South Park TFBW Table +12 2020-07-27

[ENABLE]

aobscanmodule(_Health,SouthPark_TFBW.exe,83 78 24 00 0F 9E C0 C3) // should be unique
aobscanmodule(_Money,SouthPark_TFBW.exe,FD FF 4C 8B C0 8B 0B 41 89 08)
aobscanmodule(_OneHitKills,SouthPark_TFBW.exe,83 7E 24 00 40 0F 9E C7)
aobscanmodule(_Teleport,SouthPark_TFBW.exe,F3 0F 10 A3 80 00 00 00 F3 0F 10 AB 84)
aobscanmodule(_EnemyTeleport,SouthPark_TFBW.exe,F3 44 0F 10 88 80 00 00 00 * * * * A0)
aobscanmodule(_MassiveItemsCrafting,SouthPark_TFBW.exe,C7 8B 41 0C 89 43 0C)
aobscanmodule(_ShitOMeter,SouthPark_TFBW.exe,8B 02 89 01 F3 C3 CC CC CC CC CC E9 8B)
aobscanmodule(_Experience,SouthPark_TFBW.exe,8B 98 28 12 00 00)
aobscanmodule(_PowerBar,SouthPark_TFBW.exe,F3 0F 10 71 08 E8 71)
aobscanmodule(_FartOMeter,SouthPark_TFBW.exe,8B 02 89 01 F3 C3 CC CC CC CC CC E9 1B)
aobscanmodule(_CraftingExp,SouthPark_TFBW.exe,8B 81 3C 12 00 00)
alloc(newmemHealth,$1000,SouthPark_TFBW.exe)
alloc(newmemMoney,$1000,SouthPark_TFBW.exe)
alloc(newmemOneHitKills,$1000,SouthPark_TFBW.exe)
alloc(newmemTeleport,$1000,SouthPark_TFBW.exe)
alloc(newmemEnemyTeleport,$1000,SouthPark_TFBW.exe)
alloc(newmemMassiveItems,$1000,SouthPark_TFBW.exe)
alloc(newmemShitOMeter,$1000,SouthPark_TFBW.exe)
alloc(newmemExperience,$1000,SouthPark_TFBW.exe)
alloc(newmemPower,$1000,SouthPark_TFBW.exe)
alloc(newmemFart,$1000,SouthPark_TFBW.exe)
alloc(newmemCraftingExp,$1000,SouthPark_TFBW.exe)
alloc(_pPlayer,8)
alloc(_GodMode,8)
alloc(_AddMoney,8)
alloc(_pMoney,8)
alloc(_enableOneHitKills,8)
alloc(_X_Coord,8)
alloc(_Y_Coord,8)
alloc(_Z_Coord,8)
alloc(_X_Coord_Undo,8)
alloc(_Y_Coord_Undo,8)
alloc(_Z_Coord_Undo,8)
alloc(_SavePosition,8)
alloc(_LoadPosition,8)
alloc(_UndoTeleport,8)
alloc(_pCoords,8)
alloc(_enableMassiveItems,8)
alloc(_enableEnemyTeleport,8)
alloc(_enableShitOMeter,8)
alloc(_AddExp,8)
alloc(_pExp,8)
alloc(_enableFullPower,8)
alloc(_enableFartOMeter,8)
alloc(_AddCraftingExp,8)
alloc(_pCraftingExp,8)
Registersymbol(_pPlayer)
registersymbol(_Health)
Registersymbol(_GodMode)
registersymbol(_AddMoney)
registersymbol(_pMoney)
registersymbol(_Money)
registersymbol(_enableOneHitKills)
registersymbol(_OneHitKills)
registersymbol(_Teleport)
Registersymbol(_X_Coord)
Registersymbol(_Y_Coord)
Registersymbol(_Z_Coord)
Registersymbol(_X_Coord_Undo)
Registersymbol(_Y_Coord_Undo)
Registersymbol(_Z_Coord_Undo)
Registersymbol(_SavePosition)
Registersymbol(_LoadPosition)
Registersymbol(_UndoTeleport)
Registersymbol(_pCoords)
registersymbol(_enableEnemyTeleport)
registersymbol(_EnemyTeleport)
registersymbol(_MassiveItemsCrafting)
registersymbol(_enableMassiveItems)
registersymbol(_enableShitOMeter)
registersymbol(_ShitOMeter)
registersymbol(_Experience)
registersymbol(_AddExp)
registersymbol(_pExp)
registersymbol(_PowerBar)
registersymbol(_enableFullPower)
registersymbol(_enableFartOMeter)
registersymbol(_FartOMeter)
registersymbol(_CraftingExp)
registersymbol(_AddCraftingExp)
registersymbol(_pCraftingExp)
label(codeHealth)
label(returnHealth)
label(codeMoney)
label(returnMoney)
label(AddMoney)
label(codeOneHitKills)
label(returnOneHitKills)
label(codeTeleport)
label(returnTeleport)
label(Save)
label(Load)
label(Undo)
label(codeEnemyTeleport)
label(returnEnemyTeleport)
label(codeMassiveItems)
label(returnMassiveItems)
label(codeShitOMeter)
label(returnShitOMeter)
label(codeExperience)
label(returnExperience)
label(AddExp)
label(codePower)
label(returnPower)
label(codeFart)
label(returnFart)

newmemHealth:
{
60 - int ...... 0 = Enemy, 20 Player
14c - float .... 1 = Enemy ,1.200000048 player
14c - float .... 0 = Enemy ,0.150000006 player

}
cmp [rax+14c],(float)1
je codeHealth
mov [_pPlayer],rax
cmp byte ptr [_GodMode],1
jne codeHealth
push rbx
mov rbx,[rax+20]
mov [rax+24],rbx
pop rbx

codeHealth:
  cmp dword ptr [rax+24],00
  setle al
  jmp returnHealth

newmemMoney:
mov [_pMoney],rbx
cmp byte ptr [_AddMoney],1
je AddMoney
jmp codeMoney

AddMoney:
mov byte ptr [_AddMoney],0
add dword ptr [rbx],#10000
jmp codeMoney

codeMoney:
  mov ecx,[rbx]
  mov [r8],ecx
  jmp returnMoney

newmemOneHitKills:
{
60 - int ...... 0 = Enemy, 20 Player
14c - float .... 1 = Enemy ,1.200000048 player
14c - float .... 0 = Enemy ,0.150000006 player

}
cmp dword ptr [rsi+14c],(int)1067030938
je codeOneHitKills
cmp byte ptr [_enableOneHitKills],1
jne codeOneHitKills
mov [rsi+24],0

codeOneHitKills:
  cmp dword ptr [rsi+24],00
  setle dil
  jmp returnOneHitKills

newmemTeleport:
mov [_pCoords],rbx
cmp byte ptr [_SavePosition],1
je Save
cmp byte ptr [_LoadPosition],1
je Load
cmp byte ptr [_UndoTeleport],1
je Undo
jmp codeTeleport

Save:
mov byte ptr [_SavePosition],0
movss xmm6,[rbx+00000080]
movss [_X_Coord],xmm6
movss xmm6,[rbx+00000084]
movss [_Y_Coord],xmm6
movss xmm6,[rbx+00000088]
movss [_Z_Coord],xmm6
jmp codeTeleport

Load:
mov byte ptr [_LoadPosition],0
// Save again
movss xmm6,[rbx+00000080]
movss [_X_Coord_Undo],xmm6
movss xmm6,[rbx+00000084]
movss [_Y_Coord_Undo],xmm6
movss xmm6,[rbx+00000088]
movss [_Z_Coord_Undo],xmm6
// Do undo Teleport
movss xmm6,[_X_Coord]
movss [rbx+00000080],xmm6
movss xmm6,[_Y_Coord]
movss [rbx+00000084],xmm6
movss xmm6,[_Z_Coord]
movss [rbx+00000088],xmm6
jmp codeTeleport

Undo:
mov byte ptr [_UndoTeleport],0
movss xmm6,[_X_Coord_Undo]
movss [rbx+00000080],xmm6
movss xmm6,[_Y_Coord_Undo]
movss [rbx+00000084],xmm6
movss xmm6,[_Z_Coord_Undo]
movss [rbx+00000088],xmm6
jmp codeTeleport



newmemEnemyTeleport:
{
20 - int, 3 = others, 0 Player
CC - float, 1 = Others, 10 Player
171 byte, 255 = Others, 0 Player
172 byte, 127 = Others, 128 Player
1e0 int, 1419367904 = Others, 0 Player
1e4 int, 1 = Others, 0 Player
2b4 int, 129 = Others, 0 player
3f4 int, 129 = Others, 0 Player
400 int, 0 = Others, 1 Player
5af int, 0 = Others, 1 Player
}
cmp [rax+20],0 // Player
je codeEnemyTeleport
cmp [_enableEnemyTeleport],1
jne codeEnemyTeleport
movss xmm6,[_X_Coord]
movss [rax+00000080],xmm6
movss xmm6,[_Y_Coord]
movss [rax+00000084],xmm6
movss xmm6,[_Z_Coord]
movss [rax+00000088],xmm6


codeEnemyTeleport:
  movss xmm9,[rax+00000080]
  jmp returnEnemyTeleport

newmemMassiveItems:
cmp byte ptr [_enableMassiveItems],1
jne codeMassiveItems
mov [rcx+0C],#99
codeMassiveItems:
  mov eax,[rcx+0C]
  mov [rbx+0C],eax
  jmp returnMassiveItems

newmemShitOMeter:
cmp byte ptr [_enableShitOMeter],1
jne codeShitOMeter
//ShitOMeter
cmp [rdx+40],(int)1666414957 // String = "MyScore"
jne codeShitOMeter
push rbx
mov rbx,[rdx+118] // 118 Holds Max Shit-O-Meter Value
mov [rdx],rbx
pop rbx
codeShitOMeter:
  mov eax,[rdx]
  mov [rcx],eax
  repe ret
  jmp returnShitOMeter

newmemExperience:
mov [_pExp],rax
cmp byte ptr [_AddExp],1
je AddExp
jmp codeExperience

AddExp:
mov byte ptr [_AddExp],0
add dword ptr [rax+00001228],#10000
jmp codeExperience

codeExperience:
  mov ebx,[rax+00001228]
  jmp returnExperience


codeTeleport:
  movss xmm4,[rbx+00000080]
  jmp returnTeleport

newmemPower:
cmp byte ptr [_enableFullPower],1
jne codePower
mov [rcx+08],(float)100

codePower:
  movss xmm6,[rcx+08]
  jmp returnPower

newmemFart:
cmp byte ptr [_enableFartOMeter],1
jne codeFart
cmp dword ptr [rdx+40],(int)1867348333
jne codeFart
mov [rdx],#1000
codeFart:
  mov eax,[rdx]
  mov [rcx],eax
  repe ret
  jmp returnFart

newmemCraftingExp:
mov [_pCraftingExp],rcx
cmp byte ptr [_AddCraftingExp],1
je AddCraftingExp
jmp codeCraftingExp

AddCraftingExp:
mov byte ptr [_AddCraftingExp],0
add dword ptr [rcx+0000123C],#1000
jmp codeCraftingExp

codeCraftingExp:
  mov eax,[rcx+0000123C]
  jmp returnCraftingExp


_Health:
  jmp newmemHealth
  nop
  nop
returnHealth:

_Money+05:
  jmp newmemMoney
returnMoney:

_OneHitKills:
  jmp newmemOneHitKills
  nop
  nop
  nop
returnOneHitKills:

_Teleport:
  jmp newmemTeleport
  nop
  nop
  nop
returnTeleport:

_EnemyTeleport:
  jmp newmemEnemyTeleport
  nop
  nop
  nop
  nop
returnEnemyTeleport:

_MassiveItemsCrafting+01:
  jmp newmemMassiveItems
  nop
returnMassiveItems:


_ShitOMeter:
  jmp newmemShitOMeter
  nop
returnShitOMeter:

_Experience:
  jmp newmemExperience
  nop
returnExperience:

_PowerBar:
  jmp newmemPower
returnPower:

_FartOMeter:
  jmp newmemFart
  nop
returnFart:

_CraftingExp:
  jmp newmemCraftingExp
  nop
returnCraftingExp:

_pPlayer:
dd 0
_GodMode:
dd 0
_AddMoney:
dd 0
_pMoney:
dd 0
_enableOneHitKills:
dd 0
_X_Coord:
dd 0
_Y_Coord:
dd 0
_Z_Coord:
dd 0
_X_Coord_Undo:
dd 0
_Y_Coord_Undo:
dd 0
_Z_Coord_Undo:
dd 0
_SavePosition:
dd 0
_LoadPosition:
dd 0
_UndoTeleport:
dd 0
_pCoords:
dd 0
_enableEnemyTeleport:
dd 0
_enableMassiveItems:
dd 0
_enableShitOMeter:
dd 0
_AddExp:
dd 0
_pExp:
dd 0
_enableFullPower:
dd 0
_enableFartOMeter:
dd 0
_AddCraftingExp:
dd 0
_pCraftingExp:
dd 0
[DISABLE]

_Health:
  db 83 78 24 00 0F 9E C0
_Money+05:
  db 8B 0B 41 89 08
_OneHitKills:
  db 83 7E 24 00 40 0F 9E C7
_Teleport:
  db F3 0F 10 A3 80 00 00 00
_EnemyTeleport:
  db F3 44 0F 10 88 80 00 00 00
_MassiveItemsCrafting+01:
  db 8B 41 0C 89 43 0C
_ShitOMeter:
  db 8B 02 89 01 F3 C3
_Experience:
  db 8B 98 28 12 00 00
_PowerBar:
  db F3 0F 10 71 08
_FartOMeter:
  db 8B 02 89 01 F3 C3
_CraftingExp:
  db 8B 81 3C 12 00 00



unregistersymbol(_Health)
unregistersymbol(_pPlayer)
unregistersymbol(_GodMode)
unregistersymbol(_Money)
unregistersymbol(_AddMoney)
unregistersymbol(_pMoney)
unregistersymbol(_OneHitKills)
unregistersymbol(_enableOneHitKills)
unregistersymbol(_Teleport)
unregistersymbol(_X_Coord)
unregistersymbol(_Y_Coord)
unregistersymbol(_Z_Coord)
unregistersymbol(_X_Coord_Undo)
unregistersymbol(_Y_Coord_Undo)
unregistersymbol(_Z_Coord_Undo)
unregistersymbol(_SavePosition)
unregistersymbol(_LoadPosition)
unregistersymbol(_UndoTeleport)
unregistersymbol(_pCoords)
unregistersymbol(_EnemyTeleport)
unregistersymbol(_enableEnemyTeleport)
unregistersymbol(_MassiveItemsCrafting)
unregistersymbol(_enableMassiveItems)
unregistersymbol(_ShitOMeter)
unregistersymbol(_enableShitOMeter)
unregistersymbol(_Experience)
unregistersymbol(_AddExp)
unregistersymbol(_pExp)
unregistersymbol(_PowerBar)
unregistersymbol(_enableFullPower)
unregistersymbol(_FartOMeter)
unregistersymbol(_enableFartOMeter)
unregistersymbol(_CraftingExp)
unregistersymbol(_AddCraftingExp)
unregistersymbol(_pCraftingExp)
dealloc(_pPlayer)
dealloc(_GodMode)
dealloc(newmemHealth)
dealloc(_AddMoney)
dealloc(_pMoney)
dealloc(newmemMoney)
dealloc(newmemOneHitKills)
dealloc(_enableOneHitKills)
dealloc(newmemTeleport)
dealloc(_X_Coord)
dealloc(_Y_Coord)
dealloc(_Z_Coord)
dealloc(_X_Coord_Undo)
dealloc(_Y_Coord_Undo)
dealloc(_Z_Coord_Undo)
dealloc(_SavePosition)
dealloc(_LoadPosition)
dealloc(_UndoTeleport)
dealloc(_pCoords)
dealloc(newmemEnemyTeleport)
dealloc(_enableEnemyTeleport)
dealloc(newmemMassiveItems)
dealloc(_enableMassiveItems)
dealloc(_enableShitOMeter)
dealloc(newmemShitOMeter)
dealloc(newmemExperience)
dealloc(_pExp)
dealloc(_AddExp)
dealloc(newmemPower)
dealloc(_enableFullPower)
dealloc(_enableFartOMeter)
dealloc(newmemFart)
dealloc(newmemCraftingExp)
dealloc(_pCraftingExp)
dealloc(_AddCraftingExp)
{
// ORIGINAL CODE - INJECTION POINT: "SouthPark_TFBW.exe"+B9D678

"SouthPark_TFBW.exe"+B9D64F: 0F 84 55 01 00 00        -  je SouthPark_TFBW.exe+B9D7AA
"SouthPark_TFBW.exe"+B9D655: 48 8B 88 38 04 00 00     -  mov rcx,[rax+00000438]
"SouthPark_TFBW.exe"+B9D65C: 48 85 C9                 -  test rcx,rcx
"SouthPark_TFBW.exe"+B9D65F: 74 0B                    -  je SouthPark_TFBW.exe+B9D66C
"SouthPark_TFBW.exe"+B9D661: E8 4A AE F8 FF           -  call SouthPark_TFBW.exe+B284B0
"SouthPark_TFBW.exe"+B9D666: 0F B6 D8                 -  movzx ebx,al
"SouthPark_TFBW.exe"+B9D669: 80 E3 01                 -  and bl,01
"SouthPark_TFBW.exe"+B9D66C: 48 8B 87 28 04 00 00     -  mov rax,[rdi+00000428]
"SouthPark_TFBW.exe"+B9D673: 48 85 C0                 -  test rax,rax
"SouthPark_TFBW.exe"+B9D676: 74 09                    -  je SouthPark_TFBW.exe+B9D681
// ---------- INJECTING HERE ----------
"SouthPark_TFBW.exe"+B9D678: 83 78 24 00              -  cmp dword ptr [rax+24],00
"SouthPark_TFBW.exe"+B9D67C: 0F 9F C0                 -  setg al
// ---------- DONE INJECTING  ----------
"SouthPark_TFBW.exe"+B9D67F: 22 D8                    -  and bl,al
"SouthPark_TFBW.exe"+B9D681: 48 8B BF 40 04 00 00     -  mov rdi,[rdi+00000440]
"SouthPark_TFBW.exe"+B9D688: 48 85 FF                 -  test rdi,rdi
"SouthPark_TFBW.exe"+B9D68B: 0F 84 19 01 00 00        -  je SouthPark_TFBW.exe+B9D7AA
"SouthPark_TFBW.exe"+B9D691: 48 8D 54 24 30           -  lea rdx,[rsp+30]
"SouthPark_TFBW.exe"+B9D696: 48 8B CF                 -  mov rcx,rdi
"SouthPark_TFBW.exe"+B9D699: C7 44 24 30 09 00 00 00  -  mov [rsp+30],00000009
"SouthPark_TFBW.exe"+B9D6A1: E8 9A 79 0F 00           -  call SouthPark_TFBW.exe+C95040
"SouthPark_TFBW.exe"+B9D6A6: 84 C0                    -  test al,al
"SouthPark_TFBW.exe"+B9D6A8: 75 4B                    -  jne SouthPark_TFBW.exe+B9D6F5
}