1062
"Hooks"
1
1060
"HP Hook"
Auto Assembler Script
define(hook,"Retrospace.Traits.PlayerHealth.CalculateDamage")
define(bytes,48 8B C4 48 89)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(hpeesers,8)
registersymbol(hpeesers)
{
RCX: PlayerHealth (this)
RDX: Retrospace.Traits.DamageData damage
Returns XMM0 (System.Single)
}
hpeesers:
dq 0
newmem:
mov [hpeesers],rcx
// original code
// mov rax,rsp
// mov [rax+08],rbx
readmem(hook,7)
jmp hook+7
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(hpeesers)
dealloc(hpeesers)
967
"Weapon Clip Hook"
Auto Assembler Script
define(hook,"Retrospace.RetroWeaponAmmo.RefreshCounts")
define(bytes,48 89 5C 24 08)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(ammro,8)
registersymbol(ammro)
{
RCX: RetroWeaponAmmo (this)
Returns RAX (System.Void)
}
ammro:
dq 0
newmem:
mov [ammro],rcx
// original code
// mov [rsp+08],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(ammro)
dealloc(ammro)
938
"Stamina Hook"
Auto Assembler Script
define(hook,"Retrospace.Stamina.LateUpdate")
define(bytes,40 53 48 83 EC)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(stammies,8)
registersymbol(stammies)
{
RCX: Stamina (this)
Returns RAX (System.Void)
}
stammies:
dq 0
newmem:
mov [stammies],rcx
// original code
// push rbx
// sub rsp,40
readmem(hook,6)
jmp hook+6
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(stammies)
dealloc(stammies)
935
"Oxygen Hook"
Auto Assembler Script
define(hook,"Retrospace.AbilitySystem.AbilityOxygen.RefreshAmount")
define(bytes,48 89 5C 24 08)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(oxy,8)
registersymbol(oxy)
{
RCX: AbilityOxygen (this)
Returns RAX (System.Void)
}
oxy:
dq 0
newmem:
mov [oxy],rcx
// original code
// mov [rsp+08],rbx
readmem(hook,5)
jmp hook+5
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(oxy)
dealloc(oxy)
1142
"Inventory+Invisibility Hook"
Auto Assembler Script
define(hook,"Retrospace.PlayerServices.Update")
define(bytes,40 57 48 83 EC)
define(callee,"Retrospace.PlayerServices.set_PlayerSignals")
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
label(tester)
label(tester_cap)
label(tester_mode)
label(tester_orig)
label(tester_go)
label(tester_setB)
label(tester_a_rdx)
label(tester_b_rdx)
registersymbol(tester)
registersymbol(tester_mode)
registersymbol(tester_a_rdx)
registersymbol(tester_b_rdx)
{
RCX: PlayerServices (this)
Returns RAX (System.Void)
}
newmem:
jmp tester_cap
tester:
dq 0
tester_mode:
db 0
tester_a_rdx:
dq $1
tester_b_rdx:
dq $0
tester_cap:
mov [tester],rcx
cmp byte ptr [tester_mode],0
je tester_orig
// own aligned frame: works whatever the stack alignment at the hook is
push rbp
mov rbp,rsp
sub rsp,100
and rsp,-10
// save everything a call can clobber
mov [rsp+30],rcx
mov [rsp+38],rdx
mov [rsp+40],r8
mov [rsp+48],r9
mov [rsp+50],rax
mov [rsp+58],r10
mov [rsp+60],r11
movups [rsp+70],xmm0
movups [rsp+80],xmm1
movups [rsp+90],xmm2
movups [rsp+A0],xmm3
movups [rsp+B0],xmm4
movups [rsp+C0],xmm5
mov rcx,[tester] // this
cmp byte ptr [tester_mode],2
je tester_setB
mov rdx,[tester_a_rdx]
jmp tester_go
tester_setB:
mov rdx,[tester_b_rdx]
tester_go:
xor r8d,r8d // MethodInfo* = null
mov rax,callee
call rax
mov rcx,[rsp+30]
mov rdx,[rsp+38]
mov r8,[rsp+40]
mov r9,[rsp+48]
mov rax,[rsp+50]
mov r10,[rsp+58]
mov r11,[rsp+60]
movups xmm0,[rsp+70]
movups xmm1,[rsp+80]
movups xmm2,[rsp+90]
movups xmm3,[rsp+A0]
movups xmm4,[rsp+B0]
movups xmm5,[rsp+C0]
mov rsp,rbp
pop rbp
tester_orig:
// original code
// push rdi
// sub rsp,40
readmem(hook,6)
jmp hook+6
hook:
jmp long newmem
[disable]
hook:
db bytes
unregistersymbol(tester)
unregistersymbol(tester_mode)
unregistersymbol(tester_a_rdx)
unregistersymbol(tester_b_rdx)
dealloc(newmem)
1065
"Flashlight Hook"
Auto Assembler Script
define(hook,"Retrospace.Sensors.Vision.VisibilityChecker.FixedUpdate")
define(bytes,40 53 48 83 EC)
[enable]
assert(hook, bytes)
alloc(newmem,$1000, hook)
alloc(vis,8)
registersymbol(vis)
{
RCX: VisibilityChecker (this)
Returns RAX (System.Void)
}
vis:
dq 0
newmem:
mov [vis],rcx
// original code
// push rbx
// sub rsp,50
readmem(hook,6)
jmp hook+6
hook:
jmp long newmem
[disable]
hook:
db bytes
dealloc(newmem)
unregistersymbol(vis)
dealloc(vis)
1063
"Options"
1
1144
"Invisible (1 vis, 2 invis)"
Byte
tester_mode
1061
"Health (take dmg once)"
0
Float
[hpeesers]+20
936
"Oxygen"
0
Float
[oxy]+D8
964
"Stamina Options"
1
941
"useLocal (set to 1, freeze)"
0
FFFFFF
Byte
[stammies]+28
10
942
"localStaminaValue (set to 100, freeze)"
0
FFFFFF
Float
[stammies]+28
14
968
"CurrentAmmoClip (wraps to negative, deletes item/ammo)"
0
4 Bytes
[ammro]+44
932
"Inventory Slots (Don't upgrade Inventory)"
1
0
8 Bytes
[tester]
985
"1"
4 Bytes
+98
18
20
10
70
60
990
"2"
4 Bytes
+98
18
28
10
70
60
995
"3"
4 Bytes
+98
18
30
10
70
60
1000
"4"
4 Bytes
+98
18
38
10
70
60
1005
"5"
4 Bytes
+98
18
40
10
70
60
1010
"6"
4 Bytes
+98
18
48
10
70
60
1015
"7"
4 Bytes
+98
18
50
10
70
60
1020
"8"
4 Bytes
+98
18
58
10
70
60
1025
"9"
4 Bytes
+98
18
60
10
70
60
1030
"10"
4 Bytes
+98
18
68
10
70
60
1031
"11"
0
4 Bytes
+98
18
70
10
70
60
1032
"12"
0
4 Bytes
+98
18
78
10
70
60
1033
"13"
0
4 Bytes
+98
18
80
10
70
60
1034
"14"
0
4 Bytes
+98
18
90
10
70
60
1035
"15"
0
4 Bytes
+98
18
98
10
70
60
1036
"16"
0
4 Bytes
+98
18
A0
10
70
60
1037
"17"
0
4 Bytes
+98
18
A8
10
70
60
1038
"18"
0
4 Bytes
+98
18
B0
10
70
60
1039
"19"
0
4 Bytes
+98
18
B8
10
70
60
1040
"20"
0
4 Bytes
+98
18
C0
10
70
60
1041
"21"
0
4 Bytes
+98
18
C8
10
70
60
1042
"22"
0
4 Bytes
+98
18
D0
10
70
60
1043
"23"
0
4 Bytes
+98
18
D8
10
70
60
1044
"24"
0
4 Bytes
+98
18
E0
10
70
60
1045
"25"
0
4 Bytes
+98
18
E8
10
70
60
1046
"26"
0
4 Bytes
+98
18
F0
10
70
60
1047
"27"
0
4 Bytes
+98
18
F8
10
70
60
1048
"28"
0
4 Bytes
+98
18
100
10
70
60
1049
"29"
0
4 Bytes
+98
18
108
10
70
60
1050
"30"
0
4 Bytes
+98
18
110
10
70
60
1051
"31"
0
4 Bytes
+98
18
118
10
70
60
1052
"32"
0
4 Bytes
+98
18
120
10
70
60
1066
"Flashlight Options"
1
8 Bytes
[vis]
1098
"turnedOn"
Byte
+40
28
1100
"intensityActual"
Float
+40
38
1101
"intensityTarget"
Float
+40
3C
1104
"speed"
Float
+40
50
1105
"intensityMax"
Float
+40
54
1106
"intensitySpeed"
Float
+40
58
1107
"originalLightRange"
Float
+40
5C
1116
"currentVisibilityValue"
Float
+54
1117
"lightUpdateTimeout"
Float
+58