Advertisement
Guest User

Untitled

a guest
Jun 19th, 2018
546
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.23 KB | None | 0 0
  1. [ENABLE]
  2. //code from here to '[DISABLE]' will be used to enable the cheat
  3. alloc(newmem,2048,"FIFA18.exe"+35B1FF3)
  4. label(returnhere)
  5. label(originalcode)
  6. label(exit)
  7.  
  8. newmem: //this is allocated memory, you have read,write,execute access
  9. //place your code here
  10.  
  11. originalcode:
  12. jmp 1435B209D
  13.  
  14. exit:
  15. jmp returnhere
  16.  
  17. "FIFA18.exe"+35B1FF3:
  18. jmp newmem
  19. nop
  20. returnhere:
  21.  
  22.  
  23.  
  24.  
  25. [DISABLE]
  26. //code from here till the end of the code will be used to disable the cheat
  27. dealloc(newmem)
  28. "FIFA18.exe"+35B1FF3:
  29. jng 1435B209D
  30. //Alt: db 0F 8E A4 00 00 00
  31.  
  32. {
  33. // ORIGINAL CODE - INJECTION POINT: "FIFA18.exe"+35B1FF3
  34.  
  35. "FIFA18.exe"+35B1FCC: 4C 8B 5C 24 28 - mov r11,[rsp+28]
  36. "FIFA18.exe"+35B1FD1: 49 2B CB - sub rcx,r11
  37. "FIFA18.exe"+35B1FD4: 49 BF 39 8E E3 38 8E E3 38 0E - mov r15,0E38E38E38E38E39
  38. "FIFA18.exe"+35B1FDE: 49 8B C7 - mov rax,r15
  39. "FIFA18.exe"+35B1FE1: 48 F7 E9 - imul rcx
  40. "FIFA18.exe"+35B1FE4: 48 D1 FA - sar rdx,1
  41. "FIFA18.exe"+35B1FE7: 48 8B C2 - mov rax,rdx
  42. "FIFA18.exe"+35B1FEA: 48 C1 E8 3F - shr rax,3F
  43. "FIFA18.exe"+35B1FEE: 48 03 D0 - add rdx,rax
  44. "FIFA18.exe"+35B1FF1: 85 D2 - test edx,edx
  45. // ---------- INJECTING HERE ----------
  46. "FIFA18.exe"+35B1FF3: 0F 8E A4 00 00 00 - jng FIFA18.exe+35B209D
  47. // ---------- DONE INJECTING ----------
  48. "FIFA18.exe"+35B1FF9: 33 FF - xor edi,edi
  49. "FIFA18.exe"+35B1FFB: 8B F2 - mov esi,edx
  50. "FIFA18.exe"+35B1FFD: 48 BD 07 3A 6D A0 D3 06 3A 6D - mov rbp,6D3A06D3A06D3A07
  51. "FIFA18.exe"+35B2007: 66 0F 1F 84 00 00 00 00 00 - nop [rax+rax+00000000]
  52. "FIFA18.exe"+35B2010: 46 8B 14 1F - mov r10d,[rdi+r11]
  53. "FIFA18.exe"+35B2014: 45 33 C0 - xor r8d,r8d
  54. "FIFA18.exe"+35B2017: 49 8B 5E 08 - mov rbx,[r14+08]
  55. "FIFA18.exe"+35B201B: 4D 8B 0E - mov r9,[r14]
  56. "FIFA18.exe"+35B201E: 48 8B CB - mov rcx,rbx
  57. "FIFA18.exe"+35B2021: 49 2B C9 - sub rcx,r9
  58. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement