6
"Shard Lewd Kart"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
[DISABLE]
1
"Unlock Everything (Not Perm) - (Open and Close Shop For A Few Steam Achievments)"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_UnlockEverything,B3 CE 05 00 00 00 00 41 FF D3 48 83 C4 20 C9) // should be unique
define(INJECT_UnlockEverything,DataManager:isUnlocked+31)
registersymbol(INJECT_UnlockEverything)
INJECT_UnlockEverything:
db 90 90 90
[DISABLE]
INJECT_UnlockEverything:
db 41 FF D3
unregistersymbol(INJECT_UnlockEverything)
{
// ORIGINAL CODE - INJECTION POINT: DataManager:isUnlocked+31
DataManager:isUnlocked+1: 48 8B EC - mov rbp,rsp
DataManager:isUnlocked+4: 48 83 EC 10 - sub rsp,10
DataManager:isUnlocked+8: 48 89 55 F0 - mov [rbp-10],rdx
DataManager:isUnlocked+c: 48 B8 68 8F 98 56 01 00 00 00 - mov rax,0000000156988F68
DataManager:isUnlocked+16: 48 8B 00 - mov rax,[rax]
DataManager:isUnlocked+19: 48 8B C8 - mov rcx,rax
DataManager:isUnlocked+1c: 48 8B 55 F0 - mov rdx,[rbp-10]
DataManager:isUnlocked+20: 48 83 EC 20 - sub rsp,20
DataManager:isUnlocked+24: 83 38 00 - cmp dword ptr [rax],00
DataManager:isUnlocked+27: 49 BB 80 B3 CE 05 00 00 00 00 - mov r11,System.Collections.Generic.List`1[System.Object]:Contains
// ---------- INJECTING HERE ----------
DataManager:isUnlocked+31: 41 FF D3 - call r11
// ---------- DONE INJECTING ----------
DataManager:isUnlocked+34: 48 83 C4 20 - add rsp,20
DataManager:isUnlocked+38: C9 - leave
DataManager:isUnlocked+39: C3 - ret
36EF8B4A: 00 00 - add [rax],al
36EF8B4C: 00 00 - add [rax],al
36EF8B4E: 00 00 - add [rax],al
36EF8B50: 00 00 - add [rax],al
36EF8B52: 00 00 - add [rax],al
36EF8B54: 3A 00 - cmp al,[rax]
36EF8B56: 00 00 - add [rax],al
}
20
"Unlock Everything In The Game (PERM) Including All Steam Achievements!"
1
22
"INSTRUCTIONS (READ ME!!) Double Click Script------>"
0000FF
Auto Assembler Script
[ENABLE]
{
Go into a race before Xing [ ] Unlock Everything In Game (PERM) <- Cant Turn On Till In Race - Wont Find AOB ->
It Wont find the AOB for the script if your not in a race.
Once in Race and Script is enabled set your Current Month And Day
Example 1:
Month: 9 <--September - Not 09
Day: 5 <-- Current day - Not 05
Example 2:
Month: 12
Day: 23
Dec,23rd
Now complete entire cup or event. Not just 1 race.
I did an Event. not tested in cup but should work the same.
After the Event/Cup everything will be Perm Unlocked if you set your dates correctly.
If it seems like it froze after race.. DONT DO ANYTHING! This is the game unlocking like 500 things.. IT WILL UNFREEZE. Leave it alone
}
[DISABLE]
19
"Unlock Everything In Game (PERM) <- Cant Turn On Till In Race - Wont Find AOB ->"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
aobscan(INJECT_UnlockAll,48 63 47 44 85 C0 0F 84) // should be unique
//define(INJECT_UnlockAll,Participant:Update+44c)
alloc(newmem,$1000,INJECT_UnlockAll)
registersymbol(month)
registersymbol(day)
label(month)
label(day)
label(monthloc)
label(month1loc)
label(month2loc)
label(month3loc)
label(month4loc)
label(month5loc)
label(month6loc)
label(month7loc)
label(month8loc)
label(month9loc)
label(month10loc)
label(month11loc)
label(month12loc)
label(dayloc)
label(day1loc)
label(day2loc)
label(day3loc)
label(day4loc)
label(day5loc)
label(day6loc)
label(day7loc)
label(day8loc)
label(day9loc)
label(day10loc)
label(day11loc)
label(day12loc)
label(day13loc)
label(day14loc)
label(day15loc)
label(day16loc)
label(day17loc)
label(day18loc)
label(day19loc)
label(day20loc)
label(day21loc)
label(day22loc)
label(day23loc)
label(day24loc)
label(day25loc)
label(day26loc)
label(day27loc)
label(day28loc)
label(day29loc)
label(day30loc)
label(day31loc)
label(code)
label(return)
newmem:
// Start of Month Script
monthloc:
cmp [month],0
je dayloc
jne month1loc
month1loc:
cmp [month],#1
jne month2loc
mov [rdi+48],#1 // <--- Change to Todays MONTH
jmp dayloc
month2loc:
cmp [month],#2
jne month3loc
mov [rdi+48],#2 // <--- Change to Todays MONTH
jmp dayloc
month3loc:
cmp [month],#3
jne month4loc
mov [rdi+48],#3 // <--- Change to Todays MONTH
jmp dayloc
month4loc:
cmp [month],#4
jne month5loc
mov [rdi+48],#4 // <--- Change to Todays MONTH
jmp dayloc
month5loc:
cmp [month],#5
jne month6loc
mov [rdi+48],#5 // <--- Change to Todays MONTH
jmp dayloc
month6loc:
cmp [month],#6
jne month7loc
mov [rdi+48],#6 // <--- Change to Todays MONTH
jmp dayloc
month7loc:
cmp [month],#7
jne month8loc
mov [rdi+48],#7 // <--- Change to Todays MONTH
jmp dayloc
month8loc:
cmp [month],#8
jne month9loc
mov [rdi+48],#8 // <--- Change to Todays MONTH
jmp dayloc
month9loc:
cmp [month],#9
jne month10loc
mov [rdi+48],#9 // <--- Change to Todays MONTH
jmp dayloc
month10loc:
cmp [month],#10
jne month11loc
mov [rdi+48],#10 // <--- Change to Todays MONTH
jmp dayloc
month11loc:
cmp [month],#11
jne month12loc
mov [rdi+48],#11 // <--- Change to Todays MONTH
jmp dayloc
month12loc:
cmp [month],#12
jne dayloc
mov [rdi+48],#12 // <--- Change to Todays MONTH
jmp dayloc
// Start Of Day Script
dayloc:
cmp [day],0
je code
jne day1loc
day1loc:
cmp [day],#1
jne day2loc
mov [rdi+44],#1 // <--- Change to Todays DAY
jmp code
day2loc:
cmp [day],#2
jne day3loc
mov [rdi+44],#2 // <--- Change to Todays DAY
jmp code
day3loc:
cmp [day],#3
jne day4loc
mov [rdi+44],#3 // <--- Change to Todays DAY
jmp code
day4loc:
cmp [day],#4
jne day5loc
mov [rdi+44],#4 // <--- Change to Todays DAY
jmp code
day5loc:
cmp [day],#5
jne day6loc
mov [rdi+44],#5 // <--- Change to Todays DAY
jmp code
day6loc:
cmp [day],#6
jne day7loc
mov [rdi+44],#6 // <--- Change to Todays DAY
jmp code
day7loc:
cmp [day],#7
jne day8loc
mov [rdi+44],#7 // <--- Change to Todays DAY
jmp code
day8loc:
cmp [day],#8
jne day9loc
mov [rdi+44],#8 // <--- Change to Todays DAY
jmp code
day9loc:
cmp [day],#9
jne day10loc
mov [rdi+44],#9 // <--- Change to Todays DAY
jmp code
day10loc:
cmp [day],#10
jne day11loc
mov [rdi+44],#10 // <--- Change to Todays DAY
jmp code
day11loc:
cmp [day],#11
jne day12loc
mov [rdi+44],#11 // <--- Change to Todays DAY
jmp code
day12loc:
cmp [day],#12
jne day13loc
mov [rdi+44],#12 // <--- Change to Todays DAY
jmp code
day13loc:
cmp [day],#13
jne day14loc
mov [rdi+44],#13 // <--- Change to Todays DAY
jmp code
day14loc:
cmp [day],#14
jne day15loc
mov [rdi+44],#14 // <--- Change to Todays DAY
jmp code
day15loc:
cmp [day],#15
jne day16loc
mov [rdi+44],#15 // <--- Change to Todays DAY
jmp code
day16loc:
cmp [day],#16
jne day17loc
mov [rdi+44],#16 // <--- Change to Todays DAY
jmp code
day17loc:
cmp [day],#17
jne day18loc
mov [rdi+44],#17 // <--- Change to Todays DAY
jmp code
day18loc:
cmp [day],#18
jne day19loc
mov [rdi+44],#18 // <--- Change to Todays DAY
jmp code
day19loc:
cmp [day],#19
jne day20loc
mov [rdi+44],#19 // <--- Change to Todays DAY
jmp code
day20loc:
cmp [day],#20
jne day21loc
mov [rdi+44],#20 // <--- Change to Todays DAY
jmp code
day21loc:
cmp [day],#21
jne day22loc
mov [rdi+44],#21 // <--- Change to Todays DAY
jmp code
day22loc:
cmp [day],#22
jne day23loc
mov [rdi+44],#22 // <--- Change to Todays DAY
jmp code
day23loc:
cmp [day],#23
jne day24loc
mov [rdi+44],#23 // <--- Change to Todays DAY
jmp code
day24loc:
cmp [day],#24
jne day25loc
mov [rdi+44],#24 // <--- Change to Todays DAY
jmp code
day25loc:
cmp [day],#25
jne day26loc
mov [rdi+44],#25 // <--- Change to Todays DAY
jmp code
day26loc:
cmp [day],#26
jne day27loc
mov [rdi+44],#26 // <--- Change to Todays DAY
jmp code
day27loc:
cmp [day],#27
jne day28loc
mov [rdi+44],#27 // <--- Change to Todays DAY
jmp code
day28loc:
cmp [day],#28
jne day29loc
mov [rdi+44],#28 // <--- Change to Todays DAY
jmp code
day29loc:
cmp [day],#29
jne day30loc
mov [rdi+44],#29 // <--- Change to Todays DAY
jmp code
day30loc:
cmp [day],#30
jne day31loc
mov [rdi+44],#30 // <--- Change to Todays DAY
jmp code
day31loc:
cmp [day],#31
jne code
mov [rdi+44],#31 // <--- Change to Todays DAY
jmp code
code:
movsxd rax,dword ptr [rdi+44]
test eax,eax
jmp return
month:
dd 0
day:
dd 0
INJECT_UnlockAll:
jmp newmem
nop
return:
registersymbol(INJECT_UnlockAll)
[DISABLE]
INJECT_UnlockAll:
db 48 63 47 44 85 C0
unregistersymbol(month)
unregistersymbol(day)
unregistersymbol(INJECT_UnlockAll)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Participant:Update+44c
Participant:Update+420: 48 83 C1 88 - add rcx,-78
Participant:Update+424: 48 8B D0 - mov rdx,rax
Participant:Update+427: 48 83 EC 20 - sub rsp,20
Participant:Update+42b: 83 38 00 - cmp dword ptr [rax],00
Participant:Update+42e: 49 BB D0 67 C5 06 00 00 00 00 - mov r11,System.Collections.Generic.List`1[System.Object]:GetEnumerator
Participant:Update+438: 41 FF D3 - call r11
Participant:Update+43b: 48 83 C4 20 - add rsp,20
Participant:Update+43f: E9 C1 00 00 00 - jmp Participant:Update+505
Participant:Update+444: 48 8D 6D 00 - lea rbp,[rbp+00]
Participant:Update+448: 48 8B 7D 98 - mov rdi,[rbp-68]
// ---------- INJECTING HERE ----------
Participant:Update+44c: 48 63 47 44 - movsxd rax,dword ptr [rdi+44]
// ---------- DONE INJECTING ----------
Participant:Update+450: 85 C0 - test eax,eax
Participant:Update+452: 0F 84 AD 00 00 00 - je Participant:Update+505
Participant:Update+458: 48 63 47 48 - movsxd rax,dword ptr [rdi+48]
Participant:Update+45c: 85 C0 - test eax,eax
Participant:Update+45e: 0F 84 A1 00 00 00 - je Participant:Update+505
Participant:Update+464: 48 8B CD - mov rcx,rbp
Participant:Update+467: 48 83 C1 A0 - add rcx,-60
Participant:Update+46b: 48 83 EC 20 - sub rsp,20
Participant:Update+46f: 49 BB E0 90 7B 24 00 00 00 00 - mov r11,System.DateTime:get_Now
Participant:Update+479: 41 FF D3 - call r11
}
205
"<- Put In Todays Date To Unlock ->"
0000FF
1
203
"Month - (1-12 not 01-12)"
0
4 Bytes
month
204
"Day - (1-31) Not (01-31)"
0
4 Bytes
day
199
"Money (Open Shop Menu)"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_ShopCash,48 63 00 48 89 45 E8) // should be unique
define(INJECT_ShopCash,ShopMenu:Update+1e)
alloc(newmem,$1000,INJECT_ShopCash)
registersymbol(shopcash)
label(shopcash)
label(code)
label(return)
newmem:
code:
mov [shopcash],rax
movsxd rax,dword ptr [rax]
mov [rbp-18],rax
jmp return
shopcash:
dq
INJECT_ShopCash:
jmp newmem
nop 2
return:
registersymbol(INJECT_ShopCash)
[DISABLE]
INJECT_ShopCash:
db 48 63 00 48 89 45 E8
unregistersymbol(shopcash)
unregistersymbol(INJECT_ShopCash)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShopMenu:Update+1e
17CA851C: 00 00 - add [rax],al
17CA851E: 00 00 - add [rax],al
ShopMenu:Update: 55 - push rbp
ShopMenu:Update+1: 48 8B EC - mov rbp,rsp
ShopMenu:Update+4: 56 - push rsi
ShopMenu:Update+5: 48 83 EC 18 - sub rsp,18
ShopMenu:Update+9: 48 8B F1 - mov rsi,rcx
ShopMenu:Update+c: 48 8B 46 48 - mov rax,[rsi+48]
ShopMenu:Update+10: 48 89 45 F0 - mov [rbp-10],rax
ShopMenu:Update+14: 48 B8 84 7F BF 57 01 00 00 00 - mov rax,0000000157BF7F84
// ---------- INJECTING HERE ----------
ShopMenu:Update+1e: 48 63 00 - movsxd rax,dword ptr [rax]
// ---------- DONE INJECTING ----------
ShopMenu:Update+21: 48 89 45 E8 - mov [rbp-18],rax
ShopMenu:Update+25: B9 68 C5 52 06 - mov ecx,0652C568
ShopMenu:Update+2a: 48 83 EC 20 - sub rsp,20
ShopMenu:Update+2e: 49 BB D0 1A 98 06 00 00 00 00 - mov r11,System.Object:__icall_wrapper_mono_object_new_ptrfree_box
ShopMenu:Update+38: 41 FF D3 - call r11
ShopMenu:Update+3b: 48 83 C4 20 - add rsp,20
ShopMenu:Update+3f: 48 8B D0 - mov rdx,rax
ShopMenu:Update+42: 48 8B 45 E8 - mov rax,[rbp-18]
ShopMenu:Update+46: 89 42 10 - mov [rdx+10],eax
ShopMenu:Update+49: B9 E0 AF 49 06 - mov ecx,0649AFE0
}
200
"Money"
0
4 Bytes
shopcash
0
4
"All Shop Items Cost 0"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_ShopPrice,48 63 4E 68 3B C1) // should be unique
define(INJECT_ShopPrice,ShopButton:buy+99)
alloc(newmem,$1000,INJECT_ShopPrice)
label(code)
label(return)
newmem:
code:
mov [rsi+68],#0
movsxd rcx,dword ptr [rsi+68]
cmp eax,ecx
jmp return
INJECT_ShopPrice:
jmp newmem
nop
return:
registersymbol(INJECT_ShopPrice)
[DISABLE]
INJECT_ShopPrice:
db 48 63 4E 68 3B C1
unregistersymbol(INJECT_ShopPrice)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ShopButton:buy+99
ShopButton:buy+5f: 48 8B CE - mov rcx,rsi
ShopButton:buy+62: 48 BA 40 6D AC 5F 01 00 00 00 - mov rdx,000000015FAC6D40
ShopButton:buy+6c: 41 B9 01 00 00 00 - mov r9d,00000001
ShopButton:buy+72: 48 83 EC 20 - sub rsp,20
ShopButton:buy+76: 49 BB 08 AB 2E 17 00 00 00 00 - mov r11,00000000172EAB08
ShopButton:buy+80: 41 FF D3 - call r11
ShopButton:buy+83: 48 83 C4 20 - add rsp,20
ShopButton:buy+87: E9 04 03 00 00 - jmp ShopButton:buy+390
ShopButton:buy+8c: 48 B8 84 7F 32 53 01 00 00 00 - mov rax,0000000153327F84
ShopButton:buy+96: 48 63 00 - movsxd rax,dword ptr [rax]
// ---------- INJECTING HERE ----------
ShopButton:buy+99: 48 63 4E 68 - movsxd rcx,dword ptr [rsi+68]
// ---------- DONE INJECTING ----------
ShopButton:buy+9d: 3B C1 - cmp eax,ecx
ShopButton:buy+9f: 0F 8C EA 01 00 00 - jl ShopButton:buy+28f
ShopButton:buy+a5: 48 B8 84 7F 32 53 01 00 00 00 - mov rax,0000000153327F84
ShopButton:buy+af: 48 63 08 - movsxd rcx,dword ptr [rax]
ShopButton:buy+b2: 48 63 46 68 - movsxd rax,dword ptr [rsi+68]
ShopButton:buy+b6: 2B C8 - sub ecx,eax
ShopButton:buy+b8: 48 B8 84 7F 32 53 01 00 00 00 - mov rax,0000000153327F84
ShopButton:buy+c2: 89 08 - mov [rax],ecx
ShopButton:buy+c4: 48 B8 60 7F 32 53 01 00 00 00 - mov rax,0000000153327F60
ShopButton:buy+ce: 48 8B 00 - mov rax,[rax]
}
5
"Everything In Shop Is Available To Buy"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_ShopUnlock,C6 47 79 00 48 8B CD) // should be unique
define(INJECT_ShopUnlock,ShopButton:refresh+b6)
registersymbol(INJECT_ShopUnlock)
INJECT_ShopUnlock:
db C6 47 79 01
[DISABLE]
INJECT_ShopUnlock:
db C6 47 79 00
unregistersymbol(INJECT_ShopUnlock)
{
// ORIGINAL CODE - INJECTION POINT: ShopButton:refresh+b6
ShopButton:refresh+91: 48 8B 00 - mov rax,[rax]
ShopButton:refresh+94: 48 8B C8 - mov rcx,rax
ShopButton:refresh+97: 49 8B D7 - mov rdx,r15
ShopButton:refresh+9a: 48 83 EC 20 - sub rsp,20
ShopButton:refresh+9e: 83 38 00 - cmp dword ptr [rax],00
ShopButton:refresh+a1: 49 BB D0 8A 26 17 00 00 00 00 - mov r11,DataManager:isUnlocked
ShopButton:refresh+ab: 41 FF D3 - call r11
ShopButton:refresh+ae: 48 83 C4 20 - add rsp,20
ShopButton:refresh+b2: 85 C0 - test eax,eax
ShopButton:refresh+b4: 75 04 - jne ShopButton:refresh+ba
// ---------- INJECTING HERE ----------
ShopButton:refresh+b6: C6 47 79 00 - mov byte ptr [rdi+79],00
// ---------- DONE INJECTING ----------
ShopButton:refresh+ba: 48 8B CD - mov rcx,rbp
ShopButton:refresh+bd: 48 81 C1 68 FF FF FF - add rcx,FFFFFFFFFFFFFF68
ShopButton:refresh+c4: 49 BA 90 C0 69 54 01 00 00 00 - mov r10,000000015469C090
ShopButton:refresh+ce: 48 83 EC 20 - sub rsp,20
ShopButton:refresh+d2: 49 BB E0 68 0C 06 00 00 00 00 - mov r11,System.Collections.Generic.List`1+Enumerator[System.Object]:MoveNext
ShopButton:refresh+dc: 41 FF D3 - call r11
ShopButton:refresh+df: 48 83 C4 20 - add rsp,20
ShopButton:refresh+e3: 85 C0 - test eax,eax
ShopButton:refresh+e5: 75 99 - jne ShopButton:refresh+80
ShopButton:refresh+e7: 48 83 EC 08 - sub rsp,08
}
70
"Daily Event Bonus - Always Ready"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_DailyBonus,55 48 8B EC 48 83 EC 20 33 C0 48 89 45 E0 48 89 45 E8 48 89) // should be unique
define(INJECT_DailyBonus,DataManager:eventDailyBonusReady)
registersymbol(INJECT_DailyBonus)
INJECT_DailyBonus:
db C3
[DISABLE]
INJECT_DailyBonus:
db 55
unregistersymbol(INJECT_DailyBonus)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DataManager:eventDailyBonusReady
17C8EB04: 9A 00 00 00 AC 00 00 - call (invalid) 0000:
17C8EB0B: 00 01 - add [rcx],al
17C8EB0D: 04 03 - add al,03
17C8EB0F: 05 00 00 04 53 - add eax,53040000
17C8EB14: 01 50 00 - add [rax+00],edx
17C8EB17: 00 00 - add [rax],al
17C8EB19: 00 00 - add [rax],al
17C8EB1B: 00 00 - add [rax],al
17C8EB1D: 00 00 - add [rax],al
17C8EB1F: 00 - db 00
// ---------- INJECTING HERE ----------
DataManager:eventDailyBonusReady: 55 - push rbp
// ---------- DONE INJECTING ----------
DataManager:eventDailyBonusReady+1: 48 8B EC - mov rbp,rsp
DataManager:eventDailyBonusReady+4: 48 83 EC 20 - sub rsp,20
DataManager:eventDailyBonusReady+8: 33 C0 - xor eax,eax
DataManager:eventDailyBonusReady+a: 48 89 45 E0 - mov [rbp-20],rax
DataManager:eventDailyBonusReady+e: 48 89 45 E8 - mov [rbp-18],rax
DataManager:eventDailyBonusReady+12: 48 89 45 F0 - mov [rbp-10],rax
DataManager:eventDailyBonusReady+16: 48 89 45 F8 - mov [rbp-08],rax
DataManager:eventDailyBonusReady+1a: 48 B8 90 7F BF 57 01 00 00 00 - mov rax,0000000157BF7F90
DataManager:eventDailyBonusReady+24: 48 8B 00 - mov rax,[rax]
DataManager:eventDailyBonusReady+27: 48 8B C8 - mov rcx,rax
}
66
"Pit Girl Max Points"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_PitGirlProg,48 63 86 AC 00 00 00 F2) // should be unique
define(INJECT_PitGirlProg,PitGirl:progress+c)
alloc(newmem,$1000,INJECT_PitGirlProg)
label(code)
label(return)
newmem:
code:
mov [rsi+000000AC],#500
movsxd rax,dword ptr [rsi+000000AC]
jmp return
INJECT_PitGirlProg:
jmp newmem
nop 2
return:
registersymbol(INJECT_PitGirlProg)
[DISABLE]
INJECT_PitGirlProg:
db 48 63 86 AC 00 00 00
unregistersymbol(INJECT_PitGirlProg)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PitGirl:progress+c
156DD1097: 00 00 - add [rax],al
156DD1099: 00 00 - add [rax],al
156DD109B: 00 00 - add [rax],al
156DD109D: 00 00 - add [rax],al
156DD109F: 00 55 48 - add [rbp+48],dl
PitGirl:progress+2: 8B EC - mov ebp,esp
PitGirl:progress+4: 56 - push rsi
PitGirl:progress+5: 48 83 EC 08 - sub rsp,08
PitGirl:progress+9: 48 8B F1 - mov rsi,rcx
PitGirl:progress+c: 48 63 86 AC 00 00 00 - movsxd rax,dword ptr [rsi+000000AC]
// ---------- INJECTING HERE ----------
PitGirl:progress+13: F2 0F 2A C0 - cvtsi2sd xmm0,eax
// ---------- DONE INJECTING ----------
PitGirl:progress+17: F2 0F 11 45 F0 - movsd [rbp-10],xmm0
PitGirl:progress+1c: 48 8B CE - mov rcx,rsi
PitGirl:progress+1f: 48 83 EC 20 - sub rsp,20
PitGirl:progress+23: 49 BB E0 C7 D6 56 01 00 00 00 - mov r11,PitGirl:lastGoal
PitGirl:progress+2d: 41 FF D3 - call r11
PitGirl:progress+30: 48 83 C4 20 - add rsp,20
PitGirl:progress+34: F2 0F 10 45 F0 - movsd xmm0,[rbp-10]
PitGirl:progress+39: F2 0F 2A C8 - cvtsi2sd xmm1,eax
PitGirl:progress+3d: F2 0F 5E C1 - divsd xmm0,xmm1
PitGirl:progress+41: F2 0F 5A C0 - cvtsd2ss xmm0,xmm0
}
202
"Climax Level Max"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_ClimaxLvl,48 63 00 48 89 85 90 FE FF FF) // should be unique
define(INJECT_ClimaxLvl,DataManager:CloudSave+3fa)
alloc(newmem,$1000,INJECT_ClimaxLvl)
label(code)
label(return)
newmem:
code:
mov [rax],#2999
movsxd rax,dword ptr [rax]
mov [rbp-00000170],rax
jmp return
INJECT_ClimaxLvl:
jmp newmem
nop 5
return:
registersymbol(INJECT_ClimaxLvl)
[DISABLE]
INJECT_ClimaxLvl:
db 48 63 00 48 89 85 90 FE FF FF
unregistersymbol(INJECT_ClimaxLvl)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DataManager:CloudSave+3fa
DataManager:CloudSave+3ca: 41 FF D3 - call r11
DataManager:CloudSave+3cd: 48 83 C4 20 - add rsp,20
DataManager:CloudSave+3d1: 48 8B D0 - mov rdx,rax
DataManager:CloudSave+3d4: 49 8B CE - mov rcx,r14
DataManager:CloudSave+3d7: 48 83 EC 20 - sub rsp,20
DataManager:CloudSave+3db: 41 83 3E 00 - cmp dword ptr [r14],00
DataManager:CloudSave+3df: 49 BB 30 EE 3E 06 00 00 00 00 - mov r11,System.Collections.Generic.List`1[System.Object]:Add
DataManager:CloudSave+3e9: 41 FF D3 - call r11
DataManager:CloudSave+3ec: 48 83 C4 20 - add rsp,20
DataManager:CloudSave+3f0: 48 B8 8C 7F 22 54 01 00 00 00 - mov rax,0000000154227F8C
// ---------- INJECTING HERE ----------
DataManager:CloudSave+3fa: 48 63 00 - movsxd rax,dword ptr [rax]
// ---------- DONE INJECTING ----------
DataManager:CloudSave+3fd: 48 89 85 90 FE FF FF - mov [rbp-00000170],rax
DataManager:CloudSave+404: B9 68 C5 F6 05 - mov ecx,05F6C568
DataManager:CloudSave+409: 48 83 EC 20 - sub rsp,20
DataManager:CloudSave+40d: 49 BB D0 1A 3C 06 00 00 00 00 - mov r11,System.Object:__icall_wrapper_mono_object_new_ptrfree_box
DataManager:CloudSave+417: 41 FF D3 - call r11
DataManager:CloudSave+41a: 48 83 C4 20 - add rsp,20
DataManager:CloudSave+41e: 48 8B D0 - mov rdx,rax
DataManager:CloudSave+421: 48 8B 85 90 FE FF FF - mov rax,[rbp-00000170]
DataManager:CloudSave+428: 89 42 10 - mov [rdx+10],eax
DataManager:CloudSave+42b: 48 B9 80 7E B0 5C 01 00 00 00 - mov rcx,000000015CB07E80
}
207
"Player Stats And Kart (Must Be In A Race To Populate)"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_player,20 48 8B C8 48 83 EC 20 83 38 00 49 BB 20 A8) // should be unique
define(INJECT_player,KartPhysics:setRubberBandingMultiplyer+7c)
alloc(newmem,$1000,INJECT_player)
registersymbol(player)
label(player)
label(code)
label(return)
newmem:
code:
sub rsp,20
mov [player],rax
cmp dword ptr [rax],00
jmp return
player:
dq
INJECT_player:
jmp newmem
nop 2
return:
registersymbol(INJECT_player)
[DISABLE]
INJECT_player:
db 48 83 EC 20 83 38 00
unregistersymbol(player)
unregistersymbol(INJECT_player)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: KartPhysics:setRubberBandingMultiplyer+7c
KartPhysics:setRubberBandingMultiplyer+4e: 48 B8 58 94 87 55 01 00 00 00 - mov rax,0000000155879458
KartPhysics:setRubberBandingMultiplyer+58: 48 8B 00 - mov rax,[rax]
KartPhysics:setRubberBandingMultiplyer+5b: 48 8B C8 - mov rcx,rax
KartPhysics:setRubberBandingMultiplyer+5e: 48 8B D7 - mov rdx,rdi
KartPhysics:setRubberBandingMultiplyer+61: 48 83 EC 20 - sub rsp,20
KartPhysics:setRubberBandingMultiplyer+65: 83 38 00 - cmp dword ptr [rax],00
KartPhysics:setRubberBandingMultiplyer+68: 49 BB B0 C5 0F 06 00 00 00 00 - mov r11,System.Collections.Generic.List`1[System.Object]:get_Item
KartPhysics:setRubberBandingMultiplyer+72: 41 FF D3 - call r11
KartPhysics:setRubberBandingMultiplyer+75: 48 83 C4 20 - add rsp,20
KartPhysics:setRubberBandingMultiplyer+79: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
KartPhysics:setRubberBandingMultiplyer+7c: 48 83 EC 20 - sub rsp,20
// ---------- DONE INJECTING ----------
KartPhysics:setRubberBandingMultiplyer+80: 83 38 00 - cmp dword ptr [rax],00
KartPhysics:setRubberBandingMultiplyer+83: 49 BB 20 A8 31 17 00 00 00 00 - mov r11,Participant:progressThroughCircuit
KartPhysics:setRubberBandingMultiplyer+8d: 41 FF D3 - call r11
KartPhysics:setRubberBandingMultiplyer+90: 48 83 C4 20 - add rsp,20
KartPhysics:setRubberBandingMultiplyer+94: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
KartPhysics:setRubberBandingMultiplyer+98: F2 0F 10 45 E0 - movsd xmm0,[rbp-20]
KartPhysics:setRubberBandingMultiplyer+9d: F2 0F 58 C1 - addsd xmm0,xmm1
KartPhysics:setRubberBandingMultiplyer+a1: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
KartPhysics:setRubberBandingMultiplyer+a5: F3 0F 11 6D EC - movss [rbp-14],xmm5
KartPhysics:setRubberBandingMultiplyer+aa: FF C7 - inc edi
}
208
"BASE"
0
4 Bytes
player
0
274
"<- Does Not Work On Time Trials and NoNut Modes. ->"
0000FF
1
275
"<- This Is Intentional To Keep The Leaderboards Fair->"
0000FF
1
261
"Name"
String
128
1
0
1
[player]+18
14
10
10
271
"Stats"
1
209
"Total Time"
Float
[player]+38
210
"Frozen Time"
Float
[player]+3C
211
"Time Coins"
4 Bytes
[player]+40
212
"Lap"
4 Bytes
[player]+44
213
"Check Point Index"
4 Bytes
[player]+48
214
"Player Controlled"
Byte
[player]+4C
215
"Player Index"
4 Bytes
[player]+50
216
"Difficulty"
Float
[player]+54
217
"Time Since Panty Shower"
Float
[player]+58
263
"Cup Points"
4 Bytes
[player]+18
38
264
"Cup Points Added"
4 Bytes
[player]+18
3C
260
"Kart"
1
262
"Name"
String
128
1
0
1
[player]+18
14
10
28
218
"Acceleration"
Float
[player]+20
50
219
"Max Speed"
Float
[player]+20
54
220
"Grip"
Float
[player]+20
58
221
"Turning"
Float
[player]+20
5C
222
"Jumping Power"
Float
[player]+20
60
223
"Boost Power"
Float
[player]+20
64
224
"Layer Scenery"
4 Bytes
[player]+20
68
225
"Layer Players"
4 Bytes
[player]+20
6C
226
"Gravity"
4 Bytes
[player]+20
70
227
"Giant Time"
Float
[player]+20
7C
228
"Rubber Banding Multiplyer"
Float
[player]+20
80
229
"Difficulty Multiplyer"
Float
[player]+20
84
230
"Boost Level"
Float
[player]+20
88
231
"Velocity"
4 Bytes
[player]+20
8C
232
"Global Velocity"
4 Bytes
[player]+20
98
233
"Force Velocity"
4 Bytes
[player]+20
A4
234
"Ground Normal"
4 Bytes
[player]+20
B0
235
"Models Rotation"
4 Bytes
[player]+20
BC
236
"Powerslide Axis"
Float
[player]+20
CC
237
"Braking"
Byte
[player]+20
D0
238
"Was Grounded"
Byte
[player]+20
D1
239
"Ground Point"
4 Bytes
[player]+20
D4
240
"Hurt Time"
Float
[player]+20
E0
241
"Powerslide Duration"
Float
[player]+20
E4
242
"Boost Time"
Float
[player]+20
E8
243
"Jumped"
Byte
[player]+20
EC
244
"Jump Time"
Float
[player]+20
F0
245
"Boost Start Charge"
Float
[player]+20
F4
246
"Slow Time"
Float
[player]+20
F8
247
"Bound Time"
Float
[player]+20
FC
248
"Stuck Point"
4 Bytes
[player]+20
100
249
"Stuck Time"
Float
[player]+20
10C
250
"Turning Stat Bonus"
Float
[player]+20
110
251
"Rotating Value"
Float
[player]+20
114
252
"Mercy Time"
Float
[player]+20
118
253
"Terrain Effect Time"
Float
[player]+20
11C
254
"Powerslide Separation Time"
Float
[player]+20
120
255
"Wall Hit Timer"
Float
[player]+20
124
256
"Input Vertical"
Float
[player]+20
128
257
"Input Horizontal"
Float
[player]+20
12C
258
"Input Powerslide"
Byte
[player]+20
130
259
"Input Jump"
Byte
[player]+20
131
267
"AI Cant Move"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_AIKarts,48 83 EC 20 83 3E 00 49 BB 20 A8) // should be unique
define(INJECT_AIKarts,Participant:SortByProgress+53)
alloc(newmem,$1000,INJECT_AIKarts)
label(code)
label(return)
newmem:
sub rsp,20
cmp [rsi+4C],1
je code
push rax
mov rax,[rsi+20]
mov [rax+50],(float)0
mov [rax+54],(float)0
pop rax
jmp code
code:
cmp dword ptr [rsi],00
jmp return
INJECT_AIKarts:
jmp newmem
nop 2
return:
registersymbol(INJECT_AIKarts)
[DISABLE]
INJECT_AIKarts:
db 48 83 EC 20 83 3E 00
unregistersymbol(INJECT_AIKarts)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Participant:SortByProgress+53
Participant:SortByProgress+27: 49 BB 20 A8 31 17 00 00 00 00 - mov r11,Participant:progressThroughCircuit
Participant:SortByProgress+31: 41 FF D3 - call r11
Participant:SortByProgress+34: 48 83 C4 20 - add rsp,20
Participant:SortByProgress+38: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Participant:SortByProgress+3c: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
Participant:SortByProgress+40: F3 0F 11 6D EC - movss [rbp-14],xmm5
Participant:SortByProgress+45: 48 8B C5 - mov rax,rbp
Participant:SortByProgress+48: 48 83 C0 EC - add rax,-14
Participant:SortByProgress+4c: 48 89 45 E0 - mov [rbp-20],rax
Participant:SortByProgress+50: 48 8B CE - mov rcx,rsi
// ---------- INJECTING HERE ----------
Participant:SortByProgress+53: 48 83 EC 20 - sub rsp,20
// ---------- DONE INJECTING ----------
Participant:SortByProgress+57: 83 3E 00 - cmp dword ptr [rsi],00
Participant:SortByProgress+5a: 49 BB 20 A8 31 17 00 00 00 00 - mov r11,Participant:progressThroughCircuit
Participant:SortByProgress+64: 41 FF D3 - call r11
Participant:SortByProgress+67: 48 83 C4 20 - add rsp,20
Participant:SortByProgress+6b: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
Participant:SortByProgress+6f: 48 8B 4D E0 - mov rcx,[rbp-20]
Participant:SortByProgress+73: F2 0F 10 C8 - movsd xmm1,xmm0
Participant:SortByProgress+77: F2 0F 5A C9 - cvtsd2ss xmm1,xmm1
Participant:SortByProgress+7b: 48 83 EC 20 - sub rsp,20
Participant:SortByProgress+7f: 49 BB 00 AE 31 17 00 00 00 00 - mov r11,System.Single:CompareTo
}
273
"Be On Last Lap"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_LastLap,48 63 40 44 48 B9 1C 94 F4 50 01 00 00 00 48 63 09 3B C1 0F 85) // should be unique
define(INJECT_LastLap,ControlUI:OnFinishedLap+a1)
alloc(newmem,$1000,INJECT_LastLap)
label(code)
label(return)
newmem:
code:
mov [rax+44],#4
movsxd rax,dword ptr [rax+44]
mov rcx,0000000150F4941C
jmp return
INJECT_LastLap:
jmp newmem
nop 9
return:
registersymbol(INJECT_LastLap)
[DISABLE]
INJECT_LastLap:
db 48 63 40 44 48 B9 1C 94 F4 50 01 00 00 00
unregistersymbol(INJECT_LastLap)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ControlUI:OnFinishedLap+a1
ControlUI:OnFinishedLap+77: 48 8B C8 - mov rcx,rax
ControlUI:OnFinishedLap+7a: BA 01 00 00 00 - mov edx,00000001
ControlUI:OnFinishedLap+7f: 48 83 EC 20 - sub rsp,20
ControlUI:OnFinishedLap+83: 83 38 00 - cmp dword ptr [rax],00
ControlUI:OnFinishedLap+86: 49 BB 40 26 77 17 00 00 00 00 - mov r11,UnityEngine.GameObject:SetActive
ControlUI:OnFinishedLap+90: 41 FF D3 - call r11
ControlUI:OnFinishedLap+93: 48 83 C4 20 - add rsp,20
ControlUI:OnFinishedLap+97: 48 8B 46 78 - mov rax,[rsi+78]
ControlUI:OnFinishedLap+9b: 48 8B C8 - mov rcx,rax
ControlUI:OnFinishedLap+9e: 83 39 00 - cmp dword ptr [rcx],00
// ---------- INJECTING HERE ----------
ControlUI:OnFinishedLap+a1: 48 63 40 44 - movsxd rax,dword ptr [rax+44]
// ---------- DONE INJECTING ----------
ControlUI:OnFinishedLap+a5: 48 B9 1C 94 F4 50 01 00 00 00 - mov rcx,0000000150F4941C
ControlUI:OnFinishedLap+af: 48 63 09 - movsxd rcx,dword ptr [rcx]
ControlUI:OnFinishedLap+b2: 3B C1 - cmp eax,ecx
ControlUI:OnFinishedLap+b4: 0F 85 45 00 00 00 - jne ControlUI:OnFinishedLap+ff
ControlUI:OnFinishedLap+ba: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
ControlUI:OnFinishedLap+c1: 48 8B 56 30 - mov rdx,[rsi+30]
ControlUI:OnFinishedLap+c5: 48 8B C8 - mov rcx,rax
ControlUI:OnFinishedLap+c8: 48 83 EC 20 - sub rsp,20
ControlUI:OnFinishedLap+cc: 48 8B 00 - mov rax,[rax]
ControlUI:OnFinishedLap+cf: 90 - nop
}
288
"Events"
1
294
"<- Looks Like The Xmas Was Removed From The Game ->"
0000FF
1
295
"<- An Update Could Remove These In The Future ->"
0000FF
1
287
"Unlock Beat The Meat, Year of the Cow, And Halloween Events"
Auto Assembler Script
[ENABLE]
//event1
//aobscan(INJECT_Events1,48 63 56 50 4C 63 46 4C) // should be unique
define(INJECT_Events1,DateRestrictedButton:Start+c)
alloc(newmem,$1000,INJECT_Events1)
label(code)
label(return)
newmem:
code:
mov [rsi+50],#2099
movsxd rdx,dword ptr [rsi+50]
movsxd r8,dword ptr [rsi+4C]
jmp return
INJECT_Events1:
jmp newmem
nop 3
return:
registersymbol(INJECT_Events1)
////////////////////////////////////////////////////////////
//event2
define(INJECT_Events,EventMenu:Start+1e0)
alloc(newmem1,$1000,INJECT_Events)
label(code1)
label(return1)
newmem1:
code1:
mov [rsi+78],#2099
movsxd rdx,dword ptr [rsi+78]
movsxd r8,dword ptr [rsi+74]
jmp return1
INJECT_Events:
jmp newmem1
nop 3
return1:
registersymbol(INJECT_Events)
[DISABLE]
//event1
INJECT_Events1:
db 48 63 56 50 4C 63 46 4C
unregistersymbol(INJECT_Events1)
dealloc(newmem)
////////////////////////////////////////////
//event2
INJECT_Events:
db 48 63 56 78 4C 63 46 74
unregistersymbol(INJECT_Events)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: DateRestrictedButton:Start+c
17A71E32: 00 00 - add [rax],al
17A71E34: 01 04 03 - add [rbx+rax],eax
17A71E37: 05 00 00 04 53 - add eax,53040000
17A71E3C: 01 50 00 - add [rax+00],edx
17A71E3F: 00 55 48 - add [rbp+48],dl
DateRestrictedButton:Start+2: 8B EC - mov ebp,esp
DateRestrictedButton:Start+4: 56 - push rsi
DateRestrictedButton:Start+5: 48 83 EC 28 - sub rsp,28
DateRestrictedButton:Start+9: 48 8B F1 - mov rsi,rcx
DateRestrictedButton:Start+c: 48 63 56 50 - movsxd rdx,dword ptr [rsi+50]
// ---------- INJECTING HERE ----------
DateRestrictedButton:Start+10: 4C 63 46 4C - movsxd r8,dword ptr [rsi+4C]
// ---------- DONE INJECTING ----------
DateRestrictedButton:Start+14: 4C 63 4E 48 - movsxd r9,dword ptr [rsi+48]
DateRestrictedButton:Start+18: 33 C0 - xor eax,eax
DateRestrictedButton:Start+1a: 48 89 45 D8 - mov [rbp-28],rax
DateRestrictedButton:Start+1e: 48 89 45 E0 - mov [rbp-20],rax
DateRestrictedButton:Start+22: 48 8B CD - mov rcx,rbp
DateRestrictedButton:Start+25: 48 83 C1 D8 - add rcx,-28
DateRestrictedButton:Start+29: 48 83 EC 20 - sub rsp,20
DateRestrictedButton:Start+2d: 49 BB D0 16 A7 17 00 00 00 00 - mov r11,System.DateTime:.ctor
DateRestrictedButton:Start+37: 41 FF D3 - call r11
DateRestrictedButton:Start+3a: 48 83 C4 20 - add rsp,20
}
286
"Unlock Easter Event"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_EasterEvent,4C 63 46 4C 4C 63 4E 48 33 C0 48 89 85) // should be unique
define(INJECT_EasterEvent,DatePeriodButton:Update+78)
alloc(newmem,$1000,INJECT_EasterEvent)
label(code)
label(return)
newmem:
code:
mov [rsi+4C],#1
mov [rsi+48],#1
mov [rsi+50],#31
mov [rsi+54],#12
movsxd r8,dword ptr [rsi+4C]
movsxd r9,dword ptr [rsi+48]
jmp return
INJECT_EasterEvent:
jmp newmem
nop 3
return:
registersymbol(INJECT_EasterEvent)
[DISABLE]
INJECT_EasterEvent:
db 4C 63 46 4C 4C 63 4E 48
unregistersymbol(INJECT_EasterEvent)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DatePeriodButton:Update+78
DatePeriodButton:Update+45: 49 BB 20 EB 12 71 00 00 00 00 - mov r11,System.DateTime:get_Now
DatePeriodButton:Update+4f: 41 FF D3 - call r11
DatePeriodButton:Update+52: 48 83 C4 20 - add rsp,20
DatePeriodButton:Update+56: 48 8B CD - mov rcx,rbp
DatePeriodButton:Update+59: 48 81 C1 30 FF FF FF - add rcx,FFFFFFFFFFFFFF30
DatePeriodButton:Update+60: 48 83 EC 20 - sub rsp,20
DatePeriodButton:Update+64: 49 BB 10 F5 12 71 00 00 00 00 - mov r11,System.DateTime:get_Year
DatePeriodButton:Update+6e: 41 FF D3 - call r11
DatePeriodButton:Update+71: 48 83 C4 20 - add rsp,20
DatePeriodButton:Update+75: 48 8B D0 - mov rdx,rax
// ---------- INJECTING HERE ----------
DatePeriodButton:Update+78: 4C 63 46 4C - movsxd r8,dword ptr [rsi+4C]
// ---------- DONE INJECTING ----------
DatePeriodButton:Update+7c: 4C 63 4E 48 - movsxd r9,dword ptr [rsi+48]
DatePeriodButton:Update+80: 33 C0 - xor eax,eax
DatePeriodButton:Update+82: 48 89 85 58 FF FF FF - mov [rbp-000000A8],rax
DatePeriodButton:Update+89: 48 89 85 60 FF FF FF - mov [rbp-000000A0],rax
DatePeriodButton:Update+90: 48 8B CD - mov rcx,rbp
DatePeriodButton:Update+93: 48 81 C1 58 FF FF FF - add rcx,FFFFFFFFFFFFFF58
DatePeriodButton:Update+9a: 48 83 EC 20 - sub rsp,20
DatePeriodButton:Update+9e: 49 BB E0 10 13 71 00 00 00 00 - mov r11,System.DateTime:.ctor
DatePeriodButton:Update+a8: 41 FF D3 - call r11
DatePeriodButton:Update+ab: 48 83 C4 20 - add rsp,20
}
Change of jne System.Object:Equals+18
069A390F
8B
F2
48
3B
FE
75
07
B8
01
00
00
00
Change of je System.Object:Equals+22
069A391B
EB
25
48
85
FF
74
05
48
85
F6
75
04
Change of cmp dword ptr [rax],00
17F7916D
D0
48
83
EC
20
83
38
00
49
BB
50
60
A4
Change of call r11
17F7917A
06
00
00
00
00
41
FF
D3
48
83
C4
20
EB
Change of call r11
17F791DE
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne DataManager:saveData+1b8
17F791E7
83
C4
20
85
C0
75
9F
48
83
EC
08
E8
Change of je DataManager:saveData+2bf
17F7925B
83
C4
20
85
C0
74
32
48
8B
8D
70
FF
Change of jne CustomKart:is_unlocked+2a
24740A5D
63
40
18
85
C0
75
0B
41
BD
01
00
00
Change of je DataManager:addUnlock+28e
24762F98
45
C0
48
85
C0
74
14
48
8B
45
C0
48
Change of jne EventsMenu:startEventCowYear+66
017D6D7F
83
C4
20
85
C0
0F
85
41
00
00
00
48
B9
08
5C
8E
Change of jne EventsMenu:startEventXXXmas+68
017DDA4F
83
C4
20
85
C0
75
47
90
90
90
90
48
Change of test eax,eax
017DDA4D
D3
48
83
C4
20
85
C0
75
47
90
90
90
Change of call r11
017DDA46
24
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je EventsMenu:Start+1ea
017C6C34
83
C4
20
85
C0
74
04
4C
89
7E
20
48
Change of call r11
017C6C2B
24
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je EventsMenu:Start+1ea
017C6C14
83
C4
20
85
C0
74
24
49
8B
CF
48
83
Change of call r11
017DDA91
24
00
00
00
00
41
FF
D3
48
83
C4
20
C9
Change of je EventParent:Start+51
247EDF0F
63
4E
18
3B
C1
74
30
48
8B
CE
48
83
Change of je UnityEngine.Behaviour:get_isActiveAndEnabled+8e
06BAA151
89
18
48
85
F6
74
3B
90
90
90
90
48
Change of je ShadyKart.exe+8A380F
ShadyKart.exe+8A37F7
EC
28
48
85
C9
74
16
48
8B
51
10
48
Change of je ShadyKart.exe+8A380F
ShadyKart.exe+8A3800
51
10
48
85
D2
74
0D
33
C0
38
42
39
Change of jbe EventMenu:Start+b6b
1723D1B2
63
C9
39
48
18
0F
86
93
0A
00
00
48
8D
44
C8
20
Change of call r11
172441A0
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
172444FD
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne EventMenu:Update+4db
17244506
83
C4
20
85
C0
0F
85
1F
01
00
00
48
8B
CD
48
83
Change of jne EventsMenu:startEventXXXmas+68
1724DCDF
83
C4
20
85
C0
75
47
90
90
90
90
48
Change of call r11
1724DCD6
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je DataManager:eventDailyBonusReady+55
17C8EB69
83
C4
20
85
C0
74
0A
B8
01
00
00
00
Change of jne EventsMenu:startEventEaster+5d
17C9901F
83
C4
20
85
C0
0F
85
38
00
00
00
48
B9
38
DE
0F
Change of je 17C98FF2
17C98FF0
00
62
00
00
00
74
00
00
00
01
04
03
Change of jne MainMenu:startEvent+1aa
17C7DADA
83
C4
20
85
C0
0F
85
4A
01
00
00
F3
0F
10
46
48
Change of call r11
17C7DB1B
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of jmp MainMenu:startEvent+1aa
17C7DAF5
C8
7A
07
73
05
E9
30
01
00
00
48
B8
A8
94
AE
Change of jbe MainMenu:startEvent+1b0
17C7DB3A
00
83
78
18
00
0F
86
F0
00
00
00
48
8B
48
20
48
Change of jmp MainMenu:startEvent+1aa
17C7DABE
C8
7A
07
73
05
E9
67
01
00
00
48
83
EC
20
49
Change of jne MainMenu:startEvent+1aa
17C7DAA3
83
C4
20
85
C0
0F
85
81
01
00
00
F3
0F
10
46
48
Change of call r11
17C7DAD1
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne EventsMenu:startEventXXXmas+68
17C9EF3F
83
C4
20
85
C0
0F
85
43
00
00
00
48
B9
18
DF
0F
Change of call r11
17CA21CB
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne ShopButton:refresh+ba
17CA21D4
83
C4
20
85
C0
75
04
C6
47
79
00
48
Change of call r11
17CA234C
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of call r11
17CA23A2
17
00
00
00
00
41
FF
D3
48
83
C4
20
E9
Change of call r11
17CA284A
17
00
00
00
00
41
FF
D3
48
83
C4
20
E9
Change of call r11
17CA28D8
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call qword ptr [rax+000002C8]
17CA291D
8B
00
90
90
90
FF
90
C8
02
00
00
48
83
C4
20
48
Change of call r11
17CA1E37
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
17CA1E52
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
17CA1EC2
17
00
00
00
00
41
FF
D3
48
83
C4
20
0F
Change of je ShopButton:Start+f1
17CA1ECF
B6
46
70
85
C0
0F
84
2C
00
00
00
48
B8
60
7F
BF
Change of call r11
17CA1EFA
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of mov [rax],ecx
17CAB39D
57
01
00
00
00
89
08
48
B8
60
7F
BF
Change of call r11
71131887
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711318CC
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711318F1
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
7113111A
71
00
00
00
00
41
FF
D3
48
83
C4
40
C9
Change of call r11
71132565
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711325A4
71
00
00
00
00
41
FF
D3
48
83
C4
40
48
Change of mov r11,System.DateTime:op_GreaterThan
7113259A
08
48
83
EC
20
49
BB
60
0E
13
71
00
00
00
00
41
FF
D3
48
83
Change of call r11
711325EF
71
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je DateRestrictedButton:Update+13f
711325F8
83
C4
20
85
C0
0F
84
61
00
00
00
48
8B
46
18
48
Change of call r11
71132616
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je DateRestrictedButton:Update+13f
7113261F
83
C4
20
85
C0
0F
84
3A
00
00
00
48
8B
4E
40
33
Change of je DateRestrictedButton:Update+13f
71132642
83
C4
20
85
C0
74
1B
48
8B
46
40
48
Change of call r11
7113267F
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711326AB
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of mov r11,UnityEngine.EventSystems.EventSystem:get_current
711326B6
20
48
83
EC
20
49
BB
60
7A
7F
06
00
00
00
00
41
FF
D3
48
83
Change of call r11
711326C0
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711326DB
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
711326F7
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
71132713
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of je DateRestrictedButton:Update+2ad
7113271C
83
C4
20
85
C0
0F
84
AB
00
00
00
48
83
EC
20
49
Change of call r11
71132730
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
7113274B
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
7113283C
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
7113285B
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of call r11
71131D85
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
71131D66
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
71131D18
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
71131CDE
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
71131CBF
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
7112C66A
06
00
00
00
00
41
FF
D3
48
83
C4
20
C9
Change of call r11
711319A2
71
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
17EF6D5A
06
00
00
00
00
41
FF
D3
48
83
C4
20
C9
Change of cmp eax,ecx
17EF6DAD
00
48
63
4E
18
3B
C1
74
30
48
8B
CE
Change of call r11
17EF6DDA
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
17EF6566
17
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne EventsMenu:startEventCowYear+66
17EF656F
83
C4
20
85
C0
0F
85
41
00
00
00
48
B9
10
C3
D2
Change of call r11
17EE271C
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call qword ptr [rax+00000108]
17EE2774
8B
00
90
90
90
FF
90
08
01
00
00
48
83
C4
20
48
Change of call r11
17EE279F
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jne EventsMenu:Start+1ea
17EE27A8
83
C4
20
85
C0
0F
85
AC
00
00
00
48
8B
0C
25
F0
Change of jne EventsMenu:Update+b0
17EE33F4
83
C4
20
85
C0
0F
85
56
00
00
00
48
8B
46
30
48
Change of call r11
17A86AA5
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of je System.DateTime:Compare+58
17A86B33
0F
B6
C0
85
C0
0F
84
0F
00
00
00
48
B8
FF
FF
FF
Change of call r11
17A71F2D
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
17A7203F
06
00
00
00
00
41
FF
D3
48
83
C4
20
85
Change of mov [rsi+50],00000000
1557BD13C
EC
28
48
8B
F1
C7
46
50
00
00
00
00
C7
46
54
00
00
Change of jne EventsMenu:startEventXXXmas+68
155805ECF
83
C4
20
85
C0
0F
85
43
00
00
00
48
B9
50
91
05
Change of je EventsMenu:Start+1ea
1557EB1CA
83
C4
20
85
C0
0F
84
6A
00
00
00
83
3F
00
49
BA
Change of call r11
1557EB22B
55
01
00
00
00
41
FF
D3
48
83
C4
20
85
Change of jbe EventMenu:Start+b73
178A9927
63
C9
39
48
18
0F
86
96
0A
00
00
48
8D
44
C8
20
Change of call r11
178A5CEA
06
00
00
00
00
41
FF
D3
48
83
C4
20
48
Change of call r11
178A5D0D
17
00
00
00
00
41
FF
D3
48
83
C4
20
48
resultsTotal
3
Collection1
06BCB30F
Collection2
06C4EA1F
Collection3
247300EF