5
"Freeze Time (script)"
Auto Assembler Script
[ENABLE]
aobscan(INJECT_time,48 8B 86 18 01 00 00 48 63 88 88 04 00 00 FF C9)
registersymbol(INJECT_time)
INJECT_time+E:
nop
nop
[DISABLE]
INJECT_time+E:
dec ecx
unregistersymbol(INJECT_time)
{
// ORIGINAL CODE - INJECTION POINT: 162414C195C
162414C1927: 33 C0 - xor eax,eax
162414C1929: E9 E7 00 00 00 - jmp 162414C1A15
162414C192E: 41 83 FF 01 - cmp r15d,01
162414C1932: 0F 85 D8 00 00 00 - jne 162414C1A10
162414C1938: 48 8B 86 18 01 00 00 - mov rax,[rsi+00000118]
162414C193F: 48 63 80 88 04 00 00 - movsxd rax,dword ptr [rax+00000488]
162414C1946: 85 C0 - test eax,eax
162414C1948: 0F 84 C2 00 00 00 - je 162414C1A10
// ---------- INJECTING HERE ----------
162414C194E: 48 8B 86 18 01 00 00 - mov rax,[rsi+00000118]
162414C1955: 48 63 88 88 04 00 00 - movsxd rcx,dword ptr [rax+00000488]
162414C195C: FF C9 - dec ecx
// ---------- DONE INJECTING ----------
162414C195E: 89 88 88 04 00 00 - mov [rax+00000488],ecx
162414C1964: 48 8B 86 18 01 00 00 - mov rax,[rsi+00000118]
162414C196B: 48 63 80 88 04 00 00 - movsxd rax,dword ptr [rax+00000488]
162414C1972: 85 C0 - test eax,eax
162414C1974: 0F 85 96 00 00 00 - jne 162414C1A10
162414C197A: 49 BA C8 90 97 5D 62 01 00 00 - mov r10,000001625D9790C8
162414C1984: 48 83 EC 20 - sub rsp,20
162414C1988: 49 BB 64 68 41 2F 62 01 00 00 - mov r11,000001622F416864
162414C1992: 41 FF D3 - call r11
162414C1995: 48 83 C4 20 - add rsp,20
162414C1999: F3 0F 10 05 8F 00 00 00 - movss xmm0,[162414C1A30]
}