3
"Get_Edit_Base_Object"
80000008
Auto Assembler Script
{ Game : fifa15.exe
Version:
Date : 2015-10-12
Author : Howard
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(read_inject,fifa15.exe,48 8B 4F 20 BA 48 00 00 00 48 89 C3 E8 27) // should be unique
alloc(newmem,128,"fifa15.exe"+31C301F)
label(edit_base)
label(code)
label(return)
registersymbol(edit_base)
newmem:
edit_base:
dd 0
dd 0
code:
mov rcx,[rdi+20]
mov rdx,[rcx]
mov [edit_base],rdx
mov edx,00000048
jmp return
read_inject:
jmp code
nop
nop
nop
nop
return:
registersymbol(read_inject)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
read_inject:
db 48 8B 4F 20 BA 48 00 00 00
unregistersymbol(read_inject)
unregistersymbol(edit_base)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "fifa15.exe"+30114F3
"fifa15.exe"+30114BF: E8 CB 9D 27 00 - call fifa15.exe+328B28F
"fifa15.exe"+30114C4: 48 8D 8D 60 01 00 00 - lea rcx,[rbp+00000160]
"fifa15.exe"+30114CB: E8 09 86 F5 FF - call fifa15.exe+2F69AD9
"fifa15.exe"+30114D0: 48 8D 95 C0 02 00 00 - lea rdx,[rbp+000002C0]
"fifa15.exe"+30114D7: 48 8D 4C 24 50 - lea rcx,[rsp+50]
"fifa15.exe"+30114DC: 45 31 C0 - xor r8d,r8d
"fifa15.exe"+30114DF: E8 D6 1E F6 FF - call fifa15.exe+2F733BA
"fifa15.exe"+30114E4: 48 8B 15 75 97 8A FF - mov rdx,[fifa15.exe+28BAC60]
"fifa15.exe"+30114EB: 48 89 C1 - mov rcx,rax
"fifa15.exe"+30114EE: E8 B8 1A F6 FF - call fifa15.exe+2F72FAB
// ---------- INJECTING HERE ----------
"fifa15.exe"+30114F3: 48 8B 4F 20 - mov rcx,[rdi+20]
"fifa15.exe"+30114F7: BA 48 00 00 00 - mov edx,00000048
// ---------- DONE INJECTING ----------
"fifa15.exe"+30114FC: 48 89 C3 - mov rbx,rax
"fifa15.exe"+30114FF: E8 27 FC 0A 00 - call fifa15.exe+30C112B
"fifa15.exe"+3011504: 8B 13 - mov edx,[rbx]
"fifa15.exe"+3011506: 48 89 C1 - mov rcx,rax
"fifa15.exe"+3011509: 41 B8 01 00 00 00 - mov r8d,00000001
"fifa15.exe"+301150F: E8 7B 9D 27 00 - call fifa15.exe+328B28F
"fifa15.exe"+3011514: 48 8D 8D C0 02 00 00 - lea rcx,[rbp+000002C0]
"fifa15.exe"+301151B: E8 B9 85 F5 FF - call fifa15.exe+2F69AD9
"fifa15.exe"+3011520: 48 8D 95 80 01 00 00 - lea rdx,[rbp+00000180]
"fifa15.exe"+3011527: 48 8D 4C 24 50 - lea rcx,[rsp+50]
}
146
"load potential to crossing"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(crossing_save,fifa15.exe,31 D2 48 89 45 E8 48 8B 45 58) // should be unique
aobscanmodule(read_crossing2,fifa15.exe,48 8D 54 24 40 48 8D 4C 24 50 45 31 c0 E8 CE) // should be unique
aobscanmodule(read_crossing,fifa15.exe,48 8D 95 C0 02 00 00 48 8D 4C 24 50) // should be unique
alloc(newmem,$256,"fifa15.exe"+30114D0)
label(return_read)
label(read_code)
label(return_read2)
label(read_code2)
label(save_code)
label(return_save)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
save_code:
lea rdx,[fifa15.exe+1DF18E8] //potential
// mov rdx,[fifa15.exe+28BAC60] crossing
jmp return_save
read_code:
lea rdx,[fifa15.exe+1DF18E8]
jmp return_read
read_code2:
lea rdx,[fifa15.exe+1DF18E8]
jmp return_read2
read_crossing2+12:
jmp read_code2
nop
nop
return_read2:
read_crossing+14:
jmp read_code
nop
nop
return_read:
crossing_save+14:
jmp save_code
nop
nop
return_save:
registersymbol(crossing_save)
registersymbol(read_crossing)
registersymbol(read_crossing2)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
read_crossing+14:
mov rdx,[fifa15.exe+28BAC60]
crossing_save+14:
mov rdx,[fifa15.exe+28BAC60]
read_crossing2+12:
mov rdx,[fifa15.exe+28BAC60]
unregistersymbol(read_crossing2)
unregistersymbol(read_crossing)
unregistersymbol(crossing_save)
{
// ORIGINAL CODE - INJECTION POINT: "fifa15.exe"+31C8930
"fifa15.exe"+31C890D: E8 C1 6D F4 FF - call fifa15.exe+310F6D3
"fifa15.exe"+31C8912: 89 FA - mov edx,edi
"fifa15.exe"+31C8914: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C8917: E8 76 8D F4 FF - call fifa15.exe+3111692
"fifa15.exe"+31C891C: 31 D2 - xor edx,edx
"fifa15.exe"+31C891E: 48 89 45 E8 - mov [rbp-18],rax
"fifa15.exe"+31C8922: 48 8B 45 58 - mov rax,[rbp+58]
"fifa15.exe"+31C8926: 4C 8B 00 - mov r8,[rax]
"fifa15.exe"+31C8929: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C892C: 41 FF 50 28 - call qword ptr [r8+28]
// ---------- INJECTING HERE ----------
"fifa15.exe"+3016405: 48 8B 15 54 48 8A FF - mov rdx,[fifa15.exe+28BAC60]
// ---------- DONE INJECTING ----------
"fifa15.exe"+31C8937: 48 8D 8D 10 06 00 00 - lea rcx,[rbp+00000610]
"fifa15.exe"+31C893E: 89 C7 - mov edi,eax
"fifa15.exe"+31C8940: E8 8E 6D F4 FF - call fifa15.exe+310F6D3
"fifa15.exe"+31C8945: 89 FA - mov edx,edi
"fifa15.exe"+31C8947: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C894A: E8 43 8D F4 FF - call fifa15.exe+3111692
"fifa15.exe"+31C894F: 31 D2 - xor edx,edx
"fifa15.exe"+31C8951: 48 89 45 F8 - mov [rbp-08],rax
"fifa15.exe"+31C8955: 48 8B 45 68 - mov rax,[rbp+68]
"fifa15.exe"+31C8959: 4C 8B 00 - mov r8,[rax]
}
{
// ORIGINAL CODE - INJECTION POINT: "fifa15.exe"+30114D0
"fifa15.exe"+30114A6: 48 8B 4F 20 - mov rcx,[rdi+20]
"fifa15.exe"+30114AA: BA 69 00 00 00 - mov edx,00000069
"fifa15.exe"+30114AF: 48 89 C3 - mov rbx,rax
"fifa15.exe"+30114B2: E8 74 FC 0A 00 - call fifa15.exe+30C112B
"fifa15.exe"+30114B7: 45 31 C0 - xor r8d,r8d
"fifa15.exe"+30114BA: 48 89 C1 - mov rcx,rax
"fifa15.exe"+30114BD: 8B 13 - mov edx,[rbx]
"fifa15.exe"+30114BF: E8 CB 9D 27 00 - call fifa15.exe+328B28F
"fifa15.exe"+30114C4: 48 8D 8D 60 01 00 00 - lea rcx,[rbp+00000160]
"fifa15.exe"+30114CB: E8 09 86 F5 FF - call fifa15.exe+2F69AD9
// ---------- INJECTING HERE ----------
"fifa15.exe"+30114D0: 48 8D 95 C0 02 00 00 - lea rdx,[rbp+000002C0]
// ---------- DONE INJECTING ----------
"fifa15.exe"+30114D7: 48 8D 4C 24 50 - lea rcx,[rsp+50]
"fifa15.exe"+30114DC: 45 31 C0 - xor r8d,r8d
"fifa15.exe"+30114DF: E8 D6 1E F6 FF - call fifa15.exe+2F733BA
"fifa15.exe"+30114E4: 48 8B 15 75 97 8A FF - mov rdx,[fifa15.exe+28BAC60]
"fifa15.exe"+30114EB: 48 89 C1 - mov rcx,rax
"fifa15.exe"+30114EE: E8 B8 1A F6 FF - call fifa15.exe+2F72FAB
"fifa15.exe"+30114F3: E9 10 EB FD FC - jmp 13FFF0008
"fifa15.exe"+30114F8: 90 - nop
"fifa15.exe"+30114F9: 90 - nop
"fifa15.exe"+30114FA: 90 - nop
}
{
// ORIGINAL CODE - INJECTION POINT: "fifa15.exe"+3010ADA
"fifa15.exe"+3010AB3: 48 8B 4F 20 - mov rcx,[rdi+20]
"fifa15.exe"+3010AB7: BA 10 00 00 00 - mov edx,00000010
"fifa15.exe"+3010ABC: E8 6A 06 0B 00 - call fifa15.exe+30C112B
"fifa15.exe"+3010AC1: 44 8B 4C 24 30 - mov r9d,[rsp+30]
"fifa15.exe"+3010AC6: 41 89 D8 - mov r8d,ebx
"fifa15.exe"+3010AC9: 48 89 C1 - mov rcx,rax
"fifa15.exe"+3010ACC: 8B 45 C0 - mov eax,[rbp-40]
"fifa15.exe"+3010ACF: 89 F2 - mov edx,esi
"fifa15.exe"+3010AD1: 89 44 24 20 - mov [rsp+20],eax
"fifa15.exe"+3010AD5: E8 AD 74 0B 00 - call fifa15.exe+30C7F87
// ---------- INJECTING HERE ----------
"fifa15.exe"+3010ADA: 48 8D 54 24 40 - lea rdx,[rsp+40]
// ---------- DONE INJECTING ----------
"fifa15.exe"+3010ADF: 48 8D 4C 24 50 - lea rcx,[rsp+50]
"fifa15.exe"+3010AE4: 45 31 C0 - xor r8d,r8d
"fifa15.exe"+3010AE7: E8 CE 28 F6 FF - call fifa15.exe+2F733BA
"fifa15.exe"+3010AEC: 48 8B 15 6D A1 8A FF - mov rdx,[fifa15.exe+28BAC60]
"fifa15.exe"+3010AF3: 48 89 C1 - mov rcx,rax
"fifa15.exe"+3010AF6: E8 B0 24 F6 FF - call fifa15.exe+2F72FAB
"fifa15.exe"+3010AFB: 48 8B 4F 20 - mov rcx,[rdi+20]
"fifa15.exe"+3010AFF: BA 48 00 00 00 - mov edx,00000048
"fifa15.exe"+3010B04: 48 89 C3 - mov rbx,rax
"fifa15.exe"+3010B07: E8 1F 06 0B 00 - call fifa15.exe+30C112B
}
1
"Unknown"
80000008
4 Bytes
edit_base
68
0
147
"Unknown"
80000008
4 Bytes
edit_base
68
8
148
"Unknown"
80000008
4 Bytes
edit_base
68
10
149
"Unknown"
80000008
4 Bytes
edit_base
68
18
5
"Kit Number"
80000008
4 Bytes
edit_base
68
20
6
"Preferred Foot"
80000008
4 Bytes
edit_base
68
28
7
"Unknown"
80000008
4 Bytes
edit_base
68
30
8
"Birth Year"
80000008
4 Bytes
edit_base
68
38
9
"Unknown"
80000008
4 Bytes
edit_base
68
40
10
"Unknown"
80000008
4 Bytes
edit_base
68
48
11
"Unknown"
80000008
4 Bytes
edit_base
68
50
154
"Unknown"
80000008
4 Bytes
edit_base
68
58
153
"Unknown"
80000008
4 Bytes
edit_base
68
60
152
"Unknown"
80000008
4 Bytes
edit_base
68
68
72
"Crossing"
80000008
4 Bytes
edit_base
68
240
73
"Finishing"
80000008
4 Bytes
edit_base
68
248
74
"Heading"
80000008
4 Bytes
edit_base
68
250
75
"Short Pass"
80000008
4 Bytes
edit_base
68
258
76
"Volleys"
80000008
4 Bytes
edit_base
68
260
77
"Week Foot"
80000008
4 Bytes
edit_base
68
268
78
"Marking"
80000008
4 Bytes
edit_base
68
270
79
"Stand Tackle"
80000008
4 Bytes
edit_base
68
278
80
"Slide Tackle"
80000008
4 Bytes
edit_base
68
280
81
"Dribbling"
80000008
4 Bytes
edit_base
68
288
82
"Curve"
80000008
4 Bytes
edit_base
68
290
83
"Free Kick"
80000008
4 Bytes
edit_base
68
298
84
"Long Pass"
80000008
4 Bytes
edit_base
68
2A0
85
"Ball Control"
80000008
4 Bytes
edit_base
68
2A8
86
"Shot Power"
80000008
4 Bytes
edit_base
68
2B0
87
"Jumping"
80000008
4 Bytes
edit_base
68
2B8
88
"Stamina"
80000008
4 Bytes
edit_base
68
2C0
89
"Strength"
80000008
4 Bytes
edit_base
68
2C8
90
"Long Shots"
80000008
4 Bytes
edit_base
68
2D0
91
"Acceleration"
80000008
4 Bytes
edit_base
68
2D8
92
"Sprint"
80000008
4 Bytes
edit_base
68
2E0
93
"Agility"
80000008
4 Bytes
edit_base
68
2E8
94
"Reactions"
80000008
4 Bytes
edit_base
68
2F0
95
"Balance"
80000008
4 Bytes
edit_base
68
2F8
96
"Aggression"
80000008
4 Bytes
edit_base
68
300
97
"Interceptions"
80000008
4 Bytes
edit_base
68
308
98
"Att. Position"
80000008
4 Bytes
edit_base
68
310
99
"Vision"
80000008
4 Bytes
edit_base
68
318
100
"Penalties"
80000008
4 Bytes
edit_base
68
320
101
"GK Diving"
80000008
4 Bytes
edit_base
68
328
102
"GK Handling"
80000008
4 Bytes
edit_base
68
330
103
"GK Kicking"
80000008
4 Bytes
edit_base
68
338
104
"GK Pos."
80000008
4 Bytes
edit_base
68
340
105
"GK Reflexes"
80000008
4 Bytes
edit_base
68
348
106
"Unknown"
80000008
4 Bytes
edit_base
68
350
107
"Unknown"
80000008
4 Bytes
edit_base
68
358
108
"Unknown"
80000008
4 Bytes
edit_base
68
360
150
"Edit Skill Moves"
80000008
Auto Assembler Script
{ Game : fifa15.exe
Version:
Date : 2015-02-16
Author : Howard
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(crossing_save,fifa15.exe,31 D2 48 89 45 E8 48 8B 45 58) // should be unique
alloc(newmem,$100,"fifa15.exe"+30114D0)
label(code)
label(return)
label(target_value)
newmem:
target_value:
dd 0
dd 0
code:
mov rax,[target_value]
lea rdx,[141DF1C50] //skillmoves
// mov rdx,[fifa15.exe+28B6C68] crossing
jmp return
crossing_save+14:
jmp code
nop
nop
return:
registersymbol(target_value)
registersymbol(crossing_save)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
crossing_save+14:
mov rdx,[fifa15.exe+28BAC60]
unregistersymbol(target_value)
unregistersymbol(crossing_save)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "fifa15.exe"+31C8930
"fifa15.exe"+31C890D: E8 C1 6D F4 FF - call fifa15.exe+310F6D3
"fifa15.exe"+31C8912: 89 FA - mov edx,edi
"fifa15.exe"+31C8914: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C8917: E8 76 8D F4 FF - call fifa15.exe+3111692
"fifa15.exe"+31C891C: 31 D2 - xor edx,edx
"fifa15.exe"+31C891E: 48 89 45 E8 - mov [rbp-18],rax
"fifa15.exe"+31C8922: 48 8B 45 58 - mov rax,[rbp+58]
"fifa15.exe"+31C8926: 4C 8B 00 - mov r8,[rax]
"fifa15.exe"+31C8929: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C892C: 41 FF 50 28 - call qword ptr [r8+28]
// ---------- INJECTING HERE ----------
"fifa15.exe"+31C8930: 48 8B 15 31 E3 6E FF - mov rdx,[fifa15.exe+28B6C68]
// ---------- DONE INJECTING ----------
"fifa15.exe"+31C8937: 48 8D 8D 10 06 00 00 - lea rcx,[rbp+00000610]
"fifa15.exe"+31C893E: 89 C7 - mov edi,eax
"fifa15.exe"+31C8940: E8 8E 6D F4 FF - call fifa15.exe+310F6D3
"fifa15.exe"+31C8945: 89 FA - mov edx,edi
"fifa15.exe"+31C8947: 48 89 C1 - mov rcx,rax
"fifa15.exe"+31C894A: E8 43 8D F4 FF - call fifa15.exe+3111692
"fifa15.exe"+31C894F: 31 D2 - xor edx,edx
"fifa15.exe"+31C8951: 48 89 45 F8 - mov [rbp-08],rax
"fifa15.exe"+31C8955: 48 8B 45 68 - mov rax,[rbp+68]
"fifa15.exe"+31C8959: 4C 8B 00 - mov r8,[rax]
}
151
"target_value"
80000008
8 Bytes
target_value
edit_base
13FFF0000
read_inject
1430114F3