3
"Health 1Million"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(Health)
registersymbol(Health)
aobscan(Healthaob,d9 86 60 05 00 00 8b ce d9 9c 24 84 00 00 00)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [esi+00000560],(float)1000000
originalcode:
fld dword ptr [esi+00000560]
exit:
jmp returnhere
Healthaob:
Health:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
Health:
fld dword ptr [esi+00000560]
//Alt: db D9 86 60 05 00 00
unregistersymbol(Health)
1
"Mana 1Million"
Auto Assembler Script
{ Game : Torchlight II v.1.25.5.6
Version:
Date : 2023-09-11
Author : Apocalypticx
This script does infinte mana
}
[ENABLE]
aobscanmodule(infinitemana,Torchlight2.exe,D9 9E 84 05 00 00 EB) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
fstp dword ptr [esi+00000584]
mov dword ptr [esi+00000584],(float)1000000
jmp return
infinitemana:
jmp newmem
nop
return:
registersymbol(infinitemana)
[DISABLE]
infinitemana:
db D9 9E 84 05 00 00
unregistersymbol(infinitemana)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Torchlight2.exe+125EC3
Torchlight2.exe+125EA1: C2 04 00 - ret 0004
Torchlight2.exe+125EA4: D9 86 84 05 00 00 - fld dword ptr [esi+00000584]
Torchlight2.exe+125EAA: D8 44 24 0C - fadd dword ptr [esp+0C]
Torchlight2.exe+125EAE: D9 96 84 05 00 00 - fst dword ptr [esi+00000584]
Torchlight2.exe+125EB4: D9 44 24 04 - fld dword ptr [esp+04]
Torchlight2.exe+125EB8: D8 D1 - fcom st(0),st(1)
Torchlight2.exe+125EBA: DF E0 - fnstsw ax
Torchlight2.exe+125EBC: DD D9 - fstp st(1)
Torchlight2.exe+125EBE: F6 C4 05 - test ah,05
Torchlight2.exe+125EC1: 7A 08 - jp Torchlight2.exe+125ECB
// ---------- INJECTING HERE ----------
Torchlight2.exe+125EC3: D9 9E 84 05 00 00 - fstp dword ptr [esi+00000584]
// ---------- DONE INJECTING ----------
Torchlight2.exe+125EC9: EB 02 - jmp Torchlight2.exe+125ECD
Torchlight2.exe+125ECB: DD D8 - fstp st(0)
Torchlight2.exe+125ECD: D9 EE - fldz
Torchlight2.exe+125ECF: D8 96 84 05 00 00 - fcom dword ptr [esi+00000584]
Torchlight2.exe+125ED5: DF E0 - fnstsw ax
Torchlight2.exe+125ED7: F6 C4 41 - test ah,41
Torchlight2.exe+125EDA: 74 BD - je Torchlight2.exe+125E99
Torchlight2.exe+125EDC: DD D8 - fstp st(0)
Torchlight2.exe+125EDE: 5E - pop esi
Torchlight2.exe+125EDF: 59 - pop ecx
}
49
"One Hit Kill"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(OneHitKill)
label(HealthDecreaser)
registersymbol(HealthDecreaser)
aobscan(HealthDecreaseraob,d9 86 60 05 00 00 8b ce d8 44 24 78)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
pushfd
cmp [esi+0000031C],1
jne OneHitKill
popfd
originalcode:
fld dword ptr [esi+00000560]
exit:
jmp returnhere
OneHitKill:
popfd
mov [esi+00000560],(float)0
fld dword ptr [esi+00000560]
jmp returnhere
HealthDecreaseraob:
HealthDecreaser:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
HealthDecreaser:
fld dword ptr [esi+00000560]
//Alt: db D9 86 60 05 00 00
unregistersymbol(HealthDecreaser)
33
"No Cooldowns"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(Cooldown)
registersymbol(Cooldown)
aobscan(Cooldownaob,d9 9d f0 00 00 00 d9 85 f4 00 00 00 8b 85 84 00 00 00)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
fstp dword ptr [ebp+000000F0]
mov [ebp+000000F0],(float)0
exit:
jmp returnhere
Cooldownaob:
Cooldown:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
Cooldown:
fstp dword ptr [ebp+000000F0]
//Alt: db D9 9D F0 00 00 00
unregistersymbol(Cooldown)
5
"Gold Amount"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(GoldAmount)
label(Gold)
registersymbol(GoldAmount)
registersymbol(Gold)
aobscan(Goldaob,8b 88 90 05 00 00 3b d1 77 ** 73 **)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push edx
mov edx,[GoldAmount]
mov [eax+00000590],edx
pop edx
originalcode:
mov ecx,[eax+00000590]
exit:
jmp returnhere
GoldAmount:
dd 0
Goldaob:
Gold:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
Gold:
mov ecx,[eax+00000590]
//Alt: db 8B 88 90 05 00 00
unregistersymbol(Gold)
unregistersymbol(GoldAmount)
6
"Gold Amount"
4 Bytes
GoldAmount
11
"Experience Amount"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(CurrentExperience)
label(Experience)
registersymbol(CurrentExperience)
registersymbol(Experience)
aobscan(Experienceaob,8b 86 94 05 00 00 eb ** 33 c0 8b f8)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push edx
mov edx,[CurrentExperience]
mov [esi+00000594],edx
pop edx
originalcode:
mov eax,[esi+00000594]
exit:
jmp returnhere
CurrentExperience:
dd 0
Experienceaob:
Experience:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
Experience:
mov eax,[esi+00000594]
//Alt: db 8B 86 94 05 00 00
unregistersymbol(Experience)
unregistersymbol(CurrentExperience)
12
"Current Experience"
4 Bytes
CurrentExperience
27
"Skill Points Amount"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(CurrentSkillPoints)
label(SkillPoints)
registersymbol(CurrentSkillPoints)
registersymbol(SkillPoints)
aobscan(SkillPointsaob,8b 88 ac 05 00 00 3b 8e 90 00 00 00 75 **)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push edx
mov edx,[CurrentSkillPoints]
mov [eax+000005AC],edx
pop edx
originalcode:
mov ecx,[eax+000005AC]
exit:
jmp returnhere
CurrentSkillPoints:
dd 0
SkillPointsaob:
SkillPoints:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
SkillPoints:
mov ecx,[eax+000005AC]
//Alt: db 8B 88 AC 05 00 00
unregistersymbol(SkillPoints)
unregistersymbol(CurrentSkillPoints)
28
"Current Skill Points"
4 Bytes
CurrentSkillPoints
46
"Stat Points Amount"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(CurrentStatPoints)
label(StatPoints)
registersymbol(CurrentStatPoints)
registersymbol(StatPoints)
aobscan(StatPointsaob,8b bf a8 05 00 00 89 7c 24 10 e9 ** ** ** **)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push edx
mov edx,[CurrentStatPoints]
mov [edi+000005A8],edx
pop edx
originalcode:
mov edi,[edi+000005A8]
exit:
jmp returnhere
CurrentStatPoints:
dd 0
StatPointsaob:
StatPoints:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
StatPoints:
mov edi,[edi+000005A8]
//Alt: db 8B BF A8 05 00 00
unregistersymbol(StatPoints)
unregistersymbol(CurrentStatPoints)
47
"Current Stat Points"
4 Bytes
CurrentStatPoints
55
"Teleport S=Store D=Teleport"
Auto Assembler Script
{ Game : Torchlight II v.1.25.5.6
Version:
Date : 2023-09-27
Author : Apocalypticx
This script does teleport use keys S and D to store and teleport
}
[ENABLE]
aobscanmodule(teleport,Torchlight2.exe,8B 51 70 8B 44 24 04) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(PartyX)
label(PartyY)
label(PartyZ)
label(KeyChecker)
label(StoreXYZ)
label(Tele)
newmem:
pushfd //push save all flags to the stack
cmp ebx,1 //compare against me or computer
je KeyChecker //jump if equal to me to keychecking routine
popfd //pop restore all the flags from the stack
jmp code //jump to main code
KeyChecker:
popfd //pop restore all the flags from the stack
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'S' //check if the S key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je StoreXYZ //jump if equal to keypress for store cords
popfd //pop restore all flags from the stack
pushfd //push save all flags to the stack
pushad //push save all 32bit general purpose registers to stack
push 'D' //check if the D key is being held down or up
call GetAsyncKeyState //windows routine to check if key is up or down
shr ax,#15
cmp ax,1 //compare key against key being held down
popad //pop restore all 32bit general regsiters from the stack
je Tele //jump if equal to keypress for teleport to saved cords
popfd //pop restore all flags from the stack
code:
mov edx,[ecx+70] //original instructions
mov eax,[esp+04] //original instructions
jmp return //jump back to the main game routine
StoreXYZ:
popfd //pop restore all flags from the stack
push ebx //push save ebx to stack so we can use it
mov ebx,[ecx+70] //copy X into ebx
mov [PartyX],ebx //copy X into our label (memory address)
mov ebx,[ecx+74] //copy Y into ebx
mov [PartyY],ebx //copy Y into our label (memory address)
mov ebx,[ecx+78] //copy Z into ebx
mov [PartyZ],ebx //copy Y into our label (memory address)
pop ebx //pop restore ebx from stack
mov edx,[ecx+70] //original instructions
mov eax,[esp+04] //original instructions
jmp return //jump back to main game routine
Tele:
popfd //pop restore all flags from the stack
push ebx //push save ebx to stack so we can use it
mov ebx,[PartyX] //copy saved X into ebx
mov [ecx+70],ebx //copy saved X into current X
mov ebx,[PartyY] //copy saved Y into ebx
mov [ecx+74],ebx //copy saved Y into current Y
mov ebx,[PartyZ] //copy saved Z into ebx
mov [ecx+78],ebx //copy saved Z into current Z
pop ebx //pop restore ebx from stack
mov edx,[ecx+70] //original instructions
mov eax,[esp+04] //original instructions
jmp return //jump back to main game routine
PartyX: //Our memory address label for X
dd 0 //data type is a dword 4 bytes
PartyY: //Our memory address label for Y
dd 0 //data type is a dword 4 bytes
PartyZ: //Our memory address label for Z
dd 0 //data type is a dword 4 bytes
teleport:
jmp newmem
nop
nop
return:
registersymbol(teleport)
registersymbol(PartyX)
registersymbol(PartyY)
registersymbol(PartyZ)
[DISABLE]
teleport:
db 8B 51 70 8B 44 24 04
unregistersymbol(PartyX)
unregistersymbol(PartyY)
unregistersymbol(PartyZ)
unregistersymbol(teleport)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Torchlight2.exe+21F579
Torchlight2.exe+21F55E: FF D2 - call edx
Torchlight2.exe+21F560: 8B 10 - mov edx,[eax]
Torchlight2.exe+21F562: 8B 4C 24 04 - mov ecx,[esp+04]
Torchlight2.exe+21F566: 89 11 - mov [ecx],edx
Torchlight2.exe+21F568: 8B 50 04 - mov edx,[eax+04]
Torchlight2.exe+21F56B: 8B 40 08 - mov eax,[eax+08]
Torchlight2.exe+21F56E: 89 51 04 - mov [ecx+04],edx
Torchlight2.exe+21F571: 89 41 08 - mov [ecx+08],eax
Torchlight2.exe+21F574: 8B C1 - mov eax,ecx
Torchlight2.exe+21F576: C2 08 00 - ret 0008
// ---------- INJECTING HERE ----------
Torchlight2.exe+21F579: 8B 51 70 - mov edx,[ecx+70]
// ---------- DONE INJECTING ----------
Torchlight2.exe+21F57C: 8B 44 24 04 - mov eax,[esp+04]
Torchlight2.exe+21F580: 89 10 - mov [eax],edx
Torchlight2.exe+21F582: 8B 51 74 - mov edx,[ecx+74]
Torchlight2.exe+21F585: 8B 49 78 - mov ecx,[ecx+78]
Torchlight2.exe+21F588: 89 50 04 - mov [eax+04],edx
Torchlight2.exe+21F58B: 89 48 08 - mov [eax+08],ecx
Torchlight2.exe+21F58E: C2 08 00 - ret 0008
Torchlight2.exe+21F591: CC - int 3
Torchlight2.exe+21F592: CC - int 3
Torchlight2.exe+21F593: CC - int 3
}
56
"PartyX"
0
Float
PartyX
57
"PartyY"
0
Float
PartyY
58
"PartyZ"
0
Float
PartyZ
72
"Vaccsuck F=Store G=Vaccusuck"
Auto Assembler Script
{ Game : Torchlight II v.1.25.5.6
Version:
Date : 2023-09-30
Author : Apocalypticx
This script does vaccusuck
}
[ENABLE]
aobscanmodule(vaccusuck,OgreMain.dll,D9 18 D9 41 04 D8 62 04 D9 58 04 D9 41 08 D8 62 08 D9 58 08 C2) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(MonsterX)
label(MonsterY)
label(MonsterZ)
label(StoreXYZ)
label(Vac)
newmem:
pushfd
cmp [edx+94],0
je KeyChecker
popfd
jmp code
KeyChecker:
popfd
pushfd
pushad
push 'F'
call GetAsyncKeyState
shr ax,#15
cmp ax,1
popad
je StoreXYZ
popfd
pushfd
pushad
push 'G'
call GetAsyncKeyState
shr ax,#15
cmp ax,1
popad
je Vac
popfd
code:
fstp dword ptr [eax]
fld dword ptr [ecx+04]
jmp return
StoreXYZ:
popfd
fstp dword ptr [eax]
fld dword ptr [ecx+04]
push ebx
mov ebx,[edx]
mov [MonsterX],ebx
mov ebx,[edx+4]
mov [MonsterY],ebx
mov ebx,[edx+8]
mov [MonsterZ],ebx
pop ebx
jmp return
Vac:
popfd
fstp dword ptr [eax]
fld dword ptr [ecx+04]
push ebx
mov ebx,[MonsterX]
mov [edx],ebx
mov ebx,[MonsterY]
mov [edx+4],ebx
mov ebx,[MonsterZ]
mov [edx+8],ebx
pop ebx
jmp return
MonsterX:
dd 0
MonsterY:
dd 0
MonsterZ:
dd 0
vaccusuck:
jmp newmem
return:
registersymbol(vaccusuck)
registersymbol(MonsterX)
registersymbol(MonsterY)
registersymbol(MonsterZ)
[DISABLE]
vaccusuck:
db D9 18 D9 41 04
unregistersymbol(MonsterX)
unregistersymbol(MonsterY)
unregistersymbol(MonsterZ)
unregistersymbol(vaccusuck)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: OgreMain.Ogre::Vector3::operator-+C
OgreMain.Ogre::Vector3::operator++2A: CC - int 3
OgreMain.Ogre::Vector3::operator++2B: CC - int 3
OgreMain.Ogre::Vector3::operator++2C: CC - int 3
OgreMain.Ogre::Vector3::operator++2D: CC - int 3
OgreMain.Ogre::Vector3::operator++2E: CC - int 3
OgreMain.Ogre::Vector3::operator++2F: CC - int 3
OgreMain.Ogre::Vector3::operator-: 8B 54 24 08 - mov edx,[esp+08]
OgreMain.Ogre::Vector3::operator-+4: D9 01 - fld dword ptr [ecx]
OgreMain.Ogre::Vector3::operator-+6: D8 22 - fsub dword ptr [edx]
OgreMain.Ogre::Vector3::operator-+8: 8B 44 24 04 - mov eax,[esp+04]
// ---------- INJECTING HERE ----------
OgreMain.Ogre::Vector3::operator-+C: D9 18 - fstp dword ptr [eax]
// ---------- DONE INJECTING ----------
OgreMain.Ogre::Vector3::operator-+E: D9 41 04 - fld dword ptr [ecx+04]
OgreMain.Ogre::Vector3::operator-+11: D8 62 04 - fsub dword ptr [edx+04]
OgreMain.Ogre::Vector3::operator-+14: D9 58 04 - fstp dword ptr [eax+04]
OgreMain.Ogre::Vector3::operator-+17: D9 41 08 - fld dword ptr [ecx+08]
OgreMain.Ogre::Vector3::operator-+1A: D8 62 08 - fsub dword ptr [edx+08]
OgreMain.Ogre::Vector3::operator-+1D: D9 58 08 - fstp dword ptr [eax+08]
OgreMain.Ogre::Vector3::operator-+20: C2 08 00 - ret 0008
OgreMain.Ogre::Vector3::operator-+23: CC - int 3
OgreMain.Ogre::Vector3::operator-+24: CC - int 3
OgreMain.Ogre::Vector3::operator-+25: CC - int 3
}
73
"MonsterX"
0
Float
MonsterX
74
"MonsterY"
0
Float
MonsterY
75
"MonsterZ"
0
Float
MonsterZ
76
"Donate Paypal"
Auto Assembler Script
[ENABLE]
{$lua}
--NO_ACTIVATE
if syntaxcheck then return end
if memrec then print(memrec.Description) end
shellExecute('https://paypal.me/apocalypticx?country.x=GB&locale.x=en_GB')
getLuaEngine().MenuItem1.DoClick()
getLuaEngine().Close()
[DISABLE]
newmem
1B37EA40000
CPUBas
13FFB0010
PHealth
13EA60010
penhel
13EA60000
flashlight
F5D932F32C
cave_light
7FF7BB950010
end1
F592A40030
pTimer
7FF6C26C0000
pSpeed
7FF788F80000
pPoints
7FF788FD0030
pPoints2
7FF788FD0020
pPoints3
7FF788FD0010
pPoints4
7FF788FD0000
pPointsPlayer
7FF788FD0010
CurrentProduction
064C0016
DMMenu
00494CF1
teleport
00A9ADB6
1hit
00581529
breath
00AB29A0
addgold
00BBED13
ammo
00C06C73
noreload
00C06CE2
possession
00BE4C0B
mana
00AA2DE0
godmode
00AAD86E
notimer
00BE5E0E
stoptime
009FB201
SPEED_MULTIPLIER
14800000
I_MovementSpeed
00B4A992
"motogp24-Win64-Shipping.exe"+248A33E
Temp Tyre
"motogp24-Win64-Shipping.exe"+248A384
Temp Tyre b
"motogp24-Win64-Shipping.exe"+248A3C7
Temp Tyre c