[REQ]The Universim BETA

[jungletek]

I've actually been wondering recently if you can do an AOB wildcard scan, copy the relevant bytes from the matched AOB to a variable that the script checks for and uses in the logic, and also writes back the correct bytes on disable.

Might have to try it out, though there might be issues with the AA not being able to generate code because it can't figure out what to generate.

[seikur0]

I did that before, because I really had to for one certain thing. Since you backup the assembler code directly, AA isn't involved at all. In general I'd avoid doing it, use the wildcards to scan for a location but then inject slightly lower, where offsets don't change in the code.

[narcolepticnerd]

god power is offset 5C and its usually shown with rdi or rsi it looks like its a float. something like movss [rsi+5C], it might actually be easier to hack god power by using mono dissector that way you dont have to mess with aob scans

[narcolepticnerd]

ok this code words infinite god power, you must have at least 2 already then you activate the script and pull a tree and poof infinite 999 god power and i tested it on everything.

I would search for the value first before using this cause if you try to use it before you have any power it shows a NaN

Code: Select all

{ Game   : The Universim.exe
  Version: 
  Date   : 2017-12-21
  Author : Forrest

  This script does blah blah blah
}

[ENABLE]

aobscan(godpower,F3 0F 11 6F 5C B8) // should be unique
alloc(newmem,$1000,F8C1B8B3)

label(code)
label(return)

alloc(godp,4)

godp:
dd (float)999
newmem:


code:
fld dword ptr [godp]
fstp dword ptr [rdi+5C]
//  movss [rdi+5C],xmm5
  jmp return

godpower:
  jmp newmem
return:
registersymbol(godpower)

[DISABLE]

godpower:
  db F3 0F 11 6F 5C

unregistersymbol(godpower)
dealloc(newmem)
dealloc(godp)
{
// ORIGINAL CODE - INJECTION POINT: F8C1B8B3

F8C1B887: F3 0F 11 6D EC                 -  movss [rbp-14],xmm5
F8C1B88C: F3 0F 10 45 EC                 -  movss xmm0,[rbp-14]
F8C1B891: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
F8C1B895: F2 0F 2A CE                    -  cvtsi2sd xmm1,esi
F8C1B899: F2 0F 5C C1                    -  subsd xmm0,xmm1
F8C1B89D: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
F8C1B8A1: F3 0F 11 6D EC                 -  movss [rbp-14],xmm5
F8C1B8A6: F3 0F 10 45 EC                 -  movss xmm0,[rbp-14]
F8C1B8AB: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
F8C1B8AF: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
F8C1B8B3: F3 0F 11 6F 5C                 -  movss [rdi+5C],xmm5
// ---------- DONE INJECTING  ----------
F8C1B8B8: B8 01 00 00 00                 -  mov eax,00000001
F8C1B8BD: 48 8D 65 F0                    -  lea rsp,[rbp-10]
F8C1B8C1: 5F                             -  pop rdi
F8C1B8C2: 5E                             -  pop rsi
F8C1B8C3: C9                             -  leave 
F8C1B8C4: C3                             -  ret 
F8C1B8C5: 00 00                          -  add [rax],al
F8C1B8C7: 00 00                          -  add [rax],al
F8C1B8C9: 00 00                          -  add [rax],al
F8C1B8CB: 00 B5 00 00 00 C4              -  add [rbp-3C000000],dh
}

[Blayde]

code:
fld dword ptr [godp]
fstp dword ptr [rdi+5C]
// movss [rdi+5C],xmm5
jmp return

You dont need this
--------------------
alloc(godp,4)
godp:
dd (float)999
newmem:

Just
----
code:
mov [rdi+5C],(float)999
jmp return

[narcolepticnerd]

code:
fld dword ptr [godp]
fstp dword ptr [rdi+5C]
// movss [rdi+5C],xmm5
jmp return

You dont need this
--------------------
alloc(godp,4)
godp:
dd (float)999
newmem:

Just
----
code:
mov [rdi+5C],(float)999
jmp return

cool now I just need to find a better aob injection location, that one I have is not very stable it changes cause of some of the bytes changing.

[fantomas]

ok this code words infinite god power, you must have at least 2 already then you activate the script and pull a tree and poof infinite 999 god power and i tested it on everything.

I would search for the value first before using this cause if you try to use it before you have any power it shows a NaN

Code: Select all

{ Game   : The Universim.exe
  Version: 
  Date   : 2017-12-21
  Author : Forrest

  This script does blah blah blah
}

[ENABLE]

aobscan(godpower,F3 0F 11 6F 5C B8) // should be unique
alloc(newmem,$1000,F8C1B8B3)

label(code)
label(return)

alloc(godp,4)

godp:
dd (float)999
newmem:


code:
fld dword ptr [godp]
fstp dword ptr [rdi+5C]
//  movss [rdi+5C],xmm5
  jmp return

godpower:
  jmp newmem
return:
registersymbol(godpower)

[DISABLE]

godpower:
  db F3 0F 11 6F 5C

unregistersymbol(godpower)
dealloc(newmem)
dealloc(godp)
{
// ORIGINAL CODE - INJECTION POINT: F8C1B8B3

F8C1B887: F3 0F 11 6D EC                 -  movss [rbp-14],xmm5
F8C1B88C: F3 0F 10 45 EC                 -  movss xmm0,[rbp-14]
F8C1B891: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
F8C1B895: F2 0F 2A CE                    -  cvtsi2sd xmm1,esi
F8C1B899: F2 0F 5C C1                    -  subsd xmm0,xmm1
F8C1B89D: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
F8C1B8A1: F3 0F 11 6D EC                 -  movss [rbp-14],xmm5
F8C1B8A6: F3 0F 10 45 EC                 -  movss xmm0,[rbp-14]
F8C1B8AB: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
F8C1B8AF: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
F8C1B8B3: F3 0F 11 6F 5C                 -  movss [rdi+5C],xmm5
// ---------- DONE INJECTING  ----------
F8C1B8B8: B8 01 00 00 00                 -  mov eax,00000001
F8C1B8BD: 48 8D 65 F0                    -  lea rsp,[rbp-10]
F8C1B8C1: 5F                             -  pop rdi
F8C1B8C2: 5E                             -  pop rsi
F8C1B8C3: C9                             -  leave 
F8C1B8C4: C3                             -  ret 
F8C1B8C5: 00 00                          -  add [rax],al
F8C1B8C7: 00 00                          -  add [rax],al
F8C1B8C9: 00 00                          -  add [rax],al
F8C1B8CB: 00 B5 00 00 00 C4              -  add [rbp-3C000000],dh
}

Hi

The GodPowerPoints maxValue is 1000 - You can find that value at this address: Game.Faith:FaithController:UpdateGodPowerPoints+1ef

You'll have to active mono feature (Mono tab) to see it. The opcode is movss xmm1,[rax+54] and the array of byte is F3 0F 10 48 54.

Here the script:

Code: Select all

// Game: The Universim
// Version: 0.0.23.12027 EL PACINO

[ENABLE]
Game.Faith:FaithController:UpdateGodPowerPoints+199:
  db EB 4F 90 90 90
//jmp Game.Faith:FaithController:UpdateGodPowerPoints+1ef    //a.k.a movss xmm1,[rsi+54]  <== maxGodPowerPoints [1000]
 
[DISABLE]
Game.Faith:FaithController:UpdateGodPowerPoints+199:
  db F3 0F 11 6E 5C
//movss [rsi+5C],xmm5      <== currentGodPowerPoints

[akrazant]

is there update for v23? I try v22 on game v23 but its not work

[Mrt19]

same problem

[srattex]

Any table update guys??? Thanks!

[Sylvtreeya]

please update to v23

[Mrt19]

any new updates xD?

[Hunter]

When is there gonna be a cheat enging for v23 of universuim ?

[Pongozila]

APLHA VERSION 0.0.25.14735 HUFF AND PUFF (+5 TABLE)

- 1000 Mana
- 99 extra resources on constructing a building
- Forever Young
- Instant Research Main
- Instant Research Secondary


Enjoy!

[fantomas]

Spoiler

Sorry guys,

I planned to upload v23 cheat table but never found free time to finish it. Then I saw v24 had been released and I bring a small fixes. Now I saw v25 is out and I'm really afraid not be able to finish it.

So I'll upload here my current v24 (0.0.24.13816) cheat table and let someone to update it for v25 - otherwise, just ignore it.

Update1:

CT has been updated to support the latest v0.0.26.19629

Update2:

CT has been updated to support the latest v0.0.26.19673

Update3:

CT has been updated to support the latest v0.0.26.19695

Update4:

CT has been updated to support the latest v0.0.27.20828

Update5:

CT has been updated to support the latest v0.0.28.21617

Update6:

CT has been updated to support the latest v0.0.29.22390

Update7:

CT has been updated to support the latest v0.0.30.23398

Update8:

CT has been updated to support the latest v0.0.31.23618

Update9:

CT has been updated to support the latest v0.0.32.24023 [ Apr 02, 2019 ]

Update10:

CT has been updated to support the latest v0.0.33.24604 [ May 10, 2019 ]

Update11:

CT has been updated to support the latest v0.0.34.25006 [ June 5, 2019 ]
Update12:

CT has been updated to support the latest v0.0.35.25401 [ June 30, 2019 ]

Update13:

CT has been updated to support the latest v0.0.36.26447 [ Sep 14, 2019 ]

Update14:

CT has been updated to support the latest v0.0.38.27599 [ Nov 06, 2019 ]

Update15:

CT has been updated to support the latest v0.0.39.29383 [ Feb 04, 2020 ]

Update16:

CT has been updated to support the latest v0.0.43.33052 [ Aug 18, 2020 ]

Update17:

CT has been updated to support the latest v0.0.47.36117 [ Feb 19, 2021 ]

Update18:

CT has been updated to support the latest game update v0.0.50.38461 [ July 28, 2021 ]

Update19:

CT has been updated to support the latest game update v0.1.51.38956 [ September 15, 2021 ] New!



Toogle Debug Panel - No longer work!!!