13022
"enable"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
//vng21092's aobscan lua script
{$lua}
function lua_aobscan(name,module,bytes,index)
index = index - 1
if(module == "") then
local resultSet = AOBScan(bytes)
if(resultSet == nil) then
unregisterSymbol(name)
print(name.." not found")
else
unregisterSymbol(name)
registerSymbol(name,resultSet[index])
resultSet.destroy()
end
else
if(getModuleSize(module) == nil) then
print("Module "..module.." not found")
else
local memScanner = createMemScan()
local memFoundList = createFoundList(memScanner)
memScanner.firstScan(
soExactValue,vtByteArray,rtRounded,bytes,nil,
getAddress(module),(getAddress(module)+getModuleSize(module)),"",
fsmNotAligned,"",true,false,false,false)
memScanner.waitTillDone()
memFoundList.initialize()
if(memFoundList.Count == 0) then
unregisterSymbol(name)
print(name.." in module "..module.." not found")
else
unregisterSymbol(name)
registerSymbol(name,memFoundList.Address[index])
end
memScanner.destroy()
memFoundList.destroy()
end
end
end
{$asm}
///*****************************************///
aobscanmodule(playerHealthReadInCombatAOB,Control_DX11.exe,F3 0F ** ** ** 41 ** ** ** 00 00 FF ** ** ** ** ** 8B ** 49 ** ** FF)
registersymbol(playerHealthReadInCombatAOB)
label(aKMHotkeyPressed)
registersymbol(aKMHotkeyPressed)
label(aControllerHotkeyPressed)
registersymbol(aControllerHotkeyPressed)
label(pPlayer)
registersymbol(pPlayer)
alloc(newmem,2048,playerHealthReadInCombatAOB) //"Control_DX11.exe"+3AD1EA)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rbx
mov rbx,pPlayer
mov [rbx],rax
pop rbx
originalcode:
readmem(playerHealthReadInCombatAOB,5)
//movss xmm7,[rax+40]
exit:
jmp returnhere
///
aKMHotkeyPressed:
dd 0
aControllerHotkeyPressed:
dd 0 //A button
dd 0 //B button
dd 0 //X button
dd 0 //Y button
dd 0 //Left shoulder button
dd 0 //Right shoulder button
dd 0 //Left trigger
dd 0 //Right trigger
dd 0 //Left thumb stick down
dd 0 //Right thumb stick down
pPlayer:
dq 0
///
playerHealthReadInCombatAOB: //"Control_DX11.exe"+3AD1EA:
jmp newmem
returnhere:
///*****************************************///
aobscanmodule(healthCalOnChangeAOB,Control_DX11.exe,F3 0F ** ** ** 40 ** ** 0F ** ** ** 40 ** ** 0F ** ** ** 0F ** ** 44 ** ** ** ** 41 ** ** ** F3)
registersymbol(healthCalOnChangeAOB)
label(bUndead)
registersymbol(bUndead)
label(dDamageMultiplier)
registersymbol(dDamageMultiplier)
label(dMinHealth)
registersymbol(dMinHealth)
label(pPlayerHealthCal)
registersymbol(pPlayerHealthCal)
alloc(newmem2,2048,healthCalOnChangeAOB) //"Control_DX11.exe"+2C81B4)
label(returnhere2)
label(originalcode2_healthCalOnChangeAOB)
registersymbol(originalcode2_healthCalOnChangeAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
//sub rsp,10
//movdqu dqword [rsp],xmm15
mov rbx,pPlayer
mov rbx,[rbx]
cmp [rcx],rbx
je @f
//not player
mov rbx,dDamageMultiplier
mulss xmm1,[rbx]
jmp end2
@@:
mov rbx,pPlayerHealthCal
mov [rbx],rcx
mov rbx,bUndead
cmp byte ptr [rbx],1
jne @f
readmem(healthCalOnChangeAOB,5)
//movss xmm0,[rcx+64]
subss xmm0,xmm1
mov rbx,dMinHealth
comiss xmm0,[rbx]
jae @f
movss xmm0,[rbx]
addss xmm0,xmm1
readmem(healthCalOnChangeAOB,2)
db 11
readmem(healthCalOnChangeAOB+3,2)
//movss [rcx+64],xmm0
end2:
//movdqu xmm15,dqword [rsp]
//add rsp,10
originalcode2_healthCalOnChangeAOB:
readmem(healthCalOnChangeAOB,5)
//movss xmm0,[rcx+64]
exit2:
jmp returnhere2
///
bUndead:
dd 0
dDamageMultiplier:
dd (float)1
dMinHealth:
dd (float)0.1
pPlayerHealthCal:
dq 0
///
healthCalOnChangeAOB: //"Control_DX11.exe"+2C81B4:
jmp newmem2
returnhere2:
///*****************************************///
aobscanmodule(playerAmmoRead3AOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 0F ** ** ** ** ** ** 76 ** E8 ** ** ** ** 84 ** 74 ** 32 ** EB)
registersymbol(playerAmmoRead3AOB)
label(pAmmo)
registersymbol(pAmmo)
alloc(newmem3,2048,playerAmmoRead3AOB) //"Control_DX11.exe"+5A982B)
label(returnhere3)
label(originalcode3_playerAmmoRead3AOB)
registersymbol(originalcode3_playerAmmoRead3AOB)
label(exit3)
newmem3: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
mov [rax],rcx
pop rax
originalcode3_playerAmmoRead3AOB:
readmem(playerAmmoRead3AOB,8)
//movss xmm0,[rcx+00000148]
exit3:
jmp returnhere3
///
pAmmo:
///
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
jmp newmem3
nop 3
returnhere3:
///*****************************************///
{$lua}
local function hotkeyLuaThread(thread)
local addrC = getAddressSafe('aControllerHotkeyPressed')
local addrKM = getAddressSafe('bFlyKeyPressed')
while RunHotkeyLuaThread do
sleep(100)
if addrC then
local xcs = getXBox360ControllerState()
if xcs~=nil then
writeBytes(addrC, xcs.GAMEPAD_A)
writeBytes(addrC+0x4, xcs.GAMEPAD_B)
writeBytes(addrC+0x8, xcs.GAMEPAD_X)
writeBytes(addrC+0xc, xcs.GAMEPAD_Y)
writeBytes(addrC+0x10, xcs.LeftTrigger)
writeBytes(addrC+0x14, xcs.RightTrigger)
writeBytes(addrC+0x18, xcs.GAMEPAD_LEFT_SHOULDER)
writeBytes(addrC+0x1c, xcs.GAMEPAD_RIGHT_SHOULDER)
writeBytes(addrC+0x20, xcs.GAMEPAD_LEFT_THUMB)
writeBytes(addrC+0x24, xcs.GAMEPAD_RIGHT_THUMB)
end
else
addrC = getAddressSafe('aControllerHotkeyPressed')
end
end
thread.terminate()
end
----------------------------------
if syntaxcheck then return end
RunHotkeyLuaThread = true
createThread(hotkeyLuaThread)
{$asm}
///*****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
RunHotkeyLuaThread = false
{$asm}
///*****************************************///
dealloc(newmem)
playerHealthReadInCombatAOB: //"Control_DX11.exe"+3AD1EA:
db F3 0F 10 78 40
//Alt: movss xmm7,[rax+40]
unregistersymbol(aKMHotkeyPressed)
unregistersymbol(aControllerHotkeyPressed)
unregistersymbol(pPlayer)
///*****************************************///
dealloc(newmem2)
healthCalOnChangeAOB: //"Control_DX11.exe"+2C81B4:
readmem(originalcode2_healthCalOnChangeAOB,5)
//db F3 0F 10 41 64
//Alt: movss xmm0,[rcx+64]
unregistersymbol(originalcode2_healthCalOnChangeAOB)
unregistersymbol(bUndead)
unregistersymbol(dDamageMultiplier)
unregistersymbol(dMinHealth)
unregistersymbol(pPlayerHealthCal)
///*****************************************///
dealloc(newmem3)
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
readmem(originalcode3_playerAmmoRead3AOB,8)
//db F3 0F 10 81 48 01 00 00
//Alt: movss xmm0,[rcx+00000148]
unregistersymbol(originalcode3_playerAmmoRead3AOB)
unregistersymbol(pAmmo)
///*****************************************///
13029
"undead"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
bUndead:
db 1
dMinHealth:
dd (float)0.5
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
bUndead:
db 0
13030
"min health"
008000
Float
dMinHealth
13035
"damage multiplier"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
dDamageMultiplier:
dd (float)2
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dDamageMultiplier:
dd (float)1
13036
"x?"
008000
Float
dDamageMultiplier
16237
"max energy"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(energyWriteOnUseAOB,Control_DX11.exe,F3 0F ** ** ** 48 ** ** 48 ** ** 74 ** 48)
registersymbol(energyWriteOnUseAOB)
alloc(newmem,2048,energyWriteOnUseAOB) //"Control_DX11.exe"+E07E5)
label(returnhere)
label(originalcode_energyWriteOnUseAOB)
registersymbol(originalcode_energyWriteOnUseAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(energyWriteOnUseAOB,2)
db 5F
readmem(energyWriteOnUseAOB+3,2)
//maxss xmm0,[rcx+40]
originalcode_energyWriteOnUseAOB:
readmem(energyWriteOnUseAOB,5)
//movss [rcx+40],xmm0
exit:
jmp returnhere
///
energyWriteOnUseAOB: //"Control_DX11.exe"+E07E5:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
energyWriteOnUseAOB: //"Control_DX11.exe"+E07E5:
readmem(originalcode_energyWriteOnUseAOB,5)
//db F3 0F 11 41 40
//Alt: movss [rcx+40],xmm0
unregistersymbol(originalcode_energyWriteOnUseAOB)
13056
"max ammo"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
/*
aobscanmodule(playerAmmoRead3AOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 0F ** ** ** ** ** ** 76 ** E8 ** ** ** ** 84 ** 74 ** 32 ** EB)
registersymbol(playerAmmoRead3AOB)
label(pAmmo)
registersymbol(pAmmo)
alloc(newmem,2048,playerAmmoRead3AOB) //"Control_DX11.exe"+5A982B)
label(returnhere)
label(originalcode_playerAmmoRead3AOB)
registersymbol(originalcode_playerAmmoRead3AOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
mov [rax],rcx
pop rax
originalcode_playerAmmoRead3AOB:
readmem(playerAmmoRead3AOB,8)
//movss xmm0,[rcx+00000148]
exit:
jmp returnhere
///
pAmmo:
///
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
jmp newmem
nop 3
returnhere:
///****************************************///
aobscanmodule(ammoWriteOnFireAOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 48 ** ** ** ** 00 00 48 ** ** ** ** ** ** 45 ** ** 48)
registersymbol(ammoWriteOnFireAOB)
alloc(newmem2,2048,ammoWriteOnFireAOB) //"Control_DX11.exe"+357DA3)
label(returnhere2)
label(originalcode2_ammoWriteOnFireAOB)
registersymbol(originalcode2_ammoWriteOnFireAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
mov rdx,pAmmo
mov rdx,[rdx]
lea rdx,[rdx-a8]
cmp rcx,rdx
jne @f
readmem(ammoWriteOnFireAOB,2)
db 5F
readmem(ammoWriteOnFireAOB+3,5)
//maxss xmm3,[rcx+1f0]
originalcode2_ammoWriteOnFireAOB:
readmem(ammoWriteOnFireAOB,8)
//movss [rcx+000001F0],xmm3
exit2:
jmp returnhere2
///
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
jmp newmem2
nop 3
returnhere2:
///****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
/*
dealloc(newmem)
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
readmem(originalcode_playerAmmoRead3AOB,8)
//db F3 0F 10 81 48 01 00 00
//Alt: movss xmm0,[rcx+00000148]
unregistersymbol(originalcode_playerAmmoRead3AOB)
unregistersymbol(pAmmo)
///****************************************///
dealloc(newmem2)
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
readmem(originalcode2_ammoWriteOnFireAOB,8)
//db F3 0F 11 99 F0 01 00 00
//Alt: movss [rcx+000001F0],xmm3
unregistersymbol(originalcode2_ammoWriteOnFireAOB)
///****************************************///
16351
"fast recharge"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(rechargeTimeoutCountdownCalAOB,"Control_DX11.exe",F3 0F ** ** ** ** 00 00 0F ** ** F3 0F ** ** ** ** 00 00 0F ** ** F3 0F ** ** ** ** 00 00 72)
registersymbol(rechargeTimeoutCountdownCalAOB)
label(dRechargeTimeoutStepMultiplier)
registersymbol(dRechargeTimeoutStepMultiplier)
alloc(newmem,2048,rechargeTimeoutCountdownCalAOB+b) //"Control_DX11.exe"+5DC34B)
label(returnhere)
label(originalcode_rechargeTimeoutCountdownCalAOB)
registersymbol(originalcode_rechargeTimeoutCountdownCalAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(rechargeTimeoutCountdownCalAOB,3)
db 89
readmem(rechargeTimeoutCountdownCalAOB+f,4)
//movss xmm1,[rcx+16c]
push rax
mov rax,pAmmo
cmp [rax],rcx
jne @f
//push rbx
//mov rbx,originalcode3_playerAmmoRead3AOB
//movsxd rbx,dword ptr [rbx+4]
//cmp dword ptr [rcx+rbx],0
//pop rbx
//jne @f
mov rax,dRechargeTimeoutStepMultiplier
mulss xmm1,[rax]
@@:
pop rax
subss xmm0,xmm1
xorps xmm1,xmm1
jmp exit
originalcode_rechargeTimeoutCountdownCalAOB:
readmem(rechargeTimeoutCountdownCalAOB+b,8)
//subss xmm0,[rcx+0000016C]
exit:
jmp returnhere
///
dRechargeTimeoutStepMultiplier:
dd (float)1.75
///
rechargeTimeoutCountdownCalAOB+b: //"Control_DX11.exe"+5DC34B:
jmp newmem
nop 3
returnhere:
///****************************************///
aobscanmodule(rechargeFromEmptyClipAOB,"Control_DX11.exe",F3 0F ** ** ** ** 00 00 0F ** ** ** ** 0F ** ** ** ** 00 00 F3 0F ** ** ** ** ** ** 0F ** ** F3 0F)
registersymbol(rechargeFromEmptyClipAOB)
alloc(newmem2,2048,rechargeFromEmptyClipAOB) //"Control_DX11.exe"+5DC2CD)
label(returnhere2)
label(originalcode2_rechargeFromEmptyClipAOB)
registersymbol(originalcode2_rechargeFromEmptyClipAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
cmp [rax],rcx
jne @f
readmem(rechargeFromEmptyClipAOB,2)
db 5F
readmem(rechargeFromEmptyClipAOB+f,5)
//maxss xmm3,[rcx+14c]
end2:
pop rax
originalcode2_rechargeFromEmptyClipAOB:
readmem(rechargeFromEmptyClipAOB,8)
//movss [rcx+00000148],xmm3
exit2:
jmp returnhere2
///
rechargeFromEmptyClipAOB: //"Control_DX11.exe"+5DC2CD:
jmp newmem2
nop 3
returnhere2:
///****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
rechargeTimeoutCountdownCalAOB+b: //"Control_DX11.exe"+5DC34B:
readmem(originalcode_rechargeTimeoutCountdownCalAOB,8)
//db F3 0F 5C 81 6C 01 00 00
//Alt: subss xmm0,[rcx+0000016C]
unregistersymbol(originalcode_rechargeTimeoutCountdownCalAOB)
unregistersymbol(dRechargeTimeoutStepMultiplier)
///****************************************///
dealloc(newmem2)
rechargeFromEmptyClipAOB: //"Control_DX11.exe"+5DC2CD:
readmem(originalcode2_rechargeFromEmptyClipAOB,8)
//db F3 0F 11 99 48 01 00 00
//Alt: movss [rcx+00000148],xmm3
unregistersymbol(originalcode2_rechargeFromEmptyClipAOB)
///****************************************///
16353
""
1
16352
""
FFFFFF
Float
dRechargeTimeoutStepMultiplier
16259
"ignore ability points .2"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,Control_DX11.exe,8B ** ** 41 89 ** ** ** FF ** ** ** ** ** 48 ** ** ** 49)
registersymbol(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
alloc(newmem,2048,abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3) //"Control_DX11.exe"+16750E)
label(returnhere)
label(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
registersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
xor eax,eax
originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB:
readmem(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3,5)
//mov [r12+18],eax
exit:
jmp returnhere
///
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
jmp newmem
returnhere:
///**********************************///
aobscanmodule(abilityPointChkOnLearnAOB,Control_DX11.exe,8B ** ** 39 ** ** 0F 8F ** ** ** ** 49)
registersymbol(abilityPointChkOnLearnAOB)
alloc(newmem2,2048,abilityPointChkOnLearnAOB) //"Control_DX11.exe"+1B1BEA)
label(returnhere2)
label(originalcode2_abilityPointChkOnLearnAOB)
registersymbol(originalcode2_abilityPointChkOnLearnAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
{readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
jle @f
db 89
readmem(abilityPointChkOnLearnAOB+4,2)
//mov [rcx+24],eax}
readmem(abilityPointChkOnLearnAOB,1)
readmem(abilityPointChkOnLearnAOB+4,2)
//mov eax,[rcx+24]
readmem(abilityPointChkOnLearnAOB+3,1)
readmem(abilityPointChkOnLearnAOB+1,2)
//cmp [rsi+48],eax
jge @f
db 89
readmem(abilityPointChkOnLearnAOB+1,2)
//mov [rsi+48],eax
originalcode2_abilityPointChkOnLearnAOB:
readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
exit2:
jmp returnhere2
///
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
jmp newmem2
nop
returnhere2:
///**********************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
readmem(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,5)
//db 41 89 44 24 18
//Alt: mov [r12+18],eax
unregistersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
///**********************************///
dealloc(newmem2)
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
readmem(originalcode2_abilityPointChkOnLearnAOB,6)
//db 8B 46 48 39 41 24
//Alt: mov eax,[rsi+48]
//Alt: cmp [rcx+24],eax
unregistersymbol(originalcode2_abilityPointChkOnLearnAOB)
///**********************************///
16307
"ignore $ / materials"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(someObjectDataReadAOB,Control_DX11.exe,42 ** ** ** 41 ** ** ** 48 ** ** 48 ** ** ** 5B C3)
registersymbol(someObjectDataReadAOB)
///
luaCall(lua_aobscan("constructsObjectSelfDataReadCallerAOB","CoherentUIGT.dll","49 ** ** 4D ** ** 48 ** ** FF ** ** 33 ** 49 ** ** E8 ** ** ** ** 49 ** ** E8",2))
///
alloc(newmem,2048,someObjectDataReadAOB) //"Control_DX11.exe"+1689E6)
label(returnhere)
label(originalcode_someObjectDataReadAOB)
registersymbol(originalcode_someObjectDataReadAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(someObjectDataReadAOB,4)
//mov edx,[rax+r8]
push rcx
{mov rcx,"CoherentUIGT.dll"+132BCC
cmp [rsp+30],rcx
jne @f}
@@:
mov rcx,constructsObjectSelfDataReadCallerAOB
lea rcx,[rcx+c]
//mov rcx,"CoherentUIGT.dll"+13299C
cmp [rsp+30],rcx
jne @f
readmem(someObjectDataReadAOB,1)
db 39 54
readmem(someObjectDataReadAOB+3,1)
db 04
//cmp [rax+r8+4],edx
readmem(someObjectDataReadAOB,1)
db 0F 4F 54
readmem(someObjectDataReadAOB+3,1)
db 04
//cmovg edx,[rax+r8+4]
end:
pop rcx
readmem(someObjectDataReadAOB+4,4)
//call qword ptr [r9+78]
jmp exit
originalcode_someObjectDataReadAOB:
readmem(someObjectDataReadAOB,8)
//mov edx,[rax+r8]
//call qword ptr [r9+78]
exit:
jmp returnhere
///
someObjectDataReadAOB: //"Control_DX11.exe"+1689E6:
jmp newmem
nop 3
returnhere:
///*************************************///
aobscanmodule(moneyChkOnConstructsEnterRefreshAOB,"Control_DX11.exe",49 ** ** E8 ** ** ** ** 48 ** ** ** ** 00 00 48 ** ** 0F 82)
registersymbol(moneyChkOnConstructsEnterRefreshAOB)
alloc(newmem2,2048,moneyChkOnConstructsEnterRefreshAOB+8) //"Control_DX11.exe"+3507B4)
label(returnhere2)
label(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
registersymbol(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
readmem(moneyChkOnConstructsEnterRefreshAOB+8,7)
//movsxd rcx,dword ptr [rax+110]
cmp rbx,rcx
jge @f
mov ebx,ecx
//mov rax,[Control_DX11.exe+1111110]
//mov rax,[rax+30]
//mov [rax+40],ecx
@@:
pop rax
originalcode2_moneyChkOnConstructsEnterRefreshAOB:
readmem(moneyChkOnConstructsEnterRefreshAOB+8,7)
//movsxd rcx,dword ptr [rax+00000110]
exit2:
jmp returnhere2
///
moneyChkOnConstructsEnterRefreshAOB+8: //"Control_DX11.exe"+3507B4:
jmp newmem2
nop 2
returnhere2:
///*************************************///
aobscanmodule(foundMaterialQCalAOB,"Control_DX11.exe",84 ** 0F 84 ** ** ** ** 41 ** ** ** 45 ** ** 41 ** ** 44 ** ** ** 41)
registersymbol(foundMaterialQCalAOB)
alloc(newmem3a,2048,foundMaterialQCalAOB+c) //"Control_DX11.exe"+350971)
label(returnhere3a)
label(originalcode3a_foundMaterialQCalAOB)
registersymbol(originalcode3a_foundMaterialQCalAOB)
label(exit3a)
newmem3a: //this is allocated memory, you have read,write,execute access
//place your code here
cmp r14d,eax
cmovl r14d,eax
originalcode3a_foundMaterialQCalAOB:
readmem(foundMaterialQCalAOB+c,6)
//mov r13d,r14d
//cmp eax,r14d
exit3a:
jmp returnhere3a
///
foundMaterialQCalAOB+c: //"Control_DX11.exe"+350971:
jmp newmem3a
nop
returnhere3a:
///*************************************///
aobscanmodule(materialQRFChkAOB,"Control_DX11.exe",E8 ** ** ** ** 48 ** ** ** 44 ** ** ** 41 ** ** ** 00 75 ** 4C)
registersymbol(materialQRFChkAOB)
alloc(newmem3b,2048,materialQRFChkAOB+d) //"Control_DX11.exe"+350A67)
label(returnhere3b)
label(originalcode3b_materialQRFChkAOB)
registersymbol(originalcode3b_materialQRFChkAOB)
label(exit3b)
newmem3b: //this is allocated memory, you have read,write,execute access
//place your code here
push rbx
mov rbx,[rsp+70]
add rbx,8
cmp rbx,[rsp+80]
jne @f
cmp rbx,rbx
mov rbx,[rsp+70]
pop rbx
jmp exit3b
end3b:
pop rbx
originalcode3b_materialQRFChkAOB:
readmem(materialQRFChkAOB+d,5)
//cmp dword ptr [r15+18],00
exit3b:
jmp returnhere3b
///
materialQRFChkAOB+d: //"Control_DX11.exe"+350A67:
jmp newmem3b
returnhere3b:
///*************************************///
aobscanmodule(moneyWriteOnChangeAOB,"Control_DX11.exe",F7 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 74 ** 48)
registersymbol(moneyWriteOnChangeAOB)
alloc(newmem4,2048,moneyWriteOnChangeAOB+8) //"Control_DX11.exe"+350DFA)
label(returnhere4)
label(originalcode4_moneyWriteOnChangeAOB)
registersymbol(originalcode4_moneyWriteOnChangeAOB)
label(exit4)
newmem4: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(moneyWriteOnChangeAOB+8,4)
//add [rcx+40],rax
readmem(moneyWriteOnChangeAOB+c,3)
readmem(moneyWriteOnChangeAOB+b,1)
//mov rax,[rcx+40]
test rax,rax
jge @f
xor rax,rax
readmem(moneyWriteOnChangeAOB+8,1)
db 89
readmem(moneyWriteOnChangeAOB+a,2)
//mov [rcx+40],rax
@@:
readmem(moneyWriteOnChangeAOB+c,4)
//mov rax,[rcx+18]
jmp exit4
originalcode4_moneyWriteOnChangeAOB:
readmem(moneyWriteOnChangeAOB+8,8)
//add [rcx+40],rax
//mov rax,[rcx+18]
exit4:
jmp returnhere4
///
moneyWriteOnChangeAOB+8: //"Control_DX11.exe"+350DFA:
jmp newmem4
nop 3
returnhere4:
///*************************************///
/*
alloc(newmem5,2048,"Control_DX11.exe"+35A028)
label(returnhere5)
label(originalcode5)
label(exit5)
newmem5: //this is allocated memory, you have read,write,execute access
//place your code here
test edx,edx
jg @f
xor edx,edx
originalcode5:
mov [rax+40],edx
test edx,edx
exit5:
jmp returnhere5
///
"Control_DX11.exe"+35A028:
jmp newmem5
returnhere5:
///*************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
someObjectDataReadAOB: //"Control_DX11.exe"+1689E6:
readmem(originalcode_someObjectDataReadAOB,8)
//db 42 8B 14 00 41 FF 51 78
//Alt: mov edx,[rax+r8]
//Alt: call qword ptr [r9+78]
unregistersymbol(originalcode_someObjectDataReadAOB)
///*************************************///
dealloc(newmem2)
moneyChkOnConstructsEnterRefreshAOB+8: //"Control_DX11.exe"+3507B4:
readmem(originalcode2_moneyChkOnConstructsEnterRefreshAOB,7)
//db 48 63 88 10 01 00 00
//Alt: movsxd rcx,dword ptr [rax+00000110]
unregistersymbol(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
///*************************************///
dealloc(newmem3a)
foundMaterialQCalAOB+c: //"Control_DX11.exe"+350971:
readmem(originalcode3a_foundMaterialQCalAOB,6)
//db 45 8B EE 41 3B C6
//Alt: mov r13d,r14d
//Alt: cmp eax,r14d
unregistersymbol(originalcode3a_foundMaterialQCalAOB)
///*************************************///
dealloc(newmem3b)
materialQRFChkAOB+d: //"Control_DX11.exe"+350A67:
db 41 83 7F 18 00
//Alt: cmp dword ptr [r15+18],00
unregistersymbol(originalcode3b_materialQRFChkAOB)
///*************************************///
dealloc(newmem4)
moneyWriteOnChangeAOB+8: //"Control_DX11.exe"+350DFA:
readmem(originalcode4_moneyWriteOnChangeAOB,8)
//db 48 01 41 40 48 8B 41 18
//Alt: add [rcx+40],rax
//Alt: mov rax,[rcx+18]
unregistersymbol(originalcode4_moneyWriteOnChangeAOB)
///*************************************///
/*
dealloc(newmem5)
"Control_DX11.exe"+35A028:
db 89 50 40 85 D2
//Alt: mov [rax+40],edx
//Alt: test edx,edx
///*************************************///
16331
"levitate mod .2"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(flykeyiddefault,10)
define(flybuttonoffsetdefault,6)
aobscanmodule(someStateTransitionCallerAOB,"rl_rmdwin7_f.dll",49 ** ** E8 ** ** ** ** 45 ** ** ** ** 00 00 45 ** ** ** ** 00 00 48 ** ** ** 48 ** ** 75 06 4C ** ** ** 74 03 FF ** ** 48)
registersymbol(someStateTransitionCallerAOB)
///
aobscanmodule(flyUpStateCallAOB,"Control_DX11.exe",40 53 48 ** ** ** 48 ** ** 40 01 00 00 48 ** ** 80 ** 01 74 17 48 ** ** ** ** ** ** C6 ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** 00)
registersymbol(flyUpStateCallAOB)
aobscanmodule(floatDownStateCallAOB,"Control_DX11.exe",40 53 48 ** ** ** 48 ** ** 40 01 00 00 48 ** ** 80 ** 01 74 17 48 ** ** ** ** ** ** C6 ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** 01)
registersymbol(floatDownStateCallAOB)
///
label(bFlyKeyPressed)
registersymbol(bFlyKeyPressed)
label(bFlyKeyID)
registersymbol(bFlyKeyID)
label(bFlyButtonOffset)
registersymbol(bFlyButtonOffset)
alloc(newmem,2048,someStateTransitionCallerAOB+16) //"rl_rmdwin7_f.dll"+1518C1)
label(returnhere)
label(originalcode_someStateTransitionCallerAOB)
registersymbol(originalcode_someStateTransitionCallerAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
//mov rcx,[rsi+10]
//test rcx,rcx
//jnz end
//cmp [rsi+18],r13
//je end
@@:
mov rcx,flyUpStateCallAOB //"Control_DX11.exe"+CB020 //fly up
cmp [rsi+18],rcx
jne @f
mov rcx,pFlyUpCaller
mov [rcx],rsi
jmp end
@@:
mov rcx,floatDownStateCallAOB //"Control_DX11.exe"+CB160 //float down
cmp [rsi+18],rcx
jne end
mov rcx,pFloatDownCaller
mov [rcx],rcx
mov rcx,bFlyKeyPressed
cmp byte ptr [rcx],1
je @f
push rax
mov rcx,aControllerHotkeyPressed
mov rax,bFlyButtonOffset
movsxd rax,dword ptr [rax]
cmp byte ptr [rcx+rax*4],1
pop rax
je @f
jmp end
@@:
mov rcx,pFlyUpCaller
mov rcx,[rcx]
test rcx,rcx
cmovnz rsi,rcx
end:
originalcode_someStateTransitionCallerAOB:
readmem(someStateTransitionCallerAOB+16,7)
//mov rcx,[rsi+10]
//test rcx,rcx
exit:
jmp returnhere
///
bFlyKeyPressed:
dd 0
bFlyKeyID:
dd flykeyiddefault
bFlyButtonOffset:
dd flybuttonoffsetdefault
pFlyUpCaller:
dq 0
pFloatDownCaller:
dq 0
///
someStateTransitionCallerAOB+16: //"rl_rmdwin7_f.dll"+1518C1:
jmp newmem
nop 2
returnhere:
///*****************************************///
aobscanmodule(flyTimeChkAOB,"Control_DX11.exe",80 ** ** ** ** ** 00 75 ** 48 ** ** ** F3 0F ** ** ** ** 00 00 F3 0F ** ** ** F3 0F ** ** ** ** 00 00 0F ** ** 72)
registersymbol(flyTimeChkAOB)
flyTimeChkAOB+7: //"Control_DX11.exe"+CB325:
db EB
///*****************************************///
//modified from TheyCallMeTim13's lua keylistener script
//http://fearlessrevolution.com/viewtopic.php?f=4&t=6041&start=60#p62657
{$lua}
local function flyKeyLuaThread(thread4)
local addr4 = getAddressSafe('bFlyKeyPressed')
while FlyKeyLuaThreadLoop do
sleep(100)
if addr4 then
if ( isKeyPressed( readInteger('bFlyKeyID') ) ) then
writeBytes(addr4, 1)
else
writeBytes(addr4, 0)
end
else
addr4 = getAddressSafe('bFlyKeyPressed')
end
end
thread4.terminate()
-- while FlyKeyLuaThreadLoop do
-- if ( isKeyPressed(VK_CAPITAL) ) then
-- writeBytes("bFlyKeyPressed" ,1)
-- else
-- writeBytes("bFlyKeyPressed" ,0)
-- end
-- end
-- thread4.terminate()
end
----------------------------------
if syntaxcheck then return end
FlyKeyLuaThreadLoop = true
createThread(flyKeyLuaThread)
{$asm}
///*****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
FlyKeyLuaThreadLoop = false
{$asm}
///*****************************************///
dealloc(newmem)
someStateTransitionCallerAOB+16: //"rl_rmdwin7_f.dll"+1518C1:
readmem(originalcode_someStateTransitionCallerAOB,7)
//db 48 8B 4E 10 48 85 C9
//Alt: mov rcx,[rsi+10]
//Alt: test rcx,rcx
unregistersymbol(originalcode_someStateTransitionCallerAOB)
unregistersymbol(bFlyKeyPressed)
unregistersymbol(bFlyKeyID)
unregistersymbol(bFlyButtonOffset)
///*****************************************///
flyTimeChkAOB+7: //"Control_DX11.exe"+CB325:
db 75
//Alt: jne
///*****************************************///
16332
"key"
10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
1
008000
Byte
bFlyKeyID
16333
""
008000
Byte
+4
16334
""
008000
Float
+4
16336
"controller button"
0:A button
1:B button
2:X button
3:Y button
4:Left shoulder button
5:Right shoulder button
6:Left trigger
7:Right trigger
8:Left thumb stick down
9:Right thumb stick down
008000
Byte
bFlyButtonOffset
28
"walk key .2"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(walkkeyiddefault,12)
aobscanmodule(moveSpeedWriteAOB,Control_DX11.exe,F3 0F ** ** ** F3 0F ** ** ** ** 00 00 41 ** ** ** 44 ** ** ** ** ** 7A ** 75)
registersymbol(moveSpeedWriteAOB)
label(bWalkKeyMethod)
registersymbol(bWalkKeyMethod)
label(bWalkKeyPressed)
registersymbol(bWalkKeyPressed)
label(bWalkKeyID)
registersymbol(bWalkKeyID)
alloc(newmem,2048,moveSpeedWriteAOB) //"Control_DX11.exe"+32DB59)
label(returnhere)
label(originalcode_moveSpeedWriteAOB)
registersymbol(originalcode_moveSpeedWriteAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,bWalkKeyMethod
cmp byte ptr [rax],1
lea rax,[rax+4]
jne movemaxspeedmanipulate
cmp byte ptr [rax],1
jne walkkeynotpressing
cmp byte ptr [rax+1],1
je toggleend
mov byte ptr [rax+1],1
xor byte ptr [rax+2],1
jmp toggleend
walkkeynotpressing:
cmp byte ptr [rax+1],0
je toggleend
mov byte ptr [rax+1],0
toggleend:
lea rax,[rax+2]
movemaxspeedmanipulate:
cmp byte ptr [rax],1
jne end
mov rax,dMoveSpeedMultiplier
mulss xmm2,[rax]
end:
pop rax
originalcode_moveSpeedWriteAOB:
readmem(moveSpeedWriteAOB,5)
//movss [rdi+20],xmm2
exit:
jmp returnhere
///
bWalkKeyMethod:
dd 0 //0: hold, 1: toggle
bWalkKeyPressed:
dd 0
bWalkKeyID:
dd walkkeyiddefault
dMoveSpeedMultiplier:
dd (float)0.42
///
moveSpeedWriteAOB: //"Control_DX11.exe"+32DB59:
jmp newmem
returnhere:
///*****************************************///
//modified from TheyCallMeTim13's lua keylistener script
//http://fearlessrevolution.com/viewtopic.php?f=4&t=6041&start=60#p62657
{$lua}
local function walkkeyLuaThread(thread2)
local addr2 = getAddressSafe('bWalkKeyPressed')
while RunWalkkeyLuaThreadLoop do
sleep(100)
if addr2 then
if ( isKeyPressed( readInteger('bWalkKeyID') ) ) then
writeBytes(addr2, 1)
else
writeBytes(addr2, 0)
end
else
addr2 = getAddressSafe('bWalkKeyPressed')
end
end
thread2.terminate()
-- while RunWalkkeyLuaThreadLoop do
-- if ( isKeyPressed(VK_CAPITAL) ) then
-- writeBytes("bWalkKeyPressed" ,1)
-- else
-- writeBytes("bWalkKeyPressed" ,0)
-- end
-- end
-- thread2.terminate()
end
----------------------------------
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = true
createThread(walkkeyLuaThread)
{$asm}
///*****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = false
{$asm}
///*****************************************///
dealloc(newmem)
moveSpeedWriteAOB: //"Control_DX11.exe"+32DB59:
readmem(originalcode_moveSpeedWriteAOB,5)
//db F3 0F 11 57 20
//Alt: movss [rdi+20],xmm2
unregistersymbol(originalcode_moveSpeedWriteAOB)
unregistersymbol(bWalkKeyMethod)
unregistersymbol(bWalkKeyPressed)
unregistersymbol(bWalkKeyID)
15979
"status"
0:hold key
1:toggle key
008000
Byte
bWalkKeyMethod
13006
"key"
10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
1
008000
Byte
bWalkKeyID
13007
""
008000
Byte
+4
13008
""
008000
Float
+4
16235
"walk speed"
008000
Float
bWalkKeyID+4
15984
"slow motion (speedhack)"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(slowmokeys,1024,Control_DX11.exe)
label(bKeyCombMethod)
registersymbol(bKeyCombMethod)
label(dSlowMoKey1)
registersymbol(dSlowMoKey1)
label(dSlowMoKey2)
registersymbol(dSlowMoKey2)
label(dCustSpeedhackSpeed)
registersymbol(dCustSpeedhackSpeed)
///
slowmokeys:
bKeyCombMethod:
dd 1 //0: and, 1: or
dSlowMoKey1:
dd 14
dSlowMoKey2:
dd 02
dCustSpeedhackSpeed:
dd (float)0.4
///
{$lua}
lastSpeed=speedhack_getSpeed();
bSpeedKeyReleased=1;
combmethod=0;
local function slowmokeyLuaThread(thread3)
while SlowMokeyLuaThreadLoop do
sleep(100)
-- addrga = readPointer(getAddress('pSomeGameStatus'))
-- addrga = getAddress('pSomeGameStatus')
-- print(readBytes('bKeyCombMethod'))
if ((getAddressSafe('dCustSpeedhackSpeed')) and (getAddressSafe('bKeyCombMethod')))then
combmethod = readBytes('bKeyCombMethod')
if ( ( combmethod ==0 and (isKeyPressed(readInteger('dSlowMoKey1'))) and (isKeyPressed(readInteger('dSlowMoKey2'))) ) or ( combmethod==1 and ( (isKeyPressed(readInteger('dSlowMoKey1'))) or (isKeyPressed(readInteger('dSlowMoKey2'))) ) ) ) then
-- if ( (isKeyPressed(readInteger('dSlowMoKey1'))) and (isKeyPressed(readInteger('dSlowMoKey2'))) ) then
if bSpeedKeyReleased == 1 then
if speedhack_getSpeed() ~= readFloat("dCustSpeedhackSpeed") then
-- print("pressing: ", lastSpeed)
lastSpeed=speedhack_getSpeed()
speedhack_setSpeed(readFloat("dCustSpeedhackSpeed"))
bSpeedKeyReleased=0
end
end
else
if bSpeedKeyReleased == 0 then
bSpeedKeyReleased=1
-- print(lastSpeed)
if speedhack_getSpeed() ~= lastSpeed then
speedhack_setSpeed(lastSpeed)
end
end
end
end
end
thread3.terminate()
end
----------------------------------
if syntaxcheck then return end
SlowMokeyLuaThreadLoop = true
createThread(slowmokeyLuaThread)
{$asm}
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
SlowMokeyLuaThreadLoop = false
{$asm}
///*****************************************///
dealloc(newmem)
unregistersymbol(bKeyCombMethod)
unregistersymbol(dSlowMoKey1)
unregistersymbol(dSlowMoKey2)
unregistersymbol(dCustSpeedhackSpeed)
15985
"key 1"
10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
02:Right Mouse Button
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
1
008000
Byte
dSlowMoKey1
16232
"and/or?"
0:and
1:or
008000
Byte
bKeyCombMethod
16233
"key 2"
10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
02:Right Mouse Button
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
1
008000
Byte
dSlowMoKey2
16234
"slow motion speed"
008000
Float
dCustSpeedhackSpeed
16276
""
1
FFFFFF
Array of byte
0
Control_DX11.exe+1111110
0
30
16310
"DX11:"
808080
1
16277
"$"
0000FF
4 Bytes
+40
16278
"ap"
0000FF
4 Bytes
+48
16316
"ifb"
0000FF
Byte
Control_DX11.exe+1170530
16341
""
1
FFFFFF
Array of byte
0
pAmmo
0
16342
"ammo"
0000FF
Float
+148
16345
"ammo max"
0000FF
Float
+4
16346
"recharge timeout default"
0000FF
Float
+164
16347
""
0000FF
Float
+4
16349
"recharge timeout step"
0000FF
Float
+16c
16348
"recharge timeout countdown"
0000FF
Float
+174
13027
""
1
13032
"aobt1"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(aobt1,"Control_DX11.exe",F3 0F ** ** ** ** 00 00 0F ** ** ** ** 0F ** ** ** ** 00 00 F3 0F ** ** ** ** ** ** 0F ** ** F3 0F)
registersymbol(aobt1)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
unregistersymbol(aobt1)
16321
"aobt1b"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(aobt1b,"rl_rmdwin7_f.dll",49 ** ** E8 ** ** ** ** 45 ** ** ** ** 00 00 45 ** ** ** ** 00 00 48 ** ** ** 48 ** ** 75 06 4C ** ** ** 74 03 FF ** ** 48)
registersymbol(aobt1b)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
unregistersymbol(aobt1b)
16306
"aobt2"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
luaCall(lua_aobscan("aobt2","CoherentUIGT.dll","49 ** ** 4D ** ** 48 ** ** FF ** ** 33 ** 49 ** ** E8 ** ** ** ** 49 ** ** E8",2))
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
unregistersymbol(aobt2)
27
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(walkkeyiddefault,14)
label(bWalkKeyID)
registersymbol(bWalkKeyID)
label(bWalkKeyPressed)
registersymbol(bWalkKeyPressed)
alloc(newmem,2048,"Control_DX11.exe"+32DB59)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,bWalkKeyPressed
cmp byte ptr [rax],1
jne @f
mov rax,dMoveSpeedMultiplier
mulss xmm2,[rax]
@@:
pop rax
originalcode:
movss [rdi+20],xmm2
exit:
jmp returnhere
///
bWalkKeyID:
dd walkkeyiddefault
bWalkKeyPressed:
dd 0
dMoveSpeedMultiplier:
dd (float)0.42
///
"Control_DX11.exe"+32DB59:
jmp newmem
returnhere:
///*****************************************///
//modified from TheyCallMeTim13's lua keylistener script
//http://fearlessrevolution.com/viewtopic.php?f=4&t=6041&start=60#p62657
{$lua}
local function walkkeyLuaThread(thread2)
local addr2 = getAddressSafe('bWalkKeyPressed')
while RunWalkkeyLuaThreadLoop do
sleep(100)
if addr2 then
if ( isKeyPressed( readInteger('bWalkKeyID') ) ) then
writeBytes(addr2, 1)
else
writeBytes(addr2, 0)
end
else
addr2 = getAddressSafe('bWalkKeyPressed')
end
end
thread2.terminate()
-- while RunWalkkeyLuaThreadLoop do
-- if ( isKeyPressed(VK_CAPITAL) ) then
-- writeBytes("bWalkKeyPressed" ,1)
-- else
-- writeBytes("bWalkKeyPressed" ,0)
-- end
-- end
-- thread2.terminate()
end
----------------------------------
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = true
createThread(walkkeyLuaThread)
{$asm}
///*****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = false
{$asm}
///*****************************************///
dealloc(newmem)
"Control_DX11.exe"+32DB59:
db F3 0F 11 57 20
//Alt: movss [rdi+20],xmm2
unregistersymbol(bWalkKeyID)
unregistersymbol(bWalkKeyPressed)
13009
"No description"
Float
0C3BB52C
13010
"No description"
Float
0C3C99EC
13011
"No description"
Float
1130D1B4
13012
"No description"
Float
1130D1C4
13013
"No description"
Float
1A9BD150
13014
"No description"
Float
1A9BD158
13015
"No description"
Float
5B279448
13016
"No description"
Float
CA746910
13017
"No description"
Float
CACF98E0
13018
"No description"
Float
CACFB190
13019
"No description"
Float
CACFB218
13020
"No description"
Float
CACFB23C
13021
"No description"
Float
DF687AD4
13024
"No Description"
Float
FF149500
13025
"inf. health"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
label(dMinHealth)
registersymbol(dMinHealth)
alloc(newmem,2048,"Control_DX11.exe"+346A3A)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov rax,pPlayer
cmp [rax],rbx
je @f
///isnot player
jmp end
@@:
mov rax,dMinHealth
movss xmm1,[rcx+64]
maxss xmm1,[rax]
movss [rcx+64],xmm1
movss [rdx],xmm1
end:
originalcode:
movss xmm1,[rcx+64]
exit:
jmp returnhere
///
dMinHealth:
dd (Float)1
///
"Control_DX11.exe"+346A3A:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Control_DX11.exe"+346A3A:
db F3 0F 10 49 64
//Alt: movss xmm1,[rcx+64]
unregistersymbol(dMinHealth)
13028
"No description"
Float
1128B0F4
13033
"No description"
Float
113E2FD4
13034
"No Description"
Float
113E2FD4
13023
"No Description"
000000
Float
pPlayer
40
Set Value
89
1
0
13031
"No Description"
000000
Float
pPlayerHealthCal
64
13037
"No description"
Float
205757D0
13038
"No description"
Float
20576B10
13039
"No description"
Float
2131C88C
13040
"No description"
Float
2131CA14
13041
"No description"
Float
2144EC8C
13042
"No description"
Float
2144EE14
13043
"No description"
Float
FF293D24
13044
"No description"
Float
FF293D64
13045
"No description"
Float
17A7CD424
13046
"No description"
Float
17A7CD464
13047
"No description"
4 Bytes
79B933E8
13048
"No description"
4 Bytes
79B93408
13049
"No description"
Float
FF147208
13050
"No description"
Float
FF147300
13051
"No description"
Float
FF148508
13052
"No description"
Float
1278ABEC4
13053
"No description"
Float
1908137E4
13054
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(playerAmmoRead3AOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 0F ** ** ** ** ** ** 76 ** E8 ** ** ** ** 84 ** 74 ** 32 ** EB)
registersymbol(playerAmmoRead3AOB)
label(pAmmo)
registersymbol(pAmmo)
alloc(newmem,2048,playerAmmoRead3AOB) //"Control_DX11.exe"+5A982B)
label(returnhere)
label(originalcode_playerAmmoRead3AOB)
registersymbol(originalcode_playerAmmoRead3AOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
mov [rax],rcx
pop rax
originalcode_playerAmmoRead3AOB:
readmem(playerAmmoRead3AOB,8)
//movss xmm0,[rcx+00000148]
exit:
jmp returnhere
///
pAmmo:
///
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
readmem(originalcode_playerAmmoRead3AOB,8)
//db F3 0F 10 81 48 01 00 00
//Alt: movss xmm0,[rcx+00000148]
unregistersymbol(originalcode_playerAmmoRead3AOB)
unregistersymbol(pAmmo)
13055
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(ammoWriteOnFireAOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 48 ** ** ** ** 00 00 48 ** ** ** ** ** ** 45 ** ** 48)
registersymbol(ammoWriteOnFireAOB)
alloc(newmem2,2048,ammoWriteOnFireAOB) //"Control_DX11.exe"+357DA3)
label(returnhere2)
label(originalcode2_ammoWriteOnFireAOB)
registersymbol(originalcode2_ammoWriteOnFireAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
mov rdx,pAmmo
mov rdx,[rdx]
lea rdx,[rdx-a8]
cmp rcx,rdx
jne @f
readmem(ammoWriteOnFireAOB,2)
db 5F
readmem(ammoWriteOnFireAOB+3,5)
//maxss xmm3,[rcx+1f0]
originalcode2_ammoWriteOnFireAOB:
readmem(ammoWriteOnFireAOB,8)
//movss [rcx+000001F0],xmm3
exit2:
jmp returnhere2
///
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
jmp newmem2
nop 3
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem2)
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
readmem(originalcode2_ammoWriteOnFireAOB,8)
//db F3 0F 11 99 F0 01 00 00
//Alt: movss [rcx+000001F0],xmm3
unregistersymbol(originalcode2_ammoWriteOnFireAOB)
15980
"walk key .1"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(walkkeyiddefault,14)
aobscanmodule(moveSpeedWriteAOB,Control_DX11.exe,F3 0F ** ** ** F3 0F ** ** ** ** 00 00 41 ** ** ** 44 ** ** ** ** ** 7A ** 75)
registersymbol(moveSpeedWriteAOB)
label(bWalkKeyID)
registersymbol(bWalkKeyID)
label(bWalkKeyPressed)
registersymbol(bWalkKeyPressed)
alloc(newmem,2048,moveSpeedWriteAOB) //"Control_DX11.exe"+32DB59)
label(returnhere)
label(originalcode_moveSpeedWriteAOB)
registersymbol(originalcode_moveSpeedWriteAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,bWalkKeyPressed
cmp byte ptr [rax],1
jne @f
mov rax,dMoveSpeedMultiplier
mulss xmm2,[rax]
@@:
pop rax
originalcode_moveSpeedWriteAOB:
readmem(moveSpeedWriteAOB,5)
//movss [rdi+20],xmm2
exit:
jmp returnhere
///
bWalkKeyID:
dd walkkeyiddefault
bWalkKeyPressed:
dd 0
dMoveSpeedMultiplier:
dd (float)0.42
///
moveSpeedWriteAOB: //"Control_DX11.exe"+32DB59:
jmp newmem
returnhere:
///*****************************************///
//modified from TheyCallMeTim13's lua keylistener script
//http://fearlessrevolution.com/viewtopic.php?f=4&t=6041&start=60#p62657
{$lua}
local function walkkeyLuaThread(thread2)
local addr2 = getAddressSafe('bWalkKeyPressed')
while RunWalkkeyLuaThreadLoop do
sleep(100)
if addr2 then
if ( isKeyPressed( readInteger('bWalkKeyID') ) ) then
writeBytes(addr2, 1)
else
writeBytes(addr2, 0)
end
else
addr2 = getAddressSafe('bWalkKeyPressed')
end
end
thread2.terminate()
-- while RunWalkkeyLuaThreadLoop do
-- if ( isKeyPressed(VK_CAPITAL) ) then
-- writeBytes("bWalkKeyPressed" ,1)
-- else
-- writeBytes("bWalkKeyPressed" ,0)
-- end
-- end
-- thread2.terminate()
end
----------------------------------
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = true
createThread(walkkeyLuaThread)
{$asm}
///*****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
if syntaxcheck then return end
RunWalkkeyLuaThreadLoop = false
{$asm}
///*****************************************///
dealloc(newmem)
moveSpeedWriteAOB: //"Control_DX11.exe"+32DB59:
readmem(originalcode_moveSpeedWriteAOB,5)
//db F3 0F 11 57 20
//Alt: movss [rdi+20],xmm2
unregistersymbol(originalcode_moveSpeedWriteAOB)
unregistersymbol(bWalkKeyID)
unregistersymbol(bWalkKeyPressed)
15981
"key"
10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
1
008000
Byte
bWalkKeyID
15982
""
008000
Byte
+4
15983
""
008000
Float
+4
16236
"No description"
Float
FF14B128
16238
"No Description"
4 Bytes
E39A89C8
16239
"No Description"
4 Bytes
3F2B761A
16240
"No Description"
4 Bytes
0C3663D4
16241
"No Description"
4 Bytes
1AC2D238
16242
"No description"
Byte
114434B4
16243
"114424D0+24"
Byte
114424F4
16244
"No Description"
4 Bytes
123FE3B0
16245
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"CoherentUIGT.dll"+F0C96)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
movd xmm1,edx
mov rbx,"CoherentUIGT.dll"+13302C
cmp [rsp+58],rbx
jne @f
//xorps xmm1,xmm1
xor edx,edx
end:
mov rbx,rcx
jmp exit
originalcode:
movd xmm1,edx
mov rbx,rcx
exit:
jmp returnhere
///
"CoherentUIGT.dll"+F0C96:
jmp newmem
nop 2
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentUIGT.dll"+F0C96:
db 66 0F 6E CA 48 8B D9
//Alt: movd xmm1,edx
//Alt: mov rbx,rcx
16246
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"CoherentGTJS.dll"+5C370E)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
db F3 0F E6 C0
//cvtdq2pd xmm0,xmm0,xmm0
mov rcx,"CoherentUIGT.dll"+13302C
cmp [rsp+b8],rcx
jne @f
//xorps xmm0,xmm0
xorps xmm6,xmm6
end:
ucomisd xmm0,xmm6
jmp exit
originalcode:
db F3 0F E6 C0
//cvtdq2pd xmm0,xmm0,xmm0
ucomisd xmm0,xmm6
exit:
jmp returnhere
///
"CoherentGTJS.dll"+5C370E:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentGTJS.dll"+5C370E:
db F3 0F E6 C0 66 0F 2E C6
//Alt: cvtdq2pd xmm0,xmm0,xmm0
//Alt: ucomisd xmm0,xmm6
16248
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"CoherentGTJS.dll"+5C3754)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov rcx,"CoherentUIGT.dll"+13302C
cmp [rsp+b8],rcx
jne @f
xor ebx,ebx
xorps xmm0,xmm0
xorps xmm1,xmm1
xorps xmm6,xmm6
originalcode:
lea rcx,[rsp+28]
exit:
jmp returnhere
///
"CoherentGTJS.dll"+5C3754:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentGTJS.dll"+5C3754:
db 48 8D 4C 24 28
//Alt: lea rcx,[rsp+28]
16249
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"CoherentGTJS.dll"+5C36C8)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rdx
mov rdx,"CoherentUIGT.dll"+13302C
cmp [rsp+c0],rdx
jne @f
xorps xmm1,xmm1
end:
pop rdx
originalcode:
movaps xmm6,xmm1
test rcx,rcx
exit:
jmp returnhere
///
"CoherentGTJS.dll"+5C36C8:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentGTJS.dll"+5C36C8:
db 0F 28 F1 48 85 C9
//Alt: movaps xmm6,xmm1
//Alt: test rcx,rcx
16250
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
label(bHaA)
registersymbol(bHaA)
label(qAAPReq)
registersymbol(qAAPReq)
alloc(newmem,2048,"CoherentGTJS.dll"+5C3706)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
cvttsd2si ebx,xmm6
push rdx
mov rdx,"CoherentUIGT.dll"+13302C
cmp [rsp+c0],rdx
jne @f
//cvttsd2si ebx,xmm6
test ebx,ebx
jz @f
xorps xmm6,xmm6
mov rdx,bHaA
mov byte ptr [rdx],1
mov rdx,FFFF000000000000
or rdx,rbx
push rdx
mov rdx,qAAPReq
pop [rdx]
end:
pop rdx
movd xmm0,ebx
jmp exit
originalcode:
cvttsd2si ebx,xmm6
movd xmm0,ebx
exit:
jmp returnhere
///
bHaA:
dd 0
qAAPReq:
///
"CoherentGTJS.dll"+5C3706:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentGTJS.dll"+5C3706:
db F2 0F 2C DE 66 0F 6E C3
//Alt: cvttsd2si ebx,xmm6
//Alt: movd xmm0,ebx
unregistersymbol(bHaA)
unregistersymbol(qAAPReq)
16247
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem2,2048,"CoherentUIGT.dll"+F0CAB)
label(returnhere2)
label(originalcode2)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
mov rdx,"CoherentUIGT.dll"+13302C
cmp [rsp+58],rdx
jne @f
//xorps xmm0,xmm0
//xorps xmm1,xmm1
mov rdx,bHaA
cmp byte ptr [rdx],1
jne @f
mov byte ptr [rdx],0
mov rax,[rdx+4]
xor rcx,rcx
mov [rdx+4],rcx
originalcode2:
mov rdx,rax
mov rcx,rbx
exit2:
jmp returnhere2
///
"CoherentUIGT.dll"+F0CAB:
jmp newmem2
nop
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem2)
"CoherentUIGT.dll"+F0CAB:
db 48 8B D0 48 8B CB
//Alt: mov rdx,rax
//Alt: mov rcx,rbx
16251
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"CoherentUIGT.dll"+F4E05)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov r8,"CoherentUIGT.dll"+13302C
cmp [rsp+30],r8
jne @f
//mov r8,0001000000000000
//mov [rsp+10],r8
mov r8,[rsp+10]
originalcode:
sub rsp,28
mov r8,[rcx+00000550]
exit:
jmp returnhere
///
"CoherentUIGT.dll"+F4E05:
jmp newmem
nop 6
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CoherentUIGT.dll"+F4E05:
db 48 83 EC 28 4C 8B 81 50 05 00 00
//Alt: sub rsp,28
//Alt: mov r8,[rcx+00000550]
16252
"No description"
1
8 Bytes
7422EB00
16253
"No description"
1
8 Bytes
7422EC28
16254
"No Description"
1
8 Bytes
7422ED80
16255
"No Description"
4 Bytes
10EF33D4
16256
"1"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,Control_DX11.exe,8B ** ** 41 89 ** ** ** FF ** ** ** ** ** 48 ** ** ** 49)
registersymbol(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
alloc(newmem,2048,abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3) //"Control_DX11.exe"+16750E)
label(returnhere)
label(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
registersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
xor eax,eax
originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB:
readmem(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3,5)
//mov [r12+18],eax
exit:
jmp returnhere
///
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
readmem(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,5)
//db 41 89 44 24 18
//Alt: mov [r12+18],eax
unregistersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
16257
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(abilityPointChkOnLearnAOB,Control_DX11.exe,8B ** ** 39 ** ** 0F 8F ** ** ** ** 49)
registersymbol(abilityPointChkOnLearnAOB)
alloc(newmem2,2048,abilityPointChkOnLearnAOB) //"Control_DX11.exe"+1B1BEA)
label(returnhere2)
label(originalcode2_abilityPointChkOnLearnAOB)
registersymbol(originalcode2_abilityPointChkOnLearnAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
jle @f
db 89
readmem(abilityPointChkOnLearnAOB+4,2)
//mov [rcx+24],eax
originalcode2_abilityPointChkOnLearnAOB:
readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
exit2:
jmp returnhere2
///
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
jmp newmem2
nop
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem2)
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
readmem(originalcode2_abilityPointChkOnLearnAOB,6)
//db 8B 46 48 39 41 24
//Alt: mov eax,[rsi+48]
//Alt: cmp [rcx+24],eax
unregistersymbol(originalcode2_abilityPointChkOnLearnAOB)
16258
"No Description"
1
4 Bytes
58C8A268
16260
"No description"
4 Bytes
58C8A260
16261
"No Description"
4 Bytes
11ECD4B4
16262
"No Description"
4 Bytes
11ECD4B0
16263
"No Description"
4 Bytes
11ECD504
16264
"No Description"
4 Bytes
11ECD500
16265
"No Description"
4 Bytes
11ECD554
16266
"No Description"
4 Bytes
11ECD550
16267
"1"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
label(bHaB)
registersymbol(bHaB)
label(dConstructReqirement)
registersymbol(dConstructReqirement)
label(pConstructReqirement)
registersymbol(pConstructReqirement)
alloc(newmem,2048,"Control_DX11.exe"+1689E6)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov edx,[rax+r8]
push rcx
mov rcx,"CoherentUIGT.dll"+132BCC
cmp [rsp+30],rcx
jne @f
//mov rcx,bHaB
//mov byte ptr [rcx],1
//mov rcx,dConstructReqirement
//mov [rcx],edx
//mov [rcx+4],r8
//cmp [rax+r8-4]
@@:
mov rcx,"CoherentUIGT.dll"+13299C
cmp [rsp+30],rcx
jne @f
//mov rcx,bHaB
//cmp byte ptr [rcx],1
//jne @f
//mov byte ptr [rcx],0
//mov rcx,dConstructReqirement
//cmp [rcx+4],r8
//jne @f
cmp [rax+r8+4],edx
cmovg edx,[rax+r8+4]
end:
pop rcx
call qword ptr [r9+78]
jmp exit
originalcode:
mov edx,[rax+r8]
call qword ptr [r9+78]
exit:
jmp returnhere
///
bHaB:
dd 0
dConstructReqirement:
dd 0
pConstructReqirement:
dq 0
///
"Control_DX11.exe"+1689E6:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Control_DX11.exe"+1689E6:
db 42 8B 14 00 41 FF 51 78
//Alt: mov edx,[rax+r8]
//Alt: call qword ptr [r9+78]
unregistersymbol(bHaB)
unregistersymbol(dConstructReqirement)
unregistersymbol(pConstructReqirement)
16279
"$"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
label(bHaD)
registersymbol(bHaD)
alloc(newmem3,2048,"Control_DX11.exe"+3507B4)
label(returnhere3)
label(originalcode3)
label(exit3)
newmem3: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
movsxd rcx,dword ptr [rax+110]
cmp rbx,rcx
jge @f
mov ebx,ecx
//mov rax,[Control_DX11.exe+1111110]
//mov rax,[rax+30]
//mov [rax+40],ecx
@@:
mov rax,bHaD
mov byte ptr [rax],1
pop rax
originalcode3:
movsxd rcx,dword ptr [rax+00000110]
exit3:
jmp returnhere3
///
bHaD:
///
"Control_DX11.exe"+3507B4:
jmp newmem3
nop 2
returnhere3:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem3)
"Control_DX11.exe"+3507B4:
db 48 63 88 10 01 00 00
//Alt: movsxd rcx,dword ptr [rax+00000110]
unregistersymbol(bHaD)
16288
"i cal"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem4,2048,"Control_DX11.exe"+350971)
label(returnhere4)
label(originalcode4)
label(exit4)
newmem4: //this is allocated memory, you have read,write,execute access
//place your code here
cmp r14d,eax
cmovl r14d,eax
@@:
push rax
mov rax,bHaD
mov byte ptr [rax],0
pop rax
originalcode4:
mov r13d,r14d
cmp eax,r14d
exit4:
jmp returnhere4
///
"Control_DX11.exe"+350971:
jmp newmem4
nop
returnhere4:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem4)
"Control_DX11.exe"+350971:
db 45 8B EE 41 3B C6
//Alt: mov r13d,r14d
//Alt: cmp eax,r14d
16287
"f chk"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem5,2048,"Control_DX11.exe"+350A67)
label(returnhere5)
label(originalcode5)
label(exit5)
newmem5: //this is allocated memory, you have read,write,execute access
//place your code here
{push rbx
mov rbx,bHaD
cmp byte ptr [rbx],1
jne @f
mov byte ptr [rbx],0
//cmp dword ptr [r15+18],0
//je @f
cmp rbx,rbx
pop rbx
jmp exit5
end5:
//inc byte ptr [rbx]
pop rbx}
push rbx
mov rbx,[rsp+70]
add rbx,8
cmp rbx,[rsp+80]
jne @f
cmp rbx,rbx
mov rbx,[rsp+70]
pop rbx
jmp exit5
end5:
pop rbx
originalcode5:
cmp dword ptr [r15+18],00
exit5:
jmp returnhere5
///
"Control_DX11.exe"+350A67:
jmp newmem5
returnhere5:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem5)
"Control_DX11.exe"+350A67:
db 41 83 7F 18 00
//Alt: cmp dword ptr [r15+18],00
16291
"$write"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem9,2048,"Control_DX11.exe"+350DFA)
label(returnhere9)
label(originalcode9)
label(exit9)
newmem9: //this is allocated memory, you have read,write,execute access
//place your code here
add [rcx+40],rax
mov rax,[rcx+40]
test rax,rax
jge @f
xor rax,rax
mov [rcx+40],rax
@@:
mov rax,[rcx+18]
jmp exit9
originalcode9:
add [rcx+40],rax
mov rax,[rcx+18]
exit9:
jmp returnhere9
///
"Control_DX11.exe"+350DFA:
jmp newmem9
nop 3
returnhere9:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem9)
"Control_DX11.exe"+350DFA:
db 48 01 41 40 48 8B 41 18
//Alt: add [rcx+40],rax
//Alt: mov rax,[rcx+18]
16298
"i write"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem10,2048,"Control_DX11.exe"+35A028)
label(returnhere10)
label(originalcode10)
label(exit10)
newmem10: //this is allocated memory, you have read,write,execute access
//place your code here
test edx,edx
jg @f
mov edx,1
originalcode10:
mov [rax+40],edx
test edx,edx
exit10:
jmp returnhere10
///
"Control_DX11.exe"+35A028:
jmp newmem10
returnhere10:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem10)
"Control_DX11.exe"+35A028:
db 89 50 40 85 D2
//Alt: mov [rax+40],edx
//Alt: test edx,edx
16268
"No Description"
4 Bytes
7D168E40
16269
"No Description"
4 Bytes
2010F1A0
16270
"No Description"
4 Bytes
2010FAC0
16271
"No Description"
4 Bytes
201103E0
16272
"No Description"
4 Bytes
20110D00
16273
"No Description"
4 Bytes
20111620
16274
"No Description"
4 Bytes
20111F40
16275
"No description"
Byte
20111FA1
16280
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,"Control_DX11.exe"+351310)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rbx
mov rbx,[rsp]
sub rsp,20
jmp exit
originalcode:
push rbx
sub rsp,20
exit:
jmp returnhere
"Control_DX11.exe"+351310:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Control_DX11.exe"+351310:
db 40 53 48 83 EC 20
//Alt: push rbx
//Alt: sub rsp,20
16281
"No Description"
4 Bytes
2030F1A0
16282
"No Description"
4 Bytes
2030FAC0
16283
"No Description"
4 Bytes
203103E0
16284
"No Description"
4 Bytes
20310D00
16285
"No Description"
4 Bytes
20311620
16286
"No Description"
4 Bytes
20311F40
16299
"..."
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
"Control_DX11.exe"+350967:
db 90 90 90 90 90 90
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
"Control_DX11.exe"+350967:
db 0F 84 FA 00 00 00
//Alt: je Control_DX11.exe+350A67
16289
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
"Control_DX11.exe"+350B06:
db EB
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
"Control_DX11.exe"+350B06:
db 74
//Alt: je
16290
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
"Control_DX11.exe"+5BECC8:
db 90 90 90 90 90 90
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
"Control_DX11.exe"+5BECC8:
db 0F 84 4A 02 00 00
//Alt: je Control_DX11.exe+5BEF18
16292
"No Description"
4 Bytes
2035F1A0
16293
"No Description"
4 Bytes
2035FAC0
16294
"No Description"
4 Bytes
203603E0
16295
"No Description"
4 Bytes
20360D00
16296
"No Description"
4 Bytes
20361620
16297
"No Description"
4 Bytes
20361F40
16300
"2"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(someObjectDataReadAOB,Control_DX11.exe,42 ** ** ** 41 ** ** ** 48 ** ** 48 ** ** ** 5B C3)
registersymbol(someObjectDataReadAOB)
///
luaCall(lua_aobscan("constructsObjectSelfDataReadCallerAOB","CoherentUIGT.dll","49 ** ** 4D ** ** 48 ** ** FF ** ** 33 ** 49 ** ** E8 ** ** ** ** 49 ** ** E8",2))
///
alloc(newmem,2048,someObjectDataReadAOB) //"Control_DX11.exe"+1689E6)
label(returnhere)
label(originalcode_someObjectDataReadAOB)
registersymbol(originalcode_someObjectDataReadAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(someObjectDataReadAOB,4)
//mov edx,[rax+r8]
push rcx
{mov rcx,"CoherentUIGT.dll"+132BCC
cmp [rsp+30],rcx
jne @f}
@@:
mov rcx,constructsObjectSelfDataReadCallerAOB
lea rcx,[rcx+c]
//mov rcx,"CoherentUIGT.dll"+13299C
cmp [rsp+30],rcx
jne @f
readmem(someObjectDataReadAOB,1)
db 39 54
readmem(someObjectDataReadAOB+3,1)
db 04
//cmp [rax+r8+4],edx
readmem(someObjectDataReadAOB,1)
db 0F 4F 54
readmem(someObjectDataReadAOB+3,1)
db 04
//cmovg edx,[rax+r8+4]
end:
pop rcx
readmem(someObjectDataReadAOB+4,4)
//call qword ptr [r9+78]
jmp exit
originalcode_someObjectDataReadAOB:
readmem(someObjectDataReadAOB,8)
//mov edx,[rax+r8]
//call qword ptr [r9+78]
exit:
jmp returnhere
///
someObjectDataReadAOB: //"Control_DX11.exe"+1689E6:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
someObjectDataReadAOB: //"Control_DX11.exe"+1689E6:
readmem(originalcode_someObjectDataReadAOB,8)
//db 42 8B 14 00 41 FF 51 78
//Alt: mov edx,[rax+r8]
//Alt: call qword ptr [r9+78]
unregistersymbol(originalcode_someObjectDataReadAOB)
16301
"$ chk"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(moneyChkOnConstructsEnterRefreshAOB,"Control_DX11.exe",49 ** ** E8 ** ** ** ** 48 ** ** ** ** 00 00 48 ** ** 0F 82)
registersymbol(moneyChkOnConstructsEnterRefreshAOB)
alloc(newmem2,2048,moneyChkOnConstructsEnterRefreshAOB+8) //"Control_DX11.exe"+3507B4)
label(returnhere2)
label(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
registersymbol(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
readmem(moneyChkOnConstructsEnterRefreshAOB+8,7)
//movsxd rcx,dword ptr [rax+110]
cmp rbx,rcx
jge @f
mov ebx,ecx
//mov rax,[Control_DX11.exe+1111110]
//mov rax,[rax+30]
//mov [rax+40],ecx
@@:
pop rax
originalcode2_moneyChkOnConstructsEnterRefreshAOB:
readmem(moneyChkOnConstructsEnterRefreshAOB+8,7)
//movsxd rcx,dword ptr [rax+00000110]
exit2:
jmp returnhere2
///
moneyChkOnConstructsEnterRefreshAOB+8: //"Control_DX11.exe"+3507B4:
jmp newmem2
nop 2
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem2)
moneyChkOnConstructsEnterRefreshAOB+8: //"Control_DX11.exe"+3507B4:
readmem(originalcode2_moneyChkOnConstructsEnterRefreshAOB,7)
//db 48 63 88 10 01 00 00
//Alt: movsxd rcx,dword ptr [rax+00000110]
unregistersymbol(originalcode2_moneyChkOnConstructsEnterRefreshAOB)
16302
"i cal"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(foundMaterialQCalAOB,"Control_DX11.exe",84 ** 0F 84 ** ** ** ** 41 ** ** ** 45 ** ** 41 ** ** 44 ** ** ** 41)
registersymbol(foundMaterialQCalAOB)
alloc(newmem3a,2048,foundMaterialQCalAOB+c) //"Control_DX11.exe"+350971)
label(returnhere3a)
label(originalcode3a_foundMaterialQCalAOB)
registersymbol(originalcode3a_foundMaterialQCalAOB)
label(exit3a)
newmem3a: //this is allocated memory, you have read,write,execute access
//place your code here
cmp r14d,eax
cmovl r14d,eax
originalcode3a_foundMaterialQCalAOB:
readmem(foundMaterialQCalAOB+c,6)
//mov r13d,r14d
//cmp eax,r14d
exit3a:
jmp returnhere3a
///
foundMaterialQCalAOB+c: //"Control_DX11.exe"+350971:
jmp newmem3a
nop
returnhere3a:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem3a)
foundMaterialQCalAOB+c: //"Control_DX11.exe"+350971:
readmem(originalcode3a_foundMaterialQCalAOB,6)
//db 45 8B EE 41 3B C6
//Alt: mov r13d,r14d
//Alt: cmp eax,r14d
unregistersymbol(originalcode3a_foundMaterialQCalAOB)
16303
"f chk"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(materialQRFChkAOB,"Control_DX11.exe",E8 ** ** ** ** 48 ** ** ** 44 ** ** ** 41 ** ** ** 00 75 ** 4C)
registersymbol(materialQRFChkAOB)
alloc(newmem3b,2048,materialQRFChkAOB+d) //"Control_DX11.exe"+350A67)
label(returnhere3b)
label(originalcode3b_materialQRFChkAOB)
registersymbol(originalcode3b_materialQRFChkAOB)
label(exit3b)
newmem3b: //this is allocated memory, you have read,write,execute access
//place your code here
push rbx
mov rbx,[rsp+70]
add rbx,8
cmp rbx,[rsp+80]
jne @f
cmp rbx,rbx
mov rbx,[rsp+70]
pop rbx
jmp exit3b
end3b:
pop rbx
originalcode3b_materialQRFChkAOB:
readmem(materialQRFChkAOB+d,5)
//cmp dword ptr [r15+18],00
exit3b:
jmp returnhere3b
///
materialQRFChkAOB+d: //"Control_DX11.exe"+350A67:
jmp newmem3b
returnhere3b:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem3b)
materialQRFChkAOB+d: //"Control_DX11.exe"+350A67:
db 41 83 7F 18 00
//Alt: cmp dword ptr [r15+18],00
unregistersymbol(originalcode3b_materialQRFChkAOB)
16304
"$ write"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(moneyWriteOnChangeAOB,"Control_DX11.exe",F7 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 48 ** ** ** 74 ** 48)
registersymbol(moneyWriteOnChangeAOB)
alloc(newmem4,2048,moneyWriteOnChangeAOB+8) //"Control_DX11.exe"+350DFA)
label(returnhere4)
label(originalcode4_moneyWriteOnChangeAOB)
registersymbol(originalcode4_moneyWriteOnChangeAOB)
label(exit4)
newmem4: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(moneyWriteOnChangeAOB+8,4)
//add [rcx+40],rax
readmem(moneyWriteOnChangeAOB+c,3)
readmem(moneyWriteOnChangeAOB+b,1)
//mov rax,[rcx+40]
test rax,rax
jge @f
xor rax,rax
readmem(moneyWriteOnChangeAOB+8,1)
db 89
readmem(moneyWriteOnChangeAOB+a,2)
//mov [rcx+40],rax
@@:
readmem(moneyWriteOnChangeAOB+c,4)
//mov rax,[rcx+18]
jmp exit4
originalcode4_moneyWriteOnChangeAOB:
readmem(moneyWriteOnChangeAOB+8,8)
//add [rcx+40],rax
//mov rax,[rcx+18]
exit4:
jmp returnhere4
///
moneyWriteOnChangeAOB+8: //"Control_DX11.exe"+350DFA:
jmp newmem4
nop 3
returnhere4:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem4)
moneyWriteOnChangeAOB+8: //"Control_DX11.exe"+350DFA:
readmem(originalcode4_moneyWriteOnChangeAOB,8)
//db 48 01 41 40 48 8B 41 18
//Alt: add [rcx+40],rax
//Alt: mov rax,[rcx+18]
unregistersymbol(originalcode4_moneyWriteOnChangeAOB)
16305
"i write"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem5,2048,"Control_DX11.exe"+35A028)
label(returnhere5)
label(originalcode5)
label(exit5)
newmem5: //this is allocated memory, you have read,write,execute access
//place your code here
test edx,edx
jg @f
xor edx,edx
originalcode5:
mov [rax+40],edx
test edx,edx
exit5:
jmp returnhere5
///
"Control_DX11.exe"+35A028:
jmp newmem5
returnhere5:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem5)
"Control_DX11.exe"+35A028:
db 89 50 40 85 D2
//Alt: mov [rax+40],edx
//Alt: test edx,edx
16308
"No Description"
4 Bytes
2015F1A0
16309
"No Description"
4 Bytes
20161F40
16311
"ignore ability points .1"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,Control_DX11.exe,8B ** ** 41 89 ** ** ** FF ** ** ** ** ** 48 ** ** ** 49)
registersymbol(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
alloc(newmem,2048,abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3) //"Control_DX11.exe"+16750E)
label(returnhere)
label(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
registersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
xor eax,eax
originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB:
readmem(abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3,5)
//mov [r12+18],eax
exit:
jmp returnhere
///
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
jmp newmem
returnhere:
///**********************************///
aobscanmodule(abilityPointChkOnLearnAOB,Control_DX11.exe,8B ** ** 39 ** ** 0F 8F ** ** ** ** 49)
registersymbol(abilityPointChkOnLearnAOB)
alloc(newmem2,2048,abilityPointChkOnLearnAOB) //"Control_DX11.exe"+1B1BEA)
label(returnhere2)
label(originalcode2_abilityPointChkOnLearnAOB)
registersymbol(originalcode2_abilityPointChkOnLearnAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
jle @f
db 89
readmem(abilityPointChkOnLearnAOB+4,2)
//mov [rcx+24],eax
originalcode2_abilityPointChkOnLearnAOB:
readmem(abilityPointChkOnLearnAOB,6)
//mov eax,[rsi+48]
//cmp [rcx+24],eax
exit2:
jmp returnhere2
///
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
jmp newmem2
nop
returnhere2:
///**********************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
abiliyRequiredPointReadOnAbilitiesMenuAccessAOB+3: //"Control_DX11.exe"+16750E:
readmem(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB,5)
//db 41 89 44 24 18
//Alt: mov [r12+18],eax
unregistersymbol(originalcode_abiliyRequiredPointReadOnAbilitiesMenuAccessAOB)
///**********************************///
dealloc(newmem2)
abilityPointChkOnLearnAOB: //"Control_DX11.exe"+1B1BEA:
readmem(originalcode2_abilityPointChkOnLearnAOB,6)
//db 8B 46 48 39 41 24
//Alt: mov eax,[rsi+48]
//Alt: cmp [rcx+24],eax
unregistersymbol(originalcode2_abilityPointChkOnLearnAOB)
///**********************************///
16312
"No Description"
4 Bytes
200A83A0
16313
"No Description"
Float
57EFFF10
16314
"No Description"
Float
57F70310
16315
"inf. fly"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(flyTimeChkAOB,"Control_DX11.exe",80 ** ** ** ** ** 00 75 ** 48 ** ** ** F3 0F ** ** ** ** 00 00 F3 0F ** ** ** F3 0F ** ** ** ** 00 00 0F ** ** 72)
registersymbol(flyTimeChkAOB)
flyTimeChkAOB+7: //"Control_DX11.exe"+CB325:
db EB
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
flyTimeChkAOB+7: //"Control_DX11.exe"+CB325:
db 75
//Alt: jne
16317
"fu "
Byte
14C05A69C
16319
"fd "
Byte
14C05A6C0
16318
"No description"
Byte
14C05A6B4
16320
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(someStateTransitionCallerAOB,"rl_rmdwin7_f.dll",49 ** ** E8 ** ** ** ** 45 ** ** ** ** 00 00 45 ** ** ** ** 00 00 48 ** ** ** 48 ** ** 75 06 4C ** ** ** 74 03 FF ** ** 48)
registersymbol(someStateTransitionCallerAOB)
label(pFlyUpCaller)
registersymbol(pFlyUpCaller)
label(bJFlyUp)
registersymbol(bJFlyUp)
label(pHoverCaller)
registersymbol(pHoverCaller)
label(bJHover)
registersymbol(bJHover)
label(pFloatDownCaller)
registersymbol(pFloatDownCaller)
label(bJFloatDown)
registersymbol(bJFloatDown)
alloc(newmem,2048,someStateTransitionCallerAOB+16) //"rl_rmdwin7_f.dll"+1518C1)
label(returnhere)
label(originalcode_someStateTransitionCallerAOB)
registersymbol(originalcode_someStateTransitionCallerAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
//mov rcx,[rsi+10]
//test rcx,rcx
//jnz end
//cmp [rsi+18],r13
//je end
mov rcx,"Control_DX11.exe"+549E10 //
cmp [rsi+18],rcx
je end
mov rcx,"Control_DX11.exe"+A2C50
cmp [rsi+18],rcx
jne @f
mov rcx,bJFlyUp
mov byte ptr [rcx],0
mov rcx,bJHover
mov byte ptr [rcx],0
mov rcx,bJFloatDown
mov byte ptr [rcx],0
je end
@@:
mov rcx,"Control_DX11.exe"+CB020 //fly up
cmp [rsi+18],rcx
jne @f
mov rcx,pFlyUpCaller
mov [rcx],rsi
mov byte ptr [rcx+8],1
mov rcx,bJHover
mov byte ptr [rcx],0
mov rcx,bJFloatDown
mov byte ptr [rcx],0
jmp end
@@:
mov rcx,"Control_DX11.exe"+CB0D0 //hover
cmp [rsi+18],rcx
jne @f
mov rcx,pHoverCaller
mov [rcx],rsi
mov byte ptr [rcx+8],1
mov rcx,bJFlyUp
mov byte ptr [rcx],0
mov rcx,bJFloatDown
mov byte ptr [rcx],0
jmp end
@@:
mov rcx,"Control_DX11.exe"+CB160 //float down
cmp [rsi+18],rcx
jne @f
mov rcx,pFloatDownCaller
mov [rcx],rcx
mov byte ptr [rcx+8],1
mov rcx,bJFlyUp
mov byte ptr [rcx],0
mov rcx,bJHover
mov byte ptr [rcx],0
//mov rcx,pFlyUpCaller
//mov rcx,[rcx]
//test rcx,rcx
//cmovnz rsi,rcx
jmp end
@@:
mov rcx,"Control_DX11.exe"+CAF50 //fall
cmp [rsi+18],rcx
jne @f
//mov rcx,bJFloatDown
//cmp byte ptr [rcx],1
//jne @f
//mov byte ptr [rcx],0
//mov rcx,pHoverCaller
//mov rcx,[rcx]
//test rcx,rcx
//cmovnz rsi,rcx
mov rcx,bJHover
cmp byte ptr [rcx],1
jne @f
mov byte ptr [rcx],0
mov rcx,pFloatDownCaller
mov rcx,[rcx]
test rcx,rcx
cmovnz rsi,rcx
@@:
end:
originalcode_someStateTransitionCallerAOB:
readmem(someStateTransitionCallerAOB+16,7)
//mov rcx,[rsi+10]
//test rcx,rcx
exit:
jmp returnhere
///
pFlyUpCaller:
dq 0
bJFlyUp:
dd 0
pHoverCaller:
dq 0
bJHover:
dd 0
pFloatDownCaller:
dq 0
bJFloatDown:
dd 0
///
someStateTransitionCallerAOB+16: //"rl_rmdwin7_f.dll"+1518C1:
jmp newmem
nop 2
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
someStateTransitionCallerAOB+16: //"rl_rmdwin7_f.dll"+1518C1:
readmem(originalcode_someStateTransitionCallerAOB,7)
//db 48 8B 4E 10 48 85 C9
//Alt: mov rcx,[rsi+10]
//Alt: test rcx,rcx
unregistersymbol(originalcode_someStateTransitionCallerAOB)
unregistersymbol(pFlyUpCaller)
unregistersymbol(bJFlyUp)
unregistersymbol(pHoverCaller)
unregistersymbol(bJHover)
unregistersymbol(pFloatDownCaller)
unregistersymbol(bJFloatDown)
16325
"pFlyUpCaller"
Array of byte
0
pFlyUpCaller
0
16328
"bJFlyUp"
Byte
bJFlyUp
16326
"pHoverCaller"
Array of byte
0
pHoverCaller
0
16330
"bJHover"
Byte
bJHover
16327
"pFloatDownCaller"
Array of byte
0
pFloatDownCaller
0
16329
"bJFloatDown"
Byte
bJFloatDown
16322
"fly up"
4 Bytes
1423BD28
16323
"hover"
4 Bytes
1423BD58
16324
"float down"
4 Bytes
1423BD88
16337
"No Description"
Float
E67172A8
16338
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
"Control_DX11.exe"+35426E:
db B0 01
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
"Control_DX11.exe"+35426E:
db 32 C0
//Alt: xor al,al
16339
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
"Control_DX11.exe"+354275:
db 84 C0
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
"Control_DX11.exe"+354275:
db B0 01
//Alt: mov al,01
16340
"ignore ammo"
FF0000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(playerAmmoRead3AOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 0F ** ** ** ** ** ** 76 ** E8 ** ** ** ** 84 ** 74 ** 32 ** EB)
registersymbol(playerAmmoRead3AOB)
label(pAmmo)
registersymbol(pAmmo)
alloc(newmem,2048,playerAmmoRead3AOB) //"Control_DX11.exe"+5A982B)
label(returnhere)
label(originalcode_playerAmmoRead3AOB)
registersymbol(originalcode_playerAmmoRead3AOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
mov [rax],rcx
pop rax
originalcode_playerAmmoRead3AOB:
readmem(playerAmmoRead3AOB,8)
//movss xmm0,[rcx+00000148]
exit:
jmp returnhere
///
pAmmo:
///
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
jmp newmem
nop 3
returnhere:
///****************************************///
aobscanmodule(ammoWriteOnFireAOB,Control_DX11.exe,F3 0F ** ** ** ** 00 00 48 ** ** ** ** 00 00 48 ** ** ** ** ** ** 45 ** ** 48)
registersymbol(ammoWriteOnFireAOB)
alloc(newmem2,2048,ammoWriteOnFireAOB) //"Control_DX11.exe"+357DA3)
label(returnhere2)
label(originalcode2_ammoWriteOnFireAOB)
registersymbol(originalcode2_ammoWriteOnFireAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
mov rdx,pAmmo
mov rdx,[rdx]
lea rdx,[rdx-a8]
cmp rcx,rdx
jne @f
{readmem(ammoWriteOnFireAOB,2)
db 5F
readmem(ammoWriteOnFireAOB+3,5)
//maxss xmm3,[rcx+1f0]}
mov rdx,dMinAmmo
maxss xmm3,[rdx]
originalcode2_ammoWriteOnFireAOB:
readmem(ammoWriteOnFireAOB,8)
//movss [rcx+000001F0],xmm3
exit2:
jmp returnhere2
///
dMinAmmo:
dd 0
///
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
jmp newmem2
nop 3
returnhere2:
///****************************************///
"Control_DX11.exe"+35426E:
db B0 01
///****************************************///
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
playerAmmoRead3AOB: //"Control_DX11.exe"+5A982B:
readmem(originalcode_playerAmmoRead3AOB,8)
//db F3 0F 10 81 48 01 00 00
//Alt: movss xmm0,[rcx+00000148]
unregistersymbol(originalcode_playerAmmoRead3AOB)
unregistersymbol(pAmmo)
///****************************************///
dealloc(newmem2)
ammoWriteOnFireAOB: //"Control_DX11.exe"+357DA3:
readmem(originalcode2_ammoWriteOnFireAOB,8)
//db F3 0F 11 99 F0 01 00 00
//Alt: movss [rcx+000001F0],xmm3
unregistersymbol(originalcode2_ammoWriteOnFireAOB)
///****************************************///
"Control_DX11.exe"+35426E:
db 30 C0
///****************************************///
16350
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(rechargeTimeoutCountdownCalAOB,"Control_DX11.exe",F3 0F ** ** ** ** 00 00 0F ** ** F3 0F ** ** ** ** 00 00 0F ** ** F3 0F ** ** ** ** 00 00 72)
registersymbol(rechargeTimeoutCountdownCalAOB)
label(dRechargeTimeoutStepMultiplier)
registersymbol(dRechargeTimeoutStepMultiplier)
alloc(newmem,2048,rechargeTimeoutCountdownCalAOB+b) //"Control_DX11.exe"+5DC34B)
label(returnhere)
label(originalcode_rechargeTimeoutCountdownCalAOB)
registersymbol(originalcode_rechargeTimeoutCountdownCalAOB)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
{push rax
mov rax,dRechargeTimeoutStepMultiplier
movss xmm1,[rax]
pop rax
readmem(rechargeTimeoutCountdownCalAOB+b,2)
db 59 89
readmem(rechargeTimeoutCountdownCalAOB+f,4)
//mulss xmm1,[rcx+16c]}
readmem(rechargeTimeoutCountdownCalAOB,3)
db 89
readmem(rechargeTimeoutCountdownCalAOB+f,4)
//movss xmm1,[rcx+16c]
push rax
mov rax,pAmmo
cmp [rax],rcx
jne @f
mov rax,dRechargeTimeoutStepMultiplier
mulss xmm1,[rax]
@@:
pop rax
subss xmm0,xmm1
xorps xmm1,xmm1
jmp exit
originalcode_rechargeTimeoutCountdownCalAOB:
readmem(rechargeTimeoutCountdownCalAOB+b,8)
//subss xmm0,[rcx+0000016C]
exit:
jmp returnhere
///
dRechargeTimeoutStepMultiplier:
dd (float)1.75
///
rechargeTimeoutCountdownCalAOB+b: //"Control_DX11.exe"+5DC34B:
jmp newmem
nop 3
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
rechargeTimeoutCountdownCalAOB+b: //"Control_DX11.exe"+5DC34B:
readmem(originalcode_rechargeTimeoutCountdownCalAOB,8)
//db F3 0F 5C 81 6C 01 00 00
//Alt: subss xmm0,[rcx+0000016C]
unregistersymbol(originalcode_rechargeTimeoutCountdownCalAOB)
unregistersymbol(dRechargeTimeoutStepMultiplier)
16344
"Auto Assemble script"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(rechargeFromEmptyClipAOB,"Control_DX11.exe",F3 0F ** ** ** ** 00 00 0F ** ** ** ** 0F ** ** ** ** 00 00 F3 0F ** ** ** ** ** ** 0F ** ** F3 0F)
registersymbol(rechargeFromEmptyClipAOB)
alloc(newmem2,2048,rechargeFromEmptyClipAOB) //"Control_DX11.exe"+5DC2CD)
label(returnhere2)
label(originalcode2_rechargeFromEmptyClipAOB)
registersymbol(originalcode2_rechargeFromEmptyClipAOB)
label(exit2)
newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pAmmo
cmp [rax],rcx
jne @f
readmem(rechargeFromEmptyClipAOB,2)
db 5F
readmem(rechargeFromEmptyClipAOB+f,5)
//maxss xmm3,[rcx+14c]
end2:
pop rax
originalcode2_rechargeFromEmptyClipAOB:
readmem(rechargeFromEmptyClipAOB,8)
//movss [rcx+00000148],xmm3
exit2:
jmp returnhere2
///
rechargeFromEmptyClipAOB: //"Control_DX11.exe"+5DC2CD:
jmp newmem2
nop 3
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem2)
rechargeFromEmptyClipAOB: //"Control_DX11.exe"+5DC2CD:
readmem(originalcode2_rechargeFromEmptyClipAOB,8)
//db F3 0F 11 99 48 01 00 00
//Alt: movss [rcx+00000148],xmm3
unregistersymbol(originalcode2_rechargeFromEmptyClipAOB)
Code :mov edx,[rax+r8]
Control_DX11.exe+1689E6
8B
CA
49
8B
D8
42
8B
14
00
41
FF
51
78
48
Code :mov eax,[rbx+24]
Control_DX11.exe+16750B
41
89
44
24
14
8B
43
24
41
89
44
24
18
Code :mov rax,FFFF000000000002
CoherentGTJS.dll+5D57FB
48
83
C4
28
C3
48
B8
02
00
00
00
00
00
FF
FF
4C
85
C0
75
44
Code :mov rax,[rax+40]
Control_DX11.exe+5BDCBF
48
85
C0
74
09
48
8B
40
40
89
45
17
EB
07
Code :mov rbx,[rcx+40]
Control_DX11.exe+3507A8
84
D9
06
00
00
48
8B
59
40
49
8B
CF
E8
CC
Code :mov eax,[rax+40]
Control_DX11.exe+351333
48
85
C0
74
09
8B
40
40
48
83
C4
20
5B
Code :mov r13d,r14d
Control_DX11.exe+350971
00
41
8B
47
18
45
8B
EE
41
3B
C6
44
0F
Code :movss xmm0,[rdx]
Control_DX11.exe+3BAC0C
91
F0
04
00
00
F3
0F
10
02
0F
2E
C6
7A
02
Code :comiss xmm0,[rdx]
Control_DX11.exe+53C7E9
F3
0F
10
40
28
0F
2F
02
48
8D
91
4C
01
Code :comiss xmm0,[rcx]
Control_DX11.exe+53C827
F3
0F
10
40
38
0F
2F
01
0F
93
C0
38
02
constructsObjectSelfDataReadCallerAOB
7FEC89A2990
https://fearlessrevolution.com/viewtopic.php?f=4&t=10106
https://www.patreon.com/Cielos