10
"Money freeze 99,999"
80000008
Auto Assembler Script
{ Game : Anno5.exe
Version: 2.0.7780.0 +10 DLC's
Date : 2014-06-25
Author : mixmax35
This script changes money to 99999 and freezes!!!
}
[ENABLE]
aobscanmodule(aob_money1,Anno5.exe,C3 89 8C FE 80 00 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
mov ecx,61A7C00
mov [esi+edi*8+00000080],ecx
jmp return
aob_money1+01:
jmp code
nop
nop
return:
registersymbol(aob_money1)
aobscanmodule(aob_money2,Anno5.exe,89 84 FE 84 00 00 00 83) // should be unique
alloc(newmem2,$1000)
label(code2)
label(return2)
newmem2:
code2:
mov eax,61A7C00
mov [esi+edi*8+00000084],eax
jmp return2
aob_money2:
jmp code2
nop
nop
return2:
registersymbol(aob_money2)
[DISABLE]
aob_money1+01:
db 89 8C FE 80 00 00 00
unregistersymbol(aob_money1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Anno5.exe"+F5721
"Anno5.exe"+F5708: 7F 04 - jg Anno5.exe+F570E
"Anno5.exe"+F570A: 85 C9 - test ecx,ecx
"Anno5.exe"+F570C: 74 06 - je Anno5.exe+F5714
"Anno5.exe"+F570E: C6 45 0B 01 - mov byte ptr [ebp+0B],01
"Anno5.exe"+F5712: EB 04 - jmp Anno5.exe+F5718
"Anno5.exe"+F5714: C6 45 0B 00 - mov byte ptr [ebp+0B],00
"Anno5.exe"+F5718: 03 4D 0C - add ecx,[ebp+0C]
"Anno5.exe"+F571B: 53 - push ebx
"Anno5.exe"+F571C: 8B 5D 10 - mov ebx,[ebp+10]
"Anno5.exe"+F571F: 13 C3 - adc eax,ebx
// ---------- INJECTING HERE ----------
"Anno5.exe"+F5721: 89 8C FE 80 00 00 00 - mov [esi+edi*8+00000080],ecx
// ---------- DONE INJECTING ----------
"Anno5.exe"+F5728: 89 84 FE 84 00 00 00 - mov [esi+edi*8+00000084],eax
"Anno5.exe"+F572F: 83 3D C8 22 7C 01 00 - cmp dword ptr [Anno5.exe+13C22C8],00
"Anno5.exe"+F5736: 75 11 - jne Anno5.exe+F5749
"Anno5.exe"+F5738: 66 0F 57 C0 - xorpd xmm0,xmm0
"Anno5.exe"+F573C: 66 0F 13 45 F8 - movlpd [ebp-08],xmm0
"Anno5.exe"+F5741: 8B 45 FC - mov eax,[ebp-04]
"Anno5.exe"+F5744: 8B 4D F8 - mov ecx,[ebp-08]
"Anno5.exe"+F5747: EB 18 - jmp Anno5.exe+F5761
"Anno5.exe"+F5749: 8B 84 BE B0 00 00 00 - mov eax,[esi+edi*4+000000B0]
"Anno5.exe"+F5750: 83 C0 64 - add eax,64
}
aob_money2:
db 89 84 FE 84 00 00 00
unregistersymbol(aob_money2)
dealloc(newmem2)
{
// ORIGINAL CODE - INJECTION POINT: "Anno5.exe"+F5728
"Anno5.exe"+F570A: 85 C9 - test ecx,ecx
"Anno5.exe"+F570C: 74 06 - je Anno5.exe+F5714
"Anno5.exe"+F570E: C6 45 0B 01 - mov byte ptr [ebp+0B],01
"Anno5.exe"+F5712: EB 04 - jmp Anno5.exe+F5718
"Anno5.exe"+F5714: C6 45 0B 00 - mov byte ptr [ebp+0B],00
"Anno5.exe"+F5718: 03 4D 0C - add ecx,[ebp+0C]
"Anno5.exe"+F571B: 53 - push ebx
"Anno5.exe"+F571C: 8B 5D 10 - mov ebx,[ebp+10]
"Anno5.exe"+F571F: 13 C3 - adc eax,ebx
"Anno5.exe"+F5721: 89 8C FE 80 00 00 00 - mov [esi+edi*8+00000080],ecx
// ---------- INJECTING HERE ----------
"Anno5.exe"+F5728: 89 84 FE 84 00 00 00 - mov [esi+edi*8+00000084],eax
// ---------- DONE INJECTING ----------
"Anno5.exe"+F572F: 83 3D C8 22 7C 01 00 - cmp dword ptr [Anno5.exe+13C22C8],00
"Anno5.exe"+F5736: 75 11 - jne Anno5.exe+F5749
"Anno5.exe"+F5738: 66 0F 57 C0 - xorpd xmm0,xmm0
"Anno5.exe"+F573C: 66 0F 13 45 F8 - movlpd [ebp-08],xmm0
"Anno5.exe"+F5741: 8B 45 FC - mov eax,[ebp-04]
"Anno5.exe"+F5744: 8B 4D F8 - mov ecx,[ebp-08]
"Anno5.exe"+F5747: EB 18 - jmp Anno5.exe+F5761
"Anno5.exe"+F5749: 8B 84 BE B0 00 00 00 - mov eax,[esi+edi*4+000000B0]
"Anno5.exe"+F5750: 83 C0 64 - add eax,64
"Anno5.exe"+F5753: 50 - push eax
}
Change of mov [ecx+eax*8],edx
00902939
Anno5.exe
502939
55
0C
8B
45
08
89
14
C1
8B
55
10
89
54
Change of mov eax,[ecx+edx*8]
00902916
Anno5.exe
502916
8B
EC
8B
55
08
8B
04
D1
8B
54
D1
04
5D
aob_money1
004F5720
aob_money2
004F5728