27
"Gold [ Buy / Sell at Market ]"
Auto Assembler Script
{ Game : Tortuga.exe
Version:
Date : 2023-01-22
Author : MarianaRoses
AoB : 48 ?? ?? ?? ?? ?? ?? 48 ?? ?? 48 ?? ?? ?? ?? ?? ?? 7F ?? 48 ?? ?? ?? ?? ?? ?? ?? 74 ?? 32 ?? EB ?? B0 ?? 88 ?? ?? ?? ?? ?? 84 ?? 74 ?? 84 ?? 74 ?? B0 ?? EB ?? 32 ?? 88 ?? ?? ?? ?? ?? 48 ?? ?? ?? ?? ?? ?? 48 ?? ?? 74 ?? 48 ?? ?? ?? 48 ?? ?? 74 ?? 80 ?? ?? ?? ?? ?? ?? 75 ?? 48 ?? ?? FF ?? 48 ?? ?? ?? ?? ?? ?? ?? 4C ?? ?? ?? ?? 4C
This script does blah blah blah
}
[ENABLE]
aobscanmodule(bgold,Tortuga.exe,48 ?? ?? ?? ?? ?? ?? 48 ?? ?? 48 ?? ?? ?? ?? ?? ?? 7F ?? 48 ?? ?? ?? ?? ?? ?? ?? 74) // should be unique
alloc(newmem,$1000,bgold)
alloc(bgoldc,7)
alloc(bgoldi,8)
registerSymbol(bgold bgoldc bgoldi)
label(code return)
bgoldc:
readmem(bgold,7)
newmem:
mov [bgoldi],rcx
code:
readmem(bgold,7)
jmp return
bgold:
jmp newmem
nop 2
return:
[DISABLE]
bgold:
readmem(bgoldc,7)
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Tortuga.exe+33174F
Tortuga.exe+331718: FF 90 20 01 00 00 - call qword ptr [rax+00000120]
Tortuga.exe+33171E: 0F B6 94 24 A8 00 00 00 - movzx edx,byte ptr [rsp+000000A8]
Tortuga.exe+331726: 0F 28 74 24 50 - movaps xmm6,[rsp+50]
Tortuga.exe+33172B: 4C 8B 7C 24 60 - mov r15,[rsp+60]
Tortuga.exe+331730: 4C 8B 64 24 78 - mov r12,[rsp+78]
Tortuga.exe+331735: 48 8B BC 24 80 00 00 00 - mov rdi,[rsp+00000080]
Tortuga.exe+33173D: 84 D2 - test dl,dl
Tortuga.exe+33173F: 74 21 - je Tortuga.exe+331762
Tortuga.exe+331741: 48 8B 80 70 18 00 00 - mov rax,[rax+00001870]
Tortuga.exe+331748: 48 8B 88 C0 0A 00 00 - mov rcx,[rax+00000AC0]
// ---------- INJECTING HERE ----------
Tortuga.exe+33174F: 48 8B 81 40 67 00 00 - mov rax,[rcx+00006740]
// ---------- DONE INJECTING ----------
Tortuga.exe+331756: 48 F7 D8 - neg rax
Tortuga.exe+331759: 48 39 85 28 02 00 00 - cmp [rbp+00000228],rax
Tortuga.exe+331760: 7F 0E - jg Tortuga.exe+331770
Tortuga.exe+331762: 48 83 BD 28 02 00 00 00 - cmp qword ptr [rbp+00000228],00
Tortuga.exe+33176A: 74 04 - je Tortuga.exe+331770
Tortuga.exe+33176C: 32 C0 - xor al,al
Tortuga.exe+33176E: EB 02 - jmp Tortuga.exe+331772
Tortuga.exe+331770: B0 01 - mov al,01
Tortuga.exe+331772: 88 85 31 02 00 00 - mov [rbp+00000231],al
Tortuga.exe+331778: 84 D2 - test dl,dl
}
28
"Gold Value"
0
4 Bytes
bgoldi
6740
32
"Ship Hull / Armor [ During Battle ]"
Auto Assembler Script
{ Game : Tortuga.exe
Version:
Date : 2023-01-22
Author : MarianaRoses
AoB : 8B ?? ?? 0F ?? ?? 0F ?? ?? F3 ?? ?? ?? ?? 0F ?? ?? 77 ?? 80 ?? ?? ?? ?? ?? ?? 0F ?? ?? 88 ?? ?? 84 ?? 0F ?? ?? ?? ?? ?? 65 ?? ?? ?? ?? ?? ?? ?? ?? 48 ?? ?? ?? ?? ?? ?? ?? 4C ?? ?? ?? ?? ?? ?? ?? 41 ?? ?? ?? ?? ?? 48 ?? ?? 41 ?? ?? ?? 39 ?? ?? ?? ?? ?? 0F ?? ?? ?? ?? ?? 48 ?? ?? ?? ?? ?? ?? 0F ?? ?? 4C ?? ?? ?? ?? ?? ?? 48 ?? ?? ?? ?? ?? ?? 49 ?? ?? 48 ?? ?? ?? 48 ?? ?? 0F ?? ?? ?? ?? ?? 41 ?? ?? ?? 48 ?? ?? ?? 39 ?? ?? ?? ?? ?? 0F
This script does blah blah blah
}
[ENABLE]
aobscanmodule(bhull,Tortuga.exe,8B ?? ?? 0F ?? ?? 0F ?? ?? F3 ?? ?? ?? ?? 0F ?? ?? 77 ?? 80 ) // should be unique
alloc(newmem,$1000,bhull)
alloc(bhullc,6)
alloc(bship1,8)
alloc(bship2,8)
alloc(bship3,8)
alloc(bship4,8)
alloc(bship5,8)
alloc(bship6,8)
alloc(bship7,8)
alloc(bship8,8)
alloc(bship9,8)
alloc(bship10,8)
alloc(bship11,8)
alloc(bship12,8)
registerSymbol(bhull bhullc bship1 bship2 bship3 bship4 bship5 bship6 bship7 bship8 bship9 bship10 bship11 bship12)
label(code return ship1 ship2 ship3 ship4 ship5 ship6 ship7 ship8 ship9 ship10 ship11 ship12)
bhullc:
readmem(bhull,6)
newmem:
cmp r9,0
je ship1
cmp r9,1
je ship2
cmp r9,2
je ship3
cmp r9,3
je ship4
cmp r9,4
je ship5
cmp r9,5
je ship6
cmp r9,6
je ship7
cmp r9,7
je ship8
cmp r9,8
je ship9
cmp r9,9
je ship10
cmp r9,a
je ship11
cmp r9,b
je ship12
jmp code
ship1:
mov [bship1],rdx
jmp code
ship2:
mov [bship2],rdx
jmp code
ship3:
mov [bship3],rdx
jmp code
ship4:
mov [bship4],rdx
jmp code
ship5:
mov [bship5],rdx
jmp code
ship6:
mov [bship6],rdx
jmp code
ship7:
mov [bship7],rdx
jmp code
ship8:
mov [bship8],rdx
jmp code
ship9:
mov [bship9],rdx
jmp code
ship10:
mov [bship10],rdx
jmp code
ship11:
mov [bship11],rdx
jmp code
ship12:
mov [bship12],rdx
jmp code
code:
readmem(bhull,6)
jmp return
bhull:
jmp newmem
nop
return:
[DISABLE]
bhull:
readmem(bhullc,6)
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Tortuga.exe+308F17
Tortuga.exe+308EF0: 48 89 5C 24 18 - mov [rsp+18],rbx
Tortuga.exe+308EF5: 48 89 74 24 20 - mov [rsp+20],rsi
Tortuga.exe+308EFA: 57 - push rdi
Tortuga.exe+308EFB: 48 81 EC A0 00 00 00 - sub rsp,000000A0
Tortuga.exe+308F02: 0F B6 41 1A - movzx eax,byte ptr [rcx+1A]
Tortuga.exe+308F06: 49 8B F0 - mov rsi,r8
Tortuga.exe+308F09: 48 8B FA - mov rdi,rdx
Tortuga.exe+308F0C: 48 8B D9 - mov rbx,rcx
Tortuga.exe+308F0F: 84 C0 - test al,al
Tortuga.exe+308F11: 0F 85 4A 01 00 00 - jne Tortuga.exe+309061
// ---------- INJECTING HERE ----------
Tortuga.exe+308F17: 8B 42 24 - mov eax,[rdx+24]
// ---------- DONE INJECTING ----------
Tortuga.exe+308F1A: 0F 57 C9 - xorps xmm1,xmm1
Tortuga.exe+308F1D: 0F 57 C0 - xorps xmm0,xmm0
Tortuga.exe+308F20: F3 48 0F 2A C8 - cvtsi2ss xmm1,rax
Tortuga.exe+308F25: 0F 2F C8 - comiss xmm1,xmm0
Tortuga.exe+308F28: 77 15 - ja Tortuga.exe+308F3F
Tortuga.exe+308F2A: 80 B9 90 00 00 00 00 - cmp byte ptr [rcx+00000090],00
Tortuga.exe+308F31: 0F 94 C0 - sete al
Tortuga.exe+308F34: 88 41 1A - mov [rcx+1A],al
Tortuga.exe+308F37: 84 C0 - test al,al
Tortuga.exe+308F39: 0F 85 22 01 00 00 - jne Tortuga.exe+309061
}
57
"Ship 1"
0
1
bship1
0
62
"Health/Hull"
0
4 Bytes
+24
63
"Armor"
0
1
+50
0
58
"PortSide Armor"
0
4 Bytes
+0
59
"Starboard Armor"
0
4 Bytes
+4
60
"Fore Armor"
0
4 Bytes
+8
61
"Aft Armor"
0
4 Bytes
+c
64
"Ship 2"
0
1
bship2
0
65
"Health/Hull"
0
4 Bytes
+24
66
"Armor"
0
1
+50
0
67
"PortSide Armor"
0
4 Bytes
+0
68
"Starboard Armor"
0
4 Bytes
+4
69
"Fore Armor"
0
4 Bytes
+8
70
"Aft Armor"
0
4 Bytes
+c
71
"Ship 3"
0
1
bship3
0
72
"Health/Hull"
0
4 Bytes
+24
73
"Armor"
0
1
+50
0
74
"PortSide Armor"
0
4 Bytes
+0
75
"Starboard Armor"
0
4 Bytes
+4
76
"Fore Armor"
0
4 Bytes
+8
77
"Aft Armor"
0
4 Bytes
+c
78
"Ship 4"
0
1
bship4
0
79
"Health/Hull"
0
4 Bytes
+24
80
"Armor"
0
1
+50
0
81
"PortSide Armor"
0
4 Bytes
+0
82
"Starboard Armor"
0
4 Bytes
+4
83
"Fore Armor"
0
4 Bytes
+8
84
"Aft Armor"
0
4 Bytes
+c
85
"Ship 5"
0
1
bship5
0
86
"Health/Hull"
0
4 Bytes
+24
87
"Armor"
0
1
+50
0
88
"PortSide Armor"
0
4 Bytes
+0
89
"Starboard Armor"
0
4 Bytes
+4
90
"Fore Armor"
0
4 Bytes
+8
91
"Aft Armor"
0
4 Bytes
+c
92
"Ship 6"
0
1
bship6
0
93
"Health/Hull"
0
4 Bytes
+24
94
"Armor"
0
1
+50
0
95
"PortSide Armor"
0
4 Bytes
+0
96
"Starboard Armor"
0
4 Bytes
+4
97
"Fore Armor"
0
4 Bytes
+8
98
"Aft Armor"
0
4 Bytes
+c
99
"Ship 7"
0
1
bship7
0
100
"Health/Hull"
0
4 Bytes
+24
101
"Armor"
0
1
+50
0
102
"PortSide Armor"
0
4 Bytes
+0
103
"Starboard Armor"
0
4 Bytes
+4
104
"Fore Armor"
0
4 Bytes
+8
105
"Aft Armor"
0
4 Bytes
+c
106
"Ship 8"
0
1
bship8
0
107
"Health/Hull"
0
4 Bytes
+24
108
"Armor"
0
1
+50
0
109
"PortSide Armor"
0
4 Bytes
+0
110
"Starboard Armor"
0
4 Bytes
+4
111
"Fore Armor"
0
4 Bytes
+8
112
"Aft Armor"
0
4 Bytes
+c
113
"Ship 9"
0
1
bship9
0
114
"Health/Hull"
0
4 Bytes
+24
115
"Armor"
0
1
+50
0
116
"PortSide Armor"
0
4 Bytes
+0
117
"Starboard Armor"
0
4 Bytes
+4
118
"Fore Armor"
0
4 Bytes
+8
119
"Aft Armor"
0
4 Bytes
+c
120
"Ship 10"
0
1
bship10
0
121
"Health/Hull"
0
4 Bytes
+24
122
"Armor"
0
1
+50
0
123
"PortSide Armor"
0
4 Bytes
+0
124
"Starboard Armor"
0
4 Bytes
+4
125
"Fore Armor"
0
4 Bytes
+8
126
"Aft Armor"
0
4 Bytes
+c
127
"Ship 11"
0
1
bship11
0
128
"Health/Hull"
0
4 Bytes
+24
129
"Armor"
0
1
+50
0
130
"PortSide Armor"
0
4 Bytes
+0
131
"Starboard Armor"
0
4 Bytes
+4
132
"Fore Armor"
0
4 Bytes
+8
133
"Aft Armor"
0
4 Bytes
+c
134
"Ship 12"
0
1
bship12
0
135
"Health/Hull"
0
4 Bytes
+24
136
"Armor"
0
1
+50
0
137
"PortSide Armor"
0
4 Bytes
+0
138
"Starboard Armor"
0
4 Bytes
+4
139
"Fore Armor"
0
4 Bytes
+8
140
"Aft Armor"
0
4 Bytes
+c