2 "Max Stars" Auto Assembler Script [ENABLE] aobscan(INJECT_Stars,89 46 2C 8B 46 28 8B) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: mov [esi+2C],#99999999 mov eax,[esi+28] jmp return INJECT_Stars: jmp newmem nop return: registersymbol(INJECT_Stars) [DISABLE] INJECT_Stars: db 89 46 2C 8B 46 28 unregistersymbol(INJECT_Stars) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: ScoreManager:AddScorePoints+73 ScoreManager:AddScorePoints+53: E8 B0 87 EF EB - call Go:get_to ScoreManager:AddScorePoints+58: 8B C8 - mov ecx,eax ScoreManager:AddScorePoints+5a: 8B 45 E4 - mov eax,[ebp-1C] ScoreManager:AddScorePoints+5d: DD 45 D8 - fld qword ptr [ebp-28] ScoreManager:AddScorePoints+60: D9 41 70 - fld dword ptr [ecx+70] ScoreManager:AddScorePoints+63: DE C9 - fmulp st(1),st(0) ScoreManager:AddScorePoints+65: DD 5D E8 - fstp qword ptr [ebp-18] ScoreManager:AddScorePoints+68: F2 0F 10 45 E8 - movsd xmm0,[ebp-18] ScoreManager:AddScorePoints+6d: F2 0F 2C C8 - cvttsd2si ecx,xmm0 ScoreManager:AddScorePoints+71: 03 C1 - add eax,ecx // ---------- INJECTING HERE ---------- ScoreManager:AddScorePoints+73: 89 46 2C - mov [esi+2C],eax // ---------- DONE INJECTING ---------- ScoreManager:AddScorePoints+76: 8B 46 28 - mov eax,[esi+28] ScoreManager:AddScorePoints+79: 8B 4E 24 - mov ecx,[esi+24] ScoreManager:AddScorePoints+7c: 3B C1 - cmp eax,ecx ScoreManager:AddScorePoints+7e: 7D 06 - jnl ScoreManager:AddScorePoints+86 ScoreManager:AddScorePoints+80: 8B 46 24 - mov eax,[esi+24] ScoreManager:AddScorePoints+83: 89 46 28 - mov [esi+28],eax ScoreManager:AddScorePoints+86: 8B 46 2C - mov eax,[esi+2C] ScoreManager:AddScorePoints+89: 8B 4E 28 - mov ecx,[esi+28] ScoreManager:AddScorePoints+8c: 3B C1 - cmp eax,ecx ScoreManager:AddScorePoints+8e: 0F 8C D9 00 00 00 - jl ScoreManager:AddScorePoints+16d } 5 "Max Lives" Auto Assembler Script [ENABLE] aobscan(INJECT_Life,89 48 20 83 EC 0C) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: mov [eax+20],#9999999 sub esp,0C jmp return INJECT_Life: jmp newmem nop return: registersymbol(INJECT_Life) [DISABLE] INJECT_Life: db 89 48 20 83 EC 0C unregistersymbol(INJECT_Life) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: PlayerManager:ChangePlayerLife+f UnityEngine.Renderer:set_enabled+5b: 50 - push eax UnityEngine.Renderer:set_enabled+5c: E8 2F CF 71 EB - call 05FA0D78 UnityEngine.Renderer:set_enabled+61: E8 BA C4 E5 EB - call 066E0308 UnityEngine.Renderer:set_enabled+66: EB D3 - jmp UnityEngine.Renderer:set_enabled+3b PlayerManager:ChangePlayerLife: 55 - push ebp PlayerManager:ChangePlayerLife+1: 8B EC - mov ebp,esp PlayerManager:ChangePlayerLife+3: 83 EC 08 - sub esp,08 PlayerManager:ChangePlayerLife+6: 8B 45 08 - mov eax,[ebp+08] PlayerManager:ChangePlayerLife+9: 8B 48 20 - mov ecx,[eax+20] PlayerManager:ChangePlayerLife+c: 03 4D 0C - add ecx,[ebp+0C] // ---------- INJECTING HERE ---------- PlayerManager:ChangePlayerLife+f: 89 48 20 - mov [eax+20],ecx // ---------- DONE INJECTING ---------- PlayerManager:ChangePlayerLife+12: 83 EC 0C - sub esp,0C PlayerManager:ChangePlayerLife+15: 68 50 01 74 13 - push 13740150 PlayerManager:ChangePlayerLife+1a: E8 59 C6 F1 EB - call EventManager:TriggerEvent PlayerManager:ChangePlayerLife+1f: 83 C4 10 - add esp,10 PlayerManager:ChangePlayerLife+22: 83 7D 0C 00 - cmp dword ptr [ebp+0C],00 PlayerManager:ChangePlayerLife+26: 7D 10 - jnl PlayerManager:ChangePlayerLife+38 PlayerManager:ChangePlayerLife+28: 83 EC 0C - sub esp,0C PlayerManager:ChangePlayerLife+2b: 68 B0 74 54 19 - push 195474B0 PlayerManager:ChangePlayerLife+30: E8 43 C6 F1 EB - call EventManager:TriggerEvent PlayerManager:ChangePlayerLife+35: 83 C4 10 - add esp,10 } 50 "Inf Special" Auto Assembler Script [ENABLE] aobscan(INJECT_InfBomb,89 46 30 83 EC 0C) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: mov [esi+30],#999999 sub esp,0C jmp return INJECT_InfBomb: jmp newmem nop return: registersymbol(INJECT_InfBomb) [DISABLE] INJECT_InfBomb: db 89 46 30 83 EC 0C unregistersymbol(INJECT_InfBomb) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: ScoreManager:OnBombUse+94 ScoreManager:OnBombUse+75: 83 C4 10 - add esp,10 ScoreManager:OnBombUse+78: 8B 46 14 - mov eax,[esi+14] ScoreManager:OnBombUse+7b: 83 EC 08 - sub esp,08 ScoreManager:OnBombUse+7e: 68 40 1D 03 19 - push 19031D40 ScoreManager:OnBombUse+83: 50 - push eax ScoreManager:OnBombUse+84: 39 00 - cmp [eax],eax ScoreManager:OnBombUse+86: E8 FD A8 A6 EC - call UnityEngine.Animator:SetTrigger ScoreManager:OnBombUse+8b: 83 C4 10 - add esp,10 ScoreManager:OnBombUse+8e: 8B 46 30 - mov eax,[esi+30] ScoreManager:OnBombUse+91: 03 45 0C - add eax,[ebp+0C] // ---------- INJECTING HERE ---------- ScoreManager:OnBombUse+94: 89 46 30 - mov [esi+30],eax // ---------- DONE INJECTING ---------- ScoreManager:OnBombUse+97: 83 EC 0C - sub esp,0C ScoreManager:OnBombUse+9a: 68 60 00 58 15 - push 15580060 ScoreManager:OnBombUse+9f: E8 64 96 A9 EC - call EventManager:TriggerEvent ScoreManager:OnBombUse+a4: 83 C4 10 - add esp,10 ScoreManager:OnBombUse+a7: 83 EC 0C - sub esp,0C ScoreManager:OnBombUse+aa: 68 B0 75 2A 19 - push 192A75B0 ScoreManager:OnBombUse+af: E8 54 96 A9 EC - call EventManager:TriggerEvent ScoreManager:OnBombUse+b4: 83 C4 10 - add esp,10 ScoreManager:OnBombUse+b7: 8D 65 FC - lea esp,[ebp-04] ScoreManager:OnBombUse+ba: 5E - pop esi } 51 "Boss 1 hit kill" Auto Assembler Script [ENABLE] aobscan(INJECTBoss,8B 46 74 2B 45 0C) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: mov [esi+6C],#0 mov eax,[esi+74] sub eax,[ebp+0C] jmp return INJECTBoss: jmp newmem nop return: registersymbol(INJECTBoss) [DISABLE] INJECTBoss: db 8B 46 74 2B 45 0C unregistersymbol(INJECTBoss) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: EnemyController:Damage+11 19A2634D: 00 00 - add [eax],al 19A2634F: 00 55 8B - add [ebp-75],dl EnemyController:Damage+2: EC - in al,dx EnemyController:Damage+3: 53 - push ebx EnemyController:Damage+4: 56 - push esi EnemyController:Damage+5: 8B 75 08 - mov esi,[ebp+08] EnemyController:Damage+8: 8B 46 6C - mov eax,[esi+6C] EnemyController:Damage+b: 2B 45 0C - sub eax,[ebp+0C] EnemyController:Damage+e: 89 46 6C - mov [esi+6C],eax EnemyController:Damage+11: 8B 46 74 - mov eax,[esi+74] // ---------- INJECTING HERE ---------- EnemyController:Damage+14: 2B 45 0C - sub eax,[ebp+0C] // ---------- DONE INJECTING ---------- EnemyController:Damage+17: 89 46 74 - mov [esi+74],eax EnemyController:Damage+1a: 0F B6 46 4C - movzx eax,byte ptr [esi+4C] EnemyController:Damage+1e: 85 C0 - test eax,eax EnemyController:Damage+20: 74 2D - je EnemyController:Damage+4f EnemyController:Damage+22: 8B 05 70 C7 F0 05 - mov eax,[05F0C770] EnemyController:Damage+28: 8B 40 1C - mov eax,[eax+1C] EnemyController:Damage+2b: 8B 4E 74 - mov ecx,[esi+74] EnemyController:Damage+2e: 51 - push ecx EnemyController:Damage+2f: DB 04 24 - fild dword ptr [esp] EnemyController:Damage+32: D9 1C 24 - fstp dword ptr [esp] } Change of jne AlbumButton:OpenPlayPaneClick+193 2C562427A1E 0F B6 00 85 C0 0F 85 6F 01 00 00 F3 0F 10 05 C4 Change of jne AlbumButton:Init+2d7 2C56242AAD3 8B F9 48 85 C0 75 02 EB 06 48 8B CF