58
104974
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104975
"Item 2 LegacyItemID"
Byte
+2A8
2B
8
104976
"Character 6"
0
1
"murphy-Win64-Shipping.exe"+048EEE20
0
28
130
104977
"Data"
0
String
1000
1
0
1
+28
0
104978
"Race"
0
Byte
+38
104979
"Class"
0
Byte
+39
104980
"Alignment"
0
Byte
+3A
104981
"AgeInWeeks"
0
4 Bytes
+3C
104982
"PoisonDamagePerRegenTick"
0
4 Bytes
+44
104983
"MaxHP"
0
4 Bytes
+48
30
104984
"BonusACForCombat"
4 Bytes
+48
34
104985
"SilenceDurationInRounds"
4 Bytes
+48
3C
104986
"CurrentHP"
4 Bytes
+48
50
104987
"Gold"
8 Bytes
+58
104988
"Item 1 LegacyItemID"
Byte
+2A8
2B
0
104989
"Item 2 LegacyItemID"
Byte
+2A8
2B
8