1337191861
"Compact Mode"
800000
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
function cycleFullCompact(sender,force)
local state = not(compactmenuitem.Caption == 'Compact View Mode')
if force~=nil then state = not force end
compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = state
getMainForm().Panel4.Visible = state
getMainForm().Panel5.Visible = state
end
function addCompactMenu()
if compactmenualreadyexists then return
end
local parent = getMainForm().Menu.Items
compactmenuitem = createMenuItem(parent)
parent.add(compactmenuitem)
compactmenuitem.Caption = 'Compact View Mode'
compactmenuitem.OnClick = cycleFullCompact
compactmenualreadyexists = 'yes'
end
addCompactMenu()
cycleFullCompact(nil,true)
[DISABLE]
cycleFullCompact(nil,false)
1337191862
"Disable All Scripts - (Always Run Before Closing CE)"
800000
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local mainHook = ('Sexy Mystic Survivors')
local al = getAddressList()
for i = 0, al.Count - 1 do
if al[i].Active == true and al[i].Description ~= mainHook then al[i].Active = false
end
end
for i = 0, al.Count - 1 do
if al[i].Active == true then al[i].Active = false
end
end
if not syntaxcheck then
synchronize(function()
local t = createTimer()
t.Interval,t.OnTimer = 500,function(tm)
tm.Destroy()
memrec.Active = false
end
end)
end
[DISABLE]
46
"Sexy Mystic Survivors"
FF0080
Auto Assembler Script
[ENABLE]
{$lua}
OpenProcess("SexyMysticSurvivors.exe")
if (LaunchMonoDataCollector())==0
then error ('Failure To Launch Mono Data Collector. Try Rebooting Game And CheatEngine ')
end
if getCEVersion() < 7.2 then showMessage("Please update to Cheat Engine 7.2 or Higher")
return end
{$asm}
alloc(SpeedVar,$8)
registerSymbol(SpeedVar)
SpeedVar:
dw 1
[DISABLE]
dealloc(*)
unregisterSymbol(*)
109990
"ENABLE (Keep Enabled)"
C0C0C0
Auto Assembler Script
define(address,AMG.BMSGameManager:Update+f9a)
define(bytes,83 39 00 0F B6 80 10 02 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.BMSGameManager:Update+f9a)
registersymbol(CharacterManager)
label(return CharacterManager)
newmem:
mov [CharacterManager],rcx
cmp dword ptr [rcx],00
movzx eax,byte ptr [rax+00000210]
jmp return
align 8,CC
CharacterManager:
dq 0
address:
jmp newmem
nop 5
return:
[DISABLE]
address:
db bytes
// cmp dword ptr [rcx],00
// movzx eax,byte ptr [rax+00000210]
unregistersymbol(CharacterManager)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.BMSGameManager:Update+f9a
AMG.BMSGameManager:Update+f6b: 48 B8 D8 2E 33 84 36 02 00 00 - mov rax,0000023684332ED8
AMG.BMSGameManager:Update+f75: C6 00 01 - mov byte ptr [rax],01
AMG.BMSGameManager:Update+f78: 48 8B 46 60 - mov rax,[rsi+60]
AMG.BMSGameManager:Update+f7c: 48 8B C8 - mov rcx,rax
AMG.BMSGameManager:Update+f7f: 83 38 00 - cmp dword ptr [rax],00
AMG.BMSGameManager:Update+f82: 48 8D 6D 00 - lea rbp,[rbp+00]
AMG.BMSGameManager:Update+f86: 49 BB 72 D3 77 A9 37 02 00 00 - mov r11,00000237A977D372
AMG.BMSGameManager:Update+f90: 41 FF D3 - call r11
AMG.BMSGameManager:Update+f93: 48 8B 46 50 - mov rax,[rsi+50]
AMG.BMSGameManager:Update+f97: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
AMG.BMSGameManager:Update+f9a: 83 39 00 - cmp dword ptr [rcx],00
// ---------- DONE INJECTING ----------
AMG.BMSGameManager:Update+f9d: 0F B6 80 10 02 00 00 - movzx eax,byte ptr [rax+00000210]
AMG.BMSGameManager:Update+fa4: 48 0F B6 F8 - movzx rdi,al
AMG.BMSGameManager:Update+fa8: 48 8B C7 - mov rax,rdi
AMG.BMSGameManager:Update+fab: 85 C0 - test eax,eax
AMG.BMSGameManager:Update+fad: 0F 85 39 00 00 00 - jne AMG.BMSGameManager:Update+fec
AMG.BMSGameManager:Update+fb3: F3 0F 10 86 AC 01 00 00 - movss xmm0,[rsi+000001AC]
AMG.BMSGameManager:Update+fbb: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.BMSGameManager:Update+fbf: F2 0F 11 45 C8 - movsd [rbp-38],xmm0
AMG.BMSGameManager:Update+fc4: 66 90 - nop 2
AMG.BMSGameManager:Update+fc6: 49 BB 80 54 58 AA 36 02 00 00 - mov r11,UnityEngine.Time:get_deltaTime
}
109987
"Main Menu"
8000FF
1
45
"Unlock Gallery (Click blank picture to perm unlock)"
8000FF
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_Gallery,74 1C 48 8B 46 40 48 63) // should be unique
define(INJECT_Gallery,AMG.UI.UIGalleryItem:HandleOnClick+4d)
INJECT_Gallery:
db 90 90
[DISABLE]
INJECT_Gallery:
db 74 1C
{
// ORIGINAL CODE - INJECTION POINT: AMG.UI.UIGalleryItem:HandleOnClick+4d
AMG.UI.UIGalleryItem:HandleOnClick+1c: 48 B8 20 FF DC FF C9 01 00 00 - mov rax,000001C9FFDCFF20
AMG.UI.UIGalleryItem:HandleOnClick+26: 48 8B 00 - mov rax,[rax]
AMG.UI.UIGalleryItem:HandleOnClick+29: 48 8B 4E 40 - mov rcx,[rsi+40]
AMG.UI.UIGalleryItem:HandleOnClick+2d: 48 63 51 18 - movsxd rdx,dword ptr [rcx+18]
AMG.UI.UIGalleryItem:HandleOnClick+31: 48 8B C8 - mov rcx,rax
AMG.UI.UIGalleryItem:HandleOnClick+34: 83 38 00 - cmp dword ptr [rax],00
AMG.UI.UIGalleryItem:HandleOnClick+37: 48 8D AD 00 00 00 00 - lea rbp,[rbp+00000000]
AMG.UI.UIGalleryItem:HandleOnClick+3e: 49 BB 30 B4 AC 3D CA 01 00 00 - mov r11,AMG.DataManager:IsUnlockGalleryItem
AMG.UI.UIGalleryItem:HandleOnClick+48: 41 FF D3 - call r11
AMG.UI.UIGalleryItem:HandleOnClick+4b: 85 C0 - test eax,eax
// ---------- INJECTING HERE ----------
AMG.UI.UIGalleryItem:HandleOnClick+4d: 74 1C - je AMG.UI.UIGalleryItem:HandleOnClick+6b
// ---------- DONE INJECTING ----------
AMG.UI.UIGalleryItem:HandleOnClick+4f: 48 8B 46 40 - mov rax,[rsi+40]
AMG.UI.UIGalleryItem:HandleOnClick+53: 48 63 48 18 - movsxd rcx,dword ptr [rax+18]
AMG.UI.UIGalleryItem:HandleOnClick+57: 48 8D AD 00 00 00 00 - lea rbp,[rbp+00000000]
AMG.UI.UIGalleryItem:HandleOnClick+5e: 49 BB C0 E0 AD 3F CA 01 00 00 - mov r11,AMG.AssetSceneLoader:LoadScene
AMG.UI.UIGalleryItem:HandleOnClick+68: 41 FF D3 - call r11
AMG.UI.UIGalleryItem:HandleOnClick+6b: 48 8B 75 F8 - mov rsi,[rbp-08]
AMG.UI.UIGalleryItem:HandleOnClick+6f: 48 8D 65 00 - lea rsp,[rbp+00]
AMG.UI.UIGalleryItem:HandleOnClick+73: 5D - pop rbp
AMG.UI.UIGalleryItem:HandleOnClick+74: C3 - ret
1CA3FADE075: 00 00 - add [rax],al
}
109591
"Powerups Menu (Open Powerups at main menu)"
8000FF
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_Menus,48 8B 06 FF 50 70 48 8B 75 F0) // should be unique
define(INJECT_Menus,AMG.UI.UIScreenBase:Show+be)
alloc(newmem,$1000,INJECT_Menus)
registersymbol(INJECT_Menus Menus)
label(return Menus)
newmem:
mov [Menus],rsi
mov rax,[rsi]
call qword ptr [rax+70]
jmp return
align 8,CC
Menus:
dq 0
INJECT_Menus:
jmp newmem
nop
return:
[DISABLE]
INJECT_Menus:
db 48 8B 06 FF 50 70
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: AMG.UI.UIScreenBase:Show+be
AMG.UI.UIScreenBase:Show+93: FF 57 18 - call qword ptr [rdi+18]
AMG.UI.UIScreenBase:Show+96: 48 B8 80 FF DC FF C9 01 00 00 - mov rax,000001C9FFDCFF80
AMG.UI.UIScreenBase:Show+a0: 48 8B 00 - mov rax,[rax]
AMG.UI.UIScreenBase:Show+a3: 48 63 56 3C - movsxd rdx,dword ptr [rsi+3C]
AMG.UI.UIScreenBase:Show+a7: 48 8B C8 - mov rcx,rax
AMG.UI.UIScreenBase:Show+aa: 83 38 00 - cmp dword ptr [rax],00
AMG.UI.UIScreenBase:Show+ad: 90 - nop
AMG.UI.UIScreenBase:Show+ae: 49 BB 50 30 AB 3D CA 01 00 00 - mov r11,AMG.SoundManager:PlayUISound
AMG.UI.UIScreenBase:Show+b8: 41 FF D3 - call r11
AMG.UI.UIScreenBase:Show+bb: 48 8B CE - mov rcx,rsi
// ---------- INJECTING HERE ----------
AMG.UI.UIScreenBase:Show+be: 48 8B 06 - mov rax,[rsi]
// ---------- DONE INJECTING ----------
AMG.UI.UIScreenBase:Show+c1: FF 50 70 - call qword ptr [rax+70]
AMG.UI.UIScreenBase:Show+c4: 48 8B 75 F0 - mov rsi,[rbp-10]
AMG.UI.UIScreenBase:Show+c8: 48 8B 7D F8 - mov rdi,[rbp-08]
AMG.UI.UIScreenBase:Show+cc: 48 8D 65 00 - lea rsp,[rbp+00]
AMG.UI.UIScreenBase:Show+d0: 5D - pop rbp
AMG.UI.UIScreenBase:Show+d1: C3 - ret
1CA3DAB5C92: 00 00 - add [rax],al
1CA3DAB5C94: 00 00 - add [rax],al
1CA3DAB5C96: 00 00 - add [rax],al
1CA3DAB5C98: 01 04 02 - add [rdx+rax],eax
}
109592
"BASE"
0
4080FF
1
Menus
0
109594
"Data Manager"
0
8000FF
1
+68
0
109846
"Selected Character"
0
8000FF
1
+18
0
109848
"Name"
008000
String
128
1
0
1
+18
14
109985
"characterID"
008000
4 Bytes
+78
109986
"Special Skill Cooldown"
008000
Float
+7C
109849
"Stats"
0
8000FF
1
+28
0
109850
"maxHealthBase"
0
008000
Float
+10
109851
"maxHealthMod"
0
008000
Float
+14
109852
"recovery"
0
008000
Float
+18
109853
"armor"
0
008000
Float
+1C
109854
"luck"
0
008000
Float
+20
109855
"moveSpeed"
0
008000
Float
+24
109856
"moveSpeedMod"
0
008000
Float
+28
109857
"damageMod"
0
008000
Float
+2C
109858
"areaMod"
0
008000
Float
+30
109859
"speedMod"
0
008000
Float
+34
109860
"durationMod"
0
008000
Float
+38
109861
"amountMod"
0
008000
4 Bytes
+3C
109862
"cooldownMod"
0
008000
Float
+40
109863
"skillCooldownMod"
0
008000
Float
+44
109864
"experienceGainMod"
0
008000
Float
+48
109865
"goldGainMod"
0
008000
Float
+4C
109866
"curseMod"
0
008000
Float
+50
109867
"attractorMod"
0
008000
Float
+54
109868
"revival"
0
008000
4 Bytes
+58
109869
"startingRarity"
0
008000
4 Bytes
+5C
109870
"rerollCount"
0
008000
4 Bytes
+60
109871
"rerollRelicCount"
0
008000
4 Bytes
+64
109872
"skipCount"
0
008000
4 Bytes
+68
109873
"banishCount"
0
008000
4 Bytes
+6C
109874
"pickupDropChanceMod"
0
008000
Float
+70
109875
"extraPassiveSlots"
0
008000
4 Bytes
+74
109876
"extraWeaponSlots"
0
008000
4 Bytes
+78
109877
"extraPassiveLevelCap"
0
008000
4 Bytes
+7C
109878
"Starting Weapon"
0
8000FF
1
+30
0
109879
"Weapon Name"
008000
String
128
1
0
1
+18
14
109880
"Description"
008000
String
128
1
0
1
+20
14
109881
"Starting Stats"
0
8000FF
1
+40
0
109882
"Weapon ID"
008000
4 Bytes
+10
109883
"amount"
008000
4 Bytes
+14
109884
"damage"
008000
4 Bytes
+18
109885
"damageScalePerCharacterLevel"
008000
Float
+20
109886
"cooldown"
008000
Float
+24
109887
"passthroughCount"
008000
4 Bytes
+28
109888
"chainCount"
008000
4 Bytes
+2C
109889
"chargeCount"
008000
4 Bytes
+30
109890
"speed"
008000
Float
+34
109891
"duration"
008000
Float
+38
109892
"area"
008000
Float
+3C
109893
"force"
008000
Float
+40
109894
"damageMod"
008000
Float
+44
109895
"speedMod"
008000
Float
+48
109896
"durationMod"
008000
Float
+4C
109897
"areaMod"
008000
Float
+50
109898
"cooldownMod"
008000
Float
+54
109899
"critChance"
008000
Float
+58
109900
"critModifier"
008000
Float
+5C
109901
"cooldownMin"
008000
Float
+60
109902
"procChance"
008000
Float
+64
109928
"Powerup Pools"
8000FF
1
109903
"Current Pools (Do Not Edit, Reference Only)"
4080FF
4 Bytes
+58
18
10
109929
"Pool 1"
8000FF
1
109904
"Name"
008000
String
128
1
0
1
+58
14
10
20
10
109905
"pairedPowerUp"
008000
4 Bytes
+58
18
20
10
109906
"powerupType"
008000
4 Bytes
+58
28
20
10
109907
"powerupStatID"
008000
4 Bytes
+58
2C
20
10
109908
"value"
008000
Float
+58
30
20
10
109909
"rollChance"
008000
Float
+58
34
20
10
109910
"cap"
008000
4 Bytes
+58
38
20
10
109911
"hasPairing"
008000
Byte
+58
3C
20
10
109930
"Pool 2"
8000FF
1
109912
"Name"
008000
String
128
1
0
1
+58
14
10
28
10
109913
"pairedPowerUp"
008000
4 Bytes
+58
18
28
10
109914
"powerupType"
008000
4 Bytes
+58
28
28
10
109915
"powerupStatID"
008000
4 Bytes
+58
2C
28
10
109916
"value"
008000
Float
+58
30
28
10
109917
"rollChance"
008000
Float
+58
34
28
10
109918
"cap"
008000
4 Bytes
+58
38
28
10
109919
"hasPairing"
008000
Byte
+58
3C
28
10
109931
"Pool 3"
8000FF
1
109920
"Name"
008000
String
128
1
0
1
+58
14
10
30
10
109921
"pairedPowerUp"
008000
4 Bytes
+58
18
30
10
109922
"powerupType"
008000
4 Bytes
+58
28
30
10
109923
"powerupStatID"
008000
4 Bytes
+58
2C
30
10
109924
"value"
008000
Float
+58
30
30
10
109925
"rollChance"
008000
Float
+58
34
30
10
109926
"cap"
008000
4 Bytes
+58
38
30
10
109927
"hasPairing"
008000
Byte
+58
3C
30
10
109932
"Extended Powerup Pools"
8000FF
1
109933
"Current Pools (Do Not Edit, Reference Only)"
4080FF
4 Bytes
+60
18
10
109958
"Pool 1"
8000FF
1
109934
"Name"
008000
String
128
1
0
1
+60
14
10
20
10
109935
"pairedPowerUp"
008000
4 Bytes
+60
18
20
10
109936
"powerupType"
008000
4 Bytes
+60
28
20
10
109937
"powerupStatID"
008000
4 Bytes
+60
2C
20
10
109938
"value"
008000
Float
+60
30
20
10
109939
"rollChance"
008000
Float
+60
34
20
10
109940
"cap"
008000
4 Bytes
+60
38
20
10
109941
"hasPairing"
008000
Byte
+60
3C
20
10
109959
"Pool 2"
8000FF
1
109942
"Name"
008000
String
128
1
0
1
+60
14
10
28
10
109943
"pairedPowerUp"
008000
4 Bytes
+60
18
28
10
109944
"powerupType"
008000
4 Bytes
+60
28
28
10
109945
"powerupStatID"
008000
4 Bytes
+60
2C
28
10
109946
"value"
008000
Float
+60
30
28
10
109947
"rollChance"
008000
Float
+60
34
28
10
109948
"cap"
008000
4 Bytes
+60
38
28
10
109949
"hasPairing"
008000
Byte
+60
3C
28
10
109960
"Pool 3"
8000FF
1
109950
"Name"
008000
String
128
1
0
1
+60
14
10
30
10
109951
"pairedPowerUp"
008000
4 Bytes
+60
18
30
10
109952
"powerupType"
008000
4 Bytes
+60
28
30
10
109953
"powerupStatID"
008000
4 Bytes
+60
2C
30
10
109954
"value"
008000
Float
+60
30
30
10
109955
"rollChance"
008000
Float
+60
34
30
10
109956
"cap"
008000
4 Bytes
+60
38
30
10
109957
"hasPairing"
008000
Byte
+60
3C
30
10
109961
"Special Skill"
0
8000FF
1
+70
0
109962
"Name"
008000
String
128
1
0
1
+18
14
109963
"Starting Stats"
8000FF
1
109964
"weaponID"
008000
4 Bytes
+40
10
109965
"amount"
008000
4 Bytes
+40
14
109966
"damage"
008000
4 Bytes
+40
18
109967
"damageScalePerCharacterLevel"
008000
Float
+40
20
109968
"cooldown"
008000
Float
+40
24
109969
"passthroughCount"
008000
4 Bytes
+40
28
109970
"chainCount"
008000
4 Bytes
+40
2C
109971
"chargeCount"
008000
4 Bytes
+40
30
109972
"speed"
008000
Float
+40
34
109973
"duration"
008000
Float
+40
38
109974
"area"
008000
Float
+40
3C
109975
"force"
008000
Float
+40
40
109976
"damageMod"
008000
Float
+40
44
109977
"speedMod"
008000
Float
+40
48
109978
"durationMod"
008000
Float
+40
4C
109979
"areaMod"
008000
Float
+40
50
109980
"cooldownMod"
008000
Float
+40
54
109981
"critChance"
008000
Float
+40
58
109982
"critModifier"
008000
Float
+40
5C
109983
"cooldownMin"
008000
Float
+40
60
109984
"procChance"
008000
Float
+40
64
109672
"Poweups Editor"
8000FF
1
109736
"Current Unlocked Items (Do Not Edit, Reference Only)"
0080FF
4 Bytes
+30
18
10
109803
"ID Name Reference"
0080FF
1
109801
"Passive ID"
FF0080
4 Bytes
+48
50
20
10
18
109802
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
20
10
18
109844
"Passive ID"
0
FF0080
4 Bytes
+48
50
28
10
18
109845
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
28
10
18
109842
"Passive ID"
0
FF0080
4 Bytes
+48
50
30
10
18
109843
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
30
10
18
109840
"Passive ID"
0
FF0080
4 Bytes
+48
50
38
10
18
109841
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
38
10
18
109838
"Passive ID"
0
FF0080
4 Bytes
+48
50
40
10
18
109839
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
40
10
18
109836
"Passive ID"
0
FF0080
4 Bytes
+48
50
48
10
18
109837
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
48
10
18
109834
"Passive ID"
0
FF0080
4 Bytes
+48
50
50
10
18
109835
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
50
10
18
109832
"Passive ID"
0
FF0080
4 Bytes
+48
50
58
10
18
109833
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
58
10
18
109830
"Passive ID"
0
FF0080
4 Bytes
+48
50
60
10
18
109831
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
60
10
18
109828
"Passive ID"
0
FF0080
4 Bytes
+48
50
68
10
18
109829
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
68
10
18
109826
"Passive ID"
0
FF0080
4 Bytes
+48
50
70
10
18
109827
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
70
10
18
109824
"Passive ID"
0
FF0080
4 Bytes
+48
50
78
10
18
109825
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
78
10
18
109822
"Passive ID"
0
FF0080
4 Bytes
+48
50
80
10
18
109823
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
80
10
18
109820
"Passive ID"
0
FF0080
4 Bytes
+48
50
88
10
18
109821
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
88
10
18
109818
"Passive ID"
0
FF0080
4 Bytes
+48
50
90
10
18
109819
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
90
10
18
109816
"Passive ID"
0
FF0080
4 Bytes
+48
50
98
10
18
109817
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
98
10
18
109814
"Passive ID"
0
FF0080
4 Bytes
+48
50
A0
10
18
109815
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
A0
10
18
109812
"Passive ID"
0
FF0080
4 Bytes
+48
50
A8
10
18
109813
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
A8
10
18
109810
"Passive ID"
0
FF0080
4 Bytes
+48
50
B0
10
18
109811
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
B0
10
18
109808
"Passive ID"
0
FF0080
4 Bytes
+48
50
B8
10
18
109809
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
B8
10
18
109806
"Passive ID"
0
FF0080
4 Bytes
+48
50
C0
10
18
109807
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
C0
10
18
109804
"Passive ID"
0
FF0080
4 Bytes
+48
50
C8
10
18
109805
"Name"
0
008000
String
128
1
0
1
[Menus]+48
14
18
C8
10
18
109737
"Item 1"
0
8000FF
1
+30
0
20
10
109670
"Passive ID"
0
008000
4 Bytes
+10
109671
"Upgrade Level"
0
008000
4 Bytes
+14
109738
"Item 2"
0
8000FF
1
+30
0
28
10
109739
"Passive ID"
0
008000
4 Bytes
+10
109740
"Upgrade Level"
0
008000
4 Bytes
+14
109798
"Item 3"
0
8000FF
1
+30
0
30
10
109799
"Passive ID"
0
008000
4 Bytes
+10
109800
"Upgrade Level"
0
008000
4 Bytes
+14
109795
"Item 4"
0
8000FF
1
+30
0
38
10
109796
"Passive ID"
0
008000
4 Bytes
+10
109797
"Upgrade Level"
0
008000
4 Bytes
+14
109792
"Item 5"
0
8000FF
1
+30
0
40
10
109793
"Passive ID"
0
008000
4 Bytes
+10
109794
"Upgrade Level"
0
008000
4 Bytes
+14
109789
"Item 6"
0
8000FF
1
+30
0
48
10
109790
"Passive ID"
0
008000
4 Bytes
+10
109791
"Upgrade Level"
0
008000
4 Bytes
+14
109786
"Item 7"
0
8000FF
1
+30
0
50
10
109787
"Passive ID"
0
008000
4 Bytes
+10
109788
"Upgrade Level"
0
008000
4 Bytes
+14
109783
"Item 8"
0
8000FF
1
+30
0
58
10
109784
"Passive ID"
0
008000
4 Bytes
+10
109785
"Upgrade Level"
0
008000
4 Bytes
+14
109780
"Item 9"
0
8000FF
1
+30
0
60
10
109781
"Passive ID"
0
008000
4 Bytes
+10
109782
"Upgrade Level"
0
008000
4 Bytes
+14
109777
"Item 10"
0
8000FF
1
+30
0
68
10
109778
"Passive ID"
0
008000
4 Bytes
+10
109779
"Upgrade Level"
0
008000
4 Bytes
+14
109774
"Item 11"
0
8000FF
1
+30
0
70
10
109775
"Passive ID"
0
008000
4 Bytes
+10
109776
"Upgrade Level"
0
008000
4 Bytes
+14
109771
"Item 12"
0
8000FF
1
+30
0
78
10
109772
"Passive ID"
0
008000
4 Bytes
+10
109773
"Upgrade Level"
0
008000
4 Bytes
+14
109768
"Item 13"
0
8000FF
1
+30
0
80
10
109769
"Passive ID"
0
008000
4 Bytes
+10
109770
"Upgrade Level"
0
008000
4 Bytes
+14
109765
"Item 14"
0
8000FF
1
+30
0
88
10
109766
"Passive ID"
0
008000
4 Bytes
+10
109767
"Upgrade Level"
0
008000
4 Bytes
+14
109762
"Item 15"
0
8000FF
1
+30
0
90
10
109763
"Passive ID"
0
008000
4 Bytes
+10
109764
"Upgrade Level"
0
008000
4 Bytes
+14
109759
"Item 16"
0
8000FF
1
+30
0
98
10
109760
"Passive ID"
0
008000
4 Bytes
+10
109761
"Upgrade Level"
0
008000
4 Bytes
+14
109756
"Item 17"
0
8000FF
1
+30
0
A0
10
109757
"Passive ID"
0
008000
4 Bytes
+10
109758
"Upgrade Level"
0
008000
4 Bytes
+14
109753
"Item 18"
0
8000FF
1
+30
0
A8
10
109754
"Passive ID"
0
008000
4 Bytes
+10
109755
"Upgrade Level"
0
008000
4 Bytes
+14
109750
"Item 19"
0
8000FF
1
+30
0
B0
10
109751
"Passive ID"
0
008000
4 Bytes
+10
109752
"Upgrade Level"
0
008000
4 Bytes
+14
109747
"Item 20"
0
8000FF
1
+30
0
B8
10
109748
"Passive ID"
0
008000
4 Bytes
+10
109749
"Upgrade Level"
0
008000
4 Bytes
+14
109744
"Item 21"
0
8000FF
1
+30
0
C0
10
109745
"Passive ID"
0
008000
4 Bytes
+10
109746
"Upgrade Level"
0
008000
4 Bytes
+14
109741
"Item 22"
0
8000FF
1
+30
0
C8
10
109742
"Passive ID"
0
008000
4 Bytes
+10
109743
"Upgrade Level"
0
008000
4 Bytes
+14
109599
"Global Difficulty Modifier"
0
8000FF
1
+50
0
40
109600
"m_CachedPtr"
008000
4 Bytes
+10
109601
"difficultyID"
008000
4 Bytes
+18
109602
"enemyHealthModifier"
008000
Float
+1C
109603
"enemyDamageModifier"
008000
Float
+20
109604
"enemySpeedModifier"
008000
Float
+24
109605
"enemyAmountModifier"
008000
Float
+28
109606
"enemyLimitMinModifier"
008000
Float
+2C
109607
"enemyLimitMaxModifier"
008000
Float
+30
109608
"bossHealthModifier"
008000
Float
+34
109609
"bossDamageModifier"
008000
Float
+38
109610
"bossSpeedModifier"
008000
Float
+3C
109611
"goldGainModifier"
008000
Float
+40
109612
"experienceGainModifier"
008000
Float
+44
109616
"Lucky Level Up"
0
8000FF
1
+50
0
60
109614
"chance_4"
0
008000
Float
+10
109615
"chance_5"
0
008000
Float
+14
109617
"Lucky Open Chest"
0
8000FF
1
+50
0
68
109618
"lucky"
0
008000
Float
+10
109619
"superLucky"
0
008000
Float
+14
109595
"Selected Character Scene ID"
008000
4 Bytes
+88
109596
"Selected Level"
008000
4 Bytes
+8C
109597
"Bring Pet"
008000
Byte
+90
109598
"Gold"
008000
4 Bytes
+94
109613
"Relic Greed Gold Drop Chance"
008000
Float
+50
20
58
109620
"isReleaseBuild"
008000
Byte
+50
78
109621
"isDemoRelease"
008000
Byte
+50
79
109622
"useDynamicRig"
008000
Byte
+50
7A
109623
"enableLevel3"
008000
Byte
+50
7B
109624
"disableShrineQuestsForDemoBuild"
008000
Byte
+50
7C
109625
"disableRelicDropForDemoBuild"
008000
Byte
+50
7D
109626
"isAgeRatedRelease"
008000
Byte
+50
7E
109627
"demoDurationMinute"
008000
4 Bytes
+50
80
109628
"loadAssetCatalog"
008000
Byte
+50
84
109629
"enableUnlockSystem"
008000
Byte
+50
85
109630
"difficultyPass"
008000
Byte
+50
86
109631
"autoRevertToForwardAimingIfRightJoystickIdle"
008000
Byte
+50
87
109632
"enableVibrationWhenHurt"
008000
Byte
+50
88
109633
"vibrationMotionLevelLeft"
008000
Float
+50
8C
109634
"vibrationMotionLevelRight"
008000
Float
+50
90
109635
"vibrationMotionDuration"
008000
Float
+50
94
109636
"enablePassivesInGame"
008000
Byte
+50
98
109637
"passiveGenChancef"
008000
Float
+50
9C
109638
"enableEvolutionInGame"
008000
Byte
+50
A0
109639
"cursedShrineDuration"
008000
Float
+50
A4
109640
"cursedShrineEnemyHealthBonus"
008000
Float
+50
A8
109641
"cursedShrineEnemyDamageBonus"
008000
Float
+50
AC
109642
"physic_SolverIterationCount"
008000
4 Bytes
+50
B0
109643
"ucCleanSystem_StaleAge"
008000
Float
+50
B4
109644
"ucCleanSystem_StaleDist"
008000
Float
+50
B8
109645
"ucCleanSystem_CrystalVelocityModifier"
008000
Float
+50
BC
109646
"buffDomain_speedModifier"
008000
Float
+50
C0
109647
"avoidanceSmoothSpeed"
008000
Float
+50
C4
109648
"bossAvoidanceModifier"
008000
Float
+50
C8
109649
"vectorSpeed"
008000
Float
+50
CC
109650
"vectorSpeed2"
008000
Float
+50
D0
109651
"vectorSideSpeed"
008000
Float
+50
D4
109652
"vectorPropSpeed"
008000
Float
+50
D8
109653
"vectorTurnSideSpeed"
008000
Float
+50
DC
109654
"vectorExtraPadding"
008000
Float
+50
E0
109655
"speedBlockHeroMove"
008000
Float
+50
E4
109656
"regularAvoidanceModifier"
008000
Float
+50
E8
109657
"regularAvoidanceForwardModifier"
008000
Float
+50
EC
109658
"regularCollideSpeedModifier"
008000
Float
+50
F0
109659
"barrelSpawnChance"
008000
Float
+50
F4
109660
"goldRewardPerWin"
008000
4 Bytes
+50
F8
109661
"normalChestGoldRange"
008000
4 Bytes
+50
FC
109662
"luckyChestGoldRange"
008000
4 Bytes
+50
104
109663
"superLuckyChestGoldRange"
008000
4 Bytes
+50
10C
109664
"usingNewRNGRig"
008000
Byte
+50
114
109665
"attractDistanceBase"
008000
Float
+50
118
109666
"levelUpUpgradeExistingChance"
008000
Float
+50
11C
109667
"useExtendedPoolFromWeaponLevel"
008000
4 Bytes
+50
120
109668
"levelUpEnableWeaponUpgradeAtEquippedCount"
008000
4 Bytes
+50
124
104217
"Game Speed"
8000FF
Auto Assembler Script
{$lua}
[ENABLE]
Speedtimer = createTimer()
Speedtimer.setInterval(1000)
Speedtimer.onTimer = function(Speed)
speedhack_setSpeed(readInteger('SpeedVar'))
end
[DISABLE]
speedhack_setSpeed(1)
Speedtimer.destroy()
109589
"Set Desired Speed - (.1 - .9 = Slower - 1.1 up = faster)"
0
008000
4 Bytes
SpeedVar
109991
"Character Manager"
0
8000FF
1
CharacterManager
0
110110
"Name"
String
128
1
0
1
+F8
14
18
110059
"Game Config"
1
110013
"enableLevel3"
Byte
+130
7B
110014
"disableShrineQuestsForDemoBuild"
Byte
+130
7C
110015
"disableRelicDropForDemoBuild"
Byte
+130
7D
110016
"isAgeRatedRelease"
Byte
+130
7E
110017
"demoDurationMinute"
4 Bytes
+130
80
110018
"loadAssetCatalog"
Byte
+130
84
110019
"enableUnlockSystem"
Byte
+130
85
110020
"difficultyPass"
Byte
+130
86
110021
"autoRevertToForwardAimingIfRightJoystickIdle"
Byte
+130
87
110022
"enableVibrationWhenHurt"
Byte
+130
88
110023
"vibrationMotionLevelLeft"
Float
+130
8C
110024
"vibrationMotionLevelRight"
Float
+130
90
110025
"vibrationMotionDuration"
Float
+130
94
110026
"enablePassivesInGame"
Byte
+130
98
110027
"passiveGenChancef"
Float
+130
9C
110028
"enableEvolutionInGame"
Byte
+130
A0
110029
"cursedShrineDuration"
Float
+130
A4
110030
"cursedShrineEnemyHealthBonus"
Float
+130
A8
110031
"cursedShrineEnemyDamageBonus"
Float
+130
AC
110032
"physic_SolverIterationCount"
4 Bytes
+130
B0
110033
"ucCleanSystem_StaleAge"
Float
+130
B4
110034
"ucCleanSystem_StaleDist"
Float
+130
B8
110035
"ucCleanSystem_CrystalVelocityModifier"
Float
+130
BC
110036
"buffDomain_speedModifier"
Float
+130
C0
110037
"avoidanceSmoothSpeed"
Float
+130
C4
110038
"bossAvoidanceModifier"
Float
+130
C8
110039
"vectorSpeed"
Float
+130
CC
110040
"vectorSpeed2"
Float
+130
D0
110041
"vectorSideSpeed"
Float
+130
D4
110042
"vectorPropSpeed"
Float
+130
D8
110043
"vectorTurnSideSpeed"
Float
+130
DC
110044
"vectorExtraPadding"
Float
+130
E0
110045
"speedBlockHeroMove"
Float
+130
E4
110046
"regularAvoidanceModifier"
Float
+130
E8
110047
"regularAvoidanceForwardModifier"
Float
+130
EC
110048
"regularCollideSpeedModifier"
Float
+130
F0
110049
"barrelSpawnChance"
Float
+130
F4
110050
"goldRewardPerWin"
4 Bytes
+130
F8
110051
"normalChestGoldRange"
4 Bytes
+130
FC
110052
"luckyChestGoldRange"
4 Bytes
+130
104
110053
"superLuckyChestGoldRange"
4 Bytes
+130
10C
110054
"usingNewRNGRig"
Byte
+130
114
110055
"attractDistanceBase"
Float
+130
118
110056
"levelUpUpgradeExistingChance"
Float
+130
11C
110057
"useExtendedPoolFromWeaponLevel"
4 Bytes
+130
120
110058
"levelUpEnableWeaponUpgradeAtEquippedCount"
4 Bytes
+130
124
110060
"Luck Open Chests"
1
110061
"lucky"
Float
+130
10
68
110062
"superLucky"
Float
+130
14
68
110063
"Lucky Level Up"
1
110064
"chance_4"
Float
+130
10
60
110065
"chance_5"
Float
+130
14
60
110066
"Relic Greed Gold Dro pChance Param"
1
110067
"value"
Float
+130
20
58
110068
"Global Difficulty Modifier"
1
110069
"difficultyID"
4 Bytes
+130
18
40
110070
"enemyHealthModifier"
Float
+130
1C
40
110071
"enemyDamageModifier"
Float
+130
20
40
110072
"enemySpeedModifier"
Float
+130
24
40
110073
"enemyAmountModifier"
Float
+130
28
40
110074
"enemyLimitMinModifier"
Float
+130
2C
40
110075
"enemyLimitMaxModifier"
Float
+130
30
40
110076
"bossHealthModifier"
Float
+130
34
40
110077
"bossDamageModifier"
Float
+130
38
40
110078
"bossSpeedModifier"
Float
+130
3C
40
110079
"goldGainModifier"
Float
+130
40
40
110080
"experienceGainModifier"
Float
+130
44
40
110081
"Character Stats"
1
110082
"maxHealthBase"
Float
+100
10
110083
"maxHealthMod"
Float
+100
14
110084
"recovery"
Float
+100
18
110085
"armor"
Float
+100
1C
110086
"luck"
Float
+100
20
110087
"moveSpeed"
Float
+100
24
110088
"moveSpeedMod"
Float
+100
28
110089
"damageMod"
Float
+100
2C
110090
"areaMod"
Float
+100
30
110091
"speedMod"
Float
+100
34
110092
"durationMod"
Float
+100
38
110093
"amountMod"
4 Bytes
+100
3C
110094
"cooldownMod"
Float
+100
40
110095
"skillCooldownMod"
Float
+100
44
110096
"experienceGainMod"
Float
+100
48
110097
"goldGainMod"
Float
+100
4C
110098
"curseMod"
Float
+100
50
110099
"attractorMod"
Float
+100
54
110100
"revival"
4 Bytes
+100
58
110101
"startingRarity"
4 Bytes
+100
5C
110102
"rerollCount"
4 Bytes
+100
60
110103
"rerollRelicCount"
4 Bytes
+100
64
110104
"skipCount"
4 Bytes
+100
68
110105
"banishCount"
4 Bytes
+100
6C
110106
"pickupDropChanceMod"
Float
+100
70
110107
"extraPassiveSlots"
4 Bytes
+100
74
110108
"extraWeaponSlots"
4 Bytes
+100
78
110109
"extraPassiveLevelCap"
4 Bytes
+100
7C
110113
"Special Skill"
1
110111
"specialSkillCooldown"
Float
+F8
7C
110112
"enabledInDemoBuild"
Byte
+F8
80
110144
"Game Setting"
1
110124
"selectedLevel"
4 Bytes
+118
190
110125
"gameEndTime"
Float
+118
194
110126
"victoryUIDelay"
Float
+118
198
110127
"timescaleMultiplier"
Float
+118
19C
110128
"victory"
Byte
+118
1A0
110129
"_gameEnded"
Byte
+118
1A1
110130
"autoCreateDataManager"
Byte
+118
1A2
110131
"totalDamage"
Float
+118
1A4
110132
"totalHits"
4 Bytes
+118
1A8
110133
"elapsedTime"
Float
+118
1AC
110134
"killCount"
4 Bytes
+118
1B0
110135
"eliteKillCount"
4 Bytes
+118
1B4
110136
"exitCounter"
4 Bytes
+118
1B8
110137
"_levelSetupInitialized"
Byte
+118
1BC
110138
"_ecsWorldInitialized"
Byte
+118
1BD
110139
"<RequireDefeatEndBoss>k__BackingField"
Byte
+118
1BE
110140
"<RequireDefeatMiniBoss>k__BackingField"
Byte
+118
1BF
110141
"isPaused"
Byte
+118
1C0
110142
"allowInfoGUI"
Byte
+118
1C1
110143
"_currentGraphicQuality"
4 Bytes
+118
1C4
109992
"Max Weapon"
4 Bytes
+1F0
109993
"Max Passives"
4 Bytes
+1F4
109994
"gameoverDelay"
Float
+1F8
109995
"flickerColor"
4 Bytes
+1FC
109996
"immuneTotalTime"
Float
+20C
109997
"_isHeroDead"
Byte
+210
109998
"_isMovementLocked"
Byte
+211
109999
"_goldGainModifier"
Float
+214
110000
"_experienceGainModifier"
Float
+218
110001
"extraDamageRatio"
Float
+21C
110002
"_raycastPlane"
4 Bytes
+220
110003
"health"
Float
+230
110004
"_abilityUsageCount"
4 Bytes
+234
110005
"attractDistanceBase"
Float
+238
110006
"experience"
Double
+240
110007
"gold"
4 Bytes
+248
110008
"characterLevel"
4 Bytes
+24C
110009
"<hasAddEvolutionWeaponToChest>k__BackingField"
Byte
+250
110010
"haveEnergyShield"
Byte
+251
110011
"isLastPopupHasExpand"
Byte
+252
110012
"rotation"
4 Bytes
+254
110120
"Scripts"
8000FF
1
110119
"God Mode"
Auto Assembler Script
define(address,AMG.CharacterManager:RecoveryHP+172)
define(bytes,F3 0F 11 AF 30 02 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.CharacterManager:RecoveryHP+172)
label(return)
newmem:
mov [rdi+00000230],(float)9999
jmp return
address:
jmp newmem
nop 3
return:
[DISABLE]
address:
db bytes
// movss [rdi+00000230],xmm5
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.CharacterManager:RecoveryHP+172
AMG.CharacterManager:RecoveryHP+145: F2 0F 10 45 D0 - movsd xmm0,[rbp-30]
AMG.CharacterManager:RecoveryHP+14a: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
AMG.CharacterManager:RecoveryHP+14e: F3 0F 11 6D DC - movss [rbp-24],xmm5
AMG.CharacterManager:RecoveryHP+153: F3 0F 10 45 DC - movss xmm0,[rbp-24]
AMG.CharacterManager:RecoveryHP+158: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.CharacterManager:RecoveryHP+15c: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
AMG.CharacterManager:RecoveryHP+160: F3 0F 11 6D DC - movss [rbp-24],xmm5
AMG.CharacterManager:RecoveryHP+165: F3 0F 10 45 DC - movss xmm0,[rbp-24]
AMG.CharacterManager:RecoveryHP+16a: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.CharacterManager:RecoveryHP+16e: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
AMG.CharacterManager:RecoveryHP+172: F3 0F 11 AF 30 02 00 00 - movss [rdi+00000230],xmm5
// ---------- DONE INJECTING ----------
AMG.CharacterManager:RecoveryHP+17a: 48 8B 86 58 01 00 00 - mov rax,[rsi+00000158]
AMG.CharacterManager:RecoveryHP+181: 48 8B C8 - mov rcx,rax
AMG.CharacterManager:RecoveryHP+184: 4C 8B F9 - mov r15,rcx
AMG.CharacterManager:RecoveryHP+187: 48 85 C0 - test rax,rax
AMG.CharacterManager:RecoveryHP+18a: 75 02 - jne AMG.CharacterManager:RecoveryHP+18e
AMG.CharacterManager:RecoveryHP+18c: EB 07 - jmp AMG.CharacterManager:RecoveryHP+195
AMG.CharacterManager:RecoveryHP+18e: 49 8B CF - mov rcx,r15
AMG.CharacterManager:RecoveryHP+191: 41 FF 57 18 - call qword ptr [r15+18]
AMG.CharacterManager:RecoveryHP+195: 48 8B 75 E8 - mov rsi,[rbp-18]
AMG.CharacterManager:RecoveryHP+199: 48 8B 7D F0 - mov rdi,[rbp-10]
}
110118
"Max Weapon Stats (Open Pause Menu)"
Auto Assembler Script
define(address,AMG.UI.UIWeaponTooltips:TakeInfo+18b)
define(bytes,48 63 40 10 48 89 45 A8)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.UI.UIWeaponTooltips:TakeInfo+18b)
label(return)
newmem:
mov dword ptr [rax+10],#9999999
movsxd rax,dword ptr [rax+10]
mov [rbp-58],rax
jmp return
address:
jmp newmem
nop 3
return:
[DISABLE]
address:
db bytes
// movsxd rax,dword ptr [rax+10]
// mov [rbp-58],rax
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.UI.UIWeaponTooltips:TakeInfo+17b
AMG.UI.UIWeaponTooltips:TakeInfo+14b: 48 8B 47 18 - mov rax,[rdi+18]
AMG.UI.UIWeaponTooltips:TakeInfo+14f: 48 89 45 B8 - mov [rbp-48],rax
AMG.UI.UIWeaponTooltips:TakeInfo+153: 48 8B 47 38 - mov rax,[rdi+38]
AMG.UI.UIWeaponTooltips:TakeInfo+157: 48 89 45 B0 - mov [rbp-50],rax
AMG.UI.UIWeaponTooltips:TakeInfo+15b: 48 63 96 5C 01 00 00 - movsxd rdx,dword ptr [rsi+0000015C]
AMG.UI.UIWeaponTooltips:TakeInfo+162: 49 8B CF - mov rcx,r15
AMG.UI.UIWeaponTooltips:TakeInfo+165: 41 83 3F 00 - cmp dword ptr [r15],00
AMG.UI.UIWeaponTooltips:TakeInfo+169: 48 8D 64 24 00 - lea rsp,[rsp+00]
AMG.UI.UIWeaponTooltips:TakeInfo+16e: 49 BB F0 2F 0A F4 35 02 00 00 - mov r11,System.Collections.Generic.List`1[T_REF]:get_Item
AMG.UI.UIWeaponTooltips:TakeInfo+178: 41 FF D3 - call r11
// ---------- INJECTING HERE ----------
AMG.UI.UIWeaponTooltips:TakeInfo+17b: 48 63 40 10 - movsxd rax,dword ptr [rax+10]
// ---------- DONE INJECTING ----------
AMG.UI.UIWeaponTooltips:TakeInfo+17f: 48 89 45 A8 - mov [rbp-58],rax
AMG.UI.UIWeaponTooltips:TakeInfo+183: 48 63 96 5C 01 00 00 - movsxd rdx,dword ptr [rsi+0000015C]
AMG.UI.UIWeaponTooltips:TakeInfo+18a: 49 8B CF - mov rcx,r15
AMG.UI.UIWeaponTooltips:TakeInfo+18d: 41 83 3F 00 - cmp dword ptr [r15],00
AMG.UI.UIWeaponTooltips:TakeInfo+191: 48 8D 64 24 00 - lea rsp,[rsp+00]
AMG.UI.UIWeaponTooltips:TakeInfo+196: 49 BB F0 2F 0A F4 35 02 00 00 - mov r11,System.Collections.Generic.List`1[T_REF]:get_Item
AMG.UI.UIWeaponTooltips:TakeInfo+1a0: 41 FF D3 - call r11
AMG.UI.UIWeaponTooltips:TakeInfo+1a3: F3 0F 10 40 34 - movss xmm0,[rax+34]
AMG.UI.UIWeaponTooltips:TakeInfo+1a8: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.UI.UIWeaponTooltips:TakeInfo+1ac: F2 0F 11 45 98 - movsd [rbp-68],xmm0
}
110122
"Max Kill Count"
Auto Assembler Script
define(address,AMG.BMSGameManager:IncreaseKillCount+1f)
define(bytes,89 87 B0 01 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.BMSGameManager:IncreaseKillCount+1f)
label(return)
newmem:
mov [rdi+000001B0],#999999999
jmp return
address:
jmp newmem
nop
return:
[DISABLE]
address:
db bytes
// mov [rdi+000001B0],eax
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.BMSGameManager:IncreaseKillCount+1f
29FB236AF3E: 00 00 - add [rax],al
AMG.BMSGameManager:IncreaseKillCount: 55 - push rbp
AMG.BMSGameManager:IncreaseKillCount+1: 48 8B EC - mov rbp,rsp
AMG.BMSGameManager:IncreaseKillCount+4: 48 83 EC 30 - sub rsp,30
AMG.BMSGameManager:IncreaseKillCount+8: 48 89 75 F0 - mov [rbp-10],rsi
AMG.BMSGameManager:IncreaseKillCount+c: 48 89 7D F8 - mov [rbp-08],rdi
AMG.BMSGameManager:IncreaseKillCount+10: 48 8B F9 - mov rdi,rcx
AMG.BMSGameManager:IncreaseKillCount+13: 48 8B F2 - mov rsi,rdx
AMG.BMSGameManager:IncreaseKillCount+16: 48 63 87 B0 01 00 00 - movsxd rax,dword ptr [rdi+000001B0]
AMG.BMSGameManager:IncreaseKillCount+1d: 03 C6 - add eax,esi
// ---------- INJECTING HERE ----------
AMG.BMSGameManager:IncreaseKillCount+1f: 89 87 B0 01 00 00 - mov [rdi+000001B0],eax
// ---------- DONE INJECTING ----------
AMG.BMSGameManager:IncreaseKillCount+25: 48 8B 87 38 01 00 00 - mov rax,[rdi+00000138]
AMG.BMSGameManager:IncreaseKillCount+2c: 48 8B C8 - mov rcx,rax
AMG.BMSGameManager:IncreaseKillCount+2f: 48 8B F1 - mov rsi,rcx
AMG.BMSGameManager:IncreaseKillCount+32: 48 85 C0 - test rax,rax
AMG.BMSGameManager:IncreaseKillCount+35: 75 02 - jne AMG.BMSGameManager:IncreaseKillCount+39
AMG.BMSGameManager:IncreaseKillCount+37: EB 0D - jmp AMG.BMSGameManager:IncreaseKillCount+46
AMG.BMSGameManager:IncreaseKillCount+39: 48 63 97 B0 01 00 00 - movsxd rdx,dword ptr [rdi+000001B0]
AMG.BMSGameManager:IncreaseKillCount+40: 48 8B CE - mov rcx,rsi
AMG.BMSGameManager:IncreaseKillCount+43: FF 56 18 - call qword ptr [rsi+18]
AMG.BMSGameManager:IncreaseKillCount+46: 48 8B 75 F0 - mov rsi,[rbp-10]
}
110145
"Max Money"
Auto Assembler Script
{$lua}
[ENABLE]
writeInteger ('[CharacterManager]+248',9999999)
[DISABLE]
110146
"Advance Time to 29 min"
Auto Assembler Script
{$lua}
[ENABLE]
writeFloat ('[[CharacterManager]+118]+1AC',1740)
[DISABLE]
110147
"Stop Timer"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_NoTimer,F3 0F 11 AE AC 01 00 00) // should be unique
define(INJECT_NoTimer,AMG.BMSGameManager:Update+fe4)
INJECT_NoTimer:
db 90 90 90 90 90 90 90 90
[DISABLE]
INJECT_NoTimer:
db F3 0F 11 AE AC 01 00 00
{
// ORIGINAL CODE - INJECTION POINT: AMG.BMSGameManager:Update+fe4
AMG.BMSGameManager:Update+fb3: F3 0F 10 86 AC 01 00 00 - movss xmm0,[rsi+000001AC]
AMG.BMSGameManager:Update+fbb: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.BMSGameManager:Update+fbf: F2 0F 11 45 C8 - movsd [rbp-38],xmm0
AMG.BMSGameManager:Update+fc4: 66 90 - nop 2
AMG.BMSGameManager:Update+fc6: 49 BB B0 33 28 AE 9F 02 00 00 - mov r11,UnityEngine.Time:get_deltaTime
AMG.BMSGameManager:Update+fd0: 41 FF D3 - call r11
AMG.BMSGameManager:Update+fd3: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
AMG.BMSGameManager:Update+fd7: F2 0F 10 45 C8 - movsd xmm0,[rbp-38]
AMG.BMSGameManager:Update+fdc: F2 0F 58 C1 - addsd xmm0,xmm1
AMG.BMSGameManager:Update+fe0: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
AMG.BMSGameManager:Update+fe4: F3 0F 11 AE AC 01 00 00 - movss [rsi+000001AC],xmm5
// ---------- DONE INJECTING ----------
AMG.BMSGameManager:Update+fec: F3 0F 10 86 AC 01 00 00 - movss xmm0,[rsi+000001AC]
AMG.BMSGameManager:Update+ff4: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.BMSGameManager:Update+ff8: F3 0F 10 8E 94 01 00 00 - movss xmm1,[rsi+00000194]
AMG.BMSGameManager:Update+1000: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
AMG.BMSGameManager:Update+1004: 66 0F 2F C8 - comisd xmm1,xmm0
AMG.BMSGameManager:Update+1008: 0F 8A 9D 01 00 00 - jp AMG.BMSGameManager:Update+11ab
AMG.BMSGameManager:Update+100e: 0F 83 97 01 00 00 - jae AMG.BMSGameManager:Update+11ab
AMG.BMSGameManager:Update+1014: 0F B6 86 A0 01 00 00 - movzx eax,byte ptr [rsi+000001A0]
AMG.BMSGameManager:Update+101b: 85 C0 - test eax,eax
AMG.BMSGameManager:Update+101d: 0F 85 88 01 00 00 - jne AMG.BMSGameManager:Update+11ab
}
110148
"Finish Game"
Auto Assembler Script
{$lua}
[ENABLE]
writeFloat ('[[CharacterManager]+118]+1AC',1800)
[DISABLE]
110149
"Max Damage"
Auto Assembler Script
define(address,AMG.CharacterManager:GetWeaponDamage+5f)
define(bytes,F3 0F 10 48 2C)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.CharacterManager:GetWeaponDamage+5f)
label(return)
newmem:
mov [rax+2C],(float)9999999
movss xmm1,[rax+2C]
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// movss xmm1,[rax+2C]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.CharacterManager:GetWeaponDamage+5f
AMG.CharacterManager:GetWeaponDamage+32: 48 63 11 - movsxd rdx,dword ptr [rcx]
AMG.CharacterManager:GetWeaponDamage+35: 89 55 C8 - mov [rbp-38],edx
AMG.CharacterManager:GetWeaponDamage+38: 48 63 49 04 - movsxd rcx,dword ptr [rcx+04]
AMG.CharacterManager:GetWeaponDamage+3c: 89 4D CC - mov [rbp-34],ecx
AMG.CharacterManager:GetWeaponDamage+3f: F3 0F 10 05 19 03 00 00 - movss xmm0,[AMG.CharacterManager:GetWeaponDamage+360]
AMG.CharacterManager:GetWeaponDamage+47: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.CharacterManager:GetWeaponDamage+4b: F3 0F 10 48 44 - movss xmm1,[rax+44]
AMG.CharacterManager:GetWeaponDamage+50: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
AMG.CharacterManager:GetWeaponDamage+54: F2 0F 58 C1 - addsd xmm0,xmm1
AMG.CharacterManager:GetWeaponDamage+58: 48 8B 87 00 01 00 00 - mov rax,[rdi+00000100]
// ---------- INJECTING HERE ----------
AMG.CharacterManager:GetWeaponDamage+5f: F3 0F 10 48 2C - movss xmm1,[rax+2C]
// ---------- DONE INJECTING ----------
AMG.CharacterManager:GetWeaponDamage+64: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
AMG.CharacterManager:GetWeaponDamage+68: F2 0F 58 C1 - addsd xmm0,xmm1
AMG.CharacterManager:GetWeaponDamage+6c: 48 8B 87 F0 00 00 00 - mov rax,[rdi+000000F0]
AMG.CharacterManager:GetWeaponDamage+73: 83 38 00 - cmp dword ptr [rax],00
AMG.CharacterManager:GetWeaponDamage+76: 48 8B 40 18 - mov rax,[rax+18]
AMG.CharacterManager:GetWeaponDamage+7a: 83 78 18 00 - cmp dword ptr [rax+18],00
AMG.CharacterManager:GetWeaponDamage+7e: 0F 86 B6 02 00 00 - jbe AMG.CharacterManager:GetWeaponDamage+33a
AMG.CharacterManager:GetWeaponDamage+84: F3 0F 10 48 20 - movss xmm1,[rax+20]
AMG.CharacterManager:GetWeaponDamage+89: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
AMG.CharacterManager:GetWeaponDamage+8d: F2 0F 5A E9 - cvtsd2ss xmm5,xmm1
}
110151
"Set Movement Speed"
Auto Assembler Script
define(address,AMG.CharacterStat:get_MoveSpeed+b)
define(bytes,F3 0F 10 46 24)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.CharacterStat:get_MoveSpeed+b)
registersymbol(Speed)
label(return)
newmem:
push r14
mov r14,[Speed]
mov [rsi+24],r14
pop r14
movss xmm0,[rsi+24]
jmp return
Speed:
dq (float)5
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// movss xmm0,[rsi+24]
unregistersymbol(Speed)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.CharacterStat:get_MoveSpeed+b
19E50F2C044: 9C - pushfq
19E50F2C045: 01 00 - add [rax],eax
19E50F2C047: 00 00 - add [rax],al
19E50F2C049: 00 00 - add [rax],al
19E50F2C04B: 00 00 - add [rax],al
19E50F2C04D: 00 00 - add [rax],al
19E50F2C04F: 00 48 83 - add [rax-7D],cl
AMG.CharacterStat:get_MoveSpeed+2: EC - in al,dx
AMG.CharacterStat:get_MoveSpeed+3: 08 48 89 - or [rax-77],cl
AMG.CharacterStat:get_MoveSpeed+6: 34 24 - xor al,24
// ---------- INJECTING HERE ----------
AMG.CharacterStat:get_MoveSpeed+8: 48 8B F1 - mov rsi,rcx
// ---------- DONE INJECTING ----------
AMG.CharacterStat:get_MoveSpeed+b: F3 0F 10 46 24 - movss xmm0,[rsi+24]
AMG.CharacterStat:get_MoveSpeed+10: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
AMG.CharacterStat:get_MoveSpeed+14: F3 0F 10 0D 24 00 00 00 - movss xmm1,[AMG.CharacterStat:get_MoveSpeed+40]
AMG.CharacterStat:get_MoveSpeed+1c: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
AMG.CharacterStat:get_MoveSpeed+20: F3 0F 10 56 28 - movss xmm2,[rsi+28]
AMG.CharacterStat:get_MoveSpeed+25: F3 0F 5A D2 - cvtss2sd xmm2,xmm2
AMG.CharacterStat:get_MoveSpeed+29: F2 0F 58 CA - addsd xmm1,xmm2
AMG.CharacterStat:get_MoveSpeed+2d: F2 0F 59 C1 - mulsd xmm0,xmm1
AMG.CharacterStat:get_MoveSpeed+31: F2 0F 5A C0 - cvtsd2ss xmm0,xmm0
AMG.CharacterStat:get_MoveSpeed+35: 48 8B 34 24 - mov rsi,[rsp]
}
110152
"No description"
0
Float
Speed
110155
"99 Reroles"
Auto Assembler Script
define(address,AMG.CharacterManager:RerollLevelUp+32)
define(bytes,89 48 60 48 8B 86 90 00 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,AMG.CharacterManager:RerollLevelUp+32)
label(return)
newmem:
mov [rax+60],#99
mov rax,[rsi+00000090]
jmp return
address:
jmp newmem
nop 5
return:
[DISABLE]
address:
db bytes
// mov [rax+60],ecx
// mov rax,[rsi+00000090]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AMG.CharacterManager:RerollLevelUp+32
AMG.CharacterManager:RerollLevelUp+8: 48 89 75 F8 - mov [rbp-08],rsi
AMG.CharacterManager:RerollLevelUp+c: 48 8B F1 - mov rsi,rcx
AMG.CharacterManager:RerollLevelUp+f: 48 8B 86 00 01 00 00 - mov rax,[rsi+00000100]
AMG.CharacterManager:RerollLevelUp+16: 48 63 40 60 - movsxd rax,dword ptr [rax+60]
AMG.CharacterManager:RerollLevelUp+1a: 85 C0 - test eax,eax
AMG.CharacterManager:RerollLevelUp+1c: 0F 8E 39 01 00 00 - jng AMG.CharacterManager:RerollLevelUp+15b
AMG.CharacterManager:RerollLevelUp+22: 48 8B 86 00 01 00 00 - mov rax,[rsi+00000100]
AMG.CharacterManager:RerollLevelUp+29: 48 8B D0 - mov rdx,rax
AMG.CharacterManager:RerollLevelUp+2c: 48 63 48 60 - movsxd rcx,dword ptr [rax+60]
AMG.CharacterManager:RerollLevelUp+30: FF C9 - dec ecx
// ---------- INJECTING HERE ----------
AMG.CharacterManager:RerollLevelUp+32: 89 48 60 - mov [rax+60],ecx
// ---------- DONE INJECTING ----------
AMG.CharacterManager:RerollLevelUp+35: 48 8B 86 90 00 00 00 - mov rax,[rsi+00000090]
AMG.CharacterManager:RerollLevelUp+3c: 48 8B C8 - mov rcx,rax
AMG.CharacterManager:RerollLevelUp+3f: 83 38 00 - cmp dword ptr [rax],00
AMG.CharacterManager:RerollLevelUp+42: 48 8D 6D 00 - lea rbp,[rbp+00]
AMG.CharacterManager:RerollLevelUp+46: 49 BB 30 C4 39 A8 9E 01 00 00 - mov r11,AMG.UI.UICardLevelUpPopup:Hide
AMG.CharacterManager:RerollLevelUp+50: 41 FF D3 - call r11
AMG.CharacterManager:RerollLevelUp+53: 48 B8 80 C4 3A 80 9E 01 00 00 - mov rax,0000019E803AC480
AMG.CharacterManager:RerollLevelUp+5d: 48 8B 00 - mov rax,[rax]
AMG.CharacterManager:RerollLevelUp+60: 48 B9 80 C4 3A 80 9E 01 00 00 - mov rcx,0000019E803AC480
AMG.CharacterManager:RerollLevelUp+6a: 48 8B 09 - mov rcx,[rcx]
}
Change of jnl AMG.DataManager:IsUpgradable+56
2133F031A80
4C
8B
F8
85
C0
7D
04
33
C0
EB
1C
48
Change of je AMG.UI.UIPowerupDetailPanel:ShowUnlockPassiveInfo+4cb
2133F020BA9
45
A0
4D
85
FF
0F
84
4C
04
00
00
48
B9
A0
31
69
Change of je AMG.UI.UIPowerupDetailPanel:ShowUnlockPassiveInfo+4ad
2133F020BD1
8B
C8
4D
85
FF
0F
84
06
04
00
00
4C
89
79
20
48
Change of je AMG.UI.UIPowerupDetailPanel:ShowUnlockPassiveInfo+320
2133F020D7D
41
FF
D3
85
C0
0F
84
CD
00
00
00
48
8B
47
40
48
Change of jng AMG.UI.UIPowerupDetailPanel:ShowUnlockPassiveInfo+468
2133F020F5D
41
FF
D3
85
C0
0F
8E
35
00
00
00
48
8B
47
48
48
Change of je AMG.UI.UIPowerupDetailPanel:ShowLockPassiveInfo+330
2133F02F9F5
45
E8
48
85
C0
0F
84
75
01
00
00
48
63
40
28
48
Change of je AMG.UI.UIUnlockDetail:ShowWeaponData+383
2133F03283C
0F
B6
C0
85
C0
0F
84
31
03
00
00
48
B8
00
FF
55
Change of jne AMG.UI.UIUnlockDetail:ShowWeaponData+151
2133F03290D
41
FF
D3
85
C0
0F
85
2E
00
00
00
48
8B
47
18
48
Change of jl AMG.UI.UIUnlockViewController:GetNextUnlockedItem+21
2133F035405
41
FF
D3
3B
F8
7C
DA
49
8B
C7
48
8B
Change of movss [rsi+000001AC],xmm5
2A032810FE4
C1
F2
0F
5A
E8
F3
0F
11
AE
AC
01
00
00
F3
0F
10
86
AC