15
"Lifes (=Displayed Lives +1)"
4 Bytes
"popcapgame1.exe"+005F1FD8
F68
4
28
"Score (before the current level or so - can take a while)"
4 Bytes
"popcapgame1.exe"+00A37630
104
8
B0
41
"Bonus-Shots (just use ONE. Triggers after hitting 3 Balls the next time)"
1
42
"Bonus - Triple Shot (Num-0)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],7
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "popcapgame1.exe"+57727
"popcapgame1.exe"+57708: D9 5C 24 10 - fstp dword ptr [esp+10]
"popcapgame1.exe"+5770C: 51 - push ecx
"popcapgame1.exe"+5770D: D9 44 24 14 - fld dword ptr [esp+14]
"popcapgame1.exe"+57711: E8 3A EB 47 00 - call popcapgame1.exe+4D6250
"popcapgame1.exe"+57716: 8B 76 0C - mov esi,[esi+0C]
"popcapgame1.exe"+57719: 8B F8 - mov edi,eax
"popcapgame1.exe"+5771B: E8 80 07 0E 00 - call popcapgame1.exe+137EA0
"popcapgame1.exe"+57720: 50 - push eax
"popcapgame1.exe"+57721: 53 - push ebx
"popcapgame1.exe"+57722: E8 39 BD FA FF - call popcapgame1.exe+3460
// ---------- INJECTING HERE ----------
"popcapgame1.exe"+57727: 8B 83 1C 01 00 00 - mov eax,[ebx+0000011C]
// ---------- DONE INJECTING ----------
"popcapgame1.exe"+5772D: 83 F8 0E - cmp eax,0E
"popcapgame1.exe"+57730: 74 04 - je popcapgame1.exe+57736
"popcapgame1.exe"+57732: 8B C8 - mov ecx,eax
"popcapgame1.exe"+57734: EB 1A - jmp popcapgame1.exe+57750
"popcapgame1.exe"+57736: 83 BB C4 00 00 00 00 - cmp dword ptr [ebx+000000C4],00
"popcapgame1.exe"+5773D: 7E 0B - jle popcapgame1.exe+5774A
"popcapgame1.exe"+5773F: 8B 8B C8 00 00 00 - mov ecx,[ebx+000000C8]
"popcapgame1.exe"+57745: 83 F9 0E - cmp ecx,0E
"popcapgame1.exe"+57748: 75 0B - jne popcapgame1.exe+57755
"popcapgame1.exe"+5774A: 8B 8B 20 01 00 00 - mov ecx,[ebx+00000120]
}
Toggle Activation
96
0
Activate
Deactivate
49
"Bonus - Slow (Num-1)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],1
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
Toggle Activation
97
0
Activate
Deactivate
48
"Bonus - Reverse (Num-2)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],3
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
Toggle Activation
98
0
Activate
Deactivate
47
"Bonus - Multiplier (Num-3)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],d
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
Toggle Activation
99
0
Activate
Deactivate
46
"Bonus - Laser (Num-4)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],9
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
Toggle Activation
100
0
Activate
Deactivate
45
"Bonus - Aiming Help (Num-5)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],2
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
Toggle Activation
101
0
Activate
Deactivate
44
"Bonus - Lightning (Num-.)"
Auto Assembler Script
[ENABLE]
aobscanmodule(SPECIALS,popcapgame1.exe,8B 83 1C 01 00 00 83 F8 0E 74) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [ebx+0000011C],8
code:
mov eax,[ebx+0000011C]
jmp return
SPECIALS:
jmp newmem
nop
return:
registersymbol(SPECIALS)
[DISABLE]
SPECIALS:
db 8B 83 1C 01 00 00
unregistersymbol(SPECIALS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "popcapgame1.exe"+57727
"popcapgame1.exe"+57708: D9 5C 24 10 - fstp dword ptr [esp+10]
"popcapgame1.exe"+5770C: 51 - push ecx
"popcapgame1.exe"+5770D: D9 44 24 14 - fld dword ptr [esp+14]
"popcapgame1.exe"+57711: E8 3A EB 47 00 - call popcapgame1.exe+4D6250
"popcapgame1.exe"+57716: 8B 76 0C - mov esi,[esi+0C]
"popcapgame1.exe"+57719: 8B F8 - mov edi,eax
"popcapgame1.exe"+5771B: E8 80 07 0E 00 - call popcapgame1.exe+137EA0
"popcapgame1.exe"+57720: 50 - push eax
"popcapgame1.exe"+57721: 53 - push ebx
"popcapgame1.exe"+57722: E8 39 BD FA FF - call popcapgame1.exe+3460
// ---------- INJECTING HERE ----------
"popcapgame1.exe"+57727: 8B 83 1C 01 00 00 - mov eax,[ebx+0000011C]
// ---------- DONE INJECTING ----------
"popcapgame1.exe"+5772D: 83 F8 0E - cmp eax,0E
"popcapgame1.exe"+57730: 74 04 - je popcapgame1.exe+57736
"popcapgame1.exe"+57732: 8B C8 - mov ecx,eax
"popcapgame1.exe"+57734: EB 1A - jmp popcapgame1.exe+57750
"popcapgame1.exe"+57736: 83 BB C4 00 00 00 00 - cmp dword ptr [ebx+000000C4],00
"popcapgame1.exe"+5773D: 7E 0B - jle popcapgame1.exe+5774A
"popcapgame1.exe"+5773F: 8B 8B C8 00 00 00 - mov ecx,[ebx+000000C8]
"popcapgame1.exe"+57745: 83 F9 0E - cmp ecx,0E
"popcapgame1.exe"+57748: 75 0B - jne popcapgame1.exe+57755
"popcapgame1.exe"+5774A: 8B 8B 20 01 00 00 - mov ecx,[ebx+00000120]
}
Toggle Activation
110
0
Activate
Deactivate
Progressbar on Screen gets updated
004B4F28
popcapgame1.exe
B4F28
04
00
00
7D
09
83
C0
01
89
87
10
04
00
Specials
00457727
popcapgame1.exe
57727
E8
39
BD
FA
FF
8B
83
1C
01
00
00
83
F8
0E
74
04
Progress bar on Screen:
0 at Start, roundabout 300-400 to finish. Setting the progress bar doesn't help us, anyway.