6J{sw.NnV4%qdPqCIJ
2
"Stress, Flashlight"
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,WastelandBites.exe+2D63DA0)
label(returnhere)
label(originalcode)
label(exit)
label(nopInstructionAccess)
alloc(stressBase, 8)
alloc(flashBase, 8)
registersymbol(stressBase)
registersymbol(flashBase)
newmem:
cmp [rsp+30], "WastelandBites.exe"+5EDD0E0
jne originalcode
cmp [rsp+38], "WastelandBites.exe"+4AD507
jne originalcode
cmp [rsp+48], "WastelandBites.exe"+2F9D16C // Stress and Flashlight
jne originalcode
cmp [rsp+80], "WastelandBites.exe"+191DC70 // Flashlight Only
jne @f
mov [flashBase], r9
jmp nopInstructionAccess
@@:
mov [stressBase], r9
nopInstructionAccess:
nop [r9+08]
originalcode:
movsd xmm0,[r9+08]
exit:
jmp returnhere
WastelandBites.exe+2D63DA0:
jmp newmem
nop
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
WastelandBites.exe+2D63DA0:
db F2 41 0F 10 41 08
6
"Stress Pointer"
0
Double
stressBase
08
7
"Flashlight Pointer"
0
Double
flashBase
08
4
"Earnings"
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,WastelandBites.exe+3FD76C4)
label(returnhere)
label(originalcode)
label(exit)
alloc(earningsBase, 8)
registersymbol(earningsBase)
newmem:
cmp [rsp], "WastelandBites.exe"+594BC3
jne originalcode
cmp [rsp+8], 0
je originalcode
cmp [rsp+38], 0
je originalcode
nop [rcx+08]
mov [earningsBase], rcx
originalcode:
add rax,[rcx+08]
mov [r8+08],rax
exit:
jmp returnhere
WastelandBites.exe+3FD76C4:
jmp newmem
nop 3
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
WastelandBites.exe+3FD76C4:
db 48 03 41 08 49 89 40 08
8
"Earnings Pointer"
0
4 Bytes
earningsBase
08
5
"Money"
Auto Assembler Script
[ENABLE]
alloc(newmem,2048,WastelandBites.exe+2D64E93)
label(returnhere)
label(originalcode)
label(exit)
alloc(moneyBase, 8)
registersymbol(moneyBase)
newmem:
cmp [rsp], "WastelandBites.exe"+2F119F4
jne originalcode
cmp [rsp+10], 0
jne originalcode
cmp [rsp+18], 0
jne originalcode
cmp [rsp+98], 5
jne originalcode
nop [rcx+08]
mov [moneyBase], rcx
originalcode:
mov rax,[rcx+08]
exit:
jmp returnhere
WastelandBites.exe+2D64E93:
jmp1 newmem
nop 3
returnhere:
[DISABLE]
dealloc(*)
unregistersymbol(*)
WastelandBites.exe+2D64E93:
db 48 8B 41 08
9
"Money Pointer"
0
4 Bytes
moneyBase
08
Code :movsd xmm0,[r9+08] -- Access
WastelandBites.exe+2D63DA0
FF
0F
1F
40
00
F2
41
0F
10
41
08
F2
41
0F
11
40
Code :add rax,[rcx+08] -- Earnings Write
WastelandBites.exe+3FD76C4
90
48
8B
42
08
48
03
41
08
49
89
40
08
C3
Code :mov [r8+08],rax -- Earnings Write
WastelandBites.exe+2D68004
00
49
8B
41
08
49
89
40
08
EB
9A
66
0F
1F
Code :mov rax,[rcx+08] -- Money Write
WastelandBites.exe+2D64E93
83
F8
02
75
1D
48
8B
41
08
C3
0F
1F
84
00
Code :mov rax,[r9+08] -- Money Write 2
WastelandBites.exe+2D63CD0
00
00
00
00
00
49
8B
41
08
49
89
40
08
48