0
"Gald"
4 Bytes
TOV_DE.exe+1178E30
2
"Item Pointers"
1
1
"Starting Point"
12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12 00 00 00 12:Have All
1
Array of byte
1
TOV_DE.exe+1178E3C
17
"End Point"
Array of byte
1
140EA9858
20
"Infinite Item"
Auto Assembler Script
{ Game : TOV_DE.exe
Version:
Date : 2019-01-10
Author : Zach
This script does blah blah blah
}
define(address,"TOV_DE.exe"+5B9E43)
define(bytes,89 74 BB 38 48 8B 5C 24 30)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"TOV_DE.exe"+5B9E43)
label(code)
label(return)
newmem:
code:
nop
mov rbx,[rsp+30]
jmp return
address:
jmp newmem
nop
nop
nop
nop
return:
[DISABLE]
address:
db bytes
// mov [rbx+rdi*4+38],esi
// mov rbx,[rsp+30]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "TOV_DE.exe"+5B9E43
"TOV_DE.exe"+5B9E0E: 81 8B 90 46 00 00 00 00 01 00 - or [rbx+00004690],00010000
"TOV_DE.exe"+5B9E18: EB 29 - jmp TOV_DE.exe+5B9E43
"TOV_DE.exe"+5B9E1A: 81 FF DD 06 00 00 - cmp edi,000006DD
"TOV_DE.exe"+5B9E20: 75 21 - jne TOV_DE.exe+5B9E43
"TOV_DE.exe"+5B9E22: 8B 83 90 46 00 00 - mov eax,[rbx+00004690]
"TOV_DE.exe"+5B9E28: C1 E8 1E - shr eax,1E
"TOV_DE.exe"+5B9E2B: A8 01 - test al,01
"TOV_DE.exe"+5B9E2D: 75 14 - jne TOV_DE.exe+5B9E43
"TOV_DE.exe"+5B9E2F: C7 83 B8 49 00 00 1E 00 00 00 - mov [rbx+000049B8],0000001E
"TOV_DE.exe"+5B9E39: 81 8B 90 46 00 00 00 00 00 40 - or [rbx+00004690],40000000
// ---------- INJECTING HERE ----------
"TOV_DE.exe"+5B9E43: 89 74 BB 38 - mov [rbx+rdi*4+38],esi
"TOV_DE.exe"+5B9E47: 48 8B 5C 24 30 - mov rbx,[rsp+30]
// ---------- DONE INJECTING ----------
"TOV_DE.exe"+5B9E4C: 48 8B 74 24 38 - mov rsi,[rsp+38]
"TOV_DE.exe"+5B9E51: 48 83 C4 20 - add rsp,20
"TOV_DE.exe"+5B9E55: 5F - pop rdi
"TOV_DE.exe"+5B9E56: C3 - ret
"TOV_DE.exe"+5B9E57: CC - int 3
"TOV_DE.exe"+5B9E58: CC - int 3
"TOV_DE.exe"+5B9E59: CC - int 3
"TOV_DE.exe"+5B9E5A: CC - int 3
"TOV_DE.exe"+5B9E5B: CC - int 3
"TOV_DE.exe"+5B9E5C: CC - int 3
}
21
"Infinite Gald"
Auto Assembler Script
{ Game : TOV_DE.exe
Version:
Date : 2019-01-10
Author : Zach
This script does blah blah blah
}
define(address,"TOV_DE.exe"+5B9B0A)
define(bytes,01 51 30 48 8B D9)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"TOV_DE.exe"+5B9B0A)
label(code)
label(return)
newmem:
code:
mov [rcx+30],#999999
mov rbx,rcx
jmp return
address:
jmp newmem
nop
return:
[DISABLE]
address:
db bytes
// add [rcx+30],edx
// mov rbx,rcx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "TOV_DE.exe"+5B9B0A
"TOV_DE.exe"+5B9AF9: CC - int 3
"TOV_DE.exe"+5B9AFA: CC - int 3
"TOV_DE.exe"+5B9AFB: CC - int 3
"TOV_DE.exe"+5B9AFC: CC - int 3
"TOV_DE.exe"+5B9AFD: CC - int 3
"TOV_DE.exe"+5B9AFE: CC - int 3
"TOV_DE.exe"+5B9AFF: CC - int 3
"TOV_DE.exe"+5B9B00: 48 89 5C 24 08 - mov [rsp+08],rbx
"TOV_DE.exe"+5B9B05: 57 - push rdi
"TOV_DE.exe"+5B9B06: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
"TOV_DE.exe"+5B9B0A: 01 51 30 - add [rcx+30],edx
"TOV_DE.exe"+5B9B0D: 48 8B D9 - mov rbx,rcx
// ---------- DONE INJECTING ----------
"TOV_DE.exe"+5B9B10: 8B 49 30 - mov ecx,[rcx+30]
"TOV_DE.exe"+5B9B13: 8B FA - mov edi,edx
"TOV_DE.exe"+5B9B15: 85 D2 - test edx,edx
"TOV_DE.exe"+5B9B17: 79 06 - jns TOV_DE.exe+5B9B1F
"TOV_DE.exe"+5B9B19: 29 93 58 3A 00 00 - sub [rbx+00003A58],edx
"TOV_DE.exe"+5B9B1F: 39 8B 54 3A 00 00 - cmp [rbx+00003A54],ecx
"TOV_DE.exe"+5B9B25: 7D 06 - jnl TOV_DE.exe+5B9B2D
"TOV_DE.exe"+5B9B27: 89 8B 54 3A 00 00 - mov [rbx+00003A54],ecx
"TOV_DE.exe"+5B9B2D: 33 D2 - xor edx,edx
"TOV_DE.exe"+5B9B2F: 8B C1 - mov eax,ecx
}
23
"Max Arte Usage"
Auto Assembler Script
{ Game : TOV_DE.exe
Version:
Date : 2019-01-10
Author : Zach
This script does blah blah blah
}
define(address,"TOV_DE.exe"+5C8B59)
define(bytes,89 8A D8 04 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"TOV_DE.exe"+5C8B59)
label(code)
label(return)
newmem:
code:
mov [rdx+000004D8],#9999
jmp return
address:
jmp newmem
nop
return:
[DISABLE]
address:
db bytes
// mov [rdx+000004D8],ecx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "TOV_DE.exe"+5C8B59
"TOV_DE.exe"+5C8B3D: CC - int 3
"TOV_DE.exe"+5C8B3E: CC - int 3
"TOV_DE.exe"+5C8B3F: CC - int 3
"TOV_DE.exe"+5C8B40: 8B C2 - mov eax,edx
"TOV_DE.exe"+5C8B42: 48 8D 14 81 - lea rdx,[rcx+rax*4]
"TOV_DE.exe"+5C8B46: B8 0F 27 00 00 - mov eax,0000270F
"TOV_DE.exe"+5C8B4B: 8B 8A D8 04 00 00 - mov ecx,[rdx+000004D8]
"TOV_DE.exe"+5C8B51: 41 03 C8 - add ecx,r8d
"TOV_DE.exe"+5C8B54: 3B C8 - cmp ecx,eax
"TOV_DE.exe"+5C8B56: 0F 47 C8 - cmova ecx,eax
// ---------- INJECTING HERE ----------
"TOV_DE.exe"+5C8B59: 89 8A D8 04 00 00 - mov [rdx+000004D8],ecx
// ---------- DONE INJECTING ----------
"TOV_DE.exe"+5C8B5F: C3 - ret
"TOV_DE.exe"+5C8B60: CC - int 3
"TOV_DE.exe"+5C8B61: CC - int 3
"TOV_DE.exe"+5C8B62: CC - int 3
"TOV_DE.exe"+5C8B63: CC - int 3
"TOV_DE.exe"+5C8B64: CC - int 3
"TOV_DE.exe"+5C8B65: CC - int 3
"TOV_DE.exe"+5C8B66: CC - int 3
"TOV_DE.exe"+5C8B67: CC - int 3
"TOV_DE.exe"+5C8B68: CC - int 3
}
26
"Infinite TP"
Auto Assembler Script
{ Game : TOV_DE.exe
Version:
Date : 2019-01-10
Author : Zach
This script does blah blah blah
}
define(address,"TOV_DE.exe"+5C7BC3)
define(bytes,89 4F 50 48 83 C4 20)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000,"TOV_DE.exe"+5C7BC3)
label(code)
label(return)
newmem:
code:
nop
add rsp,20
jmp return
address:
jmp newmem
nop
nop
return:
[DISABLE]
address:
db bytes
// mov [rdi+50],ecx
// add rsp,20
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "TOV_DE.exe"+5C7BC3
"TOV_DE.exe"+5C7BA8: 8B C3 - mov eax,ebx
"TOV_DE.exe"+5C7BAA: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"TOV_DE.exe"+5C7BAF: 48 83 C4 20 - add rsp,20
"TOV_DE.exe"+5C7BB3: 5F - pop rdi
"TOV_DE.exe"+5C7BB4: C3 - ret
"TOV_DE.exe"+5C7BB5: 33 C0 - xor eax,eax
"TOV_DE.exe"+5C7BB7: 85 C9 - test ecx,ecx
"TOV_DE.exe"+5C7BB9: 0F 48 C8 - cmovs ecx,eax
"TOV_DE.exe"+5C7BBC: 8B C3 - mov eax,ebx
"TOV_DE.exe"+5C7BBE: 48 8B 5C 24 30 - mov rbx,[rsp+30]
// ---------- INJECTING HERE ----------
"TOV_DE.exe"+5C7BC3: 89 4F 50 - mov [rdi+50],ecx
"TOV_DE.exe"+5C7BC6: 48 83 C4 20 - add rsp,20
// ---------- DONE INJECTING ----------
"TOV_DE.exe"+5C7BCA: 5F - pop rdi
"TOV_DE.exe"+5C7BCB: C3 - ret
"TOV_DE.exe"+5C7BCC: CC - int 3
"TOV_DE.exe"+5C7BCD: CC - int 3
"TOV_DE.exe"+5C7BCE: CC - int 3
"TOV_DE.exe"+5C7BCF: CC - int 3
"TOV_DE.exe"+5C7BD0: CC - int 3
"TOV_DE.exe"+5C7BD1: CC - int 3
"TOV_DE.exe"+5C7BD2: CC - int 3
"TOV_DE.exe"+5C7BD3: CC - int 3
}
Item Menu Use Code :mov [rbx+rdi*4+38],esi
1402E9E43
TOV_DE.exe
5B9E43
00
00
00
00
40
89
74
BB
38
48
8B
5C
24
30
Money Sub Code :add [rcx+30],edx
1402E9B0A
TOV_DE.exe
5B9B0A
57
48
83
EC
20
01
51
30
48
8B
D9
8B
49
Code :mov [rcx+5C],edx
1402F9CE8
TOV_DE.exe
5C9CE8
8B
DA
48
8B
F9
89
51
5C
E8
10
C2
FD
FF
Arte Usage Code :mov [rdx+000004D8],ecx
140008B59
TOV_DE.exe
5C8B59
3B
C8
0F
47
C8
89
8A
D8
04
00
00
C3
CC
CC
CC
CC
TP Usage Code :mov [rdi+50],ecx
140007BC3
TOV_DE.exe
5C7BC3
48
8B
5C
24
30
89
4F
50
48
83
C4
20
5F