Lies of P (Demo) Steam

[Tordeus]

Game Name: Lies of P Demo
Game Engine: Unreal 4
Game Version: Demo
Options Required:Infinite health, Infinite Stamina
Steam Website:
Other Info: I know its just a demo but I've got a broken couple of fingers atm so Im struggling to get past the first elite type enemy in the demo and I wanna see the rest of it just to see if its something I'd like to pick up when it releases. Thanks to anyone who decides to have a look at it.

[Raidtron]

bump

[nyx]

+1. Health and maybe Weapon Energy (Fable) would be nice.

[Sianz]

Options Required:Infinite health, Infinite Stamina

Code: Select all

{ Game   : LOP-Win64-Shipping.exe
  Version: 
  Date   : 2023-06-09
  Author : Sianz

  This script does blah blah blah
}

define(address,"LOP-Win64-Shipping.exe"+15CCF61)
define(bytes,8B 41 0C 48 83 C4 20)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"LOP-Win64-Shipping.exe"+15CCF61)

label(code)
label(return)

newmem:
  cmp [rcx+FCC],#100
  jne @f
  mov [rcx+0C],#222 //health
  mov [rcx+3C],#111 //stamina
  mov [rcx+CC],#123 //legion
code:
  mov eax,[rcx+0C]
  add rsp,20
  jmp return

address:
  jmp newmem
  nop 2
return:

[DISABLE]

address:
  db bytes
  // mov eax,[rcx+0C]
  // add rsp,20

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: LOP-Win64-Shipping.exe+15CCF61

LOP-Win64-Shipping.exe+15CCF4A: 8B C1        - mov eax,ecx
LOP-Win64-Shipping.exe+15CCF4C: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF50: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF51: C3           - ret 
LOP-Win64-Shipping.exe+15CCF52: 80 79 14 00  - cmp byte ptr [rcx+14],00
LOP-Win64-Shipping.exe+15CCF56: 74 09        - je LOP-Win64-Shipping.exe+15CCF61
LOP-Win64-Shipping.exe+15CCF58: 8B 41 10     - mov eax,[rcx+10]
LOP-Win64-Shipping.exe+15CCF5B: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF5F: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF60: C3           - ret 
// ---------- INJECTING HERE ----------
LOP-Win64-Shipping.exe+15CCF61: 8B 41 0C     - mov eax,[rcx+0C]
// ---------- DONE INJECTING  ----------
LOP-Win64-Shipping.exe+15CCF64: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF68: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF69: C3           - ret 
LOP-Win64-Shipping.exe+15CCF6A: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6B: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6C: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6D: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6E: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6F: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF70: 0F 57 C0     - xorps xmm0,xmm0
}

[BabyGroot]

Aww Game Size 23.14 GiB

[Sianz]

Aww Game Size 23.14 GiB

Took only 3 minutes for me

[BabyGroot]

Solid network nice.
Where I live now, it might take 1 and a half or 2 hours to download this game
And unfortunately the internet quota at my place is still paid (not unlimited)
want to try to create a table but constrained by the quota internet.
I hope someone makes a table for this great game that uses the Unreal Engine.

[monk70]

Options Required:Infinite health, Infinite Stamina

+ add damage hack

Code: Select all

{ Game   : LOP-Win64-Shipping.exe
  Version: 
  Date   : 2023-06-09
  Author : Sianz

  This script does blah blah blah
}

define(address,"LOP-Win64-Shipping.exe"+15CCF61)
define(bytes,8B 41 0C 48 83 C4 20)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"LOP-Win64-Shipping.exe"+15CCF61)

label(code)
label(return)

newmem:
  cmp [rcx+2DC],#72
  jne @f
  mov [rcx+0C],#111 //health+stamina
  mov [rcx+CC],#999 //damage hack
code:
  mov eax,[rcx+0C]
  add rsp,20
  jmp return

address:
  jmp newmem
  nop 2
return:

[DISABLE]

address:
  db bytes
  // mov eax,[rcx+0C]
  // add rsp,20

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: LOP-Win64-Shipping.exe+15CCF61

LOP-Win64-Shipping.exe+15CCF4A: 8B C1        - mov eax,ecx
LOP-Win64-Shipping.exe+15CCF4C: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF50: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF51: C3           - ret 
LOP-Win64-Shipping.exe+15CCF52: 80 79 14 00  - cmp byte ptr [rcx+14],00
LOP-Win64-Shipping.exe+15CCF56: 74 09        - je LOP-Win64-Shipping.exe+15CCF61
LOP-Win64-Shipping.exe+15CCF58: 8B 41 10     - mov eax,[rcx+10]
LOP-Win64-Shipping.exe+15CCF5B: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF5F: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF60: C3           - ret 
// ---------- INJECTING HERE ----------
LOP-Win64-Shipping.exe+15CCF61: 8B 41 0C     - mov eax,[rcx+0C]
// ---------- DONE INJECTING  ----------
LOP-Win64-Shipping.exe+15CCF64: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF68: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF69: C3           - ret 
LOP-Win64-Shipping.exe+15CCF6A: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6B: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6C: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6D: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6E: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6F: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF70: 0F 57 C0     - xorps xmm0,xmm0
}

Not working.

[Sianz]

Not working.

Yeah.. the cmp is not perfect, at first it's working but after level up it's no longer working.

Try this:

Code: Select all

{ Game   : LOP-Win64-Shipping.exe
  Version: 
  Date   : 2023-06-09
  Author : Sianz

  This script does blah blah blah
}

define(address,"LOP-Win64-Shipping.exe"+15CCF61)
define(bytes,8B 41 0C 48 83 C4 20)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"LOP-Win64-Shipping.exe"+15CCF61)

label(code)
label(return)

newmem:
  cmp [rcx+FCC],#100
  jne @f
  mov [rcx+0C],#222 //health
  mov [rcx+3C],#111 //stamina
  mov [rcx+CC],#123 //legion
code:
  mov eax,[rcx+0C]
  add rsp,20
  jmp return

address:
  jmp newmem
  nop 2
return:

[DISABLE]

address:
  db bytes
  // mov eax,[rcx+0C]
  // add rsp,20

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: LOP-Win64-Shipping.exe+15CCF61

LOP-Win64-Shipping.exe+15CCF4A: 8B C1        - mov eax,ecx
LOP-Win64-Shipping.exe+15CCF4C: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF50: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF51: C3           - ret 
LOP-Win64-Shipping.exe+15CCF52: 80 79 14 00  - cmp byte ptr [rcx+14],00
LOP-Win64-Shipping.exe+15CCF56: 74 09        - je LOP-Win64-Shipping.exe+15CCF61
LOP-Win64-Shipping.exe+15CCF58: 8B 41 10     - mov eax,[rcx+10]
LOP-Win64-Shipping.exe+15CCF5B: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF5F: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF60: C3           - ret 
// ---------- INJECTING HERE ----------
LOP-Win64-Shipping.exe+15CCF61: 8B 41 0C     - mov eax,[rcx+0C]
// ---------- DONE INJECTING  ----------
LOP-Win64-Shipping.exe+15CCF64: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF68: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF69: C3           - ret 
LOP-Win64-Shipping.exe+15CCF6A: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6B: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6C: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6D: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6E: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6F: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF70: 0F 57 C0     - xorps xmm0,xmm0
}

[monk70]

Not working.

Yeah.. the cmp is not perfect, at first it's working but after level up it's no longer working.

Try this:

Code: Select all

{ Game   : LOP-Win64-Shipping.exe
  Version: 
  Date   : 2023-06-09
  Author : Sianz

  This script does blah blah blah
}

define(address,"LOP-Win64-Shipping.exe"+15CCF61)
define(bytes,8B 41 0C 48 83 C4 20)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"LOP-Win64-Shipping.exe"+15CCF61)

label(code)
label(return)

newmem:
  cmp [rcx+FCC],#100
  jne @f
  mov [rcx+0C],#222 //health
  mov [rcx+3C],#111 //stamina
  mov [rcx+CC],#123 //legion
code:
  mov eax,[rcx+0C]
  add rsp,20
  jmp return

address:
  jmp newmem
  nop 2
return:

[DISABLE]

address:
  db bytes
  // mov eax,[rcx+0C]
  // add rsp,20

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: LOP-Win64-Shipping.exe+15CCF61

LOP-Win64-Shipping.exe+15CCF4A: 8B C1        - mov eax,ecx
LOP-Win64-Shipping.exe+15CCF4C: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF50: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF51: C3           - ret 
LOP-Win64-Shipping.exe+15CCF52: 80 79 14 00  - cmp byte ptr [rcx+14],00
LOP-Win64-Shipping.exe+15CCF56: 74 09        - je LOP-Win64-Shipping.exe+15CCF61
LOP-Win64-Shipping.exe+15CCF58: 8B 41 10     - mov eax,[rcx+10]
LOP-Win64-Shipping.exe+15CCF5B: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF5F: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF60: C3           - ret 
// ---------- INJECTING HERE ----------
LOP-Win64-Shipping.exe+15CCF61: 8B 41 0C     - mov eax,[rcx+0C]
// ---------- DONE INJECTING  ----------
LOP-Win64-Shipping.exe+15CCF64: 48 83 C4 20  - add rsp,20
LOP-Win64-Shipping.exe+15CCF68: 5B           - pop rbx
LOP-Win64-Shipping.exe+15CCF69: C3           - ret 
LOP-Win64-Shipping.exe+15CCF6A: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6B: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6C: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6D: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6E: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF6F: CC           - int 3 
LOP-Win64-Shipping.exe+15CCF70: 0F 57 C0     - xorps xmm0,xmm0
}

Thank you! Works great.

[gmendezm]

Walk through walls to keep playing the demo ?

[hzlleo123]

Hi after I compared the offset between the old and new script from OP, I locate the damage bounes at offset FC (use HP addr - C as structure base addr)
This is the table I seperated the OP script (HP and SP) into separeted scripts, added inf energy, weapon durability, and restored original damage hack into an individual script

LOP-Win64-Shipping.CT

(159.83 KiB) Downloaded 473 times

[jpeg9999]

Walk through walls to keep playing the demo ?

Not much beyond the locked door. Using save file analysis, I was able to find position values. No enemies or items out there, some missing textures and flooring which you can fall through.

[gmendezm]

Walk through walls to keep playing the demo ?

Not much beyond the locked door. Using save file analysis, I was able to find position values. No enemies or items out there, some missing textures and flooring which you can fall through.

thanks for the info and the save files. well played Round8 Studio, as expected

[SunBeam]

Walk through walls to keep playing the demo ?

Not much beyond the locked door. Using save file analysis, I was able to find position values. No enemies or items out there, some missing textures and flooring which you can fall through.

Games nowadays use triggers to generate content in areas that haven't spawned yet. So that trigger might be the door unlocking legitly. But since it's not implemented in the demo, no dice. No clipping through locked doors or walls won't work like it did in old games, from years ago.

Can any of you zip the demo and upload it someplace, like mega.nz or similar? Seems it's not available on Steam anymore for download.