1
"SERYOGASK | [Toys Co.] - [1.0.0]"
00D7FF
1
2
"INFORMATION"
00D7FF
1
3
"Game Title: Toy Co."
00D7FF
1
4
"Game Version: 1.0.0"
00D7FF
1
5
"Table Version: 1.0.0"
00D7FF
1
6
"Author: SeryogaSK"
00D7FF
1
1337163400
"<=== Attach to process and activate mono"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("ToysCo.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
LaunchMonoDataCollector()
{$asm}
[DISABLE]
10
"PLAYER"
00D060
1
96
"Claw Mashine _coins"
00D060
4 Bytes
[mashine_base]+28
95
"maxCoins"
00D060
4 Bytes
[mashine_base]+24
94
"startingCoins"
00D060
4 Bytes
[mashine_base]+20
116
"_capacityMultiplier"
0
00D060
Float
[pitems_base]+100
111
"Power Up _remaining"
00D060
Float
[pwrmgr_base]+40
129
"[P-UP] Hologram _active"
00D060
Byte
1836D20E780+20
48
38
10
130
"[P-UP] Hologram _compassActive"
00D060
Byte
1836D20E780+20
49
38
10
20
"SCRIPTS"
00A5FF
1
70
"Claw Mashine"
00A5FF
Auto Assembler Script
{
==============================================
Header Changer by SeryogaSK
----------------------------------------------
Process : ToysCo.exe
Game Title : Toys Co
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
aobscanmodule(mashine_coinser,GameAssembly.dll,48 8B 46 20 48 85 C0 0F 84 ** ** ** ** 8B 48 28 EB **) // should be unique
alloc(newmem,$1000,mashine_coinser)
alloc(mashine_base,8)
alloc(mashinectr_base,8)
label(code)
label(return)
newmem:
mov [mashine_base],rax
mov [mashinectr_base],rbp
code:
mov ecx,[rax+28]
jmp GameAssembly.dll+4994B2
jmp return
mashine_coinser+0D:
jmp newmem
return:
registersymbol(mashine_coinser mashine_base mashinectr_base)
[DISABLE]
mashine_coinser+0D:
db 8B 48 28 EB 02
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+4994AB
GameAssembly.dll+499488: E8 53 7C F3 FF - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+49948D: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+499490: 33 D2 - xor edx,edx
GameAssembly.dll+499492: 49 8B CE - mov rcx,r14
GameAssembly.dll+499495: E8 16 74 0C 02 - call UnityEngine.Object.op_Inequality
GameAssembly.dll+49949A: 84 C0 - test al,al
GameAssembly.dll+49949C: 74 12 - je GameAssembly.dll+4994B0
GameAssembly.dll+49949E: 48 8B 46 20 - mov rax,[rsi+20]
GameAssembly.dll+4994A2: 48 85 C0 - test rax,rax
GameAssembly.dll+4994A5: 0F 84 36 01 00 00 - je GameAssembly.dll+4995E1
// ---------- INJECTING HERE ----------
GameAssembly.dll+4994AB: 8B 48 28 - mov ecx,[rax+28]
// ---------- DONE INJECTING ----------
GameAssembly.dll+4994AE: EB 02 - jmp GameAssembly.dll+4994B2
GameAssembly.dll+4994B0: 33 C9 - xor ecx,ecx
GameAssembly.dll+4994B2: 4C 8B 35 BF BC 07 03 - mov r14,[GameAssembly.dll+3515178]
GameAssembly.dll+4994B9: 89 4C 24 40 - mov [rsp+40],ecx
GameAssembly.dll+4994BD: 48 8D 54 24 40 - lea rdx,[rsp+40]
GameAssembly.dll+4994C2: 48 8B 0D 2F C8 28 03 - mov rcx,[GameAssembly.dll+3725CF8]
GameAssembly.dll+4994C9: E8 12 6C F3 FF - call GameAssembly.il2cpp_value_box
GameAssembly.dll+4994CE: 48 8B F0 - mov rsi,rax
GameAssembly.dll+4994D1: 48 85 DB - test rbx,rbx
GameAssembly.dll+4994D4: 0F 84 33 01 00 00 - je GameAssembly.dll+49960D
}
114
"Capacity"
00A5FF
Auto Assembler Script
{
==============================================
Header Changer by SeryogaSK
----------------------------------------------
Process : ToysCo.exe
Game Title : ToysCo
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
aobscanmodule(ply_caritm,GameAssembly.dll,F3 0F 59 87 00 01 00 00 E8 ** ** ** ** 3B C3 0F 4C C3) // should be unique
alloc(newmem,$1000,ply_caritm)
alloc(pitems_base,8)
registersymbol(pitems_base)
label(code)
label(return)
newmem:
mov [pitems_base],rdi
code:
mulss xmm0,[rdi+00000100]
jmp return
ply_caritm:
jmp newmem
nop 3
return:
registersymbol(ply_caritm,pitems_base)
[DISABLE]
ply_caritm:
db F3 0F 59 87 00 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+5168A7
GameAssembly.dll+516887: 8B 5B 4C - mov ebx,[rbx+4C]
GameAssembly.dll+51688A: 33 D2 - xor edx,edx
GameAssembly.dll+51688C: E8 5F 19 FB FF - call GameAssembly.dll+4C81F0
GameAssembly.dll+516891: 8D 0C 18 - lea ecx,[rax+rbx]
GameAssembly.dll+516894: BB 01 00 00 00 - mov ebx,00000001
GameAssembly.dll+516899: 3B CB - cmp ecx,ebx
GameAssembly.dll+51689B: 0F 4C CB - cmovl ecx,ebx
GameAssembly.dll+51689E: 66 0F 6E C1 - movd xmm0,ecx
GameAssembly.dll+5168A2: 33 D2 - xor edx,edx
GameAssembly.dll+5168A4: 0F 5B C0 - cvtdq2ps xmm0,xmm0
// ---------- INJECTING HERE ----------
GameAssembly.dll+5168A7: F3 0F 59 87 00 01 00 00 - mulss xmm0,[rdi+00000100]
// ---------- DONE INJECTING ----------
GameAssembly.dll+5168AF: E8 3C 19 FB FF - call GameAssembly.dll+4C81F0
GameAssembly.dll+5168B4: 3B C3 - cmp eax,ebx
GameAssembly.dll+5168B6: 0F 4C C3 - cmovl eax,ebx
GameAssembly.dll+5168B9: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+5168BE: 48 83 C4 20 - add rsp,20
GameAssembly.dll+5168C2: 5F - pop rdi
GameAssembly.dll+5168C3: C3 - ret
GameAssembly.dll+5168C4: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+5168C9: 33 C0 - xor eax,eax
GameAssembly.dll+5168CB: 48 83 C4 20 - add rsp,20
}
100
"Power Up Manger"
00A5FF
Auto Assembler Script
{
==============================================
Header Changer by SeryogaSK
----------------------------------------------
Process : ToysCo.exe
Game Title : ToysCo
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
aobscanmodule(ply_pwrmagr,GameAssembly.dll,F3 0F 10 73 40 33 C9 E8 ** ** ** ** F3 0F 5C F0 0F 57 C0) // should be unique
alloc(newmem,$1000,ply_pwrmagr)
alloc(pwrmgr_base,8)
label(code)
label(return)
newmem:
mov [pwrmgr_base],rbx
code:
movss xmm6,[rbx+40]
xor ecx,ecx
call UnityEngine.Time.get_deltaTime
subss xmm6,xmm0
jmp return
ply_pwrmagr:
jmp far newmem
nop 2
return:
registersymbol(ply_pwrmagr pwrmgr_base)
[DISABLE]
ply_pwrmagr:
db F3 0F 10 73 40 33 C9 E8 A6 EC 06 02 F3 0F 5C F0
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+4FA67E
GameAssembly.dll+4FA65C: 75 05 - jne GameAssembly.dll+4FA663
GameAssembly.dll+4FA65E: E8 7D 6A ED FF - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+4FA663: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+4FA666: 33 D2 - xor edx,edx
GameAssembly.dll+4FA668: 48 8B CF - mov rcx,rdi
GameAssembly.dll+4FA66B: E8 B0 60 06 02 - call UnityEngine.Object.op_Equality
GameAssembly.dll+4FA670: 48 8B 7C 24 40 - mov rdi,[rsp+40]
GameAssembly.dll+4FA675: 84 C0 - test al,al
GameAssembly.dll+4FA677: 75 36 - jne GameAssembly.dll+4FA6AF
GameAssembly.dll+4FA679: 0F 29 74 24 20 - movaps [rsp+20],xmm6
// ---------- INJECTING HERE ----------
GameAssembly.dll+4FA67E: F3 0F 10 73 40 - movss xmm6,[rbx+40]
// ---------- DONE INJECTING ----------
GameAssembly.dll+4FA683: 33 C9 - xor ecx,ecx
GameAssembly.dll+4FA685: E8 A6 EC 06 02 - call UnityEngine.Time.get_deltaTime
GameAssembly.dll+4FA68A: F3 0F 5C F0 - subss xmm6,xmm0
GameAssembly.dll+4FA68E: 0F 57 C0 - xorps xmm0,xmm0
GameAssembly.dll+4FA691: F3 0F 11 73 40 - movss [rbx+40],xmm6
GameAssembly.dll+4FA696: 0F 2F C6 - comiss xmm0,xmm6
GameAssembly.dll+4FA699: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
GameAssembly.dll+4FA69E: 72 0F - jb GameAssembly.dll+4FA6AF
GameAssembly.dll+4FA6A0: 33 D2 - xor edx,edx
GameAssembly.dll+4FA6A2: 48 8B CB - mov rcx,rbx
}
122
"SkillPoints no dec"
00A5FF
Auto Assembler Script
{
==============================================
Header Changer by SeryogaSK
----------------------------------------------
Process : ToysCo.exe
Game Title : ToysCo
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
aobscanmodule(ply_skillpoints,GameAssembly.dll,2B 51 28 B8 00 00 00 00 0F 49 C2) // should be unique
alloc(newmem,$1000,ply_skillpoints)
label(code)
label(return)
newmem:
mov [rcx+28],#0
code:
sub edx,[rcx+28]
mov eax,00000000
jmp return
ply_skillpoints:
jmp newmem
nop 3
return:
registersymbol(ply_skillpoints)
[DISABLE]
ply_skillpoints:
db 2B 51 28 B8 00 00 00 00
unregistersymbol(ply_skillpoints)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+5529D3
GameAssembly.dll+5529C7: CC - int 3
GameAssembly.dll+5529C8: CC - int 3
GameAssembly.dll+5529C9: CC - int 3
GameAssembly.dll+5529CA: CC - int 3
GameAssembly.dll+5529CB: CC - int 3
GameAssembly.dll+5529CC: CC - int 3
GameAssembly.dll+5529CD: CC - int 3
GameAssembly.dll+5529CE: CC - int 3
GameAssembly.dll+5529CF: CC - int 3
ToyChaos.Core.GameProgress.get_AvailableSkillPoints: 8B 51 24 - mov edx,[rcx+24]
// ---------- INJECTING HERE ----------
GameAssembly.dll+5529D3: 2B 51 28 - sub edx,[rcx+28]
// ---------- DONE INJECTING ----------
GameAssembly.dll+5529D6: B8 00 00 00 00 - mov eax,00000000
GameAssembly.dll+5529DB: 0F 49 C2 - cmovns eax,edx
GameAssembly.dll+5529DE: C3 - ret
GameAssembly.dll+5529DF: CC - int 3
UnityEngine.Rendering.DebugFrameTiming.get_bottleneckHistorySize: 8B 41 20 - mov eax,[rcx+20]
GameAssembly.dll+5529E3: C3 - ret
GameAssembly.dll+5529E4: CC - int 3
GameAssembly.dll+5529E5: CC - int 3
GameAssembly.dll+5529E6: CC - int 3
GameAssembly.dll+5529E7: CC - int 3
}
127
"No Skill Cooldown"
00A5FF
Auto Assembler Script
{
==============================================
Header Changer by SeryogaSK
----------------------------------------------
Process : ToysCo.exe
Game Title : ToysCo
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
aobscanmodule(skill_durabilytista,GameAssembly.dll,48 98 F3 0F 10 44 81 20 48 83 C4 28 C3) // should be unique
alloc(newmem,$1000,skill_durabilytista)
label(code)
label(return)
newmem:
cmp [rcx+A0],1
//cmp [rcx+A4],1
//cmp [rcx+A8],1
//cmp [rcx+AC],1
jne code
mov [rcx+rax*4+20],(float)30
movss xmm0,[rcx+rax*4+20]
jmp return
code:
mov [rcx+rax*4+20],(float)0
movss xmm0,[rcx+rax*4+20]
jmp return
skill_durabilytista+02:
jmp newmem
nop
return:
registersymbol(skill_durabilytista)
[DISABLE]
skill_durabilytista+02:
db F3 0F 10 44 81 20
unregistersymbol(skill_durabilytista)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+839560
GameAssembly.dll+839548: FF C8 - dec eax
GameAssembly.dll+83954A: 3B D0 - cmp edx,eax
GameAssembly.dll+83954C: 7F 0B - jg GameAssembly.dll+839559
GameAssembly.dll+83954E: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+839551: 8B C2 - mov eax,edx
GameAssembly.dll+839553: 85 D2 - test edx,edx
GameAssembly.dll+839555: 41 0F 48 C0 - cmovs eax,r8d
GameAssembly.dll+839559: 3B 41 18 - cmp eax,[rcx+18]
GameAssembly.dll+83955C: 73 15 - jae GameAssembly.dll+839573
GameAssembly.dll+83955E: 48 98 - cdqe
// ---------- INJECTING HERE ----------
GameAssembly.dll+839560: F3 0F 10 44 81 20 - movss xmm0,[rcx+rax*4+20]
// ---------- DONE INJECTING ----------
GameAssembly.dll+839566: 48 83 C4 28 - add rsp,28
GameAssembly.dll+83956A: C3 - ret
GameAssembly.dll+83956B: 0F 28 C2 - movaps xmm0,xmm2
GameAssembly.dll+83956E: 48 83 C4 28 - add rsp,28
GameAssembly.dll+839572: C3 - ret
GameAssembly.dll+839573: E8 C8 7A B9 FF - call GameAssembly.il2cpp_method_get_class+A0
GameAssembly.dll+839578: CC - int 3
GameAssembly.dll+839579: CC - int 3
GameAssembly.dll+83957A: CC - int 3
GameAssembly.dll+83957B: CC - int 3
}
30
"GAMEPLAY"
00D7FF
1
73
"Claw Mashine"
00D7FF
1
74
"descendDuration"
00D7FF
Float
[mashinectr_base]+88
75
"closeDuration"
00D7FF
Float
[mashinectr_base]+8C
76
"grabHoldDuration"
00D7FF
Float
[mashinectr_base]+90
77
"ascendDuration"
00D7FF
Float
[mashinectr_base]+94
78
"toExitDuration"
00D7FF
Float
[mashinectr_base]+98
79
"openDuration"
00D7FF
Float
[mashinectr_base]+9C
80
"prizeFallDuration"
00D7FF
Float
[mashinectr_base]+A0
81
"prizeReleaseAt"
00D7FF
Float
[mashinectr_base]+A4
82
"returnHomeDuration"
00D7FF
Float
[mashinectr_base]+A8
83
"descendDepth"
00D7FF
Float
[mashinectr_base]+AC
84
"fingerOpenAngle"
00D7FF
Float
[mashinectr_base]+B0
85
"fingerClosedAngle"
00D7FF
Float
[mashinectr_base]+B4
86
"reEntryLockSeconds"
00D7FF
Float
[mashinectr_base]+C0
87
"coinCost"
00D7FF
4 Bytes
[mashinectr_base]+C4
88
"chuteBlocksGrab"
00D7FF
Byte
[mashinectr_base]+C8
89
"_state"
00D7FF
4 Bytes
[mashinectr_base]+E0
90
"_stateEnteredFrame"
00D7FF
4 Bytes
[mashinectr_base]+E4
91
"_exitQueued"
00D7FF
Byte
[mashinectr_base]+E8
92
"_reEntryLocked"
00D7FF
Byte
[mashinectr_base]+E9
93
"_winScreenHold"
00D7FF
Byte
[mashinectr_base]+EA
110
"Power Up Manager"
00D7FF
1
102
"throwPlaceEase"
00D7FF
Float
[pwrmgr_base]+38
64
103
"coinMultiplier"
00D7FF
4 Bytes
[pwrmgr_base]+38
60
104
"capacityMultiplier"
00D7FF
Float
[pwrmgr_base]+38
5C
105
"dashCooldown"
00D7FF
Float
[pwrmgr_base]+38
58
106
"dashDuration"
00D7FF
Float
[pwrmgr_base]+38
54
107
"dashDistance"
00D7FF
Float
[pwrmgr_base]+38
50
108
"boostedSpeed"
00D7FF
Float
[pwrmgr_base]+38
4C
109
"duration"
00D7FF
Float
[pwrmgr_base]+38
48
40
"DEBUG / DEVELOPER"
C080FF
1
71
"Coin Base"
1
0
C080FF
8 Bytes
mashine_base
72
"Claw Mashine Base"
1
0
C080FF
8 Bytes
mashinectr_base
101
"Power Up Manager Base"
1
0
C080FF
8 Bytes
pwrmgr_base
115
"Items Base"
1
0
C080FF
8 Bytes
pitems_base
50
"MISCELLANEOUS"
A0A0A0
1
60
"CHANGELOG & CREDITS"
A0A0A0
1
61
"v1.0.0 - Initial table"
A0A0A0
1
97
"--------------------------------------------- ----------------------------------------------"
1
SeryogaSK reusable Cheat Engine table template. Structure and metadata placeholders only; no game addresses or active cheats.
-- Cheat Table Decorator
function decorateSSKTable()
local mainForm = getMainForm()
-- Main Form Styling
mainForm.Caption = 'Toys Co. (Steam) - Enhanced Table [by SeryogaSK]'
getAutoAttachList().add("ToysCo.exe")
end
-- Execute when table loads
decorateSSKTable()