10
"Take No Damage"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,PlayerController:Kill+c)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
nop
nop
nop
movzx eax,byte ptr [rsi+00000120]
exit:
jmp returnhere
PlayerController:Kill+c:
jmp newmem
nop 5
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
PlayerController:Kill+c:
db 48 8B F1 0F B6 86 20 01 00 00
//mov rsi,rcx
//movzx eax,byte ptr [rsi+00000120]
349
"Ragdoll (Ctrl + T)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local domain = mono_enumDomains()[1]
if not domain then
end
local classId = mono_findClass('', 'DeathRagdoll')
if not classId then
end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then
end
local instance = instances[1]
local methodId = mono_class_findMethod(classId, 'RagdollIn')
if not methodId then
end
mono_invoke_method(domain, methodId, instance, {})
{$asm}
[DISABLE]
Activate
17
84
0
4
"Respawn (Ctrl + R)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local domain = mono_enumDomains()[1]
if not domain then
end
local classId = mono_findClass('', 'GameManager')
if not classId then
end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then
end
local instance = instances[1]
local methodId = mono_class_findMethod(classId, 'Respawn')
if not methodId then
end
mono_invoke_method(domain, methodId, instance, {})
{$asm}
[DISABLE]
Activate
17
82
0
7
"Next Level"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local domain = mono_enumDomains()[1]
if not domain then
end
local classId = mono_findClass('', 'GameManager')
if not classId then
end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then
end
local instance = instances[1]
local methodId = mono_class_findMethod(classId, 'NextLevel')
if not methodId then
end
mono_invoke_method(domain, methodId, instance, {})
{$asm}
[DISABLE]
8
"Game Manager"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local scriptEntry = memrec
local className = 'GameManager'
local fieldsToAdd = {
{ fieldName = 'currentLevel', recordName = 'Current Level', type = vtWord },
{ fieldName = 'postDeathTime', recordName = 'Post Death Time', type = vtSingle },
}
if not _GameManager_Instance or not _GameManager_Offsets then
local domain = mono_enumDomains()[1]
if not domain then return end
local classId = mono_findClass('', className)
if not classId then return end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then return end
_GameManager_Instance = instances[1]
_GameManager_Offsets = {}
local classFields = mono_class_enumFields(classId)
for _, f in ipairs(classFields) do
_GameManager_Offsets[f.name] = f.offset
end
end
if not _GameManager_Records then
_GameManager_Records = {}
end
for _, def in ipairs(fieldsToAdd) do
local record = _GameManager_Records[def.recordName]
if not record then
local al = getAddressList()
record = al.createMemoryRecord()
record.Description = def.recordName
record.Type = def.type
record.ShowAsHex = false
record.appendToEntry(scriptEntry)
_GameManager_Records[def.recordName] = record
end
if def.type == vtByte then
record.DropDownList.Text = "0:No\n1:Yes"
record.DropDownReadOnly = true
record.DropDownDescriptionOnly = true
record.DisplayAsDropDownListItem = true
end
if _GameManager_Offsets[def.fieldName] then
local liveAddress = string.format("%X", _GameManager_Instance + _GameManager_Offsets[def.fieldName])
record.Address = liveAddress
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
if _GameManager_Records then
for _, rec in pairs(_GameManager_Records) do
if rec then rec.destroy() end
end
_GameManager_Records = nil
end
_GameManager_Instance = nil
_GameManager_Offsets = nil
{$asm}
332
"Grab PlayerController"
Auto Assembler Script
[ENABLE]
alloc(newmem,$1000,PlayerController:Move+1b)
label(returnhere)
label(originalcode)
label(exit)
registersymbol(playerInstancePtr)
alloc(playerInstancePtr, 4)
newmem:
mov [playerInstancePtr], rcx
originalcode:
mov rsi,rcx
mov [rbp-00000468],rdx
exit:
jmp returnhere
PlayerController:Move+1b:
jmp newmem
nop 5
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
PlayerController:Move+1b:
db 48 8B F1 48 89 95 98 FB FF FF
//mov rsi,rcx
//mov [rbp-00000468],rdx
331
"Instance"
0
4 Bytes
[playerInstancePtr]
333
"Max Speed (5) (Hold Shift to go fast)"
0
Float
[playerInstancePtr]+f0
Set Value
16
15
0
334
"Acceleration (10)"
0
Float
[playerInstancePtr]+f4
335
"Accelerate (13)"
0
Float
[playerInstancePtr]+f8
338
"Auto Respawn"
1:Yes
0:No
0
Byte
[playerInstancePtr]+108
340
"Dead"
1:Yes
0:No
0
Byte
[playerInstancePtr]+120
342
"Speed Multiplier (1)"
0
Float
[playerInstancePtr]+134
343
"Tripping"
1:Yes
0:No
0
Byte
[playerInstancePtr]+138
373
"Ragdoll"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,RootMotion.Dynamics.BehaviourPuppet:OnFixedUpdate+14a)
label(returnhere)
label(originalcode)
label(exit)
registersymbol(ragd)
alloc(ragd, 4)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [ragd], rax
originalcode:
movsxd rax,dword ptr [rax+000001A4]
exit:
jmp returnhere
RootMotion.Dynamics.BehaviourPuppet:OnFixedUpdate+14a:
jmp newmem
nop 2
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
RootMotion.Dynamics.BehaviourPuppet:OnFixedUpdate+14a:
db 48 63 80 A4 01 00 00
//movsxd rax,dword ptr [rax+000001A4]
374
"Register Address"
1
0
8 Bytes
[ragd]
375
"Active State"
1:Yes
0:No
0
4 Bytes
[ragd]+1A4
376
"Is Killing"
1:Yes
0:No
0
4 Bytes
[ragd]+1A0
359
"Pause Menu Tree"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local scriptEntry = memrec
local className = 'PauseMenu'
local fieldsToAdd = {
{ fieldName = 'windUpTime', recordName = 'Wind Up Time (1)', type = vtSingle },
{ fieldName = 'waitTime', recordName = 'Wait Time (.5)', type = vtSingle },
{ fieldName = 'attackSpeed', recordName = 'Attack Speed (4000)', type = vtSingle },
{ fieldName = 'attackLife', recordName = 'Attack Life (2)', type = vtSingle },
{ fieldName = 'hitForce', recordName = 'Hit Force (25)', type = vtSingle },
}
if not _PauseMenu_Instance or not _PauseMenu_Offsets then
local domain = mono_enumDomains()[1]
if not domain then return end
local classId = mono_findClass('', className)
if not classId then return end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then return end
_PauseMenu_Instance = instances[1]
_PauseMenu_Offsets = {}
local classFields = mono_class_enumFields(classId)
for _, f in ipairs(classFields) do
_PauseMenu_Offsets[f.name] = f.offset
end
end
if not _PauseMenu_Records then
_PauseMenu_Records = {}
end
for _, def in ipairs(fieldsToAdd) do
local record = _PauseMenu_Records[def.recordName]
if not record then
local al = getAddressList()
record = al.createMemoryRecord()
record.Description = def.recordName
record.Type = def.type
record.ShowAsHex = false
record.appendToEntry(scriptEntry)
_PauseMenu_Records[def.recordName] = record
end
if def.type == vtByte then
record.DropDownList.Text = "0:No\n1:Yes"
record.DropDownReadOnly = true
record.DropDownDescriptionOnly = true
record.DisplayAsDropDownListItem = true
end
if _PauseMenu_Offsets[def.fieldName] then
local liveAddress = string.format("%X", _PauseMenu_Instance + _PauseMenu_Offsets[def.fieldName])
record.Address = liveAddress
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
if _PauseMenu_Records then
for _, rec in pairs(_PauseMenu_Records) do
if rec then rec.destroy() end
end
_PauseMenu_Records = nil
end
_PauseMenu_Instance = nil
_PauseMenu_Offsets = nil
{$asm}
366
"Cancel Tree Button (Ctrl +1)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
LaunchMonoDataCollector()
local domain = mono_enumDomains()[1]
if not domain then
end
local classId = mono_findClass('', 'PauseMenu')
if not classId then
end
local instances = mono_class_findInstancesOfClassListOnly(domain, classId)
if not instances or #instances == 0 then
end
local instance = instances[1]
local methodId = mono_class_findMethod(classId, 'CancelTreeBtn')
if not methodId then
end
mono_invoke_method(domain, methodId, instance, {})
{$asm}
[DISABLE]
Activate
17
49
0
Change of je PlayerController:Kill+2e3
1C81795C99C
01
00
00
85
C0
0F
84
21
00
00
00
48
B8
20
B3
A0
Change of test eax,eax
1C81795C99A
86
08
01
00
00
85
C0
0F
84
21
00
00
Change of jl RootMotion.Dynamics.PuppetMaster+<AliveToDead>d__227:MoveNext+538
20932A8EF67
47
18
44
3B
F8
7C
AF
48
8B
CB
33
D2
Change of mov [rbx+00000108],00000000
20932A8EA36
A0
01
00
00
01
C7
83
08
01
00
00
00
00
00
00
48
85
DB
0F
84
Change of mov [rsi+20],FFFFFFFF
20932A8EA28
E9
D6
05
00
00
C7
46
20
FF
FF
FF
FF
C6
83
A0
01
00
Change of test r12d,r12d
20932A8EA12
20
48
8B
5E
18
45
85
E4
74
11
41
83
FC
Change of je RootMotion.Dynamics.PuppetMaster+<AliveToDead>d__227:MoveNext+48
20932A8EA15
5E
18
45
85
E4
74
11
41
83
FC
01
0F
Code :mov rsi,[rbp-18]
20932A8F667
41
01
00
00
01
48
8B
75
E8
48
8B
7D
F0
4C
Code :mov byte ptr [rsi+00000141],01
20932A8F660
3C
01
00
00
01
C6
86
41
01
00
00
01
48
8B
75
E8
48
Change of mov byte ptr [rsi+0000013C],01
20932A8F659
18
3B
F8
7C
87
C6
86
3C
01
00
00
01
C6
86
41
01
00
Change of mov rdi,[rbx+30]
20932A8EAA2
AD
01
00
00
01
48
8B
7B
30
45
33
FF
E9
70
Change of mov [rax+000000F0],00000001
20932A85FAC
00
48
8B
40
20
C7
80
F0
00
00
00
01
00
00
00
48
8B
46
38
48
Change of cmp dword ptr [rax],00
20932A85FBD
46
38
48
8B
C8
83
38
00
48
8D
64
24
00
Change of mov r11,UnityEngine.Collider:set_enabled
20932A85F7E
00
48
8D
6D
00
49
BB
E0
8C
A3
12
09
02
00
00
41
FF
D3
48
8B
Change of mov byte ptr [rbx+000001A0],01
24C6B04933F
20
FF
FF
FF
FF
C6
83
A0
01
00
00
01
C7
83
08
01
00
Change of movzx eax,byte ptr [rsi+000001A0]
24C98060025
84
B3
01
00
00
0F
B6
86
A0
01
00
00
85
C0
0F
85
A4
Change of mov byte ptr [rbx+000001AD],01
24C6B0493AB
3C
01
00
00
01
C6
83
AD
01
00
00
01
48
8B
7B
30
45
Change of mov byte ptr [rbx+0000013C],01
24C6B0493A4
00
85
C0
75
0E
C6
83
3C
01
00
00
01
90
90
90
90
90
Change of mov [rsi+20],FFFFFFFF
24C6B049338
E9
D6
05
00
00
C7
46
20
FF
FF
FF
FF
90
90
90
90
90
Change of je RootMotion.Dynamics.PuppetMaster+<AliveToDead>d__227:MoveNext+48
24C6B049325
5E
18
45
85
E4
74
11
41
83
FC
01
0F
Change of mov [rax+000000F0],00000001
24C6B0408BC
00
48
8B
40
20
C7
80
F0
00
00
00
01
00
00
00
48
8B
46
38
48
Change of mov r11,UnityEngine.Collider:set_enabled
24C6B04088E
00
48
8D
6D
00
49
BB
60
36
06
98
4C
02
00
00
41
FF
D3
48
8B
Change of jne PlayerController:Kill+2e3
1681B6C69B8
01
00
00
85
C0
0F
85
C5
02
00
00
48
B8
20
A3
06
Change of movss xmm0,[PlayerController:Kill+300]
1681B6C69CF
00
48
8B
40
40
F3
0F
10
05
C9
02
00
00
F3
0F
5A
C0
48
Change of movzx eax,byte ptr [rsi+00000120]
1681B6C69AF
75
F8
48
8B
F1
0F
B6
86
20
01
00
00
85
C0
0F
85
C5
Change of mov rsi,rcx
1681B6C69AC
30
48
89
75
F8
48
8B
F1
0F
B6
86
20
01
Code :mov [rax],rcx
1B5141084FA
00
48
8B
4D
F8
48
89
08
48
89
45
F0
48
Code :mov rsi,rcx
1B5141380CB
F0
4C
89
7D
F8
48
8B
F1
48
89
95
98
FB
Code :mov rsi,rcx
12012A180CB
F0
4C
89
7D
F8
48
8B
F1
48
89
95
98
FB
Change of mov r11,DeathRagdoll:AddForce
1E2373E6F9E
AD
00
00
00
00
49
BB
D0
06
EB
36
E2
01
00
00
41
FF
D3
48
8B
Change of movzx eax,byte ptr [rsi+00000120]
2431A692DCF
75
F8
48
8B
F1
0F
B6
86
20
01
00
00
85
C0
0F
85
C5
Change of cmp eax,02
2431A66D1B9
86
A4
01
00
00
83
F8
02
40
0F
94
C0
48
Code :movsxd rax,dword ptr [rax+000001A4]
2431A66DA0A
8B
C8
83
39
00
48
63
80
A4
01
00
00
85
C0
40
0F
94
Code :jne RootMotion.Dynamics.PuppetMaster:FixedUpdate+8e0
2437B0FBEF6
0F
B6
C0
85
C0
0F
85
14
02
00
00
48
8B
CE
48
8D
Code :mov [rbx+000001A4],00000001
1C7B3E7E8A2
A0
01
00
00
00
C7
83
A4
01
00
00
01
00
00
00
0F
B6
46
24
85
Change of mov [rsi+00000142],al
1C793E4ECEC
86
3B
01
00
00
40
88
86
42
01
00
00
48
8B
75
F0
48
Change of mov byte ptr [rsi+00000141],01
1C7B3E7EF80
3C
01
00
00
01
C6
86
41
01
00
00
01
48
8B
75
E8
48
Change of mov byte ptr [rsi+0000014D],01
1C7B4E7A599
4C
01
00
00
00
C6
86
4D
01
00
00
01
48
8B
75
E8
48
Change of mov byte ptr [rsi+0000014C],00
1C7B4E7A592
A0
01
00
00
00
C6
86
4C
01
00
00
00
C6
86
4D
01
00
Change of mov byte ptr [rsi+000001A0],00
1C7B4E7A58B
86
A4
01
00
00
C6
86
A0
01
00
00
00
C6
86
4C
01
00
Code :mov [rcx+10],eax
UnityPlayer.dll+16B0022
41
0C
8B
47
10
89
41
10
8B
47
14
89
41
Code :mov eax,[rsi+64]
UnityPlayer.dll+1663CF0
46
60
89
42
10
8B
46
64
89
42
14
8B
46