25 "Disable Timer" Auto Assembler Script [ENABLE] aobscanmodule(INJECT,trialsFMX.exe,89 46 14 5E 83 C4 0C) // should be unique alloc(newmem,$100) label(code) label(return) newmem: code: db 90 90 90 pop esi add esp,0C jmp return INJECT: jmp newmem nop 2 return: registersymbol(INJECT) [DISABLE] //code from here till the end of the code will be used to disable the cheat INJECT: db 89 46 14 5E 83 C4 0C unregistersymbol(INJECT) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: INJECT trialsFMX.exe+A174A: 50 - push eax trialsFMX.exe+A174B: E8 00 54 22 00 - call trialsFMX.exe+2C6B50 trialsFMX.exe+A1750: 83 C4 08 - add esp,08 trialsFMX.exe+A1753: 8B 46 14 - mov eax,[esi+14] trialsFMX.exe+A1756: 5F - pop edi trialsFMX.exe+A1757: 5D - pop ebp trialsFMX.exe+A1758: 5B - pop ebx trialsFMX.exe+A1759: 3D E0 A5 01 00 - cmp eax,0001A5E0 trialsFMX.exe+A175E: 73 04 - jae trialsFMX.exe+A1764 trialsFMX.exe+A1760: 40 - inc eax // ---------- INJECTING HERE ---------- INJECT: 89 46 14 - mov [esi+14],eax // ---------- DONE INJECTING ---------- trialsFMX.exe+A1764: 5E - pop esi trialsFMX.exe+A1765: 83 C4 0C - add esp,0C trialsFMX.exe+A1768: C3 - ret trialsFMX.exe+A1769: CC - int 3 trialsFMX.exe+A176A: CC - int 3 trialsFMX.exe+A176B: CC - int 3 trialsFMX.exe+A176C: CC - int 3 trialsFMX.exe+A176D: CC - int 3 trialsFMX.exe+A176E: CC - int 3 trialsFMX.exe+A176F: CC - int 3 } 44 "Freeze Faults" Auto Assembler Script [ENABLE] aobscanmodule(INJECT,trialsFMX.exe,89 B7 E4 05 00 00) alloc(newmem,$100) label(code) label(return) newmem: code: db 90 90 90 90 90 jmp return INJECT: jmp newmem nop return: registersymbol(INJECT) [DISABLE] INJECT: db 89 B7 E4 05 00 00 unregistersymbol(INJECT) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: trialsFMX.exe+5D201 trialsFMX.exe+5D1ED: CC - int 3 trialsFMX.exe+5D1EE: CC - int 3 trialsFMX.exe+5D1EF: CC - int 3 trialsFMX.exe+5D1F0: 56 - push esi trialsFMX.exe+5D1F1: 8B 74 24 08 - mov esi,[esp+08] trialsFMX.exe+5D1F5: 57 - push edi trialsFMX.exe+5D1F6: 8B F9 - mov edi,ecx trialsFMX.exe+5D1F8: 85 F6 - test esi,esi trialsFMX.exe+5D1FA: 76 05 - jna trialsFMX.exe+5D201 trialsFMX.exe+5D1FC: E8 9F BB FF FF - call trialsFMX.exe+58DA0 // ---------- INJECTING HERE ---------- trialsFMX.exe+5D201: 89 B7 E4 05 00 00 - mov [edi+000005E4],esi // ---------- DONE INJECTING ---------- trialsFMX.exe+5D207: 85 F6 - test esi,esi trialsFMX.exe+5D209: 74 44 - je trialsFMX.exe+5D24F trialsFMX.exe+5D20B: 8B 47 3C - mov eax,[edi+3C] trialsFMX.exe+5D20E: 83 78 0C 00 - cmp dword ptr [eax+0C],00 trialsFMX.exe+5D212: 74 3B - je trialsFMX.exe+5D24F trialsFMX.exe+5D214: 53 - push ebx trialsFMX.exe+5D215: 8B 1D 50 CC EE 01 - mov ebx,[trialsFMX.exe+1AECC50] trialsFMX.exe+5D21B: 8B 43 40 - mov eax,[ebx+40] trialsFMX.exe+5D21E: 85 C0 - test eax,eax trialsFMX.exe+5D220: 74 2C - je trialsFMX.exe+5D24E } 43 "Faults counter (in race)" 4 Bytes

"trialsFMX.exe"+01AE3548

5E4 54 50 Money :mov ecx,[eax+00000098] trialsFMX.exe+2E336E 40 78 8B 40 04 8B 88 98 00 00 00 8B 80 9C 00 00 Stats structure? :add [ecx+00000090],eax trialsFMX.exe+314423 00 00 00 1B FA 01 81 90 00 00 00 89 B9 9C 00 00 ~~~