b75d$2q=-d(d,nsEUDB;tw]l@wu+80cUN#v%uOwhfygO/BxBIjDR8AF/]kzwNB^
3
"Activate First"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local processName = "PrisonCity.exe"
local moduleName = processName
local function createHackingPoint(symbolName, recordName, AOB)
local address = AOBScanModuleUnique(moduleName, AOB)
local memoryRecord = AddressList.getMemoryRecordByDescription(recordName)
if memoryRecord then
if address then
memoryRecord.Color = 0x00AA00
registerSymbol(symbolName, address, true)
else
memoryRecord.Color = 0x0000AA
end
end
end
createHackingPoint("infHealth", "Infinite Health", "48 8B 06 48 89 03 4C 8D 5C 24 60")
createHackingPoint("infLives", "Infinite Lives", "F2 0F 5C 05 ** ** ** ** F2 0F 11 01 48 83 C4 20 5B C3")
createHackingPoint("invincibility", "Invincibility", "84 C0 0F 84 ** ** ** ** 8B 87 B0 00 00 00 D1 E8 A8 01")
createHackingPoint("moonJump", "Moon Jump", "84 C0 0F 84 ** ** ** ** C7 44 24 60 4B 00 00 00 8B 15 ** ** ** **")
[DISABLE]
unregisterSymbol("infHealth")
unregisterSymbol("infLives")
unregisterSymbol("invincibility")
unregisterSymbol("moonJump")
5
"Infinite Health"
00AA00
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,infHealth)
label(returnhere)
label(originalcode)
label(exit)
alloc(healthPointer, 8)
alloc(manaPointer, 8)
registersymbol(healthPointer)
registersymbol(manaPointer)
newmem:
cmp r11, 18B1D // ID for Health
jne @f
mov [healthPointer], rbx
@@:
cmp r11, 18B26 // ID for Mana
jne originalcode
mov [manaPointer], rbx
nop [rbx] // DEBUG: check if only intended addresses are being accessed
originalcode:
mov rax,[rsi]
mov [rbx],rax
exit:
jmp returnhere
infHealth:
jmp newmem
nop
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
infHealth:
db 48 8B 06 48 89 03
//mov rax,[rsi]
//mov [rbx],rax
13
"Health"
1
Double
healthPointer
0
14
"Mana"
0
Double
manaPointer
0
16
"Infinite Lives"
00AA00
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,infLives)
label(returnhere)
label(originalcode)
label(exit)
alloc(pLives, 8)
registersymbol(pLives)
newmem:
cmp r9, D
jne originalcode
mov [pLives], rcx
jmp exit
originalcode:
subsd xmm0,[PrisonCity.exe+10EE938]
exit:
jmp returnhere
infLives:
jmp newmem
nop 3
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
infLives:
db F2 0F 5C 05 50 FA 01 01
//subsd xmm0,[PrisonCity.exe+10EE938]
17
"Lives (die to update)"
0
Double
pLives
0
7
"Invincibility"
00AA00
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,invincibility)
label(returnhere)
label(originalcode)
label(exit)
newmem:
jmp PrisonCity.exe+95F5D4
originalcode:
test al,al
je PrisonCity.exe+95F5D4
exit:
jmp returnhere
invincibility:
jmp newmem
nop 3
returnhere:
[DISABLE]
dealloc(newmem)
invincibility:
db 84 C0 0F 84 CD 01 00 00
//test al,al
//je PrisonCity.exe+95F5D4
4
"Moon Jump"
00AA00
Auto Assembler Script
[ENABLE]
{$LUA}
if syntaxcheck then return end
moonJumpTimer = createTimer(nil)
moonJumpTimer.Interval = 10 -- Checks every 10 milliseconds (Extremely fast)
moonJumpTimer.OnTimer = function(t)
local moonJumpHotkey = getAddressSafe("moonJumpHotkey")
if not moonJumpHotkey then return end
if isKeyPressed(VK_A) then -- When 'A' key is pressed
writeByte(moonJumpHotkey, 1) -- Enable
else
writeByte(moonJumpHotkey, 0) -- Disable
end
end
{$ASM}
alloc(newmem,2048,moonJump)
label(returnhere)
label(originalcode)
label(exit)
alloc(moonJumpHotkey, 1)
registersymbol(moonJumpHotkey)
alloc(instructionBytes, 8)
registersymbol(instructionBytes)
moonJumpHotkey:
db 0
instructionBytes:
readmem(moonJump, 8)
newmem:
cmp byte ptr [moonJumpHotkey], 1
jne originalcode
mov al, 1
originalcode:
test al,al
je PrisonCity.exe+5160BA
exit:
jmp returnhere
moonJump:
jmp newmem
nop 3
returnhere:
[DISABLE]
{$LUA}
if syntaxcheck then return end
if moonJumpTimer then
moonJumpTimer.destroy()
moonJumpTimer = nil
end
{$ASM}
moonJump:
readmem(instructionBytes, 8)
dealloc(*)
unregistersymbol(*)
Change of mov [rsp+20],00000001
PrisonCity.exe+689B7
8B
02
48
89
03
C7
44
24
20
01
00
00
00
48
8B
D7
48
8B
Code :mov [rbx],rax
PrisonCity.exe+890E99
00
00
48
8B
06
48
89
03
4C
8D
5C
24
60
Code :mov rax,[rdi]
PrisonCity.exe+88FA21
E8
DF
B9
00
00
48
8B
07
48
89
03
48
83
Code :movsd [rcx],xmm0
PrisonCity.exe+CEEE8
05
50
FA
01
01
F2
0F
11
01
48
83
C4
20
5B