1337205819 "Gears of War: E-Day" 6B6B6B Auto Assembler Script [ENABLE] {$lua} OpenProcess("GoWEDay-Steam.exe") {$asm} [DISABLE] 1337205831 "PlayerData_Ammo/Throwables" FF0000 Auto Assembler Script [ENABLE] aobscanmodule(PlayerData_Ammo,$process,C5 FA 7F 8B C8 ** ** ** E8 ** ** ** ** 83 FF 03 75 ** C5 F8 10 83 C8 ** ** **) alloc(newmem,$10000) label(return) registersymbol(PlayerData_Ammo) newmem: vmovdqu [rbx+System.Threading.QueueUserWorkItemCallback.ccb],xmm1 mov [rbx+System.Threading.QueueUserWorkItemCallback.ccb],3e8 call "$process"+877b6bC cmp edi,3 jmp return PlayerData_Ammo: jmp far newmem nop 2 return: [DISABLE] dealloc(*) unregistersymbol(*) PlayerData_Ammo: db C5 FA 7F 8B C8 0F 00 00 E8 EA 93 FF FF 83 FF 03 1337205860 "PlayerData_DownsRemaining" FF8080 Auto Assembler Script [ENABLE] aobscanmodule(PlayerData_DownsRemaining,$process,8B 97 74 05 00 00 48 8B CF FF CA E8 ** ** ** **) alloc(newmem,$10000) label(return) registersymbol(PlayerData_DownsRemaining) newmem: mov [rdi+System.IO.IsolatedStorage.IsolatedStorageFile.s_RootDirRoaming+4],7 mov edx,[rdi+System.IO.IsolatedStorage.IsolatedStorageFile.s_RootDirRoaming+4] mov rcx,rdi dec edx call "$process"+932c238 jmp return PlayerData_DownsRemaining: jmp far newmem nop 2 return: [DISABLE] dealloc(*) unregistersymbol(*) PlayerData_DownsRemaining: db 8B 97 74 05 00 00 48 8B CF FF CA E8 16 82 00 00 1337205838 "PlayerData_Health" 0000FF Auto Assembler Script [ENABLE] aobscanmodule(PlayerData_Health,$process,C4 A1 7A 10 0C C2 E8 ** ** ** ** FF C3 3B 5F 08 7C **) alloc(newmem,$10000) label(return) registersymbol(PlayerData_Health) newmem: mov [rdx+r8*8],(float)100000 vmovss xmm1,[rdx+r8*8] call "$process"+98c8cd8 inc ebx cmp ebx,[rdi+8] jmp return PlayerData_Health: jmp far newmem nop 2 return: [DISABLE] dealloc(*) unregistersymbol(*) PlayerData_Health: db C4 A1 7A 10 0C C2 E8 7E 80 FF FF FF C3 3B 5F 08 1337205851 "PlayerData_Overheat" FF8000 Auto Assembler Script [ENABLE] aobscanmodule(PlayerData_Overheat,$process,C5 FA 5C 88 A0 ** ** ** C5 F8 2E 8F 10 ** ** ** 74 ** 0F BA AF ** ** ** ** 09) alloc(newmem,$10000) label(return) registersymbol(PlayerData_Overheat) newmem: mov [rax+System.Threading.Thread.s_LocalDataStoreMgr],(float)1 vsubss xmm1,xmm0,[rax+System.Threading.Thread.s_LocalDataStoreMgr] vucomiss xmm1,[rdi+System.Security.Cryptography.X509Certificates.Oids.TripleDesCbc] jmp return PlayerData_Overheat: jmp far newmem nop 2 return: [DISABLE] dealloc(*) unregistersymbol(*) PlayerData_Overheat: db C5 FA 5C 88 A0 0F 00 00 C5 F8 2E 8F 10 09 00 00