Garik66 Опубликовано 3 июля, 2018 Поделиться Опубликовано 3 июля, 2018 Скрипт "EXP UP -> Level UP": Спойлер { Game : witcher3.exe Version: Date : 2018-07-03 Author : Garik66 This script does blah blah blah } [ENABLE] aobscanmodule(EXP1,witcher3.exe,48 89 42 30 8B C1 48 8B 0A 4C 8D 44 24 48 48 8B FA 41 FF 14 C6 48 8B 05 3B) // should be unique alloc(newmem,$1000,"witcher3.exe"+1651250) label(code) label(return) registersymbol(EXP1) newmem: cmp [rbx+50],0000BE4C jne code cmp [rbx+4],#9000 jae @f add [rbx],#1000 jmp code @@: cmp [rbx+4],#24000 jae @f add [rbx],#1500 jmp code @@: add [rbx],#2000 code: add [rbx],eax mov eax,[rbx] test rsi,rsi jmp return EXP1+57: jmp newmem db 90 90 return: [DISABLE] EXP1+57: db 01 03 8B 03 48 85 F6 unregistersymbol(EXP1) dealloc(newmem) { // ORIGINAL CODE - INJECTION POINT: "witcher3.exe"+1651250 "witcher3.exe"+165122E: 48 8B 47 30 - mov rax,[rdi+30] "witcher3.exe"+1651232: 48 8B D7 - mov rdx,rdi "witcher3.exe"+1651235: 0F B6 08 - movzx ecx,byte ptr [rax] "witcher3.exe"+1651238: 48 FF C0 - inc rax "witcher3.exe"+165123B: 48 89 47 30 - mov [rdi+30],rax "witcher3.exe"+165123F: 8B C1 - mov eax,ecx "witcher3.exe"+1651241: 48 8B 0F - mov rcx,[rdi] "witcher3.exe"+1651244: 41 FF 14 C6 - call qword ptr [r14+rax*8] "witcher3.exe"+1651248: 48 FF 47 30 - inc [rdi+30] "witcher3.exe"+165124C: 8B 44 24 50 - mov eax,[rsp+50] // ---------- INJECTING HERE ---------- "witcher3.exe"+1651250: 01 03 - add [rbx],eax "witcher3.exe"+1651252: 8B 03 - mov eax,[rbx] "witcher3.exe"+1651254: 48 85 F6 - test rsi,rsi // ---------- DONE INJECTING ---------- "witcher3.exe"+1651257: 74 02 - je witcher3.exe+165125B "witcher3.exe"+1651259: 89 06 - mov [rsi],eax "witcher3.exe"+165125B: 48 8B 5C 24 40 - mov rbx,[rsp+40] "witcher3.exe"+1651260: 48 83 C4 20 - add rsp,20 "witcher3.exe"+1651264: 41 5E - pop r14 "witcher3.exe"+1651266: 5F - pop rdi "witcher3.exe"+1651267: 5E - pop rsi "witcher3.exe"+1651268: C3 - ret "witcher3.exe"+1651269: CC - int 3 "witcher3.exe"+165126A: CC - int 3 } Видео: 2 Ссылка на комментарий Поделиться на другие сайты Поделиться
Рекомендуемые сообщения