1 "inf time left" Auto Assembler Script { Game : Kaching-Win64-Shipping.exe Version: Date : 2026-01-12 Author : savag This script does blah blah blah } [ENABLE] aobscanmodule(INJECT,Kaching-Win64-Shipping.exe,F3 0F 11 89 08 03 00 00) // should be unique alloc(newmem,$1000,INJECT) label(code) label(return) newmem: code: // movss [rcx+00000308],xmm1 jmp return INJECT: jmp newmem nop 3 return: registersymbol(INJECT) [DISABLE] INJECT: db F3 0F 11 89 08 03 00 00 unregistersymbol(INJECT) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "Kaching-Win64-Shipping.exe"+4F4F269 "Kaching-Win64-Shipping.exe"+4F4F243: 48 FF A0 10 07 00 00 - jmp qword ptr [rax+00000710] "Kaching-Win64-Shipping.exe"+4F4F24A: 48 83 C4 30 - add rsp,30 "Kaching-Win64-Shipping.exe"+4F4F24E: 5E - pop rsi "Kaching-Win64-Shipping.exe"+4F4F24F: C3 - ret "Kaching-Win64-Shipping.exe"+4F4F250: 40 56 - push rsi "Kaching-Win64-Shipping.exe"+4F4F252: 48 83 EC 20 - sub rsp,20 "Kaching-Win64-Shipping.exe"+4F4F256: 80 B9 68 01 00 00 03 - cmp byte ptr [rcx+00000168],03 "Kaching-Win64-Shipping.exe"+4F4F25D: 48 8B F1 - mov rsi,rcx "Kaching-Win64-Shipping.exe"+4F4F260: 75 64 - jne "Kaching-Win64-Shipping.exe"+4F4F2C6 "Kaching-Win64-Shipping.exe"+4F4F262: 80 B9 11 03 00 00 01 - cmp byte ptr [rcx+00000311],01 // ---------- INJECTING HERE ---------- "Kaching-Win64-Shipping.exe"+4F4F269: F3 0F 11 89 08 03 00 00 - movss [rcx+00000308],xmm1 // ---------- DONE INJECTING ---------- "Kaching-Win64-Shipping.exe"+4F4F271: 75 41 - jne "Kaching-Win64-Shipping.exe"+4F4F2B4 "Kaching-Win64-Shipping.exe"+4F4F273: 48 89 5C 24 38 - mov [rsp+38],rbx "Kaching-Win64-Shipping.exe"+4F4F278: 48 89 7C 24 40 - mov [rsp+40],rdi "Kaching-Win64-Shipping.exe"+4F4F27D: F3 0F 11 4C 24 30 - movss [rsp+30],xmm1 "Kaching-Win64-Shipping.exe"+4F4F283: E8 58 E5 FA FF - call "Kaching-Win64-Shipping.exe"+4EFD7E0 "Kaching-Win64-Shipping.exe"+4F4F288: 48 8B 1D 81 35 D0 04 - mov rbx,["Kaching-Win64-Shipping.exe"+9C52810] "Kaching-Win64-Shipping.exe"+4F4F28F: 48 8B F8 - mov rdi,rax "Kaching-Win64-Shipping.exe"+4F4F292: E8 69 82 FB FF - call "Kaching-Win64-Shipping.exe"+4F07500 "Kaching-Win64-Shipping.exe"+4F4F297: 4C 8D 4C 24 30 - lea r9,[rsp+30] "Kaching-Win64-Shipping.exe"+4F4F29C: 4C 8B C0 - mov r8,rax } 59 "All Cost $0.01" Auto Assembler Script { Game : Kaching-Win64-Shipping.exe Version: Date : 2026-01-16 Author : savag This script does blah blah blah } [ENABLE] aobscanmodule(money,Kaching-Win64-Shipping.exe,01 91 10 07 00 00 8B) // should be unique alloc(newmem,$1000,money) label(code) label(return) newmem: code: add [rcx+00000710],FFFFFFFF jmp return money: jmp newmem nop return: registersymbol(money) [DISABLE] money: db 01 91 10 07 00 00 unregistersymbol(money) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "Kaching-Win64-Shipping.exe"+4F8BADF "Kaching-Win64-Shipping.exe"+4F8BABD: 48 8B D0 - mov rdx,rax "Kaching-Win64-Shipping.exe"+4F8BAC0: 41 FF D1 - call r9 "Kaching-Win64-Shipping.exe"+4F8BAC3: 48 8B CB - mov rcx,rbx "Kaching-Win64-Shipping.exe"+4F8BAC6: 48 83 C4 20 - add rsp,20 "Kaching-Win64-Shipping.exe"+4F8BACA: 5B - pop rbx "Kaching-Win64-Shipping.exe"+4F8BACB: E9 A0 6B FF FF - jmp "Kaching-Win64-Shipping.exe"+4F82670 "Kaching-Win64-Shipping.exe"+4F8BAD0: 48 89 5C 24 08 - mov [rsp+08],rbx "Kaching-Win64-Shipping.exe"+4F8BAD5: 48 89 74 24 18 - mov [rsp+18],rsi "Kaching-Win64-Shipping.exe"+4F8BADA: 57 - push rdi "Kaching-Win64-Shipping.exe"+4F8BADB: 48 83 EC 20 - sub rsp,20 // ---------- INJECTING HERE ---------- "Kaching-Win64-Shipping.exe"+4F8BADF: 01 91 10 07 00 00 - add [rcx+00000710],edx // ---------- DONE INJECTING ---------- "Kaching-Win64-Shipping.exe"+4F8BAE5: 8B FA - mov edi,edx "Kaching-Win64-Shipping.exe"+4F8BAE7: 48 8B D9 - mov rbx,rcx "Kaching-Win64-Shipping.exe"+4F8BAEA: 79 0A - jns "Kaching-Win64-Shipping.exe"+4F8BAF6 "Kaching-Win64-Shipping.exe"+4F8BAEC: C7 81 10 07 00 00 00 00 00 00 - mov [rcx+00000710],00000000 "Kaching-Win64-Shipping.exe"+4F8BAF6: 48 83 B9 D0 02 00 00 00 - cmp qword ptr [rcx+000002D0],00 "Kaching-Win64-Shipping.exe"+4F8BAFE: 74 41 - je "Kaching-Win64-Shipping.exe"+4F8BB41 "Kaching-Win64-Shipping.exe"+4F8BB00: E8 FB 52 F8 FF - call "Kaching-Win64-Shipping.exe"+4F10E00 "Kaching-Win64-Shipping.exe"+4F8BB05: 48 8B D0 - mov rdx,rax "Kaching-Win64-Shipping.exe"+4F8BB08: 48 8D 8B D0 02 00 00 - lea rcx,[rbx+000002D0] "Kaching-Win64-Shipping.exe"+4F8BB0F: E8 EC 09 52 FC - call "Kaching-Win64-Shipping.exe"+14AC500 } 60 "Buy Ticket = Add $10,000" Auto Assembler Script { Game : Kaching-Win64-Shipping.exe Version: Date : 2026-01-16 Author : savag This script does blah blah blah } [ENABLE] aobscanmodule(money,Kaching-Win64-Shipping.exe,01 91 10 07 00 00 8B) // should be unique alloc(newmem,$1000,money) label(code) label(return) newmem: code: add [rcx+00000710],F4240 jmp return money: jmp newmem nop return: registersymbol(money) [DISABLE] money: db 01 91 10 07 00 00 unregistersymbol(money) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "Kaching-Win64-Shipping.exe"+4F8BADF "Kaching-Win64-Shipping.exe"+4F8BABD: 48 8B D0 - mov rdx,rax "Kaching-Win64-Shipping.exe"+4F8BAC0: 41 FF D1 - call r9 "Kaching-Win64-Shipping.exe"+4F8BAC3: 48 8B CB - mov rcx,rbx "Kaching-Win64-Shipping.exe"+4F8BAC6: 48 83 C4 20 - add rsp,20 "Kaching-Win64-Shipping.exe"+4F8BACA: 5B - pop rbx "Kaching-Win64-Shipping.exe"+4F8BACB: E9 A0 6B FF FF - jmp "Kaching-Win64-Shipping.exe"+4F82670 "Kaching-Win64-Shipping.exe"+4F8BAD0: 48 89 5C 24 08 - mov [rsp+08],rbx "Kaching-Win64-Shipping.exe"+4F8BAD5: 48 89 74 24 18 - mov [rsp+18],rsi "Kaching-Win64-Shipping.exe"+4F8BADA: 57 - push rdi "Kaching-Win64-Shipping.exe"+4F8BADB: 48 83 EC 20 - sub rsp,20 // ---------- INJECTING HERE ---------- "Kaching-Win64-Shipping.exe"+4F8BADF: 01 91 10 07 00 00 - add [rcx+00000710],edx // ---------- DONE INJECTING ---------- "Kaching-Win64-Shipping.exe"+4F8BAE5: 8B FA - mov edi,edx "Kaching-Win64-Shipping.exe"+4F8BAE7: 48 8B D9 - mov rbx,rcx "Kaching-Win64-Shipping.exe"+4F8BAEA: 79 0A - jns "Kaching-Win64-Shipping.exe"+4F8BAF6 "Kaching-Win64-Shipping.exe"+4F8BAEC: C7 81 10 07 00 00 00 00 00 00 - mov [rcx+00000710],00000000 "Kaching-Win64-Shipping.exe"+4F8BAF6: 48 83 B9 D0 02 00 00 00 - cmp qword ptr [rcx+000002D0],00 "Kaching-Win64-Shipping.exe"+4F8BAFE: 74 41 - je "Kaching-Win64-Shipping.exe"+4F8BB41 "Kaching-Win64-Shipping.exe"+4F8BB00: E8 FB 52 F8 FF - call "Kaching-Win64-Shipping.exe"+4F10E00 "Kaching-Win64-Shipping.exe"+4F8BB05: 48 8B D0 - mov rdx,rax "Kaching-Win64-Shipping.exe"+4F8BB08: 48 8D 8B D0 02 00 00 - lea rcx,[rbx+000002D0] "Kaching-Win64-Shipping.exe"+4F8BB0F: E8 EC 09 52 FC - call "Kaching-Win64-Shipping.exe"+14AC500 }