Code: Select all
//488B80xxxxxxxx488B4018488BC8833800488D6424009049BBxxxxxxxxxxxxxxxx41FFD3F3xxxxC0
define(address,EntityAlive:get_Stamina+f )
define(bytes,48 8B 80 B0 05 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,EntityAlive:get_Stamina+f )
label(code)
label(return)
newmem:
mov rax,[rax+000005B0] // EntityStats
cmp [rax+91],1 // m_isEntityPlayer
jne return
mov rcx,[rax+18]
movss xmm0, [rcx+20] // m_baseMax (type: System.Single)
movss [rcx+2c], xmm0 // m_value (type: System.Single)
code:
jmp return
address:
jmp newmem
nop 2
return:
[DISABLE]
address:
db bytes
// mov rax,[rax+000005B0]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: EntityAlive:get_Stamina+f
22BDFCE43: 05 04 03 01 50 - add eax,50010304
22BDFCE48: 00 00 - add [rax],al
22BDFCE4A: 00 00 - add [rax],al
22BDFCE4C: 00 00 - add [rax],al
22BDFCE4E: 00 00 - add [rax],al
22BDFCE50: 55 - push rbp
22BDFCE51: 48 8B EC - mov rbp,rsp
22BDFCE54: 48 83 EC 30 - sub rsp,30
22BDFCE58: 48 89 4D F8 - mov [rbp-08],rcx
22BDFCE5C: 48 8B C1 - mov rax,rcx
// ---------- INJECTING HERE ----------
22BDFCE5F: 48 8B 80 B0 05 00 00 - mov rax,[rax+000005B0]
// ---------- DONE INJECTING ----------
22BDFCE66: 48 8B 40 18 - mov rax,[rax+18]
22BDFCE6A: 48 8B C8 - mov rcx,rax
22BDFCE6D: 83 38 00 - cmp dword ptr [rax],00
22BDFCE70: 48 8D 64 24 00 - lea rsp,[rsp+00]
22BDFCE75: 90 - nop
22BDFCE76: 49 BB 40 3B E0 11 02 00 00 00 - mov r11,0000000211E03B40
22BDFCE80: 41 FF D3 - call r11
22BDFCE83: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
22BDFCE87: F2 0F 5A C0 - cvtsd2ss xmm0,xmm0
22BDFCE8B: 48 8D 65 00 - lea rsp,[rbp+00]
}