1
"99999 Scraps(Gather one to Activate)"
Auto Assembler Script
{ Game : Remnant-Win64-Shipping.exe
Version:
Date : 2019-08-16
Author :
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Scraps,Remnant-Win64-Shipping.exe,41 89 40 2C 29 4D 67) // should be unique
alloc(newmem,$1000,"Remnant-Win64-Shipping.exe"+6FAD5D)
globalalloc(pScrapy,8)
pScrapy:
dq 0
label(code)
label(return)
newmem:
code:
mov [r8+2C],#99999
//mov [pScrapy],r8
sub [rbp+67],ecx
jmp return
Scraps:
jmp newmem
nop
nop
return:
registersymbol(Scraps)
[DISABLE]
Scraps:
db 41 89 40 2C 29 4D 67
unregistersymbol(Scraps)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Remnant-Win64-Shipping.exe"+6FAD5D
"Remnant-Win64-Shipping.exe"+6FAD41: 3B D0 - cmp edx,eax
"Remnant-Win64-Shipping.exe"+6FAD43: 7D 4B - jnl Remnant-Win64-Shipping.exe+6FAD90
"Remnant-Win64-Shipping.exe"+6FAD45: 8B 4D 67 - mov ecx,[rbp+67]
"Remnant-Win64-Shipping.exe"+6FAD48: 2B C2 - sub eax,edx
"Remnant-Win64-Shipping.exe"+6FAD4A: 3B C1 - cmp eax,ecx
"Remnant-Win64-Shipping.exe"+6FAD4C: 4D 63 EC - movsxd r13,r12d
"Remnant-Win64-Shipping.exe"+6FAD4F: 0F 4E C8 - cmovle ecx,eax
"Remnant-Win64-Shipping.exe"+6FAD52: 45 8D 65 01 - lea r12d,[r13+01]
"Remnant-Win64-Shipping.exe"+6FAD56: 44 89 65 AF - mov [rbp-51],r12d
"Remnant-Win64-Shipping.exe"+6FAD5A: 8D 04 0A - lea eax,[rdx+rcx]
// ---------- INJECTING HERE ----------
"Remnant-Win64-Shipping.exe"+6FAD5D: 41 89 40 2C - mov [r8+2C],eax
"Remnant-Win64-Shipping.exe"+6FAD61: 29 4D 67 - sub [rbp+67],ecx
// ---------- DONE INJECTING ----------
"Remnant-Win64-Shipping.exe"+6FAD64: 44 3B 65 B3 - cmp r12d,[rbp-4D]
"Remnant-Win64-Shipping.exe"+6FAD68: 7E 10 - jle Remnant-Win64-Shipping.exe+6FAD7A
"Remnant-Win64-Shipping.exe"+6FAD6A: 41 8B D5 - mov edx,r13d
"Remnant-Win64-Shipping.exe"+6FAD6D: 48 8D 4D A7 - lea rcx,[rbp-59]
"Remnant-Win64-Shipping.exe"+6FAD71: E8 7A 8A B6 FF - call Remnant-Win64-Shipping.exe+2637F0
"Remnant-Win64-Shipping.exe"+6FAD76: 44 8B 65 AF - mov r12d,[rbp-51]
"Remnant-Win64-Shipping.exe"+6FAD7A: 8B 07 - mov eax,[rdi]
"Remnant-Win64-Shipping.exe"+6FAD7C: 49 8B CD - mov rcx,r13
"Remnant-Win64-Shipping.exe"+6FAD7F: 4C 8B 6D A7 - mov r13,[rbp-59]
"Remnant-Win64-Shipping.exe"+6FAD83: 41 89 44 8D 00 - mov [r13+rcx*4+00],eax
}
10
"InfConsumables(Enemys too currently)"
Auto Assembler Script
{ Game : Remnant-Win64-Shipping.exe
Version:
Date : 2019-08-16
Author :
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Ammo,Remnant-Win64-Shipping.exe,2B 44 24 40 48 89 7B 20 48 8B 5C 24 30 89 06 48 8B 74 24 48) // should be unique
alloc(newmem,$1000,"Remnant-Win64-Shipping.exe"+1CCAA98)
label(code)
label(return)
newmem:
code:
mov [rsi],#99
mov rsi,[rsp+48]
jmp return
Ammo+0D:
jmp newmem
nop
nop
return:
registersymbol(Ammo)
[DISABLE]
Ammo+0D:
db 89 06 48 8B 74 24 48
unregistersymbol(Ammo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Remnant-Win64-Shipping.exe"+1CCAA98
"Remnant-Win64-Shipping.exe"+1CCAA6D: 48 89 83 80 00 00 00 - mov [rbx+00000080],rax
"Remnant-Win64-Shipping.exe"+1CCAA74: E8 47 37 E3 FE - call Remnant-Win64-Shipping.exe+AFE1C0
"Remnant-Win64-Shipping.exe"+1CCAA79: 48 8B 43 20 - mov rax,[rbx+20]
"Remnant-Win64-Shipping.exe"+1CCAA7D: 48 85 C0 - test rax,rax
"Remnant-Win64-Shipping.exe"+1CCAA80: 40 0F 95 C7 - setne dil
"Remnant-Win64-Shipping.exe"+1CCAA84: 48 03 F8 - add rdi,rax
"Remnant-Win64-Shipping.exe"+1CCAA87: 8B 44 24 38 - mov eax,[rsp+38]
"Remnant-Win64-Shipping.exe"+1CCAA8B: 2B 44 24 40 - sub eax,[rsp+40]
"Remnant-Win64-Shipping.exe"+1CCAA8F: 48 89 7B 20 - mov [rbx+20],rdi
"Remnant-Win64-Shipping.exe"+1CCAA93: 48 8B 5C 24 30 - mov rbx,[rsp+30]
// ---------- INJECTING HERE ----------
"Remnant-Win64-Shipping.exe"+1CCAA98: 89 06 - mov [rsi],eax
"Remnant-Win64-Shipping.exe"+1CCAA9A: 48 8B 74 24 48 - mov rsi,[rsp+48]
// ---------- DONE INJECTING ----------
"Remnant-Win64-Shipping.exe"+1CCAA9F: 48 83 C4 20 - add rsp,20
"Remnant-Win64-Shipping.exe"+1CCAAA3: 5F - pop rdi
"Remnant-Win64-Shipping.exe"+1CCAAA4: C3 - ret
"Remnant-Win64-Shipping.exe"+1CCAAA5: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAA6: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAA7: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAA8: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAA9: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAAA: CC - int 3
"Remnant-Win64-Shipping.exe"+1CCAAAB: CC - int 3
}
4
"Stamina&Ammo Infinite"
Auto Assembler Script
{ Game : Remnant-Win64-Shipping.exe
Version:
Date : 2019-08-16
Author :
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Stamina,Remnant-Win64-Shipping.exe,F3 0F 11 B3 40 01 00 00) // should be unique
alloc(newmem,$1000,"Remnant-Win64-Shipping.exe"+6369DE)
label(code)
label(return)
newmem:
code:
//movss [rbx+00000140],xmm6
jmp return
Stamina:
jmp newmem
nop
nop
nop
return:
registersymbol(Stamina)
[DISABLE]
Stamina:
db F3 0F 11 B3 40 01 00 00
unregistersymbol(Stamina)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Remnant-Win64-Shipping.exe"+6369DE
"Remnant-Win64-Shipping.exe"+6369BC: 0F 57 C0 - xorps xmm0,xmm0
"Remnant-Win64-Shipping.exe"+6369BF: 0F 28 C8 - movaps xmm1,xmm0
"Remnant-Win64-Shipping.exe"+6369C2: F3 0F 58 CF - addss xmm1,xmm7
"Remnant-Win64-Shipping.exe"+6369C6: 0F 2F CE - comiss xmm1,xmm6
"Remnant-Win64-Shipping.exe"+6369C9: 72 08 - jb Remnant-Win64-Shipping.exe+6369D3
"Remnant-Win64-Shipping.exe"+6369CB: 0F 28 F1 - movaps xmm6,xmm1
"Remnant-Win64-Shipping.exe"+6369CE: F3 41 0F 5D F0 - minss xmm6,xmm8
"Remnant-Win64-Shipping.exe"+6369D3: 0F 2E F0 - ucomiss xmm6,xmm0
"Remnant-Win64-Shipping.exe"+6369D6: 44 0F 28 44 24 20 - movaps xmm8,[rsp+20]
"Remnant-Win64-Shipping.exe"+6369DC: 74 1A - je Remnant-Win64-Shipping.exe+6369F8
// ---------- INJECTING HERE ----------
"Remnant-Win64-Shipping.exe"+6369DE: F3 0F 11 B3 40 01 00 00 - movss [rbx+00000140],xmm6
// ---------- DONE INJECTING ----------
"Remnant-Win64-Shipping.exe"+6369E6: B0 01 - mov al,01
"Remnant-Win64-Shipping.exe"+6369E8: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
"Remnant-Win64-Shipping.exe"+6369ED: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
"Remnant-Win64-Shipping.exe"+6369F2: 48 83 C4 50 - add rsp,50
"Remnant-Win64-Shipping.exe"+6369F6: 5B - pop rbx
"Remnant-Win64-Shipping.exe"+6369F7: C3 - ret
"Remnant-Win64-Shipping.exe"+6369F8: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
"Remnant-Win64-Shipping.exe"+6369FD: 32 C0 - xor al,al
"Remnant-Win64-Shipping.exe"+6369FF: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
"Remnant-Win64-Shipping.exe"+636A04: 48 83 C4 50 - add rsp,50
}
21
"GodMode"
Auto Assembler Script
{ Game : Remnant-Win64-Shipping.exe (paused)
Version:
Date : 2019-08-17
Author :
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Remnant-Win64-Shipping.exe,F3 0F 11 B3 60 08 00 00) // should be unique
alloc(newmem,$1000,"Remnant-Win64-Shipping.exe"+688E87)
label(code)
label(return)
newmem:
code:
cmp [rbx+858],4
je return
movss [rbx+00000860],xmm6
jmp return
INJECT:
jmp newmem
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db F3 0F 11 B3 60 08 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Remnant-Win64-Shipping.exe"+688E87
"Remnant-Win64-Shipping.exe"+688E65: 0F 28 F1 - movaps xmm6,xmm1
"Remnant-Win64-Shipping.exe"+688E68: 48 8B 01 - mov rax,[rcx]
"Remnant-Win64-Shipping.exe"+688E6B: FF 50 38 - call qword ptr [rax+38]
"Remnant-Win64-Shipping.exe"+688E6E: 0F 57 C9 - xorps xmm1,xmm1
"Remnant-Win64-Shipping.exe"+688E71: 0F 2F C1 - comiss xmm0,xmm1
"Remnant-Win64-Shipping.exe"+688E74: 76 0E - jna Remnant-Win64-Shipping.exe+688E84
"Remnant-Win64-Shipping.exe"+688E76: F3 0F 59 35 86 1E E6 01 - mulss xmm6,[Remnant-Win64-Shipping.exe+24EAD04]
"Remnant-Win64-Shipping.exe"+688E7E: F3 0F 5E F0 - divss xmm6,xmm0
"Remnant-Win64-Shipping.exe"+688E82: EB 03 - jmp Remnant-Win64-Shipping.exe+688E87
"Remnant-Win64-Shipping.exe"+688E84: 0F 57 F6 - xorps xmm6,xmm6
// ---------- INJECTING HERE ----------
"Remnant-Win64-Shipping.exe"+688E87: F3 0F 11 B3 60 08 00 00 - movss [rbx+00000860],xmm6
// ---------- DONE INJECTING ----------
"Remnant-Win64-Shipping.exe"+688E8F: 48 8D 8B D8 08 00 00 - lea rcx,[rbx+000008D8]
"Remnant-Win64-Shipping.exe"+688E96: 48 8D 54 24 40 - lea rdx,[rsp+40]
"Remnant-Win64-Shipping.exe"+688E9B: 48 89 5C 24 40 - mov [rsp+40],rbx
"Remnant-Win64-Shipping.exe"+688EA0: E8 AB 0C C4 FF - call Remnant-Win64-Shipping.exe+2C9B50
"Remnant-Win64-Shipping.exe"+688EA5: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
"Remnant-Win64-Shipping.exe"+688EAA: 48 83 C4 30 - add rsp,30
"Remnant-Win64-Shipping.exe"+688EAE: 5B - pop rbx
"Remnant-Win64-Shipping.exe"+688EAF: C3 - ret
"Remnant-Win64-Shipping.exe"+688EB0: 40 53 - push rbx
"Remnant-Win64-Shipping.exe"+688EB2: 48 83 EC 30 - sub rsp,30
}
pScrap
1779DCE0000
Orbs
2275F980000
pScrapy
1854FF90010
pScrapys
1854FF90000