food for yall
Replace Genshin Impact 2020/10/27 script with this script, should be work for freeze and also player speedhack
Code: Select all
{ Game : GenshinImpact.exe
Version:
Date : 2020-10-22
Author : MGGA
This script does blah blah blah
}
[ENABLE]
aobscanmodule(speed,UnityPlayer.dll,F3 0F 10 81 0C 03 00 00 C3) // should be unique
alloc(newmem,$1000,speed)
label(code)
label(return)
alloc(Doublespeedv,12)
newmem:
code:
movss xmm0,[rcx+0000030C]
mov [Doublespeedv],rcx
jmp return
speed:
jmp newmem
nop
nop
nop
return:
registersymbol(speed)
registersymbol(Doublespeedv)
/*--------------------------------------------------------------------------------------------*/
aobscanmodule(doublespeed,UnityPlayer.dll,8B 87 0C 03 00 00 89 01 80) // should be unique
alloc(newmem2,$1000,doublespeed)
label(code2)
label(return2)
alloc(OnDoublespeed,2048)
alloc(etcDoublespeed,2048)
alloc(XDoublespeed,2048)
alloc(MyDoublespeedv2,12)
alloc(EtcDoublespeedv,12)
alloc(XDoublespeedv,12)
registersymbol(MyDoublespeedv2)
registersymbol(EtcDoublespeedv)
registersymbol(XDoublespeedv)
newmem2:
cmp rdi,[Doublespeedv]
je OnDoublespeed
cmp byte ptr [rdi+328],01
je etcDoublespeed
mov eax,[EtcDoublespeedv]
jmp return2
etcDoublespeed:
cmp byte ptr [rdi+358],00
jne XDoublespeed
mov eax,[EtcDoublespeedv]
jmp return2
XDoublespeed:
mov eax,[XDoublespeedv]
mov [rdi+0000030C],eax
jmp return2
OnDoublespeed:
mov eax,[MyDoublespeedv2]
mov [rdi+0000030C],eax
jmp return2
code2:
mov eax,[rdi+0000030C]
jmp return2
MyDoublespeedv2:
dd (float)1
EtcDoublespeedv:
dd (float)1
XDoublespeedv:
dd (float)1
doublespeed:
jmp newmem2
nop
return2:
registersymbol(doublespeed)
[DISABLE]
speed:
db F3 0F 10 81 0C 03 00 00
unregistersymbol(speed)
dealloc(newmem)
/*-------------------------*/
doublespeed:
db 8B 87 0C 03 00 00
unregistersymbol(doublespeed)
dealloc(newmem2)
{
// ORIGINAL CODE - INJECTION POINT: "UnityPlayer.dll"+B2F1E0
"UnityPlayer.dll"+B2F1D6: CC - int 3
"UnityPlayer.dll"+B2F1D7: CC - int 3
"UnityPlayer.dll"+B2F1D8: CC - int 3
"UnityPlayer.dll"+B2F1D9: CC - int 3
"UnityPlayer.dll"+B2F1DA: CC - int 3
"UnityPlayer.dll"+B2F1DB: CC - int 3
"UnityPlayer.dll"+B2F1DC: CC - int 3
"UnityPlayer.dll"+B2F1DD: CC - int 3
"UnityPlayer.dll"+B2F1DE: CC - int 3
"UnityPlayer.dll"+B2F1DF: CC - int 3
// ---------- INJECTING HERE ----------
"UnityPlayer.dll"+B2F1E0: F3 0F 10 81 0C 03 00 00 - movss xmm0,[rcx+0000030C]
// ---------- DONE INJECTING ----------
"UnityPlayer.dll"+B2F1E8: C3 - ret
"UnityPlayer.dll"+B2F1E9: CC - int 3
"UnityPlayer.dll"+B2F1EA: CC - int 3
"UnityPlayer.dll"+B2F1EB: CC - int 3
"UnityPlayer.dll"+B2F1EC: CC - int 3
"UnityPlayer.dll"+B2F1ED: CC - int 3
"UnityPlayer.dll"+B2F1EE: CC - int 3
"UnityPlayer.dll"+B2F1EF: CC - int 3
"UnityPlayer.dll"+B2F1F0: 80 B9 3D 01 00 00 00 - cmp byte ptr [rcx+0000013D],00
"UnityPlayer.dll"+B2F1F7: 75 03 - jne UnityPlayer.dll+B2F1FC
}
{
// ORIGINAL CODE - INJECTION POINT: "UnityPlayer.dll"+B26298
"UnityPlayer.dll"+B2626F: 48 8B CF - mov rcx,rdi
"UnityPlayer.dll"+B26272: E8 39 34 00 00 - call UnityPlayer.dll+B296B0
"UnityPlayer.dll"+B26277: 83 BF EC 00 00 00 00 - cmp dword ptr [rdi+000000EC],00
"UnityPlayer.dll"+B2627E: 74 20 - je UnityPlayer.dll+B262A0
"UnityPlayer.dll"+B26280: 48 8B 87 98 04 00 00 - mov rax,[rdi+00000498]
"UnityPlayer.dll"+B26287: 48 85 C0 - test rax,rax
"UnityPlayer.dll"+B2628A: 74 14 - je UnityPlayer.dll+B262A0
"UnityPlayer.dll"+B2628C: 48 8B 88 F0 00 00 00 - mov rcx,[rax+000000F0]
"UnityPlayer.dll"+B26293: 48 85 C9 - test rcx,rcx
"UnityPlayer.dll"+B26296: 74 08 - je UnityPlayer.dll+B262A0
// ---------- INJECTING HERE ----------
"UnityPlayer.dll"+B26298: 8B 87 0C 03 00 00 - mov eax,[rdi+0000030C]
// ---------- DONE INJECTING ----------
"UnityPlayer.dll"+B2629E: 89 01 - mov [rcx],eax
"UnityPlayer.dll"+B262A0: 80 BF D0 00 00 00 00 - cmp byte ptr [rdi+000000D0],00
"UnityPlayer.dll"+B262A7: 0F 84 81 02 00 00 - je UnityPlayer.dll+B2652E
"UnityPlayer.dll"+B262AD: 45 84 FF - test r15l,r15l
"UnityPlayer.dll"+B262B0: 74 22 - je UnityPlayer.dll+B262D4
"UnityPlayer.dll"+B262B2: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
"UnityPlayer.dll"+B262B9: 80 B8 A4 00 00 00 00 - cmp byte ptr [rax+000000A4],00
"UnityPlayer.dll"+B262C0: 75 1F - jne UnityPlayer.dll+B262E1
"UnityPlayer.dll"+B262C2: 80 BF D1 00 00 00 00 - cmp byte ptr [rdi+000000D1],00
"UnityPlayer.dll"+B262C9: 75 16 - jne UnityPlayer.dll+B262E1
}