162
"Destroy All Humans! Steam V1.0.2491"
1
21
"inf shield"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2025-12-31
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,DH-Win64-Shipping.exe,F3 0F 11 83 98 00 00 00 0F 54 15) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
cmp [rbx+88],1
je return
mov rdx,[rbx+20]
mov rdx,[rdx+160]
cmp [rdx+40],1
je return
movss [rbx+00000098],xmm0
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db F3 0F 11 83 98 00 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DH-Win64-Shipping.exe"+A379D7
"DH-Win64-Shipping.exe"+A379AF: 84 C0 - test al,al
"DH-Win64-Shipping.exe"+A379B1: 75 6F - jne "DH-Win64-Shipping.exe"+A37A22
"DH-Win64-Shipping.exe"+A379B3: F3 0F 10 43 4C - movss xmm0,[rbx+4C]
"DH-Win64-Shipping.exe"+A379B8: 0F 2F F0 - comiss xmm6,xmm0
"DH-Win64-Shipping.exe"+A379BB: F3 0F 10 93 98 00 00 00 - movss xmm2,[rbx+00000098]
"DH-Win64-Shipping.exe"+A379C3: F3 0F 11 53 54 - movss [rbx+54],xmm2
"DH-Win64-Shipping.exe"+A379C8: 72 09 - jb "DH-Win64-Shipping.exe"+A379D3
"DH-Win64-Shipping.exe"+A379CA: F3 0F 10 43 48 - movss xmm0,[rbx+48]
"DH-Win64-Shipping.exe"+A379CF: F3 0F 5D C6 - minss xmm0,xmm6
"DH-Win64-Shipping.exe"+A379D3: F3 0F 5C D0 - subss xmm2,xmm0
// ---------- INJECTING HERE ----------
"DH-Win64-Shipping.exe"+A379D7: F3 0F 11 83 98 00 00 00 - movss [rbx+00000098],xmm0
// ---------- DONE INJECTING ----------
"DH-Win64-Shipping.exe"+A379DF: 0F 54 15 4A 19 02 02 - andps xmm2,["DH-Win64-Shipping.exe"+2A59330]
"DH-Win64-Shipping.exe"+A379E6: 0F 2F 15 F7 87 03 02 - comiss xmm2,["DH-Win64-Shipping.exe"+2A701E4]
"DH-Win64-Shipping.exe"+A379ED: 76 33 - jna "DH-Win64-Shipping.exe"+A37A22
"DH-Win64-Shipping.exe"+A379EF: 40 84 F6 - test sil,sil
"DH-Win64-Shipping.exe"+A379F2: 74 08 - je "DH-Win64-Shipping.exe"+A379FC
"DH-Win64-Shipping.exe"+A379F4: 48 8B CB - mov rcx,rbx
"DH-Win64-Shipping.exe"+A379F7: E8 54 A4 00 00 - call "DH-Win64-Shipping.exe"+A41E50
"DH-Win64-Shipping.exe"+A379FC: 40 84 FF - test dil,dil
"DH-Win64-Shipping.exe"+A379FF: 74 21 - je "DH-Win64-Shipping.exe"+A37A22
"DH-Win64-Shipping.exe"+A37A01: 48 8B 43 30 - mov rax,[rbx+30]
}
23
"inf shock gun"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2025-12-31
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,DH-Win64-Shipping.exe,F3 0F 11 91 3C 07 00 00 48) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
// movss [rcx+0000073C],xmm2
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db F3 0F 11 91 3C 07 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DH-Win64-Shipping.exe"+A685E8
"DH-Win64-Shipping.exe"+A685BB: 83 38 00 - cmp dword ptr [rax],00
"DH-Win64-Shipping.exe"+A685BE: 75 46 - jne "DH-Win64-Shipping.exe"+A68606
"DH-Win64-Shipping.exe"+A685C0: F3 0F 59 99 24 07 00 00 - mulss xmm3,[rcx+00000724]
"DH-Win64-Shipping.exe"+A685C8: F3 0F 10 89 3C 07 00 00 - movss xmm1,[rcx+0000073C]
"DH-Win64-Shipping.exe"+A685D0: F3 0F 5C CB - subss xmm1,xmm3
"DH-Win64-Shipping.exe"+A685D4: 0F 2F CA - comiss xmm1,xmm2
"DH-Win64-Shipping.exe"+A685D7: 72 0F - jb "DH-Win64-Shipping.exe"+A685E8
"DH-Win64-Shipping.exe"+A685D9: F3 0F 10 81 18 07 00 00 - movss xmm0,[rcx+00000718]
"DH-Win64-Shipping.exe"+A685E1: F3 0F 5D C1 - minss xmm0,xmm1
"DH-Win64-Shipping.exe"+A685E5: 0F 28 D0 - movaps xmm2,xmm0
// ---------- INJECTING HERE ----------
"DH-Win64-Shipping.exe"+A685E8: F3 0F 11 91 3C 07 00 00 - movss [rcx+0000073C],xmm2
// ---------- DONE INJECTING ----------
"DH-Win64-Shipping.exe"+A685F0: 48 8D 54 24 30 - lea rdx,[rsp+30]
"DH-Win64-Shipping.exe"+A685F5: 48 89 4C 24 30 - mov [rsp+30],rcx
"DH-Win64-Shipping.exe"+A685FA: 48 81 C1 00 04 00 00 - add rcx,00000400
"DH-Win64-Shipping.exe"+A68601: E8 6A 0A 87 FF - call "DH-Win64-Shipping.exe"+2D9070
"DH-Win64-Shipping.exe"+A68606: 48 83 C4 28 - add rsp,28
"DH-Win64-Shipping.exe"+A6860A: C3 - ret
"DH-Win64-Shipping.exe"+A6860B: CC - int 3
"DH-Win64-Shipping.exe"+A6860C: CC - int 3
"DH-Win64-Shipping.exe"+A6860D: CC - int 3
"DH-Win64-Shipping.exe"+A6860E: CC - int 3
}
26
"inf jetpack"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2025-12-31
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,DH-Win64-Shipping.exe,F3 0F 11 8B 6C 01 00 00 E9 DF) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
// movss [rbx+0000016C],xmm1
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db F3 0F 11 8B 6C 01 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DH-Win64-Shipping.exe"+A2818C
"DH-Win64-Shipping.exe"+A2815C: 40 88 B3 78 01 00 00 - mov [rbx+00000178],sil
"DH-Win64-Shipping.exe"+A28163: 0F 86 3A 01 00 00 - jbe "DH-Win64-Shipping.exe"+A282A3
"DH-Win64-Shipping.exe"+A28169: 39 B3 2C 01 00 00 - cmp [rbx+0000012C],esi
"DH-Win64-Shipping.exe"+A2816F: 7E 28 - jle "DH-Win64-Shipping.exe"+A28199
"DH-Win64-Shipping.exe"+A28171: 0F 2F C6 - comiss xmm0,xmm6
"DH-Win64-Shipping.exe"+A28174: 77 23 - ja "DH-Win64-Shipping.exe"+A28199
"DH-Win64-Shipping.exe"+A28176: 48 8B 83 38 01 00 00 - mov rax,[rbx+00000138]
"DH-Win64-Shipping.exe"+A2817D: 0F 28 C7 - movaps xmm0,xmm7
"DH-Win64-Shipping.exe"+A28180: F3 0F 59 80 2C 01 00 00 - mulss xmm0,[rax+0000012C]
"DH-Win64-Shipping.exe"+A28188: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
"DH-Win64-Shipping.exe"+A2818C: F3 0F 11 8B 6C 01 00 00 - movss [rbx+0000016C],xmm1
// ---------- DONE INJECTING ----------
"DH-Win64-Shipping.exe"+A28194: E9 DF 00 00 00 - jmp "DH-Win64-Shipping.exe"+A28278
"DH-Win64-Shipping.exe"+A28199: 40 38 B3 30 01 00 00 - cmp [rbx+00000130],sil
"DH-Win64-Shipping.exe"+A281A0: 74 28 - je "DH-Win64-Shipping.exe"+A281CA
"DH-Win64-Shipping.exe"+A281A2: 0F 2F C6 - comiss xmm0,xmm6
"DH-Win64-Shipping.exe"+A281A5: 77 23 - ja "DH-Win64-Shipping.exe"+A281CA
"DH-Win64-Shipping.exe"+A281A7: 48 8B 83 38 01 00 00 - mov rax,[rbx+00000138]
"DH-Win64-Shipping.exe"+A281AE: 0F 28 C7 - movaps xmm0,xmm7
"DH-Win64-Shipping.exe"+A281B1: F3 0F 59 80 30 01 00 00 - mulss xmm0,[rax+00000130]
"DH-Win64-Shipping.exe"+A281B9: F3 0F 5C C8 - subss xmm1,xmm0
"DH-Win64-Shipping.exe"+A281BD: F3 0F 11 8B 6C 01 00 00 - movss [rbx+0000016C],xmm1
}
30
"inf holoblob"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2025-12-31
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,DH-Win64-Shipping.exe,F3 0F 11 87 58 02 00 00 77) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
// movss [rdi+00000258],xmm0
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db F3 0F 11 87 58 02 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DH-Win64-Shipping.exe"+97B4BA
"DH-Win64-Shipping.exe"+97B48A: EB 1B - jmp "DH-Win64-Shipping.exe"+97B4A7
"DH-Win64-Shipping.exe"+97B48C: 44 38 B7 E0 02 00 00 - cmp [rdi+000002E0],r14b
"DH-Win64-Shipping.exe"+97B493: 74 0A - je "DH-Win64-Shipping.exe"+97B49F
"DH-Win64-Shipping.exe"+97B495: F3 0F 10 8F 04 02 00 00 - movss xmm1,[rdi+00000204]
"DH-Win64-Shipping.exe"+97B49D: EB 08 - jmp "DH-Win64-Shipping.exe"+97B4A7
"DH-Win64-Shipping.exe"+97B49F: F3 0F 10 8F 00 02 00 00 - movss xmm1,[rdi+00000200]
"DH-Win64-Shipping.exe"+97B4A7: F3 0F 10 87 58 02 00 00 - movss xmm0,[rdi+00000258]
"DH-Win64-Shipping.exe"+97B4AF: F3 0F 59 CF - mulss xmm1,xmm7
"DH-Win64-Shipping.exe"+97B4B3: F3 0F 5C C1 - subss xmm0,xmm1
"DH-Win64-Shipping.exe"+97B4B7: 0F 2F C6 - comiss xmm0,xmm6
// ---------- INJECTING HERE ----------
"DH-Win64-Shipping.exe"+97B4BA: F3 0F 11 87 58 02 00 00 - movss [rdi+00000258],xmm0
// ---------- DONE INJECTING ----------
"DH-Win64-Shipping.exe"+97B4C2: 77 13 - ja "DH-Win64-Shipping.exe"+97B4D7
"DH-Win64-Shipping.exe"+97B4C4: 48 8B 07 - mov rax,[rdi]
"DH-Win64-Shipping.exe"+97B4C7: 48 8B CF - mov rcx,rdi
"DH-Win64-Shipping.exe"+97B4CA: FF 90 88 02 00 00 - call qword ptr [rax+00000288]
"DH-Win64-Shipping.exe"+97B4D0: 44 89 B7 58 02 00 00 - mov [rdi+00000258],r14d
"DH-Win64-Shipping.exe"+97B4D7: 48 8D 8F 60 01 00 00 - lea rcx,[rdi+00000160]
"DH-Win64-Shipping.exe"+97B4DE: E8 1D 61 73 00 - call "DH-Win64-Shipping.exe"+10B1600
"DH-Win64-Shipping.exe"+97B4E3: 48 8B D8 - mov rbx,rax
"DH-Win64-Shipping.exe"+97B4E6: 48 85 C0 - test rax,rax
"DH-Win64-Shipping.exe"+97B4E9: 74 20 - je "DH-Win64-Shipping.exe"+97B50B
}
150
"freeze timer"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2026-01-01
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,DH-Win64-Shipping.exe,48 29 47 68 48 8B 47 68) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
// sub [rdi+68],rax
mov rax,[rdi+68]
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 48 29 47 68 48 8B 47 68
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "DH-Win64-Shipping.exe"+BE63CB
"DH-Win64-Shipping.exe"+BE63A0: 3B 15 DE 68 F3 02 - cmp edx,["DH-Win64-Shipping.exe"+3B1CC84]
"DH-Win64-Shipping.exe"+BE63A6: 0F 94 C0 - sete al
"DH-Win64-Shipping.exe"+BE63A9: 84 C8 - test al,cl
"DH-Win64-Shipping.exe"+BE63AB: 0F 84 02 02 00 00 - je "DH-Win64-Shipping.exe"+BE65B3
"DH-Win64-Shipping.exe"+BE63B1: 0F 57 C9 - xorps xmm1,xmm1
"DH-Win64-Shipping.exe"+BE63B4: C6 87 82 00 00 00 01 - mov byte ptr [rdi+00000082],01
"DH-Win64-Shipping.exe"+BE63BB: F3 0F 5A CE - cvtss2sd xmm1,xmm6
"DH-Win64-Shipping.exe"+BE63BF: 48 8D 4D 67 - lea rcx,[rbp+67]
"DH-Win64-Shipping.exe"+BE63C3: E8 78 12 C6 FF - call "DH-Win64-Shipping.exe"+847640
"DH-Win64-Shipping.exe"+BE63C8: 48 8B 00 - mov rax,[rax]
// ---------- INJECTING HERE ----------
"DH-Win64-Shipping.exe"+BE63CB: 48 29 47 68 - sub [rdi+68],rax
// ---------- DONE INJECTING ----------
"DH-Win64-Shipping.exe"+BE63CF: 48 8B 47 68 - mov rax,[rdi+68]
"DH-Win64-Shipping.exe"+BE63D3: 48 3B 47 48 - cmp rax,[rdi+48]
"DH-Win64-Shipping.exe"+BE63D7: 0F 8F 6A 01 00 00 - jg "DH-Win64-Shipping.exe"+BE6547
"DH-Win64-Shipping.exe"+BE63DD: 48 8B 77 70 - mov rsi,[rdi+70]
"DH-Win64-Shipping.exe"+BE63E1: 4D 8D 9F 70 01 00 00 - lea r11,[r15+00000170]
"DH-Win64-Shipping.exe"+BE63E8: 45 8B 4B 28 - mov r9d,[r11+28]
"DH-Win64-Shipping.exe"+BE63EC: 49 8D 53 10 - lea rdx,[r11+10]
"DH-Win64-Shipping.exe"+BE63F0: 89 5D E7 - mov [rbp-19],ebx
"DH-Win64-Shipping.exe"+BE63F3: 8B CB - mov ecx,ebx
"DH-Win64-Shipping.exe"+BE63F5: C7 45 EB 01 00 00 00 - mov [rbp-15],00000001
}
161
"MORE FUN STUFF || Find + Register GEngine"
Auto Assembler Script
[ENABLE]
{$lua}
if not syntaxcheck then
local function findGEngine()
local patterns = {
{"48 8B 0D ?? ?? ?? ?? 48 85 C9 74", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 8B 88 ?? ?? ?? ??", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 48 8B 01 FF", 3, 7},
{"48 89 0D ?? ?? ?? ?? 48 85 C9", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 85 C0 74", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 4C 8B 01", 3, 7},
{"4C 8B 05 ?? ?? ?? ?? 4C 85 C0", 3, 7},
{"48 8B 15 ?? ?? ?? ?? 48 85 D2 74", 3, 7},
}
print("Scanning for GEngine...")
for i, patternData in ipairs(patterns) do
local pattern = patternData[1]
local offsetPos = patternData[2]
local instrLen = patternData[3]
local result = AOBScan(pattern)
if result and result.Count > 0 then
print(string.format("Pattern %d: %d matches", i, result.Count))
-- Check first 3 results
local maxCheck = math.min(result.Count, 3)
for j = 0, maxCheck - 1 do
local success, err = pcall(function()
-- Get address as STRING first
local instructionAddrStr = result.getString(j)
-- Convert to NUMBER
local instructionAddr = getAddress(instructionAddrStr)
print(string.format(" Result %d: Instruction at %X", j, instructionAddr))
local offsetAddr = instructionAddr + offsetPos
local ripOffset = readInteger(offsetAddr)
print(string.format(" RIP offset: %X", ripOffset))
local gEngineAddr = instructionAddr + instrLen + ripOffset
print(string.format(" GEngine candidate: %X", gEngineAddr))
-- Validate pointer
local enginePtr = readPointer(gEngineAddr)
if enginePtr ~= nil and enginePtr ~= 0 then
print(string.format(" ✓ Valid! Points to: %X", enginePtr))
registerSymbol("GEngine", gEngineAddr, true)
print("==========================================")
print(string.format("✓ GEngine registered at: %X", gEngineAddr))
print("==========================================")
return true
else
print(" ✗ Null/invalid pointer")
end
end)
if not success then
print(string.format(" Error: %s", err))
elseif err == true then
result.destroy()
return true
end
end
result.destroy()
end
end
print("==========================================")
print("✗ GEngine not found!")
print("==========================================")
return false
end
findGEngine()
end
{$asm}
[DISABLE]
{$lua}
if not syntaxcheck then
if getAddress("GEngine") then
unregisterSymbol("GEngine")
print("GEngine unregistered")
end
end
{$asm}
31
"AmmoConsumedPerShot"
0
Float
GEngine
720
0
1C0
130
918
410
30
0
38
160
78
750
4
"JumpMaxCount"
0
4 Bytes
GEngine
4F4
410
30
0
38
160
78
750
151
"MovementMode (Expand for values)"
0
Byte
GEngine
1E0
440
410
30
0
38
160
78
750
152
"1 = Walking (normal)"
1
153
"3 = Falling"
1
154
"5 = Flying(NoFall)"
1
159
"bActorEnableCollision (Enable Flight First LOL)"
0
Binary
1
1
0
GEngine
AC
410
30
0
38
160
78
750
155
"GravityScale (Default = 2.400000095)"
0
Float
GEngine
1C8
440
410
30
0
38
160
78
750
156
"MaxWalkSpeed (Default = 560)"
0
Float
GEngine
20C
440
410
30
0
38
160
78
750
157
"MaxFlySpeed (Default = 1000)"
0
Float
GEngine
218
440
410
30
0
38
160
78
750
158
"MaxAcceleration (Default = 2600)"
0
Float
GEngine
220
440
410
30
0
38
160
78
750