1060
"Activate Mono"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if process and readInteger(process) ~= 0 then
mono_initialize()
LaunchMonoDataCollector()
local timeout = 0
while (monopipe == nil or monopipe.Connected == false) and timeout < 2000 do
sleep(10)
timeout = timeout + 10
end
if monopipe == nil or monopipe.Connected == false then
error('Error: Mono data collector pipe timeout.')
end
if memrec then
synchronize(function()
for i = 0, memrec.Count - 1 do
memrec.Child[i].Active = true
end
end)
end
else
error('Error: No active process detected.')
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then
synchronize(function()
for i = 0, memrec.Count - 1 do
memrec.Child[i].Active = false
end
end)
end
{$asm}
1528
"Hooks"
1
937
"HOOK: UHFPS.Runtime.PlayerHealth.Update"
Auto Assembler Script
define(hook,"UHFPS.Runtime.PlayerHealth.Update")
define(bytes,40 53 48 81 EC)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(plr,8)
registersymbol(plr)
{
RCX: PlayerHealth (this)
Returns RAX (System.Void)
}
plr:
dq 0
newmem:
mov [plr],rcx
// original code
// push rbx
// sub rsp,000000B0
readmem(hook,9)
jmp hook+9
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(plr)
dealloc(plr)
972
"HOOK: UHFPS.Runtime.PlayerStateMachine.Update"
Auto Assembler Script
define(hook,"UHFPS.Runtime.PlayerStateMachine.Update")
define(bytes,40 55 57 41 54)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(stam,8)
registersymbol(stam)
{
RCX: PlayerStateMachine (this)
Returns RAX (System.Void)
}
stam:
dq 0
newmem:
mov [stam],rcx
// original code
// push rbp
// push rdi
// push r12
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(stam)
dealloc(stam)
998
"HOOK: PlayerMoney.Update"
Auto Assembler Script
define(hook,"PlayerMoney.Update")
define(bytes,48 89 5C 24 08)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(mula,8)
registersymbol(mula)
{
RCX: PlayerMoney (this)
Returns RAX (System.Void)
}
mula:
dq 0
newmem:
mov [mula],rcx
// original code
// mov [rsp+08],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(mula)
dealloc(mula)
1467
"HOOK: SkillSystem.Update"
Auto Assembler Script
define(hook,"SkillSystem.Update")
define(bytes,48 89 5C 24 08)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(skillpt,8)
registersymbol(skillpt)
{
RCX: SkillSystem (this)
Returns RAX (System.Void)
}
skillpt:
dq 0
newmem:
mov [skillpt],rcx
// original code
// mov [rsp+08],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(skillpt)
dealloc(skillpt)
1479
"HOOK: EngineDetails.DrivingAddDirt"
Auto Assembler Script
define(hook,"EngineDetails.DrivingAddDirt")
define(bytes,40 53 57 48 83)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(car,8)
registersymbol(car)
{
RCX: EngineDetails (this)
Returns RAX (System.Void)
}
car:
dq 0
newmem:
mov [car],rcx
// original code
// push rbx
// push rdi
// sub rsp,48
readmem(hook,7)
jmp hook+7
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(car)
dealloc(car)
1523
"HOOK: CarWashGun.Update"
Auto Assembler Script
define(hook,"CarWashGun.Update")
define(bytes,48 89 5C 24 18)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(pressure,8)
registersymbol(pressure)
{
RCX: CarWashGun (this)
Returns RAX (System.Void)
}
pressure:
dq 0
newmem:
mov [pressure],rcx
// original code
// mov [rsp+18],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(pressure)
dealloc(pressure)
1487
"HOOK: CarSaleCustomer.UpdateAttemptsUI"
Auto Assembler Script
define(hook,"CarSaleCustomer.UpdateAttemptsUI")
define(bytes,48 89 5C 24 08)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(bargain,8)
registersymbol(bargain)
{
RCX: CarSaleCustomer (this)
Returns RAX (System.Void)
}
bargain:
dq 0
newmem:
mov [bargain],rcx
// original code
// mov [rsp+08],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(bargain)
dealloc(bargain)
1529
"Options"
1
938
"Health"
1
8 Bytes
[plr]
939
"MaxHealth"
00FF00
4 Bytes
+30
940
"StartHealth"
00FF00
4 Bytes
+34
941
"UseHearthbeat"
Byte
+38
942
"LowHealthPulse"
Float
+3C
943
"HealthFadeTime"
Float
+40
944
"MinHealthFade"
4 Bytes
+44
945
"BloodDuration"
Float
+48
950
"EnableFallDamage"
Byte
+5C
956
"IsInvisibleToEnemies"
Byte
+84
957
"IsInvisibleToAllies"
Byte
+85
961
"targetHealth"
Float
+A0
973
"Stamina/Speed"
1
8 Bytes
[stam]
975
"SpeedMultiplier"
00FF00
Float
+38
994
"Stamina"
0
00FF00
Float
+C8
+24
995
"IsGrounded"
Byte
+D0
996
"IsPlayerDead"
Byte
+D1
999
"Money/Skill"
1
8 Bytes
[mula]
1468
"Skill Points"
0
00FF00
Float
[skillpt]+A0
1000
"Money"
00FF00
Float
+28
1001
"Money2"
Float
+2C
1002
"TurkishLira"
Byte
+30
1003
"AmericanDollar"
Byte
+31
1004
"Euro"
Byte
+32
1005
"TurkishLiraRate"
Float
+34
1006
"AmericanDollarRate"
Float
+38
1007
"EuroRate"
Float
+3C
1008
"TurkishLiraLogo"
1
8 Bytes
+40
1009
"AmericanLogo"
1
8 Bytes
+48
1010
"EuroLogo"
1
8 Bytes
+50
1480
"Car Details (Drive Car)"
1
8 Bytes
[car]
1101
"EngineOil"
00FF00
Float
+B0
20
1102
"EngineWater"
00FF00
Float
+B0
24
1103
"EngineCon"
00FF00
Float
+B0
28
1220
"Fuel"
00FF00
Float
+1A8
28
20
1521
"KM"
0
00FF00
4 Bytes
+B8
28
1244
"maxHealth"
00FF00
Float
+1F8
1245
"currentHealth"
00FF00
Float
+1FC
1246
"minDamage"
00FF00
Float
+200
1247
"maxDamage"
00FF00
Float
+204
1181
"maxDirt"
00FF00
Float
+1A0
54
1109
"engineBlockInstalled"
Byte
+C8
10
1110
"engineBlockPowerAdd"
Float
+C8
14
1111
"intakeInstalled"
Byte
+C8
18
1112
"intakePowerAdd"
Float
+C8
1C
1113
"exhaustInstalled"
Byte
+C8
20
1114
"exhaustPowerAdd"
Float
+C8
24
1117
"turboInstalled"
Byte
+C8
31
1118
"turboPowerAdd"
Float
+C8
34
1123
"intercoolerInstalled"
Byte
+C8
51
1124
"intercoolerPowerAdd"
Float
+C8
54
1125
"transmissionKitInstalled"
Byte
+C8
58
1126
"gearRatioMultiplier"
Float
+C8
5C
1127
"priceEngineBlock"
4 Bytes
+C8
60
1128
"priceIntake"
4 Bytes
+C8
64
1129
"priceExhaust"
4 Bytes
+C8
68
1130
"priceTurbo"
4 Bytes
+C8
6C
1131
"priceIntercooler"
4 Bytes
+C8
70
1132
"priceTransmission"
4 Bytes
+C8
74
1133
"engineBlockPriceApplied"
Byte
+C8
78
1134
"intakePriceApplied"
Byte
+C8
79
1135
"exhaustPriceApplied"
Byte
+C8
7A
1136
"turboPriceApplied"
Byte
+C8
7B
1137
"intercoolerPriceApplied"
Byte
+C8
7C
1138
"transmissionPriceApplied"
Byte
+C8
7D
1140
"Damage"
Byte
+D0
10
1141
"Fuel"
Byte
+D0
11
1142
"OilandWater"
Byte
+D0
12
1143
"Service"
Byte
+D0
13
1144
"LowPrice"
Byte
+D0
14
1180
"snowDirectionDecreaseRate"
Float
+1A0
50
1190
"isWet"
Byte
+1A0
A8
1191
"isMaterialChanged"
Byte
+1A0
A9
1192
"isCarWashed"
Byte
+1A0
AA
1193
"isCarDirty"
Byte
+1A0
AB
1194
"isFoam"
Byte
+1A0
AC
1195
"damageOn"
Byte
+1A0
AD
1196
"Roof"
Byte
+1A0
AE
1197
"dirtvalue"
Float
+1A0
B0
1198
"foamMinimumValue"
Float
+1A0
B4
1199
"envWetThreshold"
Float
+1A0
B8
1200
"rainAutoCleanMultiplier"
Float
+1A0
BC
1201
"wetEvenIfClean"
Byte
+1A0
C0
1202
"dryDelaySeconds"
Float
+1A0
C4
1203
"noRainTimer"
Float
+1A0
C8
1204
"followCarColorWhileWet"
Byte
+1A0
CC
1205
"wetColorCheckInterval"
Float
+1A0
D0
1207
"_wetColorTimer"
Float
+1A0
E0
1221
"capacity"
Float
+1A8
2C
20
1222
"consumptionMultiplier"
Float
+1A8
30
20
1223
"efficiency"
Float
+1A8
34
20
1224
"idleConsumption"
Float
+1A8
38
20
1225
"maxConsumptionPerHour"
Float
+1A8
3C
20
1228
"_distanceTraveled"
Float
+1A8
4C
20
1230
"consumptionLPer100km"
Float
+1A8
54
20
1231
"consumptionPerHour"
Float
+1A8
58
20
1235
"isEnginePowerReduced"
Byte
+1C8
1239
"SuspensionFrontLevel"
Float
+1E0
1240
"SuspensionRearLevel"
Float
+1E4
1241
"CamberFront"
Float
+1E8
1242
"CamberRear"
Float
+1EC
1248
"speedFactor"
Float
+208
1249
"minSpeed"
Float
+20C
1252
"ObjectiveCar"
Byte
+220
1261
"discountSkill"
Byte
+250
1280
"LocalForwardAcceleration"
Float
+270
74
1281
"LocalForwardVelocity"
Float
+270
78
1284
"VelocityMagnitude"
Float
+270
94
1286
"AngularVelocityMagnitude"
Float
+270
A4
1298
"lateralSlipThreshold"
Float
+270
108
1299
"longitudinalSlipThreshold"
Float
+270
10C
1303
"wheelbase"
Float
+270
134
1304
"fixedDeltaTime"
Float
+270
138
1305
"deltaTime"
Float
+270
13C
1319
"baseMaxPower"
Float
+278
1337
"speedThreshold"
Float
+2D8
1338
"dirtTriggerInterval"
4 Bytes
+2DC
1339
"minSlipToDirt"
Float
+2E0
1342
"dirtFrameCounter"
4 Bytes
+2F8
1524
"Pressure Washer"
1
8 Bytes
[pressure]
1525
"MaxDistance"
00FF00
4 Bytes
+9C
1526
"water"
00FF00
Float
+A0
1527
"foam"
00FF00
Float
+A4
1488
"Fail Bargain Once And Wait 5s To Update"
1
8 Bytes
[bargain]
1516
"nearAcceptPercent"
00FF00
Float
+F8
1517
"attemptsLeft"
00FF00
4 Bytes
+FC
1518
"initialPrice"
00FF00
Float
+100
1519
"offeredPrice"
00FF00
Float
+104
1520
"finalOfferPrice"
00FF00
Float
+108
1465
"Freeze Time"
00FF00
Auto Assembler Script
{ Game : Car Dealership Simulator 2.exe
Version:
Date : 2026-09-23
Author : savag
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(time2,GameAssembly.dll,89 43 24 48 8B 5F 20 48 8B CB 48 85 DB) // should be unique
alloc(newmem,$1000,time2)
label(code)
label(return)
newmem:
code:
// mov [rbx+24],eax
mov rbx,[rdi+20]
jmp return
time2:
jmp newmem
nop 2
return:
registersymbol(time2)
[DISABLE]
time2:
db 89 43 24 48 8B 5F 20
unregistersymbol(time2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 7FF9D2356DC3
7FF9D2356D9C: 48 8D 4D 18 - lea rcx,[rbp+18]
7FF9D2356DA0: E8 2B F0 E9 00 - call System.DateTime.get_Second
7FF9D2356DA5: 89 45 20 - mov [rbp+20],eax
7FF9D2356DA8: 48 8B 5F 20 - mov rbx,[rdi+20]
7FF9D2356DAC: 48 8B CB - mov rcx,rbx
7FF9D2356DAF: 48 85 DB - test rbx,rbx
7FF9D2356DB2: 0F 84 0E 01 00 00 - je 7FF9D2356EC6
7FF9D2356DB8: 48 83 C1 18 - add rcx,18
7FF9D2356DBC: 33 D2 - xor edx,edx
7FF9D2356DBE: E8 2D ED E9 00 - call System.DateTime.get_Minute
// ---------- INJECTING HERE ----------
7FF9D2356DC3: 89 43 24 - mov [rbx+24],eax
// ---------- DONE INJECTING ----------
7FF9D2356DC6: 48 8B 5F 20 - mov rbx,[rdi+20]
7FF9D2356DCA: 48 8B CB - mov rcx,rbx
7FF9D2356DCD: 48 85 DB - test rbx,rbx
7FF9D2356DD0: 0F 84 F0 00 00 00 - je 7FF9D2356EC6
7FF9D2356DD6: 48 83 C1 18 - add rcx,18
7FF9D2356DDA: 33 D2 - xor edx,edx
7FF9D2356DDC: E8 3F EB E9 00 - call System.DateTime.get_Hour
7FF9D2356DE1: 89 43 28 - mov [rbx+28],eax
7FF9D2356DE4: 48 8B 5F 20 - mov rbx,[rdi+20]
7FF9D2356DE8: 48 8B CB - mov rcx,rbx
}