Code:
[ENABLE]
aobscanmodule(ZombieHealth,iw7_ship.exe,29 BB E0 01 00 00 33)
alloc(newmem,$1000,ZombieHealth)
label(OneHitKill)
label(code)
label(return)
newmem:
OneHitKill:
mov [rbx+000001E0],0
jmp return
code:
sub [rbx+000001E0],edi
jmp return
ZombieHealth:
jmp OneHitKill
nop
return:
registersymbol(ZombieHealth)
[DISABLE]
ZombieHealth:
db 29 BB E0 01 00 00
unregistersymbol(ZombieHealth)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: iw7_ship.exe+C1B227
iw7_ship.exe+C1B208: E8 43 B5 7D FF - call iw7_ship.exe+3F6750
iw7_ship.exe+C1B20D: 8B F8 - mov edi,eax
iw7_ship.exe+C1B20F: EB 04 - jmp iw7_ship.exe+C1B215
iw7_ship.exe+C1B211: 48 8B 75 80 - mov rsi,[rbp-80]
iw7_ship.exe+C1B215: 4C 8B 45 B8 - mov r8,[rbp-48]
iw7_ship.exe+C1B219: 8B D7 - mov edx,edi
iw7_ship.exe+C1B21B: 49 8B 0E - mov rcx,[r14]
iw7_ship.exe+C1B21E: E8 1D 85 AD FF - call iw7_ship.exe+6F3740
iw7_ship.exe+C1B223: 85 FF - test edi,edi
iw7_ship.exe+C1B225: 74 2F - je iw7_ship.exe+C1B256
// ---------- INJECTING HERE ----------
iw7_ship.exe+C1B227: 29 BB E0 01 00 00 - sub [rbx+000001E0],edi
// ---------- DONE INJECTING ----------
iw7_ship.exe+C1B22D: 33 C0 - xor eax,eax
iw7_ship.exe+C1B22F: 4C 8B 4D A8 - mov r9,[rbp-58]
iw7_ship.exe+C1B233: 4C 8B C6 - mov r8,rsi
iw7_ship.exe+C1B236: 8B 0D 1C FD 13 05 - mov ecx,[iw7_ship.exe+5D5AF58]
iw7_ship.exe+C1B23C: 48 8B D3 - mov rdx,rbx
iw7_ship.exe+C1B23F: 89 44 24 38 - mov [rsp+38],eax
iw7_ship.exe+C1B243: 89 7C 24 30 - mov [rsp+30],edi
iw7_ship.exe+C1B247: 48 89 44 24 28 - mov [rsp+28],rax
iw7_ship.exe+C1B24C: 48 89 44 24 20 - mov [rsp+20],rax
iw7_ship.exe+C1B251: E8 5A A3 7D FF - call iw7_ship.exe+3F55B0
}