Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. [ENABLE]
  2. aobscanmodule(Health,Youngblood_x64vk.exe,10 8B C2 4C 8B C2 C1 CA 03 49 C1 E8 20 4C 33 C0 8B CA)
  3. alloc(newmem,$50,Health)
  4. label(return)
  5. registersymbol(Health)
  6.  
  7. newmem:
  8.   mov r8,(float)100
  9.   mov ecx,edx
  10.   jmp return
  11.  
  12. Health+0D:
  13.   jmp newmem
  14. return:
  15.  
  16. [DISABLE]
  17. Health+0D:
  18. db 4C 33 C0 8B CA
  19. unregistersymbol(Health)
  20. dealloc(newmem)
  21. {
  22. // ORIGINAL CODE - INJECTION POINT: Youngblood_x64vk.exe+DE7D1B
  23. Youngblood_x64vk.exe+DE7CFE: CC                 - int 3
  24. Youngblood_x64vk.exe+DE7CFF: CC                 - int 3
  25. Youngblood_x64vk.exe+DE7D00: 4C 8B D1           - mov r10,rcx
  26. Youngblood_x64vk.exe+DE7D03: 48 63 C2           - movsxd  rax,edx
  27. Youngblood_x64vk.exe+DE7D06: 4C 6B C8 38        - imul r9,rax,38
  28. Youngblood_x64vk.exe+DE7D0A: 49 8B 54 09 10     - mov rdx,[r9+rcx+10]
  29. Youngblood_x64vk.exe+DE7D0F: 8B C2              - mov eax,edx
  30. Youngblood_x64vk.exe+DE7D11: 4C 8B C2           - mov r8,rdx
  31. Youngblood_x64vk.exe+DE7D14: C1 CA 03           - ror edx,03
  32. Youngblood_x64vk.exe+DE7D17: 49 C1 E8 20        - shr r8,20
  33. // ---------- INJECTING HERE ----------
  34. Youngblood_x64vk.exe+DE7D1B: 4C 33 C0           - xor r8,rax
  35. // ---------- DONE INJECTING  ----------
  36. Youngblood_x64vk.exe+DE7D1E: 8B CA              - mov ecx,edx
  37. Youngblood_x64vk.exe+DE7D20: 49 33 C8           - xor rcx,r8
  38. Youngblood_x64vk.exe+DE7D23: 8B C2              - mov eax,edx
  39. Youngblood_x64vk.exe+DE7D25: 48 C1 E1 20        - shl rcx,20
  40. Youngblood_x64vk.exe+DE7D29: 48 0B C8           - or rcx,rax
  41. Youngblood_x64vk.exe+DE7D2C: 44 89 44 24 10     - mov [rsp+10],r8d
  42. Youngblood_x64vk.exe+DE7D31: F3 0F 10 44 24 10  - movss xmm0,[rsp+10]
  43. Youngblood_x64vk.exe+DE7D37: 4B 89 4C 11 10     - mov [r9+r10+10],rcx
  44. Youngblood_x64vk.exe+DE7D3C: C3                 - ret
  45. Youngblood_x64vk.exe+DE7D3D: CC                 - int 3
  46. }