26134
"Get Playerbase"
Auto Assembler Script
define(address,"HelloNeighbor-Win64-Shipping.exe"+146041F)
define(bytes,48 8B 01 41 0F B6 F1)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"HelloNeighbor-Win64-Shipping.exe"+146041F)
label(code)
label(return)
label(playerbase)
newmem:
mov [playerbase],rcx
code:
mov rax,[rcx]
movzx esi,r9l
jmp return
playerbase:
dq 0
address:
jmp newmem
nop 2
return:
registersymbol(playerbase)
[DISABLE]
address:
db bytes
// mov rax,[rcx]
// movzx esi,r9l
dealloc(newmem)
unregistersymbol(playerbase)
{
// ORIGINAL CODE - INJECTION POINT: HelloNeighbor-Win64-Shipping.exe.text+145F41F
HelloNeighbor-Win64-Shipping.exe.text+145F403: E8 28 76 FF FF - call HelloNeighbor-Win64-Shipping.exe.text+1456A30
HelloNeighbor-Win64-Shipping.exe.text+145F408: 48 83 C4 38 - add rsp,38
HelloNeighbor-Win64-Shipping.exe.text+145F40C: C3 - ret
HelloNeighbor-Win64-Shipping.exe.text+145F40D: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+145F40E: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+145F40F: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+145F410: 48 89 5C 24 08 - mov [rsp+08],rbx
HelloNeighbor-Win64-Shipping.exe.text+145F415: 48 89 74 24 10 - mov [rsp+10],rsi
HelloNeighbor-Win64-Shipping.exe.text+145F41A: 57 - push rdi
HelloNeighbor-Win64-Shipping.exe.text+145F41B: 48 83 EC 70 - sub rsp,70
// ---------- INJECTING HERE ----------
HelloNeighbor-Win64-Shipping.exe.text+145F41F: 48 8B 01 - mov rax,[rcx]
// ---------- DONE INJECTING ----------
HelloNeighbor-Win64-Shipping.exe.text+145F422: 41 0F B6 F1 - movzx esi,r9l
HelloNeighbor-Win64-Shipping.exe.text+145F426: 0F 29 74 24 60 - movaps [rsp+60],xmm6
HelloNeighbor-Win64-Shipping.exe.text+145F42B: 48 8B FA - mov rdi,rdx
HelloNeighbor-Win64-Shipping.exe.text+145F42E: 0F 28 F2 - movaps xmm6,xmm2
HelloNeighbor-Win64-Shipping.exe.text+145F431: 48 8B D9 - mov rbx,rcx
HelloNeighbor-Win64-Shipping.exe.text+145F434: FF 90 F8 05 00 00 - call qword ptr [rax+000005F8]
HelloNeighbor-Win64-Shipping.exe.text+145F43A: 48 8B C8 - mov rcx,rax
HelloNeighbor-Win64-Shipping.exe.text+145F43D: 48 85 C0 - test rax,rax
HelloNeighbor-Win64-Shipping.exe.text+145F440: 74 3F - je HelloNeighbor-Win64-Shipping.exe.text+145F481
HelloNeighbor-Win64-Shipping.exe.text+145F442: 0F 28 C6 - movaps xmm0,xmm6
}
26135
"Playerbase"
0
1
playerbase
0
26136
"CharacterMovement"
0
1
+390
0
26137
"JumpZVelocity"
0
Float
+1ac
26139
"MaxAcceleration"
0
Float
+1f8
26140
"MaxWalkSpeed"
0
Float
+1E4
26141
"MaxWalkSpeedCrouched"
0
Float
+1E8
26142
"MaxSwimSpeed"
0
Float
+1ec
26143
"MaxFlySpeed"
0
Float
+1f0
26145
"Debug"
C0C0C0
1
26123
"Get Playerbase - creates graphics error because...dunno"
Auto Assembler Script
define(address,"HelloNeighbor-Win64-Shipping.exe"+3FB552)
define(bytes,48 8B 03 48 8B CB)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"HelloNeighbor-Win64-Shipping.exe"+3FB552)
label(code)
label(return)
label(playerbase)
newmem:
mov [playerbase],rbx
code:
mov rax,[rbx]
mov rcx,rbx
jmp return
playerbase:
dq 0
address:
jmp newmem
nop
return:
registersymbol(playerbase)
[DISABLE]
address:
db bytes
// mov rax,[rbx]
// mov rcx,rbx
dealloc(newmem)
unregistersymbol(playerbase)
{
// ORIGINAL CODE - INJECTION POINT: HelloNeighbor-Win64-Shipping.exe.text+3FA552
HelloNeighbor-Win64-Shipping.exe.text+3FA525: F2 0F 10 05 C3 16 72 02 - movsd xmm0,[HelloNeighbor-Win64-Shipping.exe.data+58BF0]
HelloNeighbor-Win64-Shipping.exe.text+3FA52D: 89 44 24 28 - mov [rsp+28],eax
HelloNeighbor-Win64-Shipping.exe.text+3FA531: 48 8D 44 24 20 - lea rax,[rsp+20]
HelloNeighbor-Win64-Shipping.exe.text+3FA536: F2 0F 11 44 24 20 - movsd [rsp+20],xmm0
HelloNeighbor-Win64-Shipping.exe.text+3FA53C: F2 0F 10 00 - movsd xmm0,[rax]
HelloNeighbor-Win64-Shipping.exe.text+3FA540: 48 8D 54 24 30 - lea rdx,[rsp+30]
HelloNeighbor-Win64-Shipping.exe.text+3FA545: 8B 40 08 - mov eax,[rax+08]
HelloNeighbor-Win64-Shipping.exe.text+3FA548: 41 B1 01 - mov r9l,01
HelloNeighbor-Win64-Shipping.exe.text+3FA54B: 89 44 24 38 - mov [rsp+38],eax
HelloNeighbor-Win64-Shipping.exe.text+3FA54F: 0F 28 D6 - movaps xmm2,xmm6
// ---------- INJECTING HERE ----------
HelloNeighbor-Win64-Shipping.exe.text+3FA552: 48 8B 03 - mov rax,[rbx]
// ---------- DONE INJECTING ----------
HelloNeighbor-Win64-Shipping.exe.text+3FA555: 48 8B CB - mov rcx,rbx
HelloNeighbor-Win64-Shipping.exe.text+3FA558: F2 0F 11 44 24 30 - movsd [rsp+30],xmm0
HelloNeighbor-Win64-Shipping.exe.text+3FA55E: FF 90 F0 06 00 00 - call qword ptr [rax+000006F0]
HelloNeighbor-Win64-Shipping.exe.text+3FA564: 0F 28 74 24 50 - movaps xmm6,[rsp+50]
HelloNeighbor-Win64-Shipping.exe.text+3FA569: 48 83 C4 60 - add rsp,60
HelloNeighbor-Win64-Shipping.exe.text+3FA56D: 5B - pop rbx
HelloNeighbor-Win64-Shipping.exe.text+3FA56E: C3 - ret
HelloNeighbor-Win64-Shipping.exe.text+3FA56F: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+3FA570: 40 53 - push rbx
HelloNeighbor-Win64-Shipping.exe.text+3FA572: 48 83 EC 20 - sub rsp,20
}
26124
"Playerbase"
0
1
playerbase
0
26131
"Get World"
Auto Assembler Script
define(address,"HelloNeighbor-Win64-Shipping.exe"+71A0F6)
define(bytes,48 8B 01 48 8B DA)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"HelloNeighbor-Win64-Shipping.exe"+71A0F6)
label(code)
label(return)
label(world)
newmem:
mov [world],rcx
code:
mov rax,[rcx]
mov rbx,rdx
jmp return
world:
dq 0
address:
jmp newmem
nop
return:
registersymbol(world)
[DISABLE]
address:
db bytes
// mov rax,[rcx]
// mov rbx,rdx
dealloc(newmem)
unregistersymbol(world)
{
// ORIGINAL CODE - INJECTION POINT: HelloNeighbor-Win64-Shipping.exe.text+7190F6
HelloNeighbor-Win64-Shipping.exe.text+7190E8: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190E9: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190EA: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190EB: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190EC: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190ED: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190EE: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190EF: CC - int 3
HelloNeighbor-Win64-Shipping.exe.text+7190F0: 40 53 - push rbx
HelloNeighbor-Win64-Shipping.exe.text+7190F2: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
HelloNeighbor-Win64-Shipping.exe.text+7190F6: 48 8B 01 - mov rax,[rcx]
// ---------- DONE INJECTING ----------
HelloNeighbor-Win64-Shipping.exe.text+7190F9: 48 8B DA - mov rbx,rdx
HelloNeighbor-Win64-Shipping.exe.text+7190FC: FF 90 48 01 00 00 - call qword ptr [rax+00000148]
HelloNeighbor-Win64-Shipping.exe.text+719102: 48 85 C0 - test rax,rax
HelloNeighbor-Win64-Shipping.exe.text+719105: 0F 95 C1 - setne cl
HelloNeighbor-Win64-Shipping.exe.text+719108: 88 0B - mov [rbx],cl
HelloNeighbor-Win64-Shipping.exe.text+71910A: 48 83 C4 20 - add rsp,20
HelloNeighbor-Win64-Shipping.exe.text+71910E: 5B - pop rbx
HelloNeighbor-Win64-Shipping.exe.text+71910F: C3 - ret
HelloNeighbor-Win64-Shipping.exe.text+719110: 48 89 5C 24 08 - mov [rsp+08],rbx
HelloNeighbor-Win64-Shipping.exe.text+719115: 48 89 74 24 10 - mov [rsp+10],rsi
}
26132
"World"
0
1
world
0