85
"Godmode"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-05
Author : Apocalypticx
This script does godmode
}
[ENABLE]
aobscanmodule(godmode1,server.dll,89 3E 5F B8 01 00 00 00 5E 8B) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(GodMode)
newmem:
pushfd //save all flags to stack
cmp [esi+24],00020101 //compare against player ID
ja GodMode //jump if above to enemy subtract health routine
popfd //restore all flags from the stack
code:
// mov [esi],edi original instruction removed to give player godmode
pop edi //restore edi from the stack
mov eax,00000001 //move a value of 1 = true into eax and return
jmp return
GodMode:
popfd //restore all flags from the stack
mov [esi],edi //original instructions
pop edi //restore edi from the stack
mov eax,00000001 //move a value of 1 = true into eax and return
jmp return
godmode1:
jmp newmem
nop
nop
nop
return:
registersymbol(godmode1)
[DISABLE]
godmode1:
db 89 3E 5F B8 01 00 00 00
unregistersymbol(godmode1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+F9D69
server.dll+F9D45: 81 C6 E4 00 00 00 - add esi,000000E4
server.dll+F9D4B: 2B F8 - sub edi,eax
server.dll+F9D4D: 8B 06 - mov eax,[esi]
server.dll+F9D4F: 89 7D 08 - mov [ebp+08],edi
server.dll+F9D52: 3B 01 - cmp eax,[ecx]
server.dll+F9D54: 74 15 - je server.dll+F9D6B
server.dll+F9D56: 8B 86 1C FF FF FF - mov eax,[esi-000000E4]
server.dll+F9D5C: 8D 8E 1C FF FF FF - lea ecx,[esi-000000E4]
server.dll+F9D62: 56 - push esi
server.dll+F9D63: FF 90 E4 01 00 00 - call dword ptr [eax+000001E4]
// ---------- INJECTING HERE ----------
server.dll+F9D69: 89 3E - mov [esi],edi
// ---------- DONE INJECTING ----------
server.dll+F9D6B: 5F - pop edi
server.dll+F9D6C: B8 01 00 00 00 - mov eax,00000001
server.dll+F9D71: 5E - pop esi
server.dll+F9D72: 8B E5 - mov esp,ebp
server.dll+F9D74: 5D - pop ebp
server.dll+F9D75: C2 04 00 - ret 0004
server.dll+F9D78: CC - int 3
server.dll+F9D79: CC - int 3
server.dll+F9D7A: CC - int 3
server.dll+F9D7B: CC - int 3
}
89
"1 Hit Kill"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-06
Author : Apocalypticx
This script does 1 hit kill
}
[ENABLE]
aobscanmodule(1hitkill,server.dll,83 BB E4 00 00 00 00 0F) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(DoOneHitKill)
newmem:
pushfd //save the flags because of our jump
cmp [ebx+84],1 //compare against player 1=me >1=enemy
ja DoOneHitKill //jump if above player to our cheat code
popfd //restore our flags from the stack
code:
cmp dword ptr [ebx+000000E4],00 //original instruction
jmp return //return back to normal gamecode
DoOneHitKill:
popfd //restore the flags after our jump from stack
mov [ebx+000000E4],1 //move 1 into enemy health address
cmp dword ptr [ebx+000000E4],00 //original instruction
jmp return //return back to normal gamecode
1hitkill:
jmp newmem
nop
nop
return:
registersymbol(1hitkill)
[DISABLE]
1hitkill:
db 83 BB E4 00 00 00 00
unregistersymbol(1hitkill)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+22BE1E
server.dll+22BDF8: 83 7C C2 04 00 - cmp dword ptr [edx+eax*8+04],00
server.dll+22BDFD: 75 1F - jne server.dll+22BE1E
server.dll+22BDFF: A1 98 EE 3C 24 - mov eax,[server.dll+79EE98]
server.dll+22BE04: F3 0F 10 40 0C - movss xmm0,[eax+0C]
server.dll+22BE09: F3 0F 58 05 B0 27 1C 24 - addss xmm0,[server.dll+5927B0]
server.dll+22BE11: F3 0F 11 83 44 0D 00 00 - movss [ebx+00000D44],xmm0
server.dll+22BE19: 5B - pop ebx
server.dll+22BE1A: 8B E5 - mov esp,ebp
server.dll+22BE1C: 5D - pop ebp
server.dll+22BE1D: C3 - ret
// ---------- INJECTING HERE ----------
server.dll+22BE1E: 83 BB E4 00 00 00 00 - cmp dword ptr [ebx+000000E4],00
// ---------- DONE INJECTING ----------
server.dll+22BE25: 0F 8C B5 01 00 00 - jl server.dll+22BFE0
server.dll+22BE2B: 8B 03 - mov eax,[ebx]
server.dll+22BE2D: 8B CB - mov ecx,ebx
server.dll+22BE2F: 8B 80 04 01 00 00 - mov eax,[eax+00000104]
server.dll+22BE35: FF D0 - call eax
server.dll+22BE37: 84 C0 - test al,al
server.dll+22BE39: 0F 84 A1 01 00 00 - je server.dll+22BFE0
server.dll+22BE3F: 80 BB FB 01 00 00 03 - cmp byte ptr [ebx+000001FB],03
server.dll+22BE46: 0F 85 1E 01 00 00 - jne server.dll+22BF6A
server.dll+22BE4C: 8B 03 - mov eax,[ebx]
}
24
"Infinite Ammo"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-06-18
Author : Apocalypticx
This script does infinite ammo
}
[ENABLE]
aobscanmodule(ammo1,server.dll,83 BE B0 04 00 00 00 7F 4B) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [esi+000004B0],(int)100 //move 100 into our ammo address
code:
cmp dword ptr [esi+000004B0],00 //original instruction
jmp return
ammo1:
jmp newmem
nop
nop
return:
registersymbol(ammo1)
[DISABLE]
ammo1:
db 83 BE B0 04 00 00 00
unregistersymbol(ammo1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+104D71
server.dll+104D5D: CC - int 3
server.dll+104D5E: CC - int 3
server.dll+104D5F: CC - int 3
server.dll+104D60: 56 - push esi
server.dll+104D61: 8B F1 - mov esi,ecx
server.dll+104D63: 8B 06 - mov eax,[esi]
server.dll+104D65: 8B 80 1C 05 00 00 - mov eax,[eax+0000051C]
server.dll+104D6B: FF D0 - call eax
server.dll+104D6D: 84 C0 - test al,al
server.dll+104D6F: 74 09 - je server.dll+104D7A
// ---------- INJECTING HERE ----------
server.dll+104D71: 83 BE B0 04 00 00 00 - cmp dword ptr [esi+000004B0],00
// ---------- DONE INJECTING ----------
server.dll+104D78: 7F 4B - jg server.dll+104DC5
server.dll+104D7A: 8B 96 64 04 00 00 - mov edx,[esi+00000464]
server.dll+104D80: 83 FA FF - cmp edx,-01
server.dll+104D83: 74 44 - je server.dll+104DC9
server.dll+104D85: A1 18 88 5A 23 - mov eax,[server.dll+708818]
server.dll+104D8A: 8B CA - mov ecx,edx
server.dll+104D8C: 81 E1 FF 0F 00 00 - and ecx,00000FFF
server.dll+104D92: C1 EA 0C - shr edx,0C
server.dll+104D95: 03 C9 - add ecx,ecx
server.dll+104D97: 39 54 C8 08 - cmp [eax+ecx*8+08],edx
}
233
"Minmal Spread"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-08
Author : Apocalypticx
This script does No Spread when aiming with right click
}
[ENABLE]
aobscanmodule(crosshair1,server.dll,78 8C D3 FF F3 0F 10 45 FC F3 0F 11 06 8B C6) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
movss [esi],xmm0
mov [esi],(float)2 //move 2 into the minimal spread address
mov eax,esi
jmp return
crosshair1+09:
jmp newmem
nop
return:
registersymbol(crosshair1)
[DISABLE]
crosshair1+09:
db F3 0F 11 06 8B C6
unregistersymbol(crosshair1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+30BC0D
server.dll+30BBF2: C2 04 00 - ret 0004
server.dll+30BBF5: 8B 51 18 - mov edx,[ecx+18]
server.dll+30BBF8: 85 D2 - test edx,edx
server.dll+30BBFA: 74 11 - je server.dll+30BC0D
server.dll+30BBFC: 8B C6 - mov eax,esi
server.dll+30BBFE: 2B C1 - sub eax,ecx
server.dll+30BC00: 8B CA - mov ecx,edx
server.dll+30BC02: 50 - push eax
server.dll+30BC03: E8 78 8C D3 FF - call server.dll+44880
server.dll+30BC08: F3 0F 10 45 FC - movss xmm0,[ebp-04]
// ---------- INJECTING HERE ----------
server.dll+30BC0D: F3 0F 11 06 - movss [esi],xmm0
// ---------- DONE INJECTING ----------
server.dll+30BC11: 8B C6 - mov eax,esi
server.dll+30BC13: 5E - pop esi
server.dll+30BC14: 8B E5 - mov esp,ebp
server.dll+30BC16: 5D - pop ebp
server.dll+30BC17: C2 04 00 - ret 0004
server.dll+30BC1A: CC - int 3
server.dll+30BC1B: CC - int 3
server.dll+30BC1C: CC - int 3
server.dll+30BC1D: CC - int 3
server.dll+30BC1E: CC - int 3
}
251
"Mini Spread Run"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-12
Author : Apocalypticx
This script does minimal spread while running
}
[ENABLE]
aobscanmodule(crosshair2,server.dll,E8 8C D3 FF F3 0F 10 45 FC F3 0F 11 06 8B C6) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
movss [esi],xmm0
mov [esi],(float)0.01913999952 //move the 85% value into spread address
mov eax,esi
jmp return
crosshair2+09:
jmp newmem
nop
return:
registersymbol(crosshair2)
[DISABLE]
crosshair2+09:
db F3 0F 11 06 8B C6
unregistersymbol(crosshair2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+30BB9D
server.dll+30BB82: C2 04 00 - ret 0004
server.dll+30BB85: 8B 51 18 - mov edx,[ecx+18]
server.dll+30BB88: 85 D2 - test edx,edx
server.dll+30BB8A: 74 11 - je server.dll+30BB9D
server.dll+30BB8C: 8B C6 - mov eax,esi
server.dll+30BB8E: 2B C1 - sub eax,ecx
server.dll+30BB90: 8B CA - mov ecx,edx
server.dll+30BB92: 50 - push eax
server.dll+30BB93: E8 E8 8C D3 FF - call server.dll+44880
server.dll+30BB98: F3 0F 10 45 FC - movss xmm0,[ebp-04]
// ---------- INJECTING HERE ----------
server.dll+30BB9D: F3 0F 11 06 - movss [esi],xmm0
// ---------- DONE INJECTING ----------
server.dll+30BBA1: 8B C6 - mov eax,esi
server.dll+30BBA3: 5E - pop esi
server.dll+30BBA4: 8B E5 - mov esp,ebp
server.dll+30BBA6: 5D - pop ebp
server.dll+30BBA7: C2 04 00 - ret 0004
server.dll+30BBAA: CC - int 3
server.dll+30BBAB: CC - int 3
server.dll+30BBAC: CC - int 3
server.dll+30BBAD: CC - int 3
server.dll+30BBAE: CC - int 3
}
84
"No Recoil"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-06-21
Author : Apocalypticx
This script does no recoil
}
[ENABLE]
aobscanmodule(norecoil1,server.dll,FC F3 0F 11 06 F3 0F 10 45 F8) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
movss [esi],xmm0
mov [esi],(float)0 //move 0 to reset gun recoil
movss xmm0,[ebp-08]
jmp return
norecoil1+01:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(norecoil1)
[DISABLE]
norecoil1+01:
db F3 0F 11 06 F3 0F 10 45 F8
unregistersymbol(norecoil1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+19FC5A
server.dll+19FC3F: 3B 42 04 - cmp eax,[edx+04]
server.dll+19FC42: 75 08 - jne server.dll+19FC4C
server.dll+19FC44: 8B 46 08 - mov eax,[esi+08]
server.dll+19FC47: 3B 42 08 - cmp eax,[edx+08]
server.dll+19FC4A: 74 2C - je server.dll+19FC78
server.dll+19FC4C: 8B 46 90 - mov eax,[esi-70]
server.dll+19FC4F: 8D 4E 90 - lea ecx,[esi-70]
server.dll+19FC52: 56 - push esi
server.dll+19FC53: FF 10 - call dword ptr [eax]
server.dll+19FC55: F3 0F 10 45 FC - movss xmm0,[ebp-04]
// ---------- INJECTING HERE ----------
server.dll+19FC5A: F3 0F 11 06 - movss [esi],xmm0
// ---------- DONE INJECTING ----------
server.dll+19FC5E: F3 0F 10 45 F8 - movss xmm0,[ebp-08]
server.dll+19FC63: F3 0F 11 46 04 - movss [esi+04],xmm0
server.dll+19FC68: F3 0F 10 45 F4 - movss xmm0,[ebp-0C]
server.dll+19FC6D: F3 0F 11 46 08 - movss [esi+08],xmm0
server.dll+19FC72: 8B 0D 98 EE 07 24 - mov ecx,[server.dll+79EE98]
server.dll+19FC78: F3 0F 10 41 10 - movss xmm0,[ecx+10]
server.dll+19FC7D: F3 0F 59 05 A8 C2 E9 23 - mulss xmm0,[server.dll+5BC2A8]
server.dll+19FC85: F3 0F 10 0D 54 17 E4 23 - movss xmm1,[server.dll+561754]
server.dll+19FC8D: F3 0F 5C C8 - subss xmm1,xmm0
server.dll+19FC91: F3 0F 10 05 50 17 E4 23 - movss xmm0,[server.dll+561750]
}
101
"Infinite Dynamite"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-06
Author : Apocalypticx
This script does infinite dynamite
}
[ENABLE]
aobscanmodule(dynamite1,server.dll,89 1E 5F 5E 5B) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov [esi],(int)10 //the actual cheat move 10 into dynamite address
code:
// mov [esi],ebx original instruction
pop edi
pop esi
pop ebx
jmp return
dynamite1:
jmp newmem
return:
registersymbol(dynamite1)
[DISABLE]
dynamite1:
db 89 1E 5F 5E 5B
unregistersymbol(dynamite1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+FF154
server.dll+FF12E: 81 C1 DC 06 00 00 - add ecx,000006DC
server.dll+FF134: 8B 04 B9 - mov eax,[ecx+edi*4]
server.dll+FF137: 8D 34 B9 - lea esi,[ecx+edi*4]
server.dll+FF13A: 89 5D 08 - mov [ebp+08],ebx
server.dll+FF13D: 3B 02 - cmp eax,[edx]
server.dll+FF13F: 74 15 - je server.dll+FF156
server.dll+FF141: 8B 81 24 F9 FF FF - mov eax,[ecx-000006DC]
server.dll+FF147: 81 C1 24 F9 FF FF - add ecx,FFFFF924
server.dll+FF14D: 56 - push esi
server.dll+FF14E: FF 90 00 05 00 00 - call dword ptr [eax+00000500]
// ---------- INJECTING HERE ----------
server.dll+FF154: 89 1E - mov [esi],ebx
// ---------- DONE INJECTING ----------
server.dll+FF156: 5F - pop edi
server.dll+FF157: 5E - pop esi
server.dll+FF158: 5B - pop ebx
server.dll+FF159: 8B E5 - mov esp,ebp
server.dll+FF15B: 5D - pop ebp
server.dll+FF15C: C2 08 00 - ret 0008
server.dll+FF15F: CC - int 3
server.dll+FF160: 55 - push ebp
server.dll+FF161: 8B EC - mov ebp,esp
server.dll+FF163: 56 - push esi
}
253
"Super Jump Fly"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-13
Author : Apocalypticx
This script does super jump fly
}
[ENABLE]
aobscanmodule(jump1,server.dll,D9 9B 20 02 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(KeyChecker)
label(SuperJumpFly)
newmem:
KeyChecker: //Keychecker routine
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 20 //check if the space bar key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15 //shift right ax by 15 times
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je SuperJumpFly //jump if equal to space keypress for cheat
popfd //pop restore all flags from the stack
code:
fstp dword ptr [ebx+00000220] //original insturction
jmp return //jump back to main game code
SuperJumpFly:
popfd
fstp dword ptr [ebx+00000220] //original insturction
mov [ebx+00000220],(float)500 //the actual cheat just move a large float
jmp return //jump back to main game code
jump1:
jmp newmem
nop
return:
registersymbol(jump1)
[DISABLE]
jump1:
db D9 9B 20 02 00 00
unregistersymbol(jump1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+119E3C
server.dll+119E10: 0F 8B 78 01 00 00 - jnp server.dll+119F8E
server.dll+119E16: 57 - push edi
server.dll+119E17: 6A 04 - push 04
server.dll+119E19: E8 C2 52 00 00 - call server.dll+11F0E0
server.dll+119E1E: 81 A3 04 01 00 00 FF EF FF FF - and [ebx+00000104],FFFFEFFF
server.dll+119E28: D9 06 - fld dword ptr [esi]
server.dll+119E2A: D9 9B 18 02 00 00 - fstp dword ptr [ebx+00000218]
server.dll+119E30: D9 46 04 - fld dword ptr [esi+04]
server.dll+119E33: D9 9B 1C 02 00 00 - fstp dword ptr [ebx+0000021C]
server.dll+119E39: D9 46 08 - fld dword ptr [esi+08]
// ---------- INJECTING HERE ----------
server.dll+119E3C: D9 9B 20 02 00 00 - fstp dword ptr [ebx+00000220]
// ---------- DONE INJECTING ----------
server.dll+119E42: 8B 83 40 01 00 00 - mov eax,[ebx+00000140]
server.dll+119E48: 83 F8 FF - cmp eax,-01
server.dll+119E4B: 0F 84 F9 00 00 00 - je server.dll+119F4A
server.dll+119E51: 8B 0D 18 88 D1 21 - mov ecx,[server.dll+708818]
server.dll+119E57: 8B F8 - mov edi,eax
server.dll+119E59: 81 E7 FF 0F 00 00 - and edi,00000FFF
server.dll+119E5F: C1 E8 0C - shr eax,0C
server.dll+119E62: 03 FF - add edi,edi
server.dll+119E64: 39 44 F9 08 - cmp [ecx+edi*8+08],eax
server.dll+119E68: 0F 85 DC 00 00 00 - jne server.dll+119F4A
}
239
"Teleport K+L"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-08
Author : Apocalypticx
This script does teleport
}
[ENABLE]
aobscanmodule(teleport1,server.dll,C3 55 8B EC 8B 45 0C 8B 55 08 F3 0F 10 00 F3 0F 5C 02) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(KeyChecker)
label(StoreXYZ)
label(TeleportToXYZ)
label(X)
label(Y)
label(Z)
newmem:
pushfd //save the flags to the stack
cmp [eax+D4],1 //compare against monster ID
jb KeyChecker //jump if below is player to our KeyChecker code
popfd //restore the flags from the stack
code:
movss xmm0,[eax] //original insturctions
subss xmm0,[edx] //original insturctions
jmp return //jump back to main game code
KeyChecker:
popfd //pop restore all the flags from the stack
movss xmm0,[eax] //original insturctions
subss xmm0,[edx] //original insturctions
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'K' //check if the K key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je StoreXYZ //jump if equal to keypress for store cords
popfd //pop restore all flags from the stack
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'L' //check if the L key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je TeleportToXYZ //jump if equal to keypress for teleport to saved cords
popfd //restore flags from the stack
jmp return //jump back to main game code
StoreXYZ:
popfd //restore the flags from the stack after our jump which fucks flags
push ebx //save ebx to the stack so we can use it in our cheat
mov ebx,[eax] //move the current player X into ebx
mov [X],ebx //move the current player X into our memory address
mov ebx,[eax+4] //move the current player Y into ebx
mov [Y],ebx //move the current player Y into our memory address
mov ebx,[eax+8] //move the current player Z into ebx
mov [Z],ebx //move the current player Z into our memory address
pop ebx //restore ebx from the stack
jmp return //jump back to main game code
TeleportToXYZ:
popfd //restore the flags from the stack after our jump which fucks flags
push ebx //save ebx to the stack so we can use it in our cheat
mov ebx,[X] //move the saved current player X into ebx
mov [eax],ebx //move the saved player X into current X address
mov ebx,[Y] //move the saved current player Y into ebx
mov [eax+4],ebx //move the saved player Y into current Y address
mov ebx,[Z] //move the saved current player Z into ebx
mov [eax+8],ebx //move the saved player Z into current Z address
pop ebx //restore ebx for no crashing later
jmp return //jump back to main game code
X: //data dword 4bytes for our memory address
dd 0
Y: //data dword 4bytes for our memory address
dd 0
Z: //data dword 4bytes for our memory address
dd 0
teleport1+0A:
jmp newmem
nop
nop
nop
return:
registersymbol(teleport1)
registersymbol(X)
registersymbol(Y)
registersymbol(Z)
[DISABLE]
teleport1+0A:
db F3 0F 10 00 F3 0F 5C 02
unregistersymbol(X)
unregistersymbol(Y)
unregistersymbol(Z)
unregistersymbol(teleport1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+58949
server.dll+58932: 8B 46 04 - mov eax,[esi+04]
server.dll+58935: 89 46 14 - mov [esi+14],eax
server.dll+58938: B0 01 - mov al,01
server.dll+5893A: C6 46 18 00 - mov byte ptr [esi+18],00
server.dll+5893E: 5E - pop esi
server.dll+5893F: C3 - ret
server.dll+58940: 55 - push ebp
server.dll+58941: 8B EC - mov ebp,esp
server.dll+58943: 8B 45 0C - mov eax,[ebp+0C]
server.dll+58946: 8B 55 08 - mov edx,[ebp+08]
// ---------- INJECTING HERE ----------
server.dll+58949: F3 0F 10 00 - movss xmm0,[eax]
// ---------- DONE INJECTING ----------
server.dll+5894D: F3 0F 5C 02 - subss xmm0,[edx]
server.dll+58951: F3 0F 11 41 10 - movss [ecx+10],xmm0
server.dll+58956: F3 0F 10 40 04 - movss xmm0,[eax+04]
server.dll+5895B: F3 0F 5C 42 04 - subss xmm0,[edx+04]
server.dll+58960: F3 0F 11 41 14 - movss [ecx+14],xmm0
server.dll+58965: F3 0F 10 40 08 - movss xmm0,[eax+08]
server.dll+5896A: F3 0F 5C 42 08 - subss xmm0,[edx+08]
server.dll+5896F: F3 0F 11 41 18 - movss [ecx+18],xmm0
server.dll+58974: F3 0F 10 49 14 - movss xmm1,[ecx+14]
server.dll+58979: F3 0F 10 51 10 - movss xmm2,[ecx+10]
}
242
"X"
0
Float
X
243
"Y"
0
Float
Y
244
"Z"
0
Float
Z
246
"Mon Vac N+M"
Auto Assembler Script
{ Game : Fistful of Frags
Version:
Date : 2024-07-11
Author : Apocalypticx
This script does monster vacuum
}
[ENABLE]
aobscanmodule(teleport2,server.dll,C3 55 8B EC 8B 45 0C 8B 55 08) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(KeyChecker1)
label(KeyChecker2)
label(StorePlayerXYZ)
label(TeleportMonsterToPlayerXYZ)
label(PlayerX)
label(PlayerY)
Label(PlayerZ)
newmem:
pushfd //save the flags to the stack
cmp [eax+D4],1 //compare against monster ID
jb KeyChecker1 //jump if below is player to our KeyChecker1 code
cmp [eax+D4],1 //compare against monster ID
je KeyChecker2 //jump if equal is monster to our KeyChecker2 code
popfd //restore the flags from the stack
code:
mov eax,[ebp+0C] //original insturctions
mov edx,[ebp+08] //original insturctions
jmp return
KeyChecker1:
popfd //restore the flags from the stack
mov eax,[ebp+0C] //original insturctions
mov edx,[ebp+08] //original insturctions
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'N' //check if the N key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je StorePlayerXYZ //jump if equal to keypress for store cords
popfd //pop restore all flags from the stack
jmp return //jump back to main game code
KeyChecker2:
popfd //restore the flags from the stack
mov eax,[ebp+0C] //original insturctions
mov edx,[ebp+08] //original insturctions
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'M' //check if the M key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je TeleportMonsterToPlayerXYZ //jump if equal to keypress for teleport to saved cords
popfd //restore flags from the stack
jmp return //jump back to main game code
StorePlayerXYZ:
popfd //restore the flags from the stack after our jump which fucks flags
push ebx //save ebx to the stack so we can use it in our cheat
mov ebx,[eax] //move the current player X into ebx
mov [PlayerX],ebx //move the current player X into our memory address
mov ebx,[eax+4] //move the current player Y into ebx
mov [PlayerY],ebx //move the current player Y into our memory address
mov ebx,[eax+8] //move the current player Z into ebx
mov [PlayerZ],ebx //move the current player Z into our memory address
pop ebx //restore ebx for no crashing later
jmp return //jump back to main game code
TeleportMonsterToPlayerXYZ:
popfd //restore the flags from the stack after our jump which fucks flags
push ebx //save ebx to the stack so we can use it in our cheat
mov ebx,[PlayerX] //move saved player X into ebx
mov [eax],ebx //move monster X into saved player X
mov ebx,[PlayerY] //move saved player Y into ebx
mov [eax+4],ebx //move monster Y into saved player Y
mov ebx,[PlayerZ] //move saved player Z into ebx
mov [eax+8],ebx //move monster Z into saved player Z
pop ebx //restore ebx for no crashing later
jmp return //jump back to main game code
PlayerX:
dd 0
PlayerY:
dd 0
PlayerZ:
dd 0
teleport2+04:
jmp newmem
nop
return:
registersymbol(teleport2)
registersymbol(PlayerX)
registersymbol(PlayerY)
registersymbol(PlayerZ)
[DISABLE]
teleport2+04:
db 8B 45 0C 8B 55 08
unregistersymbol(PlayerX)
unregistersymbol(PlayerY)
unregistersymbol(PlayerZ)
unregistersymbol(teleport2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: server.dll+58943
server.dll+58924: C7 46 04 00 00 00 00 - mov [esi+04],00000000
server.dll+5892B: C7 46 08 00 00 00 00 - mov [esi+08],00000000
server.dll+58932: 8B 46 04 - mov eax,[esi+04]
server.dll+58935: 89 46 14 - mov [esi+14],eax
server.dll+58938: B0 01 - mov al,01
server.dll+5893A: C6 46 18 00 - mov byte ptr [esi+18],00
server.dll+5893E: 5E - pop esi
server.dll+5893F: C3 - ret
server.dll+58940: 55 - push ebp
server.dll+58941: 8B EC - mov ebp,esp
// ---------- INJECTING HERE ----------
server.dll+58943: 8B 45 0C - mov eax,[ebp+0C]
// ---------- DONE INJECTING ----------
server.dll+58946: 8B 55 08 - mov edx,[ebp+08]
server.dll+58949: F3 0F 10 00 - movss xmm0,[eax]
server.dll+5894D: F3 0F 5C 02 - subss xmm0,[edx]
server.dll+58951: F3 0F 11 41 10 - movss [ecx+10],xmm0
server.dll+58956: F3 0F 10 40 04 - movss xmm0,[eax+04]
server.dll+5895B: F3 0F 5C 42 04 - subss xmm0,[edx+04]
server.dll+58960: F3 0F 11 41 14 - movss [ecx+14],xmm0
server.dll+58965: F3 0F 10 40 08 - movss xmm0,[eax+08]
server.dll+5896A: F3 0F 5C 42 08 - subss xmm0,[edx+08]
server.dll+5896F: F3 0F 11 41 18 - movss [ecx+18],xmm0
}
247
"PlayerX"
0
Float
PlayerX
248
"PlayerY"
0
Float
PlayerY
249
"PlayerZ"
0
Float
PlayerZ
254
"Donate Paypal"
Auto Assembler Script
[ENABLE]
{$lua}
--NO_ACTIVATE
if syntaxcheck then return end
if memrec then print(memrec.Description) end
shellExecute('https://paypal.me/apocalypticx?country.x=GB&locale.x=en_GB')
getLuaEngine().MenuItem1.DoClick()
getLuaEngine().Close()
[DISABLE]
No Recoil
Code :movss [esi],xmm0
server.dll+19FC5A
F3
0F
10
45
FC
F3
0F
11
06
F3
0F
10
45
F8
Health Dec
Code :mov [esi],edi
server.dll+F9D69
90
E4
01
00
00
89
3E
5F
B8
01
00
00
1HitKill
Code :cmp dword ptr [ebx+000000E4],00
server.dll+22BE1E
5B
8B
E5
5D
C3
83
BB
E4
00
00
00
00
0F
8C
B5
01
00
Dynamite
Code :mov [esi],ebx
server.dll+FF154
90
00
05
00
00
89
1E
5F
5E
5B
8B
E5
CrossHair Write
Code :movss [esi],xmm0
server.dll+30BC0D
F3
0F
10
45
FC
F3
0F
11
06
8B
C6
5E
8B
E5
Code :fstp dword ptr [esi]
server.dll+30B754
91
D3
FF
D9
07
D9
1E
5F
8B
C6
5E
5D
Code :movss [esi],xmm0
server.dll+30BDCD
F3
0F
10
45
FC
F3
0F
11
06
8B
C6
5E
8B
E5
Crosshair Read
Code :fld dword ptr [eax+00001360]
server.dll+1A861B
8B
C8
8B
45
98
D9
80
60
13
00
00
8B
01
D9
5D
9C
X
Code :movss xmm0,[eax]
server.dll+58949
45
0C
8B
55
08
F3
0F
10
00
F3
0F
5C
02
F3
Y
Code :movss xmm0,[eax+08]
server.dll+58965
F3
0F
11
41
14
F3
0F
10
40
08
F3
0F
5C
42
08
Z
Code :movss xmm0,[eax+04]
server.dll+58956
F3
0F
11
41
10
F3
0F
10
40
04
F3
0F
5C
42
04
Crosshair Running
Code :movss [esi],xmm0
server.dll+30BB9D
F3
0F
10
45
FC
F3
0F
11
06
8B
C6
5E
8B
E5
Jump Code
Code :fstp dword ptr [ebx+00000220]
server.dll+119E3C
00
00
D9
46
08
D9
9B
20
02
00
00
8B
83
40
01
00
DMMenu
00494CF1
teleport
00A9ADB6
1hit
00581529
breath
00AB29A0
addgold
00BBED13
ammo
00C06C73
noreload
00C06CE2
possession
00BE4C0B
mana
00AA2DE0
godmode
00AAD86E
notimer
00BE5E0E
stoptime
009FB201
SPEED_MULTIPLIER
14800000
I_MovementSpeed
00B4A992
CPUBas
13FFB0010
PHealth
13EA60010
penhel
13EA60000
flashlight
F5D932F32C
cave_light
7FF7BB950010
end1
F592A40030
pTimer
7FF6C26C0000
pSpeed
7FF788F80000
pPoints
7FF788FD0030
pPoints2
7FF788FD0020
pPoints3
7FF788FD0010
pPoints4
7FF788FD0000
pPointsPlayer
7FF788FD0010
"motogp24-Win64-Shipping.exe"+248A33E
Temp Tyre
"motogp24-Win64-Shipping.exe"+248A384
Temp Tyre b
"motogp24-Win64-Shipping.exe"+248A3C7
Temp Tyre c