gistfile1.txt

{ Game   : Client.exe
  Version: 
  Date   : 2016-01-16
  Author : Strixx

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJECT,bsengine_Shipping.dll,F3 0F 11 43 5C 8B 10) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
  db 90 90 90 90 90
  jmp return

INJECT:
  jmp code
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db F3 0F 11 43 5C

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "bsengine_Shipping.dll"+5A8FF6

"bsengine_Shipping.dll"+5A8FC4: 89 4C 24 68           -  mov [esp+68],ecx
"bsengine_Shipping.dll"+5A8FC8: F3 0F 10 44 24 60     -  movss xmm0,[esp+60]
"bsengine_Shipping.dll"+5A8FCE: F3 0F 58 43 54        -  addss xmm0,[ebx+54]
"bsengine_Shipping.dll"+5A8FD3: 8B 45 10              -  mov eax,[ebp+10]
"bsengine_Shipping.dll"+5A8FD6: F3 0F 11 43 54        -  movss [ebx+54],xmm0
"bsengine_Shipping.dll"+5A8FDB: F3 0F 10 43 58        -  movss xmm0,[ebx+58]
"bsengine_Shipping.dll"+5A8FE0: F3 0F 58 44 24 64     -  addss xmm0,[esp+64]
"bsengine_Shipping.dll"+5A8FE6: F3 0F 11 43 58        -  movss [ebx+58],xmm0
"bsengine_Shipping.dll"+5A8FEB: F3 0F 10 43 5C        -  movss xmm0,[ebx+5C]
"bsengine_Shipping.dll"+5A8FF0: F3 0F 58 44 24 68     -  addss xmm0,[esp+68]
// ---------- INJECTING HERE ----------
"bsengine_Shipping.dll"+5A8FF6: F3 0F 11 43 5C        -  movss [ebx+5C],xmm0
// ---------- DONE INJECTING  ----------
"bsengine_Shipping.dll"+5A8FFB: 8B 10                 -  mov edx,[eax]
"bsengine_Shipping.dll"+5A8FFD: 89 53 60              -  mov [ebx+60],edx
"bsengine_Shipping.dll"+5A9000: 8B 48 04              -  mov ecx,[eax+04]
"bsengine_Shipping.dll"+5A9003: 89 4B 64              -  mov [ebx+64],ecx
"bsengine_Shipping.dll"+5A9006: 8B 50 08              -  mov edx,[eax+08]
"bsengine_Shipping.dll"+5A9009: 8B 03                 -  mov eax,[ebx]
"bsengine_Shipping.dll"+5A900B: 89 53 68              -  mov [ebx+68],edx
"bsengine_Shipping.dll"+5A900E: 8B 90 20 01 00 00     -  mov edx,[eax+00000120]
"bsengine_Shipping.dll"+5A9014: 8B CB                 -  mov ecx,ebx
"bsengine_Shipping.dll"+5A9016: FF D2                 -  call edx
}