85
"Backup PTRs"
1
12163
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9A0
50
12164
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FD0
18
9A0
48
12165
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9A0
738
12166
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E30
18
9A0
50
12167
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E28
18
9F0
738
12168
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193218
18
9A0
738
12169
"Inv Slot 1"
4 Bytes
"NMS.exe"+070EC6C8
18
9A0
628
700
12170
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FE0
18
9A0
40
38
12171
"Inv Slot 1"
4 Bytes
"NMS.exe"+070EC6D0
18
9A0
528
218
12172
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E30
18
9F0
528
218
12173
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9A0
900
50
12174
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193130
18
9A0
40
18
12175
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193218
18
9A0
630
0
12176
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193220
18
9A0
900
528
218
12177
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192D30
18
9A0
950
518
228
12178
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193280
18
9A0
518
220
28
12179
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192D30
18
9A0
950
628
118
12180
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193118
18
9A0
528
6E0
110
12181
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FC8
18
9A0
630
5D8
110
12182
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E28
18
9F0
518
708
108
12183
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
6C0
5E8
0
12184
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E30
18
9A0
950
630
110
12185
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193270
18
9A0
900
528
6E0
228
12186
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192D28
18
9A0
950
518
0
0
12187
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193280
18
9A0
518
0
110
28
12188
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193118
18
9A0
518
708
6E0
110
12189
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193220
18
9A0
630
5D8
708
218
12190
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E30
18
9F0
628
5F8
0
110
12191
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193218
18
9A0
518
0
700
0
12192
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E90
18
9A0
6C0
10
100
8
12193
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
840
4C8
0
0
12194
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
950
630
5DC
7E8
12195
"Inv Slot 1"
4 Bytes
"NMS.exe"+070EC6D0
18
9A0
630
5D8
708
218
12196
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9A0
51C
6D8
700
0
12197
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
900
840
4C8
110
12198
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193268
18
9A0
900
528
6E0
0
0
12199
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192D40
18
9A0
950
518
220
20
A8
12200
"Inv Slot 1"
4 Bytes
"NMS.exe"+071930D0
18
9A0
900
630
6E8
700
110
12201
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
950
628
700
5DC
7E8
12202
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FE0
18
9A0
628
110
38
68
E8
12203
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193130
18
9A0
628
700
6E8
110
18
12204
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193218
18
9A0
630
5D8
0
5F8
108
12205
"Inv Slot 1"
4 Bytes
"NMS.exe"+071930D0
18
9A0
528
6E0
0
5F8
218
12206
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9F0
628
5F8
0
780
6F8
12207
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E80
18
9F0
528
0
5DC
5C8
228
12208
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9F0
528
6E4
5C8
708
218
12209
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E80
18
9F0
518
708
6E4
100
108
12210
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193268
18
9A0
518
708
0
5D8
110
12211
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193280
18
9A0
628
700
6E8
110
28
12212
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FD0
18
9A0
6C0
10
6F0
6E8
118
12213
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E90
18
9A0
6C0
5E8
110
8
A8
12214
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192FC8
18
9A0
840
0
6F0
5D8
110
12215
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E98
18
9A0
840
5D8
110
8
38
12216
"Inv Slot 1"
4 Bytes
"NMS.exe"+071930C8
18
9A0
900
518
0
700
0
12217
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9A0
950
528
6E4
100
7F8
12218
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E78
18
9A0
950
630
5DC
6D8
0
12219
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193268
18
9A0
900
628
700
5D8
110
12220
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9A0
51C
F0
4C8
708
218
12221
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E80
18
9A0
51C
100
7F8
5D8
118
12222
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E90
18
9A0
900
51C
F0
7F8
8
12223
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9A0
900
6C0
10
6F0
110
12224
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9A0
900
840
5D8
5F8
218
12225
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E80
18
9F0
630
780
0
0
108
12226
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E90
18
9F0
630
780
0
7F8
8
12227
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9F0
630
780
10
5E8
218
12228
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9F0
630
780
10
6F0
0
12229
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192E90
18
9F0
630
780
4D8
220
8
12230
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9F0
630
780
4D8
708
108
12231
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9F0
630
780
5E8
5F8
108
12232
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9F0
630
780
5E8
5F8
218
12233
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F78
18
9F0
630
780
5E8
700
0
12234
"Inv Slot 1"
4 Bytes
"NMS.exe"+07192F80
18
9F0
630
780
5E8
700
110
12236
"Units"
4 Bytes
"NMS.exe"+07192F80
89C
50
12237
"Units"
4 Bytes
"NMS.exe"+07192E80
89C
48
12238
"Units"
4 Bytes
"NMS.exe"+07192D30
8EC
48
12239
"Units"
4 Bytes
"NMS.exe"+07193120
89C
48
12240
"Units"
4 Bytes
"NMS.exe"+07193270
89C
48
12241
"Units"
4 Bytes
"NMS.exe"+07193120
89C
518
228
12242
"Units"
4 Bytes
"NMS.exe"+071930C8
89C
528
108
12243
"Units"
4 Bytes
"NMS.exe"+07192FC8
89C
518
110
12244
"Units"
4 Bytes
"NMS.exe"+07192F80
89C
528
218
12245
"Units"
4 Bytes
"NMS.exe"+07193270
89C
900
48
12246
"Units"
4 Bytes
"NMS.exe"+071930D0
89C
900
50
12247
"Units"
4 Bytes
"NMS.exe"+07192D30
89C
950
48
12248
"Units"
4 Bytes
"NMS.exe"+07192CF0
8EC
48
8
12249
"Units"
4 Bytes
"NMS.exe"+07193218
89C
528
108
12250
"Units"
4 Bytes
"NMS.exe"+070EC6C8
89C
628
700
12251
"Units"
4 Bytes
"NMS.exe"+07193130
89C
628
110
18
12252
"Units"
4 Bytes
"NMS.exe"+07192FE0
89C
40
38
A8
12253
"Units"
4 Bytes
"NMS.exe"+07193120
89C
630
5D8
228
12254
"Units"
4 Bytes
"NMS.exe"+071930C8
89C
518
708
108
12255
"Units"
4 Bytes
"NMS.exe"+071930D0
89C
628
700
110
12256
"Units"
4 Bytes
"NMS.exe"+07192FD0
89C
528
6E0
228
12257
"Units"
4 Bytes
"NMS.exe"+07192E80
89C
51C
100
108
12258
"Units"
4 Bytes
"NMS.exe"+07192E80
89C
840
0
108
12259
"Units"
4 Bytes
"NMS.exe"+070EC6C8
89C
900
528
0
12260
"Units"
4 Bytes
"NMS.exe"+07193218
89C
900
528
108
12261
"Units"
4 Bytes
"NMS.exe"+07193118
89C
900
628
0
12262
"Units"
4 Bytes
"NMS.exe"+071930D0
89C
900
630
110
12263
"Units"
4 Bytes
"NMS.exe"+07192F78
89C
900
528
108
12264
"Units"
4 Bytes
"NMS.exe"+07192E78
89C
900
840
6E8
12265
"Units"
4 Bytes
"NMS.exe"+07192D28
89C
950
628
0
12266
"Units"
4 Bytes
"NMS.exe"+07193230
89C
528
210
28
12267
"Units"
4 Bytes
"NMS.exe"+07193268
89C
630
6E8
0
12268
"Units"
4 Bytes
"NMS.exe"+07193270
89C
518
0
118
12269
"Units"
4 Bytes
"NMS.exe"+070EC6C8
89C
628
5F8
0
12270
"Units"
4 Bytes
"NMS.exe"+07192E78
8EC
528
6E4
7E8
12271
"Units"
4 Bytes
"NMS.exe"+07192D28
8EC
518
0
0
12272
"Units"
4 Bytes
"NMS.exe"+07192D30
8EC
518
0
118
12273
"Units"
4 Bytes
"NMS.exe"+07192D40
8EC
628
110
20
12274
"Units"
4 Bytes
"NMS.exe"+07192E28
8EC
628
5F8
108
12275
"Units"
4 Bytes
"NMS.exe"+07192E30
8EC
628
5F8
218
12276
"Units"
4 Bytes
"NMS.exe"+07192E28
8EC
628
700
0
12277
"Units"
4 Bytes
"NMS.exe"+07192E30
8EC
628
700
110
12278
"Units"
4 Bytes
"NMS.exe"+07193230
89C
630
108
28
11997
"Scripts (Auto Activate)"
1
12316
"Inf Life Support/Mining Beam/Pulse Engine/Ship Shields/Launch Thruster"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(lifesup,NMS.exe,0F 11 4B 10 0F 10 45 20 0F 11 43 20 E8 ** ** ** **) // should be unique
alloc(newmem,$1000,lifesup)
label(code)
label(return)
newmem:
code:
// movups [rbx+10],xmm1
movups xmm0,[rbp+20]
jmp return
lifesup:
jmp newmem
nop 3
return:
registersymbol(lifesup)
[DISABLE]
lifesup:
db 0F 11 4B 10 0F 10 45 20
unregistersymbol(lifesup)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF66A979577
7FF66A97954F: 0F 10 4B 10 - movups xmm1,[rbx+10]
7FF66A979553: 49 8B D6 - mov rdx,r14
7FF66A979556: 48 8B CE - mov rcx,rsi
7FF66A979559: 0F 11 44 24 20 - movups [rsp+20],xmm0
7FF66A97955E: 0F 10 43 20 - movups xmm0,[rbx+20]
7FF66A979562: 0F 11 4C 24 30 - movups [rsp+30],xmm1
7FF66A979567: 0F 11 44 24 40 - movups [rsp+40],xmm0
7FF66A97956C: 0F 10 45 00 - movups xmm0,[rbp+00]
7FF66A979570: 0F 11 03 - movups [rbx],xmm0
7FF66A979573: 0F 10 4D 10 - movups xmm1,[rbp+10]
// ---------- INJECTING HERE ----------
7FF66A979577: 0F 11 4B 10 - movups [rbx+10],xmm1
// ---------- DONE INJECTING ----------
7FF66A97957B: 0F 10 45 20 - movups xmm0,[rbp+20]
7FF66A97957F: 0F 11 43 20 - movups [rbx+20],xmm0
7FF66A979583: E8 18 1A 00 00 - call 7FF66A97AFA0
7FF66A979588: EB 76 - jmp 7FF66A979600
7FF66A97958A: 4C 8B C5 - mov r8,rbp
7FF66A97958D: 48 8D 54 24 78 - lea rdx,[rsp+78]
7FF66A979592: 48 8B CF - mov rcx,rdi
7FF66A979595: E8 E6 48 F8 FF - call 7FF66A8FDE80
7FF66A97959A: 83 7C 24 78 FF - cmp dword ptr [rsp+78],-01
7FF66A97959F: 74 5F - je 7FF66A979600
}
12314
"Inf HP"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(hpeesus,NMS.exe,41 01 9E ** ** ** ** 41 8B D5 E8 ** ** ** ** 41 8B 8E ** ** ** ** 33 D2 85 C9) // should be unique
alloc(newmem,$1000,hpeesus)
label(code)
label(return)
newmem:
code:
// add [r14+00000890],ebx
jmp return
hpeesus:
jmp newmem
nop 2
return:
registersymbol(hpeesus)
[DISABLE]
hpeesus:
db 41 01 9E 90 08 00 00
unregistersymbol(hpeesus)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF66B88A74B
7FF66B88A721: 0B C1 - or eax,ecx
7FF66B88A723: 49 8B CE - mov rcx,r14
7FF66B88A726: 89 85 C0 01 00 00 - mov [rbp+000001C0],eax
7FF66B88A72C: B8 FF FF FF FF - mov eax,FFFFFFFF
7FF66B88A731: F3 0F 58 8D C0 01 00 00 - addss xmm1,[rbp+000001C0]
7FF66B88A739: F3 0F 2C D9 - cvttss2si ebx,xmm1
7FF66B88A73D: 83 FB FF - cmp ebx,-01
7FF66B88A740: 0F 4F D8 - cmovg ebx,eax
7FF66B88A743: 48 83 7C 24 78 00 - cmp qword ptr [rsp+78],00
7FF66B88A749: 75 34 - jne 7FF66B88A77F
// ---------- INJECTING HERE ----------
7FF66B88A74B: 41 01 9E 90 08 00 00 - add [r14+00000890],ebx
// ---------- DONE INJECTING ----------
7FF66B88A752: 41 8B D5 - mov edx,r13d
7FF66B88A755: E8 06 B6 12 FF - call 7FF66A9B5D60
7FF66B88A75A: 41 8B 8E 90 08 00 00 - mov ecx,[r14+00000890]
7FF66B88A761: 33 D2 - xor edx,edx
7FF66B88A763: 85 C9 - test ecx,ecx
7FF66B88A765: 0F 4F D1 - cmovg edx,ecx
7FF66B88A768: 3B D0 - cmp edx,eax
7FF66B88A76A: 0F 4D D0 - cmovge edx,eax
7FF66B88A76D: 49 FF 86 28 08 00 00 - inc qword ptr [r14+00000828]
7FF66B88A774: 41 89 96 90 08 00 00 - mov [r14+00000890],edx
}
12300
"Inf Environmental"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(hazards,NMS.exe,40 55 56 57 48 8D 6C 24 B0 48 81 EC 50 01 00 00) // should be unique
alloc(newmem,$1000,hazards)
label(code)
label(return)
newmem:
code:
ret
jmp return
hazards:
jmp newmem
nop 4
return:
registersymbol(hazards)
[DISABLE]
hazards:
db 40 55 56 57 48 8D 6C 24 B0
unregistersymbol(hazards)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF701412220
7FF701412216: CC - int 3
7FF701412217: CC - int 3
7FF701412218: CC - int 3
7FF701412219: CC - int 3
7FF70141221A: CC - int 3
7FF70141221B: CC - int 3
7FF70141221C: CC - int 3
7FF70141221D: CC - int 3
7FF70141221E: CC - int 3
7FF70141221F: CC - int 3
// ---------- INJECTING HERE ----------
7FF701412220: 40 55 - push rbp
// ---------- DONE INJECTING ----------
7FF701412222: 56 - push rsi
7FF701412223: 57 - push rdi
7FF701412224: 48 8D 6C 24 B0 - lea rbp,[rsp-50]
7FF701412229: 48 81 EC 50 01 00 00 - sub rsp,00000150
7FF701412230: 48 8B 35 C1 01 9A 05 - mov rsi,[7FF706DB23F8]
7FF701412237: 48 8B F9 - mov rdi,rcx
7FF70141223A: 44 0F 29 9C 24 D0 00 00 00 - movaps [rsp+000000D0],xmm11
7FF701412243: 44 0F 28 D9 - movaps xmm11,xmm1
7FF701412247: 48 8D 8E 90 5A 8F 00 - lea rcx,[rsi+008F5A90]
7FF70141224E: E8 3D CB 1B FF - call 7FF7005CED90
}
12299
"Inf Jetpack"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(jetpack,NMS.exe,F3 0F 11 87 ** ** ** ** E9 ** ** ** ** 41 0F 28 C4 48 8D 0D ** ** ** ** F3 0F 58 87 ** ** ** **) // should be unique
alloc(newmem,$1000,jetpack)
label(code)
label(return)
newmem:
code:
// movss [rdi+000034D4],xmm0
jmp return
jetpack:
jmp newmem
nop 3
return:
registersymbol(jetpack)
[DISABLE]
jetpack:
db F3 0F 11 87 D4 34 00 00
unregistersymbol(jetpack)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF7013A0F7A
7FF7013A0F44: E8 F7 43 00 00 - call 7FF7013A5340
7FF7013A0F49: F3 0F 10 0D EB E6 DC 03 - movss xmm1,[7FF70516F63C]
7FF7013A0F51: F3 0F 10 15 67 1D 6B 03 - movss xmm2,[7FF704A52CC0]
7FF7013A0F59: F3 0F 5C CA - subss xmm1,xmm2
7FF7013A0F5D: F3 0F 59 C8 - mulss xmm1,xmm0
7FF7013A0F61: F3 0F 10 87 D4 34 00 00 - movss xmm0,[rdi+000034D4]
7FF7013A0F69: F3 0F 58 CA - addss xmm1,xmm2
7FF7013A0F6D: F3 41 0F 59 CC - mulss xmm1,xmm12
7FF7013A0F72: F3 0F 59 CE - mulss xmm1,xmm6
7FF7013A0F76: F3 0F 5C C1 - subss xmm0,xmm1
// ---------- INJECTING HERE ----------
7FF7013A0F7A: F3 0F 11 87 D4 34 00 00 - movss [rdi+000034D4],xmm0
// ---------- DONE INJECTING ----------
7FF7013A0F82: E9 20 FE FF FF - jmp 7FF7013A0DA7
7FF7013A0F87: 41 0F 28 C4 - movaps xmm0,xmm12
7FF7013A0F8B: 48 8D 0D 2E 14 A1 05 - lea rcx,[7FF706DB23C0]
7FF7013A0F92: F3 0F 58 87 10 35 00 00 - addss xmm0,[rdi+00003510]
7FF7013A0F9A: F3 0F 11 87 10 35 00 00 - movss [rdi+00003510],xmm0
7FF7013A0FA2: E8 79 6A E7 FE - call 7FF700217A20
7FF7013A0FA7: 0F 57 C0 - xorps xmm0,xmm0
7FF7013A0FAA: 48 C7 85 28 02 00 00 0F 00 00 00 - mov qword ptr [rbp+00000228],0000000F
7FF7013A0FB5: 45 33 FF - xor r15d,r15d
7FF7013A0FB8: 48 C7 85 30 02 00 00 0D 00 00 00 - mov qword ptr [rbp+00000230],0000000D
}
12293
"Inf Sprint"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(run,NMS.exe,F3 0F 11 8F ** ** ** ** 44 0F 2F 97 ** ** ** ** 72 ** 48 8D 0D ** ** ** ** 48 C7 87 ** ** ** ** 01 00 00 00) // should be unique
alloc(newmem,$1000,run)
label(code)
label(return)
newmem:
code:
// movss [rdi+000055C0],xmm1
jmp return
run:
jmp newmem
nop 3
return:
registersymbol(run)
[DISABLE]
run:
db F3 0F 11 8F C0 55 00 00
unregistersymbol(run)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF7013A2B3D
7FF7013A2B03: F3 0F 59 35 FD 34 DE 03 - mulss xmm6,[7FF705186008]
7FF7013A2B0B: 48 8D 0D AE F8 A0 05 - lea rcx,[7FF706DB23C0]
7FF7013A2B12: E8 09 4F E7 FE - call 7FF700217A20
7FF7013A2B17: 48 8D 88 90 4B 31 00 - lea rcx,[rax+00314B90]
7FF7013A2B1E: E8 3D 3F FE FE - call 7FF700386A60
7FF7013A2B23: F3 0F 10 8F C0 55 00 00 - movss xmm1,[rdi+000055C0]
7FF7013A2B2B: F3 0F 59 C6 - mulss xmm0,xmm6
7FF7013A2B2F: F3 41 0F 59 C4 - mulss xmm0,xmm12
7FF7013A2B34: F3 41 0F 5E C0 - divss xmm0,xmm8
7FF7013A2B39: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
7FF7013A2B3D: F3 0F 11 8F C0 55 00 00 - movss [rdi+000055C0],xmm1
// ---------- DONE INJECTING ----------
7FF7013A2B45: 44 0F 2F 97 C0 55 00 00 - comiss xmm10,[rdi+000055C0]
7FF7013A2B4D: 72 4E - jb 7FF7013A2B9D
7FF7013A2B4F: 48 8D 0D 6A F8 A0 05 - lea rcx,[7FF706DB23C0]
7FF7013A2B56: 48 C7 87 BC 55 00 00 01 00 00 00 - mov qword ptr [rdi+000055BC],00000001
7FF7013A2B61: E8 3A 4F E7 FE - call 7FF700217AA0
7FF7013A2B66: 4C 8B 87 D0 03 00 00 - mov r8,[rdi+000003D0]
7FF7013A2B6D: 48 8D 55 E0 - lea rdx,[rbp-20]
7FF7013A2B71: C6 85 3C 03 00 00 01 - mov byte ptr [rbp+0000033C],01
7FF7013A2B78: 48 8B C8 - mov rcx,rax
7FF7013A2B7B: 4C 89 BD 30 03 00 00 - mov [rbp+00000330],r15
}
12292
"No Overheat"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-20
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(heat,NMS.exe,F3 41 0F 11 8D ** ** ** ** 48 8B 03 FF 90 A8 00 00 00) // should be unique
alloc(newmem,$1000,heat)
label(code)
label(return)
newmem:
code:
// movss [r13+000EBDE8],xmm1
jmp return
heat:
jmp newmem
nop 4
return:
registersymbol(heat)
[DISABLE]
heat:
db F3 41 0F 11 8D E8 BD 0E 00
unregistersymbol(heat)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF7008C073F
7FF7008C0715: F3 0F 11 03 - movss [rbx],xmm0
7FF7008C0719: 48 8B 9D 30 01 00 00 - mov rbx,[rbp+00000130]
7FF7008C0720: 48 8B CB - mov rcx,rbx
7FF7008C0723: 48 8B 03 - mov rax,[rbx]
7FF7008C0726: FF 90 90 00 00 00 - call qword ptr [rax+00000090]
7FF7008C072C: 41 0F 28 D2 - movaps xmm2,xmm10
7FF7008C0730: 41 0F 28 CB - movaps xmm1,xmm11
7FF7008C0734: F3 0F 5F D0 - maxss xmm2,xmm0
7FF7008C0738: 48 8B CB - mov rcx,rbx
7FF7008C073B: F3 0F 5D CA - minss xmm1,xmm2
// ---------- INJECTING HERE ----------
7FF7008C073F: F3 41 0F 11 8D E8 BD 0E 00 - movss [r13+000EBDE8],xmm1
// ---------- DONE INJECTING ----------
7FF7008C0748: 48 8B 03 - mov rax,[rbx]
7FF7008C074B: FF 90 A8 00 00 00 - call qword ptr [rax+000000A8]
7FF7008C0751: 41 0F 28 D2 - movaps xmm2,xmm10
7FF7008C0755: 41 0F 28 CB - movaps xmm1,xmm11
7FF7008C0759: F3 0F 5F D0 - maxss xmm2,xmm0
7FF7008C075D: F2 41 0F 10 85 F4 8A 0D 00 - movsd xmm0,[r13+000D8AF4]
7FF7008C0766: F2 0F 11 45 00 - movsd [rbp+00],xmm0
7FF7008C076B: F2 41 0F 10 85 FC 8A 0D 00 - movsd xmm0,[r13+000D8AFC]
7FF7008C0774: F2 0F 11 45 08 - movsd [rbp+08],xmm0
7FF7008C0779: F2 41 0F 10 85 04 8B 0D 00 - movsd xmm0,[r13+000D8B04]
}
194
"No Ship Overheat (fixed?)"
FFFFFF
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-08-30
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(shipheat,NMS.exe,F3 41 0F 11 8C 86 ? ? 00 00) // should be unique
alloc(newmem,$1000,shipheat)
label(code)
label(return)
newmem:
code:
// movss [r14+rax*4+00005FA4],xmm1
jmp return
shipheat:
jmp newmem
nop 5
return:
registersymbol(shipheat)
[DISABLE]
shipheat:
db F3 41 0F 11 8C 86 ? ? 00 00
unregistersymbol(shipheat)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+166201C
NMS.exe+1661FF1: 49 8B CE - mov rcx,r14
NMS.exe+1661FF4: 49 8B 06 - mov rax,[r14]
NMS.exe+1661FF7: 48 C1 E6 06 - shl rsi,06
NMS.exe+1661FFB: FF 50 40 - call qword ptr [rax+40]
NMS.exe+1661FFE: 0F 2F C7 - comiss xmm0,xmm7
NMS.exe+1662001: 49 63 86 A4 00 00 00 - movsxd rax,dword ptr [r14+000000A4]
NMS.exe+1662008: 76 1E - jna NMS.exe+1662028
NMS.exe+166200A: 41 0F 28 C8 - movaps xmm1,xmm8
NMS.exe+166200E: F3 0F 5E C8 - divss xmm1,xmm0
NMS.exe+1662012: F3 41 0F 58 8C 86 A4 5F 00 00 - addss xmm1,[r14+rax*4+00005FA4]
// ---------- INJECTING HERE ----------
NMS.exe+166201C: F3 41 0F 11 8C 86 A4 5F 00 00 - movss [r14+rax*4+00005FA4],xmm1
// ---------- DONE INJECTING ----------
NMS.exe+1662026: EB 0C - jmp NMS.exe+1662034
NMS.exe+1662028: 41 C7 84 86 A4 5F 00 00 00 00 80 3F - mov [r14+rax*4+00005FA4],3F800000
NMS.exe+1662034: 49 63 86 A4 00 00 00 - movsxd rax,dword ptr [r14+000000A4]
NMS.exe+166203B: F3 41 0F 10 84 86 A4 5F 00 00 - movss xmm0,[r14+rax*4+00005FA4]
NMS.exe+1662045: 0F 2F 05 B8 78 20 03 - comiss xmm0,[NMS.exe+4869904]
NMS.exe+166204C: 72 44 - jb NMS.exe+1662092
NMS.exe+166204E: 42 80 BC 30 DC 5F 00 00 00 - cmp byte ptr [rax+r14+00005FDC],00
NMS.exe+1662057: 75 10 - jne NMS.exe+1662069
NMS.exe+1662059: 42 C6 84 30 DC 5F 00 00 01 - mov byte ptr [rax+r14+00005FDC],01
NMS.exe+1662062: 49 8D BE EC 5F 00 00 - lea rdi,[r14+00005FEC]
}
12290
"Insta Interact"
Auto Assembler Script
[ENABLE]
aobscanmodule(interact,NMS.exe,F3 44 0F 58 27 F3 44 0F 11 27 48 8B 0D ** ** ** **) // should be unique
alloc(newmem,$1000,interact)
label(code)
label(return)
newmem:
code:
mov [rdi],(float)1.0
jmp return
interact:
jmp newmem
nop 5
return:
registersymbol(interact)
[DISABLE]
interact:
db F3 44 0F 58 27 F3 44 0F 11 27
unregistersymbol(interact)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF7014191C8
7FF70141918D: E8 7E C5 B1 FF - call 7FF700F35710
7FF701419192: 48 8D 8E 90 04 00 00 - lea rcx,[rsi+00000490]
7FF701419199: 44 88 BE D1 1B 00 00 - mov [rsi+00001BD1],r15b
7FF7014191A0: E8 6B 02 01 00 - call 7FF701429410
7FF7014191A5: 48 C7 86 68 0A 00 00 03 00 00 00 - mov qword ptr [rsi+00000A68],00000003
7FF7014191B0: 48 8B CE - mov rcx,rsi
7FF7014191B3: 44 88 A6 01 0B 00 00 - mov [rsi+00000B01],r12b
7FF7014191BA: E8 11 6D 00 00 - call 7FF70141FED0
7FF7014191BF: 48 8D BE 6C 0A 00 00 - lea rdi,[rsi+00000A6C]
7FF7014191C6: EB 0A - jmp 7FF7014191D2
// ---------- INJECTING HERE ----------
7FF7014191C8: F3 44 0F 58 27 - addss xmm12,[rdi]
// ---------- DONE INJECTING ----------
7FF7014191CD: F3 44 0F 11 27 - movss [rdi],xmm12
7FF7014191D2: 48 8B 0D 1F 92 99 05 - mov rcx,[7FF706DB23F8]
7FF7014191D9: 48 8D 54 24 60 - lea rdx,[rsp+60]
7FF7014191DE: 4C 8B 8E C8 1B 00 00 - mov r9,[rsi+00001BC8]
7FF7014191E5: 48 81 C1 50 5A 92 00 - add rcx,00925A50
7FF7014191EC: F3 0F 10 17 - movss xmm2,[rdi]
7FF7014191F0: 44 88 BD 0C 03 00 00 - mov [rbp+0000030C],r15b
7FF7014191F7: 4C 89 A5 00 03 00 00 - mov [rbp+00000300],r12
7FF7014191FE: C7 85 08 03 00 00 25 B8 E7 1E - mov [rbp+00000308],1EE7B825
7FF701419208: 0F 28 85 00 03 00 00 - movaps xmm0,[rbp+00000300]
}
213
"Insta Analyze"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-08-30
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(scan,NMS.exe,F3 0F 11 49 24 48 85) // should be unique
alloc(newmem,$1000,scan)
label(code)
label(return)
label(value)
newmem:
code:
movss xmm1,[value]
movss [rcx+24],xmm1
jmp return
value:
dq (float)1.0
scan:
jmp newmem
return:
registersymbol(scan)
[DISABLE]
scan:
db F3 0F 11 49 24
unregistersymbol(scan)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+11AA430
NMS.exe+11AA41A: CC - int 3
NMS.exe+11AA41B: CC - int 3
NMS.exe+11AA41C: CC - int 3
NMS.exe+11AA41D: CC - int 3
NMS.exe+11AA41E: CC - int 3
NMS.exe+11AA41F: CC - int 3
NMS.exe+11AA420: 40 53 - push rbx
NMS.exe+11AA422: 48 83 EC 20 - sub rsp,20
NMS.exe+11AA426: 48 8B 91 00 08 00 00 - mov rdx,[rcx+00000800]
NMS.exe+11AA42D: 48 8B D9 - mov rbx,rcx
// ---------- INJECTING HERE ----------
NMS.exe+11AA430: F3 0F 11 49 24 - movss [rcx+24],xmm1
// ---------- DONE INJECTING ----------
NMS.exe+11AA435: 48 85 D2 - test rdx,rdx
NMS.exe+11AA438: 74 08 - je NMS.exe+11AA442
NMS.exe+11AA43A: 0F 28 D1 - movaps xmm2,xmm1
NMS.exe+11AA43D: E8 2E 00 00 00 - call NMS.exe+11AA470
NMS.exe+11AA442: 48 8B 93 08 08 00 00 - mov rdx,[rbx+00000808]
NMS.exe+11AA449: 48 85 D2 - test rdx,rdx
NMS.exe+11AA44C: 74 0F - je NMS.exe+11AA45D
NMS.exe+11AA44E: F3 0F 10 53 24 - movss xmm2,[rbx+24]
NMS.exe+11AA453: 48 83 C4 20 - add rsp,20
NMS.exe+11AA457: 5B - pop rbx
}
216
"force insta scan"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-08-30
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(scan1,NMS.exe,DB 0F 84 48 02 00 00 48) // should be unique
alloc(newmem,$1000,scan1)
label(code)
label(return)
newmem:
code:
// je NMS.exe+11AEADB
jmp return
scan1+01:
jmp newmem
nop
return:
registersymbol(scan1)
[DISABLE]
scan1+01:
db 0F 84 48 02 00 00
unregistersymbol(scan1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+11AE88D
NMS.exe+11AE86E: 0F B6 BD C8 04 00 00 - movzx edi,byte ptr [rbp+000004C8]
NMS.exe+11AE875: 84 C0 - test al,al
NMS.exe+11AE877: 75 09 - jne NMS.exe+11AE882
NMS.exe+11AE879: 40 84 FF - test dil,dil
NMS.exe+11AE87C: 75 04 - jne NMS.exe+11AE882
NMS.exe+11AE87E: B0 01 - mov al,01
NMS.exe+11AE880: EB 02 - jmp NMS.exe+11AE884
NMS.exe+11AE882: 32 C0 - xor al,al
NMS.exe+11AE884: 41 88 86 BC 02 00 00 - mov [r14+000002BC],al
NMS.exe+11AE88B: 84 DB - test bl,bl
// ---------- INJECTING HERE ----------
NMS.exe+11AE88D: 0F 84 48 02 00 00 - je NMS.exe+11AEADB
// ---------- DONE INJECTING ----------
NMS.exe+11AE893: 48 8B 0D 3E 65 99 05 - mov rcx,[NMS.exe+6B44DD8]
NMS.exe+11AE89A: 48 8D 95 40 03 00 00 - lea rdx,[rbp+00000340]
NMS.exe+11AE8A1: 48 81 C1 08 40 2F 00 - add rcx,002F4008
NMS.exe+11AE8A8: E8 B3 60 34 FF - call NMS.exe+4F4960
NMS.exe+11AE8AD: 32 DB - xor bl,bl
NMS.exe+11AE8AF: 44 8B F8 - mov r15d,eax
NMS.exe+11AE8B2: 88 9D A8 04 00 00 - mov [rbp+000004A8],bl
NMS.exe+11AE8B8: 85 C0 - test eax,eax
NMS.exe+11AE8BA: 7E 2F - jle NMS.exe+11AE8EB
NMS.exe+11AE8BC: 48 8B 0D 15 65 99 05 - mov rcx,[NMS.exe+6B44DD8]
}
218
"Inf Scan"
FFFFFF
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-08-30
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(scanner,NMS.exe,44 89 6E 10 44 89 6E 40) // should be unique
alloc(newmem,$1000,scanner)
label(code)
label(return)
newmem:
code:
// mov [rsi+10],r13d
mov [rsi+40],r13d
jmp return
scanner:
jmp newmem
nop 3
return:
registersymbol(scanner)
[DISABLE]
scanner:
db 44 89 6E 38 44 89 6E 10
unregistersymbol(scanner)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+11F338D
// NEW INJECTION POINT: NMS.exe+12F64D4
NMS.exe+11F3354: 44 38 2D 4D 55 D8 03 - cmp [NMS.exe+4F788A8],r13b
NMS.exe+11F335B: 0F 84 47 FC FF FF - je NMS.exe+11F2FA8
NMS.exe+11F3361: 44 38 AE B0 00 00 00 - cmp [rsi+000000B0],r13b
NMS.exe+11F3368: 0F 85 3A FC FF FF - jne NMS.exe+11F2FA8
NMS.exe+11F336E: F3 0F 10 05 EE 01 AD 05 - movss xmm0,[NMS.exe+6CC3564]
NMS.exe+11F3376: 48 8D 55 40 - lea rdx,[rbp+40]
NMS.exe+11F337A: 4C 8B 06 - mov r8,[rsi]
NMS.exe+11F337D: F3 0F 11 46 18 - movss [rsi+18],xmm0
NMS.exe+11F3382: C6 86 B0 00 00 00 01 - mov byte ptr [rsi+000000B0],01
NMS.exe+11F3389: 44 89 6E 34 - mov [rsi+34],r13d
// ---------- INJECTING HERE ----------
NMS.exe+11F338D: 44 89 6E 10 - mov [rsi+38],r13d
// ---------- DONE INJECTING ----------
NMS.exe+11F3391: 44 89 6E 40 - mov [rsi+10],r13d
NMS.exe+11F3395: 41 0F 10 07 - movups xmm0,[r15]
NMS.exe+11F3399: 0F 11 46 50 - movups [rsi+50],xmm0
NMS.exe+11F339D: C6 45 9C 01 - mov byte ptr [rbp-64],01
NMS.exe+11F33A1: 41 0F 10 4F 10 - movups xmm1,[r15+10]
NMS.exe+11F33A6: 0F 11 4E 60 - movups [rsi+60],xmm1
NMS.exe+11F33AA: 4C 89 6D 90 - mov [rbp-70],r13
NMS.exe+11F33AE: 41 0F 10 47 20 - movups xmm0,[r15+20]
NMS.exe+11F33B3: 0F 11 46 70 - movups [rsi+70],xmm0
NMS.exe+11F33B7: C7 45 98 B2 EE 22 80 - mov [rbp-68],8022EEB2
}
2081
"Inf Boltcaster"
FFFFFF
Auto Assembler Script
[ENABLE]
alloc(BOLTCASTERAMMOMEM,7)
registersymbol(BOLTCASTERAMMOMEM)
aobscanmodule(BOLTCASTERAMMO,NMS.exe,41 2B C6 45 8B C6)
alloc(newmem,$100,BOLTCASTERAMMO)
label(code)
label(return)
BOLTCASTERAMMOMEM:
readmem(BOLTCASTERAMMO,6)
newmem:
code:
mov eax,40
mov r8d,r14d
jmp return
BOLTCASTERAMMO:
jmp newmem
nop
return:
registersymbol(BOLTCASTERAMMO)
[DISABLE]
BOLTCASTERAMMO:
readmem(BOLTCASTERAMMOMEM,6)
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+12CEAB5
NMS.exe+12CEA89: 48 8D 55 A0 - lea rdx,[rbp-60]
NMS.exe+12CEA8D: F3 44 0F 2C F0 - cvttss2si r14d,xmm0
NMS.exe+12CEA92: 4C 89 64 24 20 - mov [rsp+20],r12
NMS.exe+12CEA97: 66 0F 6F 05 61 86 50 03 - movdqa xmm0,[NMS.exe+47D7100]
NMS.exe+12CEA9F: 44 3B F3 - cmp r14d,ebx
NMS.exe+12CEAA2: F3 0F 7F 45 A0 - movdqu [rbp-60],xmm0
NMS.exe+12CEAA7: 44 0F 4C F3 - cmovl r14d,ebx
NMS.exe+12CEAAB: 41 3B C6 - cmp eax,r14d
NMS.exe+12CEAAE: 44 0F 4C F0 - cmovl r14d,eax
NMS.exe+12CEAB2: 45 33 C9 - xor r9d,r9d
// ---------- INJECTING HERE ----------
NMS.exe+12CEAB5: 41 2B C6 - sub eax,r14d
// ---------- DONE INJECTING ----------
NMS.exe+12CEAB8: 45 8B C6 - mov r8d,r14d
NMS.exe+12CEABB: 41 89 84 B7 F0 23 00 00 - mov [r15+rsi*4+000023F0],eax
NMS.exe+12CEAC3: 48 8B 0D 3E BC 74 05 - mov rcx,[NMS.exe+6A1A708]
NMS.exe+12CEACA: 48 81 C1 E0 44 2F 00 - add rcx,002F44E0
NMS.exe+12CEAD1: E8 6A 4C 30 FF - call NMS.exe+5D3740
NMS.exe+12CEAD6: 44 0F 28 5D D0 - movaps xmm11,[rbp-30]
NMS.exe+12CEADB: 44 8B A5 40 0C 00 00 - mov r12d,[rbp+00000C40]
NMS.exe+12CEAE2: 41 83 BC B7 F0 23 00 00 00 - cmp dword ptr [r15+rsi*4+000023F0],00
NMS.exe+12CEAEB: 0F 8F 54 09 00 00 - jg NMS.exe+12CF445
NMS.exe+12CEAF1: 48 8B 05 10 BC 74 05 - mov rax,[NMS.exe+6A1A708]
}
12155
"Scripts (Manual Activate)"
1
12128
"Free Crafting"
FFFFFF
Auto Assembler Script
[ENABLE]
aobscanmodule(AOBAlwaysHaveResource,NMS.exe,C3 CC CC 44 89 4C 24 20 4C) // should be unique
alloc(newmem,0x400,AOBAlwaysHaveResource)
label(code)
label(return)
newmem:
code:
ret
jmp return
return:
registersymbol(AOBAlwaysHaveResource)
AOBAlwaysHaveResource:
jmp return
[DISABLE]
AOBAlwaysHaveResource:
db C3 CC CC 44 89 4C 24 20
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+564440
NMS.exe+564440 - 44 89 4C 24 20 - mov [rsp+20],r9d
NMS.exe+564445 - 4C 89 44 24 18 - mov [rsp+18],r8
NMS.exe+56444A - 89 54 24 10 - mov [rsp+10],edx
NMS.exe+56444E - 48 89 4C 24 08 - mov [rsp+08],rcx
NMS.exe+564453 - 55 - push rbp
NMS.exe+564454 - 53 - push rbx
NMS.exe+564455 - 56 - push rsi
NMS.exe+564456 - 57 - push rdi
NMS.exe+564457 - 41 54 - push r12
NMS.exe+564459 - 41 56 - push r14
NMS.exe+56445B - 41 57 - push r15
NMS.exe+56445D - 48 8D 6C 24 F0 - lea rbp,[rsp-10]
NMS.exe+564462 - 48 81 EC 10010000 - sub rsp,00000110
NMS.exe+564469 - 48 8B 75 78 - mov rsi,[rbp+78]
NMS.exe+56446D - 45 33 E4 - xor r12d,r12d
NMS.exe+564470 - 45 8B F1 - mov r14d,r9d
NMS.exe+564473 - 49 8B D8 - mov rbx,r8
NMS.exe+564476 - 44 8B FA - mov r15d,edx
NMS.exe+564479 - 48 8B F9 - mov rdi,rcx
NMS.exe+56447C - 48 85 F6 - test rsi,rsi
NMS.exe+56447F - 74 0A - je NMS.exe+56448B
NMS.exe+564481 - 44 39 66 04 - cmp [rsi+04],r12d
NMS.exe+564485 - 76 04 - jna NMS.exe+56448B
NMS.exe+564487 - 44 89 66 04 - mov [rsi+04],r12d
NMS.exe+56448B - 45 38 A0 F5020000 - cmp [r8+000002F5],r12b
NMS.exe+564492 - 74 3B - je NMS.exe+5644CF
NMS.exe+564494 - 48 8B 89 507E0100 - mov rcx,[rcx+00017E50]
NMS.exe+56449B - 8B 97 4C7E0100 - mov edx,[rdi+00017E4C]
NMS.exe+5644A1 - 48 C1 E2 04 - shl rdx,04
NMS.exe+5644A5 - 48 03 D1 - add rdx,rcx
NMS.exe+5644A8 - 48 3B CA - cmp rcx,rdx
NMS.exe+5644AB - 74 22 - je NMS.exe+5644CF
NMS.exe+5644AD - 4D 8B 80 58010000 - mov r8,[r8+00000158]
NMS.exe+5644B4 - 4C 3B 41 08 - cmp r8,[rcx+08]
NMS.exe+5644B8 - 75 0C - jne NMS.exe+5644C6
NMS.exe+5644BA - 48 8B 01 - mov rax,[rcx]
NMS.exe+5644BD - 48 39 83 50010000 - cmp [rbx+00000150],rax
NMS.exe+5644C4 - 74 1D - je NMS.exe+5644E3
NMS.exe+5644C6 - 48 83 C1 10 - add rcx,10
NMS.exe+5644CA - 48 3B CA - cmp rcx,rdx
NMS.exe+5644CD - 75 E5 - jne NMS.exe+5644B4
NMS.exe+5644CF - 32 C0 - xor al,al
NMS.exe+5644D1 - 48 81 C4 10010000 - add rsp,00000110
NMS.exe+5644D8 - 41 5F - pop r15
NMS.exe+5644DA - 41 5E - pop r14
NMS.exe+5644DC - 41 5C - pop r12
NMS.exe+5644DE - 5F - pop rdi
NMS.exe+5644DF - 5E - pop rsi
NMS.exe+5644E0 - 5B - pop rbx
NMS.exe+5644E1 - 5D - pop rbp
NMS.exe+5644E2 - C3 - ret
NMS.exe+5644E3 - 48 8D 87 00050000 - lea rax,[rdi+00000500]
NMS.exe+5644EA - 4C 89 AC 24 08010000 - mov [rsp+00000108],r13
NMS.exe+5644F2 - 48 8B C8 - mov rcx,rax
NMS.exe+5644F5 - 48 89 45 A8 - mov [rbp-58],rax
NMS.exe+5644F9 - 41 B8 FFFFFFFF - mov r8d,FFFFFFFF
NMS.exe+5644FF - 41 8B D7 - mov edx,r15d
NMS.exe+564502 - E8 99E9EFFF - call NMS.exe+462EA0
NMS.exe+564507 - 41 B1 01 - mov r9b,01
NMS.exe+56450A - 48 89 45 B8 - mov [rbp-48],rax
NMS.exe+56450E - 4C 8D 44 24 68 - lea r8,[rsp+68]
NMS.exe+564513 - 4C 89 64 24 68 - mov [rsp+68],r12
NMS.exe+564518 - 41 8B D7 - mov edx,r15d
NMS.exe+56451B - 4C 89 64 24 70 - mov [rsp+70],r12
NMS.exe+564520 - E8 3B1E0000 - call NMS.exe+566360
NMS.exe+564525 - 48 8B 0D 5CFF4B06 - mov rcx,[NMS.exe+6A24488]
NMS.exe+56452C - 44 38 A1 1ABB2F00 - cmp [rcx+002FBB1A],r12b
NMS.exe+564533 - 0F85 14030000 - jne NMS.exe+56484D
NMS.exe+564539 - 48 8B 9B 60010000 - mov rbx,[rbx+00000160]
NMS.exe+564540 - 41 B5 01 - mov r13b,01
NMS.exe+564543 - 48 8B 45 60 - mov rax,[rbp+60]
NMS.exe+564547 - 48 89 5C 24 60 - mov [rsp+60],rbx
NMS.exe+56454C - 48 63 80 68010000 - movsxd rax,dword ptr [rax+00000168]
NMS.exe+564553 - 48 8D 0C 40 - lea rcx,[rax+rax*2]
NMS.exe+564557 - 48 8D 3C CB - lea rdi,[rbx+rcx*8]
NMS.exe+56455B - 48 89 7D B0 - mov [rbp-50],rdi
NMS.exe+56455F - 48 3B DF - cmp rbx,rdi
NMS.exe+564562 - 0F84 83030000 - je NMS.exe+5648EB
NMS.exe+564568 - 48 8B 15 49471704 - mov rdx,[NMS.exe+46D8CB8]
NMS.exe+56456F - 48 8B 0D 3A471704 - mov rcx,[NMS.exe+46D8CB0]
NMS.exe+564576 - 48 39 53 08 - cmp [rbx+08],rdx
NMS.exe+56457A - 75 09 - jne NMS.exe+564585
NMS.exe+56457C - 48 39 0B - cmp [rbx],rcx
NMS.exe+56457F - 0F84 06010000 - je NMS.exe+56468B
NMS.exe+564585 - 48 8D 4C 24 78 - lea rcx,[rsp+78]
NMS.exe+56458A - 48 C7 45 88 FFFFFFFF - mov qword ptr [rbp-78],FFFFFFFFFFFFFFFF
NMS.exe+564592 - 44 89 65 9C - mov [rbp-64],r12d
NMS.exe+564596 - E8 D5312402 - call NMS.exe+27A7770
NMS.exe+56459B - 8B 43 14 - mov eax,[rbx+14]
NMS.exe+56459E - 45 8B FC - mov r15d,r12d
NMS.exe+5645A1 - 4C 8B 74 24 70 - mov r14,[rsp+70]
NMS.exe+5645A6 - 0F10 03 - movups xmm0,[rbx]
NMS.exe+5645A9 - 89 45 9C - mov [rbp-64],eax
NMS.exe+5645AC - 8B 44 24 6C - mov eax,[rsp+6C]
NMS.exe+5645B0 - 0F11 44 24 78 - movups [rsp+78],xmm0
NMS.exe+5645B5 - 4D 8D 24 86 - lea r12,[r14+rax*4]
NMS.exe+5645B9 - 4D 3B F4 - cmp r14,r12
NMS.exe+5645BC - 0F84 8F000000 - je NMS.exe+564651
NMS.exe+5645C2 - 48 8B 7D A8 - mov rdi,[rbp-58]
NMS.exe+5645C6 - 33 DB - xor ebx,ebx
NMS.exe+5645C8 - 0F1F 84 00 00000000 - nop dword ptr [rax+rax+00000000]
NMS.exe+5645D0 - 41 8B 16 - mov edx,[r14]
NMS.exe+5645D3 - 41 B8 FFFFFFFF - mov r8d,FFFFFFFF
NMS.exe+5645D9 - 48 8B CF - mov rcx,rdi
NMS.exe+5645DC - 8B F3 - mov esi,ebx
NMS.exe+5645DE - E8 BDE8EFFF - call NMS.exe+462EA0
NMS.exe+5645E3 - 48 8B 88 90000000 - mov rcx,[rax+00000090]
NMS.exe+5645EA - 8B 80 8C000000 - mov eax,[rax+0000008C]
NMS.exe+5645F0 - 48 8D 14 40 - lea rdx,[rax+rax*2]
NMS.exe+5645F4 - 48 C1 E2 04 - shl rdx,04
NMS.exe+5645F8 - 48 03 D1 - add rdx,rcx
NMS.exe+5645FB - 48 3B CA - cmp rcx,rdx
NMS.exe+5645FE - 74 38 - je NMS.exe+564638
NMS.exe+564600 - 44 8B 55 9C - mov r10d,[rbp-64]
NMS.exe+564604 - 4C 8B 45 80 - mov r8,[rbp-80]
NMS.exe+564608 - 4C 8B 4C 24 78 - mov r9,[rsp+78]
NMS.exe+56460D - 0F1F 00 - nop dword ptr [rax]
NMS.exe+564610 - 8B 41 24 - mov eax,[rcx+24]
NMS.exe+564613 - 41 3B C2 - cmp eax,r10d
NMS.exe+564616 - 75 17 - jne NMS.exe+56462F
NMS.exe+564618 - 4C 39 41 08 - cmp [rcx+08],r8
NMS.exe+56461C - 75 11 - jne NMS.exe+56462F
NMS.exe+56461E - 4C 39 09 - cmp [rcx],r9
NMS.exe+564621 - 75 0C - jne NMS.exe+56462F
NMS.exe+564623 - 83 F8 01 - cmp eax,01
NMS.exe+564626 - 75 04 - jne NMS.exe+56462C
NMS.exe+564628 - FF C6 - inc esi
NMS.exe+56462A - EB 03 - jmp NMS.exe+56462F
}
2240
"Crafting consumes nothing from inventory"
FFFFFF
Auto Assembler Script
[ENABLE]
aobscanmodule(AOBCrafting,NMS.exe,44 29 63 18 45 2B FC) // should be unique
alloc(newmem,0x400,AOBCrafting)
label(code)
label(return)
newmem:
code:
// sub [rbx+18],r12d
sub r15d,r12d
jmp return
AOBCrafting:
jmp newmem
nop 2
return:
registersymbol(AOBCrafting)
[DISABLE]
AOBCrafting:
db 44 29 63 18 45 2B FC
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+555440
NMS.exe+5553A2 - 8B 55 CB - mov edx,[rbp-35]
NMS.exe+5553A5 - 8B 4D C7 - mov ecx,[rbp-39]
NMS.exe+5553A8 - 48 89 75 CF - mov [rbp-31],rsi
NMS.exe+5553AC - 48 83 C3 30 - add rbx,30
NMS.exe+5553B0 - 49 3B DC - cmp rbx,r12
NMS.exe+5553B3 - 0F85 19FFFFFF - jne NMS.exe+5552D2
NMS.exe+5553B9 - 44 8B 7D 7F - mov r15d,[rbp+7F]
NMS.exe+5553BD - 44 0FB6 4D 7F - movzx r9d,byte ptr [rbp+7F]
NMS.exe+5553C2 - 48 8B CE - mov rcx,rsi
NMS.exe+5553C5 - 44 8B C2 - mov r8d,edx
NMS.exe+5553C8 - 4A 8D 14 C6 - lea rdx,[rsi+r8*8]
NMS.exe+5553CC - E8 FFDB0200 - call NMS.exe+582FD0
NMS.exe+5553D1 - 48 8B 75 CF - mov rsi,[rbp-31]
NMS.exe+5553D5 - 8B 4D CB - mov ecx,[rbp-35]
NMS.exe+5553D8 - 48 8D 04 CE - lea rax,[rsi+rcx*8]
NMS.exe+5553DC - 48 89 45 BF - mov [rbp-41],rax
NMS.exe+5553E0 - 48 3B F0 - cmp rsi,rax
NMS.exe+5553E3 - 74 73 - je NMS.exe+555458
NMS.exe+5553E5 - 66 66 66 0F1F 84 00 00000000 - nop word ptr [rax+rax+00000000]
NMS.exe+5553F0 - 4C 8B 36 - mov r14,[rsi]
NMS.exe+5553F3 - 45 8B E7 - mov r12d,r15d
NMS.exe+5553F6 - 49 8B 9D 90000000 - mov rbx,[r13+00000090]
NMS.exe+5553FD - 41 8B 85 8C000000 - mov eax,[r13+0000008C]
NMS.exe+555404 - 45 39 7E 18 - cmp [r14+18],r15d
NMS.exe+555408 - 45 0F4C 66 18 - cmovl r12d,[r14+18]
NMS.exe+55540D - 48 8D 3C 40 - lea rdi,[rax+rax*2]
NMS.exe+555411 - 48 C1 E7 04 - shl rdi,04
NMS.exe+555415 - 48 03 FB - add rdi,rbx
NMS.exe+555418 - 48 3B DF - cmp rbx,rdi
NMS.exe+55541B - 74 21 - je NMS.exe+55543E
NMS.exe+55541D - 0F1F 00 - nop dword ptr [rax]
NMS.exe+555420 - 48 8D 53 10 - lea rdx,[rbx+10]
NMS.exe+555424 - 49 8D 4E 10 - lea rcx,[r14+10]
NMS.exe+555428 - E8 83963201 - call NMS.exe+187EAB0
NMS.exe+55542D - 84 C0 - test al,al
NMS.exe+55542F - 0F85 94000000 - jne NMS.exe+5554C9
NMS.exe+555435 - 48 83 C3 30 - add rbx,30
NMS.exe+555439 - 48 3B DF - cmp rbx,rdi
NMS.exe+55543C - 75 E2 - jne NMS.exe+555420
NMS.exe+55543E - 33 DB - xor ebx,ebx
// ---------- INJECTING HERE ----------
NMS.exe+555440: 44 29 63 18 - sub [rbx+18],r12d
// ---------- DONE INJECTING ----------
NMS.exe+555444 - 45 2B FC - sub r15d,r12d
NMS.exe+555447 - 48 83 C6 08 - add rsi,08
NMS.exe+55544B - 48 3B 75 BF - cmp rsi,[rbp-41]
NMS.exe+55544F - 75 9F - jne NMS.exe+5553F0
NMS.exe+555451 - 48 8B 75 CF - mov rsi,[rbp-31]
NMS.exe+555455 - 8B 4D CB - mov ecx,[rbp-35]
NMS.exe+555458 - 4C 8B A4 24 D8000000 - mov r12,[rsp+000000D8]
NMS.exe+555460 - 85 C9 - test ecx,ecx
NMS.exe+555462 - B8 00000000 - mov eax,00000000
NMS.exe+555467 - 0F45 C8 - cmovne ecx,eax
NMS.exe+55546A - 89 4D CB - mov [rbp-35],ecx
NMS.exe+55546D - 48 85 F6 - test rsi,rsi
NMS.exe+555470 - 74 12 - je NMS.exe+555484
NMS.exe+555472 - 41 B8 FFFFFFFF - mov r8d,FFFFFFFF
NMS.exe+555478 - 48 8D 4D C7 - lea rcx,[rbp-39]
NMS.exe+55547C - 48 8B D6 - mov rdx,rsi
NMS.exe+55547F - E8 7C053D02 - call NMS.exe+2925A00
NMS.exe+555484 - 48 8B 75 5F - mov rsi,[rbp+5F]
NMS.exe+555488 - 49 8B CD - mov rcx,r13
NMS.exe+55548B - E8 00120400 - call NMS.exe+596690
NMS.exe+555490 - 48 8B 55 67 - mov rdx,[rbp+67]
NMS.exe+555494 - 48 8D 8E 00050000 - lea rcx,[rsi+00000500]
NMS.exe+55549B - E8 20A2FCFF - call NMS.exe+51F6C0
NMS.exe+5554A0 - 48 FF 86 28040000 - inc qword ptr [rsi+00000428]
NMS.exe+5554A7 - 4C 8B AC 24 D0000000 - mov r13,[rsp+000000D0]
NMS.exe+5554AF - 48 8B 9C 24 20010000 - mov rbx,[rsp+00000120]
NMS.exe+5554B7 - 41 8B C7 - mov eax,r15d
NMS.exe+5554BA - 48 81 C4 E0000000 - add rsp,000000E0
NMS.exe+5554C1 - 41 5F - pop r15
NMS.exe+5554C3 - 41 5E - pop r14
NMS.exe+5554C5 - 5F - pop rdi
NMS.exe+5554C6 - 5E - pop rsi
NMS.exe+5554C7 - 5D - pop rbp
NMS.exe+5554C8 - C3 - ret
NMS.exe+5554C9 - 49 8D 8D 98000000 - lea rcx,[r13+00000098]
NMS.exe+5554D0 - 81 79 04 00010000 - cmp [rcx+04],00000100
NMS.exe+5554D7 - 0F83 63FFFFFF - jae NMS.exe+555440
NMS.exe+5554DD - 48 8B D3 - mov rdx,rbx
NMS.exe+5554E0 - E8 9B57F4FF - call NMS.exe+49AC80
NMS.exe+5554E5 - E9 56FFFFFF - jmp NMS.exe+555440
}
12156
"Always have resources for Crafting"
FFFFFF
Auto Assembler Script
[ENABLE]
//Prev C3 CC CC 44 89 4C 24 20 4C
aobscanmodule(AOBAlwaysHaveResource,NMS.exe,C3 CC CC 4C 89 44 24 18 89) // should be unique
alloc(newmem,0x400,AOBAlwaysHaveResource)
label(code)
label(return)
newmem:
code:
ret
jmp return
AOBAlwaysHaveResource+03:
jmp newmem
return:
registersymbol(AOBAlwaysHaveResource)
[DISABLE]
AOBAlwaysHaveResource+03:
db 4C 89 44 24 18 //44 89 4C 24 20
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+564440
NMS.exe+564440 - 44 89 4C 24 20 - mov [rsp+20],r9d
NMS.exe+564445 - 4C 89 44 24 18 - mov [rsp+18],r8
NMS.exe+56444A - 89 54 24 10 - mov [rsp+10],edx
NMS.exe+56444E - 48 89 4C 24 08 - mov [rsp+08],rcx
NMS.exe+564453 - 55 - push rbp
NMS.exe+564454 - 53 - push rbx
NMS.exe+564455 - 56 - push rsi
NMS.exe+564456 - 57 - push rdi
NMS.exe+564457 - 41 54 - push r12
NMS.exe+564459 - 41 56 - push r14
NMS.exe+56445B - 41 57 - push r15
NMS.exe+56445D - 48 8D 6C 24 F0 - lea rbp,[rsp-10]
NMS.exe+564462 - 48 81 EC 10010000 - sub rsp,00000110
NMS.exe+564469 - 48 8B 75 78 - mov rsi,[rbp+78]
NMS.exe+56446D - 45 33 E4 - xor r12d,r12d
NMS.exe+564470 - 45 8B F1 - mov r14d,r9d
NMS.exe+564473 - 49 8B D8 - mov rbx,r8
45 33 ? 45 8B ? 49 8B ? - ida pro narrowed down(Cosmos)
NMS.exe+564476 - 44 8B FA - mov r15d,edx
NMS.exe+564479 - 48 8B F9 - mov rdi,rcx
NMS.exe+56447C - 48 85 F6 - test rsi,rsi
NMS.exe+56447F - 74 0A - je NMS.exe+56448B
NMS.exe+564481 - 44 39 66 04 - cmp [rsi+04],r12d
NMS.exe+564485 - 76 04 - jna NMS.exe+56448B
NMS.exe+564487 - 44 89 66 04 - mov [rsi+04],r12d
NMS.exe+56448B - 45 38 A0 F5020000 - cmp [r8+000002F5],r12b
NMS.exe+564492 - 74 3B - je NMS.exe+5644CF
NMS.exe+564494 - 48 8B 89 507E0100 - mov rcx,[rcx+00017E50]
NMS.exe+56449B - 8B 97 4C7E0100 - mov edx,[rdi+00017E4C]
NMS.exe+5644A1 - 48 C1 E2 04 - shl rdx,04
NMS.exe+5644A5 - 48 03 D1 - add rdx,rcx
NMS.exe+5644A8 - 48 3B CA - cmp rcx,rdx
NMS.exe+5644AB - 74 22 - je NMS.exe+5644CF
NMS.exe+5644AD - 4D 8B 80 58010000 - mov r8,[r8+00000158]
NMS.exe+5644B4 - 4C 3B 41 08 - cmp r8,[rcx+08]
NMS.exe+5644B8 - 75 0C - jne NMS.exe+5644C6
NMS.exe+5644BA - 48 8B 01 - mov rax,[rcx]
NMS.exe+5644BD - 48 39 83 50010000 - cmp [rbx+00000150],rax
NMS.exe+5644C4 - 74 1D - je NMS.exe+5644E3
NMS.exe+5644C6 - 48 83 C1 10 - add rcx,10
NMS.exe+5644CA - 48 3B CA - cmp rcx,rdx
NMS.exe+5644CD - 75 E5 - jne NMS.exe+5644B4
NMS.exe+5644CF - 32 C0 - xor al,al
NMS.exe+5644D1 - 48 81 C4 10010000 - add rsp,00000110
NMS.exe+5644D8 - 41 5F - pop r15
NMS.exe+5644DA - 41 5E - pop r14
NMS.exe+5644DC - 41 5C - pop r12
NMS.exe+5644DE - 5F - pop rdi
NMS.exe+5644DF - 5E - pop rsi
NMS.exe+5644E0 - 5B - pop rbx
NMS.exe+5644E1 - 5D - pop rbp
NMS.exe+5644E2 - C3 - ret
NMS.exe+5644E3 - 48 8D 87 00050000 - lea rax,[rdi+00000500]
NMS.exe+5644EA - 4C 89 AC 24 08010000 - mov [rsp+00000108],r13
NMS.exe+5644F2 - 48 8B C8 - mov rcx,rax
NMS.exe+5644F5 - 48 89 45 A8 - mov [rbp-58],rax
NMS.exe+5644F9 - 41 B8 FFFFFFFF - mov r8d,FFFFFFFF
NMS.exe+5644FF - 41 8B D7 - mov edx,r15d
NMS.exe+564502 - E8 99E9EFFF - call NMS.exe+462EA0
NMS.exe+564507 - 41 B1 01 - mov r9b,01
NMS.exe+56450A - 48 89 45 B8 - mov [rbp-48],rax
NMS.exe+56450E - 4C 8D 44 24 68 - lea r8,[rsp+68]
NMS.exe+564513 - 4C 89 64 24 68 - mov [rsp+68],r12
NMS.exe+564518 - 41 8B D7 - mov edx,r15d
NMS.exe+56451B - 4C 89 64 24 70 - mov [rsp+70],r12
NMS.exe+564520 - E8 3B1E0000 - call NMS.exe+566360
NMS.exe+564525 - 48 8B 0D 5CFF4B06 - mov rcx,[NMS.exe+6A24488]
NMS.exe+56452C - 44 38 A1 1ABB2F00 - cmp [rcx+002FBB1A],r12b
NMS.exe+564533 - 0F85 14030000 - jne NMS.exe+56484D
NMS.exe+564539 - 48 8B 9B 60010000 - mov rbx,[rbx+00000160]
NMS.exe+564540 - 41 B5 01 - mov r13b,01
NMS.exe+564543 - 48 8B 45 60 - mov rax,[rbp+60]
NMS.exe+564547 - 48 89 5C 24 60 - mov [rsp+60],rbx
NMS.exe+56454C - 48 63 80 68010000 - movsxd rax,dword ptr [rax+00000168]
NMS.exe+564553 - 48 8D 0C 40 - lea rcx,[rax+rax*2]
NMS.exe+564557 - 48 8D 3C CB - lea rdi,[rbx+rcx*8]
NMS.exe+56455B - 48 89 7D B0 - mov [rbp-50],rdi
NMS.exe+56455F - 48 3B DF - cmp rbx,rdi
NMS.exe+564562 - 0F84 83030000 - je NMS.exe+5648EB
NMS.exe+564568 - 48 8B 15 49471704 - mov rdx,[NMS.exe+46D8CB8]
NMS.exe+56456F - 48 8B 0D 3A471704 - mov rcx,[NMS.exe+46D8CB0]
NMS.exe+564576 - 48 39 53 08 - cmp [rbx+08],rdx
NMS.exe+56457A - 75 09 - jne NMS.exe+564585
NMS.exe+56457C - 48 39 0B - cmp [rbx],rcx
NMS.exe+56457F - 0F84 06010000 - je NMS.exe+56468B
NMS.exe+564585 - 48 8D 4C 24 78 - lea rcx,[rsp+78]
NMS.exe+56458A - 48 C7 45 88 FFFFFFFF - mov qword ptr [rbp-78],FFFFFFFFFFFFFFFF
NMS.exe+564592 - 44 89 65 9C - mov [rbp-64],r12d
NMS.exe+564596 - E8 D5312402 - call NMS.exe+27A7770
NMS.exe+56459B - 8B 43 14 - mov eax,[rbx+14]
NMS.exe+56459E - 45 8B FC - mov r15d,r12d
NMS.exe+5645A1 - 4C 8B 74 24 70 - mov r14,[rsp+70]
8B 43 ? 45 8B ? 4C 8B 74 ? ?
NMS.exe+5645A6 - 0F10 03 - movups xmm0,[rbx]
NMS.exe+5645A9 - 89 45 9C - mov [rbp-64],eax
NMS.exe+5645AC - 8B 44 24 6C - mov eax,[rsp+6C]
NMS.exe+5645B0 - 0F11 44 24 78 - movups [rsp+78],xmm0
NMS.exe+5645B5 - 4D 8D 24 86 - lea r12,[r14+rax*4]
NMS.exe+5645B9 - 4D 3B F4 - cmp r14,r12
NMS.exe+5645BC - 0F84 8F000000 - je NMS.exe+564651
NMS.exe+5645C2 - 48 8B 7D A8 - mov rdi,[rbp-58]
NMS.exe+5645C6 - 33 DB - xor ebx,ebx
NMS.exe+5645C8 - 0F1F 84 00 00000000 - nop dword ptr [rax+rax+00000000]
NMS.exe+5645D0 - 41 8B 16 - mov edx,[r14]
NMS.exe+5645D3 - 41 B8 FFFFFFFF - mov r8d,FFFFFFFF
NMS.exe+5645D9 - 48 8B CF - mov rcx,rdi
NMS.exe+5645DC - 8B F3 - mov esi,ebx
41 ? ? 41 ? FF FF FF FF 48 ? ? 8B
NMS.exe+5645DE - E8 BDE8EFFF - call NMS.exe+462EA0
NMS.exe+5645E3 - 48 8B 88 90000000 - mov rcx,[rax+00000090]
NMS.exe+5645EA - 8B 80 8C000000 - mov eax,[rax+0000008C]
NMS.exe+5645F0 - 48 8D 14 40 - lea rdx,[rax+rax*2]
NMS.exe+5645F4 - 48 C1 E2 04 - shl rdx,04
NMS.exe+5645F8 - 48 03 D1 - add rdx,rcx
NMS.exe+5645FB - 48 3B CA - cmp rcx,rdx
NMS.exe+5645FE - 74 38 - je NMS.exe+564638
NMS.exe+564600 - 44 8B 55 9C - mov r10d,[rbp-64]
NMS.exe+564604 - 4C 8B 45 80 - mov r8,[rbp-80]
NMS.exe+564608 - 4C 8B 4C 24 78 - mov r9,[rsp+78]
NMS.exe+56460D - 0F1F 00 - nop dword ptr [rax]
NMS.exe+564610 - 8B 41 24 - mov eax,[rcx+24]
NMS.exe+564613 - 41 3B C2 - cmp eax,r10d
NMS.exe+564616 - 75 17 - jne NMS.exe+56462F
NMS.exe+564618 - 4C 39 41 08 - cmp [rcx+08],r8
NMS.exe+56461C - 75 11 - jne NMS.exe+56462F
NMS.exe+56461E - 4C 39 09 - cmp [rcx],r9
NMS.exe+564621 - 75 0C - jne NMS.exe+56462F
NMS.exe+564623 - 83 F8 01 - cmp eax,01
NMS.exe+564626 - 75 04 - jne NMS.exe+56462C
NMS.exe+564628 - FF C6 - inc esi
NMS.exe+56462A - EB 03 - jmp NMS.exe+56462F
}
12288
"Unlimited Refiner Fuel"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-09-19
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(fullrefiner,NMS.exe,89 47 18 EB 23) // should be unique
alloc(newmem,$1000,fullrefiner)
label(code)
label(return)
newmem:
code:
mov [rdi+18],#100
jmp 7FF700F62AC6
jmp return
fullrefiner:
jmp newmem
return:
registersymbol(fullrefiner)
[DISABLE]
fullrefiner:
db 89 47 18 EB 23
unregistersymbol(fullrefiner)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF700F62A9E
7FF700F62A79: 75 E5 - jne 7FF700F62A60
7FF700F62A7B: 45 33 C0 - xor r8d,r8d
7FF700F62A7E: 41 8B F8 - mov edi,r8d
7FF700F62A81: 8B 43 20 - mov eax,[rbx+20]
7FF700F62A84: 45 85 FF - test r15d,r15d
7FF700F62A87: 4C 8B B5 D0 00 00 00 - mov r14,[rbp+000000D0]
7FF700F62A8E: 45 0F 4E F8 - cmovle r15d,r8d
7FF700F62A92: 44 3B F8 - cmp r15d,eax
7FF700F62A95: 41 0F 4C C7 - cmovl eax,r15d
7FF700F62A99: 4C 8B 7C 24 40 - mov r15,[rsp+40]
// ---------- INJECTING HERE ----------
7FF700F62A9E: 89 47 18 - mov [rdi+18],eax
// ---------- DONE INJECTING ----------
7FF700F62AA1: EB 23 - jmp 7FF700F62AC6
7FF700F62AA3: 81 BE EC 00 00 00 00 01 00 00 - cmp [rsi+000000EC],00000100
7FF700F62AAD: 73 0F - jae 7FF700F62ABE
7FF700F62AAF: 48 8D 8E E8 00 00 00 - lea rcx,[rsi+000000E8]
7FF700F62AB6: 48 8B D7 - mov rdx,rdi
7FF700F62AB9: E8 F2 00 4A FF - call 7FF700402BB0
7FF700F62ABE: 45 33 C0 - xor r8d,r8d
7FF700F62AC1: EB BE - jmp 7FF700F62A81
7FF700F62AC3: 45 33 C0 - xor r8d,r8d
7FF700F62AC6: 48 85 DB - test rbx,rbx
}
4477
"Refiner Finishes Instantly"
FFFFFF
Auto Assembler Script
// Game Executable : NMS.exe
// Author : gir489
// Executable Version: 20548.0.0.0
// MD5 Signature : 178D40ED9D51C2F21A9387207E9F4398
// EXE Compile Date : September 05, 2025 12:06 PM
// Script Date : September 09, 2025 06:30 PM
[ENABLE]
aobscanmodule(aob_CalculateRefineTime,$process,0F 5B C9 F3 0F 5E C1 48 83 C4 ? 5B)
registersymbol(aob_CalculateRefineTime)
alloc(newmem_CalculateRefineTime,1024,$process)
label(return_CalculateRefineTime)
newmem_CalculateRefineTime:
push rax
mov eax, (float)0.00000001
movd xmm0, eax
pop rax
jmp return_CalculateRefineTime
aob_CalculateRefineTime:
jmp newmem_CalculateRefineTime
nop 2
return_CalculateRefineTime:
[DISABLE]
aob_CalculateRefineTime:
db 0F 5B C9 F3 0F 5E C1
unregistersymbol(aob_CalculateRefineTime)
dealloc(newmem_CalculateRefineTime)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+F6583F
NMS.exe+F657DF: CC - int 3
NMS.exe+F657E0: 40 53 - push rbx
NMS.exe+F657E2: 48 83 EC 20 - sub rsp,20
NMS.exe+F657E6: 48 8B 0D CB A5 A1 05 - mov rcx,[NMS.exe+697FDB8]
NMS.exe+F657ED: 48 8B DA - mov rbx,rdx
NMS.exe+F657F0: 48 83 C1 60 - add rcx,60
NMS.exe+F657F4: 48 83 C2 60 - add rdx,60
NMS.exe+F657F8: E8 43 81 E7 FF - call NMS.exe+DDD940
NMS.exe+F657FD: 48 85 C0 - test rax,rax
NMS.exe+F65800: 48 8B 05 B1 A5 A1 05 - mov rax,[NMS.exe+697FDB8]
NMS.exe+F65807: 74 16 - je NMS.exe+F6581F
NMS.exe+F65809: 83 B8 3C 4A 22 00 01 - cmp dword ptr [rax+00224A3C],01
NMS.exe+F65810: 8B 0D 72 5C B4 03 - mov ecx,[NMS.exe+4AAB488]
NMS.exe+F65816: 0F 4F 0D 6F 5C B4 03 - cmovg ecx,[NMS.exe+4AAB48C]
NMS.exe+F6581D: EB 14 - jmp NMS.exe+F65833
NMS.exe+F6581F: 83 B8 3C 4A 22 00 01 - cmp dword ptr [rax+00224A3C],01
NMS.exe+F65826: 8B 0D 54 5C B4 03 - mov ecx,[NMS.exe+4AAB480]
NMS.exe+F6582C: 0F 4F 0D 51 5C B4 03 - cmovg ecx,[NMS.exe+4AAB484]
NMS.exe+F65833: F3 0F 10 83 88 00 00 00 - movss xmm0,[rbx+00000088]
NMS.exe+F6583B: 66 0F 6E C9 - movd xmm1,ecx
// ---------- INJECTING HERE ----------
NMS.exe+F6583F: 0F 5B C9 - cvtdq2ps xmm1,xmm1
// ---------- DONE INJECTING ----------
NMS.exe+F65842: F3 0F 5E C1 - divss xmm0,xmm1
NMS.exe+F65846: 48 83 C4 20 - add rsp,20
NMS.exe+F6584A: 5B - pop rbx
NMS.exe+F6584B: C3 - ret
NMS.exe+F6584C: CC - int 3
NMS.exe+F6584D: CC - int 3
NMS.exe+F6584E: CC - int 3
NMS.exe+F6584F: CC - int 3
NMS.exe+F65850: 40 55 - push rbp
NMS.exe+F65852: 56 - push rsi
NMS.exe+F65853: 41 54 - push r12
NMS.exe+F65855: 41 56 - push r14
NMS.exe+F65857: 41 57 - push r15
NMS.exe+F65859: 48 83 EC 20 - sub rsp,20
NMS.exe+F6585D: F6 81 3E 05 00 00 06 - test byte ptr [rcx+0000053E],06
NMS.exe+F65864: 48 8B E9 - mov rbp,rcx
NMS.exe+F65867: 75 1E - jne NMS.exe+F65887
NMS.exe+F65869: 48 8B 81 60 05 00 00 - mov rax,[rcx+00000560]
NMS.exe+F65870: 8B 88 E4 03 00 00 - mov ecx,[rax+000003E4]
NMS.exe+F65876: 85 C9 - test ecx,ecx
}
4475
"Free Settlement Construction (fixed?)"
FFFFFF
Auto Assembler Script
// Game Executable : NMS.exe
// Author : gir489
// Executable Version: 20305.0.0.0
// MD5 Signature : 83DC9BB7CA7D372E0B9B5BFCF70E231F
// EXE Compile Date : September 03, 2025 06:35 AM
// Script Date : September 06, 2025 02:42 PM
[ENABLE]
aobscanmodule(aob_InstantiatePartNav,$process,7C 05 41 B7 ? EB ? 45 84 FF)
registersymbol(aob_InstantiatePartNav)
aob_InstantiatePartNav:
nop 2
[DISABLE]
aob_InstantiatePartNav:
db 7C 05
unregistersymbol(aob_InstantiatePartNav)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+A5A678
// NEW INJECTION POINT: NMS.exe+B2CBA0
NMS.exe+A5A623: EB 20 - jmp NMS.exe+A5A645
NMS.exe+A5A625: 48 63 44 24 68 - movsxd rax,dword ptr [rsp+68]
NMS.exe+A5A62A: 48 0F AF D0 - imul rdx,rax
NMS.exe+A5A62E: 48 8B 44 24 60 - mov rax,[rsp+60]
NMS.exe+A5A633: 48 C1 EA 20 - shr rdx,20
NMS.exe+A5A637: 48 63 CA - movsxd rcx,edx
NMS.exe+A5A63A: 48 03 C9 - add rcx,rcx
NMS.exe+A5A63D: 0F 10 04 C8 - movups xmm0,[rax+rcx*8]
NMS.exe+A5A641: 44 89 75 B4 - mov [rbp-4C],r14d
NMS.exe+A5A645: 48 8B 0D 4C F8 F1 05 - mov rcx,[NMS.exe+6979E98]
NMS.exe+A5A64C: 48 8D 55 90 - lea rdx,[rbp-70]
NMS.exe+A5A650: 41 B1 01 - mov r9b,01
NMS.exe+A5A653: 44 88 74 24 30 - mov [rsp+30],r14b
NMS.exe+A5A658: 48 81 C1 00 B7 00 00 - add rcx,0000B700
NMS.exe+A5A65F: 44 88 74 24 28 - mov [rsp+28],r14b
NMS.exe+A5A664: 45 0F B6 C1 - movzx r8d,r9b
NMS.exe+A5A668: 44 88 74 24 20 - mov [rsp+20],r14b
NMS.exe+A5A66D: 0F 11 45 90 - movups [rbp-70],xmm0
NMS.exe+A5A671: E8 4A 8F AF FF - call NMS.exe+5535C0
NMS.exe+A5A676: 3B C6 - cmp eax,esi
// ---------- INJECTING HERE ----------
NMS.exe+A5A678: 7C 05 - jl NMS.exe+A5A67F
// ---------- DONE INJECTING ----------
NMS.exe+A5A67A: 41 B7 01 - mov r15b,01
NMS.exe+A5A67D: EB 05 - jmp NMS.exe+A5A684
NMS.exe+A5A67F: 45 84 FF - test r15b,r15b
NMS.exe+A5A682: 74 24 - je NMS.exe+A5A6A8
NMS.exe+A5A684: 45 84 ED - test r13b,r13b
NMS.exe+A5A687: 74 1F - je NMS.exe+A5A6A8
NMS.exe+A5A689: 48 8B 0D 08 F8 F1 05 - mov rcx,[NMS.exe+6979E98]
NMS.exe+A5A690: 48 8D 55 90 - lea rdx,[rbp-70]
NMS.exe+A5A694: 48 81 C1 00 B7 00 00 - add rcx,0000B700
NMS.exe+A5A69B: 45 33 C9 - xor r9d,r9d
NMS.exe+A5A69E: E8 ED 31 AF FF - call NMS.exe+54D890
NMS.exe+A5A6A3: EB 03 - jmp NMS.exe+A5A6A8
NMS.exe+A5A6A5: 45 32 FF - xor r15b,r15b
NMS.exe+A5A6A8: 44 38 74 24 6C - cmp [rsp+6C],r14b
NMS.exe+A5A6AD: 75 19 - jne NMS.exe+A5A6C8
NMS.exe+A5A6AF: 48 8B 4C 24 60 - mov rcx,[rsp+60]
NMS.exe+A5A6B4: 48 85 C9 - test rcx,rcx
NMS.exe+A5A6B7: 74 05 - je NMS.exe+A5A6BE
NMS.exe+A5A6B9: E8 D2 C4 D8 01 - call NMS.exe+27E6B90
NMS.exe+A5A6BE: 4C 89 74 24 60 - mov [rsp+60],r14
}
4474
"Instant Construction"
FFFFFF
Auto Assembler Script
[ENABLE]
aobscanmodule(aob_UpdateOwnedSettlementBuildingsConstruction,$process,72 64 45 33 C9)
registersymbol(aob_UpdateOwnedSettlementBuildingsConstruction)
aob_UpdateOwnedSettlementBuildingsConstruction:
nop 2
[DISABLE]
aob_UpdateOwnedSettlementBuildingsConstruction:
db 72 64
unregistersymbol(aob_UpdateOwnedSettlementBuildingsConstruction)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+3FC9B9
NMS.exe+3FC98F: 0F BA F1 06 - btr ecx,06
NMS.exe+3FC993: 89 8E BC 09 00 00 - mov [rsi+000009BC],ecx
NMS.exe+3FC999: 8B 95 78 04 00 00 - mov edx,[rbp+00000478]
NMS.exe+3FC99F: 33 FF - xor edi,edi
NMS.exe+3FC9A1: 83 FA FF - cmp edx,-01
NMS.exe+3FC9A4: 74 79 - je NMS.exe+3FCA1F
NMS.exe+3FC9A6: 48 8B 86 98 09 00 00 - mov rax,[rsi+00000998]
NMS.exe+3FC9AD: 48 85 C0 - test rax,rax
NMS.exe+3FC9B0: 74 6D - je NMS.exe+3FCA1F
NMS.exe+3FC9B2: 48 39 05 77 C3 81 06 - cmp [NMS.exe+6C18D30],rax
// ---------- INJECTING HERE ----------
NMS.exe+3FC9B9: 72 64 - jb NMS.exe+3FCA1F
// ---------- DONE INJECTING ----------
NMS.exe+3FC9BB: 45 33 C9 - xor r9d,r9d
NMS.exe+3FC9BE: 40 88 BC 24 98 00 00 00 - mov [rsp+00000098],dil
NMS.exe+3FC9C6: 4C 8D 84 24 98 00 00 00 - lea r8,[rsp+00000098]
NMS.exe+3FC9CE: C6 44 24 20 01 - mov byte ptr [rsp+20],01
NMS.exe+3FC9D3: 48 8B CD - mov rcx,rbp
NMS.exe+3FC9D6: E8 05 05 02 00 - call NMS.exe+41CEE0
NMS.exe+3FC9DB: 40 38 BC 24 98 00 00 00 - cmp [rsp+00000098],dil
NMS.exe+3FC9E3: 75 10 - jne NMS.exe+3FC9F5
NMS.exe+3FC9E5: 8B 86 BC 09 00 00 - mov eax,[rsi+000009BC]
NMS.exe+3FC9EB: 0F BA E8 06 - bts eax,06
}
11996
"Speed Multipliers"
1
11992
"Increase Jetpack Speed"
FFFFFF
Auto Assembler Script
[ENABLE]
//Player global pointers start with 33, anything after changes. last checked on NMS cursed update
aobscanmodule(forwardforce,NMS.exe,F3 0F 10 ?? ?? ?? ?? ?? 0F 10 87 ?? ?? 00 00 48 8D) // should be unique
alloc(newmem,$1000,forwardforce)// Jetpack max speed
alloc(savedForwardBytes, 8)
label(code)
label(return)
aobscanmodule(leftrightforce,NMS.exe,EB ?? F3 0F 10 05 ?? ?? ?? ?? F3 0F 11 81 ?? ?? 00 00 F3 0F 10 0D) // should be unique
alloc(newmem2,$1000,leftrightforce)// Jetpack aeriel force (or left right force)
alloc(savedLeftRightBytes, 8)
label(code2)
label(return2)
aobscanmodule(upwardforce,NMS.exe,F3 0F 10 0D ?? ?? ?? ?? F3 0F 11 89 ?? ?? 00 00 F3 0F 10 05 ?? ?? ?? ?? 48 8B 9C) // should be unique
alloc(newmem3,$1000,upwardforce)// Jetpack up force
alloc(savedUpwardBytes, 8)
label(code3)
label(return3)
label(fforce)
label(lrforce)
label(uforce)
savedForwardBytes: // readmem the bytes in memory and store it in this
readmem(forwardforce,8)
savedLeftRightBytes:// readmem the bytes in memory and store it in this
readmem(leftrightforce + 2,8)
savedUpwardBytes:// readmem the bytes in memory and store it in this
readmem(upwardforce,8)
//jetpack max forward speed
newmem:
code:
movss xmm2,[fforce] //[NMS.exe+335B9B4]
jmp return
fforce:
dd (float)5.0 // Default is 5 || Pref is 299
forwardforce:
jmp newmem
nop 3
return:
registersymbol(forwardforce)
registersymbol(fforce)
registersymbol(savedForwardBytes)
//aerial movement force
newmem2:
code2:
movss xmm0,[lrforce] //[NMS.exe+335B9D4]
jmp return2
lrforce:
dd (float)31.0 // Default is 31 || Pref is 500
leftrightforce + 2:
jmp newmem2
nop 3
return2:
registersymbol(leftrightforce)
registersymbol(lrforce)
registersymbol(savedLeftRightBytes)
//upward jetpack force
newmem3:
code3:
movss xmm1,[uforce]//[NMS.exe+335B9EC]
jmp return3
uforce:
dd (float)90.0 //Default is 30 || Pref is 200
upwardforce:
jmp newmem3
nop 3
return3:
registersymbol(upwardforce)
registersymbol(uforce)
registersymbol(savedUpwardBytes)
[DISABLE]
forwardforce:// readmem the from the bytes we stored and store it back into this
readmem(savedForwardBytes,8)//db F3 0F 10 15 3D AA 1D 02
leftrightforce + 2: // readmem the from the bytes we stored and store it back into this
readmem(savedLeftRightBytes,8)//db F3 0F 10 05 9B 3D 1F 02
upwardforce: // readmem the from the bytes we stored and store it back into this
readmem(savedUpwardBytes,8)// idk
unregistersymbol(*)
dealloc(*)
{
thanks for the third script, im done stealing now i promise
keep for future reference
jetpack max speed (forward force)
// ORIGINAL CODE - INJECTION POINT: NMS.exe+117EDFF
NMS.exe+117EDD5: 0F 2F C1 - comiss xmm0,xmm1
NMS.exe+117EDD8: 0F 86 2D 0D 00 00 - jbe NMS.exe+117FB0B
NMS.exe+117EDDE: 41 0F 2E C8 - ucomiss xmm1,xmm8
NMS.exe+117EDE2: 7A 06 - jp NMS.exe+117EDEA
NMS.exe+117EDE4: 0F 84 21 0D 00 00 - je NMS.exe+117FB0B
NMS.exe+117EDEA: 44 0F B6 74 24 52 - movzx r14d,byte ptr [rsp+52]
NMS.exe+117EDF0: 45 84 F6 - test r14b,r14b
NMS.exe+117EDF3: 74 0A - je NMS.exe+117EDFF
NMS.exe+117EDF5: F3 0F 10 15 F3 AD 1D 02 - movss xmm2,[NMS.exe+3359BF0]
NMS.exe+117EDFD: EB 08 - jmp NMS.exe+117EE07
// ---------- INJECTING HERE ----------
NMS.exe+117EDFF: F3 0F 10 15 3D ?? 1D 02 - movss xmm2,[NMS.exe+3359844]
// ---------- DONE INJECTING ----------
NMS.exe+117EE07: 0F 10 87 70 2E 00 00 - movups xmm0,[rdi+00002E70]
NMS.exe+117EE0E: 48 8D 95 00 0F 00 00 - lea rdx,[rbp+00000F00]
NMS.exe+117EE15: 0F 59 45 80 - mulps xmm0,[rbp-80]
NMS.exe+117EE19: 41 0F 28 E6 - movaps xmm4,xmm14
NMS.exe+117EE1D: 0F C6 E4 00 - shufps xmm4,xmm4,00
NMS.exe+117EE21: 0F 59 A7 70 2E 00 00 - mulps xmm4,[rdi+00002E70]
NMS.exe+117EE28: 0F 28 C8 - movaps xmm1,xmm0
NMS.exe+117EE2B: 0F C6 C8 A9 - shufps xmm1,xmm0,-57
NMS.exe+117EE2F: F3 0F 58 C8 - addss xmm1,xmm0
NMS.exe+117EE33: 0F 28 D9 - movaps xmm3,xmm1
jetpack left right/turning force
// ORIGINAL CODE - INJECTION POINT: NMS.exe+1165A81
NMS.exe+1165A46: C3 - ret
NMS.exe+1165A47: 48 8B 05 5A 2A 02 04 - mov rax,[NMS.exe+51884A8]
NMS.exe+1165A4E: 83 B8 34 07 45 00 01 - cmp dword ptr [rax+00450734],01
NMS.exe+1165A55: 75 2A - jne NMS.exe+1165A81
NMS.exe+1165A57: F3 0F 10 05 89 41 1F 02 - movss xmm0,[NMS.exe+3359BE8]
NMS.exe+1165A5F: F3 0F 11 81 F0 31 00 00 - movss [rcx+000031F0],xmm0
NMS.exe+1165A67: F3 0F 10 0D 85 41 1F 02 - movss xmm1,[NMS.exe+3359BF4]
NMS.exe+1165A6F: F3 0F 11 89 EC 31 00 00 - movss [rcx+000031EC],xmm1
NMS.exe+1165A77: F3 0F 10 05 6D 41 1F 02 - movss xmm0,[NMS.exe+3359BEC]
NMS.exe+1165A7F: EB 28 - jmp NMS.exe+1165AA9
// ---------- INJECTING HERE ----------
NMS.exe+1165A81: F3 0F 10 05 9B ?? 1F 02 - movss xmm0,[NMS.exe+3359824]
// ---------- DONE INJECTING ----------
NMS.exe+1165A89: F3 0F 11 81 F0 31 00 00 - movss [rcx+000031F0],xmm0
NMS.exe+1165A91: F3 0F 10 0D C3 3D 1F 02 - movss xmm1,[NMS.exe+335985C]
NMS.exe+1165A99: F3 0F 11 89 EC 31 00 00 - movss [rcx+000031EC],xmm1
NMS.exe+1165AA1: F3 0F 10 05 87 3D 1F 02 - movss xmm0,[NMS.exe+3359830]
NMS.exe+1165AA9: 48 8B 9C 24 90 05 00 00 - mov rbx,[rsp+00000590]
NMS.exe+1165AB1: F3 0F 11 81 F4 31 00 00 - movss [rcx+000031F4],xmm0
NMS.exe+1165AB9: 48 81 C4 70 05 00 00 - add rsp,00000570
NMS.exe+1165AC0: 5D - pop rbp
NMS.exe+1165AC1: C3 - ret
NMS.exe+1165AC2: CC - int 3
not the initial upward force but the normal up force
// ORIGINAL CODE - INJECTION POINT: NMS.exe+1167521
NMS.exe+11674DE: 83 B8 34 07 45 00 01 - cmp dword ptr [rax+00450734],01
NMS.exe+11674E5: 75 2A - jne NMS.exe+1167511
NMS.exe+11674E7: F3 0F 10 05 89 48 1F 02 - movss xmm0,[NMS.exe+335BD78]
NMS.exe+11674EF: F3 0F 11 81 F0 31 00 00 - movss [rcx+000031F0],xmm0
NMS.exe+11674F7: F3 0F 10 0D 85 48 1F 02 - movss xmm1,[NMS.exe+335BD84]
NMS.exe+11674FF: F3 0F 11 89 EC 31 00 00 - movss [rcx+000031EC],xmm1
NMS.exe+1167507: F3 0F 10 05 6D 48 1F 02 - movss xmm0,[NMS.exe+335BD7C]
NMS.exe+116750F: EB 28 - jmp NMS.exe+1167539
NMS.exe+1167511: F3 0F 10 05 9B 44 1F 02 - movss xmm0,[NMS.exe+335B9B4]
NMS.exe+1167519: F3 0F 11 81 F0 31 00 00 - movss [rcx+000031F0],xmm0
// ---------- INJECTING HERE ----------
NMS.exe+1167521: F3 0F 10 0D C3 44 1F 02 - movss xmm1,[NMS.exe+335B9EC]
// ---------- DONE INJECTING ----------
NMS.exe+1167529: F3 0F 11 89 EC 31 00 00 - movss [rcx+000031EC],xmm1
NMS.exe+1167531: F3 0F 10 05 87 44 1F 02 - movss xmm0,[NMS.exe+335B9C0]
NMS.exe+1167539: 48 8B 9C 24 90 05 00 00 - mov rbx,[rsp+00000590]
NMS.exe+1167541: F3 0F 11 81 F4 31 00 00 - movss [rcx+000031F4],xmm0
NMS.exe+1167549: 48 81 C4 70 05 00 00 - add rsp,00000570
NMS.exe+1167550: 5D - pop rbp
NMS.exe+1167551: C3 - ret
NMS.exe+1167552: CC - int 3
NMS.exe+1167553: CC - int 3
NMS.exe+1167554: CC - int 3
}
11993
"Jetpack Speed (Default = 5.0)"
0
FFFFFF
Float
fforce
11994
"Aerial Force (Default = 31.0)"
0
FFFFFF
Float
lrforce
11995
"Upward Force (Default = 30.0)"
0
FFFFFF
Float
uforce
222
"Increase Walk/Run Speed"
Auto Assembler Script
{ Game : NMS.exe
Version:
Date : 2026-08-30
Author : savag
This script does blah blah blah
}
[ENABLE]
aobscanmodule(speed,NMS.exe,48 8D 8F ?? ?? 00 00 E8 ?? ?? ?? ?? 84 C0 ?? ?? 48 8D 8F ?? ?? ?? ?? E8 ?? ?? ?? ?? 84 CO 75 ** 48 8B 87) // should be unique
alloc(newmem,$1000,speed)
alloc(restorevalue,12)
label(code)
label(return)
label(multiplier)
restorevalue:
readmem(speed,12)
newmem:
code:
reassemble(speed)
mulss xmm6,[multiplier]
jmp return
multiplier:
dd (float)1.0
speed:
jmp newmem
nop 2
return:
registersymbol(speed)
registersymbol(multiplier)
registersymbol(restorevalue)
[DISABLE]
speed:
readmem(restorevalue,12)
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: NMS.exe+135099F
NMS.exe+135096F: F3 0F 10 35 69 5C C0 03 - movss xmm6,[NMS.exe+4F565E0]
NMS.exe+1350977: 48 8D 0D 22 44 7F 05 - lea rcx,[NMS.exe+6B44DA0]
NMS.exe+135097E: E8 7D B0 F8 FE - call NMS.exe+2DBA00
NMS.exe+1350983: 84 C0 - test al,al
NMS.exe+1350985: 74 18 - je NMS.exe+135099F
NMS.exe+1350987: 48 8D 8F 50 2D 00 00 - lea rcx,[rdi+00002D50]
NMS.exe+135098E: E8 5D 0B FD FF - call NMS.exe+13214F0
NMS.exe+1350993: 84 C0 - test al,al
NMS.exe+1350995: 74 08 - je NMS.exe+135099F
NMS.exe+1350997: F3 0F 10 35 49 5C C0 03 - movss xmm6,[NMS.exe+4F565E8]
// ---------- INJECTING HERE ----------
NMS.exe+135099F: 48 8D 8F D0 02 00 00 - lea rcx,[rdi+000002D0]
// ---------- DONE INJECTING ----------
NMS.exe+13509A6: E8 F5 E3 30 FF - call NMS.exe+65EDA0
NMS.exe+13509AB: 84 C0 - test al,al
NMS.exe+13509AD: 75 31 - jne NMS.exe+13509E0
NMS.exe+13509AF: 48 8D 8F D0 02 00 00 - lea rcx,[rdi+000002D0]
NMS.exe+13509B6: E8 75 E2 30 FF - call NMS.exe+65EC30
NMS.exe+13509BB: 84 C0 - test al,al
NMS.exe+13509BD: 75 21 - jne NMS.exe+13509E0
NMS.exe+13509BF: 48 8B 87 50 01 00 00 - mov rax,[rdi+00000150]
NMS.exe+13509C6: 48 63 88 98 01 00 00 - movsxd rcx,dword ptr [rax+00000198]
NMS.exe+13509CD: 48 8B 05 8C 22 93 03 - mov rax,[NMS.exe+4C82C60]
}
223
"Speed Multiplier"
0
Float
multiplier
11988
"Increase Ship Engine Speed"
FFFFFF
Auto Assembler Script
[ENABLE]
// F3 41 0F 11 ?? ?? C3(starting bytes)
aobscanmodule(engineControls,NMS.exe,F3 0F 58 ?? ?? F3 41 0F 11 ?? ?? C3)
alloc(newmem,$1000,engineControls)
alloc(storeEngineControlBytes,6)
label(code)
label(return)
label(setValAndLoop)
label(engineControlOffsets)
label(multiplyFinalResult)
registersymbol(engineControls)
registersymbol(multiplyFinalResult)
registersymbol(storeEngineControlBytes)
storeEngineControlBytes:
readmem(engineControls+5,6)
newmem:
pushf
push rax
push rdx
xor rax,rax
lea rdx,[engineControlOffsets]
setValAndLoop:
mov eax, dword ptr [rdx]
movss xmm1,[r8+eax]
mulss xmm1,[multiplyFinalResult]
movss [r8+eax],xmm1
add rdx,4
cmp dword ptr [rdx],FFFFFFFF
je code
jmp setValAndLoop
code:
pop rdx
pop rax
popf
jmp return
multiplyFinalResult:
dd (float)1 // Default = 1 || Pref = 20
engineControlOffsets:
dd 10 14 44 64 FFFFFFFF
{Old Offsets}
{ dd 0 4 10 14 18 24 28 2C 30 40 FFFFFFFF }
engineControls+5:
jmp newmem
nop
return:
[DISABLE]
engineControls+5:
readmem(storeEngineControlBytes,6)
unregistersymbol(*)
dealloc(*)
{
I stole this script from the popular table because fuck all of this what?
Eat my ass, nothing has changed still.
Original creator removed generated comments, I'll
leave some for someone in the future if they want
to update.
If you don't know how to find NMS globals in files
you'll not be able to update this script. Find a
tutorial before attempting update.
offsets
0 = BalanceTimeMax // removed (unsure this is correct)
4 = BalanceTimeMin // removed (unsure this is correct)
10 = BoostMaxSpeed // alreay added (40k limit ??)
14 = BoostThrustForce // alread added
18 = ReverseBrake // not needed
24 = FollowDerivativeGain // removed
28 = FollowDerivativeLimit // removed
2C = FollowIntegralDecay // removed
30 = FollowIntegralGain // removed
38 = FollowProportionalGain // removed
3C = FollowProportionalLimit// removed
40 = LowSpeedTurnDamper // removed (multiplying this ruined turn speed)
44 = MaxSpeed // added myself
58 = RollAmount // not needed
60 = RollForce // not needed
64 = ThrustForce // added myself
^Unsure if offsets are the same as they were in echo, these are NMS 5.22 offsets^
removed some from script because idk what they did??
Dont know if the original creator injected in the same location I did so
i'm just going to make new bytes and someone else in the future can make
it more unique.
r8 hasn't changed in the past year.
// ORIGINAL CODE - INJECTION POINT: NMS.exe+187E7EB
11/3/24 9/1/23
NEW Cursed 5.22 Bytes OLD Echo 4.45 Bytes
NMS.exe+187E7B9: F3 41 0F 11 50 28 - movss [r8+28],xmm2
NMS.exe+187E7BF: F3 0F 10 4A 34 - movss xmm1,[rdx+34]
NMS.exe+187E7C4: F3 0F 5C 49 34 - subss xmm1,[rcx+34]
NMS.exe+187E7C9: F3 0F 59 CB - mulss xmm1,xmm3
NMS.exe+187E7CD: F3 0F 58 ?? ?? - addss xmm1,[rcx+34] F3 ?? ?? ?? ??
NMS.exe+187E7D2: F3 41 0F 11 48 34 - movss [r8+34],xmm1 6C F3 ?? ?? ?? 70
NMS.exe+187E7D8: F3 0F 10 42 2C - movss xmm0,[rdx+2C] //
NMS.exe+187E7DD: F3 0F 5C 41 2C - subss xmm0,[rcx+2C] //
NMS.exe+187E7E2: F3 0F 59 C3 - mulss xmm0,xmm3 F3 ?? ?? ??
NMS.exe+187E7E6: F3 0F 58 ?? ?? - addss xmm0,[rcx+2C] F3 ?? ?? ?? 70
// ---------- INJECTING HERE ----------
NMS.exe+187E7EB: F3 41 0F 11 ?? ?? - movss [r8+2C],xmm0 F3 ?? ?? ?? ?? 70 // inject point
// ---------- DONE INJECTING ----------
NMS.exe+187E7F1: C3 - ret C3 -ret
NMS.exe+187E7F2: CC - int 3
NMS.exe+187E7F3: CC - int 3
NMS.exe+187E7F4: CC - int 3
NMS.exe+187E7F5: CC - int 3
NMS.exe+187E7F6: CC - int 3
NMS.exe+187E7F7: CC - int 3
NMS.exe+187E7F8: CC - int 3
NMS.exe+187E7F9: CC - int 3
NMS.exe+187E7FA: CC - int 3
For future aobscanregion reference
-Cursed 5.22 inject addr: NMS.exe+187E7EB
}
11989
"Speed Multiplier"
0
FFFFFF
Float
multiplyFinalResult
11990
"Increase Pulse Engine Speed"
FFFFFF
Auto Assembler Script
{ Game : No Man's Sky
Version:
Date : 2024-11-02
Author : lucar
This script does blah blah blah
}
[ENABLE]
aobscanmodule(actualminiwarp,NMS.exe,F3 0F 5F C8 F3 0F 59 0D ?? ?? ?? ?? 0F 28 C1) // should be unique
alloc(newmem,$1000,actualminiwarp)
alloc(storedActualMiniWarpBytes,12)
label(code)
label(return)
label(warpmult)
storedActualMiniWarpBytes:
readmem(actualminiwarp,12)
newmem:
code:
maxss xmm1,xmm0
reassemble(actualminiwarp+4) // mulss xmm1,[NMS.exe+333E42C] <-- pointer might change
mulss xmm1,[warpmult] // Hijack xmm2
jmp return
warpmult:
dd (float)1 // Default = 1 || Pref = 30
actualminiwarp:
jmp newmem
nop 7
return:
registersymbol(actualminiwarp)
registersymbol(warpmult)
registersymbol(storedActualMiniWarpBytes)
[DISABLE]
actualminiwarp:
readmem(storedActualMiniWarpBytes,12)
unregistersymbol(*)
dealloc(*)
{
lmao thanks for this script too
// ORIGINAL CODE - INJECTION POINT: NMS.exe+13F7CCF
NMS.exe+13F7C9D: 48 89 44 24 38 - mov [rsp+38],rax
NMS.exe+13F7CA2: 48 81 C1 A0 B4 00 00 - add rcx,0000B4A0
NMS.exe+13F7CA9: 48 89 44 24 30 - mov [rsp+30],rax
NMS.exe+13F7CAE: 45 33 C9 - xor r9d,r9d
NMS.exe+13F7CB1: 88 44 24 28 - mov [rsp+28],al
NMS.exe+13F7CB5: BA 99 00 00 00 - mov edx,00000099
NMS.exe+13F7CBA: 44 8D 40 03 - lea r8d,[rax+03]
NMS.exe+13F7CBE: 88 44 24 20 - mov [rsp+20],al
NMS.exe+13F7CC2: E8 D9 B0 0D FF - call NMS.exe+4D2DA0
NMS.exe+13F7CC7: F3 0F 10 0D 1D D8 93 01 - movss xmm1,[NMS.exe+2D354EC]
// ---------- INJECTING HERE ----------
NMS.exe+13F7CCF: F3 0F 5F C8 - maxss xmm1,xmm0
// ---------- DONE INJECTING ----------
NMS.exe+13F7CD3: F3 0F 59 0D 51 67 F4 01 - mulss xmm1,[NMS.exe+333E42C]
NMS.exe+13F7CDB: 0F 28 C1 - movaps xmm0,xmm1
NMS.exe+13F7CDE: 48 83 C4 48 - add rsp,48
NMS.exe+13F7CE2: C3 - ret
NMS.exe+13F7CE3: CC - int 3
NMS.exe+13F7CE4: CC - int 3
NMS.exe+13F7CE5: CC - int 3
NMS.exe+13F7CE6: CC - int 3
NMS.exe+13F7CE7: CC - int 3
NMS.exe+13F7CE8: CC - int 3
}
11991
"Speed Multiplier"
0
FFFFFF
Float
warpmult
224
"Money/Inventory"
FFFFFF
1
225
"Money"
FFFFFF
1
12235
"Units"
4 Bytes
"NMS.exe"+071930D0
89C
50
12279
"Nanites"
4 Bytes
"NMS.exe"+071930D0
8A0
50
12280
"Quicksilver"
4 Bytes
"NMS.exe"+071930D0
8A4
50
128
"Inventory (Exosuit, items can change slots so dont freeze values)"
1
12162
"Inv Slot 1"
4 Bytes
"NMS.exe"+07193220
18
9A0
50
86
"Inv Slot 2"
0
4 Bytes
+30
87
"Inv Slot 3"
0
4 Bytes
+60
88
"Inv Slot 4"
0
4 Bytes
+90
89
"Inv Slot 5"
0
4 Bytes
+C0
90
"Inv Slot 6"
0
4 Bytes
+F0
91
"Inv Slot 7"
0
4 Bytes
+120
92
"Inv Slot 8"
0
4 Bytes
+150
93
"Inv Slot 9"
0
4 Bytes
+180
94
"Inv Slot 10"
0
4 Bytes
+1B0
118
"Inv Slot 11"
0
4 Bytes
+1E0
119
"Inv Slot 12"
0
4 Bytes
+210
120
"Inv Slot 13"
0
4 Bytes
+240
121
"Inv Slot 14"
0
4 Bytes
+270
122
"Inv Slot 15"
0
4 Bytes
+2A0
123
"Inv Slot 16"
0
4 Bytes
+2D0
124
"Inv Slot 17"
0
4 Bytes
+300
125
"Inv Slot 18"
0
4 Bytes
+330
126
"Inv Slot 19"
0
4 Bytes
+360
127
"Inv Slot 20"
0
4 Bytes
+390
136
"Inv Slot 21"
0
4 Bytes
+3C0
137
"Inv Slot 22"
0
4 Bytes
+3F0
138
"Inv Slot 23"
0
4 Bytes
+420
139
"Inv Slot 24"
0
4 Bytes
+450
150
"Inv Slot 25"
0
4 Bytes
+480
151
"Inv Slot 26"
0
4 Bytes
+4B0
152
"Inv Slot 27"
0
4 Bytes
+4E0
153
"Inv Slot 28"
0
4 Bytes
+510
154
"Inv Slot 29"
0
4 Bytes
+540
155
"Inv Slot 30"
0
4 Bytes
+570
156
"Inv Slot 31"
0
4 Bytes
+5A0
157
"Inv Slot 32"
0
4 Bytes
+5D0
158
"Inv Slot 33"
0
4 Bytes
+600
159
"Inv Slot 34"
0
4 Bytes
+630
160
"Inv Slot 35"
0
4 Bytes
+660
161
"Inv Slot 36"
0
4 Bytes
+690
162
"Inv Slot 37"
0
4 Bytes
+6C0
163
"Inv Slot 38"
0
4 Bytes
+6F0
164
"Inv Slot 39"
0
4 Bytes
+720
165
"Inv Slot 40"
0
4 Bytes
+750
166
"Inv Slot 41"
0
4 Bytes
+780
167
"Inv Slot 42"
0
4 Bytes
+7B0
168
"Inv Slot 43"
0
4 Bytes
+7E0
169
"Inv Slot 44"
0
4 Bytes
+810
170
"Inv Slot 45"
0
4 Bytes
+840
171
"Inv Slot 46"
0
4 Bytes
+870
172
"Inv Slot 47"
0
4 Bytes
+8A0
173
"Inv Slot 48"
0
4 Bytes
+8D0
174
"Inv Slot 49"
0
4 Bytes
+900
175
"Inv Slot 50"
0
4 Bytes
+930