32
"Enable"
Auto Assembler Script
{ Game : theHunterCotW_F.exe
Version:
Date : 2022-12-10
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(get_player_pointer,theHunterCotW_F.exe,48 8B CD 0F 29 7C 24 30) // should be unique
alloc(gppmem,$1000,get_player_pointer)
label(gpp_exit pl_ptr)
registersymbol(get_player_pointer pl_ptr)
gppmem:
mov [pl_ptr+0],rdi
mov rcx,rbp
movaps [rsp+30],xmm7
jmp gpp_exit
pl_ptr:
dq deadbeef
align 8,c3
get_player_pointer:
jmp gppmem
nop 3
gpp_exit:
registersymbol(get_player_pointer)
[DISABLE]
get_player_pointer:
db 48 8B CD 0F 29 7C 24 30
unregistersymbol(get_player_pointer)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: theHunterCotW_F.exe+A69475
theHunterCotW_F.exe+A6943C: 0F 84 C0 01 00 00 - je theHunterCotW_F.exe+A69602
theHunterCotW_F.exe+A69442: 8B 83 08 03 00 00 - mov eax,[rbx+00000308]
theHunterCotW_F.exe+A69448: 25 8F 00 00 00 - and eax,0000008F
theHunterCotW_F.exe+A6944D: 83 F8 02 - cmp eax,02
theHunterCotW_F.exe+A69450: 0F 82 AC 01 00 00 - jb theHunterCotW_F.exe+A69602
theHunterCotW_F.exe+A69456: 48 89 6C 24 50 - mov [rsp+50],rbp
theHunterCotW_F.exe+A6945B: 48 8D 15 56 3F F4 00 - lea rdx,[theHunterCotW_F.exe+19AD3B8]
theHunterCotW_F.exe+A69462: 48 89 7C 24 60 - mov [rsp+60],rdi
theHunterCotW_F.exe+A69467: 48 8D AB F0 02 00 00 - lea rbp,[rbx+000002F0]
theHunterCotW_F.exe+A6946E: 48 8B 3D 0B EE 7B 01 - mov rdi,[theHunterCotW_F.exe+2228280]
// ---------- INJECTING HERE ----------
theHunterCotW_F.exe+A69475: 48 8B CD - mov rcx,rbp
// ---------- DONE INJECTING ----------
theHunterCotW_F.exe+A69478: 0F 29 7C 24 30 - movaps [rsp+30],xmm7
theHunterCotW_F.exe+A6947D: 44 8B 87 F8 02 00 00 - mov r8d,[rdi+000002F8]
theHunterCotW_F.exe+A69484: E8 F7 11 FF FF - call theHunterCotW_F.exe+A5A680
theHunterCotW_F.exe+A69489: 44 8B 87 88 03 00 00 - mov r8d,[rdi+00000388]
theHunterCotW_F.exe+A69490: 48 8D 15 31 3F F4 00 - lea rdx,[theHunterCotW_F.exe+19AD3C8]
theHunterCotW_F.exe+A69497: 48 8B CD - mov rcx,rbp
theHunterCotW_F.exe+A6949A: E8 E1 11 FF FF - call theHunterCotW_F.exe+A5A680
theHunterCotW_F.exe+A6949F: 44 8B 87 F4 02 00 00 - mov r8d,[rdi+000002F4]
theHunterCotW_F.exe+A694A6: 48 8D 15 3B E6 F3 00 - lea rdx,[theHunterCotW_F.exe+19A7AE8]
theHunterCotW_F.exe+A694AD: 48 8B CD - mov rcx,rbp
}
34
"Pointers"
1
33
"Player Base"
0
Binary
0
1
0
pl_ptr
0
39
"Level"
0
4 Bytes
+2f4
36
"XP"
0
4 Bytes
+2f8
37
"Skill Points"
0
4 Bytes
+2fC
38
"Perk Points"
0
4 Bytes
+300
31
"Money"
0
4 Bytes
+388
35
"Scripts"
1
242
"No Skill Cooldown"
Auto Assembler Script
{ Game : theHunterCotW_F.exe
Version:
Date : 2022-07-09
Author : Seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(skill_timers,theHunterCotW_F.exe,F3 0F 11 83 F0 00 00 00 8B)
skill_timers+3:
db bb
registersymbol(skill_timers)
[DISABLE]
skill_timers+3:
db 83
unregistersymbol(skill_timers)
1
"Infinite Consumables"
Auto Assembler Script
{ Game : theHunterCotW_F.exe
Version:
Date : 2022-12-11
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(infinite_ammo,theHunterCotW_F.exe,41 2B C8 45 39 87 C8 10 00 00) // should be unique
infinite_ammo:
nop 3
registersymbol(infinite_ammo)
[DISABLE]
infinite_ammo:
db 41 2B C8
unregistersymbol(*)
{
// ORIGINAL CODE - INJECTION POINT: theHunterCotW_F.exe+8E0B6F
theHunterCotW_F.exe+8E0B3E: 83 F8 FF - cmp eax,-01
theHunterCotW_F.exe+8E0B41: 74 EF - je theHunterCotW_F.exe+8E0B32
theHunterCotW_F.exe+8E0B43: C6 81 E9 A1 00 00 01 - mov byte ptr [rcx+0000A1E9],01
theHunterCotW_F.exe+8E0B4A: 48 89 6C 24 48 - mov [rsp+48],rbp
theHunterCotW_F.exe+8E0B4F: 48 8D A9 C0 02 00 00 - lea rbp,[rcx+000002C0]
theHunterCotW_F.exe+8E0B56: 4C 89 7C 24 58 - mov [rsp+58],r15
theHunterCotW_F.exe+8E0B5B: 48 98 - cdqe
theHunterCotW_F.exe+8E0B5D: 4C 8D 3C 85 00 00 00 00 - lea r15,[rax*4+00000000]
theHunterCotW_F.exe+8E0B65: 4C 03 FD - add r15,rbp
theHunterCotW_F.exe+8E0B68: 41 8B 8F C8 10 00 00 - mov ecx,[r15+000010C8]
// ---------- INJECTING HERE ----------
theHunterCotW_F.exe+8E0B6F: 41 2B C8 - sub ecx,r8d
// ---------- DONE INJECTING ----------
theHunterCotW_F.exe+8E0B72: 45 39 87 C8 10 00 00 - cmp [r15+000010C8],r8d
theHunterCotW_F.exe+8E0B79: 41 0F 42 CC - cmovb ecx,r12d
theHunterCotW_F.exe+8E0B7D: 41 89 8F C8 10 00 00 - mov [r15+000010C8],ecx
theHunterCotW_F.exe+8E0B84: 85 C9 - test ecx,ecx
theHunterCotW_F.exe+8E0B86: 0F 85 9B 00 00 00 - jne theHunterCotW_F.exe+8E0C27
theHunterCotW_F.exe+8E0B8C: 48 89 5C 24 40 - mov [rsp+40],rbx
theHunterCotW_F.exe+8E0B91: 48 8D 9D D8 24 00 00 - lea rbx,[rbp+000024D8]
theHunterCotW_F.exe+8E0B98: 48 89 74 24 50 - mov [rsp+50],rsi
theHunterCotW_F.exe+8E0B9D: 8D 71 10 - lea esi,[rcx+10]
theHunterCotW_F.exe+8E0BA0: 48 8B D3 - mov rdx,rbx
}
247
"Earn Passive XP and Cash"
Auto Assembler Script
{ Game : theHunterCotW_F.exe
Version:
Date : 2022-12-11
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(gibs_me_xp,theHunterCotW_F.exe,44 8B 87 F8 02 00 00) // should be unique
alloc(gmxmem,$1000,gibs_me_xp)
label(gmx_exit)
registersymbol(gibs_me_xp)
gmxmem:
inc [rdi+000002F8]
inc [rdi+00000388]
mov r8d,[rdi+000002F8]
jmp gmx_exit
gibs_me_xp:
jmp gmxmem
nop 2
gmx_exit:
[DISABLE]
gibs_me_xp:
db 44 8B 87 F8 02 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: theHunterCotW_F.exe+A6947D
theHunterCotW_F.exe+A69448: 25 8F 00 00 00 - and eax,0000008F
theHunterCotW_F.exe+A6944D: 83 F8 02 - cmp eax,02
theHunterCotW_F.exe+A69450: 0F 82 AC 01 00 00 - jb theHunterCotW_F.exe+A69602
theHunterCotW_F.exe+A69456: 48 89 6C 24 50 - mov [rsp+50],rbp
theHunterCotW_F.exe+A6945B: 48 8D 15 56 3F F4 00 - lea rdx,[theHunterCotW_F.exe+19AD3B8]
theHunterCotW_F.exe+A69462: 48 89 7C 24 60 - mov [rsp+60],rdi
theHunterCotW_F.exe+A69467: 48 8D AB F0 02 00 00 - lea rbp,[rbx+000002F0]
theHunterCotW_F.exe+A6946E: 48 8B 3D 0B EE 7B 01 - mov rdi,[theHunterCotW_F.exe+2228280]
get_player_pointer: E9 86 6B 56 FF - jmp 7FF694E10000
theHunterCotW_F.exe+A6947A: 0F 1F 00 - nop dword ptr [rax]
// ---------- INJECTING HERE ----------
theHunterCotW_F.exe+A6947D: 44 8B 87 F8 02 00 00 - mov r8d,[rdi+000002F8]
// ---------- DONE INJECTING ----------
theHunterCotW_F.exe+A69484: E8 F7 11 FF FF - call theHunterCotW_F.exe+A5A680
theHunterCotW_F.exe+A69489: 44 8B 87 88 03 00 00 - mov r8d,[rdi+00000388]
theHunterCotW_F.exe+A69490: 48 8D 15 31 3F F4 00 - lea rdx,[theHunterCotW_F.exe+19AD3C8]
theHunterCotW_F.exe+A69497: 48 8B CD - mov rcx,rbp
theHunterCotW_F.exe+A6949A: E8 E1 11 FF FF - call theHunterCotW_F.exe+A5A680
theHunterCotW_F.exe+A6949F: 44 8B 87 F4 02 00 00 - mov r8d,[rdi+000002F4]
theHunterCotW_F.exe+A694A6: 48 8D 15 3B E6 F3 00 - lea rdx,[theHunterCotW_F.exe+19A7AE8]
theHunterCotW_F.exe+A694AD: 48 8B CD - mov rcx,rbp
theHunterCotW_F.exe+A694B0: E8 CB 11 FF FF - call theHunterCotW_F.exe+A5A680
theHunterCotW_F.exe+A694B5: 41 B8 FF FF FF FF - mov r8d,FFFFFFFF
}
"theHunterCotW_F.exe"+568960
"theHunterCotW_F.exe"+728FB9