16
"invincibility"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(All_the_hEaLtH,DH-Win64-Shipping.exe,F3 0F 11 83 C0 00 00 00 0F 54) // should be unique
alloc(newmem,$1000,All_the_hEaLtH)
label(code)
label(return)
newmem:
mov [rbx+000000C0],(float)12
jmp return
code:
movss [rbx+000000C0],xmm0
jmp return
All_the_hEaLtH:
jmp newmem
nop 3
return:
registersymbol(All_the_hEaLtH)
[DISABLE]
All_the_hEaLtH:
db F3 0F 11 83 C0 00 00 00
unregistersymbol(All_the_hEaLtH)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D3545A
DH-Win64-Shipping.exe+1D3542E: 84 C0 - test al,al
DH-Win64-Shipping.exe+1D35430: 0F 85 A6 00 00 00 - jne DH-Win64-Shipping.exe+1D354DC
DH-Win64-Shipping.exe+1D35436: F3 0F 10 43 54 - movss xmm0,[rbx+54]
DH-Win64-Shipping.exe+1D3543B: 0F 2F F0 - comiss xmm6,xmm0
DH-Win64-Shipping.exe+1D3543E: F3 0F 10 8B C0 00 00 00 - movss xmm1,[rbx+000000C0]
DH-Win64-Shipping.exe+1D35446: F3 0F 11 4B 5C - movss [rbx+5C],xmm1
DH-Win64-Shipping.exe+1D3544B: 72 09 - jb DH-Win64-Shipping.exe+1D35456
DH-Win64-Shipping.exe+1D3544D: F3 0F 10 43 50 - movss xmm0,[rbx+50]
DH-Win64-Shipping.exe+1D35452: F3 0F 5D C6 - minss xmm0,xmm6
DH-Win64-Shipping.exe+1D35456: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D3545A: F3 0F 11 83 C0 00 00 00 - movss [rbx+000000C0],xmm0
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D35462: 0F 54 0D C7 19 1F 03 - andps xmm1,[DH-Win64-Shipping.exe+4F26E30]
DH-Win64-Shipping.exe+1D35469: 0F 2F 0D 78 B9 1F 03 - comiss xmm1,[DH-Win64-Shipping.exe+4F30DE8]
DH-Win64-Shipping.exe+1D35470: 76 6A - jna DH-Win64-Shipping.exe+1D354DC
DH-Win64-Shipping.exe+1D35472: 80 7C 24 70 00 - cmp byte ptr [rsp+70],00
DH-Win64-Shipping.exe+1D35477: 74 05 - je DH-Win64-Shipping.exe+1D3547E
DH-Win64-Shipping.exe+1D35479: F3 0F 11 43 5C - movss [rbx+5C],xmm0
DH-Win64-Shipping.exe+1D3547E: 40 84 F6 - test sil,sil
DH-Win64-Shipping.exe+1D35481: 74 08 - je DH-Win64-Shipping.exe+1D3548B
DH-Win64-Shipping.exe+1D35483: 48 8B CB - mov rcx,rbx
DH-Win64-Shipping.exe+1D35486: E8 F5 3F FF FF - call DH-Win64-Shipping.exe+1D29480
}
26261
"infinite furotech cells"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(currency,DH-Win64-Shipping.exe,29 88 E8 03 00 00) // should be unique
alloc(newmem,$1000,currency)
label(code)
label(return)
newmem:
add [rax+000003E8],ecx
jmp return
code:
sub [rax+000003E8],ecx
jmp return
currency:
jmp newmem
nop
return:
registersymbol(currency)
[DISABLE]
currency:
db 29 88 E8 03 00 00
unregistersymbol(currency)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D120E4
DH-Win64-Shipping.exe+1D120C1: 74 1A - je DH-Win64-Shipping.exe+1D120DD
DH-Win64-Shipping.exe+1D120C3: 83 FA 01 - cmp edx,01
DH-Win64-Shipping.exe+1D120C6: 75 28 - jne DH-Win64-Shipping.exe+1D120F0
DH-Win64-Shipping.exe+1D120C8: 8B 48 30 - mov ecx,[rax+30]
DH-Win64-Shipping.exe+1D120CB: 48 8B 43 40 - mov rax,[rbx+40]
DH-Win64-Shipping.exe+1D120CF: 29 88 EC 03 00 00 - sub [rax+000003EC],ecx
DH-Win64-Shipping.exe+1D120D5: 29 88 F8 03 00 00 - sub [rax+000003F8],ecx
DH-Win64-Shipping.exe+1D120DB: EB 13 - jmp DH-Win64-Shipping.exe+1D120F0
DH-Win64-Shipping.exe+1D120DD: 8B 48 30 - mov ecx,[rax+30]
DH-Win64-Shipping.exe+1D120E0: 48 8B 43 40 - mov rax,[rbx+40]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D120E4: 29 88 E8 03 00 00 - sub [rax+000003E8],ecx
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D120EA: 29 88 F4 03 00 00 - sub [rax+000003F4],ecx
DH-Win64-Shipping.exe+1D120F0: 48 8B 4B 40 - mov rcx,[rbx+40]
DH-Win64-Shipping.exe+1D120F4: 41 B0 01 - mov r8l,01
DH-Win64-Shipping.exe+1D120F7: 48 8B D7 - mov rdx,rdi
DH-Win64-Shipping.exe+1D120FA: 48 8B 89 00 04 00 00 - mov rcx,[rcx+00000400]
DH-Win64-Shipping.exe+1D12101: E8 FA 05 00 00 - call DH-Win64-Shipping.exe+1D12700
DH-Win64-Shipping.exe+1D12106: 48 8B 07 - mov rax,[rdi]
DH-Win64-Shipping.exe+1D12109: 48 8D 4B 28 - lea rcx,[rbx+28]
DH-Win64-Shipping.exe+1D1210D: 48 8D 54 24 20 - lea rdx,[rsp+20]
DH-Win64-Shipping.exe+1D12112: 48 89 44 24 20 - mov [rsp+20],rax
}
26266
"infinite furotech reactors"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-31
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(blue_cash,DH-Win64-Shipping.exe,29 88 EC 03 00 00) // should be unique
alloc(newmem,$1000,blue_cash)
label(code)
label(return)
newmem:
add [rax+000003EC],ecx
jmp return
code:
sub [rax+000003EC],ecx
jmp return
blue_cash:
jmp newmem
nop
return:
registersymbol(blue_cash)
[DISABLE]
blue_cash:
db 29 88 EC 03 00 00
unregistersymbol(blue_cash)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D120CF
DH-Win64-Shipping.exe+1D120B0: E8 3B EC FE FF - call DH-Win64-Shipping.exe+1D00CF0
DH-Win64-Shipping.exe+1D120B5: 48 85 C0 - test rax,rax
DH-Win64-Shipping.exe+1D120B8: 74 74 - je DH-Win64-Shipping.exe+1D1212E
DH-Win64-Shipping.exe+1D120BA: 0F BE 50 34 - movsx edx,byte ptr [rax+34]
DH-Win64-Shipping.exe+1D120BE: 83 EA 01 - sub edx,01
DH-Win64-Shipping.exe+1D120C1: 74 1A - je DH-Win64-Shipping.exe+1D120DD
DH-Win64-Shipping.exe+1D120C3: 83 FA 01 - cmp edx,01
DH-Win64-Shipping.exe+1D120C6: 75 28 - jne DH-Win64-Shipping.exe+1D120F0
DH-Win64-Shipping.exe+1D120C8: 8B 48 30 - mov ecx,[rax+30]
DH-Win64-Shipping.exe+1D120CB: 48 8B 43 40 - mov rax,[rbx+40]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D120CF: 29 88 EC 03 00 00 - sub [rax+000003EC],ecx
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D120D5: 29 88 F8 03 00 00 - sub [rax+000003F8],ecx
DH-Win64-Shipping.exe+1D120DB: EB 13 - jmp DH-Win64-Shipping.exe+1D120F0
DH-Win64-Shipping.exe+1D120DD: 8B 48 30 - mov ecx,[rax+30]
DH-Win64-Shipping.exe+1D120E0: 48 8B 43 40 - mov rax,[rbx+40]
DH-Win64-Shipping.exe+1D120E4: 29 88 E8 03 00 00 - sub [rax+000003E8],ecx
DH-Win64-Shipping.exe+1D120EA: 29 88 F4 03 00 00 - sub [rax+000003F4],ecx
DH-Win64-Shipping.exe+1D120F0: 48 8B 4B 40 - mov rcx,[rbx+40]
DH-Win64-Shipping.exe+1D120F4: 41 B0 01 - mov r8l,01
DH-Win64-Shipping.exe+1D120F7: 48 8B D7 - mov rdx,rdi
DH-Win64-Shipping.exe+1D120FA: 48 8B 89 00 04 00 00 - mov rcx,[rcx+00000400]
}
3
"Infinite lighting ammo"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(shockammo,DH-Win64-Shipping.exe,F3 0F 11 B3 80 09 00 00) // should be unique
alloc(newmem,$1000,shockammo)
label(code)
label(return)
newmem:
mov [rbx+00000980],(float)100
jmp return
code:
movss [rbx+00000980],xmm6
jmp return
shockammo:
jmp newmem
nop 3
return:
registersymbol(shockammo)
[DISABLE]
shockammo:
db F3 0F 11 B3 80 09 00 00
unregistersymbol(shockammo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D77823
DH-Win64-Shipping.exe+1D777F2: 75 46 - jne DH-Win64-Shipping.exe+1D7783A
DH-Win64-Shipping.exe+1D777F4: F3 0F 59 BB 50 09 00 00 - mulss xmm7,[rbx+00000950]
DH-Win64-Shipping.exe+1D777FC: F3 0F 10 8B 80 09 00 00 - movss xmm1,[rbx+00000980]
DH-Win64-Shipping.exe+1D77804: F3 0F 5C CF - subss xmm1,xmm7
DH-Win64-Shipping.exe+1D77808: 0F 2F CE - comiss xmm1,xmm6
DH-Win64-Shipping.exe+1D7780B: 72 0F - jb DH-Win64-Shipping.exe+1D7781C
DH-Win64-Shipping.exe+1D7780D: F3 0F 10 83 48 09 00 00 - movss xmm0,[rbx+00000948]
DH-Win64-Shipping.exe+1D77815: F3 0F 5D C1 - minss xmm0,xmm1
DH-Win64-Shipping.exe+1D77819: 0F 28 F0 - movaps xmm6,xmm0
DH-Win64-Shipping.exe+1D7781C: 48 8D 8B 98 02 00 00 - lea rcx,[rbx+00000298]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D77823: F3 0F 11 B3 80 09 00 00 - movss [rbx+00000980],xmm6
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D7782B: 48 8D 54 24 50 - lea rdx,[rsp+50]
DH-Win64-Shipping.exe+1D77830: 48 89 5C 24 50 - mov [rsp+50],rbx
DH-Win64-Shipping.exe+1D77835: E8 A6 E6 C2 FE - call DH-Win64-Shipping.exe+9A5EE0
DH-Win64-Shipping.exe+1D7783A: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
DH-Win64-Shipping.exe+1D7783F: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
DH-Win64-Shipping.exe+1D77844: 48 83 C4 40 - add rsp,40
DH-Win64-Shipping.exe+1D77848: 5B - pop rbx
DH-Win64-Shipping.exe+1D77849: C3 - ret
DH-Win64-Shipping.exe+1D7784A: CC - int 3
DH-Win64-Shipping.exe+1D7784B: CC - int 3
}
8
"infinite disintegrator ammo"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(disintegrator_ammo,DH-Win64-Shipping.exe,C0 89 81 80 09 00 00) // should be unique
alloc(newmem,$1000,disintegrator_ammo)
label(code)
label(return)
newmem:
mov [rcx+00000980],#60
jmp return
code:
mov [rcx+00000980],eax
jmp return
disintegrator_ammo+01:
jmp newmem
nop
return:
registersymbol(disintegrator_ammo)
[DISABLE]
disintegrator_ammo+01:
db 89 81 80 09 00 00
unregistersymbol(disintegrator_ammo)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D71411
DH-Win64-Shipping.exe+1D713EF: CC - int 3
DH-Win64-Shipping.exe+1D713F0: 48 83 EC 28 - sub rsp,28
DH-Win64-Shipping.exe+1D713F4: 44 8B 81 80 09 00 00 - mov r8d,[rcx+00000980]
DH-Win64-Shipping.exe+1D713FB: 44 03 C2 - add r8d,edx
DH-Win64-Shipping.exe+1D713FE: 79 04 - jns DH-Win64-Shipping.exe+1D71404
DH-Win64-Shipping.exe+1D71400: 33 C0 - xor eax,eax
DH-Win64-Shipping.exe+1D71402: EB 0D - jmp DH-Win64-Shipping.exe+1D71411
DH-Win64-Shipping.exe+1D71404: 8B 81 70 09 00 00 - mov eax,[rcx+00000970]
DH-Win64-Shipping.exe+1D7140A: 44 3B C0 - cmp r8d,eax
DH-Win64-Shipping.exe+1D7140D: 41 0F 4C C0 - cmovl eax,r8d
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D71411: 89 81 80 09 00 00 - mov [rcx+00000980],eax
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D71417: 48 8D 54 24 30 - lea rdx,[rsp+30]
DH-Win64-Shipping.exe+1D7141C: 48 89 4C 24 30 - mov [rsp+30],rcx
DH-Win64-Shipping.exe+1D71421: 48 81 C1 98 02 00 00 - add rcx,00000298
DH-Win64-Shipping.exe+1D71428: E8 B3 4A C3 FE - call DH-Win64-Shipping.exe+9A5EE0
DH-Win64-Shipping.exe+1D7142D: 48 83 C4 28 - add rsp,28
DH-Win64-Shipping.exe+1D71431: C3 - ret
DH-Win64-Shipping.exe+1D71432: CC - int 3
DH-Win64-Shipping.exe+1D71433: CC - int 3
DH-Win64-Shipping.exe+1D71434: CC - int 3
DH-Win64-Shipping.exe+1D71435: CC - int 3
}
13
"infinite jetpack"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(jetpack_decrement,DH-Win64-Shipping.exe,F3 0F 5C C8 F3 0F 11 8F 3C 01 00 00) // should be unique
alloc(newmem,$1000,jetpack_decrement)
label(code)
label(return)
newmem:
subss xmm1,xmm0
mov [rdi+0000013C],(float)100
jmp return
code:
subss xmm1,xmm0
movss [rdi+0000013C],xmm1
jmp return
jetpack_decrement:
jmp newmem
nop 7
return:
registersymbol(jetpack_decrement)
[DISABLE]
jetpack_decrement:
db F3 0F 5C C8 F3 0F 11 8F 3C 01 00 00
unregistersymbol(jetpack_decrement)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1CE5CB8
DH-Win64-Shipping.exe+1CE5C88: 0F 2F CE - comiss xmm1,xmm6
DH-Win64-Shipping.exe+1CE5C8B: 44 88 B7 48 01 00 00 - mov [rdi+00000148],r14l
DH-Win64-Shipping.exe+1CE5C92: 0F 86 88 00 00 00 - jbe DH-Win64-Shipping.exe+1CE5D20
DH-Win64-Shipping.exe+1CE5C98: 44 39 B7 00 01 00 00 - cmp [rdi+00000100],r14d
DH-Win64-Shipping.exe+1CE5C9F: 7E 28 - jle DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA1: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CA4: 77 23 - ja DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA6: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CAD: 0F 28 C7 - movaps xmm0,xmm7
DH-Win64-Shipping.exe+1CE5CB0: F3 0F 59 80 98 01 00 00 - mulss xmm0,[rax+00000198]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1CE5CB8: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1CE5CBC: F3 0F 11 8F 3C 01 00 00 - movss [rdi+0000013C],xmm1
DH-Win64-Shipping.exe+1CE5CC4: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CC7: EB 2F - jmp DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CC9: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CCC: 44 38 B7 04 01 00 00 - cmp [rdi+00000104],r14l
DH-Win64-Shipping.exe+1CE5CD3: 74 23 - je DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CD5: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CD8: 77 1E - ja DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CDA: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CE1: 0F 28 C7 - movaps xmm0,xmm7
}
26281
"instant free love"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-31
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(freeLove,DH-Win64-Shipping.exe,48 C7 86 B8 00 00 00 01 00 00 00) // should be unique
alloc(newmem,$1000,freeLove)
label(code)
label(return)
newmem:
mov qword ptr [rsi+000000B8],00000099
jmp return
code:
mov qword ptr [rsi+000000B8],00000001
jmp return
freeLove:
jmp newmem
nop 6
return:
registersymbol(freeLove)
[DISABLE]
freeLove:
db 48 C7 86 B8 00 00 00 01 00 00 00
unregistersymbol(freeLove)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1F2B4B0
DH-Win64-Shipping.exe+1F2B486: E8 E5 C8 E9 FF - call DH-Win64-Shipping.exe+1DC7D70
DH-Win64-Shipping.exe+1F2B48B: 48 8B C8 - mov rcx,rax
DH-Win64-Shipping.exe+1F2B48E: E8 FD A7 C8 FE - call DH-Win64-Shipping.lua_gethook
DH-Win64-Shipping.exe+1F2B493: 48 89 86 C8 00 00 00 - mov [rsi+000000C8],rax
DH-Win64-Shipping.exe+1F2B49A: 48 85 C0 - test rax,rax
DH-Win64-Shipping.exe+1F2B49D: 74 73 - je DH-Win64-Shipping.exe+1F2B512
DH-Win64-Shipping.exe+1F2B49F: 48 8B C8 - mov rcx,rax
DH-Win64-Shipping.exe+1F2B4A2: E8 99 37 82 FF - call DH-Win64-Shipping.exe+174EC40
DH-Win64-Shipping.exe+1F2B4A7: 89 86 C0 00 00 00 - mov [rsi+000000C0],eax
DH-Win64-Shipping.exe+1F2B4AD: 48 8B CE - mov rcx,rsi
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1F2B4B0: 48 C7 86 B8 00 00 00 01 00 00 00 - mov qword ptr [rsi+000000B8],00000001
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1F2B4BB: E8 80 D8 FF FF - call DH-Win64-Shipping.exe+1F28D40
DH-Win64-Shipping.exe+1F2B4C0: 48 8B CE - mov rcx,rsi
DH-Win64-Shipping.exe+1F2B4C3: E8 D8 E7 30 00 - call DH-Win64-Shipping.exe+2239CA0
DH-Win64-Shipping.exe+1F2B4C8: 48 8B 45 C7 - mov rax,[rbp-39]
DH-Win64-Shipping.exe+1F2B4CC: 4C 8B BC 24 A0 00 00 00 - mov r15,[rsp+000000A0]
DH-Win64-Shipping.exe+1F2B4D4: 4C 8B B4 24 A8 00 00 00 - mov r14,[rsp+000000A8]
DH-Win64-Shipping.exe+1F2B4DC: 4C 8B AC 24 B0 00 00 00 - mov r13,[rsp+000000B0]
DH-Win64-Shipping.exe+1F2B4E4: 48 8B BC 24 C0 00 00 00 - mov rdi,[rsp+000000C0]
DH-Win64-Shipping.exe+1F2B4EC: 48 8B B4 24 C8 00 00 00 - mov rsi,[rsp+000000C8]
DH-Win64-Shipping.exe+1F2B4F4: 48 8B 9C 24 F8 00 00 00 - mov rbx,[rsp+000000F8]
}
26275
"fly with the sun"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(jetpack_decrement,DH-Win64-Shipping.exe,F3 0F 5C C8 F3 0F 11 8F 3C 01 00 00) // should be unique
alloc(newmem,$1000,jetpack_decrement)
label(code)
label(return)
newmem:
subss xmm1,xmm0
mov [rdi+0000013C],(float)1000
jmp return
code:
subss xmm1,xmm0
movss [rdi+0000013C],xmm1
jmp return
jetpack_decrement:
jmp newmem
nop 7
return:
registersymbol(jetpack_decrement)
[DISABLE]
jetpack_decrement:
db F3 0F 5C C8 F3 0F 11 8F 3C 01 00 00
unregistersymbol(jetpack_decrement)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1CE5CB8
DH-Win64-Shipping.exe+1CE5C88: 0F 2F CE - comiss xmm1,xmm6
DH-Win64-Shipping.exe+1CE5C8B: 44 88 B7 48 01 00 00 - mov [rdi+00000148],r14l
DH-Win64-Shipping.exe+1CE5C92: 0F 86 88 00 00 00 - jbe DH-Win64-Shipping.exe+1CE5D20
DH-Win64-Shipping.exe+1CE5C98: 44 39 B7 00 01 00 00 - cmp [rdi+00000100],r14d
DH-Win64-Shipping.exe+1CE5C9F: 7E 28 - jle DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA1: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CA4: 77 23 - ja DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA6: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CAD: 0F 28 C7 - movaps xmm0,xmm7
DH-Win64-Shipping.exe+1CE5CB0: F3 0F 59 80 98 01 00 00 - mulss xmm0,[rax+00000198]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1CE5CB8: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1CE5CBC: F3 0F 11 8F 3C 01 00 00 - movss [rdi+0000013C],xmm1
DH-Win64-Shipping.exe+1CE5CC4: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CC7: EB 2F - jmp DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CC9: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CCC: 44 38 B7 04 01 00 00 - cmp [rdi+00000104],r14l
DH-Win64-Shipping.exe+1CE5CD3: 74 23 - je DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CD5: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CD8: 77 1E - ja DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CDA: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CE1: 0F 28 C7 - movaps xmm0,xmm7
}
15
"get health base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(health,DH-Win64-Shipping.exe,F3 0F 11 83 C0 00 00 00 0F 54) // should be unique
alloc(newmem,$1000,health)
registersymbol(healthbase)
label(healthbase)
label(code)
label(return)
newmem:
movss [rbx+000000C0],xmm0
mov [healthbase],rbx
jmp return
healthbase:
dq 0
code:
movss [rbx+000000C0],xmm0
jmp return
health:
jmp newmem
nop 3
return:
registersymbol(health)
[DISABLE]
health:
db F3 0F 11 83 C0 00 00 00
unregistersymbol(health)
unregistersymbol(healthbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D3545A
DH-Win64-Shipping.exe+1D3542E: 84 C0 - test al,al
DH-Win64-Shipping.exe+1D35430: 0F 85 A6 00 00 00 - jne DH-Win64-Shipping.exe+1D354DC
DH-Win64-Shipping.exe+1D35436: F3 0F 10 43 54 - movss xmm0,[rbx+54]
DH-Win64-Shipping.exe+1D3543B: 0F 2F F0 - comiss xmm6,xmm0
DH-Win64-Shipping.exe+1D3543E: F3 0F 10 8B C0 00 00 00 - movss xmm1,[rbx+000000C0]
DH-Win64-Shipping.exe+1D35446: F3 0F 11 4B 5C - movss [rbx+5C],xmm1
DH-Win64-Shipping.exe+1D3544B: 72 09 - jb DH-Win64-Shipping.exe+1D35456
DH-Win64-Shipping.exe+1D3544D: F3 0F 10 43 50 - movss xmm0,[rbx+50]
DH-Win64-Shipping.exe+1D35452: F3 0F 5D C6 - minss xmm0,xmm6
DH-Win64-Shipping.exe+1D35456: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D3545A: F3 0F 11 83 C0 00 00 00 - movss [rbx+000000C0],xmm0
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D35462: 0F 54 0D C7 19 1F 03 - andps xmm1,[DH-Win64-Shipping.exe+4F26E30]
DH-Win64-Shipping.exe+1D35469: 0F 2F 0D 78 B9 1F 03 - comiss xmm1,[DH-Win64-Shipping.exe+4F30DE8]
DH-Win64-Shipping.exe+1D35470: 76 6A - jna DH-Win64-Shipping.exe+1D354DC
DH-Win64-Shipping.exe+1D35472: 80 7C 24 70 00 - cmp byte ptr [rsp+70],00
DH-Win64-Shipping.exe+1D35477: 74 05 - je DH-Win64-Shipping.exe+1D3547E
DH-Win64-Shipping.exe+1D35479: F3 0F 11 43 5C - movss [rbx+5C],xmm0
DH-Win64-Shipping.exe+1D3547E: 40 84 F6 - test sil,sil
DH-Win64-Shipping.exe+1D35481: 74 08 - je DH-Win64-Shipping.exe+1D3548B
DH-Win64-Shipping.exe+1D35483: 48 8B CB - mov rcx,rbx
DH-Win64-Shipping.exe+1D35486: E8 F5 3F FF FF - call DH-Win64-Shipping.exe+1D29480
}
17
"health base"
0
4 Bytes
healthbase
0
1
"get shock ray base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(lightningammo,DH-Win64-Shipping.exe,F3 0F 11 B3 80 09 00 00) // should be unique
alloc(newmem,$1000,lightningammo)
registersymbol(shockbase)
label(shockbase)
label(code)
label(return)
newmem:
movss [rbx+00000980],xmm6
mov [shockbase],rbx
jmp return
shockbase:
dq 0
code:
movss [rbx+00000980],xmm6
jmp return
lightningammo:
jmp newmem
nop 3
return:
registersymbol(lightningammo)
[DISABLE]
lightningammo:
db F3 0F 11 B3 80 09 00 00
unregistersymbol(lightningammo)
unregistersymbol(shockbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D77823
DH-Win64-Shipping.exe+1D777F2: 75 46 - jne DH-Win64-Shipping.exe+1D7783A
DH-Win64-Shipping.exe+1D777F4: F3 0F 59 BB 50 09 00 00 - mulss xmm7,[rbx+00000950]
DH-Win64-Shipping.exe+1D777FC: F3 0F 10 8B 80 09 00 00 - movss xmm1,[rbx+00000980]
DH-Win64-Shipping.exe+1D77804: F3 0F 5C CF - subss xmm1,xmm7
DH-Win64-Shipping.exe+1D77808: 0F 2F CE - comiss xmm1,xmm6
DH-Win64-Shipping.exe+1D7780B: 72 0F - jb DH-Win64-Shipping.exe+1D7781C
DH-Win64-Shipping.exe+1D7780D: F3 0F 10 83 48 09 00 00 - movss xmm0,[rbx+00000948]
DH-Win64-Shipping.exe+1D77815: F3 0F 5D C1 - minss xmm0,xmm1
DH-Win64-Shipping.exe+1D77819: 0F 28 F0 - movaps xmm6,xmm0
DH-Win64-Shipping.exe+1D7781C: 48 8D 8B 98 02 00 00 - lea rcx,[rbx+00000298]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D77823: F3 0F 11 B3 80 09 00 00 - movss [rbx+00000980],xmm6
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D7782B: 48 8D 54 24 50 - lea rdx,[rsp+50]
DH-Win64-Shipping.exe+1D77830: 48 89 5C 24 50 - mov [rsp+50],rbx
DH-Win64-Shipping.exe+1D77835: E8 A6 E6 C2 FE - call DH-Win64-Shipping.exe+9A5EE0
DH-Win64-Shipping.exe+1D7783A: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
DH-Win64-Shipping.exe+1D7783F: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
DH-Win64-Shipping.exe+1D77844: 48 83 C4 40 - add rsp,40
DH-Win64-Shipping.exe+1D77848: 5B - pop rbx
DH-Win64-Shipping.exe+1D77849: C3 - ret
DH-Win64-Shipping.exe+1D7784A: CC - int 3
DH-Win64-Shipping.exe+1D7784B: CC - int 3
}
2
"shock ray base"
0
4 Bytes
shockbase
0
6
"get disintegrator base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(disintegratorammo,DH-Win64-Shipping.exe,C0 89 81 80 09 00 00) // should be unique
alloc(newmem,$1000,disintegratorammo)
registersymbol(disintegratorbase)
label(code)
label(return)
label(disintegratorbase)
newmem:
mov [rcx+00000980],eax
mov [disintegratorbase],rcx
jmp return
disintegratorbase:
dq 0
code:
mov [rcx+00000980],eax
jmp return
disintegratorammo+01:
jmp newmem
nop
return:
registersymbol(disintegratorammo)
[DISABLE]
disintegratorammo+01:
db 89 81 80 09 00 00
unregistersymbol(disintegratorammo)
unregistersymbol(disintegratorbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D71411
DH-Win64-Shipping.exe+1D713EF: CC - int 3
DH-Win64-Shipping.exe+1D713F0: 48 83 EC 28 - sub rsp,28
DH-Win64-Shipping.exe+1D713F4: 44 8B 81 80 09 00 00 - mov r8d,[rcx+00000980]
DH-Win64-Shipping.exe+1D713FB: 44 03 C2 - add r8d,edx
DH-Win64-Shipping.exe+1D713FE: 79 04 - jns DH-Win64-Shipping.exe+1D71404
DH-Win64-Shipping.exe+1D71400: 33 C0 - xor eax,eax
DH-Win64-Shipping.exe+1D71402: EB 0D - jmp DH-Win64-Shipping.exe+1D71411
DH-Win64-Shipping.exe+1D71404: 8B 81 70 09 00 00 - mov eax,[rcx+00000970]
DH-Win64-Shipping.exe+1D7140A: 44 3B C0 - cmp r8d,eax
DH-Win64-Shipping.exe+1D7140D: 41 0F 4C C0 - cmovl eax,r8d
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D71411: 89 81 80 09 00 00 - mov [rcx+00000980],eax
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D71417: 48 8D 54 24 30 - lea rdx,[rsp+30]
DH-Win64-Shipping.exe+1D7141C: 48 89 4C 24 30 - mov [rsp+30],rcx
DH-Win64-Shipping.exe+1D71421: 48 81 C1 98 02 00 00 - add rcx,00000298
DH-Win64-Shipping.exe+1D71428: E8 B3 4A C3 FE - call DH-Win64-Shipping.exe+9A5EE0
DH-Win64-Shipping.exe+1D7142D: 48 83 C4 28 - add rsp,28
DH-Win64-Shipping.exe+1D71431: C3 - ret
DH-Win64-Shipping.exe+1D71432: CC - int 3
DH-Win64-Shipping.exe+1D71433: CC - int 3
DH-Win64-Shipping.exe+1D71434: CC - int 3
DH-Win64-Shipping.exe+1D71435: CC - int 3
}
7
"disintegrator base"
0
4 Bytes
disintegratorbase
0
11
"get jetpack base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(jetpack,DH-Win64-Shipping.exe,F3 0F 11 8F 3C 01 00 00) // should be unique
alloc(newmem,$1000,jetpack)
registersymbol(jetpackbase)
label(code)
label(return)
label(jetpackbase)
newmem:
movss [rdi+0000013C],xmm1
mov [jetpackbase],rdi
jmp return
jetpackbase:
dq 0
code:
movss [rdi+0000013C],xmm1
jmp return
jetpack:
jmp newmem
nop 3
return:
registersymbol(jetpack)
[DISABLE]
jetpack:
db F3 0F 11 8F 3C 01 00 00
unregistersymbol(jetpack)
unregistersymbol(jetpackbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1CE5CBC
DH-Win64-Shipping.exe+1CE5C8B: 44 88 B7 48 01 00 00 - mov [rdi+00000148],r14l
DH-Win64-Shipping.exe+1CE5C92: 0F 86 88 00 00 00 - jbe DH-Win64-Shipping.exe+1CE5D20
DH-Win64-Shipping.exe+1CE5C98: 44 39 B7 00 01 00 00 - cmp [rdi+00000100],r14d
DH-Win64-Shipping.exe+1CE5C9F: 7E 28 - jle DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA1: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CA4: 77 23 - ja DH-Win64-Shipping.exe+1CE5CC9
DH-Win64-Shipping.exe+1CE5CA6: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CAD: 0F 28 C7 - movaps xmm0,xmm7
DH-Win64-Shipping.exe+1CE5CB0: F3 0F 59 80 98 01 00 00 - mulss xmm0,[rax+00000198]
DH-Win64-Shipping.exe+1CE5CB8: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1CE5CBC: F3 0F 11 8F 3C 01 00 00 - movss [rdi+0000013C],xmm1
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1CE5CC4: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CC7: EB 2F - jmp DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CC9: 0F 28 D1 - movaps xmm2,xmm1
DH-Win64-Shipping.exe+1CE5CCC: 44 38 B7 04 01 00 00 - cmp [rdi+00000104],r14l
DH-Win64-Shipping.exe+1CE5CD3: 74 23 - je DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CD5: 0F 2F C6 - comiss xmm0,xmm6
DH-Win64-Shipping.exe+1CE5CD8: 77 1E - ja DH-Win64-Shipping.exe+1CE5CF8
DH-Win64-Shipping.exe+1CE5CDA: 48 8B 87 08 01 00 00 - mov rax,[rdi+00000108]
DH-Win64-Shipping.exe+1CE5CE1: 0F 28 C7 - movaps xmm0,xmm7
DH-Win64-Shipping.exe+1CE5CE4: F3 0F 59 80 9C 01 00 00 - mulss xmm0,[rax+0000019C]
}
14
"jetpack base"
0
4 Bytes
jetpackbase
0
26257
"get player base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(get_player_base,DH-Win64-Shipping.exe,48 8B 01 48 FF A0 28 06 00 00 CC CC) // should be unique
alloc(newmem,$1000,get_player_base)
registersymbol(player)
label(player)
label(code)
label(return)
newmem:
//3c-0;d0-0;1a0-4
//je 134-0;
cmp [rcx+50],4
jne code
mov rax,[rcx]
mov [player],rcx
jmp qword ptr [rax+00000628]
jmp return
player:
dq 0
code:
mov rax,[rcx]
jmp qword ptr [rax+00000628]
jmp return
get_player_base:
jmp newmem
nop 5
return:
registersymbol(get_player_base)
[DISABLE]
get_player_base:
db 48 8B 01 48 FF A0 28 06 00 00
unregistersymbol(get_player_base)
unregistersymbol(player)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+3E48D50
DH-Win64-Shipping.exe+3E48D43: 48 83 C4 20 - add rsp,20
DH-Win64-Shipping.exe+3E48D47: 5F - pop rdi
DH-Win64-Shipping.exe+3E48D48: C3 - ret
DH-Win64-Shipping.exe+3E48D49: CC - int 3
DH-Win64-Shipping.exe+3E48D4A: CC - int 3
DH-Win64-Shipping.exe+3E48D4B: CC - int 3
DH-Win64-Shipping.exe+3E48D4C: CC - int 3
DH-Win64-Shipping.exe+3E48D4D: CC - int 3
DH-Win64-Shipping.exe+3E48D4E: CC - int 3
DH-Win64-Shipping.exe+3E48D4F: CC - int 3
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+3E48D50: 48 8B 01 - mov rax,[rcx]
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+3E48D53: 48 FF A0 28 06 00 00 - jmp qword ptr [rax+00000628]
DH-Win64-Shipping.exe+3E48D5A: CC - int 3
DH-Win64-Shipping.exe+3E48D5B: CC - int 3
DH-Win64-Shipping.exe+3E48D5C: CC - int 3
DH-Win64-Shipping.exe+3E48D5D: CC - int 3
DH-Win64-Shipping.exe+3E48D5E: CC - int 3
DH-Win64-Shipping.exe+3E48D5F: CC - int 3
DH-Win64-Shipping.exe+3E48D60: 48 89 5C 24 08 - mov [rsp+08],rbx
DH-Win64-Shipping.exe+3E48D65: 48 89 6C 24 10 - mov [rsp+10],rbp
DH-Win64-Shipping.exe+3E48D6A: 44 88 44 24 18 - mov [rsp+18],r8l
}
26258
"player base"
0
4 Bytes
player
0
26253
"get player movement base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-30
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(player_movement_base,DH-Win64-Shipping.exe,F3 0F 10 80 BC 01 00 00 48) // should be unique
alloc(newmem,$1000,player_movement_base)
registersymbol(playermovebase)
label(playermovebase)
label(code)
label(return)
newmem:
movss xmm0,[rax+000001BC]
mov [playermovebase],rax
jmp return
playermovebase:
dq 0
code:
movss xmm0,[rax+000001BC]
jmp return
player_movement_base:
jmp newmem
nop 3
return:
registersymbol(player_movement_base)
[DISABLE]
player_movement_base:
db F3 0F 10 80 BC 01 00 00
unregistersymbol(player_movement_base)
unregistersymbol(playermovebase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1CD7C69
DH-Win64-Shipping.exe+1CD7C46: 48 8B 59 E8 - mov rbx,[rcx-18]
DH-Win64-Shipping.exe+1CD7C4A: 48 85 DB - test rbx,rbx
DH-Win64-Shipping.exe+1CD7C4D: 74 28 - je DH-Win64-Shipping.exe+1CD7C77
DH-Win64-Shipping.exe+1CD7C4F: E8 DC AE 8B 02 - call DH-Win64-Shipping.exe+4592B30
DH-Win64-Shipping.exe+1CD7C54: 4C 8B 03 - mov r8,[rbx]
DH-Win64-Shipping.exe+1CD7C57: 48 8B D0 - mov rdx,rax
DH-Win64-Shipping.exe+1CD7C5A: 48 8B CB - mov rcx,rbx
DH-Win64-Shipping.exe+1CD7C5D: 41 FF 90 28 06 00 00 - call qword ptr [r8+00000628]
DH-Win64-Shipping.exe+1CD7C64: 48 85 C0 - test rax,rax
DH-Win64-Shipping.exe+1CD7C67: 74 0E - je DH-Win64-Shipping.exe+1CD7C77
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1CD7C69: F3 0F 10 80 BC 01 00 00 - movss xmm0,[rax+000001BC]
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1CD7C71: 48 83 C4 20 - add rsp,20
DH-Win64-Shipping.exe+1CD7C75: 5B - pop rbx
DH-Win64-Shipping.exe+1CD7C76: C3 - ret
DH-Win64-Shipping.exe+1CD7C77: 0F 57 C0 - xorps xmm0,xmm0
DH-Win64-Shipping.exe+1CD7C7A: 48 83 C4 20 - add rsp,20
DH-Win64-Shipping.exe+1CD7C7E: 5B - pop rbx
DH-Win64-Shipping.exe+1CD7C7F: C3 - ret
DH-Win64-Shipping.exe+1CD7C80: 48 89 5C 24 08 - mov [rsp+08],rbx
DH-Win64-Shipping.exe+1CD7C85: 57 - push rdi
DH-Win64-Shipping.exe+1CD7C86: 48 83 EC 30 - sub rsp,30
}
26237
"player movement base"
0
4 Bytes
playermovebase
0
26256
"player jump velocity"
0
Float
playermovebase
180
26254
"player movement speed"
0
Float
playermovebase
1bc
26269
"get furotech base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-31
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(bluemoneybase,DH-Win64-Shipping.exe,8B 90 EC 03 00 00) // should be unique
alloc(newmem,$1000,bluemoneybase)
registersymbol(blue)
label(blue)
label(code)
label(return)
newmem:
mov edx,[rax+000003EC]
mov [blue],rax
jmp return
blue:
dq 0
code:
mov edx,[rax+000003EC]
jmp return
bluemoneybase:
jmp newmem
nop
return:
registersymbol(bluemoneybase)
[DISABLE]
bluemoneybase:
db 8B 90 EC 03 00 00
unregistersymbol(bluemoneybase)
unregistersymbol(blue)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+1D07FEC
DH-Win64-Shipping.exe+1D07FCF: 4C 8B C0 - mov r8,rax
DH-Win64-Shipping.exe+1D07FD2: 48 85 C0 - test rax,rax
DH-Win64-Shipping.exe+1D07FD5: 74 2E - je DH-Win64-Shipping.exe+1D08005
DH-Win64-Shipping.exe+1D07FD7: 0F BE 48 34 - movsx ecx,byte ptr [rax+34]
DH-Win64-Shipping.exe+1D07FDB: 41 8B D7 - mov edx,r15d
DH-Win64-Shipping.exe+1D07FDE: 83 E9 01 - sub ecx,01
DH-Win64-Shipping.exe+1D07FE1: 74 11 - je DH-Win64-Shipping.exe+1D07FF4
DH-Win64-Shipping.exe+1D07FE3: 83 F9 01 - cmp ecx,01
DH-Win64-Shipping.exe+1D07FE6: 75 16 - jne DH-Win64-Shipping.exe+1D07FFE
DH-Win64-Shipping.exe+1D07FE8: 48 8B 46 40 - mov rax,[rsi+40]
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+1D07FEC: 8B 90 EC 03 00 00 - mov edx,[rax+000003EC]
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+1D07FF2: EB 0A - jmp DH-Win64-Shipping.exe+1D07FFE
DH-Win64-Shipping.exe+1D07FF4: 48 8B 46 40 - mov rax,[rsi+40]
DH-Win64-Shipping.exe+1D07FF8: 8B 90 E8 03 00 00 - mov edx,[rax+000003E8]
DH-Win64-Shipping.exe+1D07FFE: 41 39 50 30 - cmp [r8+30],edx
DH-Win64-Shipping.exe+1D08002: 0F 9E C0 - setle al
DH-Win64-Shipping.exe+1D08005: 48 8B 4E 40 - mov rcx,[rsi+40]
DH-Win64-Shipping.exe+1D08009: 48 8B D7 - mov rdx,rdi
DH-Win64-Shipping.exe+1D0800C: 88 45 09 - mov [rbp+09],al
DH-Win64-Shipping.exe+1D0800F: 48 8B 89 00 04 00 00 - mov rcx,[rcx+00000400]
DH-Win64-Shipping.exe+1D08016: E8 E5 A4 FF FF - call DH-Win64-Shipping.exe+1D02500
}
26262
"furotech base"
0
4 Bytes
blue
0
26263
"furotech reactors"
0
4 Bytes
blue
3e8
26270
"furotech cells"
0
4 Bytes
blue
3ec
26282
"get free love base"
Auto Assembler Script
{ Game : DH-Win64-Shipping.exe
Version:
Date : 2022-08-31
Author : nbarr
This script does blah blah blah
}
[ENABLE]
aobscanmodule(free_love,DH-Win64-Shipping.exe,CC 8B 81 B8 00 00 00 C3) // should be unique
alloc(newmem,$1000,free_love)
registersymbol(freelovebase)
label(code)
label(return)
label(freelovebase)
newmem:
mov eax,[rcx+000000B8]
mov [freelovebase],rcx
jmp return
freelovebase:
dq 0
code:
mov eax,[rcx+000000B8]
jmp return
free_love+01:
jmp newmem
nop
return:
registersymbol(free_love)
[DISABLE]
free_love+01:
db 8B 81 B8 00 00 00
unregistersymbol(free_love)
unregistersymbol(freelovebase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DH-Win64-Shipping.exe+194F100
DH-Win64-Shipping.exe+194F0F6: C3 - ret
DH-Win64-Shipping.exe+194F0F7: CC - int 3
DH-Win64-Shipping.exe+194F0F8: CC - int 3
DH-Win64-Shipping.exe+194F0F9: CC - int 3
DH-Win64-Shipping.exe+194F0FA: CC - int 3
DH-Win64-Shipping.exe+194F0FB: CC - int 3
DH-Win64-Shipping.exe+194F0FC: CC - int 3
DH-Win64-Shipping.exe+194F0FD: CC - int 3
DH-Win64-Shipping.exe+194F0FE: CC - int 3
DH-Win64-Shipping.exe+194F0FF: CC - int 3
// ---------- INJECTING HERE ----------
DH-Win64-Shipping.exe+194F100: 8B 81 B8 00 00 00 - mov eax,[rcx+000000B8]
// ---------- DONE INJECTING ----------
DH-Win64-Shipping.exe+194F106: C3 - ret
DH-Win64-Shipping.exe+194F107: CC - int 3
DH-Win64-Shipping.exe+194F108: CC - int 3
DH-Win64-Shipping.exe+194F109: CC - int 3
DH-Win64-Shipping.exe+194F10A: CC - int 3
DH-Win64-Shipping.exe+194F10B: CC - int 3
DH-Win64-Shipping.exe+194F10C: CC - int 3
DH-Win64-Shipping.exe+194F10D: CC - int 3
DH-Win64-Shipping.exe+194F10E: CC - int 3
DH-Win64-Shipping.exe+194F10F: CC - int 3
}
26283
"free love base"
0
4 Bytes
freelovebase
0