35
"Enable"
00FF00
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
fcEnabled = getAddress('AvP_DX11.exe+666534')
fcFOV = getAddress('AvP_DX11.exe+5CFD74')
fcUseFOV = getAddress('AvP_DX11.exe+666536')
soloLobby = getAddress('AvP_DX11.exe+5E9C14')
showpos = getAddress('AvP_DX11.exe+66dac0')
[DISABLE]
45
"Player"
FF8080
1
88
"Alien (none atm)"
008000
1
86
"Predator"
0000B3
1
6
"PlayerHealth"
0
Float
"AvP_DX11.exe"+0066DDEC
408
0
0
87
"Human"
FF4A4A
1
85
"Inf Ammo"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-02
Author : nightfall
}
[ENABLE]
aobscanmodule(writeAmmo,AvP_DX11.exe,C1 F3 0F 11 41 10 D9) // should be unique
registersymbol(writeAmmo)
writeAmmo+01:
db 90 90 90 90 90
[DISABLE]
writeAmmo+01:
db F3 0F 11 41 10
unregistersymbol(writeAmmo)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+3A4D52
AvP_DX11.exe+3A4D2F: CC - int 3
AvP_DX11.exe+3A4D30: F3 0F 10 41 10 - movss xmm0,[ecx+10]
AvP_DX11.exe+3A4D35: F3 0F 10 4C 24 04 - movss xmm1,[esp+04]
AvP_DX11.exe+3A4D3B: 0F 2F C8 - comiss xmm1,xmm0
AvP_DX11.exe+3A4D3E: 76 0E - jna AvP_DX11.exe+3A4D4E
AvP_DX11.exe+3A4D40: 0F 57 C0 - xorps xmm0,xmm0
AvP_DX11.exe+3A4D43: F3 0F 11 41 10 - movss [ecx+10],xmm0
AvP_DX11.exe+3A4D48: D9 41 10 - fld dword ptr [ecx+10]
AvP_DX11.exe+3A4D4B: C2 04 00 - ret 0004
AvP_DX11.exe+3A4D4E: F3 0F 5C C1 - subss xmm0,xmm1
// ---------- INJECTING HERE ----------
AvP_DX11.exe+3A4D52: F3 0F 11 41 10 - movss [ecx+10],xmm0
// ---------- DONE INJECTING ----------
AvP_DX11.exe+3A4D57: D9 41 10 - fld dword ptr [ecx+10]
AvP_DX11.exe+3A4D5A: C2 04 00 - ret 0004
AvP_DX11.exe+3A4D5D: CC - int 3
AvP_DX11.exe+3A4D5E: CC - int 3
AvP_DX11.exe+3A4D5F: CC - int 3
AvP_DX11.exe+3A4D60: F3 0F 10 49 14 - movss xmm1,[ecx+14]
AvP_DX11.exe+3A4D65: F3 0F 10 41 10 - movss xmm0,[ecx+10]
AvP_DX11.exe+3A4D6A: F3 0F 10 54 24 04 - movss xmm2,[esp+04]
AvP_DX11.exe+3A4D70: 0F 28 D9 - movaps xmm3,xmm1
AvP_DX11.exe+3A4D73: F3 0F 5C D8 - subss xmm3,xmm0
}
93
"Show Position"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
writeInteger(showpos,1)
[DISABLE]
writeInteger(showpos,0)
36
"Freecam"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
writeInteger(fcEnabled, 1)
writeFloat(fcFOV, 120.0)
writeByte(fcUseFOV, 1)
[DISABLE]
writeInteger(fcEnabled, 0)
writeByte(fcUseFOV, 0)
38
"Visuals Changer"
Auto Assembler Script
[ENABLE]
alloc(changeType,8)
registersymbol(changeType)
changeType:
dd 01
[DISABLE]
unregistersymbol(changeType)
dealloc(*)
39
"Type"
1:Alien
2:Predator
3:Marine
0
4 Bytes
changeType
37
"<-- Change Visuals"
Auto Assembler Script
[ENABLE]
define(toPredatorFunc,AvP_DX11.exe+415620)
define(toAlienFunc,AvP_DX11.exe+415430)
define(toMarineFunc,AvP_DX11.exe+415540)
alloc(cmem,$1000,toAlienFunc)
registersymbol(cmem,toAlienFunc,toPredatorFunc,toMarineFunc)
CreateThread(cmem)
cmem:
cmp [changeType],0
je @f
{$ccode}
extern __cdecl int toPredatorFunc(char arg1);
extern __cdecl int toAlienFunc(char arg1);
extern __cdecl int toMarineFunc(char arg1);
extern int changeType;
char arg = 0;
switch (changeType){
case 1:
toAlienFunc(arg);
break;
case 2:
toPredatorFunc(arg);
break;
case 3:
toMarineFunc(arg);
break;
default:
break;
}
{$asm}
@@:
xor rax,rax
ret
[DISABLE]
dealloc(*)
unregistersymbol(*)
158
"XRAY [X]"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
}
[ENABLE]
aobscanmodule(xray,AvP_DX11.exe,0F 82 65 FD FF FF)
luacall(writeByte('$process+5ccd08',0)) // disable botanics
xray:
db 90 90 90 90 90 90
[DISABLE]
luacall(writeByte('$process+5ccd08',1))
xray:
db 0F 82 65 FD FF FF
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+26DC05
AvP_DX11.exe+26DBDF: FF D0 - call eax
AvP_DX11.exe+26DBE1: 8B 7C 24 58 - mov edi,[esp+58]
AvP_DX11.exe+26DBE5: 8B 5C 24 14 - mov ebx,[esp+14]
AvP_DX11.exe+26DBE9: 8B 44 24 34 - mov eax,[esp+34]
AvP_DX11.exe+26DBED: 8B 6C 24 38 - mov ebp,[esp+38]
AvP_DX11.exe+26DBF1: 83 C0 01 - add eax,01
AvP_DX11.exe+26DBF4: 83 C5 3C - add ebp,3C
AvP_DX11.exe+26DBF7: 3B 05 88 59 A2 00 - cmp eax,[AvP_DX11.exe+625988]
AvP_DX11.exe+26DBFD: 89 44 24 34 - mov [esp+34],eax
AvP_DX11.exe+26DC01: 89 6C 24 38 - mov [esp+38],ebp
// ---------- INJECTING HERE ----------
AvP_DX11.exe+26DC05: 0F 82 65 FD FF FF - jb AvP_DX11.exe+26D970
// ---------- DONE INJECTING ----------
AvP_DX11.exe+26DC0B: 33 ED - xor ebp,ebp
AvP_DX11.exe+26DC0D: 55 - push ebp
AvP_DX11.exe+26DC0E: 55 - push ebp
AvP_DX11.exe+26DC0F: E8 5C FB FF FF - call AvP_DX11.exe+26D770
AvP_DX11.exe+26DC14: 83 C4 08 - add esp,08
AvP_DX11.exe+26DC17: 80 7C 24 13 00 - cmp byte ptr [esp+13],00
AvP_DX11.exe+26DC1C: 5F - pop edi
AvP_DX11.exe+26DC1D: 5E - pop esi
AvP_DX11.exe+26DC1E: 74 20 - je AvP_DX11.exe+26DC40
AvP_DX11.exe+26DC20: 8B 0B - mov ecx,[ebx]
}
Toggle Activation
88
0
346
"FOV Changer"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
}
[ENABLE]
aobscanmodule(fovChanger,AvP_DX11.exe,F3 0F 10 5E 0C F3 0F 11 5C)
alloc(newmem,$1000)
label(code)
label(return)
label(viewbase)
newmem:
mov [viewbase],esi
code:
movss xmm3,[esi+0C]
jmp return
viewbase:
dd 00
fovChanger:
jmp newmem
return:
registersymbol(fovChanger viewbase)
[DISABLE]
luacall(writeFloat('[viewbase]+0C',0.9512044191))
fovChanger:
db F3 0F 10 5E 0C
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+295AB4
AvP_DX11.exe+295A87: 8D 8C 24 A4 00 00 00 - lea ecx,[esp+000000A4]
AvP_DX11.exe+295A8E: 51 - push ecx
AvP_DX11.exe+295A8F: 8D 8C 24 98 00 00 00 - lea ecx,[esp+00000098]
AvP_DX11.exe+295A96: E8 05 A2 E4 FF - call AvP_DX11.exe+DFCA0
AvP_DX11.exe+295A9B: 8D 54 24 44 - lea edx,[esp+44]
AvP_DX11.exe+295A9F: 52 - push edx
AvP_DX11.exe+295AA0: 8D 8C 24 90 00 00 00 - lea ecx,[esp+00000090]
AvP_DX11.exe+295AA7: E8 54 5B D9 FF - call AvP_DX11.exe+2B600
AvP_DX11.exe+295AAC: F3 0F 10 5C 24 10 - movss xmm3,[esp+10]
AvP_DX11.exe+295AB2: EB 0B - jmp AvP_DX11.exe+295ABF
// ---------- INJECTING HERE ----------
AvP_DX11.exe+295AB4: F3 0F 10 5E 0C - movss xmm3,[esi+0C]
// ---------- DONE INJECTING ----------
AvP_DX11.exe+295AB9: F3 0F 11 5C 24 10 - movss [esp+10],xmm3
AvP_DX11.exe+295ABF: F6 86 A4 00 00 00 08 - test byte ptr [esi+000000A4],08
AvP_DX11.exe+295AC6: F3 0F 10 05 94 14 9E 00 - movss xmm0,[AvP_DX11.exe+5E1494]
AvP_DX11.exe+295ACE: F3 0F 10 8E A0 00 00 00 - movss xmm1,[esi+000000A0]
AvP_DX11.exe+295AD6: F3 0F 59 C8 - mulss xmm1,xmm0
AvP_DX11.exe+295ADA: 74 12 - je AvP_DX11.exe+295AEE
AvP_DX11.exe+295ADC: F3 0F 58 8E 9C 00 00 00 - addss xmm1,[esi+0000009C]
AvP_DX11.exe+295AE4: F3 0F 11 8E 9C 00 00 00 - movss [esi+0000009C],xmm1
AvP_DX11.exe+295AEC: EB 14 - jmp AvP_DX11.exe+295B02
AvP_DX11.exe+295AEE: F3 0F 10 86 9C 00 00 00 - movss xmm0,[esi+0000009C]
}
347
"FOV"
0
Float
[viewbase]+0C
46
"Game"
0080FF
1
40
"Unlock all Levels"
Auto Assembler Script
[ENABLE]
define(OpenAllLevels,AvP_DX11.exe+416A10)
alloc(omem,$200,AvP_DX11.exe+416A10)
registersymbol(omem,OpenAllLevels)
CreateThread(omem)
omem:
{$ccode}
extern __cdecl void* OpenAllLevels(char arg1);
OpenAllLevels(0);
{$asm}
xor eax,eax
ret
[DISABLE]
unregistersymbol(*)
dealloc(*)
74
"Unlock all Skins"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2025-12-30
Author : nightfall
}
[ENABLE]
aobscanmodule(skins,AvP_DX11.exe,76 D8 68 34 4F 8C 00)
skins:
db EB D8 68 34 4F 8C 00
[DISABLE]
skins:
db 76 D8 68 34 4F 8C 00
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+38EE44
AvP_DX11.exe+38EE27: 74 1D - je AvP_DX11.exe+38EE46
AvP_DX11.exe+38EE29: 8D 4C 24 14 - lea ecx,[esp+14]
AvP_DX11.exe+38EE2D: 6A 01 - push 01
AvP_DX11.exe+38EE2F: 51 - push ecx
AvP_DX11.exe+38EE30: E8 CB A2 D8 FF - call AvP_DX11.exe+119100
AvP_DX11.exe+38EE35: 83 C4 04 - add esp,04
AvP_DX11.exe+38EE38: 50 - push eax
AvP_DX11.exe+38EE39: 8B CD - mov ecx,ebp
AvP_DX11.exe+38EE3B: E8 C0 37 D6 FF - call AvP_DX11.exe+F2600
AvP_DX11.exe+38EE40: 3B 44 24 10 - cmp eax,[esp+10]
// ---------- INJECTING HERE ----------
AvP_DX11.exe+38EE44: 76 D8 - jna AvP_DX11.exe+38EE1E
// ---------- DONE INJECTING ----------
AvP_DX11.exe+38EE46: 68 34 4F 8C 00 - push AvP_DX11.exe+4C4F34
AvP_DX11.exe+38EE4B: E8 80 B9 DF FF - call AvP_DX11.exe+18A7D0
AvP_DX11.exe+38EE50: 83 C4 04 - add esp,04
AvP_DX11.exe+38EE53: 5F - pop edi
AvP_DX11.exe+38EE54: 5E - pop esi
AvP_DX11.exe+38EE55: 5D - pop ebp
AvP_DX11.exe+38EE56: 5B - pop ebx
AvP_DX11.exe+38EE57: 8B 4C 24 44 - mov ecx,[esp+44]
AvP_DX11.exe+38EE5B: 33 CC - xor ecx,esp
AvP_DX11.exe+38EE5D: B0 01 - mov al,01
}
41
"Skip Current Level"
Auto Assembler Script
[ENABLE]
define(SkipLevel,AvP_DX11.exe+39C9B0)
alloc(smem,$200,AvP_DX11.exe+39C9B0)
registersymbol(smem,SkipLevel)
CreateThread(smem)
smem:
{$ccode}
extern __cdecl void* SkipLevel(char arg1);
SkipLevel(0);
{$asm}
xor eax,eax
ret
[DISABLE]
unregistersymbol(*)
dealloc(*)
69
"Hook Console"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2025-12-30
Author : nightfall
}
[ENABLE]
{$lua}
if syntaxcheck then return end
--showMessage("Don't press ESC while the console is hooked, otherwise you will trigger an integrity check")
autoAssemble([[
aobscanmodule(setGlobalFlags,AvP_DX11.exe,80 3D 58 1C 9E 00 00)
alloc(newmem,$300)
alloc(cText,$200)
label(code)
label(return)
label(openConsole)
label(fFlag)
newmem:
cmp [openConsole],0
je @f
mov eax,1
mov [openConsole],0
ret
code:
cmp byte ptr [AvP_DX11.exe+5E1C58],00
jmp return
openConsole:
db 00
fFlag:
db 00
setGlobalFlags:
jmp newmem
nop 2
return:
registersymbol(setGlobalFlags openConsole cText fFlag)
]])
local firstTimeFlag = readByte('fFlag')
local addressList = getAddressList()
local print_console = addressList.getMemoryRecordByDescription('PrintToConsole')
local open_console = addressList.getMemoryRecordByDescription('Open Console')
sleep(1000)
if firstTimeFlag == 0 then
writeString('cText',"Hook Initialized")
writeByte('fFlag',1)
if(print_console.Active == false)then
print_console.Active = true
else
print_console.Active = false
end
sleep(200)
writeString('cText'," ")
print_console.Active = false
end
{$asm}
[DISABLE]
setGlobalFlags:
db 80 3D 58 1C 9E 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+39D4E0
AvP_DX11.exe+39D4D5: B0 01 - mov al,01
AvP_DX11.exe+39D4D7: C3 - ret
AvP_DX11.exe+39D4D8: CC - int 3
AvP_DX11.exe+39D4D9: CC - int 3
AvP_DX11.exe+39D4DA: CC - int 3
AvP_DX11.exe+39D4DB: CC - int 3
AvP_DX11.exe+39D4DC: CC - int 3
AvP_DX11.exe+39D4DD: CC - int 3
AvP_DX11.exe+39D4DE: CC - int 3
AvP_DX11.exe+39D4DF: CC - int 3
// ---------- INJECTING HERE ----------
AvP_DX11.exe+39D4E0: 80 3D 58 1C 9E 00 00 - cmp byte ptr [AvP_DX11.exe+5E1C58],00
// ---------- DONE INJECTING ----------
AvP_DX11.exe+39D4E7: 74 18 - je AvP_DX11.exe+39D501
AvP_DX11.exe+39D4E9: 80 3D C8 15 9E 00 00 - cmp byte ptr [AvP_DX11.exe+5E15C8],00
AvP_DX11.exe+39D4F0: 75 0F - jne AvP_DX11.exe+39D501
AvP_DX11.exe+39D4F2: 83 3D 38 FD 9F 00 00 - cmp dword ptr [AvP_DX11.exe+5FFD38],00
AvP_DX11.exe+39D4F9: 75 06 - jne AvP_DX11.exe+39D501
AvP_DX11.exe+39D4FB: B8 01 00 00 00 - mov eax,00000001
AvP_DX11.exe+39D500: C3 - ret
AvP_DX11.exe+39D501: 33 C0 - xor eax,eax
AvP_DX11.exe+39D503: C3 - ret
AvP_DX11.exe+39D504: CC - int 3
}
72
"Toggle Console"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
writeByte('openConsole',1)
[DISABLE]
writeByte('openConsole',1)
Toggle Activation
220
0
51
"HookConsoleSettings"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2025-12-30
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(consoleWrapperHook,AvP_DX11.exe,8B 0D A0 77 9E 00 8B 01 8B 50 1C) // should be unique
alloc(newmem,$1000)
label(return)
label(console)
newmem:
mov ecx,[AvP_DX11.exe+5E77A0]
mov [console],ecx
jmp return
console:
dd 00
consoleWrapperHook:
jmp newmem
nop
return:
registersymbol(consoleWrapperHook console)
[DISABLE]
consoleWrapperHook:
db 8B 0D A0 77 9E 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+18CE8E
AvP_DX11.exe+18CE63: 84 C0 - test al,al
AvP_DX11.exe+18CE65: 0F 94 C0 - sete al
AvP_DX11.exe+18CE68: A2 A9 77 9E 00 - mov [AvP_DX11.exe+5E77A9],al
AvP_DX11.exe+18CE6D: C6 05 A8 77 9E 00 01 - mov byte ptr [AvP_DX11.exe+5E77A8],01
AvP_DX11.exe+18CE74: C7 05 A4 77 9E 00 00 00 00 00 - mov [AvP_DX11.exe+5E77A4],00000000
AvP_DX11.exe+18CE7E: C3 - ret
AvP_DX11.exe+18CE7F: CC - int 3
AvP_DX11.exe+18CE80: E8 6B 0B 00 00 - call AvP_DX11.exe+18D9F0
AvP_DX11.exe+18CE85: 80 3D A9 77 9E 00 00 - cmp byte ptr [AvP_DX11.exe+5E77A9],00
AvP_DX11.exe+18CE8C: 74 2C - je AvP_DX11.exe+18CEBA
// ---------- INJECTING HERE ----------
AvP_DX11.exe+18CE8E: 8B 0D A0 77 9E 00 - mov ecx,[AvP_DX11.exe+5E77A0]
// ---------- DONE INJECTING ----------
AvP_DX11.exe+18CE94: 8B 01 - mov eax,[ecx]
AvP_DX11.exe+18CE96: 8B 50 1C - mov edx,[eax+1C]
AvP_DX11.exe+18CE99: FF D2 - call edx
AvP_DX11.exe+18CE9B: 84 C0 - test al,al
AvP_DX11.exe+18CE9D: 74 14 - je AvP_DX11.exe+18CEB3
AvP_DX11.exe+18CE9F: 8B 0D A0 77 9E 00 - mov ecx,[AvP_DX11.exe+5E77A0]
AvP_DX11.exe+18CEA5: 8B 01 - mov eax,[ecx]
AvP_DX11.exe+18CEA7: 8B 50 20 - mov edx,[eax+20]
AvP_DX11.exe+18CEAA: 68 C0 CD 58 00 - push AvP_DX11.exe+18CDC0
AvP_DX11.exe+18CEAF: FF D2 - call edx
}
55
"size"
0
Float
[console]+C
71
"Background"
0
Float
[console]+1C
90
"CustomText"
0
String
200
0
0
1
cText
89
"PrintToConsole"
Auto Assembler Script
[ENABLE]
define(cPrint,AvP_DX11.exe+18A7D0)
alloc(cPmem,$200,AvP_DX11.exe+18A7D0)
registersymbol(cPmem,cPrint)
CreateThread(cPmem)
cPmem:
{$ccode}
extern __cdecl int cPrint(char* stringToPrint);
extern char cText[];
//char input[] = cText;
char output[120] = {};
int i = 0;
while (cText[i] != '\0') {
// Für jedes Zeichen im C-String füge das Low-Byte und das High-Byte hinzu
output[i * 2] = cText[i]; // ASCII-Wert als Low-Byte
output[i * 2 + 1] = 0x00; // High-Byte ist immer 0x00
i++;
}
// Null-Terminierung des neuen UTF-16-ähnlichen Arrays
output[i * 2] = 0x00;
output[i * 2 + 1] = 0x00;
cPrint(output);
{$asm}
xor eax,eax
ret
[DISABLE]
unregistersymbol(*)
dealloc(*)
80
"Launch Solo Lobby"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2025-12-31
Author : nightfall
Enable this script once you have set up your lobby.
Pressing ESCAPE or picking up items in this kind of lobby will cause a crash (this still need to be fixed)
}
[ENABLE]
aobscanmodule(noKick,AvP_DX11.exe,A8 02 74 13 8B 56 0C) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
cmp eax,14100B
je AvP_DX11.exe+40F3D2
code:
test al,02
je AvP_DX11.exe+40F371
mov edx,[esi+0C]
jmp return
noKick:
jmp newmem
nop 2
return:
registersymbol(noKick)
{$lua}
if syntaxcheck then return end
ShowMessage("Leave this script enabled while you're inside the lobby and don't press ESCAPE")
writeInteger(soloLobby,8)
{$asm}
[DISABLE]
noKick:
db A8 02 74 13 8B 56 0C
unregistersymbol(noKick)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+40F35A
AvP_DX11.exe+40F34B: CC - int 3
AvP_DX11.exe+40F34C: CC - int 3
AvP_DX11.exe+40F34D: CC - int 3
AvP_DX11.exe+40F34E: CC - int 3
AvP_DX11.exe+40F34F: CC - int 3
AvP_DX11.exe+40F350: 56 - push esi
AvP_DX11.exe+40F351: 8B F1 - mov esi,ecx
AvP_DX11.exe+40F353: 8B 46 04 - mov eax,[esi+04]
AvP_DX11.exe+40F356: A8 01 - test al,01
AvP_DX11.exe+40F358: 74 78 - je AvP_DX11.exe+40F3D2
// ---------- INJECTING HERE ----------
AvP_DX11.exe+40F35A: A8 02 - test al,02
// ---------- DONE INJECTING ----------
AvP_DX11.exe+40F35C: 74 13 - je AvP_DX11.exe+40F371
AvP_DX11.exe+40F35E: 8B 56 0C - mov edx,[esi+0C]
AvP_DX11.exe+40F361: 8B C8 - mov ecx,eax
AvP_DX11.exe+40F363: C1 E9 02 - shr ecx,02
AvP_DX11.exe+40F366: 81 E1 FF 00 00 00 - and ecx,000000FF
AvP_DX11.exe+40F36C: 8B 0C 8A - mov ecx,[edx+ecx*4]
AvP_DX11.exe+40F36F: EB 02 - jmp AvP_DX11.exe+40F373
AvP_DX11.exe+40F371: 33 C9 - xor ecx,ecx
AvP_DX11.exe+40F373: 8B 56 0C - mov edx,[esi+0C]
AvP_DX11.exe+40F376: C1 E8 0A - shr eax,0A
}
97
"Max Players (lobby)"
0
4 Bytes
$process+5d3ca8
73
"Testing"
808080
1
8
"Pointers"
808080
1
7
"PlayerHealthBase"
1
0
4 Bytes
"AvP_DX11.exe"+0066DDEC
3D4
0
0
34
"Freecam"
1
30
"Freecam Enabled"
0
Byte
AvP_DX11.exe+666534
33
"useFreecamFOV"
0
Byte
AvP_DX11.exe+666536
31
"FreecamFOV"
0
Float
AvP_DX11.exe+5CFD74
44
"TeamPtr"
0
4 Bytes
AvP_DX11.exe+671E3C
75
"mp_lobby_state"
8:Start Match
0
4 Bytes
AvP_DX11.exe+5E9C14
92
"showPos"
0
Byte
$process+66dac0
94
"drawSomeSphere?"
0
Byte
$process+66dac1
154
"RenderEverything"
0
Byte
$process+5ff31b
155
"Distnant Fog"
0
Byte
AvP_DX11.exe+5EA246
153
"XRayMode (Old Flag)"
0
Byte
$process+5ff31a
159
"Show Botanics"
0
Byte
$process+5ccd08
160
"DrawEdges"
0
Byte
$process+625efc
135
"Coord Hook"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-08
Author : nightfall
}
[ENABLE]
aobscanmodule(posHook,AvP_DX11.exe,D9 58 04 D9 42 08 D9 58 08 F3 0F 7E)
alloc(newmem,$1000)
label(code)
label(return)
label(coords)
newmem:
cmp [eax+A8],1 // possibly instable
jne @f
mov [coords],eax
code:
fstp dword ptr [eax+04]
fld dword ptr [edx+08]
jmp return
coords:
dd 00
posHook:
jmp newmem
nop
return:
registersymbol(posHook coords)
[DISABLE]
posHook:
db D9 58 04 D9 42 08
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+13C4BE
AvP_DX11.exe+13C49F: 89 41 0C - mov [ecx+0C],eax
AvP_DX11.exe+13C4A2: 75 0B - jne AvP_DX11.exe+13C4AF
AvP_DX11.exe+13C4A4: C7 41 0C 00 00 00 00 - mov [ecx+0C],00000000
AvP_DX11.exe+13C4AB: C6 41 10 01 - mov byte ptr [ecx+10],01
AvP_DX11.exe+13C4AF: 8B 41 0C - mov eax,[ecx+0C]
AvP_DX11.exe+13C4B2: D9 02 - fld dword ptr [edx]
AvP_DX11.exe+13C4B4: C1 E0 05 - shl eax,05
AvP_DX11.exe+13C4B7: 03 C5 - add eax,ebp
AvP_DX11.exe+13C4B9: D9 18 - fstp dword ptr [eax]
AvP_DX11.exe+13C4BB: D9 42 04 - fld dword ptr [edx+04]
// ---------- INJECTING HERE ----------
AvP_DX11.exe+13C4BE: D9 58 04 - fstp dword ptr [eax+04]
// ---------- DONE INJECTING ----------
AvP_DX11.exe+13C4C1: D9 42 08 - fld dword ptr [edx+08]
AvP_DX11.exe+13C4C4: D9 58 08 - fstp dword ptr [eax+08]
AvP_DX11.exe+13C4C7: F3 0F 7E 07 - movq xmm0,[edi]
AvP_DX11.exe+13C4CB: 66 0F D6 40 0C - movq [eax+0C],xmm0
AvP_DX11.exe+13C4D0: F3 0F 7E 47 08 - movq xmm0,[edi+08]
AvP_DX11.exe+13C4D5: 66 0F D6 40 14 - movq [eax+14],xmm0
AvP_DX11.exe+13C4DA: F3 0F 11 60 1C - movss [eax+1C],xmm4
AvP_DX11.exe+13C4DF: 8B 79 04 - mov edi,[ecx+04]
AvP_DX11.exe+13C4E2: 85 FF - test edi,edi
AvP_DX11.exe+13C4E4: 74 71 - je AvP_DX11.exe+13C557
}
134
"X (read)"
0
Float
[coords]
137
"Y (read)"
0
Float
[coords]+4
136
"Z (read)"
0
Float
[coords]+8
156
"Void Vision"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem:
originalcode:
//jne d3d11.dll+10D03F
mov eax,[esi-34]
exit:
jmp returnhere
"d3d11.dll"+10D02F:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"d3d11.dll"+10D02F:
db 75 0E 8B 46 CC
//jne d3d11.dll+10D03F
//mov eax,[esi-34]
150
"Problem Sector"
0000FF
1
138
"Old Unlock Cmds Patch"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(exit)
newmem:
push -1
push 00
push 00
exit:
jmp returnhere
"AvP_DX11.exe"+18C08C:
jmp newmem
nop
returnhere:
aobscanmodule(unlockCommands,AvP_DX11.exe,F6 46 0C 01 74 4A)
alloc(newmem2,$1000)
label(code2)
label(return2)
newmem2:
code2:
test byte ptr [esi+0C],FF
je AvP_DX11.exe+18A584
jmp return2
unlockCommands:
jmp newmem2
nop
return2:
registersymbol(unlockCommands)
aobscanmodule(unlockCommands2,AvP_DX11.exe,F6 46 24 01 74 47) // should be unique
alloc(newmem3,$1000)
label(code3)
label(return3)
newmem3:
code3:
test byte ptr [esi+24],FF
je AvP_DX11.exe+18A5F1
jmp return3
unlockCommands2:
jmp newmem3
nop
return3:
registersymbol(unlockCommands2)
[DISABLE]
dealloc(newmem)
"AvP_DX11.exe"+18C08C:
db 6A 01 6A 00 6A 00
unlockCommands:
db F6 46 0C 01 74 4A
unregistersymbol(unlockCommands)
dealloc(newmem2)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+18A534
AvP_DX11.exe+18A50E: 8B 35 B0 77 9E 00 - mov esi,[AvP_DX11.exe+5E77B0]
AvP_DX11.exe+18A514: 8B 3D C8 C2 8B 00 - mov edi,[AvP_DX11.exe+4BC2C8]
AvP_DX11.exe+18A51A: 33 C0 - xor eax,eax
AvP_DX11.exe+18A51C: 33 C9 - xor ecx,ecx
AvP_DX11.exe+18A51E: 89 44 24 14 - mov [esp+14],eax
AvP_DX11.exe+18A522: 89 4C 24 10 - mov [esp+10],ecx
AvP_DX11.exe+18A526: 89 4C 24 18 - mov [esp+18],ecx
AvP_DX11.exe+18A52A: 8D 9B 00 00 00 00 - lea ebx,[ebx+00000000]
AvP_DX11.exe+18A530: 85 F6 - test esi,esi
AvP_DX11.exe+18A532: 74 5F - je AvP_DX11.exe+18A593
// ---------- INJECTING HERE ----------
AvP_DX11.exe+18A534: F6 46 0C 01 - test byte ptr [esi+0C],01
// ---------- DONE INJECTING ----------
AvP_DX11.exe+18A538: 74 4A - je AvP_DX11.exe+18A584
AvP_DX11.exe+18A53A: 85 ED - test ebp,ebp
AvP_DX11.exe+18A53C: 74 15 - je AvP_DX11.exe+18A553
AvP_DX11.exe+18A53E: 8B 4C 24 2C - mov ecx,[esp+2C]
AvP_DX11.exe+18A542: 8B 11 - mov edx,[ecx]
AvP_DX11.exe+18A544: 8B 46 14 - mov eax,[esi+14]
AvP_DX11.exe+18A547: 52 - push edx
AvP_DX11.exe+18A548: 55 - push ebp
AvP_DX11.exe+18A549: 50 - push eax
AvP_DX11.exe+18A54A: FF D7 - call edi
}
unlockCommands2:
db F6 46 24 01 74 47
unregistersymbol(unlockCommands2)
dealloc(newmem3)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+18A5A4
AvP_DX11.exe+18A581: C6 02 01 - mov byte ptr [edx],01
AvP_DX11.exe+18A584: 8B 44 24 14 - mov eax,[esp+14]
AvP_DX11.exe+18A588: 85 C0 - test eax,eax
AvP_DX11.exe+18A58A: 8B 76 10 - mov esi,[esi+10]
AvP_DX11.exe+18A58D: 8B 4C 24 10 - mov ecx,[esp+10]
AvP_DX11.exe+18A591: 74 9D - je AvP_DX11.exe+18A530
AvP_DX11.exe+18A593: 8B 35 AC 77 9E 00 - mov esi,[AvP_DX11.exe+5E77AC]
AvP_DX11.exe+18A599: 8D A4 24 00 00 00 00 - lea esp,[esp+00000000]
AvP_DX11.exe+18A5A0: 85 F6 - test esi,esi
AvP_DX11.exe+18A5A2: 74 5C - je AvP_DX11.exe+18A600
// ---------- INJECTING HERE ----------
AvP_DX11.exe+18A5A4: F6 46 24 01 - test byte ptr [esi+24],01
// ---------- DONE INJECTING ----------
AvP_DX11.exe+18A5A8: 74 47 - je AvP_DX11.exe+18A5F1
AvP_DX11.exe+18A5AA: 85 ED - test ebp,ebp
AvP_DX11.exe+18A5AC: 74 14 - je AvP_DX11.exe+18A5C2
AvP_DX11.exe+18A5AE: 8B 44 24 2C - mov eax,[esp+2C]
AvP_DX11.exe+18A5B2: 8B 08 - mov ecx,[eax]
AvP_DX11.exe+18A5B4: 8B 16 - mov edx,[esi]
AvP_DX11.exe+18A5B6: 51 - push ecx
AvP_DX11.exe+18A5B7: 55 - push ebp
AvP_DX11.exe+18A5B8: 52 - push edx
AvP_DX11.exe+18A5B9: FF D7 - call edi
}
141
"integrityCheckReturnAddrOnRoundStart"
0
4 Bytes
AvP_DX11.exe+411F60
143
"IntegrityBPStage1 V1"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrityChecks,AvP_DX11.exe,51 B8 00 3B 83 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
jmp AvP_DX11.exe+411F60
code:
push ecx
mov eax,AvP_DX11.exe+433B00
jmp return
integrityChecks:
jmp newmem
nop
return:
registersymbol(integrityChecks)
[DISABLE]
integrityChecks:
db 51 B8 00 3B 83 00
unregistersymbol(integrityChecks)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+10B0
AvP_DX11.exe+109F: CC - int 3
AvP_DX11.exe+10A0: 51 - push ecx
AvP_DX11.exe+10A1: B8 50 D1 82 00 - mov eax,AvP_DX11.exe+42D150
AvP_DX11.exe+10A6: FF D0 - call eax
AvP_DX11.exe+10A8: 59 - pop ecx
AvP_DX11.exe+10A9: FF E0 - jmp eax
AvP_DX11.exe+10AB: 24 CC - and al,-34
AvP_DX11.exe+10AD: CC - int 3
AvP_DX11.exe+10AE: CC - int 3
AvP_DX11.exe+10AF: CC - int 3
// ---------- INJECTING HERE ----------
AvP_DX11.exe+10B0: 51 - push ecx
// ---------- DONE INJECTING ----------
AvP_DX11.exe+10B1: B8 00 3B 83 00 - mov eax,AvP_DX11.exe+433B00
AvP_DX11.exe+10B6: FF D0 - call eax
AvP_DX11.exe+10B8: 59 - pop ecx
AvP_DX11.exe+10B9: FF E0 - jmp eax
AvP_DX11.exe+10BB: 25 CC CC CC CC - and eax,CCCCCCCC
AvP_DX11.exe+10C0: 51 - push ecx
AvP_DX11.exe+10C1: B8 80 37 83 00 - mov eax,AvP_DX11.exe+433780
AvP_DX11.exe+10C6: FF D0 - call eax
AvP_DX11.exe+10C8: 59 - pop ecx
AvP_DX11.exe+10C9: FF E0 - jmp eax
}
144
"IntegrityBPStage2 V1"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrityCheck2,AvP_DX11.exe,51 B8 80 37 83 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
jmp AvP_DX11.exe+411F60
code:
push ecx
mov eax,AvP_DX11.exe+433780
jmp return
integrityCheck2:
jmp newmem
nop
return:
registersymbol(integrityCheck2)
[DISABLE]
integrityCheck2:
db 51 B8 80 37 83 00
unregistersymbol(integrityCheck2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+10C0
AvP_DX11.exe+10AB: 24 CC - and al,-34
AvP_DX11.exe+10AD: CC - int 3
AvP_DX11.exe+10AE: CC - int 3
AvP_DX11.exe+10AF: CC - int 3
AvP_DX11.exe+10B0: 51 - push ecx
AvP_DX11.exe+10B1: B8 00 3B 83 00 - mov eax,AvP_DX11.exe+433B00
AvP_DX11.exe+10B6: FF D0 - call eax
AvP_DX11.exe+10B8: 59 - pop ecx
AvP_DX11.exe+10B9: FF E0 - jmp eax
AvP_DX11.exe+10BB: 25 CC CC CC CC - and eax,CCCCCCCC
// ---------- INJECTING HERE ----------
AvP_DX11.exe+10C0: 51 - push ecx
// ---------- DONE INJECTING ----------
AvP_DX11.exe+10C1: B8 80 37 83 00 - mov eax,AvP_DX11.exe+433780
AvP_DX11.exe+10C6: FF D0 - call eax
AvP_DX11.exe+10C8: 59 - pop ecx
AvP_DX11.exe+10C9: FF E0 - jmp eax
AvP_DX11.exe+10CB: 22 CC - and cl,ah
AvP_DX11.exe+10CD: CC - int 3
AvP_DX11.exe+10CE: CC - int 3
AvP_DX11.exe+10CF: CC - int 3
AvP_DX11.exe+10D0: 51 - push ecx
AvP_DX11.exe+10D1: B8 80 CD 82 00 - mov eax,AvP_DX11.exe+42CD80
}
147
"pbStage3 V2"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrity,AvP_DX11.exe,51 8D 44 24 03 6A 00 50 E8 13 D5) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
push ecx
lea eax,[esp+03]
jmp return
integrity:
jmp newmem
return:
registersymbol(integrity)
[DISABLE]
integrity:
db 51 8D 44 24 03
unregistersymbol(integrity)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+438CB0
AvP_DX11.exe+438CA6: CC - int 3
AvP_DX11.exe+438CA7: CC - int 3
AvP_DX11.exe+438CA8: CC - int 3
AvP_DX11.exe+438CA9: CC - int 3
AvP_DX11.exe+438CAA: CC - int 3
AvP_DX11.exe+438CAB: CC - int 3
AvP_DX11.exe+438CAC: CC - int 3
AvP_DX11.exe+438CAD: CC - int 3
AvP_DX11.exe+438CAE: CC - int 3
AvP_DX11.exe+438CAF: CC - int 3
// ---------- INJECTING HERE ----------
AvP_DX11.exe+438CB0: 51 - push ecx
// ---------- DONE INJECTING ----------
AvP_DX11.exe+438CB1: 8D 44 24 03 - lea eax,[esp+03]
AvP_DX11.exe+438CB5: 6A 00 - push 00
AvP_DX11.exe+438CB7: 50 - push eax
AvP_DX11.exe+438CB8: E8 13 D5 FF FF - call AvP_DX11.exe+4361D0
AvP_DX11.exe+438CBD: 83 C4 0C - add esp,0C
AvP_DX11.exe+438CC0: C3 - ret
AvP_DX11.exe+438CC1: CC - int 3
AvP_DX11.exe+438CC2: CC - int 3
AvP_DX11.exe+438CC3: CC - int 3
AvP_DX11.exe+438CC4: CC - int 3
}
148
"pbStage4 V2"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrity2,AvP_DX11.exe,68 54 6F 94 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
xor eax,eax
ret
code:
push AvP_DX11.exe+546F54
jmp return
integrity2:
jmp newmem
return:
registersymbol(integrity2)
[DISABLE]
integrity2:
db 68 54 6F 94 00
unregistersymbol(integrity2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+411F60
AvP_DX11.exe+411F56: CC - int 3
AvP_DX11.exe+411F57: CC - int 3
AvP_DX11.exe+411F58: CC - int 3
AvP_DX11.exe+411F59: CC - int 3
AvP_DX11.exe+411F5A: CC - int 3
AvP_DX11.exe+411F5B: CC - int 3
AvP_DX11.exe+411F5C: CC - int 3
AvP_DX11.exe+411F5D: CC - int 3
AvP_DX11.exe+411F5E: CC - int 3
AvP_DX11.exe+411F5F: CC - int 3
// ---------- INJECTING HERE ----------
AvP_DX11.exe+411F60: 68 54 6F 94 00 - push AvP_DX11.exe+546F54
// ---------- DONE INJECTING ----------
AvP_DX11.exe+411F65: 68 C0 10 40 00 - push AvP_DX11.exe+10C0
AvP_DX11.exe+411F6A: E8 D1 8E E3 FF - call AvP_DX11.exe+24AE40
AvP_DX11.exe+411F6F: 83 C4 08 - add esp,08
AvP_DX11.exe+411F72: E8 39 6D 02 00 - call AvP_DX11.exe+438CB0
AvP_DX11.exe+411F77: E8 F4 73 01 00 - call AvP_DX11.exe+429370
AvP_DX11.exe+411F7C: C2 04 00 - ret 0004
AvP_DX11.exe+411F7F: CC - int 3
AvP_DX11.exe+411F80: 6A FF - push -01
AvP_DX11.exe+411F82: 68 46 BA 89 00 - push AvP_DX11.exe+49BA46
AvP_DX11.exe+411F87: 64 A1 00 00 00 00 - mov eax,fs:[00000000]
}
149
"IntegrityOfIntegrity V2"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrity3,AvP_DX11.exe,E8 56 77 01 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//call AvP_DX11.exe+429730
jmp return
integrity3:
jmp newmem
return:
registersymbol(integrity3)
[DISABLE]
integrity3:
db E8 56 77 01 00
unregistersymbol(integrity3)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+411FD5
AvP_DX11.exe+411FA5: A1 F0 5F 9D 00 - mov eax,[AvP_DX11.exe+5D5FF0]
AvP_DX11.exe+411FAA: 33 C4 - xor eax,esp
AvP_DX11.exe+411FAC: 50 - push eax
AvP_DX11.exe+411FAD: 8D 84 24 2C 01 00 00 - lea eax,[esp+0000012C]
AvP_DX11.exe+411FB4: 64 A3 00 00 00 00 - mov fs:[00000000],eax
AvP_DX11.exe+411FBA: 8B B4 24 3C 01 00 00 - mov esi,[esp+0000013C]
AvP_DX11.exe+411FC1: 68 90 6F 94 00 - push AvP_DX11.exe+546F90
AvP_DX11.exe+411FC6: 68 D0 10 40 00 - push AvP_DX11.exe+10D0
AvP_DX11.exe+411FCB: E8 70 8E E3 FF - call AvP_DX11.exe+24AE40
AvP_DX11.exe+411FD0: E8 FB 6C 02 00 - call AvP_DX11.exe+438CD0
// ---------- INJECTING HERE ----------
AvP_DX11.exe+411FD5: E8 56 77 01 00 - call AvP_DX11.exe+429730
// ---------- DONE INJECTING ----------
AvP_DX11.exe+411FDA: E8 D1 74 FF FF - call AvP_DX11.exe+4094B0
AvP_DX11.exe+411FDF: 6A 03 - push 03
AvP_DX11.exe+411FE1: 68 7C 6D 94 00 - push AvP_DX11.exe+546D7C
AvP_DX11.exe+411FE6: 68 84 9B 21 06 - push 06219B84
AvP_DX11.exe+411FEB: E8 50 57 D1 FF - call AvP_DX11.exe+127740
AvP_DX11.exe+411FF0: 6A 01 - push 01
AvP_DX11.exe+411FF2: 6A FF - push -01
AvP_DX11.exe+411FF4: 56 - push esi
AvP_DX11.exe+411FF5: E8 26 6D FF FF - call AvP_DX11.exe+408D20
AvP_DX11.exe+411FFA: 83 C4 20 - add esp,20
}
151
"DisableIntegrityRoot1?"
Auto Assembler Script
{ Game : AvP_DX11.exe
Version:
Date : 2026-01-20
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(integrityV3,AvP_DX11.exe,FF D0 59 FF E0 25 CC CC CC CC 51 B8 80 37 83 00 FF D0) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//call eax
pop ecx
jmp eax
and eax,CCCCCCCC
push ecx
mov eax,AvP_DX11.exe+433780
//call eax
jmp return
integrityV3:
jmp newmem
nop D
return:
registersymbol(integrityV3)
[DISABLE]
integrityV3:
db FF D0 59 FF E0 25 CC CC CC CC 51 B8 80 37 83 00 FF D0
unregistersymbol(integrityV3)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: AvP_DX11.exe+10B6
AvP_DX11.exe+10A1: B8 50 D1 82 00 - mov eax,AvP_DX11.exe+42D150
AvP_DX11.exe+10A6: FF D0 - call eax
AvP_DX11.exe+10A8: 59 - pop ecx
AvP_DX11.exe+10A9: FF E0 - jmp eax
AvP_DX11.exe+10AB: 24 CC - and al,-34
AvP_DX11.exe+10AD: CC - int 3
AvP_DX11.exe+10AE: CC - int 3
AvP_DX11.exe+10AF: CC - int 3
AvP_DX11.exe+10B0: 51 - push ecx
AvP_DX11.exe+10B1: B8 00 3B 83 00 - mov eax,AvP_DX11.exe+433B00
// ---------- INJECTING HERE ----------
AvP_DX11.exe+10B6: FF D0 - call eax
// ---------- DONE INJECTING ----------
AvP_DX11.exe+10B8: 59 - pop ecx
AvP_DX11.exe+10B9: FF E0 - jmp eax
AvP_DX11.exe+10BB: 25 CC CC CC CC - and eax,CCCCCCCC
AvP_DX11.exe+10C0: 51 - push ecx
AvP_DX11.exe+10C1: B8 80 37 83 00 - mov eax,AvP_DX11.exe+433780
AvP_DX11.exe+10C6: FF D0 - call eax
AvP_DX11.exe+10C8: 59 - pop ecx
AvP_DX11.exe+10C9: FF E0 - jmp eax
AvP_DX11.exe+10CB: 22 CC - and cl,ah
AvP_DX11.exe+10CD: CC - int 3
}
152
"[ESP+0x0]"
1
4 Bytes
0019FE0C
0
"Compact UI Cheat engine"
808080
Auto Assembler Script
[ENABLE]
luacall(function cycleFullCompact(sender,force); local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full view Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu(); if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
luacall(cycleFullCompact(nil,false))
Change of je AvP_DX11.exe+20C4F8
AvP_DX11.exe+20C4ED
1B
F3
9F
00
00
74
09
B0
01
81
C4
B0
Change of je AvP_DX11.exe+20BCDF
AvP_DX11.exe+20BCDA
1B
F3
9F
00
00
74
03
B0
01
C3
83
3D
Change of je AvP_DX11.exe+20C138
AvP_DX11.exe+20C12D
1B
F3
9F
00
00
74
09
B0
01
81
C4
80
Change of je AvP_DX11.exe+271478
AvP_DX11.exe+271447
1A
F3
9F
00
00
74
2F
8B
0D
D8
5D
A2
Change of jne d3d11.dll+10D03F
d3d11.dll+10D02F
8B
75
08
85
D2
75
0E
8B
46
CC
8D
4A
Change of jne d3d11.dll+10D097
d3d11.dll+10D062
9E
18
07
00
00
75
33
8B
86
1C
07
00
Change of je d3d11.dll+10D0E6
d3d11.dll+10D095
BE
2C
07
00
00
74
4F
C6
42
7E
FF
8D
Change of jne d3d11.dll+10CF91
d3d11.dll+10CF81
B6
55
10
85
C0
75
0E
8D
48
01
8B
46
Change of jne d3d11.dll+10CFAF
d3d11.dll+10CFA5
8E
34
07
00
00
75
08
39
96
38
07
00
Change of je d3d11.dll+10CFD8
d3d11.dll+10CFAD
96
38
07
00
00
74
29
C6
40
7E
FF
8D
Change of je AvP_DX11.exe+271606
AvP_DX11.exe+271464
F4
A1
9E
00
05
0F
84
9C
01
00
00
6A
05
B9
A8
A1
Change of jne d3d11.dll+11602E
d3d11.dll+115FDB
8B
55
0C
84
C0
75
51
8B
CE
E8
7C
99
Change of je AvP_DX11.exe+26DBE1
AvP_DX11.exe+26DB9D
EA
1A
F6
C2
01
74
42
6A
00
57
56
81
Change of jb AvP_DX11.exe+26D970
AvP_DX11.exe+26DC05
34
89
6C
24
38
0F
82
65
FD
FF
FF
33
ED
55
55
E8
Change of je AvP_DX11.exe+26DBE9
AvP_DX11.exe+26D97E
00
80
3C
01
00
0F
84
65
02
00
00
8B
15
8C
59
A2
Change of je AvP_DX11.exe+26DC40
AvP_DX11.exe+26DC1E
24
13
00
5F
5E
74
20
8B
0B
8B
41
20
^
"AvP_DX11.exe"+10B0
verify checksum
"AvP_DX11.exe"+14738C
decreaseHealth