1
"Peggle Multi Hack"
80000008
Auto Assembler Script
[enable]
//========================= LABELS, SYMBOLS, AOBSCANS, ETC'
alloc(allocMem,1024)
label(code_balls)
label(exit_balls)
label(done_balls)
label(code_score)
label(exit_score)
label(done_score)
label(i_balls)
label(i_score)
registersymbol(allocMem)
registersymbol(i_balls)
registersymbol(i_score)
aobscan(aob_balls,01 8c 86 7c 01 00 00)
registersymbol(aob_balls)
aobscan(aob_score,01 84 91 74 01 00 00)
registersymbol(aob_score)
//========================= ALLOC ADDRESS
allocMem:
//========================= BALLS HACK
code_balls:
pushfd
cmp [i_balls],0
je done_balls
push ecx
mov ecx,#99
cmp [esi+eax*4+17C],ecx
ja done_balls
mov [esi+eax*4+17C],ecx
jmp done_balls
done_balls:
pop ecx
popfd
jmp exit_balls
//========================= SCORE HACK
code_score:
pushfd
cmp [i_score],0
je done_score
push eax
mov eax,#9999999
cmp [ecx+edx*4+174],eax
ja done_score
mov [ecx+edx*4+174],eax
jmp done_score
done_score:
pop eax
popfd
jmp exit_score
//========================= DECLARING DEFAULT VARIABLES
i_balls:
dd 0
i_score:
dd 0
//========================= INJECTION POINTS
aob_balls:
jmp code_balls
exit_balls:
aob_score:
jmp code_score
exit_score:
[disable]
//========================= GIVE BACK THE ORIGINAL INSTRUCTIONS
aob_score:
add [ecx+edx*4+174],eax
aob_balls:
add [esi+eax*4+17C],ecx
//========================= UN-SYMBOL, DEALLOC, ETC'
unregistersymbol(allocMem)
unregistersymbol(aob_balls)
unregistersymbol(aob_score)
unregistersymbol(i_balls)
unregistersymbol(i_score)
dealloc(allocMem)
2
"allocMem"
1
80000008
4 Bytes
allocMem
5
"Balls hack"
80000008
4 Bytes
i_balls
6
"Score hack"
80000008
4 Bytes
i_score
Code :add [esi+eax*4+0000017C],ecx
0045D88F
Peggle.exe
5D88F
00
00
8B
4D
08
01
8C
86
7C
01
00
00
85
C9
8D
84
86
Code :add [ecx+edx*4+00000174],eax
0044832A
Peggle.exe
4832A
91
28
01
00
00
01
84
91
74
01
00
00
83
B9
28
01
00
i_balls
02390068
i_score
0239006C
aob_balls
0045D88F
aob_score
0044832A