{ Game   : FlashPlayerPlugin_22_0_0_192.exe
  Version: 
  Date   : 2016-06-23
  Author : zm0d

  This script enables godmode for the browser game "Dungeon Blitz"
}

[ENABLE]

aobscan(godmode,E9 4A FF FF FF 8D 49) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
  mov ebx,0
  push eax
  mov eax,[esi+2c]
  mov [esi+1c],eax
  pop eax
  jmp 215423A8
  jmp return

godmode:
  jmp code
return:
registersymbol(godmode)

[DISABLE]

godmode:
  db E9 4A FF FF FF

unregistersymbol(godmode)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 21542459

21542440: 83 EC 04           -  sub esp,04
21542443: 56                 -  push esi
21542444: 6A 01              -  push 01
21542446: 53                 -  push ebx
21542447: FF D0              -  call eax
21542449: 83 C4 10           -  add esp,10
2154244C: E9 D1 FE FF FF     -  jmp 21542322
21542451: 8B 5E 1C           -  mov ebx,[esi+1C]
21542454: 2B DF              -  sub ebx,edi
21542456: 89 5E 1C           -  mov [esi+1C],ebx
// ---------- INJECTING HERE ----------
21542459: E9 4A FF FF FF     -  jmp 215423A8
// ---------- DONE INJECTING  ----------
2154245E: 8D 49 64           -  lea ecx,[ecx+64]
21542461: 8D 95 30 FE FF FF  -  lea edx,[ebp-000001D0]
21542467: E8 74 4C B8 EE     -  call NPSWF32_22_0_0_192.dll+7F70E0
2154246C: 8B 58 10           -  mov ebx,[eax+10]
2154246F: 85 DB              -  test ebx,ebx
21542471: 0F 84 D8 40 FD FF  -  je 2151654F
21542477: 8B 4B 20           -  mov ecx,[ebx+20]
2154247A: 8B 9D 68 FE FF FF  -  mov ebx,[ebp-00000198]
21542480: 85 C9              -  test ecx,ecx
21542482: 0F 84 C7 40 FD FF  -  je 2151654F
}
