38
"Enable"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
if getProcessIDFromProcessName("SonsOfTheForest.exe") then mono_initialize() LaunchMonoDataCollector()
else messageDialog( "Open The Game, attach to it and try again", mtError, mbOK) return 'nop'
end
local CEVersion = 7.4
if CEVersion > getCEVersion() then
if messageDialog( "This table was made with Cheat Engine " .. CEVersion .. "\r\nYou are running Cheat Engine " .. getCEVersion() .. " \r\n\rSome cheats may not work correctly.\rDownload The Latest version?", mtConfirmation, mbYes, mbNo ) == mrYes then ShellExecute("https://cheatengine.org/downloads.php")
end
end
[DISABLE]
40
"v32361 [Early Access]"
1
4
"Infinite Health"
Auto Assembler Script
[ENABLE]
aobscanregion(infhealth,Vitals.GetHealth,Vitals.GetHealth+100,F3 0F10 40 10)
registersymbol(infhealth)
alloc(infhealthMem,100,infhealth)
infhealthMem:
movss xmm0,[rax+24]
movss [rax+10],xmm0
jmp infhealth+5
infhealth:
jmp infhealthMem
[DISABLE]
infhealth:
db F3 0F 10 40 10
dealloc(infhealthMem)
unregistersymbol(infhealth)
3
"Infinite Stamina"
Auto Assembler Script
[ENABLE]
aobscanregion(infstamina,Vitals.GetStamina,Vitals.GetStamina+100,F3 0F10 40 10)
registersymbol(infstamina)
alloc(infstaminaMem,100,infstamina)
infstaminaMem:
movss xmm0,[rax+24]
movss [rax+10],xmm0
jmp infstamina+5
infstamina:
jmp infstaminaMem
[DISABLE]
infstamina:
db F3 0F 10 40 10
dealloc(infstaminaMem)
unregistersymbol(infstamina)
8
"Infinite Hydration"
Auto Assembler Script
[ENABLE]
aobscanregion(nohydration,Vitals.get_IsThirsty,Vitals.get_IsThirsty+1000,F3 0F 10 41 10)
registersymbol(nohydration)
alloc(nohydrationMem,$1000,nohydration)
nohydrationMem:
fld [rax+24]
fstp [rax+10]
movss xmm0,[rcx+10]
jmp nohydration+5
nohydration:
jmp nohydrationMem
[DISABLE]
nohydration:
db F3 0F 10 41 10
unregistersymbol(nohydration)
dealloc(nohydrationMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2D4FDFE
Vitals.get_IsThirsty: 40 53 - push rbx
GameAssembly.dll+2D4FDE2: 48 83 EC 20 - sub rsp,20
GameAssembly.dll+2D4FDE6: 33 D2 - xor edx,edx
GameAssembly.dll+2D4FDE8: 48 8B D9 - mov rbx,rcx
GameAssembly.dll+2D4FDEB: E8 80 FE FF FF - call Vitals.get_Hydration
GameAssembly.dll+2D4FDF0: 48 85 C0 - test rax,rax
GameAssembly.dll+2D4FDF3: 74 1B - je GameAssembly.dll+2D4FE10
GameAssembly.dll+2D4FDF5: 48 8B 4B 30 - mov rcx,[rbx+30]
GameAssembly.dll+2D4FDF9: 48 85 C9 - test rcx,rcx
GameAssembly.dll+2D4FDFC: 74 12 - je GameAssembly.dll+2D4FE10
// ---------- INJECTING HERE ----------
GameAssembly.dll+2D4FDFE: F3 0F 10 41 10 - movss xmm0,[rcx+10]
// ---------- DONE INJECTING ----------
GameAssembly.dll+2D4FE03: 0F 2F 40 10 - comiss xmm0,[rax+10]
GameAssembly.dll+2D4FE07: 0F 97 C0 - seta al
GameAssembly.dll+2D4FE0A: 48 83 C4 20 - add rsp,20
GameAssembly.dll+2D4FE0E: 5B - pop rbx
GameAssembly.dll+2D4FE0F: C3 - ret
GameAssembly.dll+2D4FE10: E8 7B 68 75 FD - call GameAssembly.mono_type_size+6310
GameAssembly.dll+2D4FE15: CC - int 3
GameAssembly.dll+2D4FE16: CC - int 3
GameAssembly.dll+2D4FE17: CC - int 3
GameAssembly.dll+2D4FE18: CC - int 3
}
10
"Infinite Fullness"
Auto Assembler Script
[ENABLE]
aobscanregion(inffullness,Vitals.get_IsHungry,Vitals.get_IsHungry+100,0F 2F 40 10 0F 97 C0)
registersymbol(inffullness)
alloc(inffullnessMem,$1000,inffullness)
inffullnessMem:
fld [rax+24]
fstp [rax+10]
comiss xmm0,[rax+10]
seta al
jmp inffullness+7
inffullness:
jmp inffullnessMem
nop 2
[DISABLE]
inffullness:
db 0F 2F 40 10 0F 97 C0
unregistersymbol(inffullness)
dealloc(inffullnessMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2D4FD68
GameAssembly.dll+2D4FD4C: CC - int 3
GameAssembly.dll+2D4FD4D: CC - int 3
GameAssembly.dll+2D4FD4E: CC - int 3
GameAssembly.dll+2D4FD4F: CC - int 3
Vitals.get_IsHungry: 48 83 EC 28 - sub rsp,28
GameAssembly.dll+2D4FD54: 33 D2 - xor edx,edx
GameAssembly.dll+2D4FD56: E8 75 FD FF FF - call Vitals.get_Fullness
GameAssembly.dll+2D4FD5B: 48 85 C0 - test rax,rax
GameAssembly.dll+2D4FD5E: 74 14 - je GameAssembly.dll+2D4FD74
GameAssembly.dll+2D4FD60: F3 0F 10 05 80 0B 38 01 - movss xmm0,[GameAssembly.dll+40D08E8]
// ---------- INJECTING HERE ----------
GameAssembly.dll+2D4FD68: 0F 2F 40 10 - comiss xmm0,[rax+10]
// ---------- DONE INJECTING ----------
GameAssembly.dll+2D4FD6C: 0F 97 C0 - seta al
GameAssembly.dll+2D4FD6F: 48 83 C4 28 - add rsp,28
GameAssembly.dll+2D4FD73: C3 - ret
GameAssembly.dll+2D4FD74: E8 17 69 75 FD - call GameAssembly.mono_type_size+6310
GameAssembly.dll+2D4FD79: CC - int 3
GameAssembly.dll+2D4FD7A: CC - int 3
GameAssembly.dll+2D4FD7B: CC - int 3
GameAssembly.dll+2D4FD7C: CC - int 3
GameAssembly.dll+2D4FD7D: CC - int 3
GameAssembly.dll+2D4FD7E: CC - int 3
}
13
"Infinite Temperature"
Auto Assembler Script
[ENABLE]
aobscanregion(inftemp,Sons.StatSystem.TemperatureStat.Update,Sons.StatSystem.TemperatureStat.Update+200,F3 0F 10 6B 10) // should be unique
registersymbol(inftemp)
alloc(inftempMem,$1000,inftemp)
inftempMem:
fld [rbx+24]
fstp [rbx+10]
movss xmm5,[rbx+10]
jmp inftemp+5
inftemp:
jmp inftempMem
[DISABLE]
inftemp:
db F3 0F 10 6B 10
unregistersymbol(inftemp)
dealloc(inftempMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2B11765
GameAssembly.dll+2B1173A: 48 8B 49 40 - mov rcx,[rcx+40]
GameAssembly.dll+2B1173E: FF D0 - call rax
GameAssembly.dll+2B11740: F3 0F 11 43 18 - movss [rbx+18],xmm0
GameAssembly.dll+2B11745: F3 0F 10 4B 18 - movss xmm1,[rbx+18]
GameAssembly.dll+2B1174A: F3 0F 10 05 D2 EA 5B 01 - movss xmm0,[GameAssembly.dll+40D0224]
GameAssembly.dll+2B11752: 0F 2F C1 - comiss xmm0,xmm1
GameAssembly.dll+2B11755: F3 0F 10 53 1C - movss xmm2,[rbx+1C]
GameAssembly.dll+2B1175A: 76 09 - jna GameAssembly.dll+2B11765
GameAssembly.dll+2B1175C: 0F 2F C2 - comiss xmm0,xmm2
GameAssembly.dll+2B1175F: 0F 87 9F 00 00 00 - ja GameAssembly.dll+2B11804
// ---------- INJECTING HERE ----------
GameAssembly.dll+2B11765: F3 0F 10 6B 10 - movss xmm5,[rbx+10]
// ---------- DONE INJECTING ----------
GameAssembly.dll+2B1176A: F3 0F 59 D6 - mulss xmm2,xmm6
GameAssembly.dll+2B1176E: 0F 29 7C 24 30 - movaps [rsp+30],xmm7
GameAssembly.dll+2B11773: 0F 28 FD - movaps xmm7,xmm5
GameAssembly.dll+2B11776: F3 0F 59 CE - mulss xmm1,xmm6
GameAssembly.dll+2B1177A: 0F 2F C2 - comiss xmm0,xmm2
GameAssembly.dll+2B1177D: F3 0F 10 73 14 - movss xmm6,[rbx+14]
GameAssembly.dll+2B11782: F3 0F 5C CA - subss xmm1,xmm2
GameAssembly.dll+2B11786: F3 0F 5C FE - subss xmm7,xmm6
GameAssembly.dll+2B1178A: 0F 28 DF - movaps xmm3,xmm7
GameAssembly.dll+2B1178D: 0F 54 1D 3C E4 5B 01 - andps xmm3,[GameAssembly.dll+40CFBD0]
}
17
"Infinite Strength"
Auto Assembler Script
[ENABLE]
aobscanregion(infstr,Vitals.get_Strength,Vitals.get_Strength+200,48 8B C3 48 8B 5C 24 30)
registersymbol(infstr)
alloc(infstrMem,$1000,infstr)
infstrMem:
mov rax,rbx
fld [rax+24]
fstp [rax+10]
mov rbx,[rsp+30]
jmp infstr+8
infstr:
jmp infstrMem
nop 3
[DISABLE]
infstr:
db 48 8B C3 48 8B 5C 24 30
unregistersymbol(infstr)
dealloc(infstrMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2D4FFE0
GameAssembly.dll+2D4FFB1: 48 85 C9 - test rcx,rcx
GameAssembly.dll+2D4FFB4: 74 38 - je GameAssembly.dll+2D4FFEE
GameAssembly.dll+2D4FFB6: 48 8B 15 2B 4F 2C 02 - mov rdx,[GameAssembly.dll+5014EE8]
GameAssembly.dll+2D4FFBD: E8 DE 2B F0 FD - call GameAssembly.dll+C52BA0
GameAssembly.dll+2D4FFC2: 48 8B D0 - mov rdx,rax
GameAssembly.dll+2D4FFC5: 48 89 87 B0 00 00 00 - mov [rdi+000000B0],rax
GameAssembly.dll+2D4FFCC: 48 8D 8F B0 00 00 00 - lea rcx,[rdi+000000B0]
GameAssembly.dll+2D4FFD3: 48 8B D8 - mov rbx,rax
GameAssembly.dll+2D4FFD6: E8 05 59 75 FD - call GameAssembly.mono_type_size+5560
GameAssembly.dll+2D4FFDB: 48 8B 74 24 38 - mov rsi,[rsp+38]
// ---------- INJECTING HERE ----------
GameAssembly.dll+2D4FFE0: 48 8B C3 - mov rax,rbx
// ---------- DONE INJECTING ----------
GameAssembly.dll+2D4FFE3: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+2D4FFE8: 48 83 C4 20 - add rsp,20
GameAssembly.dll+2D4FFEC: 5F - pop rdi
GameAssembly.dll+2D4FFED: C3 - ret
GameAssembly.dll+2D4FFEE: E8 9D 66 75 FD - call GameAssembly.mono_type_size+6310
GameAssembly.dll+2D4FFF3: CC - int 3
GameAssembly.dll+2D4FFF4: CC - int 3
GameAssembly.dll+2D4FFF5: CC - int 3
GameAssembly.dll+2D4FFF6: CC - int 3
GameAssembly.dll+2D4FFF7: CC - int 3
}
16
"Fully Rested"
Auto Assembler Script
[ENABLE]
aobscanregion(fullrest,Vitals.get_IsTired,Vitals.get_IsTired+100,0F 2F 40 10 0F 97 C0)
registersymbol(fullrest)
alloc(fullrestMem,$1000,fullrest)
fullrestMem:
fld [rax+24]
fstp [rax+10]
comiss xmm0,[rax+10]
seta al
jmp fullrest+7
fullrest:
jmp fullrestMem
nop 2
[DISABLE]
fullrest:
db 0F 2F 40 10 0F 97 C0
unregistersymbol(fullrest)
dealloc(fullrestMem)
18
"No Fall Damage"
Auto Assembler Script
[ENABLE]
FirstPersonCharacter.DoFallDamage:
db c3
[DISABLE]
FirstPersonCharacter.DoFallDamage:
db 40
26
"Set Walkspeed"
Auto Assembler Script
[ENABLE]
aobscanmodule(highwalkspeed,GameAssembly.dll,F3 0F 10 73 2C 44 38)
registersymbol(highwalkspeed)
alloc(highwalkspeedMem,$1000,highwalkspeed)
label(walkspeed)
registersymbol(walkspeed)
highwalkspeedMem:
movss xmm6,[walkspeed]
jmp highwalkspeed+5
walkspeed:
dq (float)3
highwalkspeed:
jmp highwalkspeedMem
[DISABLE]
highwalkspeed:
db F3 0F 10 73 2C
unregistersymbol(highwalkspeed)
unregistersymbol(walkspeed)
dealloc(highwalkspeedMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2F8B666
GameAssembly.dll+2F8B627: 48 8B 15 A2 28 0E 02 - mov rdx,[GameAssembly.dll+506DED0]
GameAssembly.dll+2F8B62E: C6 05 33 23 3A 02 01 - mov byte ptr [GameAssembly.dll+532D968],01
GameAssembly.dll+2F8B635: 48 8B 82 B8 00 00 00 - mov rax,[rdx+000000B8]
GameAssembly.dll+2F8B63C: 48 8B 88 90 00 00 00 - mov rcx,[rax+00000090]
GameAssembly.dll+2F8B643: 48 85 C9 - test rcx,rcx
GameAssembly.dll+2F8B646: 0F 84 45 01 00 00 - je GameAssembly.dll+2F8B791
GameAssembly.dll+2F8B64C: 44 38 B9 C9 05 00 00 - cmp [rcx+000005C9],r15l
GameAssembly.dll+2F8B653: 0F 85 C4 00 00 00 - jne GameAssembly.dll+2F8B71D
GameAssembly.dll+2F8B659: 44 38 BB F0 00 00 00 - cmp [rbx+000000F0],r15l
GameAssembly.dll+2F8B660: 0F 85 A5 00 00 00 - jne GameAssembly.dll+2F8B70B
// ---------- INJECTING HERE ----------
GameAssembly.dll+2F8B666: F3 0F 10 73 2C - movss xmm6,[rbx+2C]
// ---------- DONE INJECTING ----------
GameAssembly.dll+2F8B66B: 44 38 BB 10 02 00 00 - cmp [rbx+00000210],r15l
GameAssembly.dll+2F8B672: 75 52 - jne GameAssembly.dll+2F8B6C6
GameAssembly.dll+2F8B674: 44 38 BB F4 00 00 00 - cmp [rbx+000000F4],r15l
GameAssembly.dll+2F8B67B: 0F 84 A9 00 00 00 - je GameAssembly.dll+2F8B72A
GameAssembly.dll+2F8B681: 48 8B 05 30 83 05 02 - mov rax,[GameAssembly.dll+4FE39B8]
GameAssembly.dll+2F8B688: 44 39 B8 E0 00 00 00 - cmp [rax+000000E0],r15d
GameAssembly.dll+2F8B68F: 75 0F - jne GameAssembly.dll+2F8B6A0
GameAssembly.dll+2F8B691: 48 8B C8 - mov rcx,rax
GameAssembly.dll+2F8B694: E8 57 3F 51 FD - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+2F8B699: 48 8B 05 18 83 05 02 - mov rax,[GameAssembly.dll+4FE39B8]
}
27
"walkspeed"
0
Float
walkspeed
28
"Set Run Speed"
Auto Assembler Script
[ENABLE]
aobscanmodule(setrunspeed,GameAssembly.dll,8B 43 30 48 8D 93 28 01 00 00)
registersymbol(setrunspeed)
alloc(setrunspeedMem,$1000,setrunspeed)
label(runspeed)
registersymbol(runspeed)
setrunspeedMem:
mov eax,[runspeed]
lea rdx,[rbx+00000128]
jmp setrunspeed+A
runspeed:
dq (float)5
setrunspeed:
jmp setrunspeedMem
nop 5
[DISABLE]
setrunspeed:
db 8B 43 30 48 8D 93 28 01 00 00
unregistersymbol(setrunspeed)
unregistersymbol(runspeed)
dealloc(setrunspeedMem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2F8CCC8
GameAssembly.dll+2F8CC92: E8 89 E5 5D 00 - call UnityEngine.UIElements.BackgroundSize.get_sizeType
GameAssembly.dll+2F8CC97: 48 8B 0D 82 F7 08 02 - mov rcx,[GameAssembly.dll+501C420]
GameAssembly.dll+2F8CC9E: 8B F8 - mov edi,eax
GameAssembly.dll+2F8CCA0: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+2F8CCA7: 75 0C - jne GameAssembly.dll+2F8CCB5
GameAssembly.dll+2F8CCA9: E8 42 29 51 FD - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+2F8CCAE: 48 8B 0D 6B F7 08 02 - mov rcx,[GameAssembly.dll+501C420]
GameAssembly.dll+2F8CCB5: 48 8B 89 B8 00 00 00 - mov rcx,[rcx+000000B8]
GameAssembly.dll+2F8CCBC: 3B B9 88 1E 00 00 - cmp edi,[rcx+00001E88]
GameAssembly.dll+2F8CCC2: 0F 84 05 01 00 00 - je GameAssembly.dll+2F8CDCD
// ---------- INJECTING HERE ----------
GameAssembly.dll+2F8CCC8: 8B 43 30 - mov eax,[rbx+30]
// ---------- DONE INJECTING ----------
GameAssembly.dll+2F8CCCB: 48 8D 93 28 01 00 00 - lea rdx,[rbx+00000128]
GameAssembly.dll+2F8CCD2: 45 33 C0 - xor r8d,r8d
GameAssembly.dll+2F8CCD5: 89 83 24 01 00 00 - mov [rbx+00000124],eax
GameAssembly.dll+2F8CCDB: 48 8D 4C 24 30 - lea rcx,[rsp+30]
GameAssembly.dll+2F8CCE0: E8 1B 09 5C FD - call GameAssembly.dll+54D600
GameAssembly.dll+2F8CCE5: 33 D2 - xor edx,edx
GameAssembly.dll+2F8CCE7: 48 8B CB - mov rcx,rbx
GameAssembly.dll+2F8CCEA: F2 0F 10 00 - movsd xmm0,[rax]
GameAssembly.dll+2F8CCEE: 8B 40 08 - mov eax,[rax+08]
GameAssembly.dll+2F8CCF1: F2 0F 11 44 24 20 - movsd [rsp+20],xmm0
}
29
"runspeed"
0
Float
runspeed
31
"Dev Console"
Auto Assembler Script
[ENABLE]
aobscanmodule(enableconsole,GameAssembly.dll,80 BF 80 01 00 00 00)
registersymbol(enableconsole)
alloc(enableconsoleMem,$1000,enableconsole)
label(console)
registersymbol(console)
enableconsoleMem:
mov [console],rdi
cmp byte ptr [rdi+00000180],00
jmp enableconsole+7
console:
enableconsole:
jmp enableconsoleMem
nop 2
[DISABLE]
enableconsole:
db 80 BF 80 01 00 00 00
unregistersymbol(enableconsole)
dealloc(enableconsoleMem)
unregistersymbol(console)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+2CB98E7
GameAssembly.dll+2CB98B1: 48 8B 0D 20 A6 32 02 - mov rcx,[GameAssembly.dll+4FE3ED8]
GameAssembly.dll+2CB98B8: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+2CB98BF: 75 05 - jne GameAssembly.dll+2CB98C6
GameAssembly.dll+2CB98C1: E8 2A 5D 7E FD - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+2CB98C6: 48 8B 05 0B A6 32 02 - mov rax,[GameAssembly.dll+4FE3ED8]
GameAssembly.dll+2CB98CD: 48 8B 88 B8 00 00 00 - mov rcx,[rax+000000B8]
GameAssembly.dll+2CB98D4: 80 79 10 00 - cmp byte ptr [rcx+10],00
GameAssembly.dll+2CB98D8: 0F 85 29 01 00 00 - jne GameAssembly.dll+2CB9A07
GameAssembly.dll+2CB98DE: 48 85 FF - test rdi,rdi
GameAssembly.dll+2CB98E1: 0F 84 2D 01 00 00 - je GameAssembly.dll+2CB9A14
// ---------- INJECTING HERE ----------
GameAssembly.dll+2CB98E7: 80 BF 80 01 00 00 00 - cmp byte ptr [rdi+00000180],00
// ---------- DONE INJECTING ----------
GameAssembly.dll+2CB98EE: 0F 85 ED 00 00 00 - jne GameAssembly.dll+2CB99E1
GameAssembly.dll+2CB98F4: 48 8B 0D BD 27 38 02 - mov rcx,[GameAssembly.dll+503C0B8]
GameAssembly.dll+2CB98FB: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+2CB9902: 75 05 - jne GameAssembly.dll+2CB9909
GameAssembly.dll+2CB9904: E8 E7 5C 7E FD - call GameAssembly.il2cpp_runtime_class_init
GameAssembly.dll+2CB9909: 33 C9 - xor ecx,ecx
GameAssembly.dll+2CB990B: E8 80 08 A1 FD - call BoltNetwork.get_isClient
GameAssembly.dll+2CB9910: 84 C0 - test al,al
GameAssembly.dll+2CB9912: 74 5A - je GameAssembly.dll+2CB996E
GameAssembly.dll+2CB9914: 48 8B 0D ED 97 39 02 - mov rcx,[GameAssembly.dll+5053108]
}
32
"Enable Console"
0:Enabled
1:Disabled
0
Byte
[Console]+180
33
"^^^Press F1 to show"
0080FF
1
35
"Show Player Stats"
1:Enabled
0:Disabled
0
Byte
[Console]+7A
37
"Show Player Visibility"
1:Enabled
0:Disabled
0
Byte
[Console]+7C
39
"Made by Sacracia"
0080FF
1