1
"F1: do not spend attribute points"
Auto Assembler Script
[ENABLE]
aobscanmodule(bonuspoints,Wiz8.exe,29 06 01 44 BE 08) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
// sub [esi],eax
add [esi+edi*4+08],eax
jmp return
bonuspoints:
jmp newmem
nop
return:
registersymbol(bonuspoints)
[DISABLE]
bonuspoints:
db 29 06 01 44 BE 08
unregistersymbol(bonuspoints)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Wiz8.exe+157A54
Wiz8.exe+157A2E: 7E 04 - jle Wiz8.exe+157A34
Wiz8.exe+157A30: 2B CB - sub ecx,ebx
Wiz8.exe+157A32: 8B C1 - mov eax,ecx
Wiz8.exe+157A34: 8B 6C 24 14 - mov ebp,[esp+14]
Wiz8.exe+157A38: 8D 0C BF - lea ecx,[edi+edi*4]
Wiz8.exe+157A3B: 8B 94 8D E5 00 00 00 - mov edx,[ebp+ecx*4+000000E5]
Wiz8.exe+157A42: 8D 4C 8D 00 - lea ecx,[ebp+ecx*4+00]
Wiz8.exe+157A46: 03 D0 - add edx,eax
Wiz8.exe+157A48: 89 91 E5 00 00 00 - mov [ecx+000000E5],edx
Wiz8.exe+157A4E: 01 81 E9 00 00 00 - add [ecx+000000E9],eax
// ---------- INJECTING HERE ----------
Wiz8.exe+157A54: 29 06 - sub [esi],eax
// ---------- DONE INJECTING ----------
Wiz8.exe+157A56: 01 44 BE 08 - add [esi+edi*4+08],eax
Wiz8.exe+157A5A: 83 3E 00 - cmp dword ptr [esi],00
Wiz8.exe+157A5D: BB 01 00 00 00 - mov ebx,00000001
Wiz8.exe+157A62: 7E 15 - jle Wiz8.exe+157A79
Wiz8.exe+157A64: 33 C0 - xor eax,eax
Wiz8.exe+157A66: 8D 4E 08 - lea ecx,[esi+08]
Wiz8.exe+157A69: 8B 11 - mov edx,[ecx]
Wiz8.exe+157A6B: 3B 51 20 - cmp edx,[ecx+20]
Wiz8.exe+157A6E: 7C 69 - jl Wiz8.exe+157AD9
Wiz8.exe+157A70: 40 - inc eax
}
Toggle Activation
112
0
Activate
Deactivate
38
"F2: Invulnerability"
Auto Assembler Script
[ENABLE]
aobscanmodule(health,Wiz8.exe,89 87 11 0B 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
// mov [edi+00000B11],eax
jmp return
health:
jmp newmem
nop
return:
registersymbol(health)
[DISABLE]
health:
db 89 87 11 0B 00 00
unregistersymbol(health)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Wiz8.exe+12AAB0
Wiz8.exe+12AA9D: 5D - pop ebp
Wiz8.exe+12AA9E: 5B - pop ebx
Wiz8.exe+12AA9F: C3 - ret
Wiz8.exe+12AAA0: 8B 87 11 0B 00 00 - mov eax,[edi+00000B11]
Wiz8.exe+12AAA6: 3B D8 - cmp ebx,eax
Wiz8.exe+12AAA8: 76 02 - jna Wiz8.exe+12AAAC
Wiz8.exe+12AAAA: 8B D8 - mov ebx,eax
Wiz8.exe+12AAAC: 2B C3 - sub eax,ebx
Wiz8.exe+12AAAE: 53 - push ebx
Wiz8.exe+12AAAF: 56 - push esi
// ---------- INJECTING HERE ----------
Wiz8.exe+12AAB0: 89 87 11 0B 00 00 - mov [edi+00000B11],eax
// ---------- DONE INJECTING ----------
Wiz8.exe+12AAB6: E8 85 01 07 00 - call Wiz8.exe+19AC40
Wiz8.exe+12AABB: 8B 87 11 0B 00 00 - mov eax,[edi+00000B11]
Wiz8.exe+12AAC1: 83 C4 08 - add esp,08
Wiz8.exe+12AAC4: 85 C0 - test eax,eax
Wiz8.exe+12AAC6: 0F 85 C7 00 00 00 - jne Wiz8.exe+12AB93
Wiz8.exe+12AACC: 85 ED - test ebp,ebp
Wiz8.exe+12AACE: 0F 84 A5 00 00 00 - je Wiz8.exe+12AB79
Wiz8.exe+12AAD4: 6A 6C - push 6C
Wiz8.exe+12AAD6: FF 15 A0 B1 5E 00 - call dword ptr [Wiz8.exe+1EB1A0]
Wiz8.exe+12AADC: 8B D0 - mov edx,eax
}
Toggle Activation
113
0
Activate
Deactivate
10
"Pointer to the opened Character"
1
"Wiz8.exe"+0029C0F8
0
36
"Hitpoints Current"
0000FF
4 Bytes
+b11
34
"Stamina Current"
4080FF
4 Bytes
+b1d
12
"Nickname"
String
10
1
0
1
+05
13
"Long Name"
String
10
1
0
1
+19
11
"Strength Normal"
4 Bytes
+e5
16
"Strength Current"
4 Bytes
+e9
15
"Intelligence Normal"
4 Bytes
+f9
14
"Intelligence Current"
4 Bytes
+fd
19
"Piety Normal"
4 Bytes
+10d
20
"Piety Current"
4 Bytes
+111
17
"Vitality Normal"
4 Bytes
+121
22
"Vitality Current"
4 Bytes
+125
21
"Dexterity Normal"
4 Bytes
+135
18
"Dexterity Current"
4 Bytes
+139
23
"Speed Normal"
4 Bytes
+149
24
"Speed Current"
4 Bytes
+14d
25
"Senses Normal"
4 Bytes
+15d
26
"Senses Current"
4 Bytes
+161
32
"Experience"
FF00FF
4 Bytes
+9ed
33
"Hitpoints Normal"
4 Bytes
+b0d
35
"Stamina Normal"
4 Bytes
+b19
37
"Gold from Party"
4 Bytes
Wiz8.exe+285189