Public Pastes
SHARE
TWEET

Untitled

a guest Oct 28th, 2017 227 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [ENABLE]
  2.  
  3. aobscanmodule(_Health,SouthPark_TFBW.exe,83 78 24 00 0F 9E C0 C3) // should be unique
  4. aobscanmodule(_Money,SouthPark_TFBW.exe,FD FF 4C 8B C0 8B 0B 41 89 08)
  5. aobscanmodule(_OneHitKills,SouthPark_TFBW.exe,83 7E 24 00 40 0F 9E C7)
  6. aobscanmodule(_Teleport,SouthPark_TFBW.exe,F3 0F 10 A3 80 00 00 00 F3 0F 10 AB 84)
  7. aobscanmodule(_EnemyTeleport,SouthPark_TFBW.exe,F3 44 0F 10 88 80 00 00 00 * * * * A0)
  8. aobscanmodule(_MassiveItemsCrafting,SouthPark_TFBW.exe,C7 8B 41 0C 89 43 0C)
  9. //aobscanmodule(_ShitOMeter,SouthPark_TFBW.exe,8B 02 89 01 F3 C3 CC CC CC CC CC E9 8B)
  10. //aobscanmodule(_Experience,SouthPark_TFBW.exe,8B 98 28 12 00 00)
  11. //aobscanmodule(_PowerBar,SouthPark_TFBW.exe,F3 0F 10 71 08 E8 71)
  12. aobscanmodule(_FartOMeter,SouthPark_TFBW.exe,8B 02 89 01 F3 C3 CC CC CC CC CC E9 1B)
  13. aobscanmodule(_CraftingExp,SouthPark_TFBW.exe,8B 81 3C 12 00 00)
  14. alloc(newmemHealth,$1000,SouthPark_TFBW.exe)
  15. alloc(newmemMoney,$1000,SouthPark_TFBW.exe)
  16. alloc(newmemOneHitKills,$1000,SouthPark_TFBW.exe)
  17. alloc(newmemTeleport,$1000,SouthPark_TFBW.exe)
  18. alloc(newmemEnemyTeleport,$1000,SouthPark_TFBW.exe)
  19. alloc(newmemMassiveItems,$1000,SouthPark_TFBW.exe)
  20. //alloc(newmemShitOMeter,$1000,SouthPark_TFBW.exe)
  21. //alloc(newmemExperience,$1000,SouthPark_TFBW.exe)
  22. //alloc(newmemPower,$1000,SouthPark_TFBW.exe)
  23. alloc(newmemFart,$1000,SouthPark_TFBW.exe)
  24. alloc(newmemCraftingExp,$1000,SouthPark_TFBW.exe)
  25. alloc(_pPlayer,8)
  26. alloc(_GodMode,8)
  27. alloc(_AddMoney,8)
  28. alloc(_pMoney,8)
  29. alloc(_enableOneHitKills,8)
  30. alloc(_X_Coord,8)
  31. alloc(_Y_Coord,8)
  32. alloc(_Z_Coord,8)
  33. alloc(_X_Coord_Undo,8)
  34. alloc(_Y_Coord_Undo,8)
  35. alloc(_Z_Coord_Undo,8)
  36. alloc(_SavePosition,8)
  37. alloc(_LoadPosition,8)
  38. alloc(_UndoTeleport,8)
  39. alloc(_pCoords,8)
  40. alloc(_enableMassiveItems,8)
  41. alloc(_enableEnemyTeleport,8)
  42. //alloc(_enableShitOMeter,8)
  43. //alloc(_AddExp,8)
  44. //alloc(_pExp,8)
  45. //alloc(_enableFullPower,8)
  46. alloc(_enableFartOMeter,8)
  47. alloc(_AddCraftingExp,8)
  48. alloc(_pCraftingExp,8)
  49. Registersymbol(_pPlayer)
  50. registersymbol(_Health)
  51. Registersymbol(_GodMode)
  52. registersymbol(_AddMoney)
  53. registersymbol(_pMoney)
  54. registersymbol(_Money)
  55. registersymbol(_enableOneHitKills)
  56. registersymbol(_OneHitKills)
  57. registersymbol(_Teleport)
  58. Registersymbol(_X_Coord)
  59. Registersymbol(_Y_Coord)
  60. Registersymbol(_Z_Coord)
  61. Registersymbol(_X_Coord_Undo)
  62. Registersymbol(_Y_Coord_Undo)
  63. Registersymbol(_Z_Coord_Undo)
  64. Registersymbol(_SavePosition)
  65. Registersymbol(_LoadPosition)
  66. Registersymbol(_UndoTeleport)
  67. Registersymbol(_pCoords)
  68. registersymbol(_enableEnemyTeleport)
  69. registersymbol(_EnemyTeleport)
  70. registersymbol(_MassiveItemsCrafting)
  71. registersymbol(_enableMassiveItems)
  72. //registersymbol(_enableShitOMeter)
  73. //registersymbol(_ShitOMeter)
  74. //registersymbol(_Experience)
  75. //registersymbol(_AddExp)
  76. //registersymbol(_pExp)
  77. //registersymbol(_PowerBar)
  78. //registersymbol(_enableFullPower)
  79. registersymbol(_enableFartOMeter)
  80. registersymbol(_FartOMeter)
  81. registersymbol(_CraftingExp)
  82. registersymbol(_AddCraftingExp)
  83. registersymbol(_pCraftingExp)
  84. label(codeHealth)
  85. label(returnHealth)
  86. label(codeMoney)
  87. label(returnMoney)
  88. label(AddMoney)
  89. label(codeOneHitKills)
  90. label(returnOneHitKills)
  91. label(codeTeleport)
  92. label(returnTeleport)
  93. label(Save)
  94. label(Load)
  95. label(Undo)
  96. label(codeEnemyTeleport)
  97. label(returnEnemyTeleport)
  98. label(codeMassiveItems)
  99. label(returnMassiveItems)
  100. //label(codeShitOMeter)
  101. //label(returnShitOMeter)
  102. //label(codeExperience)
  103. //label(returnExperience)
  104. //label(AddExp)
  105. //label(codePower)
  106. //label(returnPower)
  107. label(codeFart)
  108. label(returnFart)
  109.  
  110. newmemHealth:
  111. {
  112. 60 - int ...... 0 = Enemy, 20 Player
  113. 14c - float .... 1 = Enemy ,1.200000048 player
  114. 14c - float .... 0 = Enemy ,0.150000006 player
  115.  
  116. }
  117. cmp [rax+14c],(float)1
  118. je codeHealth
  119. mov [_pPlayer],rax
  120. cmp byte ptr [_GodMode],1
  121. jne codeHealth
  122. push rbx
  123. mov rbx,[rax+20]
  124. mov [rax+24],rbx
  125. pop rbx
  126.  
  127. codeHealth:
  128.   cmp dword ptr [rax+24],00
  129.   setle al
  130.   jmp returnHealth
  131.  
  132. newmemMoney:
  133. mov [_pMoney],rbx
  134. cmp byte ptr [_AddMoney],1
  135. je AddMoney
  136. jmp codeMoney
  137.  
  138. AddMoney:
  139. mov byte ptr [_AddMoney],0
  140. add dword ptr [rbx],#10000
  141. jmp codeMoney
  142.  
  143. codeMoney:
  144.   mov ecx,[rbx]
  145.   mov [r8],ecx
  146.   jmp returnMoney
  147.  
  148. newmemOneHitKills:
  149. {
  150. 60 - int ...... 0 = Enemy, 20 Player
  151. 14c - float .... 1 = Enemy ,1.200000048 player
  152. 14c - float .... 0 = Enemy ,0.150000006 player
  153.  
  154. }
  155. cmp dword ptr [rsi+14c],(int)1067030938
  156. je codeOneHitKills
  157. cmp byte ptr [_enableOneHitKills],1
  158. jne codeOneHitKills
  159. mov [rsi+24],0
  160.  
  161. codeOneHitKills:
  162.   cmp dword ptr [rsi+24],00
  163.   setle dil
  164.   jmp returnOneHitKills
  165.  
  166. newmemTeleport:
  167. mov [_pCoords],rbx
  168. cmp byte ptr [_SavePosition],1
  169. je Save
  170. cmp byte ptr [_LoadPosition],1
  171. je Load
  172. cmp byte ptr [_UndoTeleport],1
  173. je Undo
  174. jmp codeTeleport
  175.  
  176. Save:
  177. mov byte ptr [_SavePosition],0
  178. movss xmm6,[rbx+00000080]
  179. movss [_X_Coord],xmm6
  180. movss xmm6,[rbx+00000084]
  181. movss [_Y_Coord],xmm6
  182. movss xmm6,[rbx+00000088]
  183. movss [_Z_Coord],xmm6
  184. jmp codeTeleport
  185.  
  186. Load:
  187. mov byte ptr [_LoadPosition],0
  188. // Save again
  189. movss xmm6,[rbx+00000080]
  190. movss [_X_Coord_Undo],xmm6
  191. movss xmm6,[rbx+00000084]
  192. movss [_Y_Coord_Undo],xmm6
  193. movss xmm6,[rbx+00000088]
  194. movss [_Z_Coord_Undo],xmm6
  195. // Do undo Teleport
  196. movss xmm6,[_X_Coord]
  197. movss [rbx+00000080],xmm6
  198. movss xmm6,[_Y_Coord]
  199. movss [rbx+00000084],xmm6
  200. movss xmm6,[_Z_Coord]
  201. movss [rbx+00000088],xmm6
  202. jmp codeTeleport
  203.  
  204. Undo:
  205. mov byte ptr [_UndoTeleport],0
  206. movss xmm6,[_X_Coord_Undo]
  207. movss [rbx+00000080],xmm6
  208. movss xmm6,[_Y_Coord_Undo]
  209. movss [rbx+00000084],xmm6
  210. movss xmm6,[_Z_Coord_Undo]
  211. movss [rbx+00000088],xmm6
  212. jmp codeTeleport
  213.  
  214.  
  215.  
  216. newmemEnemyTeleport:
  217. {
  218. 20 - int, 3 = others, 0 Player
  219. CC - float, 1 = Others, 10 Player
  220. 171 byte, 255 = Others, 0 Player
  221. 172 byte, 127 = Others, 128 Player
  222. 1e0 int, 1419367904 = Others, 0 Player
  223. 1e4 int, 1 = Others, 0 Player
  224. 2b4 int, 129 = Others, 0 player
  225. 3f4 int, 129 = Others, 0 Player
  226. 400 int, 0 = Others, 1 Player
  227. 5af int, 0 = Others, 1 Player
  228. }
  229. cmp [rax+20],0 // Player
  230. je codeEnemyTeleport
  231. cmp [_enableEnemyTeleport],1
  232. jne codeEnemyTeleport
  233. movss xmm6,[_X_Coord]
  234. movss [rax+00000080],xmm6
  235. movss xmm6,[_Y_Coord]
  236. movss [rax+00000084],xmm6
  237. movss xmm6,[_Z_Coord]
  238. movss [rax+00000088],xmm6
  239.  
  240.  
  241. codeEnemyTeleport:
  242.   movss xmm9,[rax+00000080]
  243.   jmp returnEnemyTeleport
  244.  
  245. newmemMassiveItems:
  246. cmp byte ptr [_enableMassiveItems],1
  247. jne codeMassiveItems
  248. mov [rcx+0C],#99
  249. codeMassiveItems:
  250.   mov eax,[rcx+0C]
  251.   mov [rbx+0C],eax
  252.   jmp returnMassiveItems
  253.  
  254. {newmemShitOMeter:
  255. cmp byte ptr [_enableShitOMeter],1
  256. jne codeShitOMeter
  257. //ShitOMeter
  258. cmp [rdx+40],(int)1666414957 // String = "MyScore"
  259. jne codeShitOMeter
  260. push rbx
  261. mov rbx,[rdx+118] // 118 Holds Max Shit-O-Meter Value
  262. mov [rdx],rbx
  263. pop rbx
  264. codeShitOMeter:
  265.   mov eax,[rdx]
  266.   mov [rcx],eax
  267.   repe ret
  268.   jmp returnShitOMeter
  269.  
  270. newmemExperience:
  271. mov [_pExp],rax
  272. cmp byte ptr [_AddExp],1
  273. je AddExp
  274. jmp codeExperience
  275.  
  276. AddExp:
  277. mov byte ptr [_AddExp],0
  278. add dword ptr [rax+00001228],#10000
  279. jmp codeExperience
  280.  
  281. codeExperience:
  282.   mov ebx,[rax+00001228]
  283.   jmp returnExperience}
  284.  
  285.  
  286. codeTeleport:
  287.   movss xmm4,[rbx+00000080]
  288.   jmp returnTeleport
  289.  
  290. {newmemPower:
  291. cmp byte ptr [_enableFullPower],1
  292. jne codePower
  293. mov [rcx+08],(float)100
  294.  
  295. codePower:
  296.   movss xmm6,[rcx+08]
  297.   jmp returnPower}
  298.  
  299. newmemFart:
  300. cmp byte ptr [_enableFartOMeter],1
  301. jne codeFart
  302. cmp dword ptr [rdx+40],(int)1867348333
  303. jne codeFart
  304. mov [rdx],#1000
  305. codeFart:
  306.   mov eax,[rdx]
  307.   mov [rcx],eax
  308.   repe ret
  309.   jmp returnFart
  310.  
  311. newmemCraftingExp:
  312. mov [_pCraftingExp],rcx
  313. cmp byte ptr [_AddCraftingExp],1
  314. je AddCraftingExp
  315. jmp codeCraftingExp
  316.  
  317. AddCraftingExp:
  318. mov byte ptr [_AddCraftingExp],0
  319. add dword ptr [rcx+0000123C],#1000
  320. jmp codeCraftingExp
  321.  
  322. codeCraftingExp:
  323.   mov eax,[rcx+0000123C]
  324.   jmp returnCraftingExp
  325.  
  326.  
  327. _Health:
  328.   jmp newmemHealth
  329.   nop
  330.   nop
  331. returnHealth:
  332.  
  333. _Money+05:
  334.   jmp newmemMoney
  335. returnMoney:
  336.  
  337. _OneHitKills:
  338.   jmp newmemOneHitKills
  339.   nop
  340.   nop
  341.   nop
  342. returnOneHitKills:
  343.  
  344. _Teleport:
  345.   jmp newmemTeleport
  346.   nop
  347.   nop
  348.   nop
  349. returnTeleport:
  350.  
  351. _EnemyTeleport:
  352.   jmp newmemEnemyTeleport
  353.   nop
  354.   nop
  355.   nop
  356.   nop
  357. returnEnemyTeleport:
  358.  
  359. _MassiveItemsCrafting+01:
  360.   jmp newmemMassiveItems
  361.   nop
  362. returnMassiveItems:
  363.  
  364.  
  365. {_ShitOMeter:
  366.   jmp newmemShitOMeter
  367.   nop
  368. returnShitOMeter:
  369.  
  370. _Experience:
  371.   jmp newmemExperience
  372.   nop
  373. returnExperience:
  374.  
  375. _PowerBar:
  376.   jmp newmemPower
  377. returnPower:}
  378.  
  379. _FartOMeter:
  380.   jmp newmemFart
  381.   nop
  382. returnFart:
  383.  
  384. _CraftingExp:
  385.   jmp newmemCraftingExp
  386.   nop
  387. returnCraftingExp:
  388.  
  389. _pPlayer:
  390. dd 0
  391. _GodMode:
  392. dd 0
  393. _AddMoney:
  394. dd 0
  395. _pMoney:
  396. dd 0
  397. _enableOneHitKills:
  398. dd 0
  399. _X_Coord:
  400. dd 0
  401. _Y_Coord:
  402. dd 0
  403. _Z_Coord:
  404. dd 0
  405. _X_Coord_Undo:
  406. dd 0
  407. _Y_Coord_Undo:
  408. dd 0
  409. _Z_Coord_Undo:
  410. dd 0
  411. _SavePosition:
  412. dd 0
  413. _LoadPosition:
  414. dd 0
  415. _UndoTeleport:
  416. dd 0
  417. _pCoords:
  418. dd 0
  419. _enableEnemyTeleport:
  420. dd 0
  421. _enableMassiveItems:
  422. dd 0
  423. {_enableShitOMeter:
  424. dd 0
  425. _AddExp:
  426. dd 0
  427. _pExp:
  428. dd 0
  429. _enableFullPower:
  430. dd 0}
  431. _enableFartOMeter:
  432. dd 0
  433. _AddCraftingExp:
  434. dd 0
  435. _pCraftingExp:
  436. dd 0
  437. [DISABLE]
  438.  
  439. _Health:
  440.   db 83 78 24 00 0F 9E C0
  441. _Money+05:
  442.   db 8B 0B 41 89 08
  443. _OneHitKills:
  444.   db 83 7E 24 00 40 0F 9E C7
  445. _Teleport:
  446.   db F3 0F 10 A3 80 00 00 00
  447. _EnemyTeleport:
  448.   db F3 44 0F 10 88 80 00 00 00
  449. _MassiveItemsCrafting+01:
  450.   db 8B 41 0C 89 43 0C
  451. {_ShitOMeter:
  452.   db 8B 02 89 01 F3 C3
  453. _Experience:
  454.   db 8B 98 28 12 00 00
  455. _PowerBar:
  456.   db F3 0F 10 71 08}
  457. _FartOMeter:
  458.   db 8B 02 89 01 F3 C3
  459. _CraftingExp:
  460.   db 8B 81 3C 12 00 00
  461.  
  462.  
  463.  
  464. unregistersymbol(_Health)
  465. unregistersymbol(_pPlayer)
  466. unregistersymbol(_GodMode)
  467. unregistersymbol(_Money)
  468. unregistersymbol(_AddMoney)
  469. unregistersymbol(_pMoney)
  470. unregistersymbol(_OneHitKills)
  471. unregistersymbol(_enableOneHitKills)
  472. unregistersymbol(_Teleport)
  473. unregistersymbol(_X_Coord)
  474. unregistersymbol(_Y_Coord)
  475. unregistersymbol(_Z_Coord)
  476. unregistersymbol(_X_Coord_Undo)
  477. unregistersymbol(_Y_Coord_Undo)
  478. unregistersymbol(_Z_Coord_Undo)
  479. unregistersymbol(_SavePosition)
  480. unregistersymbol(_LoadPosition)
  481. unregistersymbol(_UndoTeleport)
  482. unregistersymbol(_pCoords)
  483. unregistersymbol(_EnemyTeleport)
  484. unregistersymbol(_enableEnemyTeleport)
  485. unregistersymbol(_MassiveItemsCrafting)
  486. unregistersymbol(_enableMassiveItems)
  487. {unregistersymbol(_ShitOMeter)
  488. unregistersymbol(_enableShitOMeter)
  489. unregistersymbol(_Experience)
  490. unregistersymbol(_AddExp)
  491. unregistersymbol(_pExp)
  492. unregistersymbol(_PowerBar)
  493. unregistersymbol(_enableFullPower)}
  494. unregistersymbol(_FartOMeter)
  495. unregistersymbol(_enableFartOMeter)
  496. unregistersymbol(_CraftingExp)
  497. unregistersymbol(_AddCraftingExp)
  498. unregistersymbol(_pCraftingExp)
  499. dealloc(_pPlayer)
  500. dealloc(_GodMode)
  501. dealloc(newmemHealth)
  502. dealloc(_AddMoney)
  503. dealloc(_pMoney)
  504. dealloc(newmemMoney)
  505. dealloc(newmemOneHitKills)
  506. dealloc(_enableOneHitKills)
  507. dealloc(newmemTeleport)
  508. dealloc(_X_Coord)
  509. dealloc(_Y_Coord)
  510. dealloc(_Z_Coord)
  511. dealloc(_X_Coord_Undo)
  512. dealloc(_Y_Coord_Undo)
  513. dealloc(_Z_Coord_Undo)
  514. dealloc(_SavePosition)
  515. dealloc(_LoadPosition)
  516. dealloc(_UndoTeleport)
  517. dealloc(_pCoords)
  518. dealloc(newmemEnemyTeleport)
  519. dealloc(_enableEnemyTeleport)
  520. dealloc(newmemMassiveItems)
  521. dealloc(_enableMassiveItems)
  522. {dealloc(_enableShitOMeter)
  523. dealloc(newmemShitOMeter)
  524. dealloc(newmemExperience)
  525. dealloc(_pExp)
  526. dealloc(_AddExp)
  527. dealloc(newmemPower)
  528. dealloc(_enableFullPower)}
  529. dealloc(_enableFartOMeter)
  530. dealloc(newmemFart)
  531. dealloc(newmemCraftingExp)
  532. dealloc(_pCraftingExp)
  533. dealloc(_AddCraftingExp)
  534. {
  535. // ORIGINAL CODE - INJECTION POINT: "SouthPark_TFBW.exe"+B9D678
  536.  
  537. "SouthPark_TFBW.exe"+B9D64F: 0F 84 55 01 00 00        -  je SouthPark_TFBW.exe+B9D7AA
  538. "SouthPark_TFBW.exe"+B9D655: 48 8B 88 38 04 00 00     -  mov rcx,[rax+00000438]
  539. "SouthPark_TFBW.exe"+B9D65C: 48 85 C9                 -  test rcx,rcx
  540. "SouthPark_TFBW.exe"+B9D65F: 74 0B                    -  je SouthPark_TFBW.exe+B9D66C
  541. "SouthPark_TFBW.exe"+B9D661: E8 4A AE F8 FF           -  call SouthPark_TFBW.exe+B284B0
  542. "SouthPark_TFBW.exe"+B9D666: 0F B6 D8                 -  movzx ebx,al
  543. "SouthPark_TFBW.exe"+B9D669: 80 E3 01                 -  and bl,01
  544. "SouthPark_TFBW.exe"+B9D66C: 48 8B 87 28 04 00 00     -  mov rax,[rdi+00000428]
  545. "SouthPark_TFBW.exe"+B9D673: 48 85 C0                 -  test rax,rax
  546. "SouthPark_TFBW.exe"+B9D676: 74 09                    -  je SouthPark_TFBW.exe+B9D681
  547. // ---------- INJECTING HERE ----------
  548. "SouthPark_TFBW.exe"+B9D678: 83 78 24 00              -  cmp dword ptr [rax+24],00
  549. "SouthPark_TFBW.exe"+B9D67C: 0F 9F C0                 -  setg al
  550. // ---------- DONE INJECTING  ----------
  551. "SouthPark_TFBW.exe"+B9D67F: 22 D8                    -  and bl,al
  552. "SouthPark_TFBW.exe"+B9D681: 48 8B BF 40 04 00 00     -  mov rdi,[rdi+00000440]
  553. "SouthPark_TFBW.exe"+B9D688: 48 85 FF                 -  test rdi,rdi
  554. "SouthPark_TFBW.exe"+B9D68B: 0F 84 19 01 00 00        -  je SouthPark_TFBW.exe+B9D7AA
  555. "SouthPark_TFBW.exe"+B9D691: 48 8D 54 24 30           -  lea rdx,[rsp+30]
  556. "SouthPark_TFBW.exe"+B9D696: 48 8B CF                 -  mov rcx,rdi
  557. "SouthPark_TFBW.exe"+B9D699: C7 44 24 30 09 00 00 00  -  mov [rsp+30],00000009
  558. "SouthPark_TFBW.exe"+B9D6A1: E8 9A 79 0F 00           -  call SouthPark_TFBW.exe+C95040
  559. "SouthPark_TFBW.exe"+B9D6A6: 84 C0                    -  test al,al
  560. "SouthPark_TFBW.exe"+B9D6A8: 75 4B                    -  jne SouthPark_TFBW.exe+B9D6F5
  561. }
RAW Paste Data
Pastebin PRO Autumn Special!
Get 40% OFF on Pastebin PRO accounts!
Top