[ENABLE]
aobscanmodule(Health,Youngblood_x64vk.exe,10 8B C2 4C 8B C2 C1 CA 03 49 C1 E8 20 4C 33 C0 8B CA)
alloc(newmem,$50,Health)
label(return)
registersymbol(Health)
newmem:
mov r8,(float)100
mov ecx,edx
jmp return
Health+0D:
jmp newmem
return:
[DISABLE]
Health+0D:
db 4C 33 C0 8B CA
unregistersymbol(Health)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Youngblood_x64vk.exe+DE7D1B
Youngblood_x64vk.exe+DE7CFE: CC - int 3
Youngblood_x64vk.exe+DE7CFF: CC - int 3
Youngblood_x64vk.exe+DE7D00: 4C 8B D1 - mov r10,rcx
Youngblood_x64vk.exe+DE7D03: 48 63 C2 - movsxd rax,edx
Youngblood_x64vk.exe+DE7D06: 4C 6B C8 38 - imul r9,rax,38
Youngblood_x64vk.exe+DE7D0A: 49 8B 54 09 10 - mov rdx,[r9+rcx+10]
Youngblood_x64vk.exe+DE7D0F: 8B C2 - mov eax,edx
Youngblood_x64vk.exe+DE7D11: 4C 8B C2 - mov r8,rdx
Youngblood_x64vk.exe+DE7D14: C1 CA 03 - ror edx,03
Youngblood_x64vk.exe+DE7D17: 49 C1 E8 20 - shr r8,20
// ---------- INJECTING HERE ----------
Youngblood_x64vk.exe+DE7D1B: 4C 33 C0 - xor r8,rax
// ---------- DONE INJECTING ----------
Youngblood_x64vk.exe+DE7D1E: 8B CA - mov ecx,edx
Youngblood_x64vk.exe+DE7D20: 49 33 C8 - xor rcx,r8
Youngblood_x64vk.exe+DE7D23: 8B C2 - mov eax,edx
Youngblood_x64vk.exe+DE7D25: 48 C1 E1 20 - shl rcx,20
Youngblood_x64vk.exe+DE7D29: 48 0B C8 - or rcx,rax
Youngblood_x64vk.exe+DE7D2C: 44 89 44 24 10 - mov [rsp+10],r8d
Youngblood_x64vk.exe+DE7D31: F3 0F 10 44 24 10 - movss xmm0,[rsp+10]
Youngblood_x64vk.exe+DE7D37: 4B 89 4C 11 10 - mov [r9+r10+10],rcx
Youngblood_x64vk.exe+DE7D3C: C3 - ret
Youngblood_x64vk.exe+DE7D3D: CC - int 3
}