Full Godmode
Code:
[Enable]
alloc(Hook,256)
alloc(MHook,256)
label(Return)
label(PGM)
label(MReturn)
Hook:
cmp dword ptr [esp], 01218C3F //85 C0 75 ? 55 FF ? ? ? ? ? 85 ? 74 ? 8B ? 8B ? 6A ? 8B ? FF ? C7 ? 24 ? ? ? ? ? ? ? ? 8D ? ? ? ? ? 89
jne Return
mov dword ptr [esp], PGM
MHook:
cmp dword ptr [esp], 00990DC4 //85 ? 0F ? ? ? ? ? 39 ? ? ? ? ? 0F ? ? ? ? ? 8B ? E8 ? ? ? ? 85 ? 0F ? ? ? ? ? 8B ? ? ? ? ? 8D
jne MReturn
cmp dword ptr [esp+4C], 009AD7AF //85 ? 0F ? ? ? ? ? 8B ? E8 ? ? ? ? 85 ? 0F ? ? ? ? ? 8B ? E8 ? ? ? ? 85 ? 0F ? ? ? ? ? 8B ? E8 ? ? ? ? 85 ? 74 ? 8B ? E8 ? ? ? ? 85 ? 0F ? ? ? ? ? 33
jne MReturn
mov dword ptr [esp+4C], 009AE9DA //8D ? ? ? ? ? 8B ? ? 64 ? ? ? ? ? ? 59 5F 5E 5B 8B ? ? 33 ? E8 ? ? ? ? 83 ? ? 8B ? 5D C2 ? ? CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC 6A ? 68 ? ? ? ? 64 ? ? ? ? ? 50 83 ? ? 53
MReturn:
jmp 00745B60 //8B ? ? ? B8 ? ? ? ? 8D ? ? ? ? ? ? 3B ? 74 ? 8B ? 85 ? 75 ? C2 ? ? B8 ? ? ? ? C2 ? ? CC CC CC CC CC CC CC CC CC CC CC 33 ? C3 CC CC CC CC CC CC CC CC CC CC CC CC CC 33
01704CC0: //4Byte Scan of MReturn
dd MHook
Return:
jmp InterlockedDecrement
PGM:
jmp 01219AD3 //Address in 2nd jne below hook address
016400C4: //Above hook address
dd PGMHook
[Disable]
016400C4:
dd InterlockedDecrement
dealloc(Hook)
01704CC0:
dd 00745B60
DeAlloc(MHook)
Credits to Chubbz
Unlimited MP(Use with GND)
Code:
[ENABLE]
alloc(UMPHook,512)
label(Return)
label(UMP)
label(JMP1)
label(JMP2)
label(JMP3)
label(JMP4)
label(JMP5)
label(JMP6)
label(JMP7)
label(JMP8)
UMPHook:
//8B ? 24 ? 8B ? ? ? ? ? 51 05 ? ? ? ? 50 E8 ? ? ? ? 83 ? ? 85 C0 0F 85 ? ? ? ? 8B ? 24 ? 8B ? ? 52
cmp [esp+14], 011CC23C
jne Return
mov [esp+14], UMP
Return:
jmp InterlockedDecrement
UMP:
mov eax,[esp+68]
mov ecx,[eax+00001A30]
push ecx
add eax,00001A28
push eax
call 00401600
add esp,08
test eax,eax
jne JMP1
mov eax,[esp+60]
mov edx,[eax+3D]
push edx
add eax,39
push eax
call 00486640
movzx eax,ax
cwde
push eax
call 0056A960
add esp,0C
test eax,eax
je JMP1
test ebp,ebp
je JMP2
mov esi,[ebp+00000174]
mov [esp+30],00000000
mov byte ptr [esp+58],03
test edi,edi
jle JMP3
cmp dword ptr [ebp+000001B4],00
je JMP3
lea ecx,[esp+2C]
push ecx
lea edx,[esp+70]
push edx
lea ecx,[ebp+000001A8]
call 0065E580
test eax,eax
je JMP3
mov eax,[esp+30]
add esi,[eax+3C]
JMP3:
imul esi,edi
mov eax,AE147AE1
imul esi
sar edx,05
mov ecx,edx
shr ecx,1F
add ecx,edx
add edi,ecx
test edi,edi
jg JMP4
xor edi,edi
JMP4:
lea ecx,[esp+2C]
mov byte ptr [esp+58],02
call 0065E090
JMP1:
test ebp,ebp
je JMP2
mov ebx,[esp+6C]
push ebx
mov ecx,ebp
call 00667E60
push ebx
mov ecx,ebp
mov esi,eax
call 00667F10
imul esi,edi
mov ecx,eax
mov eax,51EB851F
imul esi
sar edx,05
mov eax,edx
shr eax,1F
add eax,edx
xor edx,edx
test eax,eax
setle dl
imul ecx,[esp+14]
dec edx
and edx,eax
mov edi,edx
mov eax,51EB851F
imul ecx
sar edx,05
mov eax,edx
shr eax,1F
add eax,edx
test eax,eax
jle JMP5
mov esi,eax
mov [esp+14],esi
jmp JMP6
JMP2:
mov ebx,[esp+6C]
mov esi,[esp+14]
JMP6:
test esi,esi
jnl JMP7
JMP5:
xor esi,esi
mov [esp+14],esi
JMP7:
test edi,edi
jnl JMP8
JMP8:
xor edi,edi
jmp 011CC23C+12B
016400C4: //Follow call above hook address (1st call dword ptr)
dd UMPHook
[DISABLE]
016400C4: //Same as above
dd InterlockedDecrement
DeAlloc(UMPHook)
Credits to lwlin
Spawn Point Control
Code:
[Enable]
Alloc(SPControl,128)
Label(Return)
SPControl:
cmp [esp],011DB70A //51 8B ? 89 ? 24 ? 50 8D ? ? E8 ? ? ? ? 8B ? ? ? ? ? E8
jne Return
mov [esp+8],#1403 //X Coord
mov [esp+C],#294 //Y Coord
Return:
//6A FF 68 ? ? ? ? 64 A1 ? ? ? ? 50 81 ? ? ? ? ? 53 55 56 57 A1 ? ? ? ? 33 ? 50 8D ? 24 ? ? ? ? 64 ? ? ? ? ? 8B ? 8B ? 24 ? ? ? ? 8B ? 24 ? ? ? ? 8B
jmp 012D21F0
017EB9BC: //4byte Scan ^ [5th Result]
dd SPControl
[Disable]
017EB9BC: //Same as above
dd 012D21F0 //Address in Return
DeAlloc(SPControl)
Credits to D.R.T
Sorry if this fills up the screen(I don't know how to do the "spoiler" button for this)