563
"In-Game"
1
564
"Health Bar/Points"
1
113
"Stock Match"
F82F1F
1
136
"Player 1 Bars"
F82F1F
4 Bytes
"lethalleague.exe"+001A9E54
178
2A0
10
0
34
138
3C
134
"Player 2 Bars"
F82F1F
4 Bytes
"lethalleague.exe"+001A9E54
178
194
8
0
0
84
3C
120
"Player 3 Bars (P1 in 2v2)"
F82F1F
4 Bytes
"lethalleague.exe"+001A9E54
178
2A0
10
4
8
A4
3C
94
"Player 4 Bars (P2 in 2v2)"
F82F1F
4 Bytes
"lethalleague.exe"+001A9E54
178
2A0
10
8
A4
3C
Set Value
17
87
0
0
160
"Points Match"
25C539
1
170
"Player 1 Points"
25C539
4 Bytes
"lethalleague.exe"+001A9E54
17C
194
10
0
94
3C
287
"Player 2 Points (P1 in 2v2)"
25C539
4 Bytes
"lethalleague.exe"+001A9E54
17C
194
10
4
A4
3C
164
"Player 3 Points"
25C539
4 Bytes
"lethalleague.exe"+001A9E54
17C
194
10
8
4
A4
3C
173
"Player 4 Points (P2 in 2v2)"
25C539
4 Bytes
"lethalleague.exe"+001A9E54
17C
194
10
8
A4
3C
565
"Player Modifiers"
000000
1
642
"Instant respawn"
31B5BF
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+0000014C],00196672
exit:
jmp returnhere
"lethalleague.exe"+139E97:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+139E97:
mov [eax+0000014C],esi
//Alt: db 89 B0 4C 01 00 00
366
"No Hit Lag (Everyone)"
31B5BF
Auto Assembler Script
[ENABLE]
aobscanmodule(freeze,lethalleague.exe,89 90 3C 01 00 00 8B 55) // should be unique
define(freeze,lethalleague.exe+FB41C)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov [eax+0000013C],edx
jmp return
freeze:
jmp newmem
nop
return:
registersymbol(freeze)
[DISABLE]
freeze:
db 89 90 3C 01 00 00
unregistersymbol(freeze)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+FB41C
lethalleague.exe+FB3F0: 55 - push ebp
lethalleague.exe+FB3F1: 8B EC - mov ebp,esp
lethalleague.exe+FB3F3: 8B 81 A0 02 00 00 - mov eax,[ecx+000002A0]
lethalleague.exe+FB3F9: 8B 90 24 01 00 00 - mov edx,[eax+00000124]
lethalleague.exe+FB3FF: 89 90 2C 01 00 00 - mov [eax+0000012C],edx
lethalleague.exe+FB405: 8B 90 28 01 00 00 - mov edx,[eax+00000128]
lethalleague.exe+FB40B: 89 90 30 01 00 00 - mov [eax+00000130],edx
lethalleague.exe+FB411: 8B 81 A0 02 00 00 - mov eax,[ecx+000002A0]
lethalleague.exe+FB417: 8B 55 08 - mov edx,[ebp+08]
lethalleague.exe+FB41A: 8B 12 - mov edx,[edx]
// ---------- INJECTING HERE ----------
lethalleague.exe+FB41C: 89 90 3C 01 00 00 - mov [eax+0000013C],edx
// ---------- DONE INJECTING ----------
lethalleague.exe+FB422: 8B 55 10 - mov edx,[ebp+10]
lethalleague.exe+FB425: 8B 01 - mov eax,[ecx]
lethalleague.exe+FB427: 8B 80 E8 00 00 00 - mov eax,[eax+000000E8]
lethalleague.exe+FB42D: 52 - push edx
lethalleague.exe+FB42E: 8B 55 0C - mov edx,[ebp+0C]
lethalleague.exe+FB431: 52 - push edx
lethalleague.exe+FB432: FF D0 - call eax
lethalleague.exe+FB434: 5D - pop ebp
lethalleague.exe+FB435: C2 0C 00 - ret 000C
lethalleague.exe+FB438: CC - int 3
}
568
"Hit Lag (Individual) (Freeze value at 0)"
31B5BF
1
380
"P1 Hit Lag"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
13C
2A0
C
C
0
84
3C
412
"P2 Hit Lag"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
13C
2A0
8
0
0
84
3C
400
"P3 Hit Lag"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
13C
2A0
10
8
A4
3C
401
"P4 Hit Lag"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
13C
2A0
10
8
A4
3C
227
"Always Have Special"
31B5BF
1
143
"Everyone"
31B5BF
Auto Assembler Script
[ENABLE]
aobscanmodule(checkthis,lethalleague.exe,81 B8 50 01 00 00 00 00 64 00 0F 8C B1) // should be unique
define(checkthis,lethalleague.exe+FC081)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//cmp [eax+00000150],lethalleague.exe+30000
jmp return
checkthis:
jmp newmem
nop 5
return:
registersymbol(checkthis)
[DISABLE]
checkthis:
db 81 B8 50 01 00 00 00 00 64 00
unregistersymbol(checkthis)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+FC081
lethalleague.exe+FC056: 56 - push esi
lethalleague.exe+FC057: 8B F1 - mov esi,ecx
lethalleague.exe+FC059: 8B 86 A0 02 00 00 - mov eax,[esi+000002A0]
lethalleague.exe+FC05F: 81 B8 50 01 00 00 00 00 64 00 - cmp [eax+00000150],lethalleague.exe+30000
lethalleague.exe+FC069: 57 - push edi
lethalleague.exe+FC06A: 0F 8D D2 00 00 00 - jnl lethalleague.exe+FC142
lethalleague.exe+FC070: 8B 4D 08 - mov ecx,[ebp+08]
lethalleague.exe+FC073: 8B 11 - mov edx,[ecx]
lethalleague.exe+FC075: 01 90 50 01 00 00 - add [eax+00000150],edx
lethalleague.exe+FC07B: 8B 86 A0 02 00 00 - mov eax,[esi+000002A0]
// ---------- INJECTING HERE ----------
lethalleague.exe+FC081: 81 B8 50 01 00 00 00 00 64 00 - cmp [eax+00000150],lethalleague.exe+30000
// ---------- DONE INJECTING ----------
lethalleague.exe+FC08B: 0F 8C B1 00 00 00 - jl lethalleague.exe+FC142
lethalleague.exe+FC091: D9 86 B8 03 00 00 - fld dword ptr [esi+000003B8]
lethalleague.exe+FC097: DD 05 D8 57 77 00 - fld qword ptr [lethalleague.exe+1657D8]
lethalleague.exe+FC09D: DC C9 - fmul st(1),st(0)
lethalleague.exe+FC09F: D9 C9 - fxch st(1)
lethalleague.exe+FC0A1: D9 5D 08 - fstp dword ptr [ebp+08]
lethalleague.exe+FC0A4: D9 EE - fldz
lethalleague.exe+FC0A6: D9 45 08 - fld dword ptr [ebp+08]
lethalleague.exe+FC0A9: D8 D1 - fcom st(0),st(1)
lethalleague.exe+FC0AB: DF E0 - fnstsw ax
}
213
"Player 1 and 3 (set value to 6553600)"
31B5BF
4 Bytes
"lethalleague.exe"+001A9E54
150
2A0
10
0
34
138
3C
226
"Player 2 and 4 (set value to 6553600)"
31B5BF
4 Bytes
"lethalleague.exe"+001A9E54
150
194
10
8
4
A4
3C
133
"Player States - 3 dead (Ctrl + K to kill all)"
0D0DFB
1
131
"Player 1"
0D0DFB
4 Bytes
"lethalleague.exe"+001A9E54
134
2A0
10
0
A4
3C
Set Value
17
75
3
0
87
"Player 2"
0
0D0DFB
4 Bytes
"lethalleague.exe"+001A9E54
134
194
10
4
34
138
3C
Set Value
17
75
3
0
132
"Player 3"
0D0DFB
4 Bytes
"lethalleague.exe"+001A9E54
134
2A0
10
4
8
A4
3C
Set Value
17
75
3
0
126
"Player 4 (P2 in 2v2)"
0
0D0DFB
8 Bytes
"lethalleague.exe"+001A9E54
134
194
10
8
34
138
3C
Set Value
17
75
3
0
351
"Character Collision/Location"
0D0DFB
1
593
"Everyone is invincible (and a bit slidey)"
0D0DFB
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov ebx,00000000
exit:
jmp returnhere
"lethalleague.exe"+10315E:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+10315E:
mov ebx,00000001
//Alt: db BB 01 00 00 00
658
"X and Y Coordinates (Shift + Arrow Keys)"
1
349
"x value"
0
0D0DFB
4 Bytes
"lethalleague.exe"+001A9E54
18
28
2A8
10
0
A4
3C
Decrease Value
16
37
1000000
0
Increase Value
16
39
100000
1
282
"Y Value"
0
0D0DFB
4 Bytes
"lethalleague.exe"+001A9E54
1C
28
2A8
8
0
84
3C
Decrease Value
16
38
5000000
0
Increase Value
16
40
5000000
1
264
"No Collide (Floor/Ceiling)"
0D0DFB
Auto Assembler Script
[ENABLE]
aobscanmodule(collidefloor,lethalleague.exe,89 51 1C 5D C2 04 00) // should be unique
alloc(newmem,$1000)
define(collidefloor,lethalleague.exe+13DCC8)
label(code)
label(return)
newmem:
code:
//mov [ecx+1C],edx
pop ebp
ret 0004
jmp return
collidefloor:
jmp newmem
nop 2
return:
registersymbol(collidefloor)
[DISABLE]
collidefloor:
db 89 51 1C 5D C2 04 00
unregistersymbol(collidefloor)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+13DCC8
lethalleague.exe+13DCB3: 8B 45 08 - mov eax,[ebp+08]
lethalleague.exe+13DCB6: 8B 10 - mov edx,[eax]
lethalleague.exe+13DCB8: 89 51 18 - mov [ecx+18],edx
lethalleague.exe+13DCBB: 5D - pop ebp
lethalleague.exe+13DCBC: C2 04 00 - ret 0004
lethalleague.exe+13DCBF: CC - int 3
lethalleague.exe+13DCC0: 55 - push ebp
lethalleague.exe+13DCC1: 8B EC - mov ebp,esp
lethalleague.exe+13DCC3: 8B 45 08 - mov eax,[ebp+08]
lethalleague.exe+13DCC6: 8B 10 - mov edx,[eax]
// ---------- INJECTING HERE ----------
lethalleague.exe+13DCC8: 89 51 1C - mov [ecx+1C],edx
// ---------- DONE INJECTING ----------
lethalleague.exe+13DCCB: 5D - pop ebp
lethalleague.exe+13DCCC: C2 04 00 - ret 0004
lethalleague.exe+13DCCF: CC - int 3
lethalleague.exe+13DCD0: 55 - push ebp
lethalleague.exe+13DCD1: 8B EC - mov ebp,esp
lethalleague.exe+13DCD3: 8B 45 08 - mov eax,[ebp+08]
lethalleague.exe+13DCD6: 89 41 28 - mov [ecx+28],eax
lethalleague.exe+13DCD9: 5D - pop ebp
lethalleague.exe+13DCDA: C2 04 00 - ret 0004
lethalleague.exe+13DCDD: CC - int 3
}
350
"No Collide (Walls)"
0D0DFB
Auto Assembler Script
[ENABLE]
aobscanmodule(nowalls,lethalleague.exe,89 51 18 5D C2 04 00) // should be unique
define(nowalls,lethalleague.exe+13DCB8)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov [ecx+18],edx
pop ebp
ret 0004
jmp return
nowalls:
jmp newmem
nop 2
return:
registersymbol(nowalls)
[DISABLE]
nowalls:
db 89 51 18 5D C2 04 00
unregistersymbol(nowalls)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+13DCB8
lethalleague.exe+13DCAA: CC - int 3
lethalleague.exe+13DCAB: CC - int 3
lethalleague.exe+13DCAC: CC - int 3
lethalleague.exe+13DCAD: CC - int 3
lethalleague.exe+13DCAE: CC - int 3
lethalleague.exe+13DCAF: CC - int 3
lethalleague.exe+13DCB0: 55 - push ebp
lethalleague.exe+13DCB1: 8B EC - mov ebp,esp
lethalleague.exe+13DCB3: 8B 45 08 - mov eax,[ebp+08]
lethalleague.exe+13DCB6: 8B 10 - mov edx,[eax]
// ---------- INJECTING HERE ----------
lethalleague.exe+13DCB8: 89 51 18 - mov [ecx+18],edx
// ---------- DONE INJECTING ----------
lethalleague.exe+13DCBB: 5D - pop ebp
lethalleague.exe+13DCBC: C2 04 00 - ret 0004
lethalleague.exe+13DCBF: CC - int 3
lethalleague.exe+13DCC0: 55 - push ebp
lethalleague.exe+13DCC1: 8B EC - mov ebp,esp
lethalleague.exe+13DCC3: 8B 45 08 - mov eax,[ebp+08]
lethalleague.exe+13DCC6: 8B 10 - mov edx,[eax]
lethalleague.exe+13DCC8: 89 51 1C - mov [ecx+1C],edx
lethalleague.exe+13DCCB: 5D - pop ebp
lethalleague.exe+13DCCC: C2 04 00 - ret 0004
}
96
"Hit the ball instead of dying"
0D0DFB
Auto Assembler Script
[ENABLE]
aobscanmodule(allhit,lethalleague.exe,8B 81 34 01 00 00 83 F8 03) // should be unique
define(allhit,lethalleague.exe+FB071)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov eax,[ecx+00000134]
jmp return
allhit:
jmp newmem
nop
return:
registersymbol(allhit)
[DISABLE]
allhit:
db 8B 81 34 01 00 00
unregistersymbol(allhit)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+FB071
lethalleague.exe+FB040: C7 82 50 01 00 00 00 00 00 00 - mov [edx+00000150],00000000
lethalleague.exe+FB04A: 5F - pop edi
lethalleague.exe+FB04B: 8B 4D 08 - mov ecx,[ebp+08]
lethalleague.exe+FB04E: 8B 86 A0 02 00 00 - mov eax,[esi+000002A0]
lethalleague.exe+FB054: 8B 11 - mov edx,[ecx]
lethalleague.exe+FB056: 29 90 3C 01 00 00 - sub [eax+0000013C],edx
lethalleague.exe+FB05C: 8B 86 A0 02 00 00 - mov eax,[esi+000002A0]
lethalleague.exe+FB062: 83 B8 3C 01 00 00 00 - cmp dword ptr [eax+0000013C],00
lethalleague.exe+FB069: 0F 8F 7D 01 00 00 - jg lethalleague.exe+FB1EC
lethalleague.exe+FB06F: 8B C8 - mov ecx,eax
// ---------- INJECTING HERE ----------
lethalleague.exe+FB071: 8B 81 34 01 00 00 - mov eax,[ecx+00000134]
// ---------- DONE INJECTING ----------
lethalleague.exe+FB077: 83 F8 03 - cmp eax,03
lethalleague.exe+FB07A: 75 15 - jne lethalleague.exe+FB091
lethalleague.exe+FB07C: 8B 16 - mov edx,[esi]
lethalleague.exe+FB07E: 8B 82 E8 00 00 00 - mov eax,[edx+000000E8]
lethalleague.exe+FB084: 6A 00 - push 00
lethalleague.exe+FB086: 6A 12 - push 12
lethalleague.exe+FB088: 8B CE - mov ecx,esi
lethalleague.exe+FB08A: FF D0 - call eax
lethalleague.exe+FB08C: 5E - pop esi
lethalleague.exe+FB08D: 5D - pop ebp
}
566
"Ball Modifiers"
000000
1
172
"Ball"
B44BA2
1
64
"Ball Speed (ctrl + p max, ctrl + o stop)"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
12C
198
10
8
B4
3C
Set Value
17
80
1000000
superspeed
0
Set Value
17
79
0
1
408
"Max Speed (default is 1000000)"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
19C
10
4
8
0
B4
3C
657
"No Hit Lag (Ball)"
B44BA2
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+00000128],1000
exit:
jmp returnhere
"lethalleague.exe"+1F1AE:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+1F1AE:
mov [eax+00000128],edx
//Alt: db 89 90 28 01 00 00
656
"Ball Go Zoom"
B44BA2
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
nop
nop
nop
nop
nop
exit:
jmp returnhere
"lethalleague.exe"+1F1AE:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+1F1AE:
mov [eax+00000128],edx
//Alt: db 89 90 28 01 00 00
384
"Hitting Power"
B44BA2
1
352
"Battin' a Thousand (Standard hits are stronger)"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(hitadd,lethalleague.exe,01 90 2C 01 00 00) // should be unique
define(hitadd,lethalleague.exe+24A64)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add [eax+0000012C],00000400
jmp return
hitadd:
jmp newmem
nop
return:
registersymbol(hitadd)
[DISABLE]
hitadd:
db 01 90 2C 01 00 00
unregistersymbol(hitadd)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+24A64
lethalleague.exe+24A42: 0F B7 C0 - movzx eax,ax
lethalleague.exe+24A45: 83 F8 64 - cmp eax,64
lethalleague.exe+24A48: 76 05 - jna lethalleague.exe+24A4F
lethalleague.exe+24A4A: B8 64 00 00 00 - mov eax,00000064
lethalleague.exe+24A4F: 0F B7 C0 - movzx eax,ax
lethalleague.exe+24A52: 89 82 5C 01 00 00 - mov [edx+0000015C],eax
lethalleague.exe+24A58: 8B 81 98 01 00 00 - mov eax,[ecx+00000198]
lethalleague.exe+24A5E: 8B 4D 08 - mov ecx,[ebp+08]
lethalleague.exe+24A61: 8B 11 - mov edx,[ecx]
lethalleague.exe+24A63: 42 - inc edx
// ---------- INJECTING HERE ----------
lethalleague.exe+24A64: 01 90 2C 01 00 00 - add [eax+0000012C],edx
// ---------- DONE INJECTING ----------
lethalleague.exe+24A6A: 5D - pop ebp
lethalleague.exe+24A6B: C2 04 00 - ret 0004
lethalleague.exe+24A6E: CC - int 3
lethalleague.exe+24A6F: CC - int 3
lethalleague.exe+24A70: 8B 81 AC 02 00 00 - mov eax,[ecx+000002AC]
lethalleague.exe+24A76: C7 80 5C 01 00 00 00 00 00 00 - mov [eax+0000015C],00000000
lethalleague.exe+24A80: 8B 89 98 01 00 00 - mov ecx,[ecx+00000198]
lethalleague.exe+24A86: 8B 91 2C 01 00 00 - mov edx,[ecx+0000012C]
lethalleague.exe+24A8C: 03 D2 - add edx,edx
lethalleague.exe+24A8E: 89 91 2C 01 00 00 - mov [ecx+0000012C],edx
}
353
"Powerful Down Swing"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(fasthit,lethalleague.exe,89 91 2C 01 00 00 C3) // should be unique
define(fasthit,lethalleague.exe+24A8E)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add [ecx+0000012C],7500
jmp return
fasthit:
jmp newmem
nop
return:
registersymbol(fasthit)
[DISABLE]
fasthit:
db 89 91 2C 01 00 00
unregistersymbol(fasthit)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+24A8E
lethalleague.exe+24A69: 90 - nop
lethalleague.exe+24A6A: 5D - pop ebp
lethalleague.exe+24A6B: C2 04 00 - ret 0004
lethalleague.exe+24A6E: CC - int 3
lethalleague.exe+24A6F: CC - int 3
lethalleague.exe+24A70: 8B 81 AC 02 00 00 - mov eax,[ecx+000002AC]
lethalleague.exe+24A76: C7 80 5C 01 00 00 00 00 00 00 - mov [eax+0000015C],00000000
lethalleague.exe+24A80: 8B 89 98 01 00 00 - mov ecx,[ecx+00000198]
lethalleague.exe+24A86: 8B 91 2C 01 00 00 - mov edx,[ecx+0000012C]
lethalleague.exe+24A8C: 03 D2 - add edx,edx
// ---------- INJECTING HERE ----------
lethalleague.exe+24A8E: 89 91 2C 01 00 00 - mov [ecx+0000012C],edx
// ---------- DONE INJECTING ----------
lethalleague.exe+24A94: C3 - ret
lethalleague.exe+24A95: CC - int 3
lethalleague.exe+24A96: CC - int 3
lethalleague.exe+24A97: CC - int 3
lethalleague.exe+24A98: CC - int 3
lethalleague.exe+24A99: CC - int 3
lethalleague.exe+24A9A: CC - int 3
lethalleague.exe+24A9B: CC - int 3
lethalleague.exe+24A9C: CC - int 3
lethalleague.exe+24A9D: CC - int 3
}
367
"Mega Bunt"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(bunt,lethalleague.exe,89 81 2C 01 00 00 EB) // should be unique
define(bunt,lethalleague.exe+1010EE)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add [ecx+0000012C],5000
jmp return
bunt:
jmp newmem
nop
return:
registersymbol(bunt)
[DISABLE]
bunt:
db 89 81 2C 01 00 00
unregistersymbol(bunt)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+1010EE
lethalleague.exe+1010C7: 7C 16 - jl lethalleague.exe+1010DF
lethalleague.exe+1010C9: 8B 46 70 - mov eax,[esi+70]
lethalleague.exe+1010CC: 8B 80 CC 00 00 00 - mov eax,[eax+000000CC]
lethalleague.exe+1010D2: 8B 88 E8 00 00 00 - mov ecx,[eax+000000E8]
lethalleague.exe+1010D8: 6A 07 - push 07
lethalleague.exe+1010DA: E8 21 60 00 00 - call lethalleague.exe+107100
lethalleague.exe+1010DF: 8B 45 C4 - mov eax,[ebp-3C]
lethalleague.exe+1010E2: 8B 8F 98 01 00 00 - mov ecx,[edi+00000198]
lethalleague.exe+1010E8: 8A 5D D3 - mov bl,[ebp-2D]
lethalleague.exe+1010EB: 83 C0 FD - add eax,-03
// ---------- INJECTING HERE ----------
lethalleague.exe+1010EE: 89 81 2C 01 00 00 - mov [ecx+0000012C],eax
// ---------- DONE INJECTING ----------
lethalleague.exe+1010F4: EB 6C - jmp lethalleague.exe+101162
lethalleague.exe+1010F6: 80 7D B8 00 - cmp byte ptr [ebp-48],00
lethalleague.exe+1010FA: 75 5D - jne lethalleague.exe+101159
lethalleague.exe+1010FC: 8B 86 A0 02 00 00 - mov eax,[esi+000002A0]
lethalleague.exe+101102: 8B 8E 18 02 00 00 - mov ecx,[esi+00000218]
lethalleague.exe+101108: 39 88 54 01 00 00 - cmp [eax+00000154],ecx
lethalleague.exe+10110E: 7D 49 - jnl lethalleague.exe+101159
lethalleague.exe+101110: 8B 80 54 01 00 00 - mov eax,[eax+00000154]
lethalleague.exe+101116: 51 - push ecx
lethalleague.exe+101117: 50 - push eax
}
250
"Ball Tag - 0 Red - 1 Blue - 2 Yellow - 3 Green - 4 none"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
130
2AC
0
0
114
134
3C
251
"Extra required script for ball tag"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(wall,lethalleague.exe,89 81 30 01 00 00 8B 96 98 01 00 00 89 82 34 01 00 00 8B 8E) // should be unique
define(wall,lethalleague.exe+240E6)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov [ecx+00000130],eax
jmp return
wall:
jmp newmem
nop
return:
registersymbol(wall)
[DISABLE]
wall:
db 89 81 30 01 00 00
unregistersymbol(wall)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+240E6
lethalleague.exe+240BF: 52 - push edx
lethalleague.exe+240C0: E8 CB 63 08 00 - call lethalleague.exe+AA490
lethalleague.exe+240C5: 80 78 74 00 - cmp byte ptr [eax+74],00
lethalleague.exe+240C9: 8D 8D 70 FF FF FF - lea ecx,[ebp-00000090]
lethalleague.exe+240CF: 0F 94 C3 - sete bl
lethalleague.exe+240D2: E8 19 0E 05 00 - call lethalleague.exe+74EF0
lethalleague.exe+240D7: 84 DB - test bl,bl
lethalleague.exe+240D9: 74 1D - je lethalleague.exe+240F8
lethalleague.exe+240DB: 8B 8E 98 01 00 00 - mov ecx,[esi+00000198]
lethalleague.exe+240E1: B8 04 00 00 00 - mov eax,00000004
// ---------- INJECTING HERE ----------
lethalleague.exe+240E6: 89 81 30 01 00 00 - mov [ecx+00000130],eax
// ---------- DONE INJECTING ----------
lethalleague.exe+240EC: 8B 96 98 01 00 00 - mov edx,[esi+00000198]
lethalleague.exe+240F2: 89 82 34 01 00 00 - mov [edx+00000134],eax
lethalleague.exe+240F8: 8B 8E AC 02 00 00 - mov ecx,[esi+000002AC]
lethalleague.exe+240FE: 8B 81 44 01 00 00 - mov eax,[ecx+00000144]
lethalleague.exe+24104: 83 F8 0A - cmp eax,0A
lethalleague.exe+24107: 0F 85 8D 00 00 00 - jne lethalleague.exe+2419A
lethalleague.exe+2410D: 83 B9 40 01 00 00 00 - cmp dword ptr [ecx+00000140],00
lethalleague.exe+24114: 51 - push ecx
lethalleague.exe+24115: 8D 4D 08 - lea ecx,[ebp+08]
lethalleague.exe+24118: 7E 3E - jle lethalleague.exe+24158
}
247
"Ball Color"
B44BA2
4 Bytes
"lethalleague.exe"+001A9E54
134
2AC
0
38
C8
CC
3C
245
"Color Stays at Beginning (Cosmetic)"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT,lethalleague.exe,89 82 34 01 00 00 8B 06 8B 50 74) // should be unique
define(INJECT,lethalleague.exe+22B55)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov [edx+00000134],eax
jmp return
INJECT:
jmp newmem
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 89 82 34 01 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+22B55
lethalleague.exe+22B31: 53 - push ebx
lethalleague.exe+22B32: 8B CE - mov ecx,esi
lethalleague.exe+22B34: FF D0 - call eax
lethalleague.exe+22B36: 53 - push ebx
lethalleague.exe+22B37: 8B CE - mov ecx,esi
lethalleague.exe+22B39: E8 62 C7 09 00 - call lethalleague.exe+BF2A0
lethalleague.exe+22B3E: 8B 8E 98 01 00 00 - mov ecx,[esi+00000198]
lethalleague.exe+22B44: B8 04 00 00 00 - mov eax,00000004
lethalleague.exe+22B49: 89 81 30 01 00 00 - mov [ecx+00000130],eax
lethalleague.exe+22B4F: 8B 96 98 01 00 00 - mov edx,[esi+00000198]
// ---------- INJECTING HERE ----------
lethalleague.exe+22B55: 89 82 34 01 00 00 - mov [edx+00000134],eax
// ---------- DONE INJECTING ----------
lethalleague.exe+22B5B: 8B 06 - mov eax,[esi]
lethalleague.exe+22B5D: 8B 50 74 - mov edx,[eax+74]
lethalleague.exe+22B60: 8B CE - mov ecx,esi
lethalleague.exe+22B62: FF D2 - call edx
lethalleague.exe+22B64: E9 AE 03 00 00 - jmp lethalleague.exe+22F17
lethalleague.exe+22B69: 8B 86 AC 02 00 00 - mov eax,[esi+000002AC]
lethalleague.exe+22B6F: D9 EE - fldz
lethalleague.exe+22B71: 51 - push ecx
lethalleague.exe+22B72: D9 1C 24 - fstp dword ptr [esp]
lethalleague.exe+22B75: 33 DB - xor ebx,ebx
}
244
"Hitting won't change color (Cosmetic)"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(balltag,lethalleague.exe,89 98 34 01 00 00) // should be unique
define(balltag,lethalleague.exe+FB6AB)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//mov [eax+00000134],ebx
jmp return
balltag:
jmp newmem
nop
return:
registersymbol(balltag)
[DISABLE]
balltag:
db 89 98 34 01 00 00
unregistersymbol(balltag)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+FB6AB
lethalleague.exe+FB67A: 74 08 - je lethalleague.exe+FB684
lethalleague.exe+FB67C: 8B BE 9C 02 00 00 - mov edi,[esi+0000029C]
lethalleague.exe+FB682: EB 07 - jmp lethalleague.exe+FB68B
lethalleague.exe+FB684: 0F B6 BE BC 01 00 00 - movzx edi,byte ptr [esi+000001BC]
lethalleague.exe+FB68B: 8D 8D 08 FF FF FF - lea ecx,[ebp-000000F8]
lethalleague.exe+FB691: E8 5A 98 F7 FF - call lethalleague.exe+74EF0
lethalleague.exe+FB696: 8B 4D 08 - mov ecx,[ebp+08]
lethalleague.exe+FB699: 8B 91 98 01 00 00 - mov edx,[ecx+00000198]
lethalleague.exe+FB69F: 89 BA 30 01 00 00 - mov [edx+00000130],edi
lethalleague.exe+FB6A5: 8B 81 98 01 00 00 - mov eax,[ecx+00000198]
// ---------- INJECTING HERE ----------
lethalleague.exe+FB6AB: 89 98 34 01 00 00 - mov [eax+00000134],ebx
// ---------- DONE INJECTING ----------
lethalleague.exe+FB6B1: 8B 11 - mov edx,[ecx]
lethalleague.exe+FB6B3: 8B 42 2C - mov eax,[edx+2C]
lethalleague.exe+FB6B6: 56 - push esi
lethalleague.exe+FB6B7: FF D0 - call eax
lethalleague.exe+FB6B9: 5F - pop edi
lethalleague.exe+FB6BA: 5E - pop esi
lethalleague.exe+FB6BB: 5B - pop ebx
lethalleague.exe+FB6BC: 8B E5 - mov esp,ebp
lethalleague.exe+FB6BE: 5D - pop ebp
lethalleague.exe+FB6BF: C2 04 00 - ret 0004
}
411
"No Starting Hit Protection"
B44BA2
Auto Assembler Script
[ENABLE]
aobscanmodule(noprotect,lethalleague.exe,89 81 30 01 00 00 8B 96 98 01 00 00 89 82 34 01 00 00 8B 06 8B 50 7C) // should be unique
define(noprotect,lethalleague.exe+139D25)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
mov [ecx+00000130],04
jmp return
noprotect:
jmp newmem
nop
return:
registersymbol(noprotect)
[DISABLE]
noprotect:
db 89 81 30 01 00 00
unregistersymbol(noprotect)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: lethalleague.exe+139D25
lethalleague.exe+139CF7: 83 B9 44 01 00 00 0E - cmp dword ptr [ecx+00000144],0E
lethalleague.exe+139CFE: 75 6D - jne lethalleague.exe+139D6D
lethalleague.exe+139D00: 8B 81 7C 01 00 00 - mov eax,[ecx+0000017C]
lethalleague.exe+139D06: 8B 55 08 - mov edx,[ebp+08]
lethalleague.exe+139D09: 03 02 - add eax,[edx]
lethalleague.exe+139D0B: 89 81 7C 01 00 00 - mov [ecx+0000017C],eax
lethalleague.exe+139D11: 3B 87 00 01 00 00 - cmp eax,[edi+00000100]
lethalleague.exe+139D17: 7E 54 - jle lethalleague.exe+139D6D
lethalleague.exe+139D19: 8B 87 34 01 00 00 - mov eax,[edi+00000134]
lethalleague.exe+139D1F: 8B 8E 98 01 00 00 - mov ecx,[esi+00000198]
// ---------- INJECTING HERE ----------
lethalleague.exe+139D25: 89 81 30 01 00 00 - mov [ecx+00000130],eax
// ---------- DONE INJECTING ----------
lethalleague.exe+139D2B: 8B 96 98 01 00 00 - mov edx,[esi+00000198]
lethalleague.exe+139D31: 89 82 34 01 00 00 - mov [edx+00000134],eax
lethalleague.exe+139D37: 8B 06 - mov eax,[esi]
lethalleague.exe+139D39: 8B 50 7C - mov edx,[eax+7C]
lethalleague.exe+139D3C: 6A 00 - push 00
lethalleague.exe+139D3E: 8D 8F 2C 01 00 00 - lea ecx,[edi+0000012C]
lethalleague.exe+139D44: 51 - push ecx
lethalleague.exe+139D45: 8B CE - mov ecx,esi
lethalleague.exe+139D47: FF D2 - call edx
lethalleague.exe+139D49: 8B 86 AC 02 00 00 - mov eax,[esi+000002AC]
}
442
"Candyman Ball (One at a time)"
B44BA2
1
428
"Always Candyman Ball (no reset) (Ctrl + I)"
B44BA2
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+00000124],04
exit:
jmp returnhere
"lethalleague.exe"+22689:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+22689:
mov [eax+00000124],edi
//Alt: db 89 B8 24 01 00 00
Toggle Activation
17
73
0
441
"Wall Bounce Activates Candyman Ball (resets each round)"
B44BA2
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+00000124],04
exit:
jmp returnhere
"lethalleague.exe"+21126:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+21126:
mov eax,[eax+00000124]
//Alt: db 8B 80 24 01 00 00
435
"Ball never resets"
B44BA2
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+00000124],03
exit:
jmp returnhere
"lethalleague.exe"+22689:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+22689:
mov [eax+00000124],edi
//Alt: db 89 B8 24 01 00 00
588
"Screen won't change with high speeds."
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
nop
nop
nop
pop esi
pop ebp
exit:
jmp returnhere
"lethalleague.exe"+111B40:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+111B40:
mov [eax+38],cl
pop esi
pop ebp
//Alt: db 88 48 38 5E 5D
567
"Character Select Screen"
000000
1
577
"Force Stage Select (Ctrl + Y: ON) (Ctrl + U: OFF) Disable after using."
0ACB5B
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [edi+000000EC],02
exit:
jmp returnhere
"lethalleague.exe"+429BF:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+429BF:
mov eax,[edi+000000EC]
//Alt: db 8B 87 EC 00 00 00
Activate
17
89
0
Activate
Deactivate
17
85
1
348
"No Team Limit (Character Screen)"
0ACB5B
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
nop
nop
nop
mov eax,[ebp+10]
exit:
jmp returnhere
"lethalleague.exe"+3A2A4:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"lethalleague.exe"+3A2A4:
mov [ecx+08],eax
mov eax,[ebp+10]
//Alt: db 90 90 90 8B 45 10
543
"P1 Join as CPU (Disable when NOT on the character screen)"
0ACB5B
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the modification
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [esi+00000098],00
exit:
jmp returnhere
"lethalleague.exe"+C9B58:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the modification
dealloc(newmem)
"lethalleague.exe"+C9B58:
mov [esi+00000098],edi
//Alt: db 89 BE 98 00 00 00
562
"P1 Character (1536 for Doombox)"
0ACB5B
4 Bytes
"THREADSTACK0"-00000338
58
10
0
4
AC
18
4C
Change of movss [ecx],xmm4
YumeNikki.exe+7127FA
0C
89
8D
0C
8E
F3
0F
11
21
F3
0F
11
41
04
Change of mov byte ptr [edi+000000C8],01
070D4C63
F1
DD
D8
76
07
C6
87
C8
00
00
00
01
0F
B6
87
85
00
Change of mov byte ptr [edi+000000C8],00
070D7FB9
D8
7A
0E
77
0C
C6
87
C8
00
00
00
00
E9
4B
08
00
00
Change of mov [ecx+18],edx
lethalleague.exe+13DC78
8B
45
08
8B
10
89
51
18
8B
40
04
89
41
Change of mov [ecx+18],edx
lethalleague.exe+13DCB8
8B
45
08
8B
10
89
51
18
5D
C2
04
00
CC
Change of mov edx,[ecx+18]
lethalleague.exe+13DC53
CC
CC
55
8B
EC
8B
51
18
8B
45
08
89
10
Change of mov ecx,[esi+18]
lethalleague.exe+13DD4D
E5
5D
C2
04
00
8B
4E
18
8B
45
08
89
08
Change of add [eax+0000012C],edx
lethalleague.exe+24A64
4D
08
8B
11
42
01
90
2C
01
00
00
5D
C2
04
00
CC
Change of mov [ecx+0000012C],edx
lethalleague.exe+24A8E
01
00
00
03
D2
89
91
2C
01
00
00
C3
CC
CC
CC
CC
Change of mov [edx+0000012C],ecx
lethalleague.exe+101180
97
98
01
00
00
89
8A
2C
01
00
00
8B
8F
9C
01
00
Change of mov [ecx+00000134],eax
lethalleague.exe+103149
8E
A0
02
00
00
89
81
34
01
00
00
8B
96
A0
02
00
Change of cmp dword ptr [ecx+00000134],04
lethalleague.exe+C5495
8E
A0
02
00
00
83
B9
34
01
00
00
04
75
4D
8B
16
8B
Change of cmp dword ptr [ecx+00000134],12
lethalleague.exe+A3A2C
8F
A0
02
00
00
83
B9
34
01
00
00
12
75
59
80
7E
15
Change of mov eax,[ecx+00000134]
lethalleague.exe+FB071
01
00
00
8B
C8
8B
81
34
01
00
00
83
F8
03
75
15
Change of cmp dword ptr [eax+00000134],12
lethalleague.exe+A5087
87
A0
02
00
00
83
B8
34
01
00
00
12
89
5D
E0
74
5F
Change of cmp dword ptr [ecx+00000134],12
lethalleague.exe+A8A39
88
A0
02
00
00
83
B9
34
01
00
00
12
74
21
8B
48
14
Change of mov eax,[eax+00000134]
lethalleague.exe+FDBD0
86
A0
02
00
00
8B
80
34
01
00
00
57
83
F8
12
0F
Change of mov eax,[eax+00000134]
lethalleague.exe+100C16
86
A0
02
00
00
8B
80
34
01
00
00
83
F8
12
74
0C
Change of cmp dword ptr [eax+00000134],12
lethalleague.exe+139F2C
82
A0
02
00
00
83
B8
34
01
00
00
12
75
1F
8B
93
A0
Change of cmp dword ptr [eax+00000134],03
lethalleague.exe+2117C
87
A0
02
00
00
83
B8
34
01
00
00
03
0F
85
9C
01
00
Change of cmp dword ptr [ecx+00000178],00
lethalleague.exe+A3AFC
8F
A0
02
00
00
83
B9
78
01
00
00
00
77
59
80
7E
15
Change of cmp dword ptr [ecx+00000178],00
lethalleague.exe+139DA9
89
A0
02
00
00
83
B9
78
01
00
00
00
76
01
40
80
7A
Change of cmp eax,03
lethalleague.exe+FB077
81
34
01
00
00
83
F8
03
75
15
8B
16
8B
Change of cmp dword ptr [eax+0000013C],00
lethalleague.exe+FB062
86
A0
02
00
00
83
B8
3C
01
00
00
00
0F
8F
7D
01
00
Change of mov [eax+00000150],00000000
lethalleague.exe+C58FE
86
A0
02
00
00
C7
80
50
01
00
00
00
00
00
00
8D
4D
FE
51
8B
Change of add [eax+00000150],edx
lethalleague.exe+FC075
8B
4D
08
8B
11
01
90
50
01
00
00
8B
86
A0
02
00
Change of cmp [eax+00000150],lethalleague.exe+30000
lethalleague.exe+FC081
86
A0
02
00
00
81
B8
50
01
00
00
00
00
64
00
0F
8C
B1
00
00
Change of mov [edi+000002C4],eax
lethalleague.exe+10D544
03
8B
F9
33
F6
89
87
C4
02
00
00
C7
45
E8
0F
00
Change of mov [ecx+59],dl
lethalleague.exe+C9D68
8B
45
08
8A
10
88
51
59
8B
89
A8
00
00
Change of mov [ecx+5B],dl
lethalleague.exe+C9D38
8B
45
08
8A
10
88
51
5B
8A
00
8D
55
0B
Change of mov [ecx+04],eax
lethalleague.exe+10357D
11
8B
40
14
51
89
41
04
D9
1C
24
8D
8D
Change of fstp dword ptr [esp]
lethalleague.exe+103580
14
51
89
41
04
D9
1C
24
8D
8D
60
FC
FF
Change of mov [ebp-000003CC],edi
lethalleague.exe+1035A4
FF
8B
4E
14
52
89
BD
34
FC
FF
FF
E8
C1
A6
03
00
Change of cmp eax,07
lethalleague.exe+FB091
5E
5D
C2
04
00
83
F8
07
75
11
8B
16
8B
Change of ret 0004
lethalleague.exe+FB08E
CE
FF
D0
5E
5D
C2
04
00
83
F8
07
75
11
Change of mov [ebx+eax*4+000574C4],edi
nvoglv32.dll+4140A
8B
45
FC
33
D2
89
BC
83
C4
74
05
00
8B
45
0C
05
71
Change of movdqu xmm1,[esi+10]
nvoglv32.dll+ED75B4
00
F3
0F
6F
06
F3
0F
6F
4E
10
F3
0F
7F
07
F3
Change of mov [ecx+edx*8],eax
nvoglv32.dll+C67911
03
D2
8B
04
B8
89
04
D1
8B
45
18
8B
4D
Change of mov dl,[ebx]
MSVCR100.dll+1F070
3B
4D
10
73
1B
8A
13
43
41
89
9D
20
Change of jb MSVCR100.memcpy+80
MSVCR100.dll+1F76
C7
01
83
F9
08
72
88
F3
A5
FF
24
95
Change of mov [eax+00000128],00000000
lethalleague.exe+FF6C6
86
A0
02
00
00
C7
80
28
01
00
00
00
00
00
00
75
60
8B
8E
A0
Change of mov eax,[eax+00000128]
lethalleague.exe+100B9C
00
00
89
51
10
8B
80
28
01
00
00
89
41
14
8B
16
Change of mov [ecx+00000128],eax
lethalleague.exe+100BCB
00
00
8B
40
14
89
81
28
01
00
00
8B
45
FC
8B
BE
Change of mov [eax+00000128],00000000
lethalleague.exe+FF786
86
A0
02
00
00
C7
80
28
01
00
00
00
00
00
00
8B
86
A0
02
00
Change of mov eax,[eax+14]
lethalleague.exe+100BC8
91
24
01
00
00
8B
40
14
89
81
28
01
00
Change of mov [ecx+00000124],edx
lethalleague.exe+100BC2
8E
A0
02
00
00
89
91
24
01
00
00
8B
40
14
89
81
Change of mov [ecx+14],eax
lethalleague.exe+FFEC4
8E
A0
02
00
00
89
41
14
8B
8E
A0
02
00
Change of mov [ecx+10],edx
lethalleague.exe+100B99
90
24
01
00
00
89
51
10
8B
80
28
01
00
Change of mov edx,[eax+00000124]
lethalleague.exe+100B93
00
00
89
55
FC
8B
90
24
01
00
00
89
51
10
8B
80
Change of mov [ecx+14],eax
lethalleague.exe+100BA2
80
28
01
00
00
89
41
14
8B
16
8B
52
4C
Change of mov [eax+10],ecx
sfml-graphics-2.dll+181C6
00
8B
4C
24
18
89
48
10
5F
5B
5E
59
C2
Change of mov [ecx+14],dl
lethalleague.exe+2748
8B
45
08
8A
10
88
51
14
5D
C2
04
00
CC
Change of mov [eax+00000134],ebx
lethalleague.exe+FB6AB
81
98
01
00
00
89
98
34
01
00
00
8B
11
8B
42
2C
Change of mov [eax+00000134],ebx
lethalleague.exe+FB6AB
81
98
01
00
00
89
98
34
01
00
00
8B
11
8B
42
2C
Change of mov [ecx+00000130],eax
lethalleague.exe+22B49
B8
04
00
00
00
89
81
30
01
00
00
8B
96
98
01
00
Change of mov [ecx+00000130],eax
lethalleague.exe+240E6
B8
04
00
00
00
89
81
30
01
00
00
8B
96
98
01
00
Change of mov [ecx+1C],eax
lethalleague.exe+13DC7E
51
18
8B
40
04
89
41
1C
5D
C2
04
00
CC
Change of mov [ecx+1C],edx
lethalleague.exe+13DCC8
8B
45
08
8B
10
89
51
1C
5D
C2
04
00
CC
Change of mov [edx+00000130],edi
lethalleague.exe+FB69F
91
98
01
00
00
89
BA
30
01
00
00
8B
81
98
01
00
Change of add [eax+0000017C],ebx
lethalleague.exe+FC18D
BB
01
00
00
00
01
98
7C
01
00
00
8B
4E
70
8D
85
Change of mov [ecx+00000130],eax
lethalleague.exe+139D25
8E
98
01
00
00
89
81
30
01
00
00
8B
96
98
01
00
Change of mov [eax+0000012C],ebx
lethalleague.exe+22EC9
86
98
01
00
00
89
98
2C
01
00
00
8B
86
94
01
00
Change of cmp byte ptr [edi+14],00
lethalleague.exe+407E6
00
00
8B
78
10
80
7F
14
00
74
41
D9
45
10
Change of cmp byte ptr [esi+14],00
lethalleague.exe+1373C6
8B
EC
56
8B
F1
80
7E
14
00
74
4B
53
8B
1D
Change of cmp byte ptr [ebx+14],00
lethalleague.exe+42A13
8B
FF
8B
5A
10
80
7B
14
00
0F
84
FE
00
00
Change of cmp byte ptr [ecx+14],00
lethalleague.exe+3D6D3
74
6A
8B
4F
10
80
79
14
00
74
12
8B
86
C4
Change of cmp byte ptr [ecx+14],00
lethalleague.exe+C9523
00
CC
55
8B
EC
80
79
14
00
74
16
8B
45
08
Change of cmp dword ptr [esi+000000EC],00
lethalleague.exe+3D73A
00
00
00
75
96
83
BE
EC
00
00
00
00
8D
BE
C8
1E
00
Change of mov eax,[edi+000000EC]
lethalleague.exe+429BF
00
00
53
FF
D2
8B
87
EC
00
00
00
83
E8
00
74
28
Change of cmp dword ptr [esi+000000EC],02
lethalleague.exe+3D788
0C
8B
CF
FF
D3
83
BE
EC
00
00
00
02
8B
5D
08
75
0B
Change of mov eax,[ecx+000000EC]
lethalleague.exe+3B89A
08
00
56
74
52
8B
81
EC
00
00
00
83
E8
00
74
14
Change of cmp dword ptr [ecx+000000EC],01
lethalleague.exe+3B873
CC
CC
55
8B
EC
83
B9
EC
00
00
00
01
75
0C
81
C1
A0
Change of mov [ecx+08],eax
lethalleague.exe+3A2A4
50
F7
00
40
53
89
41
08
8B
45
10
57
8B
Change of mov [edi+08],00000000
lethalleague.exe+3A532
47
04
89
40
08
C7
47
08
00
00
00
00
5F
5E
5B
C3
CC
Change of mov [ecx+08],eax
lethalleague.exe+3A1F5
85
C0
74
04
48
89
41
08
8B
45
08
8B
55
Change of mov eax,[ecx+08]
lethalleague.exe+3A1E7
10
00
8B
4D
FC
8B
41
08
83
C4
04
5F
5E
Change of mov [eax+0000013C],edx
lethalleague.exe+FB41C
8B
55
08
8B
12
89
90
3C
01
00
00
8B
55
10
8B
01
Change of fstp dword ptr [esi+0000011C]
lethalleague.exe+AA930
00
01
00
00
00
D9
9E
1C
01
00
00
5E
8B
E5
5D
C2
Change of fst dword ptr [edi]
lethalleague.exe+A9A24
5D
08
D9
45
08
D9
17
D9
86
18
01
00
Change of sub [eax+0000013C],edx
lethalleague.exe+FB056
02
00
00
8B
11
29
90
3C
01
00
00
8B
86
A0
02
00
Change of mov ecx,[edi+0000019C]
lethalleague.exe+101186
8A
2C
01
00
00
8B
8F
9C
01
00
00
3B
C1
7E
0C
8B
Change of mov [esi+ecx],edi
sfml-system-2.dll+1748
57
2B
F1
8B
39
89
3C
0E
83
C1
04
4A
75
Change of cmp dword ptr [esi+14],10
lethalleague.exe+257F
14
00
83
C4
0C
83
7E
14
10
89
7E
10
72
0F
Change of mov [eax+00000124],edi
lethalleague.exe+22689
86
AC
02
00
00
89
B8
24
01
00
00
8B
86
AC
02
00
Change of mov esi,[eax+00000124]
lethalleague.exe+9A650
87
98
01
00
00
8B
B0
24
01
00
00
8B
D9
8D
8B
80
Change of mov eax,[ecx+00000124]
lethalleague.exe+2118B
01
00
00
8B
CA
8B
81
24
01
00
00
83
F8
02
75
2A
Change of cmp dword ptr [edx+00000124],08
lethalleague.exe+218F1
96
98
01
00
00
83
BA
24
01
00
00
08
0F
84
B5
04
00
Change of mov edi,[edx+00000124]
lethalleague.exe+21A26
96
98
01
00
00
8B
BA
24
01
00
00
83
F9
0C
0F
84
Change of mov [esi+44],edx
lethalleague.exe+F26E8
FF
FF
8B
10
5F
89
56
44
5E
5B
8B
E5
5D
Change of mov [esi+44],FFFFFFFF
lethalleague.exe+F26C9
01
00
D9
5E
50
C7
46
44
FF
FF
FF
FF
C7
46
48
00
00
Change of mov eax,[eax+00000124]
lethalleague.exe+21126
86
AC
02
00
00
8B
80
24
01
00
00
83
F8
01
75
0B
Change of mov eax,[ecx+00000124]
lethalleague.exe+20EF9
8E
AC
02
00
00
8B
81
24
01
00
00
83
F8
01
0F
84
Change of cmp dword ptr [edx+00000124],10
lethalleague.exe+FDE31
97
98
01
00
00
83
BA
24
01
00
00
10
75
47
8B
87
AC
Change of cmp eax,02
lethalleague.exe+21191
81
24
01
00
00
83
F8
02
75
2A
8B
55
FC
Change of mov byte ptr [ebp-01],01
lethalleague.exe+2A68F
00
00
8B
49
70
C6
45
FF
01
52
8B
91
CC
00
Change of mov eax,[edx+000000FC]
lethalleague.exe+34E32
FF
EB
5F
8B
16
8B
82
FC
00
00
00
6A
02
6A
04
8B
Change of cmp eax,01
lethalleague.exe+20EFF
81
24
01
00
00
83
F8
01
0F
84
DD
01
00
Change of call dword ptr [lethalleague.exe+1654FC]
lethalleague.exe+210FE
1C
24
8D
4E
78
FF
15
FC
54
D1
00
8B
86
AC
02
00
Change of mov [eax+00000124],00000004
0E4F0000
C7
80
24
01
00
00
04
00
00
00
E9
80
26
6E
F2
Change of jmp dword ptr [ecx*4+lethalleague.exe+22F4C]
lethalleague.exe+226B3
87
64
08
00
00
FF
24
8D
4C
2F
BD
00
8B
96
94
01
00
Change of mov edx,[esi+00000194]
lethalleague.exe+226BA
8D
4C
2F
BD
00
8B
96
94
01
00
00
51
8B
C4
89
A5
Change of mov [ebp-000000BC],esp
lethalleague.exe+226C3
00
00
51
8B
C4
89
A5
44
FF
FF
FF
68
D0
07
00
00
Change of mov edx,[eax+000000BC]
lethalleague.exe+20F21
0E
75
14
8B
07
8B
90
BC
00
00
00
8B
CF
FF
D2
84
Change of fstp dword ptr [esp]
lethalleague.exe+21076
00
51
8D
4D
08
D9
1C
24
E8
02
DF
FF
FF
Change of fild dword ptr [ebp-000000F8]
lethalleague.exe+21918
8D
08
FF
FF
FF
DB
85
08
FF
FF
FF
8B
4E
14
DD
05
Change of je lethalleague.exe+21DB3
lethalleague.exe+218F8
24
01
00
00
08
0F
84
B5
04
00
00
8B
4E
14
8D
85
Change of lea eax,[ebp-00000100]
lethalleague.exe+21901
00
00
8B
4E
14
8D
85
00
FF
FF
FF
50
E8
43
C3
11
Change of mov ecx,[edx+00000130]
lethalleague.exe+1FB87
96
AC
02
00
00
8B
8A
30
01
00
00
8B
56
70
51
8B
Change of mov [esi+00000098],edi
lethalleague.exe+C9B58
E8
28
C7
02
00
89
BE
98
00
00
00
5F
5E
5D
C2
08
Change of mov [esi+00000098],edi
lethalleague.exe+C9B90
E8
F0
C6
02
00
89
BE
98
00
00
00
5F
5E
5D
C2
08
Change of call lethalleague.exe+C9BA0
lethalleague.exe+46919
FF
D0
53
8B
CE
E8
82
32
08
00
8D
4D
D4
51
8D
Change of mov eax,edi
lethalleague.exe+C9BAB
8B
7D
08
8B
F1
8B
C7
33
C9
2B
C1
74
Change of mov ecx,[edi+04]
lethalleague.exe+466C6
E8
8A
37
08
00
8B
4F
04
8B
89
E8
00
00
Change of add dword ptr [esi+00000098],01
019A0000
83
86
98
00
00
00
01
E9
8A
9B
59
FF
Change of cmp dword ptr [ebp-18],10
lethalleague.exe+384FA
00
00
00
FF
D7
83
7D
E8
10
C7
45
FC
FF
FF
Change of add esp,14
lethalleague.exe+10D5D8
E8
48
1A
F0
FF
83
C4
14
FF
15
68
50
F5
Change of mov eax,[ebp+08]
lethalleague.exe+C9D63
CC
CC
55
8B
EC
8B
45
08
8A
10
88
51
59
Change of mov [ebp-01],al
lethalleague.exe+3BACC
81
EC
00
00
00
88
45
FF
8B
01
8B
80
C8
Change of push 1D
lethalleague.exe+3BD34
88
B8
00
00
00
6A
1D
E8
C5
E1
FD
FF
Change of mov ecx,[eax+000000B8]
lethalleague.exe+3BD2E
00
C6
45
FF
01
8B
88
B8
00
00
00
6A
1D
E8
C5
E1
Change of mov byte ptr [ebp-01],01
lethalleague.exe+3BD2A
00
02
00
00
00
C6
45
FF
01
8B
88
B8
00
00
Change of mov [eax+38],cl
lethalleague.exe+111B40
F5
FF
FF
8A
0E
88
48
38
5E
5D
C2
04
00
Change of mov [ebp-04],00000001
lethalleague.exe+AA8F6
8E
24
01
00
00
C7
45
FC
01
00
00
00
E8
BE
55
03
00
Change of mov [edx+00000138],ecx
lethalleague.exe+103158
00
00
8B
4D
0C
89
8A
38
01
00
00
BB
01
00
00
00
Change of mov [eax+edx],si
lethalleague.exe+FB838
02
00
00
33
F6
66
89
34
10
83
C0
02
3D
9C
Change of add eax,02
lethalleague.exe+FB83C
F6
66
89
34
10
83
C0
02
3D
9C
02
00
00
Change of cmp [ebx+edx],di
lethalleague.exe+88A49
96
A0
02
00
00
66
39
3C
13
8D
04
13
74
60
Change of cmp word ptr [eax],00
lethalleague.exe+88F66
86
A0
02
00
00
66
83
38
00
0F
84
CB
00
00
Change of cmp word ptr [eax],00
lethalleague.exe+8962B
86
A0
02
00
00
66
83
38
00
0F
84
3F
01
00
Change of cmp [eax],bx
lethalleague.exe+88208
8D
04
11
33
DB
66
39
18
74
6D
8B
4E
70
Change of cmp word ptr [eax],00
lethalleague.exe+883F6
86
A0
02
00
00
66
83
38
00
0F
84
32
01
00
Change of push lethalleague.exe+16F954
lethalleague.exe+88A61
F8
85
FF
74
2D
68
54
F9
F5
00
8D
4D
D4
E8
92
Change of push 04
lethalleague.exe+88F83
84
B8
00
00
00
6A
04
33
FF
68
F4
F9
Change of mov [ebp-18],0000000F
lethalleague.exe+88F8F
F5
00
8D
4D
D4
C7
45
E8
0F
00
00
00
89
7D
E4
C6
45
Change of cmp eax,0000029C
lethalleague.exe+FB83F
34
10
83
C0
02
3D
9C
02
00
00
72
EA
5E
C3
CC
Change of mov [ebp-18],0000000F
lethalleague.exe+88222
8D
4D
D4
8B
F8
C7
45
E8
0F
00
00
00
89
5D
E4
88
5D
Change of push lethalleague.exe+168A38
lethalleague.exe+35227
6C
0C
00
6A
04
68
38
8A
FD
00
8D
4D
D4
C7
45
Change of mov edx,[esi]
lethalleague.exe+FBF10
04
6A
01
FF
D0
8B
16
8B
92
D0
00
00
Change of mov ebx,00000001
lethalleague.exe+10315E
8A
38
01
00
00
BB
01
00
00
00
83
F8
12
0F
87
Change of cmp eax,12
lethalleague.exe+103163
BB
01
00
00
00
83
F8
12
0F
87
4F
04
00
Change of mov edx,[esi+000002A0]
lethalleague.exe+1031BF
E9
FC
03
00
00
8B
96
A0
02
00
00
88
9A
6C
01
00
Change of mov [edx+0000016C],bl
lethalleague.exe+1031C5
96
A0
02
00
00
88
9A
6C
01
00
00
8B
86
A0
02
00
Change of mov [ebp-0000037D],bl
lethalleague.exe+1032E4
8D
F8
FD
FF
FF
88
9D
83
FC
FF
FF
E8
11
F3
EF
FF
Change of push lethalleague.exe+1770DC
lethalleague.exe+1033B0
81
28
01
00
00
68
DC
70
FE
00
8D
8D
E0
FC
FF
Change of mov [eax+0000014C],esi
lethalleague.exe+139E97
03
31
8B
4D
FC
89
B0
4C
01
00
00
8B
91
14
01
00
Change of mov [ecx+0000014C],ebx
lethalleague.exe+FEA8B
8E
A0
02
00
00
89
99
4C
01
00
00
8B
96
A0
02
00
Change of mov [eax+0000014C],00000000
lethalleague.exe+FB2C6
81
A0
02
00
00
C7
80
4C
01
00
00
00
00
00
00
C3
CC
CC
CC
CC
Change of mov eax,[edi+000002A0]
lethalleague.exe+FECD4
E8
7C
EF
03
00
8B
87
A0
02
00
00
83
B8
34
01
00
Change of cmp dword ptr [eax+00000134],12
lethalleague.exe+FECDA
87
A0
02
00
00
83
B8
34
01
00
00
12
0F
84
D5
01
00
Change of je lethalleague.exe+FEEBC
lethalleague.exe+FECE1
34
01
00
00
12
0F
84
D5
01
00
00
8B
4D
D0
8B
19
Change of mov byte ptr [ebp-04],03
lethalleague.exe+FEC9E
4D
E8
8B
45
9C
C6
45
FC
03
8B
D0
89
45
C4
Change of cmp dword ptr [ebp-18],10
lethalleague.exe+FEC7C
E8
24
A3
FA
FF
83
7D
E8
10
72
0C
8B
45
D4
Change of mov [ebp-18],0000000F
lethalleague.exe+FEC56
FE
00
8D
4D
D4
C7
45
E8
0F
00
00
00
89
7D
E4
C6
45
Change of sub esp,00000150
lethalleague.exe+FEC11
00
00
00
00
50
81
EC
50
01
00
00
A1
20
9E
01
01
Change of add [ecx],al
14C1863E
00
00
00
01
00
00
01
00
00
00
00
01
Change of mov byte ptr [eax+1C],00
lethalleague.exe+103408
86
94
01
00
00
C6
40
1C
00
8B
86
94
01
00
Change of mov [ecx+1F],al
lethalleague.exe+FF52C
00
00
0F
9F
C0
88
41
1F
8B
8E
8C
01
00
Change of fstp dword ptr [esi+50]
lethalleague.exe+F26C6
C7
46
40
01
00
D9
5E
50
C7
46
44
FF
FF
Change of fst dword ptr [esi+50]
lethalleague.exe+F2C4B
46
48
8B
46
48
D9
56
50
3B
43
30
72
38
Change of fst dword ptr [esi+50]
lethalleague.exe+F2C2D
5D
08
D9
45
08
D9
56
50
DD
5D
F8
FF
15
Change of mov [eax+0000016B],bl
lethalleague.exe+1031D1
86
A0
02
00
00
88
98
6B
01
00
00
8B
86
94
01
00
Change of mov byte ptr [edx+00000168],00
lethalleague.exe+103180
96
A0
02
00
00
C6
82
68
01
00
00
00
8B
86
A0
02
00
Change of mov byte ptr [eax+0000016A],00
lethalleague.exe+10318D
86
A0
02
00
00
C6
80
6A
01
00
00
00
8B
8E
A0
02
00
Change of mov byte ptr [ecx+0000016B],00
lethalleague.exe+10319A
8E
A0
02
00
00
C6
81
6B
01
00
00
00
8B
86
94
01
00
Change of mov byte ptr [ecx+00000168],01
lethalleague.exe+100CCC
8E
A0
02
00
00
C6
81
68
01
00
00
01
8B
96
A0
02
00
Change of cmp [edi+edx*2+0000019C],ax
lethalleague.exe+FC016
02
00
00
8B
D0
66
39
84
57
9C
01
00
00
75
0B
5F
B8
09
Change of mov [eax+edx*2+0000019C],cx
lethalleague.exe+10149C
86
A0
02
00
00
66
89
8C
50
9C
01
00
00
8B
4E
70
DB
45
Change of mov [ecx+0000013C],edx
lethalleague.exe+FEBC4
34
02
00
00
53
89
91
3C
01
00
00
8B
16
6A
03
50
Change of mov [eax+0000013C],00000000
lethalleague.exe+1031B0
86
A0
02
00
00
C7
80
3C
01
00
00
00
00
00
00
E9
FC
03
00
00
Change of add [eax+00000140],edx
lethalleague.exe+FCA02
02
00
00
8B
11
01
90
40
01
00
00
8B
86
A0
02
00
Change of mov [eax+00000140],00000000
lethalleague.exe+1035C4
86
A0
02
00
00
C7
80
40
01
00
00
00
00
00
00
8B
45
0C
83
F8
Change of push lethalleague.exe+1770E4
lethalleague.exe+1035E1
85
EC
40
F7
00
68
E4
70
FE
00
8D
8D
10
FF
FF
Change of mov byte ptr [ecx+000002B8],00
lethalleague.exe+10375C
8E
A0
02
00
00
C6
81
B8
02
00
00
00
68
18
71
FE
00
Change of mov [ebp-00000385],bl
lethalleague.exe+1037B7
8D
88
FD
FF
FF
88
9D
7B
FC
FF
FF
E8
3E
EE
EF
FF
Change of fld dword ptr [lethalleague.exe+1774DC]
lethalleague.exe+103422
86
94
01
00
00
D9
05
DC
74
FE
00
C6
40
1C
00
8B
Change of mov [eax+00000128],edx
lethalleague.exe+1F1AE
8B
55
08
8B
12
89
90
28
01
00
00
8B
55
0C
8B
01
Change of sub [eax+00000128],ecx
lethalleague.exe+21150
02
00
00
8B
0B
29
88
28
01
00
00
8B
96
AC
02
00
Stock Match -
Set to 0 and freeze to end matches instantly.
---------------------------------------------------------
Character Collision/Location -
Y Value -
Shift + Up/Down Arrow Keys to move your character up or down.
--------
No Collide -
You can disable collision with walls/ceiling/floors. No real use for this but it's kinda fun.
(Can cause issues with the ball.)
--------
Hit the ball instead of dying - Never miss the ball ever again. Players will automatically knock the ball back if hit by it.
--------
Player States -
Freezing the value doesn't stop you from dying, it just stops the animation and freezes the player.
0 - Default
3 - Kill
4 - 6 Hit Animations
7 - Gets Hit
16 - Runnin'
17 - Frozen
18 - Respawn player
---------------------------------------------------------
Start Stage -
Change the value to 2 to force the stage screen. You can start a game with only one person or just bots. (Press enter to select a stage if you wanna try only bots)
---------------------------------------------------------
Everyone always has special -
Everyone always has it or choose from P1 and P2.
---------------------------------------------------------
Ball Speed -
Ctrl + P to go to max speed (10000000). Freeze if you want the speed to stay constant.
--------
No Hit Lag -
Players won't freeze when hitting the ball.
--------
No Starting Hit Protection - When the ball spawns, it's up for grabs by anyone.
--------
Battin' a Thousand -
Normal hits increase ball speed by 1000.
Powerful Down Swing - Downward air hits increase ball speed by 30,000
--------
Mega Bunt - Bunts increase ball speed by 20,000
--------
Ball Tag -
Ball Tag and Wall Bounce are all that matters. I found that if you're next to a wall and the ball bounces off of it into you, it kills you. I just nop'd that in the script.
--------
Ball Color is just cosmetic. The last three codes make sure the ball stays whatever color you want.
--------
Candyman Ball -
Only check ONE. First option enables Candyman Special constantly and doesn't reset the ball between rounds. Option two activates Candyman special on the first wall bounce and resets between rounds. Third option is just to disable ball resetting.
--------
Character Select Screen
-
No Team Limit -
This disables the limit on team members. You can start a game with four of the same team color. (FYI the game ends immediately if you do unless it's a Strikers match)
--------
P1 Join as CPU -
Activate ON character select menu, eject, and press CPU to turn player 1 into a CPU. Player 1 can't click while the slot is taken by a CPU so if you want to change the level of the CPU you'll need to do that with another player. Press Ctrl + Y or toggle "Force Stage Select"
------ - Heads Up -
If you activate the above code before starting up a gamemode, it will add two extra Raptors to the game as real players.
---------
P1 Character - Enter the value and freeze it to force the character
0 - Raptor
256 - Switch
512 - Candyman
768 - Sonata
1024 - Latch
1536 - Doombox
1792 - Dice
2304 - Random
-IMPORTANT -
The numbers correspond to the character AND their current color. The colors count up in an increment of 16777216
256 -> 16777472
512 -> 16777728
You can choose Doombox in almost everything except How To Play mode so it's really just a quicker way of selecting him. Also useful for selecting a character for Player 1 when using "P1 Join as CPU"