3
"Unlimited HP"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTHP,SecondExtinction_F.exe,66 89 83 DA 01 00 00 48 8B 5C 24 30 48 83 C4 20) // should be unique
alloc(newmemhp,$1000,"SecondExtinction_F.exe"+8430B4)
label(codehp)
label(returnhp)
newmemhp:
codehp:
//mov [rbx+000001DA],ax
add [rbx+000001DA],(int)0
jmp returnhp
INJECTHP:
jmp newmemhp
nop 2
returnhp:
registersymbol(INJECTHP)
[DISABLE]
INJECTHP:
db 66 89 83 DA 01 00 00
unregistersymbol(INJECTHP)
dealloc(newmemhp)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+8430B4
"SecondExtinction_F.exe"+84308A: 7E 0E - jle SecondExtinction_F.exe+84309A
"SecondExtinction_F.exe"+84308C: 8B 91 2C 02 00 00 - mov edx,[rcx+0000022C]
"SecondExtinction_F.exe"+843092: 41 B0 01 - mov r8l,01
"SecondExtinction_F.exe"+843095: E8 C6 03 00 00 - call SecondExtinction_F.exe+843460
"SecondExtinction_F.exe"+84309A: 48 8B 03 - mov rax,[rbx]
"SecondExtinction_F.exe"+84309D: 48 8B CB - mov rcx,rbx
"SecondExtinction_F.exe"+8430A0: FF 90 A8 01 00 00 - call qword ptr [rax+000001A8]
"SecondExtinction_F.exe"+8430A6: 0F B7 83 DC 01 00 00 - movzx eax,word ptr [rbx+000001DC]
"SecondExtinction_F.exe"+8430AD: 66 3B F8 - cmp di,ax
"SecondExtinction_F.exe"+8430B0: 66 0F 4C C7 - cmovl ax,di
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+8430B4: 66 89 83 DA 01 00 00 - mov [rbx+000001DA],ax
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+8430BB: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"SecondExtinction_F.exe"+8430C0: 48 83 C4 20 - add rsp,20
"SecondExtinction_F.exe"+8430C4: 5F - pop rdi
"SecondExtinction_F.exe"+8430C5: C3 - ret
"SecondExtinction_F.exe"+8430C6: CC - int 3
"SecondExtinction_F.exe"+8430C7: CC - int 3
"SecondExtinction_F.exe"+8430C8: CC - int 3
"SecondExtinction_F.exe"+8430C9: CC - int 3
"SecondExtinction_F.exe"+8430CA: CC - int 3
"SecondExtinction_F.exe"+8430CB: CC - int 3
}
53
"Unlimited Ammo + No Reload"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTAMMO,SecondExtinction_F.exe,41 89 97 18 04 00 00) // should be unique
alloc(newmemammo,$1000,"SecondExtinction_F.exe"+91D2D5)
label(codeammo)
label(returnammo)
newmemammo:
codeammo:
//mov [r15+00000418],edx
add [r15+00000418],(int)0
jmp returnammo
INJECTAMMO:
jmp newmemammo
nop 2
returnammo:
registersymbol(INJECTAMMO)
[DISABLE]
INJECTAMMO:
db 41 89 97 18 04 00 00
unregistersymbol(INJECTAMMO)
dealloc(newmemammo)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+91D2D5
"SecondExtinction_F.exe"+91D2AD: E8 DE 18 00 00 - call SecondExtinction_F.exe+91EB90
"SecondExtinction_F.exe"+91D2B2: 2B C7 - sub eax,edi
"SecondExtinction_F.exe"+91D2B4: 8B D6 - mov edx,esi
"SecondExtinction_F.exe"+91D2B6: 85 C0 - test eax,eax
"SecondExtinction_F.exe"+91D2B8: 0F 4F D0 - cmovg edx,eax
"SecondExtinction_F.exe"+91D2BB: 49 8B 07 - mov rax,[r15]
"SecondExtinction_F.exe"+91D2BE: 4C 8B 80 60 01 00 00 - mov r8,[rax+00000160]
"SecondExtinction_F.exe"+91D2C5: 48 8D 05 94 42 00 00 - lea rax,[SecondExtinction_F.exe+921560]
"SecondExtinction_F.exe"+91D2CC: 4C 3B C0 - cmp r8,rax
"SecondExtinction_F.exe"+91D2CF: 0F 85 37 01 00 00 - jne SecondExtinction_F.exe+91D40C
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+91D2D5: 41 89 97 18 04 00 00 - mov [r15+00000418],edx
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+91D2DC: 4D 85 ED - test r13,r13
"SecondExtinction_F.exe"+91D2DF: 0F 84 01 01 00 00 - je SecondExtinction_F.exe+91D3E6
"SecondExtinction_F.exe"+91D2E5: 49 8B CF - mov rcx,r15
"SecondExtinction_F.exe"+91D2E8: E8 53 6E FF FF - call SecondExtinction_F.exe+914140
"SecondExtinction_F.exe"+91D2ED: 84 C0 - test al,al
"SecondExtinction_F.exe"+91D2EF: 0F 85 F1 00 00 00 - jne SecondExtinction_F.exe+91D3E6
"SecondExtinction_F.exe"+91D2F5: 49 8B 07 - mov rax,[r15]
"SecondExtinction_F.exe"+91D2F8: 49 8B CF - mov rcx,r15
"SecondExtinction_F.exe"+91D2FB: FF 90 50 01 00 00 - call qword ptr [rax+00000150]
"SecondExtinction_F.exe"+91D301: 85 C0 - test eax,eax
}
14
"Unlimited Skill/Grenade/Stim"
1
6
"1"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTSS,SecondExtinction_F.exe,F3 0F 11 83 E8 01 00 00 48 8B 03 48 8B CB) // should be unique
alloc(newmemss,$1000,"SecondExtinction_F.exe"+8B444F)
label(codess)
label(returnss)
newmemss:
codess:
//movss [rbx+000001E8],xmm0
add [rbx+000001E8],(int)0
jmp returnss
INJECTSS:
jmp newmemss
nop 3
returnss:
registersymbol(INJECTSS)
[DISABLE]
INJECTSS:
db F3 0F 11 83 E8 01 00 00
unregistersymbol(INJECTSS)
dealloc(newmemss)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+8B444F
"SecondExtinction_F.exe"+8B4422: F3 0F 11 93 10 02 00 00 - movss [rbx+00000210],xmm2
"SecondExtinction_F.exe"+8B442A: 77 17 - ja SecondExtinction_F.exe+8B4443
"SecondExtinction_F.exe"+8B442C: 80 BB E0 01 00 00 00 - cmp byte ptr [rbx+000001E0],00
"SecondExtinction_F.exe"+8B4433: 74 0E - je SecondExtinction_F.exe+8B4443
"SecondExtinction_F.exe"+8B4435: 48 8B 03 - mov rax,[rbx]
"SecondExtinction_F.exe"+8B4438: 48 8B CB - mov rcx,rbx
"SecondExtinction_F.exe"+8B443B: FF 90 18 02 00 00 - call qword ptr [rax+00000218]
"SecondExtinction_F.exe"+8B4441: EB 14 - jmp SecondExtinction_F.exe+8B4457
"SecondExtinction_F.exe"+8B4443: F3 0F 10 83 E8 01 00 00 - movss xmm0,[rbx+000001E8]
"SecondExtinction_F.exe"+8B444B: F3 0F 5C C3 - subss xmm0,xmm3
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+8B444F: F3 0F 11 83 E8 01 00 00 - movss [rbx+000001E8],xmm0
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+8B4457: 48 8B 03 - mov rax,[rbx]
"SecondExtinction_F.exe"+8B445A: 48 8B CB - mov rcx,rbx
"SecondExtinction_F.exe"+8B445D: FF 90 E0 01 00 00 - call qword ptr [rax+000001E0]
"SecondExtinction_F.exe"+8B4463: 0F B6 F8 - movzx edi,al
"SecondExtinction_F.exe"+8B4466: 40 3A F0 - cmp sil,al
"SecondExtinction_F.exe"+8B4469: 0F 84 83 00 00 00 - je SecondExtinction_F.exe+8B44F2
"SecondExtinction_F.exe"+8B446F: 48 8B 8B D8 01 00 00 - mov rcx,[rbx+000001D8]
"SecondExtinction_F.exe"+8B4476: 80 B9 88 3A 00 00 00 - cmp byte ptr [rcx+00003A88],00
"SecondExtinction_F.exe"+8B447D: 74 19 - je SecondExtinction_F.exe+8B4498
"SecondExtinction_F.exe"+8B447F: 48 8B 89 B0 0C 00 00 - mov rcx,[rcx+00000CB0]
}
9
"2"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTSSS,SecondExtinction_F.exe,F3 0F 11 96 E8 01 00 00 48 8B 06 48 8B CE) // should be unique
alloc(newmemsss,$1000,"SecondExtinction_F.exe"+8B49E8)
label(codesss)
label(returnsss)
newmemsss:
codesss:
//movss [rsi+000001E8],xmm2
add [rsi+000001E8],(int)0
jmp returnsss
INJECTSSS:
jmp newmemsss
nop 3
returnsss:
registersymbol(INJECTSSS)
[DISABLE]
INJECTSSS:
db F3 0F 11 96 E8 01 00 00
unregistersymbol(INJECTSSS)
dealloc(newmemsss)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+8B49E8
"SecondExtinction_F.exe"+8B49B9: 48 89 74 24 70 - mov [rsp+70],rsi
"SecondExtinction_F.exe"+8B49BE: 48 8B F1 - mov rsi,rcx
"SecondExtinction_F.exe"+8B49C1: 33 FF - xor edi,edi
"SecondExtinction_F.exe"+8B49C3: 40 38 B9 E1 01 00 00 - cmp [rcx+000001E1],dil
"SecondExtinction_F.exe"+8B49CA: 0F 84 8E 00 00 00 - je SecondExtinction_F.exe+8B4A5E
"SecondExtinction_F.exe"+8B49D0: E8 DB 04 00 00 - call SecondExtinction_F.exe+8B4EB0
"SecondExtinction_F.exe"+8B49D5: F3 0F 10 96 E8 01 00 00 - movss xmm2,[rsi+000001E8]
"SecondExtinction_F.exe"+8B49DD: F3 0F 5C D0 - subss xmm2,xmm0
"SecondExtinction_F.exe"+8B49E1: 0F 57 C0 - xorps xmm0,xmm0
"SecondExtinction_F.exe"+8B49E4: F3 0F 5F D0 - maxss xmm2,xmm0
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+8B49E8: F3 0F 11 96 E8 01 00 00 - movss [rsi+000001E8],xmm2
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+8B49F0: 48 8B 06 - mov rax,[rsi]
"SecondExtinction_F.exe"+8B49F3: 48 8B CE - mov rcx,rsi
"SecondExtinction_F.exe"+8B49F6: FF 90 E0 01 00 00 - call qword ptr [rax+000001E0]
"SecondExtinction_F.exe"+8B49FC: 84 C0 - test al,al
"SecondExtinction_F.exe"+8B49FE: 75 7B - jne SecondExtinction_F.exe+8B4A7B
"SecondExtinction_F.exe"+8B4A00: 48 8B 86 D8 01 00 00 - mov rax,[rsi+000001D8]
"SecondExtinction_F.exe"+8B4A07: 40 38 B8 88 3A 00 00 - cmp [rax+00003A88],dil
"SecondExtinction_F.exe"+8B4A0E: 74 1E - je SecondExtinction_F.exe+8B4A2E
"SecondExtinction_F.exe"+8B4A10: 48 8B 88 B0 0C 00 00 - mov rcx,[rax+00000CB0]
"SecondExtinction_F.exe"+8B4A17: 48 85 C9 - test rcx,rcx
}
21
"3"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTSR,SecondExtinction_F.exe,F3 0F 11 8B E8 01 00 00 FF 90 38 02 00 00) // should be unique
alloc(newmemsr,$1000,"SecondExtinction_F.exe"+8B4C86)
label(codesr)
label(returnsr)
newmemsr:
codesr:
//movss [rbx+000001E8],xmm1
mov [rbx+000001E8],(int)1148846080
jmp returnsr
INJECTSR:
jmp newmemsr
nop 3
returnsr:
registersymbol(INJECTSR)
[DISABLE]
INJECTSR:
db F3 0F 11 8B E8 01 00 00
unregistersymbol(INJECTSR)
dealloc(newmemsr)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+8B4C86
"SecondExtinction_F.exe"+8B4C51: F3 0F 59 35 07 9E 1C 02 - mulss xmm6,[SecondExtinction_F.exe+2A7EA60]
"SecondExtinction_F.exe"+8B4C59: 0F 57 FF - xorps xmm7,xmm7
"SecondExtinction_F.exe"+8B4C5C: 48 8B CB - mov rcx,rbx
"SecondExtinction_F.exe"+8B4C5F: F3 0F 59 94 83 F4 01 00 00 - mulss xmm2,[rbx+rax*4+000001F4]
"SecondExtinction_F.exe"+8B4C68: 48 8B 03 - mov rax,[rbx]
"SecondExtinction_F.exe"+8B4C6B: F3 0F 59 F2 - mulss xmm6,xmm2
"SecondExtinction_F.exe"+8B4C6F: 0F 28 CE - movaps xmm1,xmm6
"SecondExtinction_F.exe"+8B4C72: F3 0F 58 8B E8 01 00 00 - addss xmm1,[rbx+000001E8]
"SecondExtinction_F.exe"+8B4C7A: F3 0F 5F CF - maxss xmm1,xmm7
"SecondExtinction_F.exe"+8B4C7E: F3 0F 5D 0D 06 A8 1C 02 - minss xmm1,[SecondExtinction_F.exe+2A7F48C]
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+8B4C86: F3 0F 11 8B E8 01 00 00 - movss [rbx+000001E8],xmm1
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+8B4C8E: FF 90 38 02 00 00 - call qword ptr [rax+00000238]
"SecondExtinction_F.exe"+8B4C94: 84 C0 - test al,al
"SecondExtinction_F.exe"+8B4C96: 74 1C - je SecondExtinction_F.exe+8B4CB4
"SecondExtinction_F.exe"+8B4C98: F3 0F 58 B3 10 02 00 00 - addss xmm6,[rbx+00000210]
"SecondExtinction_F.exe"+8B4CA0: F3 0F 5F F7 - maxss xmm6,xmm7
"SecondExtinction_F.exe"+8B4CA4: F3 0F 5D 35 E0 A7 1C 02 - minss xmm6,[SecondExtinction_F.exe+2A7F48C]
"SecondExtinction_F.exe"+8B4CAC: F3 0F 11 B3 10 02 00 00 - movss [rbx+00000210],xmm6
"SecondExtinction_F.exe"+8B4CB4: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
"SecondExtinction_F.exe"+8B4CB9: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
"SecondExtinction_F.exe"+8B4CBE: 48 83 C4 40 - add rsp,40
}
43
"No Minigun Overheat"
1
71
"1"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTM,SecondExtinction_F.exe,F3 41 0F 11 87 60 06 00 00) // should be unique
alloc(newmemm,$1000,"SecondExtinction_F.exe"+91CFA1)
label(codem)
label(returnm)
newmemm:
codem:
//movss [r15+00000660],xmm0
add [r15+00000660],(int)0
jmp returnm
INJECTM:
jmp newmemm
nop 4
returnm:
registersymbol(INJECTM)
[DISABLE]
INJECTM:
db F3 41 0F 11 87 60 06 00 00
unregistersymbol(INJECTM)
dealloc(newmemm)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+91CFA1
"SecondExtinction_F.exe"+91CF73: 74 7C - je SecondExtinction_F.exe+91CFF1
"SecondExtinction_F.exe"+91CF75: 48 8B 38 - mov rdi,[rax]
"SecondExtinction_F.exe"+91CF78: 48 8B C7 - mov rax,rdi
"SecondExtinction_F.exe"+91CF7B: 38 98 CD 00 00 00 - cmp [rax+000000CD],bl
"SecondExtinction_F.exe"+91CF81: 41 0F 95 C6 - setne r14l
"SecondExtinction_F.exe"+91CF85: E8 36 CB FF FF - call SecondExtinction_F.exe+919AC0
"SecondExtinction_F.exe"+91CF8A: 3C 01 - cmp al,01
"SecondExtinction_F.exe"+91CF8C: 40 0F 97 C6 - seta sil
"SecondExtinction_F.exe"+91CF90: F3 41 0F 10 87 60 06 00 00 - movss xmm0,[r15+00000660]
"SecondExtinction_F.exe"+91CF99: F3 0F 5C 87 F4 00 00 00 - subss xmm0,[rdi+000000F4]
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+91CFA1: F3 41 0F 11 87 60 06 00 00 - movss [r15+00000660],xmm0
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+91CFAA: F3 0F 10 B7 DC 00 00 00 - movss xmm6,[rdi+000000DC]
"SecondExtinction_F.exe"+91CFB2: 0F 57 C0 - xorps xmm0,xmm0
"SecondExtinction_F.exe"+91CFB5: 0F 2F F0 - comiss xmm6,xmm0
"SecondExtinction_F.exe"+91CFB8: 0F 86 D5 00 00 00 - jbe SecondExtinction_F.exe+91D093
"SecondExtinction_F.exe"+91CFBE: 48 89 5D C8 - mov [rbp-38],rbx
"SecondExtinction_F.exe"+91CFC2: 4D 8B 87 D8 05 00 00 - mov r8,[r15+000005D8]
"SecondExtinction_F.exe"+91CFC9: 4C 89 45 D0 - mov [rbp-30],r8
"SecondExtinction_F.exe"+91CFCD: 4D 85 C0 - test r8,r8
"SecondExtinction_F.exe"+91CFD0: 74 56 - je SecondExtinction_F.exe+91D028
"SecondExtinction_F.exe"+91CFD2: 41 8B 50 08 - mov edx,[r8+08]
}
72
"2"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTMM,SecondExtinction_F.exe,F3 0F 11 36 EB 56) // should be unique
alloc(newmemmm,$1000,"SecondExtinction_F.exe"+923729)
label(codemm)
label(returnmm)
newmemmm:
codemm:
//movss [rsi],xmm6
add [rsi],(int)0
jmp SecondExtinction_F.exe+923785
jmp returnmm
INJECTMM:
jmp newmemmm
nop
returnmm:
registersymbol(INJECTMM)
[DISABLE]
INJECTMM:
db F3 0F 11 36 EB 56
unregistersymbol(INJECTMM)
dealloc(newmemmm)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+923729
"SecondExtinction_F.exe"+9236FA: 48 8B CB - mov rcx,rbx
"SecondExtinction_F.exe"+9236FD: E8 2E 4D FF FF - call SecondExtinction_F.exe+918430
"SecondExtinction_F.exe"+923702: 40 38 BB 3A 02 00 00 - cmp [rbx+0000023A],dil
"SecondExtinction_F.exe"+923709: 74 24 - je SecondExtinction_F.exe+92372F
"SecondExtinction_F.exe"+92370B: 0F B6 83 74 06 00 00 - movzx eax,byte ptr [rbx+00000674]
"SecondExtinction_F.exe"+923712: 84 C0 - test al,al
"SecondExtinction_F.exe"+923714: 75 19 - jne SecondExtinction_F.exe+92372F
"SecondExtinction_F.exe"+923716: 48 8D B3 60 06 00 00 - lea rsi,[rbx+00000660]
"SecondExtinction_F.exe"+92371D: F3 0F 59 B3 64 06 00 00 - mulss xmm6,[rbx+00000664]
"SecondExtinction_F.exe"+923725: F3 0F 58 36 - addss xmm6,[rsi]
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+923729: F3 0F 11 36 - movss [rsi],xmm6
"SecondExtinction_F.exe"+92372D: EB 56 - jmp SecondExtinction_F.exe+923785
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+92372F: 0F B6 8B 74 06 00 00 - movzx ecx,byte ptr [rbx+00000674]
"SecondExtinction_F.exe"+923736: 0F B6 C1 - movzx eax,cl
"SecondExtinction_F.exe"+923739: 48 8D B3 60 06 00 00 - lea rsi,[rbx+00000660]
"SecondExtinction_F.exe"+923740: F3 0F 10 0E - movss xmm1,[rsi]
"SecondExtinction_F.exe"+923744: 84 C9 - test cl,cl
"SecondExtinction_F.exe"+923746: 74 0A - je SecondExtinction_F.exe+923752
"SecondExtinction_F.exe"+923748: F3 0F 59 B3 6C 06 00 00 - mulss xmm6,[rbx+0000066C]
"SecondExtinction_F.exe"+923750: EB 08 - jmp SecondExtinction_F.exe+92375A
"SecondExtinction_F.exe"+923752: F3 0F 59 B3 68 06 00 00 - mulss xmm6,[rbx+00000668]
"SecondExtinction_F.exe"+92375A: F3 0F 5C CE - subss xmm1,xmm6
}
46
"Speedhack"
Auto Assembler Script
[ENABLE]
luacall(speedhack_setSpeed(2.0))
[DISABLE]
luacall(speedhack_setSpeed(1))
26
"Super Damage (DISABLE BEFORE MAP LOADING AND GAS PUMP QUEST)"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECTOHK,SecondExtinction_F.exe,03 00 00 66 89 91 36 03 00 00) // should be unique
alloc(newmemohk,$1000,"SecondExtinction_F.exe"+8388D7)
label(codeohk)
label(returnohk)
newmemohk:
codeohk:
push ax
push bx
mov bx,(int)17500
mov ax,dx
sub ax,bx
mov [rcx+00000336],ax
pop bx
pop ax
jmp returnohk
INJECTOHK+3:
jmp newmemohk
nop 2
returnohk:
registersymbol(INJECTOHK)
[DISABLE]
INJECTOHK+3:
db 66 89 91 36 03 00 00
unregistersymbol(INJECTOHK)
dealloc(newmemohk)
{
// ORIGINAL CODE - INJECTION POINT: "SecondExtinction_F.exe"+8388D7
"SecondExtinction_F.exe"+8388AB: 4C 89 60 20 - mov [rax+20],r12
"SecondExtinction_F.exe"+8388AF: 0F 29 70 D8 - movaps [rax-28],xmm6
"SecondExtinction_F.exe"+8388B3: 0F 29 78 C8 - movaps [rax-38],xmm7
"SecondExtinction_F.exe"+8388B7: 49 8B F0 - mov rsi,r8
"SecondExtinction_F.exe"+8388BA: 44 0F B7 FA - movzx r15d,dx
"SecondExtinction_F.exe"+8388BE: 48 8B D9 - mov rbx,rcx
"SecondExtinction_F.exe"+8388C1: 4D 8B F0 - mov r14,r8
"SecondExtinction_F.exe"+8388C4: 49 8B F8 - mov rdi,r8
"SecondExtinction_F.exe"+8388C7: 44 0F B7 81 36 03 00 00 - movzx r8d,word ptr [rcx+00000336]
"SecondExtinction_F.exe"+8388CF: 66 44 89 81 38 03 00 00 - mov [rcx+00000338],r8w
// ---------- INJECTING HERE ----------
"SecondExtinction_F.exe"+8388D7: 66 89 91 36 03 00 00 - mov [rcx+00000336],dx
// ---------- DONE INJECTING ----------
"SecondExtinction_F.exe"+8388DE: 0F B7 89 2A 03 00 00 - movzx ecx,word ptr [rcx+0000032A]
"SecondExtinction_F.exe"+8388E5: 0F B7 C2 - movzx eax,dx
"SecondExtinction_F.exe"+8388E8: 66 85 C9 - test cx,cx
"SecondExtinction_F.exe"+8388EB: 74 0F - je SecondExtinction_F.exe+8388FC
"SecondExtinction_F.exe"+8388ED: 66 3B D1 - cmp dx,cx
"SecondExtinction_F.exe"+8388F0: 7D 0A - jnl SecondExtinction_F.exe+8388FC
"SecondExtinction_F.exe"+8388F2: 66 89 8B 36 03 00 00 - mov [rbx+00000336],cx
"SecondExtinction_F.exe"+8388F9: 0F B7 C1 - movzx eax,cx
"SecondExtinction_F.exe"+8388FC: 0F B7 8B 28 03 00 00 - movzx ecx,word ptr [rbx+00000328]
"SecondExtinction_F.exe"+838903: 66 3B C1 - cmp ax,cx
}
Toggle Activation
114
0
Activate
Deactivate
Change of movss [rbx+000001E8],xmm0
SecondExtinction_F.exe+8B4F60
15
F8
ED
88
01
F3
0F
11
83
E8
01
00
00
C7
83
10
02
00
Change of movss [rcx+000001E8],xmm0
SecondExtinction_F.exe+8B4F52
C1
F3
0F
5F
C2
F3
0F
11
81
E8
01
00
00
FF
15
F8
ED
88
Change of add dword ptr [rbx+000001E8],00
7FF660350000
83
83
E8
01
00
00
00
E9
8B
47
8D
00
Change of movss [rcx+000001E8],xmm0
SecondExtinction_F.exe+8B4F52
C1
F3
0F
5F
C2
F3
0F
11
81
E8
01
00
00
FF
15
F8
ED
88
Change of movss [rbx+000001E8],xmm0
SecondExtinction_F.exe+8B4F60
15
F8
ED
88
01
F3
0F
11
83
E8
01
00
00
C7
83
10
02
00
Change of add dword ptr [rbx+000001E8],00
7FF660350000
83
83
E8
01
00
00
00
E9
8B
47
8D
00
Change of movss [rbx+000001E8],xmm1
SecondExtinction_F.exe+8B4C86
0D
06
A8
1C
02
F3
0F
11
8B
E8
01
00
00
FF
90
38
02
00
Change of nop
SecondExtinction_F.exe+8B4C86
0D
06
A8
1C
02
90
90
90
90
90
90
90
90
FF
90
38
02
00
Change of movss [rbx+000001E8],xmm0
SecondExtinction_F.exe+8B478F
00
F3
0F
5C
C3
F3
0F
11
83
E8
01
00
00
48
8B
03
48
8B