15
"Connect To Process"
FF0000
Auto Assembler Script
[ENABLE]
{$lua}
p_name = 'ReadyOrNot-Win64-Shipping.exe'
local autoAttachTimer = nil
local autoAttachTimerInterval = 1000
local autoAttachTimerTicks = 0
local autoAttachTimerTickMax = 5000
local function autoAttachTimer_tick(timer)
if autoAttachTimerTickMax > 0 and autoAttachTimerTicks >= autoAttachTimerTickMax then
timer.destroy()
end
if getProcessIDFromProcessName(p_name) ~= nil then
timer.destroy()
openProcess(p_name)
end
autoAttachTimerTicks = autoAttachTimerTicks + 1
end
autoAttachTimer = createTimer(getMainForm())
autoAttachTimer.Interval = autoAttachTimerInterval
autoAttachTimer.OnTimer = autoAttachTimer_tick
showMessage("Connected!")
{$asm}
[DISABLE]
26264
"Enable"
00FF00
Auto Assembler Script
{ Game : ReadyOrNot-Win64-Shipping.exe
Version:
Date : 2022-12-09
Author : NFC
}
[ENABLE]
aobscanmodule(get_base,ReadyOrNot-Win64-Shipping.exe,48 8B 01 FF 90 00 0B 00 00 84 C0 0F 85 18)
alloc(newmem,$1000,get_base)
alloc(base,8)
label(code)
label(return)
base:
dd 00
newmem:
mov [base],rsi
code:
mov rax,[rcx]
call qword ptr [rax+00000B00]
jmp return
get_base:
jmp newmem
nop 4
return:
registersymbol(get_base,base)
[DISABLE]
get_base:
db 48 8B 01 FF 90 00 0B 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: ReadyOrNot-Win64-Shipping.exe+14C3859
ReadyOrNot-Win64-Shipping.exe+14C3820: 40 56 - push rsi
ReadyOrNot-Win64-Shipping.exe+14C3822: 48 81 EC C0 00 00 00 - sub rsp,000000C0
ReadyOrNot-Win64-Shipping.exe+14C3829: 80 B9 F8 12 00 00 00 - cmp byte ptr [rcx+000012F8],00
ReadyOrNot-Win64-Shipping.exe+14C3830: 48 8B F1 - mov rsi,rcx
ReadyOrNot-Win64-Shipping.exe+14C3833: 44 0F 29 54 24 70 - movaps [rsp+70],xmm10
ReadyOrNot-Win64-Shipping.exe+14C3839: 44 0F 28 D1 - movaps xmm10,xmm1
ReadyOrNot-Win64-Shipping.exe+14C383D: F3 44 0F 11 91 68 23 00 00 - movss [rcx+00002368],xmm10
ReadyOrNot-Win64-Shipping.exe+14C3846: 0F 85 36 03 00 00 - jne ReadyOrNot-Win64-Shipping.exe+14C3B82
ReadyOrNot-Win64-Shipping.exe+14C384C: 80 B9 C0 1F 00 00 00 - cmp byte ptr [rcx+00001FC0],00
ReadyOrNot-Win64-Shipping.exe+14C3853: 0F 85 29 03 00 00 - jne ReadyOrNot-Win64-Shipping.exe+14C3B82
// ---------- INJECTING HERE ----------
ReadyOrNot-Win64-Shipping.exe+14C3859: 48 8B 01 - mov rax,[rcx]
// ---------- DONE INJECTING ----------
ReadyOrNot-Win64-Shipping.exe+14C385C: FF 90 00 0B 00 00 - call qword ptr [rax+00000B00]
ReadyOrNot-Win64-Shipping.exe+14C3862: 84 C0 - test al,al
ReadyOrNot-Win64-Shipping.exe+14C3864: 0F 85 18 03 00 00 - jne ReadyOrNot-Win64-Shipping.exe+14C3B82
ReadyOrNot-Win64-Shipping.exe+14C386A: 44 0F 29 8C 24 80 00 00 00 - movaps [rsp+00000080],xmm9
ReadyOrNot-Win64-Shipping.exe+14C3873: 45 0F 57 C9 - xorps xmm9,xmm9
ReadyOrNot-Win64-Shipping.exe+14C3877: 45 0F 2E D1 - ucomiss xmm10,xmm9
ReadyOrNot-Win64-Shipping.exe+14C387B: 0F 84 F8 02 00 00 - je ReadyOrNot-Win64-Shipping.exe+14C3B79
ReadyOrNot-Win64-Shipping.exe+14C3881: 48 8B CE - mov rcx,rsi
ReadyOrNot-Win64-Shipping.exe+14C3884: E8 B7 E8 1D 00 - call ReadyOrNot-Win64-Shipping.exe+16A2140
ReadyOrNot-Win64-Shipping.exe+14C3889: 48 85 C0 - test rax,rax
}
26206
"Inf Ammo"
0000FF
Auto Assembler Script
[ENABLE]
aobscanmodule(ammo,ReadyOrNot-Win64-Shipping.exe,66 42 89 04 82 48)
alloc(newmem,$1000,ammo)
label(code)
label(return)
newmem:
code:
//mov [rdx+r8*4],ax
jmp return
ammo:
jmp newmem
return:
registersymbol(ammo)
[DISABLE]
ammo:
db 66 42 89 04 82
unregistersymbol(ammo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ReadyOrNot-Win64-Shipping.exe+100A9BB
ReadyOrNot-Win64-Shipping.exe+100A991: 0F 8D 80 00 00 00 - jnl ReadyOrNot-Win64-Shipping.exe+100AA17
ReadyOrNot-Win64-Shipping.exe+100A997: 48 8B 91 B8 10 00 00 - mov rdx,[rcx+000010B8]
ReadyOrNot-Win64-Shipping.exe+100A99E: 4C 8B C0 - mov r8,rax
ReadyOrNot-Win64-Shipping.exe+100A9A1: 0F B7 04 82 - movzx eax,word ptr [rdx+rax*4]
ReadyOrNot-Win64-Shipping.exe+100A9A5: 66 0F 6E C8 - movd xmm1,eax
ReadyOrNot-Win64-Shipping.exe+100A9A9: 0F 5B C9 - cvtdq2ps xmm1,xmm1
ReadyOrNot-Win64-Shipping.exe+100A9AC: F3 0F 5C C8 - subss xmm1,xmm0
ReadyOrNot-Win64-Shipping.exe+100A9B0: 0F 57 C0 - xorps xmm0,xmm0
ReadyOrNot-Win64-Shipping.exe+100A9B3: F3 0F 5F C8 - maxss xmm1,xmm0
ReadyOrNot-Win64-Shipping.exe+100A9B7: F3 0F 2C C1 - cvttss2si eax,xmm1
// ---------- INJECTING HERE ----------
ReadyOrNot-Win64-Shipping.exe+100A9BB: 66 42 89 04 82 - mov [rdx+r8*4],ax
// ---------- DONE INJECTING ----------
ReadyOrNot-Win64-Shipping.exe+100A9C0: 48 63 81 D4 10 00 00 - movsxd rax,dword ptr [rcx+000010D4]
ReadyOrNot-Win64-Shipping.exe+100A9C7: 85 C0 - test eax,eax
ReadyOrNot-Win64-Shipping.exe+100A9C9: 78 15 - js ReadyOrNot-Win64-Shipping.exe+100A9E0
ReadyOrNot-Win64-Shipping.exe+100A9CB: 3B 81 D8 0A 00 00 - cmp eax,[rcx+00000AD8]
ReadyOrNot-Win64-Shipping.exe+100A9D1: 7D 0D - jnl ReadyOrNot-Win64-Shipping.exe+100A9E0
ReadyOrNot-Win64-Shipping.exe+100A9D3: 48 8B 91 D0 0A 00 00 - mov rdx,[rcx+00000AD0]
ReadyOrNot-Win64-Shipping.exe+100A9DA: 48 8B 14 C2 - mov rdx,[rdx+rax*8]
ReadyOrNot-Win64-Shipping.exe+100A9DE: EB 13 - jmp ReadyOrNot-Win64-Shipping.exe+100A9F3
ReadyOrNot-Win64-Shipping.exe+100A9E0: 83 B9 D8 0A 00 00 00 - cmp dword ptr [rcx+00000AD8],00
ReadyOrNot-Win64-Shipping.exe+100A9E7: 7E 0F - jle ReadyOrNot-Win64-Shipping.exe+100A9F8
}
26152
"Inf Glowstick"
008000
Auto Assembler Script
[ENABLE]
aobscanmodule(glowS,ReadyOrNot-Win64-Shipping.exe,F3 0F 11 83 E8 00 00 00 77)
alloc(newmem,$1000,glowS)
label(code)
label(return)
newmem:
code:
mov [rbx+000000E8],(float)10
jmp return
glowS:
jmp newmem
nop 3
return:
registersymbol(glowS)
[DISABLE]
glowS:
db F3 0F 11 83 E8 00 00 00
unregistersymbol(glowS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ReadyOrNot-Win64-Shipping.exe+1113E22
ReadyOrNot-Win64-Shipping.exe+1113DF5: F3 0F 11 81 00 01 00 00 - movss [rcx+00000100],xmm0
ReadyOrNot-Win64-Shipping.exe+1113DFD: E8 AE D2 23 00 - call ReadyOrNot-Win64-Shipping.exe+13510B0
ReadyOrNot-Win64-Shipping.exe+1113E02: 0F 2F C6 - comiss xmm0,xmm6
ReadyOrNot-Win64-Shipping.exe+1113E05: 0F B6 83 04 01 00 00 - movzx eax,byte ptr [rbx+00000104]
ReadyOrNot-Win64-Shipping.exe+1113E0C: 73 0D - jae ReadyOrNot-Win64-Shipping.exe+1113E1B
ReadyOrNot-Win64-Shipping.exe+1113E0E: 0F 57 C0 - xorps xmm0,xmm0
ReadyOrNot-Win64-Shipping.exe+1113E11: F3 0F 11 83 E8 00 00 00 - movss [rbx+000000E8],xmm0
ReadyOrNot-Win64-Shipping.exe+1113E19: EB 11 - jmp ReadyOrNot-Win64-Shipping.exe+1113E2C
ReadyOrNot-Win64-Shipping.exe+1113E1B: F3 0F 5D C7 - minss xmm0,xmm7
ReadyOrNot-Win64-Shipping.exe+1113E1F: 0F 2F C6 - comiss xmm0,xmm6
// ---------- INJECTING HERE ----------
ReadyOrNot-Win64-Shipping.exe+1113E22: F3 0F 11 83 E8 00 00 00 - movss [rbx+000000E8],xmm0
// ---------- DONE INJECTING ----------
ReadyOrNot-Win64-Shipping.exe+1113E2A: 77 32 - ja ReadyOrNot-Win64-Shipping.exe+1113E5E
ReadyOrNot-Win64-Shipping.exe+1113E2C: A8 08 - test al,08
ReadyOrNot-Win64-Shipping.exe+1113E2E: 75 7A - jne ReadyOrNot-Win64-Shipping.exe+1113EAA
ReadyOrNot-Win64-Shipping.exe+1113E30: 0F 2E 83 00 01 00 00 - ucomiss xmm0,[rbx+00000100]
ReadyOrNot-Win64-Shipping.exe+1113E37: 74 71 - je ReadyOrNot-Win64-Shipping.exe+1113EAA
ReadyOrNot-Win64-Shipping.exe+1113E39: 48 8D 8B D0 00 00 00 - lea rcx,[rbx+000000D0]
ReadyOrNot-Win64-Shipping.exe+1113E40: 33 D2 - xor edx,edx
ReadyOrNot-Win64-Shipping.exe+1113E42: E8 B9 42 77 FF - call ReadyOrNot-Win64-Shipping.exe+888100
ReadyOrNot-Win64-Shipping.exe+1113E47: 80 8B 04 01 00 00 08 - or byte ptr [rbx+00000104],08
ReadyOrNot-Win64-Shipping.exe+1113E4E: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
}
26182
"Movement"
400080
1
26256
"CrouchSpeed"
Auto Assembler Script
[ENABLE]
aobscanmodule(crspeed,ReadyOrNot-Win64-Shipping.exe,F3 0F 11 80 90 01 00 00 48 8B) // should be unique
alloc(newmem,$1000,crspeed)
label(code)
alloc(speedc,8)
label(return)
alloc(sflag,8)
sflag:
dd 01
speedc:
dd 00
newmem:
cmp [sflag],1
jne code
mov [speedc],(float)1000
mov [sflag],0
code:
push ebp
mov ebp,[speedc]
mov [rax+00000190],ebp
pop ebp
jmp return
crspeed:
jmp newmem
nop 3
return:
registersymbol(crspeed,speedc)
[DISABLE]
crspeed:
db F3 0F 11 80 90 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: ReadyOrNot-Win64-Shipping.exe+114FCD8
ReadyOrNot-Win64-Shipping.exe+114FC9B: 48 8B CE - mov rcx,rsi
ReadyOrNot-Win64-Shipping.exe+114FC9E: E8 CD 3D FF FF - call ReadyOrNot-Win64-Shipping.exe+1143A70
ReadyOrNot-Win64-Shipping.exe+114FCA3: F3 0F 59 86 88 1E 00 00 - mulss xmm0,[rsi+00001E88]
ReadyOrNot-Win64-Shipping.exe+114FCAB: 48 8B 86 88 02 00 00 - mov rax,[rsi+00000288]
ReadyOrNot-Win64-Shipping.exe+114FCB2: F3 0F 59 86 7C 1E 00 00 - mulss xmm0,[rsi+00001E7C]
ReadyOrNot-Win64-Shipping.exe+114FCBA: F3 41 0F 59 C2 - mulss xmm0,xmm10
ReadyOrNot-Win64-Shipping.exe+114FCBF: F3 0F 59 86 6C 1E 00 00 - mulss xmm0,[rsi+00001E6C]
ReadyOrNot-Win64-Shipping.exe+114FCC7: F3 0F 59 86 80 1E 00 00 - mulss xmm0,[rsi+00001E80]
ReadyOrNot-Win64-Shipping.exe+114FCCF: F3 41 0F 59 C4 - mulss xmm0,xmm12
ReadyOrNot-Win64-Shipping.exe+114FCD4: F3 0F 59 C6 - mulss xmm0,xmm6
// ---------- INJECTING HERE ----------
ReadyOrNot-Win64-Shipping.exe+114FCD8: F3 0F 11 80 90 01 00 00 - movss [rax+00000190],xmm0
// ---------- DONE INJECTING ----------
ReadyOrNot-Win64-Shipping.exe+114FCE0: 48 8B 86 88 02 00 00 - mov rax,[rsi+00000288]
ReadyOrNot-Win64-Shipping.exe+114FCE7: F3 0F 10 B8 8C 01 00 00 - movss xmm7,[rax+0000018C]
ReadyOrNot-Win64-Shipping.exe+114FCEF: 44 0F 2E EF - ucomiss xmm13,xmm7
ReadyOrNot-Win64-Shipping.exe+114FCF3: 74 24 - je ReadyOrNot-Win64-Shipping.exe+114FD19
ReadyOrNot-Win64-Shipping.exe+114FCF5: F3 0F 10 B0 90 01 00 00 - movss xmm6,[rax+00000190]
ReadyOrNot-Win64-Shipping.exe+114FCFD: 0F 28 CF - movaps xmm1,xmm7
ReadyOrNot-Win64-Shipping.exe+114FD00: 0F 28 D6 - movaps xmm2,xmm6
ReadyOrNot-Win64-Shipping.exe+114FD03: 48 8B CE - mov rcx,rsi
ReadyOrNot-Win64-Shipping.exe+114FD06: E8 E5 BD 2A 00 - call ReadyOrNot-Win64-Shipping.exe+13FBAF0
ReadyOrNot-Win64-Shipping.exe+114FD0B: 0F 28 D6 - movaps xmm2,xmm6
}
26257
"Speed"
0
Float
speedc
26157
"JumpMaxCount"
0
4 Bytes
[base]+344
26159
"MaxStepHeight"
0
Float
[base]+288
154
26160
"JumpZVelocity"
350:Default
0
Float
[base]+288
158
26161
"WalkableFloorZ"
0
Float
[base]+288
164
26162
"WalkableFloorAngle"
0
Float
[base]+288
160
26163
"MovementMode"
0
Byte
[base]+288
168
26165
"GroundFriction"
0
Float
[base]+288
16C
26170
"mm mode"
Auto Assembler Script
{ Game : ReadyOrNot-Win64-Shipping.exe
Version:
Date : 2022-04-17
Author : NFC
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,ReadyOrNot-Win64-Shipping.exe,80 BB 68 01 00 00 02 75 15) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
alloc(mode,8)
mode:
dd 01
newmem:
push rbp
mov rbp,[mode]
mov [rbx+168],rbp
pop rbp
code:
cmp byte ptr [rbx+00000168],02
jmp return
INJECT:
jmp newmem
nop 2
return:
registersymbol(INJECT,mode)
[DISABLE]
INJECT:
db 80 BB 68 01 00 00 02
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: ReadyOrNot-Win64-Shipping.exe+2D6C261
ReadyOrNot-Win64-Shipping.exe+2D6C238: 8B 44 24 48 - mov eax,[rsp+48]
ReadyOrNot-Win64-Shipping.exe+2D6C23C: 89 44 24 68 - mov [rsp+68],eax
ReadyOrNot-Win64-Shipping.exe+2D6C240: 48 8B 03 - mov rax,[rbx]
ReadyOrNot-Win64-Shipping.exe+2D6C243: F2 0F 11 4C 24 60 - movsd [rsp+60],xmm1
ReadyOrNot-Win64-Shipping.exe+2D6C249: 0F 28 CE - movaps xmm1,xmm6
ReadyOrNot-Win64-Shipping.exe+2D6C24C: FF 90 28 07 00 00 - call qword ptr [rax+00000728]
ReadyOrNot-Win64-Shipping.exe+2D6C252: 48 8B 03 - mov rax,[rbx]
ReadyOrNot-Win64-Shipping.exe+2D6C255: 0F 28 CE - movaps xmm1,xmm6
ReadyOrNot-Win64-Shipping.exe+2D6C258: 48 8B CB - mov rcx,rbx
ReadyOrNot-Win64-Shipping.exe+2D6C25B: FF 90 38 07 00 00 - call qword ptr [rax+00000738]
// ---------- INJECTING HERE ----------
ReadyOrNot-Win64-Shipping.exe+2D6C261: 80 BB 68 01 00 00 02 - cmp byte ptr [rbx+00000168],02
// ---------- DONE INJECTING ----------
ReadyOrNot-Win64-Shipping.exe+2D6C268: 75 15 - jne ReadyOrNot-Win64-Shipping.exe+2D6C27F
ReadyOrNot-Win64-Shipping.exe+2D6C26A: F6 83 89 03 00 00 08 - test byte ptr [rbx+00000389],08
ReadyOrNot-Win64-Shipping.exe+2D6C271: 74 0C - je ReadyOrNot-Win64-Shipping.exe+2D6C27F
ReadyOrNot-Win64-Shipping.exe+2D6C273: 48 8B 03 - mov rax,[rbx]
ReadyOrNot-Win64-Shipping.exe+2D6C276: 48 8B CB - mov rcx,rbx
ReadyOrNot-Win64-Shipping.exe+2D6C279: FF 90 98 07 00 00 - call qword ptr [rax+00000798]
ReadyOrNot-Win64-Shipping.exe+2D6C27F: 48 8B 03 - mov rax,[rbx]
ReadyOrNot-Win64-Shipping.exe+2D6C282: 48 8B CB - mov rcx,rbx
ReadyOrNot-Win64-Shipping.exe+2D6C285: FF 90 60 06 00 00 - call qword ptr [rax+00000660]
ReadyOrNot-Win64-Shipping.exe+2D6C28B: 48 8B 03 - mov rax,[rbx]
}
26171
"No description"
0
4 Bytes
mode
26207
"Velocity.X"
0
Float
[base]+288
C4
26208
"Velocity.Y"
0
Float
[base]+288
C8
26209
"Velocity.Z"
0
Float
[base]+288
CC
26210
"MaxWalkSpeed"
0
Float
[base]+288
18C
26211
"MaxWalkSpeedCrouched"
0
Float
[base]+288
190
26212
"MaxSwimSpeed"
0
Float
[base]+288
194
26213
"MaxFlySpeed"
0
Float
[base]+288
198
26214
"AirControl"
0
Float
[base]+288
1C4
26183
"Misc"
FF8080
1
26218
"Mass"
0
Float
[base]+288
208
26229
"Health"
D7D700
1
26222
"Health (Main)"
Float
[base]+578
E8
26228
"Head.Health"
Float
[base]+578
244
26224
"RightLeg.Health"
Float
[base]+578
174
26225
"LeftLeg.Health"
Float
[base]+578
1A8
26226
"RightArm.Health"
Float
[base]+578
1DC
26227
"LeftArm.Health"
Float
[base]+578
210
26230
"MaxDeathHits"
4 Bytes
[base]+7C0
26231
"TimeDowned"
Float
[base]+9BC
22
"x10 Gamespeed"
53EAFF
Auto Assembler Script
[Enable]
LUACALL(speedhack_setSpeed(10.0))
[Disable]
LUACALL(speedhack_setSpeed(1.0))
26200
"PBase"
0
C0C0C0
4 Bytes
[base]
26232
"esp"
808080
1
26233
"HeadBones"
1
8 Bytes
[base]+A40
26234
"UpperBody"
1
8 Bytes
[base]+A50
26235
"LowerBody"
1
8 Bytes
[base]+A70
26236
"R_Leg"
1
8 Bytes
[base]+A80
26237
"L_Leg"
1
8 Bytes
[base]+A90
26238
"L_Foot"
1
8 Bytes
[base]+AA0
26239
"R_Foot"
1
8 Bytes
[base]+AB0
26240
"L_Arm"
1
8 Bytes
[base]+AC0
26241
"R_Arm"
1
8 Bytes
[base]+AD0
26242
"L_Hand"
1
8 Bytes
[base]+AE0
26243
"R_Hand"
1
8 Bytes
[base]+AF0
26258
"FieldOfView"
Float
[base]+1368
1F8
26259
"OrthoWidth"
Float
[base]+1368
1FC
26260
"AspectRatio"
Float
[base]+1368
208
26261
"ProjectionMode"
Byte
[base]+1368
20D
26268
"Noclip (test)"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('[[base]+288]+168',5)
writeByte('[[base]+288]+388',28)
writeByte('[base]+5C',0)
[DISABLE]
writeByte('[[base]+288]+168',1)
writeByte('[[base]+288]+388',96)
writeByte('[base]+5C',137)
26269
"FlySpeed"
Float
[pbase]+288
198
26265
"MovementMode"
Byte
[base]+288
168
26266
"bCheatFlying[8]"
Byte
[base]+288
388
26267
"bActorEnableCollision[8]"
Byte
[base]+5C
0
"Compact UI Cheat engine"
808080
Auto Assembler Script
[ENABLE]
luacall(function cycleFullCompact(sender,force); local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full view Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu(); if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
luacall(cycleFullCompact(nil,false))
health_ptr
228E5190000
Temp
2D7B7C70000