vtVFg2r13WOx8:SNab=2igEXMS8z_vO*ZWI3H9?IjzLJKCFT@PkN@
0
"Activate First"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
if readInteger(process) == nil then
openProcess('Tunic.exe')
end
if not monopipe then
LaunchMonoDataCollector()
end
[DISABLE]
monopipe = nil
openProcess(0)
1
"Get Player"
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,PlayerCharacter.Update)
label(returnhere)
label(originalcode)
label(exit)
alloc(pPlayer, 8)
registersymbol(pPlayer)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [pPlayer], rcx
originalcode:
push rbp
push rbx
push rdi
lea rbp,[rsp-20]
exit:
jmp returnhere
PlayerCharacter.Update:
jmp newmem
nop 4
returnhere:
[DISABLE]
dealloc(newmem)
dealloc(pPlayer)
unregistersymbol(pPlayer)
PlayerCharacter.Update:
db 40 55 53 57 48 8D 6C 24 E0
//push rbp
//push rbx
//push rdi
//lea rbp,[rsp-20]
4
"Open Dissect"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local pPlayer = getAddressSafe('pPlayer')
if not pPlayer or readInteger(pPlayer) == 0 then
showMessage('Player pointer still not populated')
return
end
structurePlayer = createStructureForm('[pPlayer]', 'Player', 'PlayerCharacter')
createThread(function()
while structurePlayer and structurePlayer.getVisible() do
sleep(1000)
end
synchronize(function()
memrec.Active = false
end)
end)
[DISABLE]
5
"CompletelyInvulnerableEvenToIFrameIgnoringAttacks"
0:DISABLED
1:ENABLED
0
Byte
[pPlayer]+C1
7
"unlimitedAmmo"
0
Byte
[pPlayer]+3B8
6
"_stamina"
0
Float
[pPlayer]+1C4
8
"Profile Zero HP Lost"
Auto Assembler Script
[ENABLE]
aobscanmodule(HP_Lost,GameAssembly.dll,33 C9 E8 ** ** ** ** 45 33 C0 8B D3 48 8B CF 48 8B 5C 24 30 48 83 C4 20 5F E9 ** ** ** ** CC CC CC CC CC CC CC CC CC 48 89 5C 24 08) // should be unique
alloc(newmem,$1000,HP_Lost)
label(code)
label(return)
newmem:
xor rbx, rbx
code:
xor ecx,ecx
call SaveFile.setupDefaultIfNecessary
jmp return
HP_Lost:
jmp newmem
nop 2
return:
registersymbol(HP_Lost)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
HP_Lost:
db 33 C9 E8 A0 F7 00 00
unregistersymbol(HP_Lost)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+44CD59
GameAssembly.dll+44CD26: 75 1A - jne GameAssembly.dll+44CD42
GameAssembly.dll+44CD28: 48 8D 0D 59 7B EA 00 - lea rcx,[GameAssembly.dll+12F4888]
GameAssembly.dll+44CD2F: E8 9C 1E D2 FF - call GameAssembly.dll+16EBD0
GameAssembly.dll+44CD34: 48 8B 0D 4D 7B EA 00 - mov rcx,[GameAssembly.dll+12F4888]
GameAssembly.dll+44CD3B: C6 05 A1 A6 F5 00 01 - mov byte ptr [GameAssembly.dll+13A73E3],01
GameAssembly.dll+44CD42: F6 81 33 01 00 00 02 - test byte ptr [rcx+00000133],02
GameAssembly.dll+44CD49: 74 0E - je GameAssembly.dll+44CD59
GameAssembly.dll+44CD4B: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+44CD52: 75 05 - jne GameAssembly.dll+44CD59
GameAssembly.dll+44CD54: E8 D7 DD CA FF - call GameAssembly.il2cpp_runtime_class_init
// ---------- INJECTING HERE ----------
GameAssembly.dll+44CD59: 33 C9 - xor ecx,ecx
// ---------- DONE INJECTING ----------
GameAssembly.dll+44CD5B: E8 A0 F7 00 00 - call SaveFile.setupDefaultIfNecessary
GameAssembly.dll+44CD60: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+44CD63: 8B D3 - mov edx,ebx
GameAssembly.dll+44CD65: 48 8B CF - mov rcx,rdi
GameAssembly.dll+44CD68: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+44CD6D: 48 83 C4 20 - add rsp,20
GameAssembly.dll+44CD71: 5F - pop rdi
GameAssembly.dll+44CD72: E9 39 D1 00 00 - jmp SaveFile.InternalSetInt
GameAssembly.dll+44CD77: CC - int 3
GameAssembly.dll+44CD78: CC - int 3
}
9
"Profile Zero MP Lost"
Auto Assembler Script
[ENABLE]
aobscanmodule(MP_Lost,GameAssembly.dll,33 C9 E8 ** ** ** ** 45 33 C0 8B D3 48 8B CF 48 8B 5C 24 30 48 83 C4 20 5F E9 ** ** ** ** CC CC CC CC CC CC CC CC CC 48 89 5C 24 10) // should be unique
alloc(newmem,$1000,MP_Lost)
label(code)
label(return)
newmem:
xor rbx, rbx
code:
xor ecx,ecx
call SaveFile.setupDefaultIfNecessary
jmp return
MP_Lost:
jmp newmem
nop 2
return:
registersymbol(MP_Lost)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
MP_Lost:
db 33 C9 E8 B0 F6 00 00
unregistersymbol(MP_Lost)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+44CE49
GameAssembly.dll+44CE16: 75 1A - jne GameAssembly.dll+44CE32
GameAssembly.dll+44CE18: 48 8D 0D 69 7A EA 00 - lea rcx,[GameAssembly.dll+12F4888]
GameAssembly.dll+44CE1F: E8 AC 1D D2 FF - call GameAssembly.dll+16EBD0
GameAssembly.dll+44CE24: 48 8B 0D 5D 7A EA 00 - mov rcx,[GameAssembly.dll+12F4888]
GameAssembly.dll+44CE2B: C6 05 B1 A5 F5 00 01 - mov byte ptr [GameAssembly.dll+13A73E3],01
GameAssembly.dll+44CE32: F6 81 33 01 00 00 02 - test byte ptr [rcx+00000133],02
GameAssembly.dll+44CE39: 74 0E - je GameAssembly.dll+44CE49
GameAssembly.dll+44CE3B: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+44CE42: 75 05 - jne GameAssembly.dll+44CE49
GameAssembly.dll+44CE44: E8 E7 DC CA FF - call GameAssembly.il2cpp_runtime_class_init
// ---------- INJECTING HERE ----------
GameAssembly.dll+44CE49: 33 C9 - xor ecx,ecx
// ---------- DONE INJECTING ----------
GameAssembly.dll+44CE4B: E8 B0 F6 00 00 - call SaveFile.setupDefaultIfNecessary
GameAssembly.dll+44CE50: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+44CE53: 8B D3 - mov edx,ebx
GameAssembly.dll+44CE55: 48 8B CF - mov rcx,rdi
GameAssembly.dll+44CE58: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+44CE5D: 48 83 C4 20 - add rsp,20
GameAssembly.dll+44CE61: 5F - pop rdi
GameAssembly.dll+44CE62: E9 49 D0 00 00 - jmp SaveFile.InternalSetInt
GameAssembly.dll+44CE67: CC - int 3
GameAssembly.dll+44CE68: CC - int 3
}
10
"Infinite Stamina"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,Creature.set_stamina)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
movss xmm1, xmm2
movss xmm6, xmm2
originalcode:
push rbx
sub rsp,40
exit:
jmp returnhere
Creature.set_stamina:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
Creature.set_stamina:
db 40 53 48 83 EC 40
//push rbx
//sub rsp,40
16
"Get Items"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local aobstring = '48 8D 04 40 8B 44 C1 30'
local stringlist = AOBScan(aobstring)
local listed = {}
local function createRecord(name, address)
local record = AddressList.getMemoryRecordByDescription(name)
if not record then
record = AddressList.createMemoryRecord()
record.Description = name
record.vtType = vtDword
end
record.Address = address
record.AppendToEntry(memrec)
end
local function on_debug()
if RDX ~= 0 and not listed[RDX]then
listed[RDX] = true
local length = readInteger(RDX + 0x10)
local name = readString(RDX + 0x14, length * 2, true)
local address = RCX + RAX * 0x8 + 0x30
createRecord(name, address)
end
debug_continueFromBreakpoint()
end
if stringlist and stringlist.Count == 2 then
local address = tonumber(stringlist[1], 16) + 4
registerSymbol('Inventory', address)
debug_setBreakpoint(address, on_debug)
end
stringlist.destroy()
[DISABLE]
local address = getAddressSafe('Inventory')
if address then
unregisterSymbol('Inventory')
debug_removeBreakpoint(address)
end
while memrec.Count > 0 do
memrec.Child[0].destroy()
end
Code :mov [rcx+rax*8+30],r9d
GameAssembly.dll+BF35B0
00
4B
8D
04
76
44
89
4C
C1
30
FF
43
24
B0
01