Chicken Invaders 4 Cheat Table 2020-07-22

[ENABLE]

aobscanmodule(lives,CI4.exe,50 8B CE E8 7B CC EB FF) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
 mov eax,63
  push eax
  mov ecx,esi
  call CI4.exe+4D720
  jmp return

lives:
  jmp newmem
  nop
  nop
  nop
return:
registersymbol(lives)

[DISABLE]

lives:
  db 50 8B CE E8 7B CC EB FF

unregistersymbol(lives)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "CI4.exe"+190A9D

"CI4.exe"+190A72: A1 A8 2C 70 00           -  mov eax,[CI4.exe+302CA8]
"CI4.exe"+190A77: 33 C4                    -  xor eax,esp
"CI4.exe"+190A79: 50                       -  push eax
"CI4.exe"+190A7A: 8D 44 24 14              -  lea eax,[esp+14]
"CI4.exe"+190A7E: 64 A3 00 00 00 00        -  mov fs:[00000000],eax
"CI4.exe"+190A84: 8B E9                    -  mov ebp,ecx
"CI4.exe"+190A86: 80 BD 10 07 00 00 00     -  cmp byte ptr [ebp+00000710],00
"CI4.exe"+190A8D: 0F 85 BB 00 00 00        -  jne CI4.exe+190B4E
"CI4.exe"+190A93: 8B 44 24 24              -  mov eax,[esp+24]
"CI4.exe"+190A97: 8D B5 E0 01 00 00        -  lea esi,[ebp+000001E0]
// ---------- INJECTING HERE ----------
"CI4.exe"+190A9D: 50                       -  push eax
"CI4.exe"+190A9E: 8B CE                    -  mov ecx,esi
"CI4.exe"+190AA0: E8 7B CC EB FF           -  call CI4.exe+4D720
// ---------- DONE INJECTING  ----------
"CI4.exe"+190AA5: 8B 0D 9C 7C 71 00        -  mov ecx,[CI4.exe+317C9C]
"CI4.exe"+190AAB: 8B 51 24                 -  mov edx,[ecx+24]
"CI4.exe"+190AAE: 8B 42 0C                 -  mov eax,[edx+0C]
"CI4.exe"+190AB1: 80 B8 D0 01 00 00 00     -  cmp byte ptr [eax+000001D0],00
"CI4.exe"+190AB8: 8A 98 01 03 00 00        -  mov bl,[eax+00000301]
"CI4.exe"+190ABE: B2 01                    -  mov dl,01
"CI4.exe"+190AC0: 88 5C 24 24              -  mov [esp+24],bl
"CI4.exe"+190AC4: 88 54 24 25              -  mov [esp+25],dl
"CI4.exe"+190AC8: 74 18                    -  je CI4.exe+190AE2
"CI4.exe"+190ACA: 8B 41 24                 -  mov eax,[ecx+24]
}

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
mov eax,63
push eax
lea ecx,[edx+000003F0]

exit:
jmp returnhere

"CI4.exe"+191693:
jmp newmem
nop
nop
returnhere:


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"CI4.exe"+191693:
push eax
lea ecx,[edx+000003F0]
//Alt: db 50 8D 8A F0 03 00 00

{ Game   : CI4.exe
  Version:
  Date   : 2019-11-24
  Author : ChrisFaytePC

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJECT,CI4.exe,03 87 FC 02 00 00) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
mov [edi+000002FC],63
  add eax,[edi+000002FC]
  jmp return

INJECT:
  jmp newmem
  nop
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db 03 87 FC 02 00 00

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "CI4.exe"+12482F

"CI4.exe"+12480B: 55                    -  push ebp
"CI4.exe"+12480C: E8 3F D4 FF FF        -  call CI4.exe+121C50
"CI4.exe"+124811: 8B 8D BC 00 00 00     -  mov ecx,[ebp+000000BC]
"CI4.exe"+124817: E8 D4 25 05 00        -  call CI4.exe+176DF0
"CI4.exe"+12481C: 8B F0                 -  mov esi,eax
"CI4.exe"+12481E: 33 DB                 -  xor ebx,ebx
"CI4.exe"+124820: 3B F3                 -  cmp esi,ebx
"CI4.exe"+124822: 74 21                 -  je CI4.exe+124845
"CI4.exe"+124824: 8D 8E E8 02 00 00     -  lea ecx,[esi+000002E8]
"CI4.exe"+12482A: E8 E1 8E F2 FF        -  call CI4.exe+4D710
// ---------- INJECTING HERE ----------
"CI4.exe"+12482F: 03 87 FC 02 00 00     -  add eax,[edi+000002FC]
// ---------- DONE INJECTING  ----------
"CI4.exe"+124835: 51                    -  push ecx
"CI4.exe"+124836: 8B CC                 -  mov ecx,esp
"CI4.exe"+124838: 89 01                 -  mov [ecx],eax
"CI4.exe"+12483A: 8B CE                 -  mov ecx,esi
"CI4.exe"+12483C: 89 64 24 2C           -  mov [esp+2C],esp
"CI4.exe"+124840: E8 0B C6 06 00        -  call CI4.exe+190E50
"CI4.exe"+124845: 83 BF 00 03 00 00 09  -  cmp dword ptr [edi+00000300],09
"CI4.exe"+12484C: 75 1D                 -  jne CI4.exe+12486B
"CI4.exe"+12484E: 51                    -  push ecx
"CI4.exe"+12484F: 8B C4                 -  mov eax,esp
}