t6@YZD9K1wNGr-r%{Xg)$WK!!%FIj8SI8^R$jnYGPt.4TNab=2igEXMS8z_vO*ZWIK}*_ER[,N@9z*nL1,KKjoZ=gn2;/
3
"Find Value"
Auto Assembler Script
[ENABLE]
aobScanModule(hackingPoint, the friends of ringo ishikawa.exe, 48 8B 03 48 89 07 EB ?? 41 8B 40 ??)
label(cheat)
label(nopInstruction)
label(code)
label(exit)
alloc(newmem, 2048, hackingPoint)
alloc(searchForThisValue, 8)
registersymbol(hackingPoint)
registersymbol(searchForThisValue)
registersymbol(nopInstruction)
newmem:
code:
mov rax,[rbx]
mov [rdi],rax
cheat:
cmp rax, [searchForThisValue]
jne exit
nopInstruction:
nop [rbx]
jmp exit
hackingPoint:
jmp newmem
nop
exit:
[DISABLE]
hackingPoint:
db 48 8B 03 48 89 07
dealloc(*)
unregistersymbol(*)
4
"Value to Search For"
0
Double
searchForThisValue
5
"Generate Entries"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
-- Prevent print() from changing focus
getLuaEngine().cbShowOnPrint.Checked = false
-- Clear the console output
getLuaEngine().mOutput.clear()
local breakpoint = getAddressSafe('nopInstruction')
if not breakpoint then
print('nopInstruction not found!')
return
end
local found = {}
local count = 1
local function createRecord(address)
local record = AddressList.createMemoryRecord()
record.Description = string.format('%X', address)
record.Type = vtDouble
record.Address = address
record.appendToEntry(memrec)
end
local function on_found()
local address = RBX
if not found[address] then
found[address] = true
createRecord(address)
end
debug_continueFromBreakpoint()
end
debug_setBreakpoint(breakpoint, on_found)
registerSymbol('breakpoint', breakpoint, false)
[DISABLE]
local breakpoint = getAddressSafe('breakpoint')
if breakpoint then
debug_removeBreakpoint(breakpoint)
unregisterSymbol('breakpoint')
end
while memrec.Count > 0 do
memrec.Child[0].destroy()
end
6
"Get Pointers (unreliable)"
Auto Assembler Script
[ENABLE]
aobScanModule(hackingPoint, the friends of ringo ishikawa.exe, 48 8B 03 48 89 07 EB ?? 41 8B 40 ??)
label(cheat)
label(code)
label(exit)
label(found)
alloc(newmem, 2048, hackingPoint)
alloc(health, 8)
alloc(maxHealth, 8)
alloc(money, 8)
alloc(cigars, 8)
alloc(experience, 8)
registersymbol(hackingPoint)
registersymbol(health)
registersymbol(maxHealth)
registersymbol(money)
registersymbol(cigars)
registersymbol(experience)
newmem:
code:
mov rax,[rbx]
mov [rdi],rax
cheat:
cmp rsi, 9 // Health
jne @f
cmp r9, 1
jne @f
mov qword ptr [health], rbx
jmp found
@@:
cmp rsi, 8 // Max Health
jne @f
cmp r9, 1
jne @f
mov qword ptr [maxHealth], rbx
jmp found
@@:
cmp rsi, 5 // Money
jne @f
mov qword ptr [money], rbx
jmp found
@@:
cmp rsi, 3 // Cigars
jne @f
cmp r9, 1
jne @f
cmp r14, E
jne @f
mov qword ptr [cigars], rbx
jmp found
@@:
cmp rsi, 6 // Experience
jne exit
mov qword ptr [experience], rbx
found:
nop [rbx]
jmp exit
hackingPoint:
jmp newmem
nop
exit:
[DISABLE]
hackingPoint:
db 48 8B 03 48 89 07
dealloc(*)
unregistersymbol(*)
7
"Health"
0
Double
health
0
11
"Max Health"
0
Double
maxHealth
0
8
"Money"
0
Double
money
0
9
"Cigars"
0
Double
cigars
0
10
"Experience"
0
Double
experience
0
18
"Infinite Health"
Auto Assembler Script
[ENABLE]
aobscanModule(hackingPointGod, the friends of ringo ishikawa.exe, 48 89 03 48 8B 9C 24 ?? 00 00 00)
alloc(newmem,2048,hackingPointGod)
label(code)
label(cheat)
label(exit)
alloc(copyhackingPointGod, 11)
registersymbol(hackingPointGod)
registersymbol(copyhackingPointGod)
copyhackingPointGod:
readmem(hackingPointGod, 11)
newmem:
cmp qword ptr [rbx], rax // Compared old with new
jle code // If lower, there's nothing to do
cheat:
cmp rsi, 1
jne code
cmp [rsp+8], 0
je code
cmp [rsp+28], "the friends of ringo ishikawa.exe"+6B900
jne code
cmp [rsp+40], 0
je code
cmp [rsp+A0], 5
jne code
cmp [rsp+E0], 0
jne code
cmp [rsp+118], 0
jne code
nop [rbx]
mov rbx,[rsp+00000090]
jmp exit
code:
mov [rbx],rax
mov rbx,[rsp+00000090]
jmp exit
hackingPointGod:
jmp newmem
nop 6
exit:
[DISABLE]
hackingPointGod:
readmem(copyhackingPointGod, 11)
dealloc(*)
unregistersymbol(*)
13
"Cigar"
Auto Assembler Script
[ENABLE]
aobscanModule(hackingPointCigar, the friends of ringo ishikawa.exe, 49 8B 47 ?? 48 89 07)
label(code)
label(exit)
label(cheat)
alloc(newmem, 2048, hackingPointCigar)
alloc(copyhackingPointCigar, 7)
registersymbol(hackingPointCigar)
registersymbol(copyhackingPointCigar)
copyhackingPointCigar:
readmem(hackingPointCigar, 7)
newmem:
mov rax,[r15+30] // Altered value
cmp rdx, 1
jne code
cmp rsi, 3
jne code
cmp qword ptr [rdi], rax // Check if current value > altered value
ja cheat
cheat:
nop [rdi]
jmp exit
code:
// mov rax,[r15+30]
mov [rdi],rax
jmp exit
hackingPointCigar:
jmp newmem
nop 2
exit:
[DISABLE]
hackingPointCigar:
readmem(copyhackingPointCigar, 7)
dealloc(*)
unregistersymbol(*)
Code :mov rax,[rbx]
the friends of ringo ishikawa.exe+1C052A
26
E4
FF
EB
59
48
8B
03
48
89
07
EB
51
Code :mov [rdi],rax -- Cigar
the friends of ringo ishikawa.exe+1BF568
07
49
8B
47
30
48
89
07
83
2D
4A
0A
86
Code :mov [rbx],rax -- Health
the friends of ringo ishikawa.exe+27A3A3
D8
FF
48
8B
07
48
89
03
48
8B
9C
24
90