Advertisement
Guest User

Untitled

a guest
Jun 20th, 2018
69
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.63 KB | None | 0 0
  1. { Game : Empyrion.exe
  2. Version:
  3. Date : 2018-06-15
  4. Author : Kalas
  5.  
  6. This script does blah blah blah
  7. }
  8.  
  9. [ENABLE]
  10.  
  11. aobscan(aobHealth,F3 41 0F 10 47 30 F3 0F 5A C0 48)
  12. alloc(newmem,$100,aobHealth)
  13.  
  14. label(code)
  15. label(return)
  16. //
  17. label(setHealthCheck)
  18. label(setHungerCheck)
  19. label(setStaminaCheck)
  20. label(setOxygenCheck)
  21. label(setUnknownCheck)
  22. label(setBodyRadiationCheck)
  23. label(setBodyTemperatureCheck)
  24.  
  25. newmem:
  26. cmp R9,00000000000000A5 // Health Compare
  27. je setHealthCheck
  28. cmp R9,000000000000017B // Hunger Compare
  29. je setHungerCheck
  30. cmp R9,0000000000000110 // Stamina Compare
  31. je setStaminaCheck
  32. cmp R9,00000000000001BE // Oxygen Compare
  33. je setOxygenCheck
  34. cmp R9,0000000000000201 // Unknown Compare
  35. je setUnknownCheck
  36. cmp R9,0000000000000244 // Body Radiation Compare
  37. je setBodyRadiationCheck
  38. cmp R9,00000000000002AF // Body Temperature Compare
  39. je setBodyTemperatureCheck
  40. jmp code
  41.  
  42. setHealthCheck:
  43. mov [r15+30], (float)500
  44.  
  45. setHungerCheck:
  46. mov [r15+30], (float)500
  47.  
  48. setStaminaCheck:
  49. mov [r15+30], (float)500
  50.  
  51. setOxygenCheck:
  52. mov [r15+30], (float)5
  53.  
  54. setUnknownCheck:
  55. mov [r15+30], (float)1
  56.  
  57. setBodyRadiationCheck:
  58. mov [r15+30], (float)0
  59.  
  60. setBodyTemperatureCheck:
  61. mov [r15+30], (float)25
  62.  
  63. code:
  64. movss xmm0,[r15+30]
  65. jmp return
  66.  
  67. aobHealth:
  68. jmp newmem
  69. nop
  70. return:
  71. registersymbol(aobHealth)
  72.  
  73. [DISABLE]
  74.  
  75. aobHealth:
  76. db F3 41 0F 10 47 30
  77.  
  78. unregistersymbol(aobHealth)
  79. dealloc(newmem)
  80.  
  81. {
  82. // ORIGINAL CODE - INJECTION POINT: A6E1E66E
  83.  
  84. A6E1E64B: 48 89 85 78 FF FF FF - mov [rbp-00000088],rax
  85. A6E1E652: 48 8B CF - mov rcx,rdi
  86. A6E1E655: BA 01 00 00 00 - mov edx,00000001
  87. A6E1E65A: 48 83 EC 20 - sub rsp,20
  88. A6E1E65E: 48 8B 07 - mov rax,[rdi]
  89. A6E1E661: 90 - nop
  90. A6E1E662: 90 - nop
  91. A6E1E663: 90 - nop
  92. A6E1E664: FF 90 F0 00 00 00 - call qword ptr [rax+000000F0]
  93. A6E1E66A: 48 83 C4 20 - add rsp,20
  94. // ---------- INJECTING HERE ----------
  95. A6E1E66E: F3 41 0F 10 47 30 - movss xmm0,[r15+30]
  96. // ---------- DONE INJECTING ----------
  97. A6E1E674: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
  98. A6E1E678: 48 8B CF - mov rcx,rdi
  99. A6E1E67B: F2 0F 10 C8 - movsd xmm1,xmm0
  100. A6E1E67F: F2 0F 5A C9 - cvtsd2ss xmm1,xmm1
  101. A6E1E683: 48 83 EC 20 - sub rsp,20
  102. A6E1E687: 48 8B 07 - mov rax,[rdi]
  103. A6E1E68A: 90 - nop
  104. A6E1E68B: 90 - nop
  105. A6E1E68C: 90 - nop
  106. A6E1E68D: FF 90 90 00 00 00 - call qword ptr [rax+00000090]
  107. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement