421
"Craft for Free (must restart game to disable)"
Auto Assembler Script
[ENABLE]
aobscanmodule(craftForFree,Astro-Win64-Shipping.exe,48 8D 91 08 01 00 00 48 8B CB)
alloc(newmem,$1000,craftForFree)
label(code)
label(return)
label(repeat)
newmem:
push rcx
lea rdx,[rcx+00000108]
movsxd rcx,dword ptr [rdx+08]
mov rdx,[rdx]
repeat:
cmp rcx,0
jle code
dec rcx
mov [rdx+8],0
add rdx,10
jmp repeat
code:
pop rcx
lea rdx,[rcx+00000108]
jmp return
craftForFree:
jmp newmem
nop
nop
return:
registersymbol(craftForFree)
[DISABLE]
craftForFree:
db 48 8D 91 08 01 00 00
unregistersymbol(craftForFree)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+755CC1
"Astro-Win64-Shipping.exe"+755CAA: CC - int 3
"Astro-Win64-Shipping.exe"+755CAB: CC - int 3
"Astro-Win64-Shipping.exe"+755CAC: CC - int 3
"Astro-Win64-Shipping.exe"+755CAD: CC - int 3
"Astro-Win64-Shipping.exe"+755CAE: CC - int 3
"Astro-Win64-Shipping.exe"+755CAF: CC - int 3
"Astro-Win64-Shipping.exe"+755CB0: 40 53 - push rbx
"Astro-Win64-Shipping.exe"+755CB2: 48 83 EC 30 - sub rsp,30
"Astro-Win64-Shipping.exe"+755CB6: 48 8B DA - mov rbx,rdx
"Astro-Win64-Shipping.exe"+755CB9: C7 44 24 20 00 00 00 00 - mov [rsp+20],00000000
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+755CC1: 48 8D 91 08 01 00 00 - lea rdx,[rcx+00000108]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+755CC8: 48 8B CB - mov rcx,rbx
"Astro-Win64-Shipping.exe"+755CCB: E8 C0 F9 FE FF - call Astro-Win64-Shipping.exe+745690
"Astro-Win64-Shipping.exe"+755CD0: 48 8B C3 - mov rax,rbx
"Astro-Win64-Shipping.exe"+755CD3: 48 83 C4 30 - add rsp,30
"Astro-Win64-Shipping.exe"+755CD7: 5B - pop rbx
"Astro-Win64-Shipping.exe"+755CD8: C3 - ret
"Astro-Win64-Shipping.exe"+755CD9: CC - int 3
"Astro-Win64-Shipping.exe"+755CDA: CC - int 3
"Astro-Win64-Shipping.exe"+755CDB: CC - int 3
"Astro-Win64-Shipping.exe"+755CDC: CC - int 3
}
443
"----- The Below is Not Updated -----"
1
4
"Unlimited Oxygen / Massive Resources"
Auto Assembler Script
[ENABLE]
aobscanmodule(oxygen,Astro-Win64-Shipping.exe,0F 4C C7 89 83)
oxygen:
db 90 90 90
registersymbol(oxygen)
[DISABLE]
oxygen:
db 0F 4C C7
unregistersymbol(oxygen)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+73DFA6
"Astro-Win64-Shipping.exe"+73DF84: 75 02 - jne Astro-Win64-Shipping.exe+73DF88
"Astro-Win64-Shipping.exe"+73DF86: 33 FF - xor edi,edi
"Astro-Win64-Shipping.exe"+73DF88: F3 0F 10 83 F8 00 00 00 - movss xmm0,[rbx+000000F8]
"Astro-Win64-Shipping.exe"+73DF90: F3 0F 59 05 1C 32 21 02 - mulss xmm0,[Astro-Win64-Shipping.exe+29511B4]
"Astro-Win64-Shipping.exe"+73DF98: F3 0F 2C C0 - cvttss2si eax,xmm0
"Astro-Win64-Shipping.exe"+73DF9C: 85 FF - test edi,edi
"Astro-Win64-Shipping.exe"+73DF9E: 79 04 - jns Astro-Win64-Shipping.exe+73DFA4
"Astro-Win64-Shipping.exe"+73DFA0: 33 C0 - xor eax,eax
"Astro-Win64-Shipping.exe"+73DFA2: EB 05 - jmp Astro-Win64-Shipping.exe+73DFA9
"Astro-Win64-Shipping.exe"+73DFA4: 3B F8 - cmp edi,eax
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+73DFA6: 0F 4C C7 - cmovl eax,edi
"Astro-Win64-Shipping.exe"+73DFA9: 89 83 70 01 00 00 - mov [rbx+00000170],eax
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+73DFAF: 85 C0 - test eax,eax
"Astro-Win64-Shipping.exe"+73DFB1: 75 1A - jne Astro-Win64-Shipping.exe+73DFCD
"Astro-Win64-Shipping.exe"+73DFB3: 48 8B 8B 60 01 00 00 - mov rcx,[rbx+00000160]
"Astro-Win64-Shipping.exe"+73DFBA: E8 11 48 FF FF - call Astro-Win64-Shipping.exe+7327D0
"Astro-Win64-Shipping.exe"+73DFBF: 84 C0 - test al,al
"Astro-Win64-Shipping.exe"+73DFC1: 75 0A - jne Astro-Win64-Shipping.exe+73DFCD
"Astro-Win64-Shipping.exe"+73DFC3: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+73DFC5: 48 8B CB - mov rcx,rbx
"Astro-Win64-Shipping.exe"+73DFC8: E8 43 1C FE FF - call Astro-Win64-Shipping.exe+71FC10
"Astro-Win64-Shipping.exe"+73DFCD: 3B F7 - cmp esi,edi
}
13
"Unlimited Tool"
Auto Assembler Script
[ENABLE]
aobscanmodule(tool,Astro-Win64-Shipping.exe,72 0C F3 0F 10 81 ?? ?? ?? ?? F3 0F 5D C2)
tool:
db 90 90
tool+A:
db 90 90 90 90
registersymbol(tool)
[DISABLE]
tool:
db 72 0C
tool+A:
db F3 0F 5D C2
unregistersymbol(tool)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+19449D
"Astro-Win64-Shipping.exe"+19447C: CC - int 3
"Astro-Win64-Shipping.exe"+19447D: CC - int 3
"Astro-Win64-Shipping.exe"+19447E: CC - int 3
"Astro-Win64-Shipping.exe"+19447F: CC - int 3
"Astro-Win64-Shipping.exe"+194480: F3 0F 10 99 E4 00 00 00 - movss xmm3,[rcx+000000E4]
"Astro-Win64-Shipping.exe"+194488: 0F 57 C0 - xorps xmm0,xmm0
"Astro-Win64-Shipping.exe"+19448B: 0F 28 D3 - movaps xmm2,xmm3
"Astro-Win64-Shipping.exe"+19448E: F3 0F 58 D1 - addss xmm2,xmm1
"Astro-Win64-Shipping.exe"+194492: 0F 2F D0 - comiss xmm2,xmm0
"Astro-Win64-Shipping.exe"+194495: F3 0F 11 91 E4 00 00 00 - movss [rcx+000000E4],xmm2
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+19449D: 72 0C - jb Astro-Win64-Shipping.exe+1944AB
"Astro-Win64-Shipping.exe"+19449F: F3 0F 10 81 D8 00 00 00 - movss xmm0,[rcx+000000D8]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+1944A7: F3 0F 5D C2 - minss xmm0,xmm2
"Astro-Win64-Shipping.exe"+1944AB: F3 0F 11 81 E4 00 00 00 - movss [rcx+000000E4],xmm0
"Astro-Win64-Shipping.exe"+1944B3: F3 0F 5C C3 - subss xmm0,xmm3
"Astro-Win64-Shipping.exe"+1944B7: F3 0F 5C C8 - subss xmm1,xmm0
"Astro-Win64-Shipping.exe"+1944BB: 0F 28 C1 - movaps xmm0,xmm1
"Astro-Win64-Shipping.exe"+1944BE: C3 - ret
"Astro-Win64-Shipping.exe"+1944BF: CC - int 3
"Astro-Win64-Shipping.exe"+1944C0: 48 89 5C 24 08 - mov [rsp+08],rbx
"Astro-Win64-Shipping.exe"+1944C5: 57 - push rdi
"Astro-Win64-Shipping.exe"+1944C6: 48 83 EC 20 - sub rsp,20
}
64
"Unlimited Battery"
Auto Assembler Script
[ENABLE]
aobscanmodule(battery,Astro-Win64-Shipping.exe,F3 0F 58 80 E4 00 00 00)
battery+4:
db D8
registersymbol(battery)
[DISABLE]
battery+4:
db E4
unregistersymbol(battery)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+196C5B
"Astro-Win64-Shipping.exe"+196C37: 48 3B DF - cmp rbx,rdi
"Astro-Win64-Shipping.exe"+196C3A: 74 38 - je Astro-Win64-Shipping.exe+196C74
"Astro-Win64-Shipping.exe"+196C3C: 0F 1F 40 00 - nop [rax+00]
"Astro-Win64-Shipping.exe"+196C40: 48 8B 0B - mov rcx,[rbx]
"Astro-Win64-Shipping.exe"+196C43: E8 38 DF FF FF - call Astro-Win64-Shipping.exe+194B80
"Astro-Win64-Shipping.exe"+196C48: 83 F8 01 - cmp eax,01
"Astro-Win64-Shipping.exe"+196C4B: 75 1E - jne Astro-Win64-Shipping.exe+196C6B
"Astro-Win64-Shipping.exe"+196C4D: 48 8B 03 - mov rax,[rbx]
"Astro-Win64-Shipping.exe"+196C50: 0F 28 C6 - movaps xmm0,xmm6
"Astro-Win64-Shipping.exe"+196C53: F3 0F 59 80 E8 00 00 00 - mulss xmm0,[rax+000000E8]
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+196C5B: F3 0F 58 80 E4 00 00 00 - addss xmm0,[rax+000000E4]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+196C63: F3 0F 11 80 E4 00 00 00 - movss [rax+000000E4],xmm0
"Astro-Win64-Shipping.exe"+196C6B: 48 83 C3 08 - add rbx,08
"Astro-Win64-Shipping.exe"+196C6F: 48 3B DF - cmp rbx,rdi
"Astro-Win64-Shipping.exe"+196C72: 75 CC - jne Astro-Win64-Shipping.exe+196C40
"Astro-Win64-Shipping.exe"+196C74: 0F 28 CE - movaps xmm1,xmm6
"Astro-Win64-Shipping.exe"+196C77: 48 8B CE - mov rcx,rsi
"Astro-Win64-Shipping.exe"+196C7A: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"Astro-Win64-Shipping.exe"+196C7F: 48 8B 74 24 48 - mov rsi,[rsp+48]
"Astro-Win64-Shipping.exe"+196C84: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
"Astro-Win64-Shipping.exe"+196C89: 48 83 C4 30 - add rsp,30
}
78
"Show All Recipes"
Auto Assembler Script
[ENABLE]
aobscanmodule(printer,Astro-Win64-Shipping.exe,3B 81 10 01 00 00 7D)
printer+2:
db 00 01 00 00
printer+1C:
db F8 00 00 00
registersymbol(printer)
aobscanmodule(printer2,Astro-Win64-Shipping.exe,8B 8B 10 01 00 00 85 C9 7E 19)
printer2+2:
db 00 01 00 00
registersymbol(printer2)
[DISABLE]
printer+2:
db 10 01 00 00
printer+1C:
db 08 01 00 00
unregistersymbol(printer)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+156EC3
"Astro-Win64-Shipping.exe"+156EAC: CC - int 3
"Astro-Win64-Shipping.exe"+156EAD: CC - int 3
"Astro-Win64-Shipping.exe"+156EAE: CC - int 3
"Astro-Win64-Shipping.exe"+156EAF: CC - int 3
"Astro-Win64-Shipping.exe"+156EB0: 40 53 - push rbx
"Astro-Win64-Shipping.exe"+156EB2: 48 83 EC 20 - sub rsp,20
"Astro-Win64-Shipping.exe"+156EB6: 8B 81 D0 00 00 00 - mov eax,[rcx+000000D0]
"Astro-Win64-Shipping.exe"+156EBC: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+156EBF: 85 C0 - test eax,eax
"Astro-Win64-Shipping.exe"+156EC1: 78 46 - js Astro-Win64-Shipping.exe+156F09
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+156EC3: 3B 81 10 01 00 00 - cmp eax,[rcx+00000110]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+156EC9: 7D 3E - jnl Astro-Win64-Shipping.exe+156F09
"Astro-Win64-Shipping.exe"+156ECB: E8 D0 86 EC 00 - call Astro-Win64-Shipping.exe+101F5A0
"Astro-Win64-Shipping.exe"+156ED0: 83 F8 03 - cmp eax,03
"Astro-Win64-Shipping.exe"+156ED3: 75 19 - jne Astro-Win64-Shipping.exe+156EEE
"Astro-Win64-Shipping.exe"+156ED5: 48 63 8B D0 00 00 00 - movsxd rcx,dword ptr [rbx+000000D0]
"Astro-Win64-Shipping.exe"+156EDC: 48 8B 83 08 01 00 00 - mov rax,[rbx+00000108]
"Astro-Win64-Shipping.exe"+156EE3: 48 8B 0C C8 - mov rcx,[rax+rcx*8]
"Astro-Win64-Shipping.exe"+156EE7: 48 89 8B C8 00 00 00 - mov [rbx+000000C8],rcx
"Astro-Win64-Shipping.exe"+156EEE: 48 8D 8B 48 01 00 00 - lea rcx,[rbx+00000148]
"Astro-Win64-Shipping.exe"+156EF5: 33 D2 - xor edx,edx
}
printer2+2:
db 10 01 00 00
unregistersymbol(printer2)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+158293
"Astro-Win64-Shipping.exe"+158271: C1 E8 1D - shr eax,1D
"Astro-Win64-Shipping.exe"+158274: A8 01 - test al,01
"Astro-Win64-Shipping.exe"+158276: 75 3E - jne Astro-Win64-Shipping.exe+1582B6
"Astro-Win64-Shipping.exe"+158278: 41 B8 01 00 00 00 - mov r8d,00000001
"Astro-Win64-Shipping.exe"+15827E: 48 8B D3 - mov rdx,rbx
"Astro-Win64-Shipping.exe"+158281: 49 8B C9 - mov rcx,r9
"Astro-Win64-Shipping.exe"+158284: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"Astro-Win64-Shipping.exe"+158289: 48 83 C4 20 - add rsp,20
"Astro-Win64-Shipping.exe"+15828D: 5F - pop rdi
"Astro-Win64-Shipping.exe"+15828E: E9 4D 97 0B 00 - jmp Astro-Win64-Shipping.exe+2119E0
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+158293: 8B 8B 10 01 00 00 - mov ecx,[rbx+00000110]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+158299: 85 C9 - test ecx,ecx
"Astro-Win64-Shipping.exe"+15829B: 7E 19 - jle Astro-Win64-Shipping.exe+1582B6
"Astro-Win64-Shipping.exe"+15829D: 8B 83 D0 00 00 00 - mov eax,[rbx+000000D0]
"Astro-Win64-Shipping.exe"+1582A3: FF C0 - inc eax
"Astro-Win64-Shipping.exe"+1582A5: 99 - cdq
"Astro-Win64-Shipping.exe"+1582A6: F7 F9 - idiv ecx
"Astro-Win64-Shipping.exe"+1582A8: 48 8B CB - mov rcx,rbx
"Astro-Win64-Shipping.exe"+1582AB: 89 93 D0 00 00 00 - mov [rbx+000000D0],edx
"Astro-Win64-Shipping.exe"+1582B1: E8 FA EB FF FF - call Astro-Win64-Shipping.exe+156EB0
"Astro-Win64-Shipping.exe"+1582B6: 48 8B 5C 24 30 - mov rbx,[rsp+30]
}
442
"Craft for Free (old)"
Auto Assembler Script
[ENABLE]
aobscanmodule(free_craft,Astro-Win64-Shipping.exe,08 01 00 00 48 8B CB E8 ?? ?? ?? ?? 48 8B C3 48 83 C4 30)
alloc(newmem,$1000,free_craft)
label(code)
label(return)
newmem:
code:
mov rax,rbx
mov [rax+8],0
add rsp,30
jmp return
free_craft+0C:
jmp newmem
nop
nop
return:
registersymbol(free_craft)
[DISABLE]
free_craft+0C:
db 48 8B C3 48 83 C4 30
unregistersymbol(free_craft)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+7298D0
"Astro-Win64-Shipping.exe"+7298AD: CC - int 3
"Astro-Win64-Shipping.exe"+7298AE: CC - int 3
"Astro-Win64-Shipping.exe"+7298AF: CC - int 3
"Astro-Win64-Shipping.exe"+7298B0: 40 53 - push rbx
"Astro-Win64-Shipping.exe"+7298B2: 48 83 EC 30 - sub rsp,30
"Astro-Win64-Shipping.exe"+7298B6: 48 8B DA - mov rbx,rdx
"Astro-Win64-Shipping.exe"+7298B9: C7 44 24 20 00 00 00 00 - mov [rsp+20],00000000
"Astro-Win64-Shipping.exe"+7298C1: 48 8D 91 08 01 00 00 - lea rdx,[rcx+00000108]
"Astro-Win64-Shipping.exe"+7298C8: 48 8B CB - mov rcx,rbx
"Astro-Win64-Shipping.exe"+7298CB: E8 C0 0D FF FF - call Astro-Win64-Shipping.exe+71A690
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+7298D0: 48 8B C3 - mov rax,rbx
"Astro-Win64-Shipping.exe"+7298D3: 48 83 C4 30 - add rsp,30
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+7298D7: 5B - pop rbx
"Astro-Win64-Shipping.exe"+7298D8: C3 - ret
"Astro-Win64-Shipping.exe"+7298D9: CC - int 3
"Astro-Win64-Shipping.exe"+7298DA: CC - int 3
"Astro-Win64-Shipping.exe"+7298DB: CC - int 3
"Astro-Win64-Shipping.exe"+7298DC: CC - int 3
"Astro-Win64-Shipping.exe"+7298DD: CC - int 3
"Astro-Win64-Shipping.exe"+7298DE: CC - int 3
"Astro-Win64-Shipping.exe"+7298DF: CC - int 3
"Astro-Win64-Shipping.exe"+7298E0: 40 53 - push rbx
}
89
"Unlimited Tethers"
Auto Assembler Script
[ENABLE]
aobscanmodule(tethers,Astro-Win64-Shipping.exe,2B C2 BA 00 00 00 00)
tethers:
db 90 90
registersymbol(tethers)
[DISABLE]
tethers:
db 2B C2
unregistersymbol(tethers)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+1510C5
"Astro-Win64-Shipping.exe"+1510AC: C3 - ret
"Astro-Win64-Shipping.exe"+1510AD: CC - int 3
"Astro-Win64-Shipping.exe"+1510AE: CC - int 3
"Astro-Win64-Shipping.exe"+1510AF: CC - int 3
"Astro-Win64-Shipping.exe"+1510B0: 48 89 5C 24 08 - mov [rsp+08],rbx
"Astro-Win64-Shipping.exe"+1510B5: 57 - push rdi
"Astro-Win64-Shipping.exe"+1510B6: 48 83 EC 20 - sub rsp,20
"Astro-Win64-Shipping.exe"+1510BA: 8B B9 00 01 00 00 - mov edi,[rcx+00000100]
"Astro-Win64-Shipping.exe"+1510C0: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+1510C3: 8B C7 - mov eax,edi
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+1510C5: 2B C2 - sub eax,edx
"Astro-Win64-Shipping.exe"+1510C7: BA 00 00 00 00 - mov edx,00000000
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+1510CC: 0F 49 D0 - cmovns edx,eax
"Astro-Win64-Shipping.exe"+1510CF: 89 91 00 01 00 00 - mov [rcx+00000100],edx
"Astro-Win64-Shipping.exe"+1510D5: 3B FA - cmp edi,edx
"Astro-Win64-Shipping.exe"+1510D7: 74 25 - je Astro-Win64-Shipping.exe+1510FE
"Astro-Win64-Shipping.exe"+1510D9: 48 81 C1 E0 00 00 00 - add rcx,000000E0
"Astro-Win64-Shipping.exe"+1510E0: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+1510E2: E8 39 15 FA FF - call Astro-Win64-Shipping.exe+F2620
"Astro-Win64-Shipping.exe"+1510E7: 83 BB 00 01 00 00 00 - cmp dword ptr [rbx+00000100],00
"Astro-Win64-Shipping.exe"+1510EE: 75 0E - jne Astro-Win64-Shipping.exe+1510FE
"Astro-Win64-Shipping.exe"+1510F0: 48 8D 8B F0 00 00 00 - lea rcx,[rbx+000000F0]
}
430
"Mouseover Pointer"
Auto Assembler Script
[ENABLE]
aobscanmodule(mouseover_aob,Astro-Win64-Shipping.exe,48 8B 02 48 8B CA FF 90 ?? ?? ?? ?? 48 8B 55 80 4C)
alloc(newmem,$1000,mouseover_aob)
label(code)
label(return)
label(mouseover_ptr)
newmem:
mov rax,mouseover_ptr
mov [rax],rdx
code:
mov rax,[rdx]
mov rcx,rdx
jmp return
mouseover_ptr:
dq 0
mouseover_aob:
jmp newmem
nop
return:
registersymbol(mouseover_aob)
registersymbol(mouseover_ptr)
[DISABLE]
mouseover_aob:
db 48 8B 02 48 8B CA
unregistersymbol(mouseover_aob)
unregistersymbol(mouseover_ptr)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+745207
"Astro-Win64-Shipping.exe"+7451E6: 7D 11 - jnl Astro-Win64-Shipping.exe+7451F9
"Astro-Win64-Shipping.exe"+7451E8: 48 8D 0C 40 - lea rcx,[rax+rax*2]
"Astro-Win64-Shipping.exe"+7451EC: 48 8B 05 BD DD A0 03 - mov rax,[Astro-Win64-Shipping.exe+4152FB0]
"Astro-Win64-Shipping.exe"+7451F3: 4C 8D 04 C8 - lea r8,[rax+rcx*8]
"Astro-Win64-Shipping.exe"+7451F7: EB 03 - jmp Astro-Win64-Shipping.exe+7451FC
"Astro-Win64-Shipping.exe"+7451F9: 45 33 C0 - xor r8d,r8d
"Astro-Win64-Shipping.exe"+7451FC: 41 8B 40 08 - mov eax,[r8+08]
"Astro-Win64-Shipping.exe"+745200: C1 E8 1D - shr eax,1D
"Astro-Win64-Shipping.exe"+745203: A8 01 - test al,01
"Astro-Win64-Shipping.exe"+745205: 75 0C - jne Astro-Win64-Shipping.exe+745213
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+745207: 48 8B 02 - mov rax,[rdx]
"Astro-Win64-Shipping.exe"+74520A: 48 8B CA - mov rcx,rdx
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+74520D: FF 90 08 03 00 00 - call qword ptr [rax+00000308]
"Astro-Win64-Shipping.exe"+745213: 48 8B 55 80 - mov rdx,[rbp-80]
"Astro-Win64-Shipping.exe"+745217: 4C 8B 44 24 60 - mov r8,[rsp+60]
"Astro-Win64-Shipping.exe"+74521C: 4D 85 C0 - test r8,r8
"Astro-Win64-Shipping.exe"+74521F: 74 6C - je Astro-Win64-Shipping.exe+74528D
"Astro-Win64-Shipping.exe"+745221: 49 63 40 0C - movsxd rax,dword ptr [r8+0C]
"Astro-Win64-Shipping.exe"+745225: 3B 05 91 DD A0 03 - cmp eax,[Astro-Win64-Shipping.exe+4152FBC]
"Astro-Win64-Shipping.exe"+74522B: 7D 11 - jnl Astro-Win64-Shipping.exe+74523E
"Astro-Win64-Shipping.exe"+74522D: 48 8D 0C 40 - lea rcx,[rax+rax*2]
"Astro-Win64-Shipping.exe"+745231: 48 8B 05 78 DD A0 03 - mov rax,[Astro-Win64-Shipping.exe+4152FB0]
}
431
"Show/Hide"
1
432
"Object"
String
0
0
0
1
mouseover_ptr
0
433
"???"
1
4 Bytes
+c
427
"Supply"
String
0
0
0
1
+428
0
428
"Type"
1
8 Bytes
+160
429
"Quantity"
4 Bytes
+170
17
"Ignore This"
1
16
"Backpack"
Auto Assembler Script
[ENABLE]
aobscanmodule(backpack,Astro-Win64-Shipping.exe,83 B9 00 01 00 00 00 48 8B D9)
registersymbol(backpack)
[DISABLE]
unregistersymbol(backpack)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+149D3A
"Astro-Win64-Shipping.exe"+149D20: 8B 89 00 01 00 00 - mov ecx,[rcx+00000100]
"Astro-Win64-Shipping.exe"+149D26: E9 F5 14 00 00 - jmp Astro-Win64-Shipping.exe+14B220
"Astro-Win64-Shipping.exe"+149D2B: CC - int 3
"Astro-Win64-Shipping.exe"+149D2C: CC - int 3
"Astro-Win64-Shipping.exe"+149D2D: CC - int 3
"Astro-Win64-Shipping.exe"+149D2E: CC - int 3
"Astro-Win64-Shipping.exe"+149D2F: CC - int 3
"Astro-Win64-Shipping.exe"+149D30: 48 89 54 24 10 - mov [rsp+10],rdx
"Astro-Win64-Shipping.exe"+149D35: 53 - push rbx
"Astro-Win64-Shipping.exe"+149D36: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+149D3A: 83 B9 00 01 00 00 00 - cmp dword ptr [rcx+00000100],00
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+149D41: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+149D44: 74 7B - je Astro-Win64-Shipping.exe+149DC1
"Astro-Win64-Shipping.exe"+149D46: 48 83 B9 C8 00 00 00 00 - cmp qword ptr [rcx+000000C8],00
"Astro-Win64-Shipping.exe"+149D4E: 74 2E - je Astro-Win64-Shipping.exe+149D7E
"Astro-Win64-Shipping.exe"+149D50: 48 8D 0D D1 38 EF 01 - lea rcx,[Astro-Win64-Shipping.exe+203D628]
"Astro-Win64-Shipping.exe"+149D57: E8 14 21 0C 00 - call Astro-Win64-Shipping.exe+20BE70
"Astro-Win64-Shipping.exe"+149D5C: 48 8B 9B C8 00 00 00 - mov rbx,[rbx+000000C8]
"Astro-Win64-Shipping.exe"+149D63: 48 8B D0 - mov rdx,rax
"Astro-Win64-Shipping.exe"+149D66: 48 8B C3 - mov rax,rbx
"Astro-Win64-Shipping.exe"+149D69: 48 85 DB - test rbx,rbx
}
43
"Subtract Resource"
Auto Assembler Script
[ENABLE]
aobscanmodule(subtract_resource,Astro-Win64-Shipping.exe,2B BB 00 01 00 00 48 8B 5C 24 40)
registersymbol(subtract_resource)
[DISABLE]
unregistersymbol(subtract_resource)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+14A03F
"Astro-Win64-Shipping.exe"+14A016: 3B F8 - cmp edi,eax
"Astro-Win64-Shipping.exe"+14A018: 74 25 - je Astro-Win64-Shipping.exe+14A03F
"Astro-Win64-Shipping.exe"+14A01A: 48 8D 8B E0 00 00 00 - lea rcx,[rbx+000000E0]
"Astro-Win64-Shipping.exe"+14A021: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+14A023: E8 98 49 FA FF - call Astro-Win64-Shipping.exe+EE9C0
"Astro-Win64-Shipping.exe"+14A028: 83 BB 00 01 00 00 00 - cmp dword ptr [rbx+00000100],00
"Astro-Win64-Shipping.exe"+14A02F: 75 0E - jne Astro-Win64-Shipping.exe+14A03F
"Astro-Win64-Shipping.exe"+14A031: 48 8D 8B F0 00 00 00 - lea rcx,[rbx+000000F0]
"Astro-Win64-Shipping.exe"+14A038: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+14A03A: E8 81 49 FA FF - call Astro-Win64-Shipping.exe+EE9C0
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+14A03F: 2B BB 00 01 00 00 - sub edi,[rbx+00000100]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+14A045: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"Astro-Win64-Shipping.exe"+14A04A: 8B C7 - mov eax,edi
"Astro-Win64-Shipping.exe"+14A04C: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
"Astro-Win64-Shipping.exe"+14A051: 48 83 C4 30 - add rsp,30
"Astro-Win64-Shipping.exe"+14A055: 5F - pop rdi
"Astro-Win64-Shipping.exe"+14A056: C3 - ret
"Astro-Win64-Shipping.exe"+14A057: CC - int 3
"Astro-Win64-Shipping.exe"+14A058: CC - int 3
"Astro-Win64-Shipping.exe"+14A059: CC - int 3
"Astro-Win64-Shipping.exe"+14A05A: CC - int 3
}
88
"Sub Resource"
Auto Assembler Script
[ENABLE]
aobscanmodule(sub_resource,Astro-Win64-Shipping.exe,8B B9 00 01 00 00 48)
registersymbol(sub_resource)
[DISABLE]
unregistersymbol(sub_resource)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+1510BA
"Astro-Win64-Shipping.exe"+1510A2: E8 79 15 FA FF - call Astro-Win64-Shipping.exe+F2620
"Astro-Win64-Shipping.exe"+1510A7: 48 83 C4 20 - add rsp,20
"Astro-Win64-Shipping.exe"+1510AB: 5B - pop rbx
"Astro-Win64-Shipping.exe"+1510AC: C3 - ret
"Astro-Win64-Shipping.exe"+1510AD: CC - int 3
"Astro-Win64-Shipping.exe"+1510AE: CC - int 3
"Astro-Win64-Shipping.exe"+1510AF: CC - int 3
"Astro-Win64-Shipping.exe"+1510B0: 48 89 5C 24 08 - mov [rsp+08],rbx
"Astro-Win64-Shipping.exe"+1510B5: 57 - push rdi
"Astro-Win64-Shipping.exe"+1510B6: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+1510BA: 8B B9 00 01 00 00 - mov edi,[rcx+00000100]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+1510C0: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+1510C3: 8B C7 - mov eax,edi
"Astro-Win64-Shipping.exe"+1510C5: 2B C2 - sub eax,edx
"Astro-Win64-Shipping.exe"+1510C7: BA 00 00 00 00 - mov edx,00000000
"Astro-Win64-Shipping.exe"+1510CC: 0F 49 D0 - cmovns edx,eax
"Astro-Win64-Shipping.exe"+1510CF: 89 91 00 01 00 00 - mov [rcx+00000100],edx
"Astro-Win64-Shipping.exe"+1510D5: 3B FA - cmp edi,edx
"Astro-Win64-Shipping.exe"+1510D7: 74 25 - je Astro-Win64-Shipping.exe+1510FE
"Astro-Win64-Shipping.exe"+1510D9: 48 81 C1 E0 00 00 00 - add rcx,000000E0
"Astro-Win64-Shipping.exe"+1510E0: 33 D2 - xor edx,edx
}
104
"Oxygen Pointer"
Auto Assembler Script
[ENABLE]
aobscanmodule(oxygen_ptr,Astro-Win64-Shipping.exe,8B B1 70 01 00 00 48 8B D9)
alloc(newmem,$1000,"Astro-Win64-Shipping.exe"+73DF34)
label(code)
label(return)
newmem:
code:
mov esi,[rcx+00000170]
jmp return
oxygen_ptr:
jmp newmem
nop
return:
registersymbol(oxygen_ptr)
[DISABLE]
oxygen_ptr:
db 8B B1 70 01 00 00
unregistersymbol(oxygen_ptr)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+73DF34
"Astro-Win64-Shipping.exe"+73DF1B: CC - int 3
"Astro-Win64-Shipping.exe"+73DF1C: CC - int 3
"Astro-Win64-Shipping.exe"+73DF1D: CC - int 3
"Astro-Win64-Shipping.exe"+73DF1E: CC - int 3
"Astro-Win64-Shipping.exe"+73DF1F: CC - int 3
"Astro-Win64-Shipping.exe"+73DF20: 48 89 5C 24 08 - mov [rsp+08],rbx
"Astro-Win64-Shipping.exe"+73DF25: 48 89 6C 24 10 - mov [rsp+10],rbp
"Astro-Win64-Shipping.exe"+73DF2A: 48 89 74 24 18 - mov [rsp+18],rsi
"Astro-Win64-Shipping.exe"+73DF2F: 57 - push rdi
"Astro-Win64-Shipping.exe"+73DF30: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+73DF34: 8B B1 70 01 00 00 - mov esi,[rcx+00000170]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+73DF3A: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+73DF3D: 48 8B 89 60 01 00 00 - mov rcx,[rcx+00000160]
"Astro-Win64-Shipping.exe"+73DF44: 41 0F B6 E8 - movzx ebp,r8l
"Astro-Win64-Shipping.exe"+73DF48: 8B FA - mov edi,edx
"Astro-Win64-Shipping.exe"+73DF4A: E8 11 48 FF FF - call Astro-Win64-Shipping.exe+732760
"Astro-Win64-Shipping.exe"+73DF4F: 84 C0 - test al,al
"Astro-Win64-Shipping.exe"+73DF51: 74 35 - je Astro-Win64-Shipping.exe+73DF88
"Astro-Win64-Shipping.exe"+73DF53: 48 83 BB 68 01 00 00 00 - cmp qword ptr [rbx+00000168],00
"Astro-Win64-Shipping.exe"+73DF5B: 74 29 - je Astro-Win64-Shipping.exe+73DF86
"Astro-Win64-Shipping.exe"+73DF5D: E8 FE 03 1D 00 - call Astro-Win64-Shipping.exe+90E360
}
41
"Craft for Free (beta)"
Auto Assembler Script
[ENABLE]
aobscanmodule(ignore_craft,Astro-Win64-Shipping.exe,0F 84 F4 00 00 00 48 8D 4D)
ignore_craft:
db 90 E9
registersymbol(ignore_craft)
aobscanmodule(always_craft,Astro-Win64-Shipping.exe,88 87 9A 01 00 00)
alloc(newmem,$1000,always_craft)
label(code)
label(return)
newmem:
code:
mov byte ptr [rdi+0000019A],1
jmp return
always_craft:
jmp newmem
nop
return:
registersymbol(always_craft)
[DISABLE]
ignore_craft:
db 0F 84
unregistersymbol(ignore_craft)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+15A1F0
"Astro-Win64-Shipping.exe"+15A1CA: 48 8B 4D AF - mov rcx,[rbp-51]
"Astro-Win64-Shipping.exe"+15A1CE: E8 25 C1 CF 01 - call Astro-Win64-Shipping.exe+1E562F8
"Astro-Win64-Shipping.exe"+15A1D3: 90 - nop
"Astro-Win64-Shipping.exe"+15A1D4: 4D 8B 45 00 - mov r8,[r13+00]
"Astro-Win64-Shipping.exe"+15A1D8: 48 8D 55 AF - lea rdx,[rbp-51]
"Astro-Win64-Shipping.exe"+15A1DC: 48 8D 4D D7 - lea rcx,[rbp-29]
"Astro-Win64-Shipping.exe"+15A1E0: E8 5B C9 05 00 - call Astro-Win64-Shipping.exe+1B6B40
"Astro-Win64-Shipping.exe"+15A1E5: 48 8D 4D D7 - lea rcx,[rbp-29]
"Astro-Win64-Shipping.exe"+15A1E9: E8 E2 93 05 00 - call Astro-Win64-Shipping.exe+1B35D0
"Astro-Win64-Shipping.exe"+15A1EE: 84 C0 - test al,al
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+15A1F0: 0F 84 F4 00 00 00 - je Astro-Win64-Shipping.exe+15A2EA
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+15A1F6: 48 8D 4D D7 - lea rcx,[rbp-29]
"Astro-Win64-Shipping.exe"+15A1FA: E8 21 19 05 00 - call Astro-Win64-Shipping.exe+1ABB20
"Astro-Win64-Shipping.exe"+15A1FF: 4C 8B B0 D0 00 00 00 - mov r14,[rax+000000D0]
"Astro-Win64-Shipping.exe"+15A206: 48 63 80 D8 00 00 00 - movsxd rax,dword ptr [rax+000000D8]
"Astro-Win64-Shipping.exe"+15A20D: 49 8D 0C C6 - lea rcx,[r14+rax*8]
"Astro-Win64-Shipping.exe"+15A211: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+15A213: 44 8B FA - mov r15d,edx
"Astro-Win64-Shipping.exe"+15A216: 4C 8B E1 - mov r12,rcx
"Astro-Win64-Shipping.exe"+15A219: 4D 2B E6 - sub r12,r14
"Astro-Win64-Shipping.exe"+15A21C: 49 83 C4 07 - add r12,07
}
always_craft:
db 88 87 9A 01 00 00
unregistersymbol(always_craft)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+159BC2
"Astro-Win64-Shipping.exe"+159B8A: 0F B6 B7 9D 01 00 00 - movzx esi,byte ptr [rdi+0000019D]
"Astro-Win64-Shipping.exe"+159B91: 4C 89 74 24 48 - mov [rsp+48],r14
"Astro-Win64-Shipping.exe"+159B96: 44 0F B6 B7 9A 01 00 00 - movzx r14d,byte ptr [rdi+0000019A]
"Astro-Win64-Shipping.exe"+159B9E: 74 11 - je Astro-Win64-Shipping.exe+159BB1
"Astro-Win64-Shipping.exe"+159BA0: C6 87 9B 01 00 00 00 - mov byte ptr [rdi+0000019B],00
"Astro-Win64-Shipping.exe"+159BA7: E8 04 09 00 00 - call Astro-Win64-Shipping.exe+15A4B0
"Astro-Win64-Shipping.exe"+159BAC: E9 C2 00 00 00 - jmp Astro-Win64-Shipping.exe+159C73
"Astro-Win64-Shipping.exe"+159BB1: 48 89 5C 24 30 - mov [rsp+30],rbx
"Astro-Win64-Shipping.exe"+159BB6: E8 45 01 00 00 - call Astro-Win64-Shipping.exe+159D00
"Astro-Win64-Shipping.exe"+159BBB: 80 BF 34 01 00 00 00 - cmp byte ptr [rdi+00000134],00
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+159BC2: 88 87 9A 01 00 00 - mov [rdi+0000019A],al
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+159BC8: C6 87 9B 01 00 00 01 - mov byte ptr [rdi+0000019B],01
"Astro-Win64-Shipping.exe"+159BCF: 74 6D - je Astro-Win64-Shipping.exe+159C3E
"Astro-Win64-Shipping.exe"+159BD1: 48 8B 9F A8 00 00 00 - mov rbx,[rdi+000000A8]
"Astro-Win64-Shipping.exe"+159BD8: 48 8D 0D 49 3A EE 01 - lea rcx,[Astro-Win64-Shipping.exe+203D628]
"Astro-Win64-Shipping.exe"+159BDF: E8 2C 30 0B 00 - call Astro-Win64-Shipping.exe+20CC10
"Astro-Win64-Shipping.exe"+159BE4: 4C 8B 03 - mov r8,[rbx]
"Astro-Win64-Shipping.exe"+159BE7: 48 8B D0 - mov rdx,rax
"Astro-Win64-Shipping.exe"+159BEA: 48 8B CB - mov rcx,rbx
"Astro-Win64-Shipping.exe"+159BED: 41 FF 90 78 05 00 00 - call qword ptr [r8+00000578]
"Astro-Win64-Shipping.exe"+159BF4: 48 85 C0 - test rax,rax
}
106
"Resource Pointer"
Auto Assembler Script
[ENABLE]
aobscanmodule(resource_ptr,Astro-Win64-Shipping.exe,83 BF 70 01 00 00 00 75 33)
registersymbol(resource_ptr)
[DISABLE]
unregistersymbol(resource_ptr)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+7326D5
"Astro-Win64-Shipping.exe"+7326BD: 74 0F - je Astro-Win64-Shipping.exe+7326CE
"Astro-Win64-Shipping.exe"+7326BF: 90 - nop
"Astro-Win64-Shipping.exe"+7326C0: 48 3B C8 - cmp rcx,rax
"Astro-Win64-Shipping.exe"+7326C3: 74 0B - je Astro-Win64-Shipping.exe+7326D0
"Astro-Win64-Shipping.exe"+7326C5: 48 8B 49 30 - mov rcx,[rcx+30]
"Astro-Win64-Shipping.exe"+7326C9: 48 85 C9 - test rcx,rcx
"Astro-Win64-Shipping.exe"+7326CC: 75 F2 - jne Astro-Win64-Shipping.exe+7326C0
"Astro-Win64-Shipping.exe"+7326CE: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+7326D0: 48 3B DA - cmp rbx,rdx
"Astro-Win64-Shipping.exe"+7326D3: 74 62 - je Astro-Win64-Shipping.exe+732737
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+7326D5: 83 BF 70 01 00 00 00 - cmp dword ptr [rdi+00000170],00
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+7326DC: 75 33 - jne Astro-Win64-Shipping.exe+732711
"Astro-Win64-Shipping.exe"+7326DE: 48 8B 8F 60 01 00 00 - mov rcx,[rdi+00000160]
"Astro-Win64-Shipping.exe"+7326E5: E8 76 00 00 00 - call Astro-Win64-Shipping.exe+732760
"Astro-Win64-Shipping.exe"+7326EA: 84 C0 - test al,al
"Astro-Win64-Shipping.exe"+7326EC: 74 23 - je Astro-Win64-Shipping.exe+732711
"Astro-Win64-Shipping.exe"+7326EE: 48 8B 4C 24 38 - mov rcx,[rsp+38]
"Astro-Win64-Shipping.exe"+7326F3: E8 78 04 00 00 - call Astro-Win64-Shipping.exe+732B70
"Astro-Win64-Shipping.exe"+7326F8: 84 C0 - test al,al
"Astro-Win64-Shipping.exe"+7326FA: 74 15 - je Astro-Win64-Shipping.exe+732711
"Astro-Win64-Shipping.exe"+7326FC: 48 8D 8E B0 00 00 00 - lea rcx,[rsi+000000B0]
}
120
"Printer Resource Pointer"
Auto Assembler Script
[ENABLE]
aobscanmodule(printer_resource_ptr,Astro-Win64-Shipping.exe,48 8B 8B 28 04 00 00 E8 6B)
registersymbol(printer_resource_ptr)
[DISABLE]
unregistersymbol(printer_resource_ptr)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+852089
"Astro-Win64-Shipping.exe"+852064: 48 8B C8 - mov rcx,rax
"Astro-Win64-Shipping.exe"+852067: E8 C4 15 FA FF - call Astro-Win64-Shipping.exe+7F3630
"Astro-Win64-Shipping.exe"+85206C: 48 8B D8 - mov rbx,rax
"Astro-Win64-Shipping.exe"+85206F: 48 85 C0 - test rax,rax
"Astro-Win64-Shipping.exe"+852072: 74 24 - je Astro-Win64-Shipping.exe+852098
"Astro-Win64-Shipping.exe"+852074: 48 8B 54 24 58 - mov rdx,[rsp+58]
"Astro-Win64-Shipping.exe"+852079: 48 8B 88 28 04 00 00 - mov rcx,[rax+00000428]
"Astro-Win64-Shipping.exe"+852080: E8 5B DF ED FF - call Astro-Win64-Shipping.exe+72FFE0
"Astro-Win64-Shipping.exe"+852085: 84 C0 - test al,al
"Astro-Win64-Shipping.exe"+852087: 74 0F - je Astro-Win64-Shipping.exe+852098
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+852089: 48 8B 8B 28 04 00 00 - mov rcx,[rbx+00000428]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+852090: E8 6B 64 ED FF - call Astro-Win64-Shipping.exe+728500
"Astro-Win64-Shipping.exe"+852095: 41 01 06 - add [r14],eax
"Astro-Win64-Shipping.exe"+852098: 49 83 C7 10 - add r15,10
"Astro-Win64-Shipping.exe"+85209C: 4D 3B FC - cmp r15,r12
"Astro-Win64-Shipping.exe"+85209F: 0F 85 00 FF FF FF - jne Astro-Win64-Shipping.exe+851FA5
"Astro-Win64-Shipping.exe"+8520A5: 48 8B 7C 24 20 - mov rdi,[rsp+20]
"Astro-Win64-Shipping.exe"+8520AA: 48 8B 74 24 68 - mov rsi,[rsp+68]
"Astro-Win64-Shipping.exe"+8520AF: 48 8B 6C 24 60 - mov rbp,[rsp+60]
"Astro-Win64-Shipping.exe"+8520B4: 48 8B 5C 24 50 - mov rbx,[rsp+50]
"Astro-Win64-Shipping.exe"+8520B9: 45 39 2E - cmp [r14],r13d
}
123
"Allow Build"
Auto Assembler Script
[ENABLE]
aobscanmodule(allow_build,Astro-Win64-Shipping.exe,0F 84 ?? ?? ?? ?? 49 8D 8D ?? ?? ?? ?? 8B ?? ?? 89)
allow_build:
db 90 E9
registersymbol(allow_build)
[DISABLE]
allow_build:
db 0F 84
unregistersymbol(allow_build)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+746F61
"Astro-Win64-Shipping.exe"+746F35: 49 C1 E0 04 - shl r8,04
"Astro-Win64-Shipping.exe"+746F39: 49 8B D7 - mov rdx,r15
"Astro-Win64-Shipping.exe"+746F3C: 48 8B 4C 24 20 - mov rcx,[rsp+20]
"Astro-Win64-Shipping.exe"+746F41: E8 92 AA E0 01 - call Astro-Win64-Shipping.exe+25519D8
"Astro-Win64-Shipping.exe"+746F46: 90 - nop
"Astro-Win64-Shipping.exe"+746F47: 4C 8D 44 24 20 - lea r8,[rsp+20]
"Astro-Win64-Shipping.exe"+746F4C: 48 8D 54 24 50 - lea rdx,[rsp+50]
"Astro-Win64-Shipping.exe"+746F51: 49 8B CD - mov rcx,r13
"Astro-Win64-Shipping.exe"+746F54: E8 87 C3 FD FF - call Astro-Win64-Shipping.exe+7232E0
"Astro-Win64-Shipping.exe"+746F59: 41 80 BD 69 01 00 00 00 - cmp byte ptr [r13+00000169],00
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+746F61: 0F 84 D2 04 00 00 - je Astro-Win64-Shipping.exe+747439
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+746F67: 49 8D 8D C0 03 00 00 - lea rcx,[r13+000003C0]
"Astro-Win64-Shipping.exe"+746F6E: 8B 41 0C - mov eax,[rcx+0C]
"Astro-Win64-Shipping.exe"+746F71: 89 79 08 - mov [rcx+08],edi
"Astro-Win64-Shipping.exe"+746F74: 85 C0 - test eax,eax
"Astro-Win64-Shipping.exe"+746F76: 79 09 - jns Astro-Win64-Shipping.exe+746F81
"Astro-Win64-Shipping.exe"+746F78: 74 07 - je Astro-Win64-Shipping.exe+746F81
"Astro-Win64-Shipping.exe"+746F7A: 33 D2 - xor edx,edx
"Astro-Win64-Shipping.exe"+746F7C: E8 EF 89 12 01 - call Astro-Win64-Shipping.exe+186F970
"Astro-Win64-Shipping.exe"+746F81: 49 8D B5 D0 03 00 00 - lea rsi,[r13+000003D0]
"Astro-Win64-Shipping.exe"+746F88: 8B 46 0C - mov eax,[rsi+0C]
}
420
"Crafting Requirement List"
Auto Assembler Script
[ENABLE]
aobscanmodule(crafting_requirement_list,Astro-Win64-Shipping.exe,48 63 7A 08 48 8B 32 89 79 08 85 FF 75 05 89 41 0C EB 1D 45 33 C0 8B D7 E8 09)
registersymbol(crafting_requirement_list)
[DISABLE]
unregistersymbol(crafting_requirement_list)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+71A6BA
"Astro-Win64-Shipping.exe"+71A690: 48 89 4C 24 08 - mov [rsp+08],rcx
"Astro-Win64-Shipping.exe"+71A695: 57 - push rdi
"Astro-Win64-Shipping.exe"+71A696: 48 83 EC 30 - sub rsp,30
"Astro-Win64-Shipping.exe"+71A69A: 48 C7 44 24 20 FE FF FF FF - mov qword ptr [rsp+20],FFFFFFFE
"Astro-Win64-Shipping.exe"+71A6A3: 48 89 5C 24 48 - mov [rsp+48],rbx
"Astro-Win64-Shipping.exe"+71A6A8: 48 89 74 24 50 - mov [rsp+50],rsi
"Astro-Win64-Shipping.exe"+71A6AD: 48 8B D9 - mov rbx,rcx
"Astro-Win64-Shipping.exe"+71A6B0: 48 89 4C 24 40 - mov [rsp+40],rcx
"Astro-Win64-Shipping.exe"+71A6B5: 33 C0 - xor eax,eax
"Astro-Win64-Shipping.exe"+71A6B7: 48 89 01 - mov [rcx],rax
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+71A6BA: 48 63 7A 08 - movsxd rdi,dword ptr [rdx+08]
"Astro-Win64-Shipping.exe"+71A6BE: 48 8B 32 - mov rsi,[rdx]
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+71A6C1: 89 79 08 - mov [rcx+08],edi
"Astro-Win64-Shipping.exe"+71A6C4: 85 FF - test edi,edi
"Astro-Win64-Shipping.exe"+71A6C6: 75 05 - jne Astro-Win64-Shipping.exe+71A6CD
"Astro-Win64-Shipping.exe"+71A6C8: 89 41 0C - mov [rcx+0C],eax
"Astro-Win64-Shipping.exe"+71A6CB: EB 1D - jmp Astro-Win64-Shipping.exe+71A6EA
"Astro-Win64-Shipping.exe"+71A6CD: 45 33 C0 - xor r8d,r8d
"Astro-Win64-Shipping.exe"+71A6D0: 8B D7 - mov edx,edi
"Astro-Win64-Shipping.exe"+71A6D2: E8 09 57 65 00 - call Astro-Win64-Shipping.exe+D6FDE0
"Astro-Win64-Shipping.exe"+71A6D7: 4C 8B C7 - mov r8,rdi
"Astro-Win64-Shipping.exe"+71A6DA: 49 C1 E0 04 - shl r8,04
}
153
"Place Resource Anywhere"
Auto Assembler Script
[ENABLE]
aobscanmodule(resource_type,Astro-Win64-Shipping.exe,0F 84 91 00 00 00 48 8D 44) // should be unique
resource_type:
db 90 90 90 90 90 90
registersymbol(resource_type)
[DISABLE]
resource_type:
db 0F 84 91 00 00 00
unregistersymbol(resource_type)
{
// ORIGINAL CODE - INJECTION POINT: "Astro-Win64-Shipping.exe"+7392C1
"Astro-Win64-Shipping.exe"+73928F: A8 01 - test al,01
"Astro-Win64-Shipping.exe"+739291: 75 09 - jne Astro-Win64-Shipping.exe+73929C
"Astro-Win64-Shipping.exe"+739293: 48 8B 83 68 01 00 00 - mov rax,[rbx+00000168]
"Astro-Win64-Shipping.exe"+73929A: EB 07 - jmp Astro-Win64-Shipping.exe+7392A3
"Astro-Win64-Shipping.exe"+73929C: 48 8B 83 60 01 00 00 - mov rax,[rbx+00000160]
"Astro-Win64-Shipping.exe"+7392A3: 48 89 84 24 90 00 00 00 - mov [rsp+00000090],rax
"Astro-Win64-Shipping.exe"+7392AB: 48 8D 8E A0 02 00 00 - lea rcx,[rsi+000002A0]
"Astro-Win64-Shipping.exe"+7392B2: 48 8D 94 24 90 00 00 00 - lea rdx,[rsp+00000090]
"Astro-Win64-Shipping.exe"+7392BA: E8 A1 CD FD FF - call Astro-Win64-Shipping.exe+716060
"Astro-Win64-Shipping.exe"+7392BF: 84 C0 - test al,al
// ---------- INJECTING HERE ----------
"Astro-Win64-Shipping.exe"+7392C1: 0F 84 91 00 00 00 - je Astro-Win64-Shipping.exe+739358
// ---------- DONE INJECTING ----------
"Astro-Win64-Shipping.exe"+7392C7: 48 8D 44 24 50 - lea rax,[rsp+50]
"Astro-Win64-Shipping.exe"+7392CC: 48 89 84 24 90 00 00 00 - mov [rsp+00000090],rax
"Astro-Win64-Shipping.exe"+7392D4: 48 89 6C 24 50 - mov [rsp+50],rbp
"Astro-Win64-Shipping.exe"+7392D9: 48 63 9E 20 01 00 00 - movsxd rbx,dword ptr [rsi+00000120]
"Astro-Win64-Shipping.exe"+7392E0: 48 8B B6 18 01 00 00 - mov rsi,[rsi+00000118]
"Astro-Win64-Shipping.exe"+7392E7: 89 5C 24 58 - mov [rsp+58],ebx
"Astro-Win64-Shipping.exe"+7392EB: 85 DB - test ebx,ebx
"Astro-Win64-Shipping.exe"+7392ED: 75 06 - jne Astro-Win64-Shipping.exe+7392F5
"Astro-Win64-Shipping.exe"+7392EF: 89 6C 24 5C - mov [rsp+5C],ebp
"Astro-Win64-Shipping.exe"+7392F3: EB 24 - jmp Astro-Win64-Shipping.exe+739319
}
ignore_craft
7FF6C0A41D30
always_craft
7FF6C0A41702
printer
7FF6C0A3E8D3
printer2
7FF6C0A3FCA3
subtract_resource
7FF6C0A3118F
backpack
7FF6C0A30E8A