6
"Find Player with AOB to Data"
Auto Assembler Script
[ENABLE]
aobscan(player, 63 68 72 69 73 74 6F 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 48 52 49 53 54 4F 46 )
label(_player)
registersymbol(_player)
player:
_player:
[DISABLE]
unregistersymbol(_player)
10
"Hitpoints full"
Float
_player+17c
7
"Hitpoints current"
0000FF
Float
_player+178
25
"Mana Full"
Float
_player+240
26
"Mana Current"
FF0000
Float
_player+23c
28
"Humanity full"
Float
_player+210
27
"Humanity current"
Float
_player+214
32
"Faith"
Float
_player+220
33
"====== Attributes ======"
1
13
"Strength"
Float
_player+1ac
14
"Dexterity"
Float
_player+1b0
15
"Stamina"
Float
_player+1b4
16
"Perception"
Float
_player+1b8
17
"Intelligence"
Float
_player+1bc
18
"Wits"
Float
_player+1c0
22
"Charisma"
Float
_player+1d8
23
"Manipulation"
Float
_player+1dc
24
"Appearance"
Float
_player+1e0
9
"XP earned this level"
4 Bytes
_player+354
8
"XP total"
4 Bytes
_player+358
3
"No Damage to ALL"
Auto Assembler Script
[ENABLE]
aobscanmodule(health,Vampire.exe,D8 64 24 10 56) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
// fsub dword ptr [esp+10]
push esi
jmp return
health:
jmp newmem
return:
registersymbol(health)
[DISABLE]
health:
db D8 64 24 10 56
unregistersymbol(health)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Vampire.exe+5201D
Vampire.exe+51FF8: 8B CE - mov ecx,esi
Vampire.exe+51FFA: E8 D1 57 00 00 - call Vampire.exe+577D0
Vampire.exe+51FFF: 85 C0 - test eax,eax
Vampire.exe+52001: 74 14 - je Vampire.exe+52017
Vampire.exe+52003: D9 44 24 10 - fld dword ptr [esp+10]
Vampire.exe+52007: D8 0D 64 B7 4E 00 - fmul dword ptr [Vampire.exe+EB764]
Vampire.exe+5200D: D9 5C 24 10 - fstp dword ptr [esp+10]
Vampire.exe+52011: EB 04 - jmp Vampire.exe+52017
Vampire.exe+52013: 8B 5C 24 20 - mov ebx,[esp+20]
Vampire.exe+52017: D9 86 0C 02 00 00 - fld dword ptr [esi+0000020C]
// ---------- INJECTING HERE ----------
Vampire.exe+5201D: D8 64 24 10 - fsub dword ptr [esp+10]
// ---------- DONE INJECTING ----------
Vampire.exe+52021: 56 - push esi
Vampire.exe+52022: D9 9E 0C 02 00 00 - fstp dword ptr [esi+0000020C]
Vampire.exe+52028: E8 73 1C FB FF - call Vampire.exe+3CA0
Vampire.exe+5202D: D9 86 0C 02 00 00 - fld dword ptr [esi+0000020C]
Vampire.exe+52033: D8 1D F4 B3 4E 00 - fcomp dword ptr [Vampire.exe+EB3F4]
Vampire.exe+52039: 83 C4 04 - add esp,04
Vampire.exe+5203C: DF E0 - fnstsw ax
Vampire.exe+5203E: F6 C4 01 - test ah,01
Vampire.exe+52041: 74 21 - je Vampire.exe+52064
Vampire.exe+52043: 8B 44 24 10 - mov eax,[esp+10]
}
42
"Pointer Pathes to XP"
1
34
"pointerscan result"
4 Bytes
"Vampire.exe"+0012F540
3E8
35
"pointerscan result"
4 Bytes
"Vampire.exe"+00216878
3E8
36
"pointerscan result"
4 Bytes
"Vampire.exe"+0022FC84
3E8
37
"pointerscan result"
4 Bytes
"Vampire.exe"+002326DC
3E8
38
"pointerscan result"
4 Bytes
"Vampire.exe"+002326E4
3E8
39
"pointerscan result"
4 Bytes
"Vampire.exe"+00144440
3E8
0
40
"pointerscan result"
4 Bytes
"Vampire.exe"+00144950
3E8
2E0
41
"pointerscan result"
4 Bytes
"Vampire.exe"+00215838
3E8
6C
read XP
Vampire.exe+3B93
E8
4D
0F
0D
00
8B
8D
E8
03
00
00
8B
15
FC
F4
52
write health
Vampire.exe+52022
D8
64
24
10
56
D9
9E
0C
02
00
00
E8
73
1C
FB
FF