7
"Enable"
Auto Assembler Script
{ Game : Oregon-WinGDK-Shipping.exe
Version:
Date : 2022-12-13
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(items_on_inv,$process,8B 42 10 C3 CC) // should be unique
alloc(ioimem,$1000,items_on_inv)
label(ioi_exit ioi_cont pesos crystals give_items)
registersymbol(items_on_inv pesos crystals give_items)
ioimem:
cmp [rdi+4c],0
jne @f
cmp [rsi+374],8
jbe @f
mov [pesos+0],rdx
add [pesos+0],10
mov [crystals+0],rdx
add [crystals+0],c4
@@:
cmp byte ptr [give_items+0],1
jne ioi_cont
cmp [rdx+10],1
jge ioi_cont
add [rdx+10],1
ioi_cont:
mov eax,[rdx+10]
ret
int 3
jmp ioi_exit
pesos:
dq 0
align 8,c3
crystals:
dq 0
align 8,c3
give_items:
db 0
align 2,c3
items_on_inv:
jmp ioimem
ioi_exit:
[DISABLE]
items_on_inv:
db 8B 42 10 C3 CC
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Oregon-WinGDK-Shipping.exe+141DBCF
Oregon-WinGDK-Shipping.exe+141DBBB: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBBC: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBBD: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBBE: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBBF: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBC0: 48 8B 05 39 3C 8E 04 - mov rax,[Oregon-WinGDK-Shipping.exe+5D01800]
Oregon-WinGDK-Shipping.exe+141DBC7: 48 39 02 - cmp [rdx],rax
Oregon-WinGDK-Shipping.exe+141DBCA: 75 03 - jne Oregon-WinGDK-Shipping.exe+141DBCF
Oregon-WinGDK-Shipping.exe+141DBCC: 33 C0 - xor eax,eax
Oregon-WinGDK-Shipping.exe+141DBCE: C3 - ret
// ---------- INJECTING HERE ----------
Oregon-WinGDK-Shipping.exe+141DBCF: 8B 42 10 - mov eax,[rdx+10]
// ---------- DONE INJECTING ----------
Oregon-WinGDK-Shipping.exe+141DBD2: C3 - ret
Oregon-WinGDK-Shipping.exe+141DBD3: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD4: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD5: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD6: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD7: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD8: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBD9: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBDA: CC - int 3
Oregon-WinGDK-Shipping.exe+141DBDB: CC - int 3
}
10
"Pointers"
1
8
"Pesos"
0
4 Bytes
pesos
0
9
"Crystals"
0
4 Bytes
crystals
0
14
"Scripts"
1
11
"Add all items to inventory"
Auto Assembler Script
[enable]
give_items:
db 1
[disable]
give_items:
db 0
2
"Infinite Ammo / No Reload"
Auto Assembler Script
{ Game : Oregon-WinGDK-Shipping.exe
Version:
Date : 2022-12-13
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(set_no_reload,$process,0F 4C C1 48 8B B7 E8 00 00 00) // should be unique
registersymbol(set_no_reload)
set_no_reload+1:
db 4f
[DISABLE]
set_no_reload+1:
db 4c
unregistersymbol(set_no_reload)
{
// ORIGINAL CODE - INJECTION POINT: Oregon-WinGDK-Shipping.exe+8FAE9E
Oregon-WinGDK-Shipping.exe+8FAE7C: 48 89 5C 24 58 - mov [rsp+58],rbx
Oregon-WinGDK-Shipping.exe+8FAE81: 8B DA - mov ebx,edx
Oregon-WinGDK-Shipping.exe+8FAE83: 48 89 74 24 38 - mov [rsp+38],rsi
Oregon-WinGDK-Shipping.exe+8FAE88: FF 90 E8 02 00 00 - call qword ptr [rax+000002E8]
Oregon-WinGDK-Shipping.exe+8FAE8E: 8B 8F E0 00 00 00 - mov ecx,[rdi+000000E0]
Oregon-WinGDK-Shipping.exe+8FAE94: 2B CB - sub ecx,ebx
Oregon-WinGDK-Shipping.exe+8FAE96: 79 04 - jns Oregon-WinGDK-Shipping.exe+8FAE9C
Oregon-WinGDK-Shipping.exe+8FAE98: 33 C0 - xor eax,eax
Oregon-WinGDK-Shipping.exe+8FAE9A: EB 05 - jmp Oregon-WinGDK-Shipping.exe+8FAEA1
Oregon-WinGDK-Shipping.exe+8FAE9C: 3B C8 - cmp ecx,eax
// ---------- INJECTING HERE ----------
Oregon-WinGDK-Shipping.exe+8FAE9E: 0F 4C C1 - cmovl eax,ecx
// ---------- DONE INJECTING ----------
Oregon-WinGDK-Shipping.exe+8FAEA1: 48 8B B7 E8 00 00 00 - mov rsi,[rdi+000000E8]
Oregon-WinGDK-Shipping.exe+8FAEA8: 89 87 E0 00 00 00 - mov [rdi+000000E0],eax
Oregon-WinGDK-Shipping.exe+8FAEAE: 48 85 F6 - test rsi,rsi
Oregon-WinGDK-Shipping.exe+8FAEB1: 0F 84 B8 00 00 00 - je Oregon-WinGDK-Shipping.exe+8FAF6F
Oregon-WinGDK-Shipping.exe+8FAEB7: 48 8B 06 - mov rax,[rsi]
Oregon-WinGDK-Shipping.exe+8FAEBA: 8B 0D B8 80 49 05 - mov ecx,[Oregon-WinGDK-Shipping.exe+5D92F78]
Oregon-WinGDK-Shipping.exe+8FAEC0: 48 8B 5F 2C - mov rbx,[rdi+2C]
Oregon-WinGDK-Shipping.exe+8FAEC4: 48 89 6C 24 60 - mov [rsp+60],rbp
Oregon-WinGDK-Shipping.exe+8FAEC9: 4C 89 64 24 30 - mov [rsp+30],r12
Oregon-WinGDK-Shipping.exe+8FAECE: 4C 89 74 24 28 - mov [rsp+28],r14
}
16
"Infinite Jumps"
Auto Assembler Script
{ Game : Oregon-WinGDK-Shipping.exe
Version:
Date : 2022-12-14
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(infinite_jumps,Oregon-WinGDK-Shipping.exe,0F 9C C0 48 8B 5C 24 30 48 83 C4 20 5F C3 32) // should be unique
registersymbol(infinite_jumps)
infinite_jumps:
nop 3
[DISABLE]
infinite_jumps:
db 0F 9C C0
unregistersymbol(*)
{
// ORIGINAL CODE - INJECTION POINT: Oregon-WinGDK-Shipping.exe+14802D9
Oregon-WinGDK-Shipping.exe+14802B1: 8B 83 48 03 00 00 - mov eax,[rbx+00000348]
Oregon-WinGDK-Shipping.exe+14802B7: FF C0 - inc eax
Oregon-WinGDK-Shipping.exe+14802B9: 3B 83 44 03 00 00 - cmp eax,[rbx+00000344]
Oregon-WinGDK-Shipping.exe+14802BF: 0F 9C C0 - setl al
Oregon-WinGDK-Shipping.exe+14802C2: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Oregon-WinGDK-Shipping.exe+14802C7: 48 83 C4 20 - add rsp,20
Oregon-WinGDK-Shipping.exe+14802CB: 5F - pop rdi
Oregon-WinGDK-Shipping.exe+14802CC: C3 - ret
Oregon-WinGDK-Shipping.exe+14802CD: 8B 83 44 03 00 00 - mov eax,[rbx+00000344]
Oregon-WinGDK-Shipping.exe+14802D3: 39 83 48 03 00 00 - cmp [rbx+00000348],eax
// ---------- INJECTING HERE ----------
Oregon-WinGDK-Shipping.exe+14802D9: 0F 9C C0 - setl al
// ---------- DONE INJECTING ----------
Oregon-WinGDK-Shipping.exe+14802DC: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Oregon-WinGDK-Shipping.exe+14802E1: 48 83 C4 20 - add rsp,20
Oregon-WinGDK-Shipping.exe+14802E5: 5F - pop rdi
Oregon-WinGDK-Shipping.exe+14802E6: C3 - ret
Oregon-WinGDK-Shipping.exe+14802E7: 32 C0 - xor al,al
Oregon-WinGDK-Shipping.exe+14802E9: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Oregon-WinGDK-Shipping.exe+14802EE: 48 83 C4 20 - add rsp,20
Oregon-WinGDK-Shipping.exe+14802F2: 5F - pop rdi
Oregon-WinGDK-Shipping.exe+14802F3: C3 - ret
Oregon-WinGDK-Shipping.exe+14802F4: CC - int 3
}
18
"Free Shopping"
Auto Assembler Script
{ Game : Oregon-WinGDK-Shipping.exe
Version:
Date : 2022-12-15
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(free_shopping,Oregon-WinGDK-Shipping.exe,41 2B C8 45 85 D2) // should be unique
registersymbol(free_shopping)
free_shopping:
nop 3
[DISABLE]
free_shopping:
db 41 2B C8
unregistersymbol(*)
{
// ORIGINAL CODE - INJECTION POINT: Oregon-WinGDK-Shipping.exe+141A09A
Oregon-WinGDK-Shipping.exe+141A080: 33 C0 - xor eax,eax
Oregon-WinGDK-Shipping.exe+141A082: 44 8B 52 0C - mov r10d,[rdx+0C]
Oregon-WinGDK-Shipping.exe+141A086: 85 C9 - test ecx,ecx
Oregon-WinGDK-Shipping.exe+141A088: 79 04 - jns Oregon-WinGDK-Shipping.exe+141A08E
Oregon-WinGDK-Shipping.exe+141A08A: 8B D0 - mov edx,eax
Oregon-WinGDK-Shipping.exe+141A08C: EB 0A - jmp Oregon-WinGDK-Shipping.exe+141A098
Oregon-WinGDK-Shipping.exe+141A08E: BA FF FF FF 7F - mov edx,7FFFFFFF
Oregon-WinGDK-Shipping.exe+141A093: 3B CA - cmp ecx,edx
Oregon-WinGDK-Shipping.exe+141A095: 0F 4C D1 - cmovl edx,ecx
Oregon-WinGDK-Shipping.exe+141A098: 8B CA - mov ecx,edx
// ---------- INJECTING HERE ----------
Oregon-WinGDK-Shipping.exe+141A09A: 41 2B C8 - sub ecx,r8d
// ---------- DONE INJECTING ----------
Oregon-WinGDK-Shipping.exe+141A09D: 45 85 D2 - test r10d,r10d
Oregon-WinGDK-Shipping.exe+141A0A0: 7E 0F - jle Oregon-WinGDK-Shipping.exe+141A0B1
Oregon-WinGDK-Shipping.exe+141A0A2: 85 C9 - test ecx,ecx
Oregon-WinGDK-Shipping.exe+141A0A4: 78 12 - js Oregon-WinGDK-Shipping.exe+141A0B8
Oregon-WinGDK-Shipping.exe+141A0A6: 41 3B CA - cmp ecx,r10d
Oregon-WinGDK-Shipping.exe+141A0A9: 41 8B C2 - mov eax,r10d
Oregon-WinGDK-Shipping.exe+141A0AC: 0F 4C C1 - cmovl eax,ecx
Oregon-WinGDK-Shipping.exe+141A0AF: EB 07 - jmp Oregon-WinGDK-Shipping.exe+141A0B8
Oregon-WinGDK-Shipping.exe+141A0B1: 85 C9 - test ecx,ecx
Oregon-WinGDK-Shipping.exe+141A0B3: 0F 4E C8 - cmovle ecx,eax
}
20
"Unlimited Fuel"
Auto Assembler Script
{ Game : Oregon-WinGDK-Shipping.exe
Version:
Date : 2022-12-15
Author : seneeki
This script does blah blah blah
}
[ENABLE]
aobscanmodule(unlimited_fuel,Oregon-WinGDK-Shipping.exe,F3 0F 11 81 40 10 00 00) // should be unique
registersymbol(unlimited_fuel)
unlimited_fuel:
nop 8
[DISABLE]
unlimited_fuel:
db F3 0F 11 81 40 10 00 00
unregistersymbol(*)
{
// ORIGINAL CODE - INJECTION POINT: Oregon-WinGDK-Shipping.exe+1489FE7
Oregon-WinGDK-Shipping.exe+1489FB1: 0F 28 F9 - movaps xmm7,xmm1
Oregon-WinGDK-Shipping.exe+1489FB4: 48 8B D9 - mov rbx,rcx
Oregon-WinGDK-Shipping.exe+1489FB7: 80 38 00 - cmp byte ptr [rax],00
Oregon-WinGDK-Shipping.exe+1489FBA: 0F 84 6A 01 00 00 - je Oregon-WinGDK-Shipping.exe+148A12A
Oregon-WinGDK-Shipping.exe+1489FC0: 80 B9 44 10 00 00 00 - cmp byte ptr [rcx+00001044],00
Oregon-WinGDK-Shipping.exe+1489FC7: 0F 85 5D 01 00 00 - jne Oregon-WinGDK-Shipping.exe+148A12A
Oregon-WinGDK-Shipping.exe+1489FCD: 0F 28 C1 - movaps xmm0,xmm1
Oregon-WinGDK-Shipping.exe+1489FD0: 48 89 BC 24 80 00 00 00 - mov [rsp+00000080],rdi
Oregon-WinGDK-Shipping.exe+1489FD8: F3 0F 58 81 40 10 00 00 - addss xmm0,[rcx+00001040]
Oregon-WinGDK-Shipping.exe+1489FE0: 48 8B B9 50 01 00 00 - mov rdi,[rcx+00000150]
// ---------- INJECTING HERE ----------
Oregon-WinGDK-Shipping.exe+1489FE7: F3 0F 11 81 40 10 00 00 - movss [rcx+00001040],xmm0
// ---------- DONE INJECTING ----------
Oregon-WinGDK-Shipping.exe+1489FEF: 48 85 FF - test rdi,rdi
Oregon-WinGDK-Shipping.exe+1489FF2: 0F 84 2A 01 00 00 - je Oregon-WinGDK-Shipping.exe+148A122
Oregon-WinGDK-Shipping.exe+1489FF8: E8 73 2C 10 00 - call Oregon-WinGDK-Shipping.exe+158CC70
Oregon-WinGDK-Shipping.exe+1489FFD: 48 8B 57 10 - mov rdx,[rdi+10]
Oregon-WinGDK-Shipping.exe+148A001: 4C 8D 40 30 - lea r8,[rax+30]
Oregon-WinGDK-Shipping.exe+148A005: 48 63 40 38 - movsxd rax,dword ptr [rax+38]
Oregon-WinGDK-Shipping.exe+148A009: 3B 42 38 - cmp eax,[rdx+38]
Oregon-WinGDK-Shipping.exe+148A00C: 0F 8F 10 01 00 00 - jg Oregon-WinGDK-Shipping.exe+148A122
Oregon-WinGDK-Shipping.exe+148A012: 48 8B C8 - mov rcx,rax
Oregon-WinGDK-Shipping.exe+148A015: 48 8B 42 30 - mov rax,[rdx+30]
}