1 "Don't lose lives/Health or Money" Auto Assembler Script [ENABLE] aobscanmodule(lives,treasure_adventure_game_1.0.exe,2B CA 89 48 08) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: // sub ecx,edx mov [eax+08],ecx jmp return lives: jmp newmem return: registersymbol(lives) [DISABLE] lives: db 2B CA 89 48 08 unregistersymbol(lives) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "treasure_adventure_game_1.0.exe"+C3CE "treasure_adventure_game_1.0.exe"+C3B7: 83 E9 02 - sub ecx,02 "treasure_adventure_game_1.0.exe"+C3BA: 75 17 - jne treasure_adventure_game_1.0.exe+C3D3 "treasure_adventure_game_1.0.exe"+C3BC: DD 40 08 - fld qword ptr [eax+08] "treasure_adventure_game_1.0.exe"+C3BF: DC 66 08 - fsub qword ptr [esi+08] "treasure_adventure_game_1.0.exe"+C3C2: 5F - pop edi "treasure_adventure_game_1.0.exe"+C3C3: 5E - pop esi "treasure_adventure_game_1.0.exe"+C3C4: DD 58 08 - fstp qword ptr [eax+08] "treasure_adventure_game_1.0.exe"+C3C7: C3 - ret "treasure_adventure_game_1.0.exe"+C3C8: 8B 56 08 - mov edx,[esi+08] "treasure_adventure_game_1.0.exe"+C3CB: 8B 48 08 - mov ecx,[eax+08] // ---------- INJECTING HERE ---------- "treasure_adventure_game_1.0.exe"+C3CE: 2B CA - sub ecx,edx "treasure_adventure_game_1.0.exe"+C3D0: 89 48 08 - mov [eax+08],ecx // ---------- DONE INJECTING ---------- "treasure_adventure_game_1.0.exe"+C3D3: 5F - pop edi "treasure_adventure_game_1.0.exe"+C3D4: 5E - pop esi "treasure_adventure_game_1.0.exe"+C3D5: C3 - ret "treasure_adventure_game_1.0.exe"+C3D6: 90 - nop "treasure_adventure_game_1.0.exe"+C3D7: 90 - nop "treasure_adventure_game_1.0.exe"+C3D8: 90 - nop "treasure_adventure_game_1.0.exe"+C3D9: 90 - nop "treasure_adventure_game_1.0.exe"+C3DA: 90 - nop "treasure_adventure_game_1.0.exe"+C3DB: 90 - nop "treasure_adventure_game_1.0.exe"+C3DC: 90 - nop } 607 "Super-Jump (press X multiple times to see...)" Auto Assembler Script [ENABLE] Platform.HandleRunObject+36B: db EB 30 // jmp Platform.HandleRunObject+39D [DISABLE] Platform.HandleRunObject+36B: db 75 30 // jne Platform.HandleRunObject+39D 618 "Freeze Time" Auto Assembler Script [ENABLE] aobscanmodule(timer,treasure_adventure_game_1.0.exe,DD 5E 08 5E 5D 5B C3) // should be unique alloc(newmem,$1000) label(code) label(return) newmem: code: // fstp qword ptr [esi+08] pop esi pop ebp jmp return timer: jmp newmem return: registersymbol(timer) [DISABLE] timer: db DD 5E 08 5E 5D unregistersymbol(timer) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "treasure_adventure_game_1.0.exe"+C2B8 "treasure_adventure_game_1.0.exe"+C2A4: 8B 06 - mov eax,[esi] "treasure_adventure_game_1.0.exe"+C2A6: 83 E8 00 - sub eax,00 "treasure_adventure_game_1.0.exe"+C2A9: 74 70 - je treasure_adventure_game_1.0.exe+C31B "treasure_adventure_game_1.0.exe"+C2AB: 48 - dec eax "treasure_adventure_game_1.0.exe"+C2AC: 74 11 - je treasure_adventure_game_1.0.exe+C2BF "treasure_adventure_game_1.0.exe"+C2AE: 48 - dec eax "treasure_adventure_game_1.0.exe"+C2AF: 75 75 - jne treasure_adventure_game_1.0.exe+C326 "treasure_adventure_game_1.0.exe"+C2B1: DD 43 08 - fld qword ptr [ebx+08] "treasure_adventure_game_1.0.exe"+C2B4: DC 46 08 - fadd qword ptr [esi+08] "treasure_adventure_game_1.0.exe"+C2B7: 5F - pop edi // ---------- INJECTING HERE ---------- "treasure_adventure_game_1.0.exe"+C2B8: DD 5E 08 - fstp qword ptr [esi+08] "treasure_adventure_game_1.0.exe"+C2BB: 5E - pop esi "treasure_adventure_game_1.0.exe"+C2BC: 5D - pop ebp // ---------- DONE INJECTING ---------- "treasure_adventure_game_1.0.exe"+C2BD: 5B - pop ebx "treasure_adventure_game_1.0.exe"+C2BE: C3 - ret "treasure_adventure_game_1.0.exe"+C2BF: 8B 7E 08 - mov edi,[esi+08] "treasure_adventure_game_1.0.exe"+C2C2: 83 C9 FF - or ecx,-01 "treasure_adventure_game_1.0.exe"+C2C5: 33 C0 - xor eax,eax "treasure_adventure_game_1.0.exe"+C2C7: F2 AE - repne scasb "treasure_adventure_game_1.0.exe"+C2C9: 8B 7B 08 - mov edi,[ebx+08] "treasure_adventure_game_1.0.exe"+C2CC: F7 D1 - not ecx "treasure_adventure_game_1.0.exe"+C2CE: 49 - dec ecx "treasure_adventure_game_1.0.exe"+C2CF: 8B E9 - mov ebp,ecx }