5
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "Shadow of Mordor"
local gameProcess = "ShadowOfMordor.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2022 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF. All other sources are allowed with permission.")
else
end
[DISABLE]
6
"[POINTERS]"
Auto Assembler Script
[ENABLE]
define(SOM_Player,ShadowOfMordor.exe+1988AD8)
define(SOM_Stats,ShadowOfMordor.exe+18F1228)
define(SOM_Data,ShadowofMordor.exe+18F1450)
registersymbol(SOM_Player)
registersymbol(SOM_Stats)
registersymbol(SOM_Data)
[DISABLE]
unregistersymbol(SOM_Player)
unregistersymbol(SOM_Stats)
unregistersymbol(SOM_Data)
85
"Data"
1
84
"Uruk Max Level"
0
2 Bytes
SOM_Data
AC
8
2B0
10
60
130
B08
0
6C58
99
"Level Gain (Uruk)"
1
111
"Captain Kill"
2 Bytes
"ShadowOfMordor.exe"+018F8C50
28
10
1E0
40
E8
20
"Player"
1
10
"Health"
0
Float
SOM_PLAYER
164
0
12
"Max"
0
Float
SOM_PLAYER
160
0
35
"Level"
0
2 Bytes
SOM_Player
4E8
20
20
C0
0
9
"Experience"
0
2 Bytes
SOM_Player
4EC
20
20
C0
0
80
"Power Tier"
0
2 Bytes
SOM_Player
4F0
20
20
C0
0
88
"Power Experience"
0
2 Bytes
SOM_Player
4F4
20
20
C0
0
32
"Arrows"
0
4 Bytes
SOM_Player
50
1C0
20
20
C0
0
72
"Max"
0
4 Bytes
SOM_Player
4C
1C0
20
20
C0
0
13
"Focus"
0
Float
SOM_Player
54
1C0
20
20
C0
0
33
"Max"
0
Float
SOM_Player
48
1C0
20
20
C0
0
34
"Combo"
0
2 Bytes
SOM_Player
C4
1F0
20
20
C0
0
116
"Execution Combo"
0
2 Bytes
SOM_Player
C6
1F0
20
20
C0
0
14
"Execution (Hits Needed)"
0
2 Bytes
SOM_Player
C8
1F0
20
20
C0
0
88237
"Ability Flags"
1
88251
"Shadow of Acharn"
0
Binary
7
1
0
SOM_Player
13
268
48
230
910
0
88253
"Progress"
0
Byte
SOM_Player
1848
298
48
230
910
0
88239
"Storm of Urfael"
0
Binary
0
1
0
SOM_Player
3E
268
48
230
910
0
88235
"Progress"
0
Byte
SOM_Player
1858
298
48
230
910
0
88238
"Flame of Azkar"
0
Binary
3
1
0
SOM_Player
C1
268
48
230
910
0
88252
"Progress"
0
Byte
SOM_Player
17D8
298
48
230
910
0
19
"Statistics"
1
77
"Slot 1"
1
21
"Mirian"
0
4 Bytes
SOM_Stats
2B8
298
E8
420
78
78
"Slot 2"
1
79
"Mirian"
0
4 Bytes
SOM_Stats
2D8
298
E8
420
78
22
"[SCRIPTS]"
1
25
"Get Highlighted Uruk"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-05
Author : Marcus101RR
Get Selected Uruk
}
[ENABLE]
aobscanmodule(getUruk,ShadowOfMordor.exe,8B BB 40 03 00 00 0F 28) // should be unique
alloc(newmem,$64,getUruk)
label(code)
label(return)
label(gUruk)
registersymbol(gUruk)
newmem:
code:
mov [gUruk],rbx
mov edi,[rbx+00000340]
jmp return
gUruk:
dq 0
getUruk:
jmp newmem
nop
return:
registersymbol(getUruk)
[DISABLE]
getUruk:
db 8B BB 40 03 00 00
unregistersymbol(getUruk)
dealloc(newmem)
unregistersymbol(gUruk)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+587A03
ShadowOfMordor.exe+5879DF: 48 85 C0 - test rax,rax
ShadowOfMordor.exe+5879E2: 74 14 - je ShadowOfMordor.exe+5879F8
ShadowOfMordor.exe+5879E4: 48 8B 88 20 04 00 00 - mov rcx,[rax+00000420]
ShadowOfMordor.exe+5879EB: 48 85 C9 - test rcx,rcx
ShadowOfMordor.exe+5879EE: 74 08 - je ShadowOfMordor.exe+5879F8
ShadowOfMordor.exe+5879F0: E8 4B 18 E9 FF - call ShadowOfMordor.exe+419240
ShadowOfMordor.exe+5879F5: 0F 28 F0 - movaps xmm6,xmm0
ShadowOfMordor.exe+5879F8: 0F 28 CE - movaps xmm1,xmm6
ShadowOfMordor.exe+5879FB: 48 8B CB - mov rcx,rbx
ShadowOfMordor.exe+5879FE: E8 FD 8F 2D 00 - call ShadowOfMordor.exe+860A00
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+587A03: 8B BB 40 03 00 00 - mov edi,[rbx+00000340]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+587A09: 0F 28 B4 24 A0 00 00 00 - movaps xmm6,[rsp+000000A0]
ShadowOfMordor.exe+587A11: FF C7 - inc edi
ShadowOfMordor.exe+587A13: 48 8B F0 - mov rsi,rax
ShadowOfMordor.exe+587A16: 48 8D 4C 24 30 - lea rcx,[rsp+30]
ShadowOfMordor.exe+587A1B: 48 8B D5 - mov rdx,rbp
ShadowOfMordor.exe+587A1E: E8 6D B2 F5 FF - call ShadowOfMordor.exe+4E2C90
ShadowOfMordor.exe+587A23: 44 8B CF - mov r9d,edi
ShadowOfMordor.exe+587A26: 4C 8B C6 - mov r8,rsi
ShadowOfMordor.exe+587A29: 48 8B D3 - mov rdx,rbx
ShadowOfMordor.exe+587A2C: 48 8B C8 - mov rcx,rax
}
26
"Level"
0
4 Bytes
gUruk
340
97
"Level"
0
4 Bytes
gUruk
340
39
"Kills"
0
4 Bytes
gUruk
348
27
"Flags"
0
4 Bytes
gUruk
3A4
47
"Flags 2"
0
4 Bytes
gUruk
3A8
40
"??"
0
Binary
1
1
0
gUruk
3A4
46
"Weakness Exploited"
0
Binary
2
1
0
gUruk
3A4
43
"Weakness Exploited"
0
Binary
4
1
0
gUruk
3A4
45
"??"
0
Binary
6
1
0
gUruk
3A4
71
"Discovered (Permanent)"
0
Binary
7
1
0
gUruk
3A4
114
"Death Threat"
0
Binary
4
1
0
gUruk
3A5
44
"Strength Exploited"
0
Binary
5
1
0
gUruk
3A5
112
"Death Threat (?)"
0
Binary
3
1
0
gUruk
3A6
113
"Death Threat (?)"
0
Binary
4
1
0
gUruk
3A6
42
"Revenge Target"
0
Binary
2
1
0
gUruk
3A7
41
"Encountered"
0
Binary
6
1
0
gUruk
3A6
31
"Discovered"
0
Binary
0
1
0
gUruk
3A9
48
"Strengths & Weakness"
0
Binary
4
1
0
gUruk
3A9
28
"??"
0
Binary
5
1
0
gUruk
3A9
51
"??"
0
Binary
6
1
0
gUruk
3A9
29
"??"
0
Binary
0
1
0
gUruk
3AA
30
"??"
0
Binary
1
1
0
gUruk
3AA
52
"Get Marked/Selected Uruk"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-06
Author : Marcus101RR
Selected Uruk
}
[ENABLE]
aobscanmodule(getSUruk,ShadowOfMordor.exe,F6 81 A9 03 00 00 01) // should be unique
alloc(newmem,$64,getSUruk)
label(code)
label(return)
label(gSUruk)
registersymbol(gSUruk)
newmem:
code:
mov [gSUruk],rcx
test byte ptr [rcx+000003A9],01
jmp return
gSUruk:
dq 0
getSUruk:
jmp newmem
nop 2
return:
registersymbol(getSUruk)
[DISABLE]
getSUruk:
db F6 81 A9 03 00 00 01
unregistersymbol(getSUruk)
dealloc(newmem)
unregistersymbol(gSUruk)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+85E326
ShadowOfMordor.exe+85E311: C3 - ret
ShadowOfMordor.exe+85E312: 48 8B 86 80 01 00 00 - mov rax,[rsi+00000180]
ShadowOfMordor.exe+85E319: EB E2 - jmp ShadowOfMordor.exe+85E2FD
ShadowOfMordor.exe+85E31B: CC - int 3
ShadowOfMordor.exe+85E31C: CC - int 3
ShadowOfMordor.exe+85E31D: CC - int 3
ShadowOfMordor.exe+85E31E: CC - int 3
ShadowOfMordor.exe+85E31F: CC - int 3
ShadowOfMordor.exe+85E320: 40 53 - push rbx
ShadowOfMordor.exe+85E322: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+85E326: F6 81 A9 03 00 00 01 - test byte ptr [rcx+000003A9],01
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+85E32D: 48 8B D9 - mov rbx,rcx
ShadowOfMordor.exe+85E330: 75 08 - jne ShadowOfMordor.exe+85E33A
ShadowOfMordor.exe+85E332: 33 C0 - xor eax,eax
ShadowOfMordor.exe+85E334: 48 83 C4 20 - add rsp,20
ShadowOfMordor.exe+85E338: 5B - pop rbx
ShadowOfMordor.exe+85E339: C3 - ret
ShadowOfMordor.exe+85E33A: F6 81 A4 03 00 00 04 - test byte ptr [rcx+000003A4],04
ShadowOfMordor.exe+85E341: 75 EF - jne ShadowOfMordor.exe+85E332
ShadowOfMordor.exe+85E343: 48 83 79 40 00 - cmp qword ptr [rcx+40],00
ShadowOfMordor.exe+85E348: 74 36 - je ShadowOfMordor.exe+85E380
}
53
"Level"
0
4 Bytes
gSUruk
340
54
"Kills"
0
4 Bytes
gSUruk
348
55
"Flags"
0
4 Bytes
gSUruk
3A4
56
"Flags 2"
0
4 Bytes
gSUruk
3A8
57
"??"
0
Binary
1
1
0
gSUruk
3A4
58
"Weakness Exploited"
0
Binary
2
1
0
gSUruk
3A4
59
"Weakness Exploited"
0
Binary
4
1
0
gSUruk
3A4
60
"??"
0
Binary
6
1
0
gSUruk
3A4
70
"Discovered (Permanent)"
0
Binary
7
1
0
gSUruk
3A4
61
"Death Threat"
0
Binary
4
1
0
gSUruk
3A5
73
"Strength Exploited"
0
Binary
5
1
0
gSUruk
3A5
63
"??"
0
Binary
4
1
0
gSUruk
3A6
75
"??"
0
Binary
3
1
0
gSUruk
3A6
74
"Encountered"
0
Binary
6
1
0
gSUruk
3A6
62
"Revenge Target"
0
Binary
2
1
0
gSUruk
3A7
64
"Discovered"
0
Binary
0
1
0
gSUruk
3A9
65
"Strengths & Weakness"
0
Binary
4
1
0
gSUruk
3A9
66
"??"
0
Binary
5
1
0
gSUruk
3A9
67
"??"
0
Binary
6
1
0
gSUruk
3A9
68
"??"
0
Binary
0
1
0
gSUruk
3AA
69
"??"
0
Binary
1
1
0
gSUruk
3AA
93
"Rune Drop"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-26
Author : Marcus101RR
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getRune,ShadowOfMordor.exe,48 8B 9C 24 80 00 00 00 41 8B C5) // should be unique
alloc(newmem,$64,getRune)
label(code)
label(return)
newmem:
code:
mov rbx,[rsp+00000080]
lea rdx,[rdi+24]
mov [rdx],(int)30 //Enemy Level
mov [rdx+08],0 //for Vengeance
mov [rdx+10],0 //for Death Threat
mov [rdx+18],0 //for Warchief
mov [rdx+20],0 //for Fear/Hate Exploited
mov [rdx+28],0 //for Knowing Weakness
jmp return
getRune:
jmp newmem
nop 3
return:
registersymbol(getRune)
[DISABLE]
getRune:
db 48 8B 9C 24 80 00 00 00
unregistersymbol(getRune)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+9150E5
ShadowOfMordor.exe+9150BC: 75 E5 - jne ShadowOfMordor.exe+9150A3
ShadowOfMordor.exe+9150BE: 42 89 54 E7 20 - mov [rdi+r12*8+20],edx
ShadowOfMordor.exe+9150C3: EB 03 - jmp ShadowOfMordor.exe+9150C8
ShadowOfMordor.exe+9150C5: 45 33 ED - xor r13d,r13d
ShadowOfMordor.exe+9150C8: 83 7F 60 00 - cmp dword ptr [rdi+60],00
ShadowOfMordor.exe+9150CC: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
ShadowOfMordor.exe+9150D1: 4C 8B 7C 24 30 - mov r15,[rsp+30]
ShadowOfMordor.exe+9150D6: 4C 8B 74 24 38 - mov r14,[rsp+38]
ShadowOfMordor.exe+9150DB: 4C 8B 64 24 40 - mov r12,[rsp+40]
ShadowOfMordor.exe+9150E0: 4C 8B 7C 24 30 - mov r15,[rsp+30]
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+9150E5: 48 8B 9C 24 80 00 00 00 - mov rbx,[rsp+00000080]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+9150ED: 41 8B C5 - mov eax,r13d
ShadowOfMordor.exe+9150F0: 41 8B CD - mov ecx,r13d
ShadowOfMordor.exe+9150F3: 76 2C - jna ShadowOfMordor.exe+915121
ShadowOfMordor.exe+9150F5: 48 8D 57 24 - lea rdx,[rdi+24]
ShadowOfMordor.exe+9150F9: 4C 8D 05 80 5B AA 00 - lea r8,[ShadowOfMordor.exe+13BAC80]
ShadowOfMordor.exe+915100: 83 F9 08 - cmp ecx,08
ShadowOfMordor.exe+915103: 72 0F - jb ShadowOfMordor.exe+915114
ShadowOfMordor.exe+915105: 4C 89 05 FC 09 FE 00 - mov [ShadowOfMordor.exe+18F5B08],r8
ShadowOfMordor.exe+91510C: 44 89 2C 25 00 00 00 00 - mov [00000000],r13d
ShadowOfMordor.exe+915114: 03 02 - add eax,[rdx]
}
96
"Uruk Max Level"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-26
Author : Marcus101RR
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,ShadowOfMordor.exe,0F B7 40 0C 3B D8 72) // should be unique
alloc(newmem,$64,INJECT)
label(code)
label(return)
newmem:
code:
movzx eax,word ptr [rax+0C]
mov eax,#24
cmp ebx,eax
jmp return
INJECT:
jmp newmem
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 0F B7 40 0C 3B D8
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+862881
ShadowOfMordor.exe+86285B: 48 8B 05 6E B5 12 01 - mov rax,[ShadowOfMordor.exe+198DDD0]
ShadowOfMordor.exe+862862: 48 8B 48 08 - mov rcx,[rax+08]
ShadowOfMordor.exe+862866: 48 85 C9 - test rcx,rcx
ShadowOfMordor.exe+862869: 74 20 - je ShadowOfMordor.exe+86288B
ShadowOfMordor.exe+86286B: 8B 41 18 - mov eax,[rcx+18]
ShadowOfMordor.exe+86286E: EB 1D - jmp ShadowOfMordor.exe+86288D
ShadowOfMordor.exe+862870: 48 81 C2 E8 01 00 00 - add rdx,000001E8
ShadowOfMordor.exe+862877: E8 84 0F B9 FF - call ShadowOfMordor.exe+3F3800
ShadowOfMordor.exe+86287C: 48 85 C0 - test rax,rax
ShadowOfMordor.exe+86287F: 74 B9 - je ShadowOfMordor.exe+86283A
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+862881: 0F B7 40 0C - movzx eax,word ptr [rax+0C]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+862885: 3B D8 - cmp ebx,eax
ShadowOfMordor.exe+862887: 72 B9 - jb ShadowOfMordor.exe+862842
ShadowOfMordor.exe+862889: EB B1 - jmp ShadowOfMordor.exe+86283C
ShadowOfMordor.exe+86288B: 33 C0 - xor eax,eax
ShadowOfMordor.exe+86288D: 48 8B 4F 68 - mov rcx,[rdi+68]
ShadowOfMordor.exe+862891: 89 87 90 03 00 00 - mov [rdi+00000390],eax
ShadowOfMordor.exe+862897: 48 85 C9 - test rcx,rcx
ShadowOfMordor.exe+86289A: 74 0D - je ShadowOfMordor.exe+8628A9
ShadowOfMordor.exe+86289C: E8 6F D9 FE FF - call ShadowOfMordor.exe+850210
ShadowOfMordor.exe+8628A1: 84 C0 - test al,al
}
110
"Uruk Random Level Gain"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-26
Author : Marcus101RR
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getRandLevel,ShadowOfMordor.exe,8B 04 C8 48 83 C4 20 5B C3 48 85 C9 74 39 48 81 C2 28 01 00 00 E8 A9) // should be unique
alloc(newmem,$64,getRandLevel)
label(code)
label(return)
newmem:
code:
// Random Gen End
mov eax,[rax+rcx*8]
add rsp,20
push ecx
push edx
call msvcrt.rand
mov ecx,#5
xor edx,edx
div ecx
inc edx
mov eax,edx
pop edx
pop ecx
jmp return
getRandLevel:
jmp newmem
nop 2
return:
registersymbol(getRandLevel)
[DISABLE]
getRandLevel:
db 8B 04 C8 48 83 C4 20
unregistersymbol(getRandLevel)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+85363D
ShadowOfMordor.exe+853619: 48 85 C9 - test rcx,rcx
ShadowOfMordor.exe+85361C: 74 66 - je ShadowOfMordor.exe+853684
ShadowOfMordor.exe+85361E: 0F B6 8A 48 01 00 00 - movzx ecx,byte ptr [rdx+00000148]
ShadowOfMordor.exe+853625: 33 C0 - xor eax,eax
ShadowOfMordor.exe+853627: 48 C1 E1 04 - shl rcx,04
ShadowOfMordor.exe+85362B: 48 03 4B 08 - add rcx,[rbx+08]
ShadowOfMordor.exe+85362F: 66 3B 41 0C - cmp ax,[rcx+0C]
ShadowOfMordor.exe+853633: 73 4F - jae ShadowOfMordor.exe+853684
ShadowOfMordor.exe+853635: 0F B7 49 0E - movzx ecx,word ptr [rcx+0E]
ShadowOfMordor.exe+853639: 48 8B 43 10 - mov rax,[rbx+10]
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+85363D: 8B 04 C8 - mov eax,[rax+rcx*8]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+853640: 48 83 C4 20 - add rsp,20
ShadowOfMordor.exe+853644: 5B - pop rbx
ShadowOfMordor.exe+853645: C3 - ret
ShadowOfMordor.exe+853646: 48 85 C9 - test rcx,rcx
ShadowOfMordor.exe+853649: 74 39 - je ShadowOfMordor.exe+853684
ShadowOfMordor.exe+85364B: 48 81 C2 28 01 00 00 - add rdx,00000128
ShadowOfMordor.exe+853652: E8 A9 01 BA FF - call ShadowOfMordor.exe+3F3800
ShadowOfMordor.exe+853657: 4C 8B D8 - mov r11,rax
ShadowOfMordor.exe+85365A: 48 85 C0 - test rax,rax
ShadowOfMordor.exe+85365D: 74 25 - je ShadowOfMordor.exe+853684
}
88243
"Get Current Enemy"
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-12-31
Author : Marcus101RR
Get Current Entity
}
[ENABLE]
aobscanmodule(getEntity,ShadowOfMordor.exe,0F 2F B0 64 01 00 00) // should be unique
alloc(newmem,$64,getEntity)
label(code)
label(return)
label(gEntity)
registersymbol(gEntity)
newmem:
code:
mov [gEntity],rax
comiss xmm6,[rax+00000164]
jmp return
gEntity:
dq 0
getEntity:
jmp newmem
nop 2
return:
registersymbol(getEntity)
[DISABLE]
getEntity:
db 0F 2F B0 64 01 00 00
unregistersymbol(getEntity)
dealloc(newmem)
unregistersymbol(gEntity)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+CDF936
ShadowOfMordor.exe+CDF906: 0F 85 BD 00 00 00 - jne ShadowOfMordor.exe+CDF9C9
ShadowOfMordor.exe+CDF90C: 48 8B CE - mov rcx,rsi
ShadowOfMordor.exe+CDF90F: E8 0C 11 71 FF - call ShadowOfMordor.exe+3F0A20
ShadowOfMordor.exe+CDF914: 48 85 C0 - test rax,rax
ShadowOfMordor.exe+CDF917: 0F 84 AC 00 00 00 - je ShadowOfMordor.exe+CDF9C9
ShadowOfMordor.exe+CDF91D: 0F B6 88 78 01 00 00 - movzx ecx,byte ptr [rax+00000178]
ShadowOfMordor.exe+CDF924: F6 C1 02 - test cl,02
ShadowOfMordor.exe+CDF927: 0F 84 9C 00 00 00 - je ShadowOfMordor.exe+CDF9C9
ShadowOfMordor.exe+CDF92D: F6 C1 04 - test cl,04
ShadowOfMordor.exe+CDF930: 0F 85 93 00 00 00 - jne ShadowOfMordor.exe+CDF9C9
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+CDF936: 0F 2F B0 64 01 00 00 - comiss xmm6,[rax+00000164]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+CDF93D: 0F 86 86 00 00 00 - jbe ShadowOfMordor.exe+CDF9C9
ShadowOfMordor.exe+CDF943: 48 8B 4F 38 - mov rcx,[rdi+38]
ShadowOfMordor.exe+CDF947: E8 A4 F6 FF FF - call ShadowOfMordor.exe+CDEFF0
ShadowOfMordor.exe+CDF94C: 48 8B 4F 38 - mov rcx,[rdi+38]
ShadowOfMordor.exe+CDF950: 8B D8 - mov ebx,eax
ShadowOfMordor.exe+CDF952: E8 39 F7 FF FF - call ShadowOfMordor.exe+CDF090
ShadowOfMordor.exe+CDF957: 44 8B CB - mov r9d,ebx
ShadowOfMordor.exe+CDF95A: 4D 8B C4 - mov r8,r12
ShadowOfMordor.exe+CDF95D: 48 8B D5 - mov rdx,rbp
ShadowOfMordor.exe+CDF960: 48 8B CF - mov rcx,rdi
}
88242
"Base"
0
4 Bytes
gEntity
0
88247
"Type"
0
4 Bytes
gEntity
88
88245
"Health"
0
Float
gEntity
164
88246
"Max"
0
Float
gEntity
160
23
"[DEBUG]"
0000FF
1
36
"Fetch Base Addresses"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"4C 8B 0D ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 45 33 F6 48 8B F9 45 8B EE",
"48 8B 0D ?? ?? ?? ?? 0F B6 96 31 04 00 00 0F 10 B9 C0 0D 08 00 48 81 C1 60 10 08 00 4C 8B E0"
}
local aobNames = {
"SOM_Player",
"SOM_Stats"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: %s+%X",aobNames[i],process,address))
end
[DISABLE]
88153
"Enemy 1-Hit Kill..."
Auto Assembler Script
{ Game : ShadowOfMordor.exe
Version:
Date : 2022-10-19
Author : Paul44
Enemy 1-Hit Kill...
}
[ENABLE]
// +58 .. +20: descriptive...
aobscanmodule(HealthNPC,$process,F3 0F 10 83 64 01 00 00 48)
registersymbol(HealthNPC)
alloc(newmem,$100,$process)
globalalloc(nHealthMax,4,$process)
globalalloc(bHealthFriendly,1,$process)
// set enemy health to 10 ~ 1-shot kill...
nHealthMax:
dd 0xA // (float) 10.0
bHealthFriendly:
db 0
label(code)
label(return)
newmem:
push r15
cmp [bHealthFriendly],1
je friendly
isEnemy:
mov r15d,[nHealthMax]
cmp r15d,0
jbe code
cmp dword ptr [rbx+164],r15d
jbe code
mov dword ptr [rbx+164],r15d
jmp code
friendly:
cmp word ptr [rbx+88],FFFF
je isEnemy
mov r15d,[rbx+160]
mov dword ptr [rbx+164],r15d
code:
pop r15
@@:
movss xmm0,[rbx+00000164]
jmp return
HealthNPC:
jmp newmem
nop 3
return:
[DISABLE]
HealthNPC:
db F3 0F 10 83 64 01 00 00
unregistersymbol(HealthNPC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShadowOfMordor.exe+C8EAED
ShadowOfMordor.exe+C8EAB3: C7 87 A0 00 00 00 00 00 80 BF - mov [rdi+000000A0],BF800000
ShadowOfMordor.exe+C8EABD: F3 0F 5C 4C 24 74 - subss xmm1,[rsp+74]
ShadowOfMordor.exe+C8EAC3: F3 0F 5C C8 - subss xmm1,xmm0
ShadowOfMordor.exe+C8EAC7: 89 44 24 78 - mov [rsp+78],eax
ShadowOfMordor.exe+C8EACB: 48 8B 47 30 - mov rax,[rdi+30]
ShadowOfMordor.exe+C8EACF: C7 87 AC 00 00 00 00 00 80 3F - mov [rdi+000000AC],3F800000
ShadowOfMordor.exe+C8EAD9: F3 0F 11 8F B0 00 00 00 - movss [rdi+000000B0],xmm1
ShadowOfMordor.exe+C8EAE1: 48 8B 98 80 00 00 00 - mov rbx,[rax+00000080]
ShadowOfMordor.exe+C8EAE8: 48 85 DB - test rbx,rbx
ShadowOfMordor.exe+C8EAEB: 74 39 - je ShadowOfMordor.exe+C8EB26
// ---------- INJECTING HERE ----------
ShadowOfMordor.exe+C8EAED: F3 0F 10 83 64 01 00 00 - movss xmm0,[rbx+00000164]
// ---------- DONE INJECTING ----------
ShadowOfMordor.exe+C8EAF5: 48 8B CB - mov rcx,rbx
ShadowOfMordor.exe+C8EAF8: F3 0F 5E 83 60 01 00 00 - divss xmm0,[rbx+00000160]
ShadowOfMordor.exe+C8EB00: F3 0F 11 87 AC 00 00 00 - movss [rdi+000000AC],xmm0
ShadowOfMordor.exe+C8EB08: E8 03 B4 F7 FF - call ShadowOfMordor.exe+C09F10
ShadowOfMordor.exe+C8EB0D: 48 8B CB - mov rcx,rbx
ShadowOfMordor.exe+C8EB10: 88 87 BB 00 00 00 - mov [rdi+000000BB],al
ShadowOfMordor.exe+C8EB16: E8 65 42 E4 FF - call ShadowOfMordor.exe+AD2D80
ShadowOfMordor.exe+C8EB1B: F3 0F 10 75 0C - movss xmm6,[rbp+0C]
ShadowOfMordor.exe+C8EB20: 88 87 BC 00 00 00 - mov [rdi+000000BC],al
ShadowOfMordor.exe+C8EB26: 48 8B 47 30 - mov rax,[rdi+30]
}
15004
"(Normal = 0 ~ 1-Hit value = 10)"
FF0000
1
88154
"Health Max"
4 Bytes
nHealthMax
88231
"God Mode Friendly (0/1)"
0:<Disabled>
1:Enabled
Byte
bHealthFriendly
Code :mov ecx,[rbx+00000340]
ShadowOfMordor.exe+8687B3
FF
85
C0
7E
18
8B
8B
40
03
00
00
8D
14
08
48
8B
Level Gains
ShadowOfMordor.exe+85363D
0E
48
8B
43
10
8B
04
C8
48
83
C4
20
5B
Level Gain 3rd Offset
ShadowOfMordor.exe+858008
02
00
00
FF
C0
4B
8B
0C
13
3B
42
1C
76
0E
Flag Ability
ShadowOfMordor.exe+7C24FD
00
D3
E0
F7
D0
41
21
04
90
48
8B
87
98
02
Code :mov eax,[rax+rcx*8]
ShadowOfMordor.exe+66CD5D
0E
48
8B
43
10
8B
04
C8
48
83
C4
20
5B
Code :mov [rbp+08],edi
ShadowOfMordor.exe+656898
EE
FF
39
7D
08
89
7D
08
41
0F
95
C4
48
m_orkintel
1D5E0046
newmem2
1545AF5D
Buff
16D59A93
CreditsCode
2E923244
AddCredits
0A560037
Movement_Code
2E8FE252
MinMovement_Points
0A430039
Clip_Ammo
2E8FE664
Skill_Cooldown
2E8F54B0
Magic_Essence
19CC294E
Magic_Power
19C7F18B
aob_xp
006A6A83
aob_arr
00CD19E4
aob_foc
00CD1FBC
aob_com
00CD9751
aob_easy
00C94A0F
aob_rune
007CBAB9
aob_miss
00C53583
aob_god
00C3473A
aob_uruk
0058CB93
poin_orkintel
01DE003F
_copyfun
007CEE80
nHealthMax
7FF63F810000
bHealthFriendly
7FF63F810010
1.1