Here's a Krypt unlocker, it just makes the Koin Chests cost 1.
Code: Select all
{
Process : MK11.exe - (x64)
Module : MK11.exe
Game Title : MK11
Game Version : 1.0.0.0
CE Version : 6.83
Script Version : 0.0.1
Date : 04/25/19
Author : ShyTwig16
Name : KryptChestReadHook
Krypt Chest Read Hook
}
{$STRICT}
define(address, MK11.exe+8E87480)
define(bytes, 8B 96 88 04 00 00)
////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobKryptChestReadHook, MK11.exe, 48xxxxFFxx8Bxxxxxxxxxx8Bxxxxxxxxxx8Bxxxxxxxxxx41xxxxxx75)
define(injKryptChestReadHook, aobKryptChestReadHook+5)
assert(injKryptChestReadHook, bytes)
registerSymbol(injKryptChestReadHook)
alloc(memKryptChestReadHook, 0x400, injKryptChestReadHook)
label(intKryptChestReadHook)
registerSymbol(intKryptChestReadHook)
label(ptrKryptChestReadHook)
registerSymbol(ptrKryptChestReadHook)
label(n_code)
label(o_code)
label(exit)
label(return)
memKryptChestReadHook:
intKryptChestReadHook:
dd (int)1
align 10
ptrKryptChestReadHook:
dq 0
align 10 CC
n_code:
mov [ptrKryptChestReadHook],rsi
mov edx,[intKryptChestReadHook]
mov [rsi+488],edx
o_code:
// mov edx,[rsi+00000488]
exit:
jmp return
////
//// ---------- Injection Point ----------
injKryptChestReadHook:
jmp n_code
nop
return:
////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injKryptChestReadHook:
db bytes
unregisterSymbol(injKryptChestReadHook)
unregisterSymbol(intKryptChestReadHook)
unregisterSymbol(ptrKryptChestReadHook)
dealloc(memKryptChestReadHook)
{
//// Injection Point: MK11.exe+8E87480 - 0000000148E87480
//// AOB address: 0000000148E8747B - MK11.exe+8E8747B
//// Process: MK11.exe - 0000000140000000
//// Module: MK11.exe - 0000000140000000
//// Module Size: 0000000017EBE000
MK11.exe+8E87439: C1 E8 0F - shr eax,0F
MK11.exe+8E8743C: F6 D0 - not al
MK11.exe+8E8743E: 24 01 - and al,01
MK11.exe+8E87440: 48 8B 5C 24 30 - mov rbx,[rsp+30]
MK11.exe+8E87445: 48 8B 74 24 38 - mov rsi,[rsp+38]
MK11.exe+8E8744A: 48 83 C4 20 - add rsp,20
MK11.exe+8E8744E: 5F - pop rdi
MK11.exe+8E8744F: C3 - ret
MK11.exe+8E87450: 48 89 F1 - mov rcx,rsi
MK11.exe+8E87453: E8 383C96F7 - call 1407EB090
MK11.exe+8E87458: 41 89 C0 - mov r8d,eax
MK11.exe+8E8745B: FF C8 - dec eax
MK11.exe+8E8745D: 83 F8 16 - cmp eax,16
MK11.exe+8E87460: 77 1E - ja 148E87480
MK11.exe+8E87462: 48 63 C8 - movsxd rcx,eax
MK11.exe+8E87465: 48 8D 05 948B17F7 - lea rax,[140000000] [00905A4D]
MK11.exe+8E8746C: 0FB6 8C 08 4CBE7E00 - movzx ecx,byte ptr [rax+rcx+007EBE4C]
MK11.exe+8E87474: 8B 94 88 44BE7E00 - mov edx,[rax+rcx*4+007EBE44]
MK11.exe+8E8747B: 48 01 C2 - add rdx,rax <<<--- AOB Starts Here
MK11.exe+8E8747E: FF E2 - jmp rdx
//// INJECTING START ----------------------------------------------------------
MK11.exe+8E87480: 8B 96 88040000 - mov edx,[rsi+00000488]
//// INJECTING END ----------------------------------------------------------
MK11.exe+8E87486: 8B 8E B8040000 - mov ecx,[rsi+000004B8]
MK11.exe+8E8748C: 8B 86 E8040000 - mov eax,[rsi+000004E8]
MK11.exe+8E87492: 41 83 F8 0C - cmp r8d,0C
MK11.exe+8E87496: 75 3C - jne 148E874D4
MK11.exe+8E87498: 85 C9 - test ecx,ecx
MK11.exe+8E8749A: 7E 1A - jle 148E874B6
MK11.exe+8E8749C: C7 07 02000000 - mov [rdi],00000002
MK11.exe+8E874A2: B0 01 - mov al,01
MK11.exe+8E874A4: 89 0B - mov [rbx],ecx
MK11.exe+8E874A6: 48 8B 5C 24 30 - mov rbx,[rsp+30]
MK11.exe+8E874AB: 48 8B 74 24 38 - mov rsi,[rsp+38]
MK11.exe+8E874B0: 48 83 C4 20 - add rsp,20
MK11.exe+8E874B4: 5F - pop rdi
MK11.exe+8E874B5: C3 - ret
MK11.exe+8E874B6: 85 C0 - test eax,eax
MK11.exe+8E874B8: 7E 24 - jle 148E874DE
MK11.exe+8E874BA: C7 07 03000000 - mov [rdi],00000003
MK11.exe+8E874C0: 89 03 - mov [rbx],eax
MK11.exe+8E874C2: B0 01 - mov al,01
MK11.exe+8E874C4: 48 8B 5C 24 30 - mov rbx,[rsp+30]
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}