114982
"<=== Attach to process and activate mono"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.6) then
ShowMessage('Warning! CE version should be 7.6 or above')
end
OpenProcess("Bloodshed.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
LaunchMonoDataCollector()
{$asm}
[DISABLE]
114984
"Godmode and get Playerdata address"
Auto Assembler Script
[ENABLE]
aobscanregion(health,com8com1.SCFPS.Health.SetHealth,com8com1.SCFPS.Health.SetHealth+100,F3 0F 11 73 38) // should be unique
alloc(newmem,$100,health)
label(code)
label(return)
label(playerdata)
newmem:
pushfq
cmp [rbx+118],1 // isplayer?
je @f
//mulss xmm6,xmm6 // apply one-hit-kill by setting remaining life to zero => ???
movss [rbx+38],xmm6 // and deal the damge
jmp code
@@:
mov [playerdata],rbx // copy base address of health for further uses
code:
popfq
jmp return
playerdata:
dq 0
health:
jmp newmem
return:
registersymbol(health playerdata)
[DISABLE]
health:
db F3 0F 11 73 38
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+A2D2C9
GameAssembly.dll+A2D296: 80 3D 5B 8D 8B 04 00 - cmp byte ptr [GameAssembly.dll+52E5FF8],00
GameAssembly.dll+A2D29D: 48 8B D9 - mov rbx,rcx
GameAssembly.dll+A2D2A0: 0F 29 74 24 20 - movaps [rsp+20],xmm6
GameAssembly.dll+A2D2A5: 0F 28 F1 - movaps xmm6,xmm1
GameAssembly.dll+A2D2A8: 75 13 - jne GameAssembly.dll+A2D2BD
GameAssembly.dll+A2D2AA: 48 8D 0D FF 37 5E 04 - lea rcx,[GameAssembly.dll+5010AB0]
GameAssembly.dll+A2D2B1: E8 9A 92 BA FF - call GameAssembly.il2cpp_get_exception_argument_null+3C0
GameAssembly.dll+A2D2B6: C6 05 3B 8D 8B 04 01 - mov byte ptr [GameAssembly.dll+52E5FF8],01
GameAssembly.dll+A2D2BD: 80 BB 18 01 00 00 00 - cmp byte ptr [rbx+00000118],00
GameAssembly.dll+A2D2C4: F3 0F 5D 73 34 - minss xmm6,[rbx+34]
// ---------- INJECTING HERE ----------
GameAssembly.dll+A2D2C9: F3 0F 11 73 38 - movss [rbx+38],xmm6
// ---------- DONE INJECTING ----------
GameAssembly.dll+A2D2CE: 74 26 - je GameAssembly.dll+A2D2F6
GameAssembly.dll+A2D2D0: 48 8B 05 D9 37 5E 04 - mov rax,[GameAssembly.dll+5010AB0]
GameAssembly.dll+A2D2D7: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
GameAssembly.dll+A2D2DE: 48 8B 09 - mov rcx,[rcx]
GameAssembly.dll+A2D2E1: 48 85 C9 - test rcx,rcx
GameAssembly.dll+A2D2E4: 74 1B - je GameAssembly.dll+A2D301
GameAssembly.dll+A2D2E6: 48 8B 49 20 - mov rcx,[rcx+20]
GameAssembly.dll+A2D2EA: 48 85 C9 - test rcx,rcx
GameAssembly.dll+A2D2ED: 74 12 - je GameAssembly.dll+A2D301
GameAssembly.dll+A2D2EF: 33 D2 - xor edx,edx
}
114985
"Address of PlayerHealth Data"
0
1
playerdata
0
114986
"initialHealth"
Float
+30
114987
"maximumHealth"
Float
+34
114988
"currentHealth"
Float
+38
114989
"applyDefeatForce"
0
Byte
+3C
0
115009
"knockback"
1
115006
"_chance"
Float
+128
20
115007
"_mass"
Float
+128
24
115008
"_massReciprocal"
Float
+128
28
114991
"immuneToSmartBomb"
Byte
+4C
114992
"ignoredByHomingProjectiles"
Byte
+4D
114993
"destroyOnDefeat"
Byte
+4E
114994
"setPassableOnDefeat"
Byte
+4F
114995
"invulnerable"
Byte
+A2
114996
"immuneToDamage"
Byte
+A3
114997
"postDamageInvulnerable"
Byte
+A4
114998
"lastDamage"
Float
+A8
115000
"healthLastFrame"
Float
+D0
115001
"damageTakenWithinLastFrame"
Float
+D4
115002
"healthLossPercent"
Float
+D8
115003
"hitzoneHit"
Byte
+DC
115005
"isPlayer"
Byte
+118
115012
"XP-Multiplier"
Auto Assembler Script
[ENABLE]
aobscanregion(xp_add,com8com1.SCFPS.PlayerStats.AddXp,com8com1.SCFPS.PlayerStats.AddXp+200,0F 28 C6 F3 0F 58 83 6C 01 00 00)
alloc(newmem,$100,xp_add)
label(code)
label(return)
label(xp_multiplier)
newmem:
code:
mulss xmm6,[xp_multiplier]
// Originalcode:
movaps xmm0,xmm6
addss xmm0,[rbx+0000016C]
movss [rbx+0000016C],xmm0
jmp return
xp_multiplier:
dd (float)10.0 // hier Faktor ändern (z.B. 2.0, 5.0, 50.0)
xp_add:
jmp newmem
nop 6
return:
registersymbol(xp_add xp_multiplier)
[DISABLE]
xp_add:
db 0F 28 C6 F3 0F 58 83 6C 01 00 00
unregistersymbol(xp_add xp_multiplier)
dealloc(newmem)
115016
"Get 999.999 Shards at the vendor"
Auto Assembler Script
[ENABLE]
aobscanregion(moneyshards,com8com1.SCFPS.InfoBarController.UpdateMoneyDisplay,com8com1.SCFPS.InfoBarController.UpdateMoneyDisplay+100,F3 0F 10 40 28 0F 2E 83) // should be unique
alloc(newmem,$100,moneyshards)
label(code)
label(return)
label(value)
newmem:
movss xmm0,[value]
movss [rax+28],xmm0
code:
movss xmm0,[rax+28]
jmp return
value:
dd (float)999999
moneyshards:
jmp newmem
return:
registersymbol(moneyshards)
[DISABLE]
moneyshards:
db F3 0F 10 40 28
unregistersymbol(moneyshards)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+7EF733
GameAssembly.dll+7EF700: E8 4B 6E DE FF - call GameAssembly.il2cpp_get_exception_argument_null+3C0
GameAssembly.dll+7EF705: C6 05 14 56 AF 04 01 - mov byte ptr [GameAssembly.dll+52E4D20],01
GameAssembly.dll+7EF70C: 48 8B 05 55 FD 7E 04 - mov rax,[GameAssembly.dll+4FDF468]
GameAssembly.dll+7EF713: 4C 8B 80 B8 00 00 00 - mov r8,[rax+000000B8]
GameAssembly.dll+7EF71A: 49 8B 00 - mov rax,[r8]
GameAssembly.dll+7EF71D: 48 85 C0 - test rax,rax
GameAssembly.dll+7EF720: 0F 84 A0 00 00 00 - je GameAssembly.dll+7EF7C6
GameAssembly.dll+7EF726: 48 8B 40 60 - mov rax,[rax+60]
GameAssembly.dll+7EF72A: 48 85 C0 - test rax,rax
GameAssembly.dll+7EF72D: 0F 84 93 00 00 00 - je GameAssembly.dll+7EF7C6
// ---------- INJECTING HERE ----------
GameAssembly.dll+7EF733: F3 0F 10 40 28 - movss xmm0,[rax+28]
// ---------- DONE INJECTING ----------
GameAssembly.dll+7EF738: 0F 2E 83 FC 00 00 00 - ucomiss xmm0,[rbx+000000FC]
GameAssembly.dll+7EF73F: F3 0F 11 83 EC 00 00 00 - movss [rbx+000000EC],xmm0
GameAssembly.dll+7EF747: 7A 06 - jp GameAssembly.dll+7EF74F
GameAssembly.dll+7EF749: 75 04 - jne GameAssembly.dll+7EF74F
GameAssembly.dll+7EF74B: 33 C9 - xor ecx,ecx
GameAssembly.dll+7EF74D: EB 05 - jmp GameAssembly.dll+7EF754
GameAssembly.dll+7EF74F: B9 01 00 00 00 - mov ecx,00000001
GameAssembly.dll+7EF754: 8B C7 - mov eax,edi
GameAssembly.dll+7EF756: 0B C1 - or eax,ecx
GameAssembly.dll+7EF758: 74 55 - je GameAssembly.dll+7EF7AF
}
115022
"Scripted Damage Booster"
Auto Assembler Script
[ENABLE]
aobscan(playerstats_dmg,0F 10 8A D4 00 00 00 0F 29 84 24 B0 00 00 00 0F 10 82 E4 00 00 00) // sollte eindeutig sein
alloc(newmem,$1000,playerstats_dmg)
label(code)
label(return)
alloc(PlayerDmgMult,16)
PlayerDmgMult:
dd (float)5.0
dd (float)5.0
dd (float)5.0
dd (float)5.0
newmem:
// Original: Stats-Block ab +0xD4 laden
movups xmm1,[rdx+000000D4]
// Alles in diesem Block hochskalieren
mulps xmm1,[PlayerDmgMult]
code:
// Rest vom Originalcode
movaps [rsp+000000B0],xmm0
movups xmm0,[rdx+000000E4]
jmp return
// Injection
playerstats_dmg:
jmp newmem
nop 2
return:
registersymbol(playerstats_dmg)
registersymbol(PlayerDmgMult)
[DISABLE]
playerstats_dmg:
db 0F 10 8A D4 00 00 00 0F 29 84 24 B0 00 00 00 0F 10 82 E4 00 00 00
unregistersymbol(playerstats_dmg)
unregistersymbol(PlayerDmgMult)
dealloc(newmem)
dealloc(PlayerDmgMult)
115024
"Get Stats for Combat"
Auto Assembler Script
[ENABLE]
aobscanmodule(data,GameAssembly.dll,0F 10 82 08 01 00 00 8B) // should be unique
alloc(newmem,$100,data)
label(code)
label(return)
label(stats)
newmem:
mov [stats],rdx
code:
movups xmm0,[rdx+00000108]
jmp return
stats:
dq 0
data:
jmp newmem
nop 2
return:
registersymbol(data stats)
[DISABLE]
data:
db 0F 10 82 08 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+85F419
GameAssembly.dll+85F408: CC - int 3
GameAssembly.dll+85F409: CC - int 3
GameAssembly.dll+85F40A: CC - int 3
GameAssembly.dll+85F40B: CC - int 3
GameAssembly.dll+85F40C: CC - int 3
GameAssembly.dll+85F40D: CC - int 3
GameAssembly.dll+85F40E: CC - int 3
GameAssembly.dll+85F40F: CC - int 3
com8com1.SCFPS.PlayerStats.GetCombinedStatsModifiers: 40 53 - push rbx
GameAssembly.dll+85F412: 48 81 EC 70 01 00 00 - sub rsp,00000170
// ---------- INJECTING HERE ----------
GameAssembly.dll+85F419: 0F 10 82 08 01 00 00 - movups xmm0,[rdx+00000108]
// ---------- DONE INJECTING ----------
GameAssembly.dll+85F420: 8B 82 68 01 00 00 - mov eax,[rdx+00000168]
GameAssembly.dll+85F426: 48 8B D9 - mov rbx,rcx
GameAssembly.dll+85F429: 0F 10 8A 18 01 00 00 - movups xmm1,[rdx+00000118]
GameAssembly.dll+85F430: 4C 8D 44 24 20 - lea r8,[rsp+20]
GameAssembly.dll+85F435: 89 84 24 80 00 00 00 - mov [rsp+00000080],eax
GameAssembly.dll+85F43C: 0F 29 44 24 20 - movaps [rsp+20],xmm0
GameAssembly.dll+85F441: 48 8D 8C 24 00 01 00 00 - lea rcx,[rsp+00000100]
GameAssembly.dll+85F449: 0F 10 82 28 01 00 00 - movups xmm0,[rdx+00000128]
GameAssembly.dll+85F450: 8B 82 04 01 00 00 - mov eax,[rdx+00000104]
GameAssembly.dll+85F456: 45 33 C9 - xor r9d,r9d
}
115025
"Beginn of Data"
0
1
stats
0
115031
"Runspeed"
0
Float
+ac
115029
"Attraction"
0
Float
+b8
115028
"Luck"
0
0000FF
Float
+d0
115033
"Might"
0
0000FF
Float
+d4
115027
"Armor"
0
Float
+ec
115032
"Found Jewels"
0
Float
+17c