1
"x"
0
Float
re3.exe+8D84B28
30
18
10
0
"y"
0
Float
re3.exe+8D84B28
34
18
10
2
"z"
0
Float
re3.exe+8D84B28
38
18
10
8
"Teleport Hack"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT,re3.exe,8B 47 30 89 06) // should be unique
alloc(newmem,$1000,INJECT)
registersymbol(INJECT flag)
label(code)
label(return)
label(xpos)
label(ypos)
label(zpos)
label(flag)
label(load)
newmem:
cmp [flag],1
je load
jmp code
load:
mov [flag],0
push rax
push rbx
mov rax,[re3.exe+8D84B28]
mov rbx,[rax+10]
mov rax,[rbx+18]
mov rbx,[xpos]
mov [rax+30],rbx
mov rax,[re3.exe+8D84B28]
mov rbx,[rax+10]
mov rax,[rbx+18]
mov rbx,[ypos]
mov [rax+34],rbx
mov rax,[re3.exe+8D84B28]
mov rbx,[rax+10]
mov rax,[rbx+18]
mov rbx,[zpos]
mov [rax+38],rbx
pop rbx
pop rax
code:
mov eax,[rdi+30]
mov [rsi],eax
jmp return
xpos:
dd (float)-149.3421173
ypos:
dd (float)37.99999619
zpos:
dd (float)-33.74887848
flag:
dd 0
INJECT:
jmp newmem
return:
[DISABLE]
INJECT:
db 8B 47 30 89 06
unregistersymbol(INJECT flag)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: re3.exe+22834E4
re3.exe+2283468: 0F 29 44 24 40 - movaps [rsp+40],xmm0
re3.exe+228346D: 0F 10 40 30 - movups xmm0,[rax+30]
re3.exe+2283471: 0F 29 44 24 50 - movaps [rsp+50],xmm0
re3.exe+2283476: F3 0F 10 47 30 - movss xmm0,[rdi+30]
re3.exe+228347B: 0F C6 C0 00 - shufps xmm0,xmm0,00
re3.exe+228347F: 0F 59 C8 - mulps xmm1,xmm0
re3.exe+2283482: F3 0F 10 47 38 - movss xmm0,[rdi+38]
re3.exe+2283487: 0F C6 C0 00 - shufps xmm0,xmm0,00
re3.exe+228348B: 0F 59 44 24 40 - mulps xmm0,[rsp+40]
re3.exe+2283490: 0F 58 D1 - addps xmm2,xmm1
re3.exe+2283493: 0F 58 D0 - addps xmm2,xmm0
re3.exe+2283496: 0F 58 54 24 50 - addps xmm2,[rsp+50]
re3.exe+228349B: 0F 28 C2 - movaps xmm0,xmm2
re3.exe+228349E: F3 0F 11 16 - movss [rsi],xmm2
re3.exe+22834A2: 0F 28 CA - movaps xmm1,xmm2
re3.exe+22834A5: 0F C6 C2 55 - shufps xmm0,xmm2,55
re3.exe+22834A9: 0F C6 CA AA - shufps xmm1,xmm2,-56
re3.exe+22834AD: 0F C6 D2 FF - shufps xmm2,xmm2,-01
re3.exe+22834B1: F3 0F 11 56 0C - movss [rsi+0C],xmm2
re3.exe+22834B6: F3 0F 11 46 04 - movss [rsi+04],xmm0
re3.exe+22834BB: F3 0F 11 4E 08 - movss [rsi+08],xmm1
re3.exe+22834C0: EB 39 - jmp re3.exe+22834FB
re3.exe+22834C2: 8B 87 B0 00 00 00 - mov eax,[rdi+000000B0]
re3.exe+22834C8: 89 06 - mov [rsi],eax
re3.exe+22834CA: 8B 87 B4 00 00 00 - mov eax,[rdi+000000B4]
re3.exe+22834D0: 89 46 04 - mov [rsi+04],eax
re3.exe+22834D3: 8B 87 B8 00 00 00 - mov eax,[rdi+000000B8]
re3.exe+22834D9: 89 46 08 - mov [rsi+08],eax
re3.exe+22834DC: 8B 87 BC 00 00 00 - mov eax,[rdi+000000BC]
re3.exe+22834E2: EB 14 - jmp re3.exe+22834F8
// ---------- INJECTING HERE ----------
re3.exe+22834E4: 8B 47 30 - mov eax,[rdi+30]
// ---------- DONE INJECTING ----------
re3.exe+22834E7: 89 06 - mov [rsi],eax
re3.exe+22834E9: 8B 47 34 - mov eax,[rdi+34]
re3.exe+22834EC: 89 46 04 - mov [rsi+04],eax
re3.exe+22834EF: 8B 47 38 - mov eax,[rdi+38]
re3.exe+22834F2: 89 46 08 - mov [rsi+08],eax
re3.exe+22834F5: 8B 47 3C - mov eax,[rdi+3C]
re3.exe+22834F8: 89 46 0C - mov [rsi+0C],eax
re3.exe+22834FB: 48 8B C6 - mov rax,rsi
re3.exe+22834FE: 48 8B 8C 24 E0 00 00 00 - mov rcx,[rsp+000000E0]
re3.exe+2283506: 48 33 CC - xor rcx,rsp
re3.exe+2283509: E8 12 AF 5B 02 - call re3.exe+483E420
re3.exe+228350E: 48 81 C4 F0 00 00 00 - add rsp,000000F0
re3.exe+2283515: 41 5E - pop r14
re3.exe+2283517: 5F - pop rdi
re3.exe+2283518: 5E - pop rsi
re3.exe+2283519: C3 - ret
re3.exe+228351A: CC - int 3
re3.exe+228351B: CC - int 3
re3.exe+228351C: CC - int 3
re3.exe+228351D: CC - int 3
re3.exe+228351E: CC - int 3
re3.exe+228351F: CC - int 3
re3.exe+2283520: 48 89 5C 24 10 - mov [rsp+10],rbx
re3.exe+2283525: 56 - push rsi
re3.exe+2283526: 48 83 EC 20 - sub rsp,20
re3.exe+228352A: 48 8B F1 - mov rsi,rcx
re3.exe+228352D: 48 89 7C 24 30 - mov [rsp+30],rdi
re3.exe+2283532: 48 8B 5E 60 - mov rbx,[rsi+60]
re3.exe+2283536: 48 85 DB - test rbx,rbx
re3.exe+2283539: 74 1A - je re3.exe+2283555
}
9
"F1: 足場の上にテレポートする（最初？のネメシス戦）"
0
4 Bytes
flag
Set Value
112
1
0
体力を減らす命令 :mov [r9+58],eax
re3.exe+BC60A0
0F
4E
C2
8B
00
41
89
41
58
C3
CC
CC
CC
CC