1 "Epido" Auto Assembler Script [ENABLE] {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [DISABLE] 17 "Inf Health" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_Health,8B 46 38 2B 45 0C) // should be unique define(INJECT_Health,Player:GetDamage+53) alloc(newmem,$1000) label(code) label(return) newmem: code: push ebx mov ebx,[esi+3C] mov [esi+38],ebx pop ebx mov eax,[esi+38] sub eax,[ebp+0C] jmp return INJECT_Health: jmp newmem nop return: registersymbol(INJECT_Health) [DISABLE] INJECT_Health: db 8B 46 38 2B 45 0C unregistersymbol(INJECT_Health) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: Player:GetDamage+53 17E7A053: D9 00 - fld dword ptr [eax] 17E7A055: D9 EE - fldz 17E7A057: DF F1 - fcomip st(0),st(1) 17E7A059: DD D8 - fstp st(0) 17E7A05B: 7A 07 - jp 17E7A064 17E7A05D: 73 05 - jae 17E7A064 17E7A05F: E9 C8 01 00 00 - jmp 17E7A22C 17E7A064: 0F B6 05 4C CF 9C 18 - movzx eax,byte ptr [189CCF4C] 17E7A06B: 85 C0 - test eax,eax 17E7A06D: 0F 85 B9 01 00 00 - jne 17E7A22C // ---------- INJECTING HERE ---------- 17E7A073: 8B 46 38 - mov eax,[esi+38] // ---------- DONE INJECTING ---------- 17E7A076: 2B 45 0C - sub eax,[ebp+0C] 17E7A079: 89 46 38 - mov [esi+38],eax 17E7A07C: 85 C0 - test eax,eax 17E7A07E: 7D 07 - jnl 17E7A087 17E7A080: C7 46 38 00 00 00 00 - mov [esi+38],00000000 17E7A087: 8B 05 58 39 D3 07 - mov eax,[07D33958] 17E7A08D: 8B 4E 38 - mov ecx,[esi+38] 17E7A090: 51 - push ecx 17E7A091: DB 04 24 - fild dword ptr [esp] 17E7A094: D9 1C 24 - fstp dword ptr [esp] } 18 "Inf Mana" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_MaxMP,D9 43 40 D9 E8 DF F1 DD D8 76 07) // should be unique define(INJECT_MaxMP,<SetSlash>d__28:MoveNext+3c) alloc(newmem,$1000) label(code) label(return) newmem: code: push edi mov edi,[ebx+44] mov [ebx+40],edi pop edi fld dword ptr [ebx+40] fld1 jmp return INJECT_MaxMP: jmp newmem return: registersymbol(INJECT_MaxMP) [DISABLE] INJECT_MaxMP: db D9 43 40 D9 E8 unregistersymbol(INJECT_MaxMP) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: Player+<SetSlash>d__28:MoveNext+3c Player+<SetSlash>d__28:MoveNext+1f: 33 C0 - xor eax,eax Player+<SetSlash>d__28:MoveNext+21: E9 78 01 00 00 - jmp Player+<SetSlash>d__28:MoveNext+19e Player+<SetSlash>d__28:MoveNext+26: C7 47 10 FF FF FF FF - mov [edi+10],FFFFFFFF Player+<SetSlash>d__28:MoveNext+2d: D9 43 50 - fld dword ptr [ebx+50] Player+<SetSlash>d__28:MoveNext+30: D9 EE - fldz Player+<SetSlash>d__28:MoveNext+32: DF F1 - fcomip st(0),st(1) Player+<SetSlash>d__28:MoveNext+34: DD D8 - fstp st(0) Player+<SetSlash>d__28:MoveNext+36: 75 0F - jne Player+<SetSlash>d__28:MoveNext+47 Player+<SetSlash>d__28:MoveNext+38: 7A 0D - jp Player+<SetSlash>d__28:MoveNext+47 Player+<SetSlash>d__28:MoveNext+3a: 72 0B - jb Player+<SetSlash>d__28:MoveNext+47 // ---------- INJECTING HERE ---------- Player+<SetSlash>d__28:MoveNext+3c: D9 43 40 - fld dword ptr [ebx+40] // ---------- DONE INJECTING ---------- Player+<SetSlash>d__28:MoveNext+3f: D9 E8 - fld1 Player+<SetSlash>d__28:MoveNext+41: DF F1 - fcomip st(0),st(1) Player+<SetSlash>d__28:MoveNext+43: DD D8 - fstp st(0) Player+<SetSlash>d__28:MoveNext+45: 76 07 - jna Player+<SetSlash>d__28:MoveNext+4e Player+<SetSlash>d__28:MoveNext+47: 33 C0 - xor eax,eax Player+<SetSlash>d__28:MoveNext+49: E9 50 01 00 00 - jmp Player+<SetSlash>d__28:MoveNext+19e Player+<SetSlash>d__28:MoveNext+4e: D9 43 40 - fld dword ptr [ebx+40] Player+<SetSlash>d__28:MoveNext+51: D9 E8 - fld1 Player+<SetSlash>d__28:MoveNext+53: DE E9 - fsubp st(1),st(0) Player+<SetSlash>d__28:MoveNext+55: D9 5B 40 - fstp dword ptr [ebx+40] } 15 "Max Fire Rate" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_FireRate,D9 47 1C DE F9 DE) // should be unique define(INJECT_FireRate,PlayerShooting:Fire+2e) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [edi+1C],(float)26 fld dword ptr [edi+1C] fdivp st(1),st(0) jmp return INJECT_FireRate: jmp newmem return: registersymbol(INJECT_FireRate) [DISABLE] INJECT_FireRate: db D9 47 1C DE F9 unregistersymbol(INJECT_FireRate) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: PlayerShooting:Fire+2e PlayerShooting:Fire+13: DF F1 - fcomip st(0),st(1) PlayerShooting:Fire+15: DD D8 - fstp st(0) PlayerShooting:Fire+17: 7A 1F - jp PlayerShooting:Fire+38 PlayerShooting:Fire+19: 73 1D - jae PlayerShooting:Fire+38 PlayerShooting:Fire+1b: 89 3C 24 - mov [esp],edi PlayerShooting:Fire+1e: 90 - nop PlayerShooting:Fire+1f: E8 CC 02 01 00 - call PlayerShooting:MakeAShot PlayerShooting:Fire+24: 8D 6D 00 - lea ebp,[ebp+00] PlayerShooting:Fire+27: E8 64 00 00 00 - call UnityEngine.Time:get_time PlayerShooting:Fire+2c: D9 E8 - fld1 // ---------- INJECTING HERE ---------- PlayerShooting:Fire+2e: D9 47 1C - fld dword ptr [edi+1C] // ---------- DONE INJECTING ---------- PlayerShooting:Fire+31: DE F9 - fdivp st(1),st(0) PlayerShooting:Fire+33: DE C1 - faddp PlayerShooting:Fire+35: D9 5F 20 - fstp dword ptr [edi+20] PlayerShooting:Fire+38: 8D 6D 00 - lea ebp,[ebp+00] PlayerShooting:Fire+3b: E8 50 00 00 00 - call UnityEngine.Time:get_time PlayerShooting:Fire+40: D9 47 28 - fld dword ptr [edi+28] PlayerShooting:Fire+43: DF F1 - fcomip st(0),st(1) PlayerShooting:Fire+45: DD D8 - fstp st(0) PlayerShooting:Fire+47: 7A 1A - jp PlayerShooting:Fire+63 PlayerShooting:Fire+49: 73 18 - jae PlayerShooting:Fire+63 } 24 "Weapon Power" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_WeaponPower,17 0D 00 00 8B 47 24 3D 03 00 00 00) // should be unique define(INJECT_WeaponPower,PlayerShooting:MakeAShot+1829) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [edi+24],#9999 mov eax,[edi+24] cmp eax,00000003 jmp return INJECT_WeaponPower: jmp newmem nop 3 return: registersymbol(INJECT_WeaponPower) [DISABLE] INJECT_WeaponPower: db 8B 47 24 3D 03 00 00 00 unregistersymbol(INJECT_WeaponPower) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: PlayerShooting:MakeAShot+1829 PlayerShooting:MakeAShot+17fa: 8B 8D 68 FC FF FF - mov ecx,[ebp-00000398] PlayerShooting:MakeAShot+1800: 89 4C 24 10 - mov [esp+10],ecx PlayerShooting:MakeAShot+1804: 89 44 24 04 - mov [esp+04],eax PlayerShooting:MakeAShot+1808: 89 3C 24 - mov [esp],edi PlayerShooting:MakeAShot+180b: E8 3C 0D 00 00 - call 003B254C PlayerShooting:MakeAShot+1810: E9 2B 0D 00 00 - jmp PlayerShooting:MakeAShot+2540 PlayerShooting:MakeAShot+1815: 8B 05 F0 37 B1 05 - mov eax,[05B137F0] PlayerShooting:MakeAShot+181b: 8B 40 28 - mov eax,[eax+28] PlayerShooting:MakeAShot+181e: 3D 03 00 00 00 - cmp eax,00000003 PlayerShooting:MakeAShot+1823: 0F 85 17 0D 00 00 - jne PlayerShooting:MakeAShot+2540 // ---------- INJECTING HERE ---------- PlayerShooting:MakeAShot+1829: 8B 47 24 - mov eax,[edi+24] // ---------- DONE INJECTING ---------- PlayerShooting:MakeAShot+182c: 3D 03 00 00 00 - cmp eax,00000003 PlayerShooting:MakeAShot+1831: 0F 8F BE 00 00 00 - jg PlayerShooting:MakeAShot+18f5 PlayerShooting:MakeAShot+1837: 8B 47 14 - mov eax,[edi+14] PlayerShooting:MakeAShot+183a: 8B 40 24 - mov eax,[eax+24] PlayerShooting:MakeAShot+183d: 89 04 24 - mov [esp],eax PlayerShooting:MakeAShot+1840: 39 00 - cmp [eax],eax PlayerShooting:MakeAShot+1842: 90 - nop PlayerShooting:MakeAShot+1843: E8 20 0D 00 00 - call UnityEngine.ParticleSystem:Play PlayerShooting:MakeAShot+1848: 8B 47 0C - mov eax,[edi+0C] PlayerShooting:MakeAShot+184b: 89 85 E4 F8 FF FF - mov [ebp-0000071C],eax } 19 "No Slash Cooldown" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_SlashCooldown,D9 47 50 D9 EE DF F1 DD D8 7A) // should be unique define(INJECT_SlashCooldown,Player:Update+44) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [edi+50],(float)0 fld dword ptr [edi+50] fldz jmp return INJECT_SlashCooldown: jmp newmem return: registersymbol(INJECT_SlashCooldown) [DISABLE] INJECT_SlashCooldown: db D9 47 50 D9 EE unregistersymbol(INJECT_SlashCooldown) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: Player:Update+44 Player:Update+27: D9 C9 - fxch st(1) Player:Update+29: DE E9 - fsubp st(1),st(0) Player:Update+2b: D9 5F 48 - fstp dword ptr [edi+48] Player:Update+2e: 8B 47 10 - mov eax,[edi+10] Player:Update+31: D9 47 34 - fld dword ptr [edi+34] Player:Update+34: D9 5C 24 04 - fstp dword ptr [esp+04] Player:Update+38: 89 04 24 - mov [esp],eax Player:Update+3b: 39 00 - cmp [eax],eax Player:Update+3d: 8B C0 - mov eax,eax Player:Update+3f: E8 4C 00 00 00 - call AnyPortrait.apControlParam:SetFloat // ---------- INJECTING HERE ---------- Player:Update+44: D9 47 50 - fld dword ptr [edi+50] // ---------- DONE INJECTING ---------- Player:Update+47: D9 EE - fldz Player:Update+49: DF F1 - fcomip st(0),st(1) Player:Update+4b: DD D8 - fstp st(0) Player:Update+4d: 7A 27 - jp Player:Update+76 Player:Update+4f: 73 25 - jae Player:Update+76 Player:Update+51: D9 47 50 - fld dword ptr [edi+50] Player:Update+54: DD 5D F0 - fstp qword ptr [ebp-10] Player:Update+57: E8 8C 1A BB FB - call UnityEngine.Time:get_deltaTime Player:Update+5c: DD 45 F0 - fld qword ptr [ebp-10] Player:Update+5f: D9 C9 - fxch st(1) } 22 "Gold 999999 (Buy Something In Shop)" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_Money,01 00 00 8B 05 * * * * 8B 40 24 8B 0D 68 CF CD 18) // should be unique define(INJECT_Money,MainMenu:<Click_ShopButton>b__95_10+18) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [eax+24],#999999 mov eax,[eax+24] mov ecx,[18CDCF68] jmp return INJECT_Money+09: jmp newmem nop 4 return: registersymbol(INJECT_Money) [DISABLE] INJECT_Money+09: db 8B 40 24 8B 0D 68 CF CD 18 unregistersymbol(INJECT_Money) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: MainMenu:<Click_ShopButton>b__95_10+18 17F08114: 00 00 - add [eax],al 17F08116: 00 00 - add [eax],al MainMenu:<Click_ShopButton>b__95_10: 55 - push ebp MainMenu:<Click_ShopButton>b__95_10+1: 8B EC - mov ebp,esp MainMenu:<Click_ShopButton>b__95_10+3: 57 - push edi MainMenu:<Click_ShopButton>b__95_10+4: 83 EC 44 - sub esp,44 MainMenu:<Click_ShopButton>b__95_10+7: 8B 7D 0C - mov edi,[ebp+0C] MainMenu:<Click_ShopButton>b__95_10+a: 85 FF - test edi,edi MainMenu:<Click_ShopButton>b__95_10+c: 0F 84 52 01 00 00 - je MainMenu:<Click_ShopButton>b__95_10+164 MainMenu:<Click_ShopButton>b__95_10+12: 8B 05 F0 37 1A 08 - mov eax,[081A37F0] // ---------- INJECTING HERE ---------- MainMenu:<Click_ShopButton>b__95_10+18: 8B 40 24 - mov eax,[eax+24] // ---------- DONE INJECTING ---------- MainMenu:<Click_ShopButton>b__95_10+1b: 8B 0D 68 CF CD 18 - mov ecx,[18CDCF68] MainMenu:<Click_ShopButton>b__95_10+21: 8B 15 F0 37 1A 08 - mov edx,[081A37F0] MainMenu:<Click_ShopButton>b__95_10+27: 8B 52 38 - mov edx,[edx+38] MainMenu:<Click_ShopButton>b__95_10+2a: 39 51 0C - cmp [ecx+0C],edx MainMenu:<Click_ShopButton>b__95_10+2d: 0F 86 49 01 00 00 - jbe MainMenu:<Click_ShopButton>b__95_10+17c MainMenu:<Click_ShopButton>b__95_10+33: 8D 4C 91 10 - lea ecx,[ecx+edx*4+10] MainMenu:<Click_ShopButton>b__95_10+37: 8B 09 - mov ecx,[ecx] MainMenu:<Click_ShopButton>b__95_10+39: 3B C1 - cmp eax,ecx MainMenu:<Click_ShopButton>b__95_10+3b: 0F 8C 50 00 00 00 - jl MainMenu:<Click_ShopButton>b__95_10+91 MainMenu:<Click_ShopButton>b__95_10+41: 8B 05 F0 37 1A 08 - mov eax,[081A37F0] } 28 "Inf Skill Time" Auto Assembler Script [ENABLE] //aobscan(INJECT_SkillTime,D9 00 D9 EE DF F1 DD D8 0F 8A CE) // should be unique define(INJECT_SkillTime,NowSkillState:Update+28) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [eax],(float)99999 fld dword ptr [eax] fldz fcomip st(0),st(1) jmp return INJECT_SkillTime: jmp newmem nop return: registersymbol(INJECT_SkillTime) [DISABLE] INJECT_SkillTime: db D9 00 D9 EE DF F1 unregistersymbol(INJECT_SkillTime) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: NowSkillState:Update+28 NowSkillState:Update+6: 83 EC 5C - sub esp,5C NowSkillState:Update+9: 8B 7D 08 - mov edi,[ebp+08] NowSkillState:Update+c: 33 DB - xor ebx,ebx NowSkillState:Update+e: E9 F2 01 00 00 - jmp NowSkillState:Update+205 NowSkillState:Update+13: 8D 64 24 00 - lea esp,[esp+00] NowSkillState:Update+17: 90 - nop NowSkillState:Update+18: 8B 47 34 - mov eax,[edi+34] NowSkillState:Update+1b: 39 58 0C - cmp [eax+0C],ebx NowSkillState:Update+1e: 0F 86 74 05 00 00 - jbe NowSkillState:Update+598 NowSkillState:Update+24: 8D 44 98 10 - lea eax,[eax+ebx*4+10] // ---------- INJECTING HERE ---------- NowSkillState:Update+28: D9 00 - fld dword ptr [eax] // ---------- DONE INJECTING ---------- NowSkillState:Update+2a: D9 EE - fldz NowSkillState:Update+2c: DF F1 - fcomip st(0),st(1) NowSkillState:Update+2e: DD D8 - fstp st(0) NowSkillState:Update+30: 0F 8A CE 01 00 00 - jp NowSkillState:Update+204 NowSkillState:Update+36: 0F 83 C8 01 00 00 - jae NowSkillState:Update+204 NowSkillState:Update+3c: 85 DB - test ebx,ebx NowSkillState:Update+3e: 0F 85 60 00 00 00 - jne NowSkillState:Update+a4 NowSkillState:Update+44: 8B 47 1C - mov eax,[edi+1C] NowSkillState:Update+47: 39 58 0C - cmp [eax+0C],ebx NowSkillState:Update+4a: 0F 86 3E 05 00 00 - jbe NowSkillState:Update+58e } 26 "Unlock Collection (Not Perm)" Auto Assembler Script {$lua} if (LaunchMonoDataCollector()==0) then error('Failed to Activate Mono Features') end {$asm} [ENABLE] //aobscan(INJECT_Collection,0F B6 46 1C 85 C0 0F 84 7D) // should be unique define(INJECT_Collection,CollectionObject:SetInit+1c8) alloc(newmem,$1000) label(code) label(return) newmem: code: mov [esi+1C],#1 movzx eax,byte ptr [esi+1C] test eax,eax jmp return INJECT_Collection: jmp newmem nop return: registersymbol(INJECT_Collection) [DISABLE] INJECT_Collection: db 0F B6 46 1C 85 C0 unregistersymbol(INJECT_Collection) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: CollectionObject:SetInit+1c8 CollectionObject:SetInit+1a9: 85 C0 - test eax,eax CollectionObject:SetInit+1ab: 74 04 - je CollectionObject:SetInit+1b1 CollectionObject:SetInit+1ad: C6 46 1C 01 - mov byte ptr [esi+1C],01 CollectionObject:SetInit+1b1: 83 FF 02 - cmp edi,02 CollectionObject:SetInit+1b4: 75 12 - jne CollectionObject:SetInit+1c8 CollectionObject:SetInit+1b6: 8B 05 F0 37 11 08 - mov eax,[081137F0] CollectionObject:SetInit+1bc: 0F B6 40 6A - movzx eax,byte ptr [eax+6A] CollectionObject:SetInit+1c0: 85 C0 - test eax,eax CollectionObject:SetInit+1c2: 74 04 - je CollectionObject:SetInit+1c8 CollectionObject:SetInit+1c4: C6 46 1C 01 - mov byte ptr [esi+1C],01 // ---------- INJECTING HERE ---------- CollectionObject:SetInit+1c8: 0F B6 46 1C - movzx eax,byte ptr [esi+1C] // ---------- DONE INJECTING ---------- CollectionObject:SetInit+1cc: 85 C0 - test eax,eax CollectionObject:SetInit+1ce: 0F 84 7D 00 00 00 - je CollectionObject:SetInit+251 CollectionObject:SetInit+1d4: 8B 46 0C - mov eax,[esi+0C] CollectionObject:SetInit+1d7: 89 45 CC - mov [ebp-34],eax CollectionObject:SetInit+1da: 8D 45 0C - lea eax,[ebp+0C] CollectionObject:SetInit+1dd: C7 44 24 04 70 CB C8 18 - mov [esp+04],18C8CB70 CollectionObject:SetInit+1e5: 89 04 24 - mov [esp],eax CollectionObject:SetInit+1e8: 8D 6D 00 - lea ebp,[ebp+00] CollectionObject:SetInit+1eb: E8 08 FF FC FF - call System.Int32:ToString CollectionObject:SetInit+1f0: 89 45 C8 - mov [ebp-38],eax } Change of call SteamAchievements:TestSteamAchievement 17E85F5B 89 04 24 8B C0 E8 48 00 00 00 8B 45 08 0F B6 Change of jne SteamAchievements:Unlock+58 17E85F69 B6 40 18 85 C0 75 15 8B 45 0C 89 04 Change of jne SteamAchievements:Unlock+58 17F082E1 B6 40 18 85 C0 75 15 8B 45 0C 89 04 Change of fstp dword ptr [ebx+40] 003BBA65 40 D9 E8 DE E9 D9 5B 40 8B 05 D8 35 B1 Change of je SteamStatsAndAchievements:UnlockAchievement+4d 184C761F 40 14 01 85 C0 0F 84 38 00 00 00 05 10 00 00 00 Change of call UnityEngine.GameObject:SetActive 184CD867 89 04 24 39 00 E8 74 A4 C8 FF 8B 87 98 00 00 Change of call UnityEngine.GameObject:SetActive 184CD837 89 04 24 39 00 E8 A4 A4 C8 FF 8B 87 90 00 00 Info about this table: