63
"Sigil Not Possessed : Excellent Effects ON"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT,DQIandIIHD2DRemake.exe,75 0B 45 84 C0 74) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
// jne DQIandIIHD2DRemake.exe+10A4FC1
test r8b,r8b
jmp return
INJECT:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 75 0B 45 84 C0
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DQIandIIHD2DRemake.exe+10A4FB4
DQIandIIHD2DRemake.exe+10A4F97: 49 8B 01 - mov rax,[r9]
DQIandIIHD2DRemake.exe+10A4F9A: 48 85 C0 - test rax,rax
DQIandIIHD2DRemake.exe+10A4F9D: 74 22 - je DQIandIIHD2DRemake.exe+10A4FC1
DQIandIIHD2DRemake.exe+10A4F9F: 83 38 00 - cmp dword ptr [rax],00
DQIandIIHD2DRemake.exe+10A4FA2: 7E 1D - jle DQIandIIHD2DRemake.exe+10A4FC1
DQIandIIHD2DRemake.exe+10A4FA4: 48 8B 50 08 - mov rdx,[rax+08]
DQIandIIHD2DRemake.exe+10A4FA8: 48 85 D2 - test rdx,rdx
DQIandIIHD2DRemake.exe+10A4FAB: 74 14 - je DQIandIIHD2DRemake.exe+10A4FC1
DQIandIIHD2DRemake.exe+10A4FAD: 49 8B 0B - mov rcx,[r11]
DQIandIIHD2DRemake.exe+10A4FB0: 48 39 4A 08 - cmp [rdx+08],rcx
// ---------- INJECTING HERE ----------
DQIandIIHD2DRemake.exe+10A4FB4: 75 0B - jne DQIandIIHD2DRemake.exe+10A4FC1
// ---------- DONE INJECTING ----------
DQIandIIHD2DRemake.exe+10A4FB6: 45 84 C0 - test r8b,r8b
DQIandIIHD2DRemake.exe+10A4FB9: 74 0C - je DQIandIIHD2DRemake.exe+10A4FC7
DQIandIIHD2DRemake.exe+10A4FBB: 80 78 04 00 - cmp byte ptr [rax+04],00
DQIandIIHD2DRemake.exe+10A4FBF: 74 06 - je DQIandIIHD2DRemake.exe+10A4FC7
DQIandIIHD2DRemake.exe+10A4FC1: 49 83 C1 10 - add r9,10
DQIandIIHD2DRemake.exe+10A4FC5: EB CB - jmp DQIandIIHD2DRemake.exe+10A4F92
DQIandIIHD2DRemake.exe+10A4FC7: B0 01 - mov al,01
DQIandIIHD2DRemake.exe+10A4FC9: C3 - ret
DQIandIIHD2DRemake.exe+10A4FCA: 32 C0 - xor al,al
DQIandIIHD2DRemake.exe+10A4FCC: C3 - ret
}
62
"Souped-Up Skills : HP is below 50% ON"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT,DQIandIIHD2DRemake.exe,48 8B CE 66 0F 6E F0) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
mov rax,1 //HP1
code:
mov rcx,rsi
movd xmm6,eax
jmp return
INJECT:
jmp newmem
nop 2
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 48 8B CE 66 0F 6E F0
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DQIandIIHD2DRemake.exe+F5C5B9
DQIandIIHD2DRemake.exe+F5C598: 8B C3 - mov eax,ebx
DQIandIIHD2DRemake.exe+F5C59A: 99 - cdq
DQIandIIHD2DRemake.exe+F5C59B: F7 F9 - idiv ecx
DQIandIIHD2DRemake.exe+F5C59D: 83 F8 32 - cmp eax,32
DQIandIIHD2DRemake.exe+F5C5A0: 0F 9D C0 - setge al
DQIandIIHD2DRemake.exe+F5C5A3: EB 5C - jmp DQIandIIHD2DRemake.exe+F5C601
DQIandIIHD2DRemake.exe+F5C5A5: 48 8B 06 - mov rax,[rsi]
DQIandIIHD2DRemake.exe+F5C5A8: 48 8B CE - mov rcx,rsi
DQIandIIHD2DRemake.exe+F5C5AB: 0F 29 B4 24 80 00 00 00 - movaps [rsp+00000080],xmm6
DQIandIIHD2DRemake.exe+F5C5B3: FF 90 98 05 00 00 - call qword ptr [rax+00000598]
// ---------- INJECTING HERE ----------
DQIandIIHD2DRemake.exe+F5C5B9: 48 8B CE - mov rcx,rsi
// ---------- DONE INJECTING ----------
DQIandIIHD2DRemake.exe+F5C5BC: 66 0F 6E F0 - movd xmm6,eax
DQIandIIHD2DRemake.exe+F5C5C0: 48 8B 06 - mov rax,[rsi]
DQIandIIHD2DRemake.exe+F5C5C3: 0F 5B F6 - cvtdq2ps xmm6,xmm6
DQIandIIHD2DRemake.exe+F5C5C6: FF 90 90 05 00 00 - call qword ptr [rax+00000590]
DQIandIIHD2DRemake.exe+F5C5CC: 66 0F 6E C0 - movd xmm0,eax
DQIandIIHD2DRemake.exe+F5C5D0: 0F 5B C0 - cvtdq2ps xmm0,xmm0
DQIandIIHD2DRemake.exe+F5C5D3: F3 0F 5E F0 - divss xmm6,xmm0
DQIandIIHD2DRemake.exe+F5C5D7: 0F 2F 35 5A 24 F6 02 - comiss xmm6,[DQIandIIHD2DRemake.exe+3EBEA38]
DQIandIIHD2DRemake.exe+F5C5DE: 0F 28 B4 24 80 00 00 00 - movaps xmm6,[rsp+00000080]
DQIandIIHD2DRemake.exe+F5C5E6: 0F 96 C0 - setbe al
}
3
"[DQ1]Tntegel shop Item1"
1
0
4 Bytes
"DQIandIIHD2DRemake.exe"+0532BF30
14
50
30
1B8
38
11
"[DQ2]Midenhall shop Item1 (Before adding items)"
1
0
4 Bytes
"DQIandIIHD2DRemake.exe"+0532BF30
14
38
30
1B8
38
75
"[DQ2]Midenhall shop Item1 (After adding items)"
1
0
4 Bytes
"DQIandIIHD2DRemake.exe"+0532BF30
14
50
30
1B8
38
64
"Item Table"
1
0
4 Bytes
"DQIandIIHD2DRemake.exe"+0532BF30
0
30
20
38
76
"Item000"
1
0
4 Bytes
+0*(6*4)
77
"Item001"
1
0
4 Bytes
+1*(6*4)
78
"Item002"
1
0
4 Bytes
+2*(6*4)
79
" ・・・"
1
80
"[DQ2]Item028 : Falcon Sword of Ruin / はかぶさの剣"
1
0
4 Bytes
+1C*(6*4)
81
"[DQ2]Item303 : War Drum / たたかいのドラム"
1
0
4 Bytes
+12F*(6*4)
82
" ・・・"
1