3 "CCCP Calls!" 1 2 "Instant Win" Auto Assembler Script [ENABLE] aobscan(INJECT_moves,48 63 40 50 F2 0F 2A C8) // should be unique alloc(newmem,$1000,INJECT_moves) label(code) label(return) newmem: cmp [rax+5C],#0 je code mov [rax+50],#1 mov [rax+5C],#999999 code: movsxd rax,dword ptr [rax+50] cvtsi2sd xmm1,eax jmp return INJECT_moves: jmp newmem nop 3 return: registersymbol(INJECT_moves) [DISABLE] INJECT_moves: db 48 63 40 50 F2 0F 2A C8 unregistersymbol(INJECT_moves) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: SessionAssistant:GetResource+18 21C9BCAB047: 00 00 - add [rax],al 21C9BCAB049: 00 00 - add [rax],al 21C9BCAB04B: 00 00 - add [rax],al 21C9BCAB04D: 00 00 - add [rax],al 21C9BCAB04F: 00 48 83 - add [rax-7D],cl SessionAssistant:GetResource+2: EC - in al,dx SessionAssistant:GetResource+3: 08 48 89 - or [rax-77],cl SessionAssistant:GetResource+6: 0C 24 - or al,24 SessionAssistant:GetResource+8: F3 0F 10 05 40 00 00 00 - movss xmm0,[SessionAssistant:GetResource+50] SessionAssistant:GetResource+10: F3 0F 5A C0 - cvtss2sd xmm0,xmm0 // ---------- INJECTING HERE ---------- SessionAssistant:GetResource+14: 48 8B 04 24 - mov rax,[rsp] // ---------- DONE INJECTING ---------- SessionAssistant:GetResource+18: 48 63 40 50 - movsxd rax,dword ptr [rax+50] SessionAssistant:GetResource+1c: F2 0F 2A C8 - cvtsi2sd xmm1,eax SessionAssistant:GetResource+20: F2 0F 59 C1 - mulsd xmm0,xmm1 SessionAssistant:GetResource+24: 48 B8 50 CB 72 9B 1C 02 00 00 - mov rax,0000021C9B72CB50 SessionAssistant:GetResource+2e: 48 8B 00 - mov rax,[rax] SessionAssistant:GetResource+31: 48 63 40 3C - movsxd rax,dword ptr [rax+3C] SessionAssistant:GetResource+35: F2 0F 2A C8 - cvtsi2sd xmm1,eax SessionAssistant:GetResource+39: F2 0F 5E C1 - divsd xmm0,xmm1 SessionAssistant:GetResource+3d: F2 0F 5A C0 - cvtsd2ss xmm0,xmm0 SessionAssistant:GetResource+41: 48 83 C4 08 - add rsp,08 }