38
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "PalWorld"
local gameProcess = "Palworld-Win64-Shipping.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2024 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF. All other sources are allowed with permission.")
else
end
[DISABLE]
40
"[POINTERS]"
Auto Assembler Script
[ENABLE]
define(palPlayer,Palworld-Win64-Shipping.exe+8EF3E50)
registersymbol(palPlayer)
[DISABLE]
unregistersymbol(palPlayer)
49
"Player"
0000FF
1
44
"Technology Points"
0
4 Bytes
palPlayer
150
5C8
298
30
48
"Ancient Technology Points"
0
4 Bytes
palPlayer
154
5C8
298
30
47
"Level"
0
Byte
palPlayer
398
128
628
2D0
30
46
"Rank"
0
4 Bytes
palPlayer
3A4
128
628
2D0
30
45
"Experience"
0
4 Bytes
palPlayer
3A0
128
628
2D0
30
37
"Health"
0
4 Bytes
palPlayer
3F0
128
628
2D0
30
294
"Hunger"
0
Float
palPlayer
3FC
128
628
2D0
30
42
"Craft Speed"
0
4 Bytes
palPlayer
460
128
628
2D0
30
43
"Stat Points"
0
4 Bytes
palPlayer
4E4
128
628
2D0
30
39
"[SCRIPTS]"
1
9
"Get Selected Item"
Auto Assembler Script
[ENABLE]
aobscanmodule(getSelectedItem,Palworld-Win64-Shipping.exe,8B 81 54 01 00 00 41 89) // should be unique
alloc(newmem,$64,getSelectedItem)
label(code)
label(return)
label(gSelectedItem)
registersymbol(gSelectedItem)
newmem:
code:
mov [gSelectedItem],rcx
mov eax,[rcx+00000154]
jmp return
gSelectedItem:
dq 0
getSelectedItem:
jmp newmem
nop
return:
registersymbol(getSelectedItem)
[DISABLE]
getSelectedItem:
db 8B 81 54 01 00 00
unregistersymbol(getSelectedItem)
dealloc(newmem)
unregistersymbol(gSelectedItem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+15
Palworld-Win64-Shipping.exe+271604C: CC - int 3
Palworld-Win64-Shipping.exe+271604D: CC - int 3
Palworld-Win64-Shipping.exe+271604E: CC - int 3
Palworld-Win64-Shipping.exe+271604F: CC - int 3
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount: 48 8B 42 20 - mov rax,[rdx+20]
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+4: 45 33 C9 - xor r9d,r9d
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+7: 48 85 C0 - test rax,rax
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+A: 41 0F 95 C1 - setne r9b
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+E: 4C 03 C8 - add r9,rax
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+11: 4C 89 4A 20 - mov [rdx+20],r9
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+15: 8B 81 04 01 00 00 - mov eax,[rcx+00000104]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+1B: 41 89 00 - mov [r8],eax
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+1E: C3 - ret
Palworld-Win64-Shipping.UPalItemSlot::execGetStackCount+1F: CC - int 3
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData: 48 89 5C 24 08 - mov [rsp+08],rbx
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+5: 48 89 6C 24 18 - mov [rsp+18],rbp
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+A: 48 89 74 24 20 - mov [rsp+20],rsi
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+F: 57 - push rdi
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+10: 48 83 EC 20 - sub rsp,20
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+14: 33 FF - xor edi,edi
Palworld-Win64-Shipping.UPalItemIDManager::execGetStaticItemData+16: 49 8B F0 - mov rsi,r8
}
10
"Base"
0
4 Bytes
gSelectedItem
0
324
"Index ID"
0
4 Bytes
gSelectedItem
5C
325
"Item ID"
0
8 Bytes
gSelectedItem
12C
103849
"Amount"
0
4 Bytes
gSelectedItem
154
286
"Expiration (Food)"
0
Float
gSelectedItem
158
451
"Pal Editor (PalBox)"
Auto Assembler Script
[ENABLE]
aobscanmodule(getPal,Palworld-Win64-Shipping.exe,48 8B 81 A0 03 00 00 C3) // should be unique
alloc(newmem,$64,getPal)
label(code)
label(return)
label(gPal)
registersymbol(gPal)
newmem:
code:
mov [gPal],rcx
mov rax,[rcx+000003A0]
jmp return
gPal:
dq 0
getPal:
jmp newmem
nop
nop
return:
registersymbol(getPal)
[DISABLE]
getPal:
db 48 8B 81 A0 03 00 00
unregistersymbol(getPal)
dealloc(newmem)
unregistersymbol(gPal)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2AFC16E
Palworld-Win64-Shipping.exe+2AFC14E: CC - int 3
Palworld-Win64-Shipping.exe+2AFC14F: CC - int 3
Palworld-Win64-Shipping.exe+2AFC150: 48 89 5C 24 08 - mov [rsp+08],rbx
Palworld-Win64-Shipping.exe+2AFC155: 48 89 74 24 10 - mov [rsp+10],rsi
Palworld-Win64-Shipping.exe+2AFC15A: 57 - push rdi
Palworld-Win64-Shipping.exe+2AFC15B: 48 83 EC 20 - sub rsp,20
Palworld-Win64-Shipping.exe+2AFC15F: 33 C0 - xor eax,eax
Palworld-Win64-Shipping.exe+2AFC161: 48 8B DA - mov rbx,rdx
Palworld-Win64-Shipping.exe+2AFC164: 48 89 02 - mov [rdx],rax
Palworld-Win64-Shipping.exe+2AFC167: 48 63 B9 40 03 00 00 - movsxd rdi,dword ptr [rcx+00000340]
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2AFC16E: 48 8B B1 38 03 00 00 - mov rsi,[rcx+00000338]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2AFC175: 89 7A 08 - mov [rdx+08],edi
Palworld-Win64-Shipping.exe+2AFC178: 85 FF - test edi,edi
Palworld-Win64-Shipping.exe+2AFC17A: 75 16 - jne Palworld-Win64-Shipping.exe+2AFC192
Palworld-Win64-Shipping.exe+2AFC17C: 89 42 0C - mov [rdx+0C],eax
Palworld-Win64-Shipping.exe+2AFC17F: 48 8B C2 - mov rax,rdx
Palworld-Win64-Shipping.exe+2AFC182: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Palworld-Win64-Shipping.exe+2AFC187: 48 8B 74 24 38 - mov rsi,[rsp+38]
Palworld-Win64-Shipping.exe+2AFC18C: 48 83 C4 20 - add rsp,20
Palworld-Win64-Shipping.exe+2AFC190: 5F - pop rdi
Palworld-Win64-Shipping.exe+2AFC191: C3 - ret
}
452
"Index"
0
4 Bytes
gPal
0
453
"??"
0
4 Bytes
gPal
10
454
"ID"
0
4 Bytes
gPal
310
458
"Gender"
0
4 Bytes
gPal
2B8
455
"Level"
0
Byte
gPal
398
457
"Experience"
0
4 Bytes
gPal
3A0
456
"Rank"
0
Byte
gPal
399
103861
"Pal Condensed"
0
Byte
gPal
39A
459
"Shiny"
0
4 Bytes
gPal
3C8
460
"Active Skills"
1
461
"Skill 1"
0
2 Bytes
gPal
0
3D0
462
"Skill 2"
0
2 Bytes
gPal
2
3D0
463
"Skill 3"
0
2 Bytes
gPal
4
3D0
464
"Learned Skills"
1
465
"Skill 1"
0
2 Bytes
gPal
0
3E0
466
"Skill 2"
0
2 Bytes
gPal
2
3E0
467
"Skill 3"
0
2 Bytes
gPal
4
3E0
468
"Skill 4"
0
2 Bytes
gPal
6
3E0
469
"Skill 5"
0
2 Bytes
gPal
8
3E0
470
"Health"
0
4 Bytes
gPal
3F0
471
"HP"
0
Byte
gPal
3F8
472
"Melee"
0
Byte
gPal
3F9
473
"Attack"
0
Byte
gPal
3FA
474
"Defense"
0
Byte
gPal
3FB
475
"Hunger"
0
Float
gPal
3FC
476
"Passive Skills"
0
4 Bytes
gPal
410
477
"Passive Skills"
1
478
"Skill 1 ID"
0
8 Bytes
gPal
0
408
479
"Skill 2 ID"
0
8 Bytes
gPal
8
408
480
"Skill 3 ID"
0
8 Bytes
gPal
10
408
481
"Skill 4 ID"
0
8 Bytes
gPal
18
408
483
"Craft Speed"
0
4 Bytes
gPal
464
484
"half point"
0
4 Bytes
gPal
488
504
"Sanity"
0
Float
gPal
49C
103860
"Max Hunger"
0
Float
gPal
4DC
486
"Hunger Decrease"
0
Float
gPal
4C8
487
"Work Suitability"
0
4 Bytes
gPal
0
6D8
52
"Get Player"
Auto Assembler Script
[ENABLE]
aobscanmodule(getPlayer,Palworld-Win64-Shipping.exe,48 3B AE D0 00 00 00) // should be unique
alloc(newmem,$64,getPlayer)
label(code)
label(return)
label(gPlayer)
registersymbol(gPlayer)
newmem:
code:
cmp rbp,[rsi+000000D0]
mov [gPlayer],rsi
jmp return
gPlayer:
dq 0
getPlayer:
jmp newmem
nop 2
return:
registersymbol(getPlayer)
[DISABLE]
getPlayer:
db 48 3B AE D0 00 00 00
unregistersymbol(getPlayer)
dealloc(newmem)
unregistersymbol(gPlayer)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+4BDD5D9
Palworld-Win64-Shipping.exe+4BDD5AD: 0F 29 78 C8 - movaps [rax-38],xmm7
Palworld-Win64-Shipping.exe+4BDD5B1: 48 8B E9 - mov rbp,rcx
Palworld-Win64-Shipping.exe+4BDD5B4: 44 0F 29 40 B8 - movaps [rax-48],xmm8
Palworld-Win64-Shipping.exe+4BDD5B9: 44 0F 29 48 A8 - movaps [rax-58],xmm9
Palworld-Win64-Shipping.exe+4BDD5BE: E8 DD C9 FF FF - call Palworld-Win64-Shipping.exe+4BD9FA0
Palworld-Win64-Shipping.exe+4BDD5C3: 48 8B F0 - mov rsi,rax
Palworld-Win64-Shipping.exe+4BDD5C6: 48 8D 98 A8 00 00 00 - lea rbx,[rax+000000A8]
Palworld-Win64-Shipping.exe+4BDD5CD: 48 8B CB - mov rcx,rbx
Palworld-Win64-Shipping.exe+4BDD5D0: FF 15 62 24 1E 01 - call qword ptr [Palworld-Win64-Shipping.exe+5DBFA38]
Palworld-Win64-Shipping.exe+4BDD5D6: 45 33 FF - xor r15d,r15d
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+4BDD5D9: 48 3B AE D0 00 00 00 - cmp rbp,[rsi+000000D0]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+4BDD5E0: 0F 84 08 01 00 00 - je Palworld-Win64-Shipping.exe+4BDD6EE
Palworld-Win64-Shipping.exe+4BDD5E6: 48 89 AE D0 00 00 00 - mov [rsi+000000D0],rbp
Palworld-Win64-Shipping.exe+4BDD5ED: 8B 46 60 - mov eax,[rsi+60]
Palworld-Win64-Shipping.exe+4BDD5F0: 3B 86 8C 00 00 00 - cmp eax,[rsi+0000008C]
Palworld-Win64-Shipping.exe+4BDD5F6: 0F 84 83 00 00 00 - je Palworld-Win64-Shipping.exe+4BDD67F
Palworld-Win64-Shipping.exe+4BDD5FC: 48 8B CD - mov rcx,rbp
Palworld-Win64-Shipping.exe+4BDD5FF: 4C 8D 8E 90 00 00 00 - lea r9,[rsi+00000090]
Palworld-Win64-Shipping.exe+4BDD606: 49 8B 51 08 - mov rdx,[r9+08]
Palworld-Win64-Shipping.exe+4BDD60A: 48 C1 E9 04 - shr rcx,04
Palworld-Win64-Shipping.exe+4BDD60E: 8B C1 - mov eax,ecx
}
59
"Technology Points"
0
4 Bytes
gPlayer
150
5C8
298
30
D0
360
"Ancient Technology Points"
0
4 Bytes
gPlayer
154
5C8
298
30
D0
359
"Level"
0
Byte
gPlayer
398
128
628
2D0
30
D0
103854
"Rank"
0
4 Bytes
gPlayer
3A4
128
628
2D0
30
D0
60
"Experience"
0
4 Bytes
gPlayer
3A0
128
628
2D0
30
D0
53
"Health"
0
4 Bytes
gPlayer
3F0
128
628
2D0
30
D0
58
"Hunger"
0
Float
gPlayer
3FC
128
628
2D0
30
D0
103881
"Crafting Speed"
0
4 Bytes
gPlayer
460
128
628
2D0
30
D0
361
"Stat Points"
0
4 Bytes
gPlayer
4E4
128
628
2D0
30
D0
103855
"Stats"
1
61
"Health"
0
4 Bytes
gPlayer
8
4E8
128
628
2D0
30
D0
103856
"Stamina"
0
4 Bytes
gPlayer
14
4E8
128
628
2D0
30
D0
103857
"Attack"
0
4 Bytes
gPlayer
20
4E8
128
628
2D0
30
D0
103858
"Weight"
0
4 Bytes
gPlayer
2C
4E8
128
628
2D0
30
D0
103859
"Work Speed"
0
4 Bytes
gPlayer
44
4E8
128
628
2D0
30
D0
103863
"Bonus Stats"
1
103864
"Health"
0
4 Bytes
gPlayer
8
4F8
128
628
2D0
30
D0
103865
"Stamina"
0
4 Bytes
gPlayer
14
4F8
128
628
2D0
30
D0
103866
"Attack"
0
4 Bytes
gPlayer
20
4F8
128
628
2D0
30
D0
103867
"Work Speed"
0
4 Bytes
gPlayer
2C
4F8
128
628
2D0
30
D0
103868
"Weight"
0
4 Bytes
gPlayer
38
4F8
128
628
2D0
30
D0
263
"Gain 3 Stat Points per Level"
Auto Assembler Script
[ENABLE]
aobscanmodule(gainStatPoint,Palworld-Win64-Shipping.exe,FF 81 7C 04 00 00) // should be unique
alloc(newmem,$64,gainStatPoint)
label(code)
label(return)
newmem:
code:
add [rcx+0000047C],00000003
jmp return
gainStatPoint:
jmp newmem
nop
return:
registersymbol(gainStatPoint)
[DISABLE]
gainStatPoint:
db FF 81 7C 04 00 00
unregistersymbol(gainStatPoint)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+29F3294
Palworld-Win64-Shipping.exe+29F3287: CC - int 3
Palworld-Win64-Shipping.exe+29F3288: CC - int 3
Palworld-Win64-Shipping.exe+29F3289: CC - int 3
Palworld-Win64-Shipping.exe+29F328A: CC - int 3
Palworld-Win64-Shipping.exe+29F328B: CC - int 3
Palworld-Win64-Shipping.exe+29F328C: CC - int 3
Palworld-Win64-Shipping.exe+29F328D: CC - int 3
Palworld-Win64-Shipping.exe+29F328E: CC - int 3
Palworld-Win64-Shipping.exe+29F328F: CC - int 3
Palworld-Win64-Shipping.exe+29F3290: 48 83 EC 28 - sub rsp,28
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+29F3294: FF 81 E4 03 00 00 - inc [rcx+000003E4]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+29F329A: 48 8D 54 24 30 - lea rdx,[rsp+30]
Palworld-Win64-Shipping.exe+29F329F: 8B 81 E4 03 00 00 - mov eax,[rcx+000003E4]
Palworld-Win64-Shipping.exe+29F32A5: 48 81 C1 F8 00 00 00 - add rcx,000000F8
Palworld-Win64-Shipping.exe+29F32AC: 89 44 24 30 - mov [rsp+30],eax
Palworld-Win64-Shipping.exe+29F32B0: E8 3B 26 18 FE - call Palworld-Win64-Shipping.exe+B758F0
Palworld-Win64-Shipping.exe+29F32B5: 48 83 C4 28 - add rsp,28
Palworld-Win64-Shipping.exe+29F32B9: C3 - ret
Palworld-Win64-Shipping.exe+29F32BA: CC - int 3
Palworld-Win64-Shipping.exe+29F32BB: CC - int 3
Palworld-Win64-Shipping.exe+29F32BC: CC - int 3
}
260
"Always Roll X Passives"
0000FF
Auto Assembler Script
[ENABLE]
aobscanmodule(getPassiveRolls,Palworld-Win64-Shipping.exe,2B 53 08 3B C2) // should be unique
alloc(newmem,$64,getPassiveRolls)
label(code)
label(return)
label(gPassiveRolls)
registersymbol(gPassiveRolls)
newmem:
code:
mov eax,[gPassiveRolls]
cmp eax,edx
jmp return
gPassiveRolls:
dq 0
getPassiveRolls:
jmp newmem
return:
registersymbol(getPassiveRolls)
[DISABLE]
getPassiveRolls:
db 2B 53 08 3B C2
unregistersymbol(getPassiveRolls)
dealloc(newmem)
unregistersymbol(gPassiveRolls)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2B33025
Palworld-Win64-Shipping.exe+2B32FF8: 48 89 45 B0 - mov [rbp-50],rax
Palworld-Win64-Shipping.exe+2B32FFC: 48 8D 4C 24 60 - lea rcx,[rsp+60]
Palworld-Win64-Shipping.exe+2B33001: 48 8D 05 E8 82 D7 FF - lea rax,[Palworld-Win64-Shipping.exe+28AB2F0]
Palworld-Win64-Shipping.exe+2B33008: 4C 89 75 B8 - mov [rbp-48],r14
Palworld-Win64-Shipping.exe+2B3300C: 48 89 45 90 - mov [rbp-70],rax
Palworld-Win64-Shipping.exe+2B33010: 89 75 C0 - mov [rbp-40],esi
Palworld-Win64-Shipping.exe+2B33013: E8 68 D7 D6 FF - call Palworld-Win64-Shipping.exe+28A0780
Palworld-Win64-Shipping.exe+2B33018: 85 C0 - test eax,eax
Palworld-Win64-Shipping.exe+2B3301A: 0F 88 88 00 00 00 - js Palworld-Win64-Shipping.exe+2B330A8
Palworld-Win64-Shipping.exe+2B33020: BA 04 00 00 00 - mov edx,00000004
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2B33025: 2B 53 08 - sub edx,[rbx+08]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2B33028: 3B C2 - cmp eax,edx
Palworld-Win64-Shipping.exe+2B3302A: 0F 4C D0 - cmovl edx,eax
Palworld-Win64-Shipping.exe+2B3302D: 85 D2 - test edx,edx
Palworld-Win64-Shipping.exe+2B3302F: 7E 77 - jle Palworld-Win64-Shipping.exe+2B330A8
Palworld-Win64-Shipping.exe+2B33031: 48 8B 4C 24 78 - mov rcx,[rsp+78]
Palworld-Win64-Shipping.exe+2B33036: 4C 8D 44 24 48 - lea r8,[rsp+48]
Palworld-Win64-Shipping.exe+2B3303B: 89 54 24 20 - mov [rsp+20],edx
Palworld-Win64-Shipping.exe+2B3303F: 4C 8B CB - mov r9,rbx
Palworld-Win64-Shipping.exe+2B33042: 48 8D 54 24 50 - lea rdx,[rsp+50]
Palworld-Win64-Shipping.exe+2B33047: E8 94 E8 F7 FF - call Palworld-Win64-Shipping.exe+2AB18E0
}
261
"Amount"
0
4 Bytes
gPassiveRolls
330
"Get Pal Condense Data"
Auto Assembler Script
[ENABLE]
aobscanmodule(getPalCondense,Palworld-Win64-Shipping.exe,48 8B 80 B8 01 00 00 48 83 C4 28 C3 48 83 C4 28 C3 CC 48) // should be unique
alloc(newmem,$64,getPalCondense)
label(code)
label(return)
label(gPalCondense)
registersymbol(gPalCondense)
newmem:
code:
mov [gPalCondense],rax
mov rax,[rax+000001B8]
jmp return
gPalCondense:
dq 0
getPalCondense:
jmp newmem
nop 2
return:
registersymbol(getPalCondense)
[DISABLE]
getPalCondense:
db 48 8B 80 B8 01 00 00
unregistersymbol(getPalCondense)
dealloc(newmem)
unregistersymbol(gPalCondense)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+4AB980E
Palworld-Win64-Shipping.exe+4AB97ED: CC - int 3
Palworld-Win64-Shipping.exe+4AB97EE: CC - int 3
Palworld-Win64-Shipping.exe+4AB97EF: CC - int 3
Palworld-Win64-Shipping.exe+4AB97F0: 48 83 EC 28 - sub rsp,28
Palworld-Win64-Shipping.exe+4AB97F4: 48 8B D1 - mov rdx,rcx
Palworld-Win64-Shipping.exe+4AB97F7: 41 B8 01 00 00 00 - mov r8d,00000001
Palworld-Win64-Shipping.exe+4AB97FD: 48 8B 0D 14 45 EC 03 - mov rcx,[Palworld-Win64-Shipping.exe+897DD18]
Palworld-Win64-Shipping.exe+4AB9804: E8 27 40 59 00 - call Palworld-Win64-Shipping.exe+504D830
Palworld-Win64-Shipping.exe+4AB9809: 48 85 C0 - test rax,rax
Palworld-Win64-Shipping.exe+4AB980C: 74 0C - je Palworld-Win64-Shipping.exe+4AB981A
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+4AB980E: 48 8B 80 B8 01 00 00 - mov rax,[rax+000001B8]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+4AB9815: 48 83 C4 28 - add rsp,28
Palworld-Win64-Shipping.exe+4AB9819: C3 - ret
Palworld-Win64-Shipping.exe+4AB981A: 48 83 C4 28 - add rsp,28
Palworld-Win64-Shipping.exe+4AB981E: C3 - ret
Palworld-Win64-Shipping.exe+4AB981F: CC - int 3
Palworld-Win64-Shipping.exe+4AB9820: 48 83 EC 28 - sub rsp,28
Palworld-Win64-Shipping.exe+4AB9824: 48 8B D1 - mov rdx,rcx
Palworld-Win64-Shipping.exe+4AB9827: 41 B8 01 00 00 00 - mov r8d,00000001
Palworld-Win64-Shipping.exe+4AB982D: 48 8B 0D E4 44 EC 03 - mov rcx,[Palworld-Win64-Shipping.exe+897DD18]
Palworld-Win64-Shipping.exe+4AB9834: E8 F7 3F 59 00 - call Palworld-Win64-Shipping.exe+504D830
}
331
"Rank 1"
0
4 Bytes
gPalCondense
4
78
3F0
1B8
337
"Rank 2"
0
4 Bytes
gPalCondense
14
78
3F0
1B8
336
"Rank 3"
0
4 Bytes
gPalCondense
24
78
3F0
1B8
335
"Rank 4"
0
4 Bytes
gPalCondense
34
78
3F0
1B8
425
"Get Settings (in-Game)"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-06-24
Author : Administrator
Settings
}
[ENABLE]
aobscanmodule(getSettings,Palworld-Win64-Shipping.exe,2B 83 84 00 00 00 85 C0 0F) // should be unique
alloc(newmem,$64,getSettings)
label(code)
label(return)
label(gSettings)
registersymbol(gSettings)
newmem:
code:
mov [gSettings],rbx
sub eax,[rbx+00000084]
jmp return
gSettings:
dq 0
getSettings:
jmp newmem
nop
return:
registersymbol(getSettings)
[DISABLE]
getSettings:
db 2B 83 84 00 00 00
unregistersymbol(getSettings)
dealloc(newmem)
unregistersymbol(gSettings)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2C57429
Palworld-Win64-Shipping.exe+2C57403: F7 D0 - not eax
Palworld-Win64-Shipping.exe+2C57405: 21 45 EF - and [rbp-11],eax
Palworld-Win64-Shipping.exe+2C57408: E8 13 B2 F1 FD - call Palworld-Win64-Shipping.AK::WriteBytesCount::Reserve+9540
Palworld-Win64-Shipping.exe+2C5740D: 49 8D 5D 40 - lea rbx,[r13+40]
Palworld-Win64-Shipping.exe+2C57411: E9 EA FE FF FF - jmp Palworld-Win64-Shipping.exe+2C57300
Palworld-Win64-Shipping.exe+2C57416: 49 8B CD - mov rcx,r13
Palworld-Win64-Shipping.exe+2C57419: E8 52 37 14 00 - call Palworld-Win64-Shipping.exe+2D9AB70
Palworld-Win64-Shipping.exe+2C5741E: 49 8B CD - mov rcx,r13
Palworld-Win64-Shipping.exe+2C57421: 48 8B D8 - mov rbx,rax
Palworld-Win64-Shipping.exe+2C57424: E8 67 5A FF FF - call Palworld-Win64-Shipping.exe+2C4CE90
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2C57429: 2B 83 80 00 00 00 - sub eax,[rbx+00000080]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2C5742F: 85 C0 - test eax,eax
Palworld-Win64-Shipping.exe+2C57431: 0F 8E CC 00 00 00 - jng Palworld-Win64-Shipping.exe+2C57503
Palworld-Win64-Shipping.exe+2C57437: 8B F0 - mov esi,eax
Palworld-Win64-Shipping.exe+2C57439: 0F 1F 80 00 00 00 00 - nop dword ptr [rax+00000000]
Palworld-Win64-Shipping.exe+2C57440: 48 8D 4D 6F - lea rcx,[rbp+6F]
Palworld-Win64-Shipping.exe+2C57444: E8 77 03 FF FF - call Palworld-Win64-Shipping.exe+2C477C0
Palworld-Win64-Shipping.exe+2C57449: 48 8B F8 - mov rdi,rax
Palworld-Win64-Shipping.exe+2C5744C: 48 85 C0 - test rax,rax
Palworld-Win64-Shipping.exe+2C5744F: 0F 84 A4 00 00 00 - je Palworld-Win64-Shipping.exe+2C574F9
Palworld-Win64-Shipping.exe+2C57455: 48 63 48 08 - movsxd rcx,dword ptr [rax+08]
428
"Day Rate"
0
Float
gSettings
20
437
"Night Rate"
0
Float
gSettings
24
430
"Pal Capture Rate"
0
Float
gSettings
2C
436
"Player Hunger Depletion Rate"
0
Float
gSettings
44
438
"Player Stamina Depletion Rate"
0
Float
gSettings
48
433
"Pal Hunger Depletion Rate"
0
Float
gSettings
54
434
"Gatherable Items Multiplier"
0
Float
gSettings
6C
439
"Gatherable Objects Health Multiplier"
0
Float
gSettings
70
440
"Gatherable Objects Respawn Rate"
0
Float
gSettings
74
435
"Dropped Items Multiplier"
0
Float
gSettings
78
427
"Total World Items"
0
4 Bytes
gSettings
84
432
"Pals Per Base"
0
4 Bytes
gSettings
90
431
"Total Guild Members"
0
4 Bytes
gSettings
A0
429
"Incubation Period"
0
Float
gSettings
A8
50
"[DEBUG]"
0000FF
1
36
"Fetch Base Addresses"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"48 8D 05 ?? ?? ?? ?? 48 83 C4 28 C3 48 8D 0D ?? ?? ?? ?? E8 ?? ?? ?? ?? 83 3D ?? ?? ?? ?? FF 75 DF 66 0F 6F 05 ?? ?? ?? ?? 48 8D 05 ?? ?? ?? ?? 48 89 5C 24 20 48 8D 0D ?? ?? ?? ?? 33 DB",
}
local aobNames = {
"palPlayer"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: %s+%X",aobNames[i],process,address))
end
[DISABLE]
65
"Durability"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-01-29
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getDura,Palworld-Win64-Shipping.exe,F3 0F 10 41 08 C3 CC CC CC CC) // should be unique
alloc(newmem,$64,getDura)
label(code)
label(return)
newmem:
code:
movss xmm0,[rcx+08]
jmp return
getDura:
jmp newmem
return:
registersymbol(getDura)
[DISABLE]
getDura:
db F3 0F 10 41 08
unregistersymbol(getDura)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+15AE910
Palworld-Win64-Shipping.exe+15AE906: CC - int 3
Palworld-Win64-Shipping.exe+15AE907: CC - int 3
Palworld-Win64-Shipping.exe+15AE908: CC - int 3
Palworld-Win64-Shipping.exe+15AE909: CC - int 3
Palworld-Win64-Shipping.exe+15AE90A: CC - int 3
Palworld-Win64-Shipping.exe+15AE90B: CC - int 3
Palworld-Win64-Shipping.exe+15AE90C: CC - int 3
Palworld-Win64-Shipping.exe+15AE90D: CC - int 3
Palworld-Win64-Shipping.exe+15AE90E: CC - int 3
Palworld-Win64-Shipping.exe+15AE90F: CC - int 3
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+15AE910: F3 0F 10 41 08 - movss xmm0,[rcx+08]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+15AE915: C3 - ret
Palworld-Win64-Shipping.exe+15AE916: CC - int 3
Palworld-Win64-Shipping.exe+15AE917: CC - int 3
Palworld-Win64-Shipping.exe+15AE918: CC - int 3
Palworld-Win64-Shipping.exe+15AE919: CC - int 3
Palworld-Win64-Shipping.exe+15AE91A: CC - int 3
Palworld-Win64-Shipping.exe+15AE91B: CC - int 3
Palworld-Win64-Shipping.exe+15AE91C: CC - int 3
Palworld-Win64-Shipping.exe+15AE91D: CC - int 3
Palworld-Win64-Shipping.exe+15AE91E: CC - int 3
}
494
"Get Gear"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-06-27
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getGear,Palworld-Win64-Shipping.exe,48 03 83 90 00 00 00 48 8D 40 20) // should be unique
alloc(newmem,$64,getGear)
label(code)
label(return)
label(gGear)
registersymbol(gGear)
newmem:
code:
add rax,[rbx+00000090]
mov [gGear],rax
jmp return
gGear:
dq 0
getGear:
jmp newmem
nop 2
return:
registersymbol(getGear)
[DISABLE]
getGear:
db 48 03 83 90 00 00 00
unregistersymbol(getGear)
dealloc(newmem)
unregistersymbol(gGear)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2A6E922
Palworld-Win64-Shipping.exe+2A6E8FD: 84 C0 - test al,al
Palworld-Win64-Shipping.exe+2A6E8FF: 74 43 - je Palworld-Win64-Shipping.exe+2A6E944
Palworld-Win64-Shipping.exe+2A6E901: 48 8D 8B 90 00 00 00 - lea rcx,[rbx+00000090]
Palworld-Win64-Shipping.exe+2A6E908: E8 03 D3 FF FF - call Palworld-Win64-Shipping.exe+2A6BC10
Palworld-Win64-Shipping.exe+2A6E90D: 48 63 44 24 40 - movsxd rax,dword ptr [rsp+40]
Palworld-Win64-Shipping.exe+2A6E912: 83 F8 FF - cmp eax,-01
Palworld-Win64-Shipping.exe+2A6E915: 74 74 - je Palworld-Win64-Shipping.exe+2A6E98B
Palworld-Win64-Shipping.exe+2A6E917: 48 8D 04 40 - lea rax,[rax+rax*2]
Palworld-Win64-Shipping.exe+2A6E91B: 45 33 C0 - xor r8d,r8d
Palworld-Win64-Shipping.exe+2A6E91E: 48 C1 E0 04 - shl rax,04
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2A6E922: 48 03 83 90 00 00 00 - add rax,[rbx+00000090]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2A6E929: 48 8D 40 20 - lea rax,[rax+20]
Palworld-Win64-Shipping.exe+2A6E92D: 49 0F 44 C0 - cmove rax,r8
Palworld-Win64-Shipping.exe+2A6E931: 48 85 C0 - test rax,rax
Palworld-Win64-Shipping.exe+2A6E934: 74 55 - je Palworld-Win64-Shipping.exe+2A6E98B
Palworld-Win64-Shipping.exe+2A6E936: 48 8B 00 - mov rax,[rax]
Palworld-Win64-Shipping.exe+2A6E939: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Palworld-Win64-Shipping.exe+2A6E93E: 48 83 C4 20 - add rsp,20
Palworld-Win64-Shipping.exe+2A6E942: 5F - pop rdi
Palworld-Win64-Shipping.exe+2A6E943: C3 - ret
Palworld-Win64-Shipping.exe+2A6E944: 48 8D 8B E0 00 00 00 - lea rcx,[rbx+000000E0]
}
499
"Shield"
1
500
"Durability"
0
Float
gGear
70
20
496
"Body"
1
495
"Durability"
0
Float
gGear
70
50
497
"Weapon"
1
498
"Durability"
0
Float
gGear
70
E0
501
"Durability Max"
0
Float
gGear
74
E0
502
"??"
0
4 Bytes
gGear
7C
E0
503
"??"
0
2 Bytes
gGear
9C
E0
277
"Pal Always Rolls Perfect Attack/Defense"
Auto Assembler Script
[ENABLE]
aobscanmodule(palStats,$process,?? 65 00 00 00 2B ?? 85)
alloc(newmem,$1000,palStats)
label(palStatsBkp)
label(return)
newmem:
palStatsBkp:
readmem(palStats,5)
mov ebx,#100
jmp return
palStats:
jmp newmem
return:
registersymbol(palStats)
registersymbol(palStatsBkp)
[DISABLE]
palStats:
readmem(palStatsBkp,5)
unregistersymbol(palStats)
unregistersymbol(palStatsBkp)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2B59132
Palworld-Win64-Shipping.exe+2B59108: 75 25 - jne Palworld-Win64-Shipping.exe+2B5912F
Palworld-Win64-Shipping.exe+2B5910A: E8 D1 36 BB FF - call Palworld-Win64-Shipping.exe+270C7E0
Palworld-Win64-Shipping.exe+2B5910F: 48 8B D8 - mov rbx,rax
Palworld-Win64-Shipping.exe+2B59112: 48 83 B8 10 01 00 00 00 - cmp qword ptr [rax+00000110],00
Palworld-Win64-Shipping.exe+2B5911A: 75 0C - jne Palworld-Win64-Shipping.exe+2B59128
Palworld-Win64-Shipping.exe+2B5911C: 48 8B 10 - mov rdx,[rax]
Palworld-Win64-Shipping.exe+2B5911F: 48 8B C8 - mov rcx,rax
Palworld-Win64-Shipping.exe+2B59122: FF 92 F0 03 00 00 - call qword ptr [rdx+000003F0]
Palworld-Win64-Shipping.exe+2B59128: 48 8B 9B 10 01 00 00 - mov rbx,[rbx+00000110]
Palworld-Win64-Shipping.exe+2B5912F: 8B 5B 5C - mov ebx,[rbx+5C]
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2B59132: BF 65 00 00 00 - mov edi,00000065
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2B59137: 2B FB - sub edi,ebx
Palworld-Win64-Shipping.exe+2B59139: 85 FF - test edi,edi
Palworld-Win64-Shipping.exe+2B5913B: 0F 8E D0 00 00 00 - jng Palworld-Win64-Shipping.exe+2B59211
Palworld-Win64-Shipping.exe+2B59141: FF 15 79 9D 29 03 - call qword ptr [Palworld-Win64-Shipping.exe+5DF2EC0]
Palworld-Win64-Shipping.exe+2B59147: 8D 4F FF - lea ecx,[rdi-01]
Palworld-Win64-Shipping.exe+2B5914A: 66 0F 6E C7 - movd xmm0,edi
Palworld-Win64-Shipping.exe+2B5914E: 25 FF 7F 00 00 - and eax,00007FFF
Palworld-Win64-Shipping.exe+2B59153: 0F 5B C0 - cvtdq2ps xmm0,xmm0
Palworld-Win64-Shipping.exe+2B59156: 66 0F 6E D0 - movd xmm2,eax
Palworld-Win64-Shipping.exe+2B5915A: 0F 5B D2 - cvtdq2ps xmm2,xmm2
}
278
"Increase to Roll Over Maximum"
0
4 Bytes
palStatsBkp+6
103841
"Damage Multiplier"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-06-27
Author : Administrator
}
[ENABLE]
aobscanmodule(getDamage,Palworld-Win64-Shipping.exe,8B 97 80 01 00 00 48 8B CB) // should be unique
alloc(newmem,$64,getDamage)
label(code)
label(return)
label(gDamage)
registersymbol(gDamage)
newmem:
code:
mov edx,[rdi+00000180]
imul edx,[gDamage]
jmp return
gDamage:
dd (int)1
getDamage:
jmp newmem
nop
return:
registersymbol(getDamage)
[DISABLE]
getDamage:
db 8B 97 80 01 00 00
unregistersymbol(getDamage)
dealloc(newmem)
unregistersymbol(gDamage)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2CC6865
Palworld-Win64-Shipping.exe+2CC6842: E8 F9 D6 BB FF - call Palworld-Win64-Shipping.exe+2883F40
Palworld-Win64-Shipping.exe+2CC6847: 48 8B 4F 10 - mov rcx,[rdi+10]
Palworld-Win64-Shipping.exe+2CC684B: 4C 8D 40 30 - lea r8,[rax+30]
Palworld-Win64-Shipping.exe+2CC684F: 48 63 40 38 - movsxd rax,dword ptr [rax+38]
Palworld-Win64-Shipping.exe+2CC6853: 3B 41 38 - cmp eax,[rcx+38]
Palworld-Win64-Shipping.exe+2CC6856: 7F 25 - jg Palworld-Win64-Shipping.exe+2CC687D
Palworld-Win64-Shipping.exe+2CC6858: 48 8B D0 - mov rdx,rax
Palworld-Win64-Shipping.exe+2CC685B: 48 8B 41 30 - mov rax,[rcx+30]
Palworld-Win64-Shipping.exe+2CC685F: 4C 39 04 D0 - cmp [rax+rdx*8],r8
Palworld-Win64-Shipping.exe+2CC6863: 75 18 - jne Palworld-Win64-Shipping.exe+2CC687D
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2CC6865: 8B 97 80 01 00 00 - mov edx,[rdi+00000180]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2CC686B: 48 8B CB - mov rcx,rbx
Palworld-Win64-Shipping.exe+2CC686E: 48 8B 5C 24 48 - mov rbx,[rsp+48]
Palworld-Win64-Shipping.exe+2CC6873: 48 83 C4 30 - add rsp,30
Palworld-Win64-Shipping.exe+2CC6877: 5F - pop rdi
Palworld-Win64-Shipping.exe+2CC6878: E9 93 46 FF FF - jmp Palworld-Win64-Shipping.exe+2CBAF10
Palworld-Win64-Shipping.exe+2CC687D: 48 8B 5C 24 48 - mov rbx,[rsp+48]
Palworld-Win64-Shipping.exe+2CC6882: B8 01 00 00 00 - mov eax,00000001
Palworld-Win64-Shipping.exe+2CC6887: 48 83 C4 30 - add rsp,30
Palworld-Win64-Shipping.exe+2CC688B: 5F - pop rdi
Palworld-Win64-Shipping.exe+2CC688C: C3 - ret
}
103843
"Multiplier"
0
4 Bytes
gDamage
103842
"Auto Assemble script"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-06-27
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Palworld-Win64-Shipping.exe,ERROR: Could not find unique AOB, tried code "BA 04 00 00 00") // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov edx,00000004
jmp return
INJECT:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db BA 04 00 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+BDFF85
Palworld-Win64-Shipping.exe+BDFF65: 8B CB - mov ecx,ebx
Palworld-Win64-Shipping.exe+BDFF67: 2B CA - sub ecx,edx
Palworld-Win64-Shipping.exe+BDFF69: E8 12 D8 F8 FF - call Palworld-Win64-Shipping.AK::WriteBytesCount::Reserve+AED0
Palworld-Win64-Shipping.exe+BDFF6E: 83 7F 0C 00 - cmp dword ptr [rdi+0C],00
Palworld-Win64-Shipping.exe+BDFF72: 74 11 - je Palworld-Win64-Shipping.exe+BDFF85
Palworld-Win64-Shipping.exe+BDFF74: 48 8D 14 5B - lea rdx,[rbx+rbx*2]
Palworld-Win64-Shipping.exe+BDFF78: 48 C1 EA 03 - shr rdx,03
Palworld-Win64-Shipping.exe+BDFF7C: 48 83 C2 10 - add rdx,10
Palworld-Win64-Shipping.exe+BDFF80: 48 03 D3 - add rdx,rbx
Palworld-Win64-Shipping.exe+BDFF83: EB 0C - jmp Palworld-Win64-Shipping.exe+BDFF91
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+BDFF85: BA 04 00 00 00 - mov edx,00000004
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+BDFF8A: 48 3B DA - cmp rbx,rdx
Palworld-Win64-Shipping.exe+BDFF8D: 48 0F 47 D3 - cmova rdx,rbx
Palworld-Win64-Shipping.exe+BDFF91: 48 8D 0C D5 00 00 00 00 - lea rcx,[rdx*8+00000000]
Palworld-Win64-Shipping.exe+BDFF99: BA 04 00 00 00 - mov edx,00000004
Palworld-Win64-Shipping.exe+BDFF9E: E8 6D 05 17 02 - call Palworld-Win64-Shipping.exe+2D50510
Palworld-Win64-Shipping.exe+BDFFA3: 48 C1 E8 03 - shr rax,03
Palworld-Win64-Shipping.exe+BDFFA7: B9 FF FF FF 7F - mov ecx,7FFFFFFF
Palworld-Win64-Shipping.exe+BDFFAC: 3B D8 - cmp ebx,eax
Palworld-Win64-Shipping.exe+BDFFAE: 0F 4F C1 - cmovg eax,ecx
Palworld-Win64-Shipping.exe+BDFFB1: 89 47 0C - mov [rdi+0C],eax
}
103852
"Randomize All Items"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-06-28
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Palworld-Win64-Shipping.exe,48 8B 84 24 80 00 00 00 33 F6) // should be unique
alloc(newmem,$64,INJECT)
label(code)
label(return)
newmem:
code:
push rax
push rdx
push rcx
push rbx
push r8
push r9
push r10
call rand // puts a random number into EAX
mov ebx,#1 // makes EDX 0 to make sure you're only dividing EAX by a number
mov ecx,#5 // moves 10 (decimal) into ECX.
cmp ecx,edx
cmovl ecx,edx
inc ecx
sub ecx,edx
xor edx,edx
idiv ecx
//add edx,#1
mov eax,edx
//div ecx // divides EDX:EAX (the random number) by ECX (10)
cvtsi2ss xmm7,eax
pop r10
pop r9
pop r8
pop rbx
pop rcx
pop rdx
pop rax
mov rax,[rsp+00000080]
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 48 8B 84 24 80 00 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2A67DA4
Palworld-Win64-Shipping.exe+2A67D8B: CC - int 3
Palworld-Win64-Shipping.exe+2A67D8C: CC - int 3
Palworld-Win64-Shipping.exe+2A67D8D: CC - int 3
Palworld-Win64-Shipping.exe+2A67D8E: CC - int 3
Palworld-Win64-Shipping.exe+2A67D8F: CC - int 3
Palworld-Win64-Shipping.exe+2A67D90: 48 89 5C 24 10 - mov [rsp+10],rbx
Palworld-Win64-Shipping.exe+2A67D95: 48 89 6C 24 18 - mov [rsp+18],rbp
Palworld-Win64-Shipping.exe+2A67D9A: 48 89 74 24 20 - mov [rsp+20],rsi
Palworld-Win64-Shipping.exe+2A67D9F: 57 - push rdi
Palworld-Win64-Shipping.exe+2A67DA0: 48 83 EC 30 - sub rsp,30
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2A67DA4: 48 8B 84 24 80 00 00 00 - mov rax,[rsp+00000080]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2A67DAC: 33 F6 - xor esi,esi
Palworld-Win64-Shipping.exe+2A67DAE: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Palworld-Win64-Shipping.exe+2A67DB3: 48 8B FA - mov rdi,rdx
Palworld-Win64-Shipping.exe+2A67DB6: 0F 28 F3 - movaps xmm6,xmm3
Palworld-Win64-Shipping.exe+2A67DB9: 89 72 08 - mov [rdx+08],esi
Palworld-Win64-Shipping.exe+2A67DBC: 0F 2F 35 ED 1B 3D 04 - comiss xmm6,[Palworld-Win64-Shipping.exe+6E399B0]
Palworld-Win64-Shipping.exe+2A67DC3: 4C 89 02 - mov [rdx],r8
Palworld-Win64-Shipping.exe+2A67DC6: 0F 10 00 - movups xmm0,[rax]
Palworld-Win64-Shipping.exe+2A67DC9: F2 0F 10 48 10 - movsd xmm1,[rax+10]
Palworld-Win64-Shipping.exe+2A67DCE: 0F 11 42 10 - movups [rdx+10],xmm0
}
253
"Instant Egg / Chest Respawn (careful leaving this on)"
Auto Assembler Script
[ENABLE]
aobscanmodule(mapObjects,$process,48 39 ?? ?? ?? 7C ?? 48 8B ?? 48 8B)
mapObjects:
db EB 05
registersymbol(mapObjects)
[DISABLE]
mapObjects:
db 48 39
unregistersymbol(mapObjects)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+51
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+2D: 48 89 5C 24 30 - mov [rsp+30],rbx
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+32: 49 8B 18 - mov rbx,[r8]
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+35: 48 85 DB - test rbx,rbx
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+38: 79 05 - jns Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+3F
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+3A: 45 84 C9 - test r9b,r9b
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+3D: 74 71 - je Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+B0
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+3F: E8 3C EE 0B 00 - call Palworld-Win64-Shipping.UPalUtility::GetTimeManager
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+44: 48 8D 54 24 40 - lea rdx,[rsp+40]
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+49: 48 8B C8 - mov rcx,rax
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+4C: E8 6F 02 0B 00 - call Palworld-Win64-Shipping.UPalTimeManager::GetCurrentPalWorldTime
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+51: 48 39 5C 24 40 - cmp [rsp+40],rbx
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+56: 7C 58 - jl Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+B0
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+58: 48 8B 07 - mov rax,[rdi]
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+5B: 48 8B CF - mov rcx,rdi
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+5E: FF 90 E0 06 00 00 - call qword ptr [rax+000006E0]
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+64: 8B D5 - mov edx,ebp
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+66: 48 8B CF - mov rcx,rdi
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+69: 84 C0 - test al,al
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+6B: 75 07 - jne Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+74
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+6D: E8 1E CA FF FF - call Palworld-Win64-Shipping.APalMapObjectSpawnerBase::SetNextLotteryGameTimeByLotteryCoolTime
Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+72: EB 3C - jmp Palworld-Win64-Shipping.APalMapObjectSpawnerBase::TryRespawnFor+B0
}
103871
"Get Drops After"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-07-09
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Palworld-Win64-Shipping.exe,44 8B 43 08 45 33 C9 48 8B CF) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov r8d,[rbx+08]
push rax
push rdx
push rcx
push rbx
push rsi
mov rsi,r8d
call rand // puts a random number into EAX
mov ebx,#1 // makes EDX 0 to make sure you're only dividing EAX by a number
mov ecx,rsi // moves 10 (decimal) into ECX.
cmp ecx,edx
cmovl ecx,edx
inc ecx
sub ecx,edx
xor edx,edx
idiv ecx
//add edx,#1
mov eax,edx
//div ecx // divides EDX:EAX (the random number) by ECX (10)
mov r8d,eax
pop rsi
pop rbx
pop rcx
pop rdx
pop rax
xor r9d,r9d
jmp return
INJECT:
jmp newmem
nop 2
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 44 8B 43 08 45 33 C9
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2CA2F43
Palworld-Win64-Shipping.exe+2CA2F1B: F7 47 08 00 00 00 60 - test [rdi+08],60000000
Palworld-Win64-Shipping.exe+2CA2F22: 75 3F - jne Palworld-Win64-Shipping.exe+2CA2F63
Palworld-Win64-Shipping.exe+2CA2F24: 48 63 C6 - movsxd rax,esi
Palworld-Win64-Shipping.exe+2CA2F27: 49 8B DE - mov rbx,r14
Palworld-Win64-Shipping.exe+2CA2F2A: 48 8D 0C 80 - lea rcx,[rax+rax*4]
Palworld-Win64-Shipping.exe+2CA2F2E: 49 8D 34 CE - lea rsi,[r14+rcx*8]
Palworld-Win64-Shipping.exe+2CA2F32: 4C 3B F6 - cmp r14,rsi
Palworld-Win64-Shipping.exe+2CA2F35: 74 2C - je Palworld-Win64-Shipping.exe+2CA2F63
Palworld-Win64-Shipping.exe+2CA2F37: 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
Palworld-Win64-Shipping.exe+2CA2F40: 0F 10 13 - movups xmm2,[rbx]
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2CA2F43: 44 8B 43 08 - mov r8d,[rbx+08]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2CA2F47: 45 33 C9 - xor r9d,r9d
Palworld-Win64-Shipping.exe+2CA2F4A: 48 8B CF - mov rcx,rdi
Palworld-Win64-Shipping.exe+2CA2F4D: 0F 11 55 B7 - movups [rbp-49],xmm2
Palworld-Win64-Shipping.exe+2CA2F51: 48 8B 55 B7 - mov rdx,[rbp-49]
Palworld-Win64-Shipping.exe+2CA2F55: E8 86 43 F2 FF - call Palworld-Win64-Shipping.exe+2BC72E0
Palworld-Win64-Shipping.exe+2CA2F5A: 48 83 C3 28 - add rbx,28
Palworld-Win64-Shipping.exe+2CA2F5E: 48 3B DE - cmp rbx,rsi
Palworld-Win64-Shipping.exe+2CA2F61: 75 DD - jne Palworld-Win64-Shipping.exe+2CA2F40
Palworld-Win64-Shipping.exe+2CA2F63: 4C 8B BC 24 D0 00 00 00 - mov r15,[rsp+000000D0]
Palworld-Win64-Shipping.exe+2CA2F6B: 4D 85 F6 - test r14,r14
}
103877
"Get Drops After"
Auto Assembler Script
{ Game : Palworld-Win64-Shipping.exe
Version:
Date : 2024-07-09
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Palworld-Win64-Shipping.exe,44 8B 43 08 45 33 C9 48 8B CF) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov r8d,[rbx+08]
push rax
push rdx
push rcx
push rbx
push rsi
mov rsi,r8d
call rand // puts a random number into EAX
xor edx,edx // makes EDX 0 to make sure you're only dividing EAX by a number
mov ecx,rsi // moves 4 (decimal) into ECX.
div ecx // divides EDX:EAX (the random number) by ECX (10)
add edx,#1
mov r8d,edx
pop rsi
pop rbx
pop rcx
pop rdx
pop rax
xor r9d,r9d
jmp return
INJECT:
jmp newmem
nop 2
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 44 8B 43 08 45 33 C9
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Palworld-Win64-Shipping.exe+2CA2F43
Palworld-Win64-Shipping.exe+2CA2F1B: F7 47 08 00 00 00 60 - test [rdi+08],60000000
Palworld-Win64-Shipping.exe+2CA2F22: 75 3F - jne Palworld-Win64-Shipping.exe+2CA2F63
Palworld-Win64-Shipping.exe+2CA2F24: 48 63 C6 - movsxd rax,esi
Palworld-Win64-Shipping.exe+2CA2F27: 49 8B DE - mov rbx,r14
Palworld-Win64-Shipping.exe+2CA2F2A: 48 8D 0C 80 - lea rcx,[rax+rax*4]
Palworld-Win64-Shipping.exe+2CA2F2E: 49 8D 34 CE - lea rsi,[r14+rcx*8]
Palworld-Win64-Shipping.exe+2CA2F32: 4C 3B F6 - cmp r14,rsi
Palworld-Win64-Shipping.exe+2CA2F35: 74 2C - je Palworld-Win64-Shipping.exe+2CA2F63
Palworld-Win64-Shipping.exe+2CA2F37: 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
Palworld-Win64-Shipping.exe+2CA2F40: 0F 10 13 - movups xmm2,[rbx]
// ---------- INJECTING HERE ----------
Palworld-Win64-Shipping.exe+2CA2F43: 44 8B 43 08 - mov r8d,[rbx+08]
// ---------- DONE INJECTING ----------
Palworld-Win64-Shipping.exe+2CA2F47: 45 33 C9 - xor r9d,r9d
Palworld-Win64-Shipping.exe+2CA2F4A: 48 8B CF - mov rcx,rdi
Palworld-Win64-Shipping.exe+2CA2F4D: 0F 11 55 B7 - movups [rbp-49],xmm2
Palworld-Win64-Shipping.exe+2CA2F51: 48 8B 55 B7 - mov rdx,[rbp-49]
Palworld-Win64-Shipping.exe+2CA2F55: E8 86 43 F2 FF - call Palworld-Win64-Shipping.exe+2BC72E0
Palworld-Win64-Shipping.exe+2CA2F5A: 48 83 C3 28 - add rbx,28
Palworld-Win64-Shipping.exe+2CA2F5E: 48 3B DE - cmp rbx,rsi
Palworld-Win64-Shipping.exe+2CA2F61: 75 DD - jne Palworld-Win64-Shipping.exe+2CA2F40
Palworld-Win64-Shipping.exe+2CA2F63: 4C 8B BC 24 D0 00 00 00 - mov r15,[rsp+000000D0]
Palworld-Win64-Shipping.exe+2CA2F6B: 4D 85 F6 - test r14,r14
}
NoClipThread
7FF6604E0000
0.9.9
- Updated for 0.6.1.75453
- Fixed Pal Editor
- Updated for 0.5.0.67935
- Updated for 0.4.12.64723
- Updated for 0.3.9.59545
- Updated for 0.3.7.58983
- Updated for 0.3.6.57672
- Updated for 0.3.4.55710
- Updated for 0.3.3.55731
- Updated for 0.3.1.55394
- Updated for 0.2.4.0
- Added Work Suitibility to Pal Editor
- Added Stat Points for Server