17
"Attach to Process"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(noreload,Borderlands4.exe,29 F1 39 E9 0F 4D CD)
{$lua}
if syntaxcheck then return end
function myattach(timer)
if getProcessIDFromProcessName("Borderlands4.exe") ~= nil then
object_destroy(timer)
openProcess("Borderlands4.exe")
else
object_destroy(timer)
openProcess("Borderlands4.exe")
end
end
f=createForm(false) --create an invisible window
t=createTimer(f);
timer_setInterval(t,100) --10 might have been too fast for xp...
timer_onTimer(t,myattach)
createThread(function()
local i = 0
while(AddressList.getMemoryRecordByDescription("Enable").Active ~= true)
do
if(i>15) then break end
sleep(500)
AddressList.getMemoryRecordByDescription("Enable").Active = true
i = i+1
end
end)
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
AddressList.getMemoryRecordByDescription("Enable").Active = false
{$asm}
Toggle Activation
112
0
1337317233
"Fix Skill Reset"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(fixSkillPntReset_AOB,Borderlands4.exe,FF * * 8D * * * 00 00 * * * E8 * * * * * * * * 78 * 39 * * * 00 00 7E * * 8B * * * 00 00 * * * * * 39)
registersymbol(fixSkillPntReset_AOB)
alloc(re_fixSkillPntReset,2)
registersymbol(re_fixSkillPntReset)
re_fixSkillPntReset:
readmem(fixSkillPntReset_AOB+2B,2)
fixSkillPntReset_AOB+2B:
db 39 C0
[DISABLE]
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+F99C64
Borderlands4.exe+F99C1E: 48 39 04 D1 - cmp [rcx+rdx*8],rax
Borderlands4.exe+F99C22: 75 44 - jne Borderlands4.exe+F99C68
Borderlands4.exe+F99C24: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+F99C27: E8 1A 1D 04 00 - call Borderlands4.exe+FDB946
Borderlands4.exe+F99C2C: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+F99C2F: 48 89 C2 - mov rdx,rax
Borderlands4.exe+F99C32: E8 C3 CE A7 FF - call Borderlands4.exe+A16AFA
Borderlands4.exe+F99C37: 8B 18 - mov ebx,[rax]
Borderlands4.exe+F99C39: FF CB - dec ebx
Borderlands4.exe+F99C3B: 48 8D 8F D8 00 00 00 - lea rcx,[rdi+000000D8]
Borderlands4.exe+F99C42: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+F99C45: E8 22 D0 A7 FF - call Borderlands4.exe+A16C6C
Borderlands4.exe+F99C4A: 31 C9 - xor ecx,ecx
Borderlands4.exe+F99C4C: 85 C0 - test eax,eax
Borderlands4.exe+F99C4E: 78 14 - js Borderlands4.exe+F99C64
Borderlands4.exe+F99C50: 39 87 08 01 00 00 - cmp [rdi+00000108],eax
Borderlands4.exe+F99C56: 7E 0C - jle Borderlands4.exe+F99C64
Borderlands4.exe+F99C58: 48 8B 8F 00 01 00 00 - mov rcx,[rdi+00000100]
Borderlands4.exe+F99C5F: 89 C0 - mov eax,eax
Borderlands4.exe+F99C61: 8B 0C 81 - mov ecx,[rcx+rax*4]
// ---------- INJECTING HERE ----------
Borderlands4.exe+F99C64: 39 C0 - cmp eax,eax
// ---------- DONE INJECTING ----------
Borderlands4.exe+F99C66: 75 27 - jne Borderlands4.exe+F99C8F
Borderlands4.exe+F99C68: 48 8B 8C 24 80 00 00 00 - mov rcx,[rsp+00000080]
Borderlands4.exe+F99C70: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+F99C73: 48 3B 0D C6 8C 3D 0B - cmp rcx,[Borderlands4.exe+C372940]
Borderlands4.exe+F99C7A: 75 0D - jne Borderlands4.exe+F99C89
Borderlands4.exe+F99C7C: 48 81 C4 88 00 00 00 - add rsp,00000088
Borderlands4.exe+F99C83: 5B - pop rbx
Borderlands4.exe+F99C84: 5F - pop rdi
Borderlands4.exe+F99C85: 5E - pop rsi
Borderlands4.exe+F99C86: 41 5E - pop r14
Borderlands4.exe+F99C88: C3 - ret
Borderlands4.exe+F99C89: E8 32 48 8C 03 - call Borderlands4.exe+485E4C0
Borderlands4.exe+F99C8E: CC - int 3
Borderlands4.exe+F99C8F: 48 8B 8C 24 80 00 00 00 - mov rcx,[rsp+00000080]
Borderlands4.exe+F99C97: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+F99C9A: E8 21 48 8C 03 - call Borderlands4.exe+485E4C0
Borderlands4.exe+F99C9F: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+F99CA2: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+F99CA5: 41 89 D8 - mov r8d,ebx
Borderlands4.exe+F99CA8: 48 81 C4 88 00 00 00 - add rsp,00000088
}
315694
"Enable"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
{$lua}
if syntaxcheck then return end
createThread(function()
local i = 0
while(AddressList.getMemoryRecordByDescription("getCurrencyMult").Active ~= true)
do
if(i>15) then break end
sleep(500)
AddressList.getMemoryRecordByDescription("Fix Skill Reset").Active = true
AddressList.getMemoryRecordByDescription("getGod").Active = true
AddressList.getMemoryRecordByDescription("getHealthShield").Active = true
AddressList.getMemoryRecordByDescription("getStuff").Active = true
AddressList.getMemoryRecordByDescription("getRapid").Active = true
AddressList.getMemoryRecordByDescription("getPoints").Active = true
AddressList.getMemoryRecordByDescription("getSkills").Active = true
AddressList.getMemoryRecordByDescription("getTimescale").Active = true
AddressList.getMemoryRecordByDescription("getSpeed").Active = true
AddressList.getMemoryRecordByDescription("getJumpHeight").Active = true
AddressList.getMemoryRecordByDescription("Teleport").Active = true
AddressList.getMemoryRecordByDescription("getWaypoint").Active = true
AddressList.getMemoryRecordByDescription("getFOV").Active = true
AddressList.getMemoryRecordByDescription("getGravity").Active = true
AddressList.getMemoryRecordByDescription("getGameSpeed").Active = true
AddressList.getMemoryRecordByDescription("getEXP").Active = true
AddressList.getMemoryRecordByDescription("getCurrencyMult").Active = true
i = i+1
end
end)
{$asm}
aobscanmodule(player_AOB,$process,483Bxxxxxxxxxx74xx4Cxxxx4889xx4889)
registersymbol(player_AOB)
alloc(playerHook,0x1000)
registersymbol(playerHook)
define(midjumpmem, $process+600)
fullaccess(midjumpmem, $1000)
registersymbol(midjumpmem)
label(code_player)
label(return_player)
label(exit_player)
label(inventoryPtr)
label(playerPtr)
registersymbol(code_player)
registersymbol(inventoryPtr)
registersymbol(playerPtr)
playerHook:
mov [inventoryPtr],rsi
push rbx
mov rbx,[rsi+3D0]
test rbx,rbx
je exit_player
mov [playerPtr],rbx
exit_player:
pop rbx
code_player:
readmem(player_AOB,7)
{
cmp rax,[rsi+000003D0]
}
jmp return_player
align 10 CC
playerHook+200:
inventoryPtr:
dq 0
playerPtr:
dq 0
midjumpmem:
jmp playerHook
player_AOB:
jmp midjumpmem
nop 2
return_player:
[DISABLE]
{$lua}
if syntaxcheck then return end
AddressList.getMemoryRecordByDescription("getGod").Active = false
AddressList.getMemoryRecordByDescription("getHealthShield").Active = false
AddressList.getMemoryRecordByDescription("getStuff").Active = false
AddressList.getMemoryRecordByDescription("getRapid").Active = false
AddressList.getMemoryRecordByDescription("getPoints").Active = false
AddressList.getMemoryRecordByDescription("getSkills").Active = false
AddressList.getMemoryRecordByDescription("getTimescale").Active = false
AddressList.getMemoryRecordByDescription("getSpeed").Active = false
AddressList.getMemoryRecordByDescription("getJumpHeight").Active = false
AddressList.getMemoryRecordByDescription("Teleport").Active = false
AddressList.getMemoryRecordByDescription("getWaypoint").Active = false
AddressList.getMemoryRecordByDescription("getFOV").Active = false
AddressList.getMemoryRecordByDescription("getGravity").Active = false
AddressList.getMemoryRecordByDescription("getGameSpeed").Active = false
AddressList.getMemoryRecordByDescription("getEXP").Active = false
AddressList.getMemoryRecordByDescription("getCurrencyMult").Active = false
{$asm}
player_AOB:
readmem(code_player,7) // db 48 3B 86 D0 03 00 00
unregistersymbol(player_AOB)
unregistersymbol(playerHook)
unregistersymbol(code_player)
unregistersymbol(inventoryPtr)
unregistersymbol(playerPtr)
unregistersymbol( midjumpmem )
dealloc(playerHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+553AB3
Borderlands4.exe+553A5E: 48 8B 06 - mov rax,[rsi]
Borderlands4.exe+553A61: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+553A64: FF 90 A8 0E 00 00 - call qword ptr [rax+00000EA8]
Borderlands4.exe+553A6A: 48 83 BE 08 05 00 00 00 - cmp qword ptr [rsi+00000508],00
Borderlands4.exe+553A72: 74 0F - je Borderlands4.exe+553A83
Borderlands4.exe+553A74: 48 8B 06 - mov rax,[rsi]
Borderlands4.exe+553A77: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+553A7A: 0F 28 CE - movaps xmm1,xmm6
Borderlands4.exe+553A7D: FF 90 48 0B 00 00 - call qword ptr [rax+00000B48]
Borderlands4.exe+553A83: 48 85 F6 - test rsi,rsi
Borderlands4.exe+553A86: 0F 84 8D 04 00 00 - je Borderlands4.exe+553F19
Borderlands4.exe+553A8C: 8B 46 08 - mov eax,[rsi+08]
Borderlands4.exe+553A8F: 0F BA E0 1E - bt eax,1E
Borderlands4.exe+553A93: 0F 82 80 04 00 00 - jb Borderlands4.exe+553F19
Borderlands4.exe+553A99: 48 8B 8E 48 04 00 00 - mov rcx,[rsi+00000448]
Borderlands4.exe+553AA0: 48 85 C9 - test rcx,rcx
Borderlands4.exe+553AA3: 0F 84 A7 03 00 00 - je Borderlands4.exe+553E50
Borderlands4.exe+553AA9: E8 38 A0 FC 00 - call Borderlands4.exe+151DAE6
Borderlands4.exe+553AAE: 48 85 C0 - test rax,rax
Borderlands4.exe+553AB1: 74 1C - je Borderlands4.exe+553ACF
// ---------- INJECTING HERE ----------
Borderlands4.exe+553AB3: 48 3B 86 D0 03 00 00 - cmp rax,[rsi+000003D0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+553ABA: 74 13 - je Borderlands4.exe+553ACF
Borderlands4.exe+553ABC: 4C 8B 06 - mov r8,[rsi]
Borderlands4.exe+553ABF: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+553AC2: 48 89 C2 - mov rdx,rax
Borderlands4.exe+553AC5: 0F 28 D6 - movaps xmm2,xmm6
Borderlands4.exe+553AC8: 41 FF 90 38 0D 00 00 - call qword ptr [r8+00000D38]
Borderlands4.exe+553ACF: 83 FF 03 - cmp edi,03
Borderlands4.exe+553AD2: 0F 95 C0 - setne al
Borderlands4.exe+553AD5: 80 F3 01 - xor bl,01
Borderlands4.exe+553AD8: 08 C3 - or bl,al
Borderlands4.exe+553ADA: 0F 85 70 03 00 00 - jne Borderlands4.exe+553E50
Borderlands4.exe+553AE0: 48 8B 8E D0 03 00 00 - mov rcx,[rsi+000003D0]
Borderlands4.exe+553AE7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+553AEA: 0F 84 60 03 00 00 - je Borderlands4.exe+553E50
Borderlands4.exe+553AF0: 48 8B 86 48 04 00 00 - mov rax,[rsi+00000448]
Borderlands4.exe+553AF7: F6 80 19 2E 00 00 01 - test byte ptr [rax+00002E19],01
Borderlands4.exe+553AFE: 0F 84 4C 03 00 00 - je Borderlands4.exe+553E50
Borderlands4.exe+553B04: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+553B07: FF 90 38 06 00 00 - call qword ptr [rax+00000638]
Borderlands4.exe+553B0D: 48 85 C0 - test rax,rax
}
315696
"PlayerController"
8 Bytes
inventoryPtr
0
315697
"PlayerCharacter"
8 Bytes
playerPtr
0
315699
"Timescale"
Float
+74
315700
"RootComponent"
8 Bytes
+1C8
0
315701
"X_Coord"
Double
+260
315702
"Y_Coord"
Double
+268
315703
"Z_Coord"
Double
+270
315815
"PlayerState"
8 Bytes
+3B0
0
1337317207
"ProgressionComponent"
8 Bytes
+6C0
0
1337317208
"Edit: Current Level"
4 Bytes
+0
1337317209
"Edit: Current EXP"
4 Bytes
+8
1337317210
"EXP Needed To Level Up"
4 Bytes
+20
315818
"CharacterMovement"
8 Bytes
+430
0
1337317176
"Gravity"
Float
+1F8
1337317251
"MovementSpeedMultiplier"
Float
+1CB0
1337317234
"ActiveWeapon"
8 Bytes
+6050
0
1337317235
"[0]Weapon"
8 Bytes
+20
0
1337317236
"WeaponStats?"
8 Bytes
+D48
0
1337317237
"[0]Behaviours"
Float
+0
0
1337317238
"?"
Byte
+178
1337317244
"fireRate"
Float
+18C
1337317239
"damage"
Float
+1E8
1337317240
"spread"
Float
+200
1337317241
"heatImpulse"
Float
+258
1337317242
"recoilScale"
Float
+2C8
1337317199
"?"
8 Bytes
+398
0
1337317201
"Edit: Max Inventory Size"
4 Bytes
+924
1337317202
"Edit: Max Bank Size"
4 Bytes
+BB4
1337317203
"InventoryComponent"
8 Bytes
+C30
0
1337317204
"Currencies"
8 Bytes
+38
0
1337317205
"Edit: Money"
4 Bytes
+28
1337317206
"Edit: Eridium"
4 Bytes
+40
1337317194
"getGod"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(god_AOB,$process,488Bxxxxxxxxxx4885xx0F84xxxxxxxx4Cxxxx0F28xxE8xxxxxxxx4885xx0F84xxxxxxxx4889xx488B )
registersymbol(god_AOB)
alloc(godHook,0x1000)
registersymbol(godHook)
label(code_god)
label(return_god)
label(exit_god)
label(defMul)
label(godflag)
registersymbol(code_god)
registersymbol(defMul)
registersymbol(godflag)
godHook:
exit_god:
code_god:
readmem(god_AOB,7)
{
mov rcx,[rcx+00000228]
}
@@:
test rcx,rcx
je return_god
push rax
{$try}
mov rax,playerPtr
mov rax,[rax]
test rax,rax
je @@2
cmp rax,rcx
jne @@2
cmp [defMul],0
jle @f
divss xmm1,[defMul]
@@:
cmp [godflag],1
jne @f
xor rcx,rcx
{$except}
@@2:
pop rax
jmp return_god
align 10 CC
godHook+200:
defMul:
dd (float)1
godflag:
dd 0
midjumpmem+90:
jmp godHook
god_AOB:
jmp midjumpmem+90
nop 2
return_god:
[DISABLE]
god_AOB:
readmem(code_god,7) // db 48 8B 89 28 02 00 00
unregistersymbol(god_AOB)
unregistersymbol(godHook)
unregistersymbol(code_god)
unregistersymbol(defMul)
unregistersymbol(godflag)
dealloc(godHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+90E18D8
Borderlands4.exe+90E18A9: 57 - push rdi
Borderlands4.exe+90E18AA: 55 - push rbp
Borderlands4.exe+90E18AB: 53 - push rbx
Borderlands4.exe+90E18AC: 48 81 EC 98 03 00 00 - sub rsp,00000398
Borderlands4.exe+90E18B3: 0F 29 BC 24 80 03 00 00 - movaps [rsp+00000380],xmm7
Borderlands4.exe+90E18BB: 0F 29 B4 24 70 03 00 00 - movaps [rsp+00000370],xmm6
Borderlands4.exe+90E18C3: 48 89 CF - mov rdi,rcx
Borderlands4.exe+90E18C6: 48 8B 05 73 C0 04 08 - mov rax,[Borderlands4.exe+1112D940]
Borderlands4.exe+90E18CD: 48 31 E0 - xor rax,rsp
Borderlands4.exe+90E18D0: 48 89 84 24 68 03 00 00 - mov [rsp+00000368],rax
// ---------- INJECTING HERE ----------
Borderlands4.exe+90E18D8: 48 8B 89 28 02 00 00 - mov rcx,[rcx+00000228]
// ---------- DONE INJECTING ----------
Borderlands4.exe+90E18DF: 48 85 C9 - test rcx,rcx
Borderlands4.exe+90E18E2: 0F 84 9E 00 00 00 - je Borderlands4.exe+90E1986
Borderlands4.exe+90E18E8: 4C 89 C6 - mov rsi,r8
Borderlands4.exe+90E18EB: 0F 28 F1 - movaps xmm6,xmm1
Borderlands4.exe+90E18EE: E8 9D A2 21 FC - call Borderlands4.exe+52FBB90
Borderlands4.exe+90E18F3: 48 85 C0 - test rax,rax
Borderlands4.exe+90E18F6: 0F 84 8A 00 00 00 - je Borderlands4.exe+90E1986
Borderlands4.exe+90E18FC: 48 89 C3 - mov rbx,rax
Borderlands4.exe+90E18FF: 48 8B 0D 7A CC 44 08 - mov rcx,[Borderlands4.exe+1152E580]
Borderlands4.exe+90E1906: 48 63 91 50 11 00 00 - movsxd rdx,dword ptr [rcx+00001150]
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+ECF5F0
Borderlands4.exe+ECF5A7: 48 C1 E8 03 - shr rax,03
Borderlands4.exe+ECF5AB: 48 01 D8 - add rax,rbx
Borderlands4.exe+ECF5AE: 48 83 C0 10 - add rax,10
Borderlands4.exe+ECF5B2: E9 32 FF FF FF - jmp Borderlands4.exe+ECF4E9
Borderlands4.exe+ECF5B7: CC - int 3
Borderlands4.exe+ECF5B8: 41 57 - push r15
Borderlands4.exe+ECF5BA: 41 56 - push r14
Borderlands4.exe+ECF5BC: 41 55 - push r13
Borderlands4.exe+ECF5BE: 41 54 - push r12
Borderlands4.exe+ECF5C0: 56 - push rsi
Borderlands4.exe+ECF5C1: 57 - push rdi
Borderlands4.exe+ECF5C2: 55 - push rbp
Borderlands4.exe+ECF5C3: 53 - push rbx
Borderlands4.exe+ECF5C4: 48 81 EC 68 04 00 00 - sub rsp,00000468
Borderlands4.exe+ECF5CB: 0F 29 BC 24 50 04 00 00 - movaps [rsp+00000450],xmm7
Borderlands4.exe+ECF5D3: 0F 29 B4 24 40 04 00 00 - movaps [rsp+00000440],xmm6
Borderlands4.exe+ECF5DB: 48 89 CF - mov rdi,rcx
Borderlands4.exe+ECF5DE: 48 8B 05 5B 33 4A 0B - mov rax,[Borderlands4.exe+C372940]
Borderlands4.exe+ECF5E5: 48 31 E0 - xor rax,rsp
Borderlands4.exe+ECF5E8: 48 89 84 24 38 04 00 00 - mov [rsp+00000438],rax
// ---------- INJECTING HERE ----------
Borderlands4.exe+ECF5F0: 48 8B 89 28 02 00 00 - mov rcx,[rcx+00000228]
// ---------- DONE INJECTING ----------
Borderlands4.exe+ECF5F7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+ECF5FA: 0F 84 13 0B 00 00 - je Borderlands4.exe+ED0113
Borderlands4.exe+ECF600: 4C 89 C6 - mov rsi,r8
Borderlands4.exe+ECF603: 0F 28 F1 - movaps xmm6,xmm1
Borderlands4.exe+ECF606: E8 9F 89 36 03 - call Borderlands4.exe+4237FAA
Borderlands4.exe+ECF60B: 48 85 C0 - test rax,rax
Borderlands4.exe+ECF60E: 0F 84 FF 0A 00 00 - je Borderlands4.exe+ED0113
Borderlands4.exe+ECF614: 48 89 C3 - mov rbx,rax
Borderlands4.exe+ECF617: 48 8B 0D 42 67 8A 0B - mov rcx,[Borderlands4.exe+C775D60]
Borderlands4.exe+ECF61E: 48 89 C2 - mov rdx,rax
Borderlands4.exe+ECF621: E8 00 92 66 FF - call Borderlands4.exe+538826
Borderlands4.exe+ECF626: 80 B8 88 00 00 00 00 - cmp byte ptr [rax+00000088],00
Borderlands4.exe+ECF62D: 0F 85 E0 0A 00 00 - jne Borderlands4.exe+ED0113
Borderlands4.exe+ECF633: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+ECF636: E8 7F A8 39 03 - call Borderlands4.exe+4269EBA
Borderlands4.exe+ECF63B: 83 F8 03 - cmp eax,03
Borderlands4.exe+ECF63E: 75 2A - jne Borderlands4.exe+ECF66A
Borderlands4.exe+ECF640: 48 8B 87 28 02 00 00 - mov rax,[rdi+00000228]
Borderlands4.exe+ECF647: 48 85 C0 - test rax,rax
Borderlands4.exe+ECF64A: 0F 84 C3 0A 00 00 - je Borderlands4.exe+ED0113
}
1337317195
"Godmode/No Hit"
Auto Assembler Script
[ENABLE]
godflag:
dd 1
[DISABLE]
godflag:
dd 0
Toggle Activation
97
0
1337317196
"Defense Multiplier"
Float
defMul
1337317178
"getHealthShield"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(shield_AOB,$process,F3xxxxxxxxxxxxxxF3xxxxxxF3xxxxxxF3xxxxxxxxxxxxxx0F28xxF3xxxxxx450FxxxxF3)
registersymbol(shield_AOB)
alloc(shieldHook,0x1000)
registersymbol(shieldHook)
label(code_shield)
label(return_shield)
label(exit_shield)
label(shieldflag)
label(hpflag)
registersymbol(code_shield)
registersymbol(shieldflag)
registersymbol(hpflag)
shieldHook:
cmp [shieldflag],1
jne @f
fld [rax+30]
fstp [rax+C8]
@@:
cmp [hpflag],1
jne @f
fld [rax+300]
fstp [rax+398]
exit_shield:
code_shield:
readmem(shield_AOB,8)
{
movss xmm2,[rax+000000C8]
}
jmp return_shield
align 10 CC
shieldHook+200:
shieldflag:
dd 0
hpflag:
dd 0
midjumpmem+40:
jmp shieldHook
shield_AOB:
jmp midjumpmem+40
nop 3
return_shield:
[DISABLE]
shield_AOB:
readmem(code_shield,8) // db F3 0F 10 90 C8 00 00 00
unregistersymbol(shield_AOB)
unregistersymbol(shieldHook)
unregistersymbol(code_shield)
unregistersymbol(shieldflag)
unregistersymbol(hpflag)
dealloc(shieldHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+7F80AD
Borderlands4.exe+7F804D: 41 C1 E0 03 - shl r8d,03
Borderlands4.exe+7F8051: 4D 03 04 D1 - add r8,[r9+rdx*8]
Borderlands4.exe+7F8055: 0F 84 00 F5 FF FF - je Borderlands4.exe+7F755B
Borderlands4.exe+7F805B: 41 39 40 10 - cmp [r8+10],eax
Borderlands4.exe+7F805F: 0F 85 F6 F4 FF FF - jne Borderlands4.exe+7F755B
Borderlands4.exe+7F8065: 41 8B 40 08 - mov eax,[r8+08]
Borderlands4.exe+7F8069: A9 00 00 20 10 - test eax,10200000
Borderlands4.exe+7F806E: 0F 85 E7 F4 FF FF - jne Borderlands4.exe+7F755B
Borderlands4.exe+7F8074: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+7F8077: FF 50 10 - call qword ptr [rax+10]
Borderlands4.exe+7F807A: 48 8D 94 24 00 01 00 00 - lea rdx,[rsp+00000100]
Borderlands4.exe+7F8082: 48 89 C1 - mov rcx,rax
Borderlands4.exe+7F8085: E8 66 F2 AA 03 - call Borderlands4.exe+42A72F0
Borderlands4.exe+7F808A: 84 C0 - test al,al
Borderlands4.exe+7F808C: 0F 84 C9 F4 FF FF - je Borderlands4.exe+7F755B
Borderlands4.exe+7F8092: 48 8D 8C 24 00 01 00 00 - lea rcx,[rsp+00000100]
Borderlands4.exe+7F809A: E8 4F 36 89 FF - call Borderlands4.exe+8B6EE
Borderlands4.exe+7F809F: F3 0F 10 40 24 - movss xmm0,[rax+24]
Borderlands4.exe+7F80A4: F3 0F 10 48 30 - movss xmm1,[rax+30]
Borderlands4.exe+7F80A9: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
Borderlands4.exe+7F80AD: F3 0F 10 90 C8 00 00 00 - movss xmm2,[rax+000000C8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+7F80B5: F3 0F 5C D0 - subss xmm2,xmm0
Borderlands4.exe+7F80B9: F3 0F 5E D1 - divss xmm2,xmm1
Borderlands4.exe+7F80BD: F3 0F 10 05 5B D1 E3 08 - movss xmm0,[Borderlands4.exe+9635220]
Borderlands4.exe+7F80C5: 0F 28 D8 - movaps xmm3,xmm0
Borderlands4.exe+7F80C8: F3 0F 5C DA - subss xmm3,xmm2
Borderlands4.exe+7F80CC: 45 0F 57 DB - xorps xmm11,xmm11
Borderlands4.exe+7F80D0: F3 44 0F C2 D9 04 - cmpneqss xmm11,xmm1
Borderlands4.exe+7F80D6: 41 0F 54 DB - andps xmm3,xmm11
Borderlands4.exe+7F80DA: 44 0F 55 D8 - andnps xmm11,xmm0
Borderlands4.exe+7F80DE: 44 0F 56 DB - orps xmm11,xmm3
Borderlands4.exe+7F80E2: E9 74 F4 FF FF - jmp Borderlands4.exe+7F755B
Borderlands4.exe+7F80E7: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+7F80EA: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+7F80ED: FF 50 08 - call qword ptr [rax+08]
Borderlands4.exe+7F80F0: 85 C0 - test eax,eax
Borderlands4.exe+7F80F2: 0F 85 A3 F4 FF FF - jne Borderlands4.exe+7F759B
Borderlands4.exe+7F80F8: E9 E8 F4 FF FF - jmp Borderlands4.exe+7F75E5
Borderlands4.exe+7F80FD: 48 8D B3 80 02 00 00 - lea rsi,[rbx+00000280]
Borderlands4.exe+7F8104: 4C 8D B4 24 70 01 00 00 - lea r14,[rsp+00000170]
Borderlands4.exe+7F810C: B9 0D 00 00 00 - mov ecx,0000000D
}
1337317179
"Unlimited Health"
Auto Assembler Script
[ENABLE]
hpflag:
dd 1
[DISABLE]
hpflag:
dd 0
Toggle Activation
98
0
1337317180
"Unlimited Shield"
Auto Assembler Script
[ENABLE]
shieldflag:
dd 1
[DISABLE]
shieldflag:
dd 0
Toggle Activation
99
0
1337317188
"Unlimited Ammo"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(ammo_AOB,$process,8Bxxxxxxxxxxxx418Bxxxxxxxxxx413Bxxxxxxxxxx75xx85)
registersymbol(ammo_AOB)
alloc(ammoHook,0x1000)
registersymbol(ammoHook)
alloc(ammo,4)
registersymbol(ammo)
ammo:
readmem(ammo_AOB+3,4)
label(code_ammo)
label(return_ammo)
label(exit_ammo)
registersymbol(code_ammo)
ammoHook:
push rcx
push rdx
movzx ecx,word ptr [ammo]
lea rdx,[rsi+rax]
mov [rdx+rcx],3e7
exit_ammo:
pop rdx
pop rcx
code_ammo:
readmem(ammo_AOB,7)
{
mov ecx,[rsi+rax+000025D0]
}
jmp return_ammo
align 10 CC
ammoHook+200:
midjumpmem+50:
jmp ammoHook
ammo_AOB:
jmp midjumpmem+50
nop 2
return_ammo:
[DISABLE]
ammo_AOB:
readmem(code_ammo,7) // db 8B 8C 06 D0 25 00 00
unregistersymbol(ammo_AOB)
unregistersymbol(ammoHook)
unregistersymbol(code_ammo)
dealloc(ammoHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+C1C48E
Borderlands4.exe+C1C431: 48 8B 49 30 - mov rcx,[rcx+30]
Borderlands4.exe+C1C435: 48 39 04 D1 - cmp [rcx+rdx*8],rax
Borderlands4.exe+C1C439: 0F 85 E3 FE FF FF - jne Borderlands4.exe+C1C322
Borderlands4.exe+C1C43F: 48 8B 44 24 78 - mov rax,[rsp+78]
Borderlands4.exe+C1C444: 48 8B 70 20 - mov rsi,[rax+20]
Borderlands4.exe+C1C448: 48 85 F6 - test rsi,rsi
Borderlands4.exe+C1C44B: 0F 84 D1 FE FF FF - je Borderlands4.exe+C1C322
Borderlands4.exe+C1C451: 48 8B 05 E0 49 BF 0B - mov rax,[Borderlands4.exe+C810E38]
Borderlands4.exe+C1C458: 48 85 C0 - test rax,rax
Borderlands4.exe+C1C45B: 0F 84 5B 09 00 00 - je Borderlands4.exe+C1CDBC
Borderlands4.exe+C1C461: 48 8B 4E 10 - mov rcx,[rsi+10]
Borderlands4.exe+C1C465: 48 63 50 38 - movsxd rdx,dword ptr [rax+38]
Borderlands4.exe+C1C469: 3B 51 38 - cmp edx,[rcx+38]
Borderlands4.exe+C1C46C: 0F 8F B0 FE FF FF - jg Borderlands4.exe+C1C322
Borderlands4.exe+C1C472: 48 83 C0 30 - add rax,30
Borderlands4.exe+C1C476: 48 8B 49 30 - mov rcx,[rcx+30]
Borderlands4.exe+C1C47A: 48 39 04 D1 - cmp [rcx+rdx*8],rax
Borderlands4.exe+C1C47E: 0F 85 9E FE FF FF - jne Borderlands4.exe+C1C322
Borderlands4.exe+C1C484: 0F B6 83 10 01 00 00 - movzx eax,byte ptr [rbx+00000110]
Borderlands4.exe+C1C48B: C1 E0 06 - shl eax,06
// ---------- INJECTING HERE ----------
Borderlands4.exe+C1C48E: 8B 8C 06 D0 25 00 00 - mov ecx,[rsi+rax+000025D0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+C1C495: 41 8B 95 D4 00 00 00 - mov edx,[r13+000000D4]
Borderlands4.exe+C1C49C: 41 3B 8D D0 00 00 00 - cmp ecx,[r13+000000D0]
Borderlands4.exe+C1C4A3: 75 35 - jne Borderlands4.exe+C1C4DA
Borderlands4.exe+C1C4A5: 85 D2 - test edx,edx
Borderlands4.exe+C1C4A7: 0F 84 E4 0C 00 00 - je Borderlands4.exe+C1D191
Borderlands4.exe+C1C4AD: 48 01 F0 - add rax,rsi
Borderlands4.exe+C1C4B0: 48 05 A0 25 00 00 - add rax,000025A0
Borderlands4.exe+C1C4B6: 8B 40 38 - mov eax,[rax+38]
Borderlands4.exe+C1C4B9: 41 8B 8D DC 00 00 00 - mov ecx,[r13+000000DC]
Borderlands4.exe+C1C4C0: 41 3B 85 D8 00 00 00 - cmp eax,[r13+000000D8]
Borderlands4.exe+C1C4C7: 0F 85 56 0B 00 00 - jne Borderlands4.exe+C1D023
Borderlands4.exe+C1C4CD: 85 C9 - test ecx,ecx
Borderlands4.exe+C1C4CF: 0F 85 4D FE FF FF - jne Borderlands4.exe+C1C322
Borderlands4.exe+C1C4D5: E9 47 0B 00 00 - jmp Borderlands4.exe+C1D021
Borderlands4.exe+C1C4DA: 41 89 8D D0 00 00 00 - mov [r13+000000D0],ecx
Borderlands4.exe+C1C4E1: FF C2 - inc edx
Borderlands4.exe+C1C4E3: 41 89 95 D4 00 00 00 - mov [r13+000000D4],edx
Borderlands4.exe+C1C4EA: EB C1 - jmp Borderlands4.exe+C1C4AD
Borderlands4.exe+C1C4EC: 4D 85 FF - test r15,r15
Borderlands4.exe+C1C4EF: 4C 8B AC 24 80 00 00 00 - mov r13,[rsp+00000080]
}
Toggle Activation
100
0
1337317189
"No Reload"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(clip_AOB,$process,29xx39xx0F4Dxx85xx440Fxxxx4489)
registersymbol(clip_AOB)
alloc(re_clip,2)
registersymbol(re_clip)
re_clip:
readmem(clip_AOB+2,2)
clip_AOB+2:
nop 2
[DISABLE]
clip_AOB+2:
readmem(re_clip,2)
unregistersymbol(clip_AOB)
unregistersymbol(re_clip)
dealloc(re_clip)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+933157
Borderlands4.exe+933111: 48 89 CF - mov rdi,rcx
Borderlands4.exe+933114: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+933117: FF 90 08 03 00 00 - call qword ptr [rax+00000308]
Borderlands4.exe+93311D: 45 31 F6 - xor r14d,r14d
Borderlands4.exe+933120: 84 C0 - test al,al
Borderlands4.exe+933122: 41 0F 45 F6 - cmovne esi,r14d
Borderlands4.exe+933126: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+933129: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+93312C: 85 F6 - test esi,esi
Borderlands4.exe+93312E: 0F 88 E6 00 00 00 - js Borderlands4.exe+93321A
Borderlands4.exe+933134: FF 90 E8 02 00 00 - call qword ptr [rax+000002E8]
Borderlands4.exe+93313A: 89 C5 - mov ebp,eax
Borderlands4.exe+93313C: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+93313F: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+933142: FF 90 B8 02 00 00 - call qword ptr [rax+000002B8]
Borderlands4.exe+933148: 39 E8 - cmp eax,ebp
Borderlands4.exe+93314A: 0F 4C E8 - cmovl ebp,eax
Borderlands4.exe+93314D: 8B 87 00 01 00 00 - mov eax,[rdi+00000100]
Borderlands4.exe+933153: 89 C1 - mov ecx,eax
Borderlands4.exe+933155: 29 F1 - sub ecx,esi
// ---------- INJECTING HERE ----------
Borderlands4.exe+933157: 39 E9 - cmp ecx,ebp
// ---------- DONE INJECTING ----------
Borderlands4.exe+933159: 0F 4D CD - cmovge ecx,ebp
Borderlands4.exe+93315C: 85 C9 - test ecx,ecx
Borderlands4.exe+93315E: 44 0F 4F F1 - cmovg r14d,ecx
Borderlands4.exe+933162: 44 89 B7 1C 01 00 00 - mov [rdi+0000011C],r14d
Borderlands4.exe+933169: 44 89 B7 00 01 00 00 - mov [rdi+00000100],r14d
Borderlands4.exe+933170: 44 39 F0 - cmp eax,r14d
Borderlands4.exe+933173: 74 08 - je Borderlands4.exe+93317D
Borderlands4.exe+933175: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+933178: E8 15 02 00 00 - call Borderlands4.exe+933392
Borderlands4.exe+93317D: 48 8B 47 30 - mov rax,[rdi+30]
Borderlands4.exe+933181: 80 B8 78 01 00 00 03 - cmp byte ptr [rax+00000178],03
Borderlands4.exe+933188: 75 57 - jne Borderlands4.exe+9331E1
Borderlands4.exe+93318A: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+93318D: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+933190: FF 90 F8 02 00 00 - call qword ptr [rax+000002F8]
Borderlands4.exe+933196: 84 C0 - test al,al
Borderlands4.exe+933198: 74 6B - je Borderlands4.exe+933205
Borderlands4.exe+93319A: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+93319D: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+9331A0: FF 90 E8 02 00 00 - call qword ptr [rax+000002E8]
}
Toggle Activation
101
0
1337317198
"getStuff"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(stuff_AOB,$process,488Bxxxxxxxxxx8Axxxxxxxxxx89xxF6)
registersymbol(stuff_AOB)
alloc(stuffHook,0x1000)
registersymbol(stuffHook)
label(code_stuff)
label(return_stuff)
label(exit_stuff)
label(repKitFlag)
registersymbol(repKitFlag)
label(damageFlag)
registersymbol(damageFlag)
label(damageMulVal)
registersymbol(damageMulVal)
label(criticalFlag)
registersymbol(criticalFlag)
registersymbol(code_stuff)
stuffHook:
push rax
movups [stuffHook+F00], xmm0
{$try}
mov rax, playerPtr
test rax, rax
je exit_stuff
cmp [rax], rsi
jne exit_stuff
cmp dword ptr [repKitFlag], 1
jne @F
mov eax, 47F8 // OakCharacter_HealthState:RepairKitStackCount:Value
mov [rsi+rax], 0
mov eax, 47FC // OakCharacter_HealthState:RepairKitStackCount:BaseValue
mov [rsi+rax], 0
@@:
cmp [criticalFlag], 0
js @skip_critical
mov eax, 4B68 //OakCharacter_DamageCauserData:DefaultCriticalHitChance:Value
movss xmm0, [rsi+rax]
cmp [criticalFlag], 0
jne @F
comiss xmm0, [max_critical]
jb @skip_critical
subss xmm0, [max_critical]
movss [rsi+rax], xmm0
mov eax, 4B6C //OakCharacter_DamageCauserData:DefaultCriticalHitChance:BaseValue
movss [rsi+rax], xmm0
jmp @skip_critical
@@:
comiss xmm0, [max_critical]
jae @F
addss xmm0, [max_critical]
movss [rsi+rax], xmm0
mov eax, 4B6C //OakCharacter_DamageCauserData:DefaultCriticalHitChance:BaseValue
movss [rsi+rax], xmm0
@skip_critical:
xorps xmm0, xmm0
cmp [damageFlag], 0
js @skip_dmg
jne @F
mov [damageFlag], -1
movss xmm0, [float_1]
jmp @skip_dmg
@@:
movss xmm0, [max_value]
jmp @set_dmg
@skip_dmg:
cmp [damageMulVal], 0
js @set_dmg
jne @F
mov [damageMulVal], -1
movss xmm0, [float_1]
jmp @set_dmg
@@:
movss xmm0, [damageMulVal]
@set_dmg:
comiss xmm0, [float_0]
jbe exit_stuff
mov eax, 4AB8 // OakCharacter_DamageCauserData:DamageDealtMultiplier:Value
movss [rsi+rax], xmm0
mov eax, 4ABC // OakCharacter_DamageCauserData:DamageDealtMultiplier:BaseValue
movss [rsi+rax], xmm0
{$except}
exit_stuff:
movups xmm0, [stuffHook+F00]
pop rax
code_stuff:
readmem(stuff_AOB,7)
{
mov rcx,[rsi+000066F0]
}
jmp return_stuff
align 10 CC
stuffHook+200:
repKitFlag:
dd 0
damageFlag:
dd -1
damageMulVal:
dd -1
criticalFlag:
dd -1
stuffHook+300:
float_0:
dd 0
float_1:
dd (float)1
max_value:
dd (float)19999
max_critical:
dd (float)1000000
midjumpmem+B0:
jmp stuffHook
stuff_AOB:
jmp midjumpmem+B0
nop 2
return_stuff:
[DISABLE]
stuff_AOB:
readmem(code_stuff,7) // db 48 8B 8E F0 66 00 00
unregistersymbol(stuff_AOB)
unregistersymbol(stuffHook)
unregistersymbol(code_stuff)
unregistersymbol(repKitFlag)
unregistersymbol(damageFlag)
unregistersymbol(damageMulVal)
unregistersymbol(criticalFlag)
dealloc(stuffHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+AB6C4E0
Borderlands4.exe+AB6C4C0: 41 56 - push r14
Borderlands4.exe+AB6C4C2: 56 - push rsi
Borderlands4.exe+AB6C4C3: 57 - push rdi
Borderlands4.exe+AB6C4C4: 53 - push rbx
Borderlands4.exe+AB6C4C5: 48 83 EC 48 - sub rsp,48
Borderlands4.exe+AB6C4C9: 0F 29 74 24 30 - movaps [rsp+30],xmm6
Borderlands4.exe+AB6C4CE: 48 89 CE - mov rsi,rcx
Borderlands4.exe+AB6C4D1: 48 8B 05 68 54 65 06 - mov rax,[Borderlands4.exe+111C1940]
Borderlands4.exe+AB6C4D8: 48 31 E0 - xor rax,rsp
Borderlands4.exe+AB6C4DB: 48 89 44 24 28 - mov [rsp+28],rax
// ---------- INJECTING HERE ----------
Borderlands4.exe+AB6C4E0: 48 8B 89 98 66 00 00 - mov rcx,[rcx+00006698]
// ---------- DONE INJECTING ----------
Borderlands4.exe+AB6C4E7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+AB6C4EA: 74 5B - je Borderlands4.exe+AB6C547
Borderlands4.exe+AB6C4EC: 0F 28 F1 - movaps xmm6,xmm1
Borderlands4.exe+AB6C4EF: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+AB6C4F2: FF 90 00 0D 00 00 - call qword ptr [rax+00000D00]
Borderlands4.exe+AB6C4F8: 48 8B 8E 98 66 00 00 - mov rcx,[rsi+00006698]
Borderlands4.exe+AB6C4FF: 0F B6 86 50 05 00 00 - movzx eax,byte ptr [rsi+00000550]
Borderlands4.exe+AB6C506: 89 C2 - mov edx,eax
Borderlands4.exe+AB6C508: F6 D2 - not dl
Borderlands4.exe+AB6C50A: F6 C2 0A - test dl,0A
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+F875BC
Borderlands4.exe+F8756F: 4C 89 35 5A 2A 68 0B - mov [Borderlands4.exe+C609FD0],r14
Borderlands4.exe+F87576: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+F87579: FF 15 99 0B C4 0A - call qword ptr [Borderlands4.exe+BBC8118]
Borderlands4.exe+F8757F: EB AB - jmp Borderlands4.exe+F8752C
Borderlands4.exe+F87581: E8 44 9F 07 FF - call Borderlands4.exe+14CA
Borderlands4.exe+F87586: EB C7 - jmp Borderlands4.exe+F8754F
Borderlands4.exe+F87588: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+F8758B: E8 3A 9F 07 FF - call Borderlands4.exe+14CA
Borderlands4.exe+F87590: EB 9E - jmp Borderlands4.exe+F87530
Borderlands4.exe+F87592: 56 - push rsi
Borderlands4.exe+F87593: 57 - push rdi
Borderlands4.exe+F87594: 48 83 EC 38 - sub rsp,38
Borderlands4.exe+F87598: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Borderlands4.exe+F8759D: 48 89 CE - mov rsi,rcx
Borderlands4.exe+F875A0: 48 8B 89 F0 66 00 00 - mov rcx,[rcx+000066F0]
Borderlands4.exe+F875A7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+F875AA: 0F 84 C1 00 00 00 - je Borderlands4.exe+F87671
Borderlands4.exe+F875B0: 0F 28 F1 - movaps xmm6,xmm1
Borderlands4.exe+F875B3: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+F875B6: FF 90 00 0D 00 00 - call qword ptr [rax+00000D00]
// ---------- INJECTING HERE ----------
Borderlands4.exe+F875BC: 48 8B 8E F0 66 00 00 - mov rcx,[rsi+000066F0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+F875C3: 8A 86 50 05 00 00 - mov al,[rsi+00000550]
Borderlands4.exe+F875C9: 89 C2 - mov edx,eax
Borderlands4.exe+F875CB: F6 D2 - not dl
Borderlands4.exe+F875CD: F6 C2 0A - test dl,0A
Borderlands4.exe+F875D0: 0F 84 B6 00 00 00 - je Borderlands4.exe+F8768C
Borderlands4.exe+F875D6: 8B 86 68 05 00 00 - mov eax,[rsi+00000568]
Borderlands4.exe+F875DC: 89 86 6C 05 00 00 - mov [rsi+0000056C],eax
Borderlands4.exe+F875E2: 48 85 C9 - test rcx,rcx
Borderlands4.exe+F875E5: 74 0A - je Borderlands4.exe+F875F1
Borderlands4.exe+F875E7: 8A 86 50 05 00 00 - mov al,[rsi+00000550]
Borderlands4.exe+F875ED: A8 08 - test al,08
Borderlands4.exe+F875EF: 75 0C - jne Borderlands4.exe+F875FD
Borderlands4.exe+F875F1: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+F875F6: 48 83 C4 38 - add rsp,38
Borderlands4.exe+F875FA: 5F - pop rdi
Borderlands4.exe+F875FB: 5E - pop rsi
Borderlands4.exe+F875FC: C3 - ret
Borderlands4.exe+F875FD: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+F87600: E8 31 C5 9D FF - call Borderlands4.exe+963B36
Borderlands4.exe+F87605: 84 C0 - test al,al
}
16221
"Super Damage"
Auto Assembler Script
[ENABLE]
damageFlag:
dd 1
[DISABLE]
damageFlag:
dd 0
Toggle Activation
102
0
16220
"No Repair Kit Cooldown"
Auto Assembler Script
[ENABLE]
repKitFlag:
dd 1
[DISABLE]
repKitFlag:
dd 0
Toggle Activation
103
0
315848
"Always Critical Chance"
Auto Assembler Script
[ENABLE]
criticalFlag:
dd 1
[DISABLE]
criticalFlag:
dd 0
Toggle Activation
104
0
16222
"Damage Multiplier"
Float
damageMulVal
1337317190
"Instant Reload"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
{
ba 3d 02 00 00 41 89 f1 e8 ? ? ? ? e9 ? ? ? ? cc
}
[ENABLE]
aobscanmodule(reloadSpeed_AOB,$process,8Bxxxxxxxxxx85xx7Fxx4883xxxx5EC30FB6)
registersymbol(reloadSpeed_AOB)
alloc(reloadSpeedHook,0x1000)
registersymbol(reloadSpeedHook)
label(code_reloadSpeed)
label(return_reloadSpeed)
label(exit_reloadSpeed)
registersymbol(code_reloadSpeed)
reloadSpeedHook:
push (float)0.05
movss xmm0,[rsp]
add rsp,8
exit_reloadSpeed:
code_reloadSpeed:
readmem(reloadSpeed_AOB,6)
{
mov eax,[rsi+000000B8]
}
jmp return_reloadSpeed
align 10 CC
reloadSpeedHook+200:
midjumpmem+60:
jmp reloadSpeedHook
reloadSpeed_AOB:
jmp midjumpmem+60
nop
return_reloadSpeed:
[DISABLE]
reloadSpeed_AOB:
readmem(code_reloadSpeed,6) // db 8B 86 B8 00 00 00
unregistersymbol(reloadSpeed_AOB)
unregistersymbol(reloadSpeedHook)
unregistersymbol(code_reloadSpeed)
dealloc(reloadSpeedHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+BA9DCD0
Borderlands4.exe+BA9DCC6: CC - int 3
Borderlands4.exe+BA9DCC7: CC - int 3
Borderlands4.exe+BA9DCC8: CC - int 3
Borderlands4.exe+BA9DCC9: CC - int 3
Borderlands4.exe+BA9DCCA: CC - int 3
Borderlands4.exe+BA9DCCB: CC - int 3
Borderlands4.exe+BA9DCCC: CC - int 3
Borderlands4.exe+BA9DCCD: CC - int 3
Borderlands4.exe+BA9DCCE: CC - int 3
Borderlands4.exe+BA9DCCF: CC - int 3
// ---------- INJECTING HERE ----------
Borderlands4.exe+BA9DCD0: F3 0F 10 81 8C 00 00 00 - movss xmm0,[rcx+0000008C]
// ---------- DONE INJECTING ----------
Borderlands4.exe+BA9DCD8: 8B 81 B0 00 00 00 - mov eax,[rcx+000000B0]
Borderlands4.exe+BA9DCDE: 85 C0 - test eax,eax
Borderlands4.exe+BA9DCE0: 7E 42 - jle Borderlands4.exe+BA9DD24
Borderlands4.exe+BA9DCE2: 0F B6 91 C7 00 00 00 - movzx edx,byte ptr [rcx+000000C7]
Borderlands4.exe+BA9DCE9: 39 D0 - cmp eax,edx
Borderlands4.exe+BA9DCEB: 76 37 - jna Borderlands4.exe+BA9DD24
Borderlands4.exe+BA9DCED: F3 0F 10 89 90 00 00 00 - movss xmm1,[rcx+00000090]
Borderlands4.exe+BA9DCF5: 0F 57 D2 - xorps xmm2,xmm2
Borderlands4.exe+BA9DCF8: 0F 57 DB - xorps xmm3,xmm3
Borderlands4.exe+BA9DCFB: 0F C2 D8 01 - cmpltps xmm3,xmm0
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+D067D2
Borderlands4.exe+D06772: E9 19 FD FF FF - jmp Borderlands4.exe+D06490
Borderlands4.exe+D06777: E8 4E AD 2F FF - call Borderlands4.exe+14CA
Borderlands4.exe+D0677C: E9 5A FE FF FF - jmp Borderlands4.exe+D065DB
Borderlands4.exe+D06781: 45 31 E4 - xor r12d,r12d
Borderlands4.exe+D06784: E9 6C FC FF FF - jmp Borderlands4.exe+D063F5
Borderlands4.exe+D06789: 45 31 FF - xor r15d,r15d
Borderlands4.exe+D0678C: E9 B9 FD FF FF - jmp Borderlands4.exe+D0654A
Borderlands4.exe+D06791: 48 8D 0D A8 A1 EA 08 - lea rcx,[Borderlands4.exe+9BB0940]
Borderlands4.exe+D06798: 4C 8D 05 C1 A3 EA 08 - lea r8,[Borderlands4.exe+9BB0B60]
Borderlands4.exe+D0679F: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+D067A4: 45 89 F1 - mov r9d,r14d
Borderlands4.exe+D067A7: E8 DA 01 33 FF - call Borderlands4.exe+36986
Borderlands4.exe+D067AC: E9 FF FE FF FF - jmp Borderlands4.exe+D066B0
Borderlands4.exe+D067B1: 48 8D 0D 88 A1 EA 08 - lea rcx,[Borderlands4.exe+9BB0940]
Borderlands4.exe+D067B8: 4C 8D 05 A1 A3 EA 08 - lea r8,[Borderlands4.exe+9BB0B60]
Borderlands4.exe+D067BF: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+D067C4: 41 89 F1 - mov r9d,esi
Borderlands4.exe+D067C7: E8 BA 01 33 FF - call Borderlands4.exe+36986
Borderlands4.exe+D067CC: E9 0E FF FF FF - jmp Borderlands4.exe+D066DF
Borderlands4.exe+D067D1: CC - int 3
// ---------- INJECTING HERE ----------
Borderlands4.exe+D067D2: F3 0F 10 81 8C 00 00 00 - movss xmm0,[rcx+0000008C]
// ---------- DONE INJECTING ----------
Borderlands4.exe+D067DA: 8B 81 B0 00 00 00 - mov eax,[rcx+000000B0]
Borderlands4.exe+D067E0: 85 C0 - test eax,eax
Borderlands4.exe+D067E2: 7F 01 - jg Borderlands4.exe+D067E5
Borderlands4.exe+D067E4: C3 - ret
Borderlands4.exe+D067E5: 0F B6 91 C7 00 00 00 - movzx edx,byte ptr [rcx+000000C7]
Borderlands4.exe+D067EC: 39 D0 - cmp eax,edx
Borderlands4.exe+D067EE: 76 F4 - jna Borderlands4.exe+D067E4
Borderlands4.exe+D067F0: F3 0F 10 89 90 00 00 00 - movss xmm1,[rcx+00000090]
Borderlands4.exe+D067F8: 0F 57 D2 - xorps xmm2,xmm2
Borderlands4.exe+D067FB: 0F 57 DB - xorps xmm3,xmm3
Borderlands4.exe+D067FE: 0F C2 D8 01 - cmpltps xmm3,xmm0
Borderlands4.exe+D06802: 0F C2 D1 01 - cmpltps xmm2,xmm1
Borderlands4.exe+D06806: 0F 54 D3 - andps xmm2,xmm3
Borderlands4.exe+D06809: 66 0F 7E D0 - movd eax,xmm2
Borderlands4.exe+D0680D: A8 01 - test al,01
Borderlands4.exe+D0680F: 75 0A - jne Borderlands4.exe+D0681B
Borderlands4.exe+D06811: F3 0F 10 05 07 EA 92 08 - movss xmm0,[Borderlands4.exe+9635220]
Borderlands4.exe+D06819: EB 04 - jmp Borderlands4.exe+D0681F
Borderlands4.exe+D0681B: F3 0F 5E C1 - divss xmm0,xmm1
Borderlands4.exe+D0681F: F3 0F 59 81 B8 00 00 00 - mulss xmm0,[rcx+000000B8]
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+DD730D
Borderlands4.exe+DD72B2: E9 6C FC FF FF - jmp Borderlands4.exe+DD6F23
Borderlands4.exe+DD72B7: 45 31 FF - xor r15d,r15d
Borderlands4.exe+DD72BA: E9 B9 FD FF FF - jmp Borderlands4.exe+DD7078
Borderlands4.exe+DD72BF: 48 8D 0D EA 76 EF 08 - lea rcx,[Borderlands4.exe+9CCE9B0]
Borderlands4.exe+DD72C6: 4C 8D 05 03 79 EF 08 - lea r8,[Borderlands4.exe+9CCEBD0]
Borderlands4.exe+DD72CD: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+DD72D2: 45 89 F1 - mov r9d,r14d
Borderlands4.exe+DD72D5: E8 DF C9 25 FF - call Borderlands4.exe+33CB9
Borderlands4.exe+DD72DA: E9 FF FE FF FF - jmp Borderlands4.exe+DD71DE
Borderlands4.exe+DD72DF: 48 8D 0D CA 76 EF 08 - lea rcx,[Borderlands4.exe+9CCE9B0]
Borderlands4.exe+DD72E6: 4C 8D 05 E3 78 EF 08 - lea r8,[Borderlands4.exe+9CCEBD0]
Borderlands4.exe+DD72ED: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+DD72F2: 41 89 F1 - mov r9d,esi
Borderlands4.exe+DD72F5: E8 BF C9 25 FF - call Borderlands4.exe+33CB9
Borderlands4.exe+DD72FA: E9 0E FF FF FF - jmp Borderlands4.exe+DD720D
Borderlands4.exe+DD72FF: CC - int 3
Borderlands4.exe+DD7300: 56 - push rsi
Borderlands4.exe+DD7301: 48 83 EC 20 - sub rsp,20
Borderlands4.exe+DD7305: 48 89 CE - mov rsi,rcx
Borderlands4.exe+DD7308: E8 57 01 00 00 - call Borderlands4.exe+DD7464
// ---------- INJECTING HERE ----------
Borderlands4.exe+DD730D: 8B 86 B8 00 00 00 - mov eax,[rsi+000000B8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+DD7313: 85 C0 - test eax,eax
Borderlands4.exe+DD7315: 7F 06 - jg Borderlands4.exe+DD731D
Borderlands4.exe+DD7317: 48 83 C4 20 - add rsp,20
Borderlands4.exe+DD731B: 5E - pop rsi
Borderlands4.exe+DD731C: C3 - ret
Borderlands4.exe+DD731D: 0F B6 8E CF 00 00 00 - movzx ecx,byte ptr [rsi+000000CF]
Borderlands4.exe+DD7324: 39 C8 - cmp eax,ecx
Borderlands4.exe+DD7326: 76 EF - jna Borderlands4.exe+DD7317
Borderlands4.exe+DD7328: F3 0F 10 96 90 00 00 00 - movss xmm2,[rsi+00000090]
Borderlands4.exe+DD7330: F3 0F 10 86 C0 00 00 00 - movss xmm0,[rsi+000000C0]
Borderlands4.exe+DD7338: F3 0F 10 0D E0 BE 97 08 - movss xmm1,[Borderlands4.exe+9753220]
Borderlands4.exe+DD7340: 0F 57 E4 - xorps xmm4,xmm4
Borderlands4.exe+DD7343: 0F 2E D4 - ucomiss xmm2,xmm4
Borderlands4.exe+DD7346: 76 14 - jna Borderlands4.exe+DD735C
Borderlands4.exe+DD7348: F3 0F 10 9E 8C 00 00 00 - movss xmm3,[rsi+0000008C]
Borderlands4.exe+DD7350: 0F 2E DC - ucomiss xmm3,xmm4
Borderlands4.exe+DD7353: 76 07 - jna Borderlands4.exe+DD735C
Borderlands4.exe+DD7355: F3 0F 5E DA - divss xmm3,xmm2
Borderlands4.exe+DD7359: 0F 28 CB - movaps xmm1,xmm3
Borderlands4.exe+DD735C: F3 0F 59 C1 - mulss xmm0,xmm1
}
Toggle Activation
105
0
1337317191
"No Recoil"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(reocil_AOB,$process,0F28xx4Dxxxx0F84xxxxxxxx488B)
registersymbol(reocil_AOB)
alloc(reocilHook,0x1000)
registersymbol(reocilHook)
label(code_reocil)
label(return_reocil)
label(exit_reocil)
registersymbol(code_reocil)
reocilHook:
xorps xmm0,xmm0
exit_reocil:
code_reocil:
readmem(reocil_AOB,6)
{
movaps xmm6,xmm0
test r14,r14
}
jmp return_reocil
align 10 CC
reocilHook+200:
midjumpmem+70:
jmp reocilHook
reocil_AOB:
jmp midjumpmem+70
nop
return_reocil:
[DISABLE]
reocil_AOB:
readmem(code_reocil,6) // db 0F 28 F0 4D 85 F6
unregistersymbol(reocil_AOB)
unregistersymbol(reocilHook)
unregistersymbol(code_reocil)
dealloc(reocilHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+983713
Borderlands4.exe+9836B0: 0F 84 07 FF FF FF - je Borderlands4.exe+9835BD
Borderlands4.exe+9836B6: 48 8B 10 - mov rdx,[rax]
Borderlands4.exe+9836B9: 48 89 C1 - mov rcx,rax
Borderlands4.exe+9836BC: FF 52 10 - call qword ptr [rdx+10]
Borderlands4.exe+9836BF: 48 85 C0 - test rax,rax
Borderlands4.exe+9836C2: 0F 84 F5 FE FF FF - je Borderlands4.exe+9835BD
Borderlands4.exe+9836C8: 48 89 C7 - mov rdi,rax
Borderlands4.exe+9836CB: 48 8B 46 30 - mov rax,[rsi+30]
Borderlands4.exe+9836CF: 0F B7 80 D0 0B 00 00 - movzx eax,word ptr [rax+00000BD0]
Borderlands4.exe+9836D6: 39 86 18 03 00 00 - cmp [rsi+00000318],eax
Borderlands4.exe+9836DC: 74 0C - je Borderlands4.exe+9836EA
Borderlands4.exe+9836DE: 89 86 18 03 00 00 - mov [rsi+00000318],eax
Borderlands4.exe+9836E4: 89 86 1C 03 00 00 - mov [rsi+0000031C],eax
Borderlands4.exe+9836EA: FF 86 20 03 00 00 - inc [rsi+00000320]
Borderlands4.exe+9836F0: 48 8D 9E 18 03 00 00 - lea rbx,[rsi+00000318]
Borderlands4.exe+9836F7: F3 44 0F 10 8E 0C 02 00 00 - movss xmm9,[rsi+0000020C]
Borderlands4.exe+983700: 4D 8B B6 48 04 00 00 - mov r14,[r14+00000448]
Borderlands4.exe+983707: 48 8B 06 - mov rax,[rsi]
Borderlands4.exe+98370A: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+98370D: FF 90 48 04 00 00 - call qword ptr [rax+00000448]
// ---------- INJECTING HERE ----------
Borderlands4.exe+983713: 0F 28 F0 - movaps xmm6,xmm0
// ---------- DONE INJECTING ----------
Borderlands4.exe+983716: 4D 85 F6 - test r14,r14
Borderlands4.exe+983719: 0F 84 BC 00 00 00 - je Borderlands4.exe+9837DB
Borderlands4.exe+98371F: 48 8B 86 B0 02 00 00 - mov rax,[rsi+000002B0]
Borderlands4.exe+983726: F6 80 B4 00 00 00 01 - test byte ptr [rax+000000B4],01
Borderlands4.exe+98372D: 0F 85 1A 04 00 00 - jne Borderlands4.exe+983B4D
Borderlands4.exe+983733: 48 8B 46 30 - mov rax,[rsi+30]
Borderlands4.exe+983737: 4C 8B B8 B0 01 00 00 - mov r15,[rax+000001B0]
Borderlands4.exe+98373E: 4D 85 FF - test r15,r15
Borderlands4.exe+983741: 0F 84 94 00 00 00 - je Borderlands4.exe+9837DB
Borderlands4.exe+983747: 48 8B 15 9A 47 E5 0B - mov rdx,[Borderlands4.exe+C7D7EE8]
Borderlands4.exe+98374E: 48 85 D2 - test rdx,rdx
Borderlands4.exe+983751: 0F 84 E3 01 00 00 - je Borderlands4.exe+98393A
Borderlands4.exe+983757: 49 8B 07 - mov rax,[r15]
Borderlands4.exe+98375A: 4C 89 F9 - mov rcx,r15
Borderlands4.exe+98375D: FF 90 88 02 00 00 - call qword ptr [rax+00000288]
Borderlands4.exe+983763: 48 85 C0 - test rax,rax
Borderlands4.exe+983766: 74 73 - je Borderlands4.exe+9837DB
Borderlands4.exe+983768: 49 89 C7 - mov r15,rax
Borderlands4.exe+98376B: 48 8B 15 76 47 E5 0B - mov rdx,[Borderlands4.exe+C7D7EE8]
Borderlands4.exe+983772: 48 85 D2 - test rdx,rdx
}
Toggle Activation
96
0
1337317192
"No Recoil 2"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(recoil2_AOB,$process,0F57xx440Fxxxx76xx488B)
registersymbol(recoil2_AOB)
alloc(recoil2Hook,0x1000)
registersymbol(recoil2Hook)
label(code_recoil2)
label(return_recoil2)
label(exit_recoil2)
registersymbol(code_recoil2)
recoil2Hook:
xorps xmm10,xmm10
exit_recoil2:
code_recoil2:
readmem(recoil2_AOB,7)
{
xorps xmm0,xmm0
ucomiss xmm10,xmm0
}
jmp return_recoil2
align 10 CC
recoil2Hook+200:
midjumpmem+80:
jmp recoil2Hook
recoil2_AOB:
jmp midjumpmem+80
nop 2
return_recoil2:
[DISABLE]
recoil2_AOB:
readmem(code_recoil2,7) // db 0F 57 C0 44 0F 2E D0
unregistersymbol(recoil2_AOB)
unregistersymbol(recoil2Hook)
unregistersymbol(code_recoil2)
dealloc(recoil2Hook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+9F2632F
Borderlands4.exe+9F2630E: 75 1F - jne Borderlands4.exe+9F2632F
Borderlands4.exe+9F26310: 48 8B 10 - mov rdx,[rax]
Borderlands4.exe+9F26313: 48 89 C1 - mov rcx,rax
Borderlands4.exe+9F26316: FF 52 20 - call qword ptr [rdx+20]
Borderlands4.exe+9F26319: 80 38 02 - cmp byte ptr [rax],02
Borderlands4.exe+9F2631C: 74 06 - je Borderlands4.exe+9F26324
Borderlands4.exe+9F2631E: 80 78 01 00 - cmp byte ptr [rax+01],00
Borderlands4.exe+9F26322: 74 0B - je Borderlands4.exe+9F2632F
Borderlands4.exe+9F26324: F3 0F 10 76 6C - movss xmm6,[rsi+6C]
Borderlands4.exe+9F26329: F3 44 0F 10 56 78 - movss xmm10,[rsi+78]
// ---------- INJECTING HERE ----------
Borderlands4.exe+9F2632F: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+9F26332: 44 0F 2E D0 - ucomiss xmm10,xmm0
// ---------- DONE INJECTING ----------
Borderlands4.exe+9F26336: 0F 86 DB 00 00 00 - jbe Borderlands4.exe+9F26417
Borderlands4.exe+9F2633C: 48 8B 7E 30 - mov rdi,[rsi+30]
Borderlands4.exe+9F26340: 48 8B 46 40 - mov rax,[rsi+40]
Borderlands4.exe+9F26344: 80 78 60 01 - cmp byte ptr [rax+60],01
Borderlands4.exe+9F26348: 75 10 - jne Borderlands4.exe+9F2635A
Borderlands4.exe+9F2634A: 48 8B 87 38 0D 00 00 - mov rax,[rdi+00000D38]
Borderlands4.exe+9F26351: 48 3B 05 B0 AC 68 07 - cmp rax,[Borderlands4.exe+115B1008]
Borderlands4.exe+9F26358: 75 5C - jne Borderlands4.exe+9F263B6
Borderlands4.exe+9F2635A: 48 8B 8F 08 0B 00 00 - mov rcx,[rdi+00000B08]
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+151D5E
Borderlands4.exe+151D12: FF 90 88 02 00 00 - call qword ptr [rax+00000288]
Borderlands4.exe+151D18: 48 85 C0 - test rax,rax
Borderlands4.exe+151D1B: 74 41 - je Borderlands4.exe+151D5E
Borderlands4.exe+151D1D: 48 89 C7 - mov rdi,rax
Borderlands4.exe+151D20: 48 8B 15 C1 61 68 0C - mov rdx,[Borderlands4.exe+C7D7EE8]
Borderlands4.exe+151D27: 48 85 D2 - test rdx,rdx
Borderlands4.exe+151D2A: 0F 84 D3 02 00 00 - je Borderlands4.exe+152003
Borderlands4.exe+151D30: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+151D33: E8 F6 5A 1A 04 - call Borderlands4.exe+42F782E
Borderlands4.exe+151D38: 48 39 C7 - cmp rdi,rax
Borderlands4.exe+151D3B: 74 21 - je Borderlands4.exe+151D5E
Borderlands4.exe+151D3D: 48 85 C0 - test rax,rax
Borderlands4.exe+151D40: 74 1C - je Borderlands4.exe+151D5E
Borderlands4.exe+151D42: 48 8B 10 - mov rdx,[rax]
Borderlands4.exe+151D45: 48 89 C1 - mov rcx,rax
Borderlands4.exe+151D48: FF 52 20 - call qword ptr [rdx+20]
Borderlands4.exe+151D4B: 80 38 02 - cmp byte ptr [rax],02
Borderlands4.exe+151D4E: 0F 84 01 02 00 00 - je Borderlands4.exe+151F55
Borderlands4.exe+151D54: 80 78 01 00 - cmp byte ptr [rax+01],00
Borderlands4.exe+151D58: 0F 85 F7 01 00 00 - jne Borderlands4.exe+151F55
// ---------- INJECTING HERE ----------
Borderlands4.exe+151D5E: 0F 57 C0 - xorps xmm0,xmm0
// ---------- DONE INJECTING ----------
Borderlands4.exe+151D61: 44 0F 2E D0 - ucomiss xmm10,xmm0
Borderlands4.exe+151D65: 76 1A - jna Borderlands4.exe+151D81
Borderlands4.exe+151D67: 48 8B 7E 30 - mov rdi,[rsi+30]
Borderlands4.exe+151D6B: 48 8B 46 40 - mov rax,[rsi+40]
Borderlands4.exe+151D6F: 80 78 60 01 - cmp byte ptr [rax+60],01
Borderlands4.exe+151D73: 75 60 - jne Borderlands4.exe+151DD5
Borderlands4.exe+151D75: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+151D78: E8 A1 5C 05 00 - call Borderlands4.exe+1A7A1E
Borderlands4.exe+151D7D: 84 C0 - test al,al
Borderlands4.exe+151D7F: 75 50 - jne Borderlands4.exe+151DD1
Borderlands4.exe+151D81: 48 8B 4C 24 78 - mov rcx,[rsp+78]
Borderlands4.exe+151D86: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+151D89: 48 3B 0D B0 0B 22 0C - cmp rcx,[Borderlands4.exe+C372940]
Borderlands4.exe+151D90: 75 39 - jne Borderlands4.exe+151DCB
Borderlands4.exe+151D92: 0F 28 C6 - movaps xmm0,xmm6
Borderlands4.exe+151D95: 0F 28 B4 24 80 00 00 00 - movaps xmm6,[rsp+00000080]
Borderlands4.exe+151D9D: 0F 28 BC 24 90 00 00 00 - movaps xmm7,[rsp+00000090]
Borderlands4.exe+151DA5: 44 0F 28 84 24 A0 00 00 00 - movaps xmm8,[rsp+000000A0]
Borderlands4.exe+151DAE: 44 0F 28 8C 24 B0 00 00 00 - movaps xmm9,[rsp+000000B0]
Borderlands4.exe+151DB7: 44 0F 28 94 24 C0 00 00 00 - movaps xmm10,[rsp+000000C0]
}
1337317193
"Super Accuracy"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(accuracy_AOB,$process,75xx0F28xxE8xxxxxxxx4885)
registersymbol(accuracy_AOB)
accuracy_AOB:
db EB
[DISABLE]
accuracy_AOB:
db 75
unregistersymbol(accuracy_AOB)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+9F201F8
Borderlands4.exe+9F201D0: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+9F201D3: FF 50 18 - call qword ptr [rax+18]
Borderlands4.exe+9F201D6: 49 89 C6 - mov r14,rax
Borderlands4.exe+9F201D9: 48 8B 06 - mov rax,[rsi]
Borderlands4.exe+9F201DC: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+9F201DF: FF 90 D8 03 00 00 - call qword ptr [rax+000003D8]
Borderlands4.exe+9F201E5: 49 8B 86 50 01 00 00 - mov rax,[r14+00000150]
Borderlands4.exe+9F201EC: 48 85 C0 - test rax,rax
Borderlands4.exe+9F201EF: 74 4B - je Borderlands4.exe+9F2023C
Borderlands4.exe+9F201F1: 80 B8 78 01 00 00 03 - cmp byte ptr [rax+00000178],03
// ---------- INJECTING HERE ----------
Borderlands4.exe+9F201F8: 75 42 - jne Borderlands4.exe+9F2023C
// ---------- DONE INJECTING ----------
Borderlands4.exe+9F201FA: 0F 28 F0 - movaps xmm6,xmm0
Borderlands4.exe+9F201FD: 41 0F B6 97 1C 0D 00 00 - movzx edx,byte ptr [r15+00000D1C]
Borderlands4.exe+9F20205: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+9F20208: E8 D3 7B FB FF - call Borderlands4.exe+9ED7DE0
Borderlands4.exe+9F2020D: 48 85 C0 - test rax,rax
Borderlands4.exe+9F20210: 74 2A - je Borderlands4.exe+9F2023C
Borderlands4.exe+9F20212: 48 89 C1 - mov rcx,rax
Borderlands4.exe+9F20215: E8 66 1D 41 FF - call Borderlands4.exe+9331F80
Borderlands4.exe+9F2021A: F3 0F 10 80 C8 00 00 00 - movss xmm0,[rax+000000C8]
Borderlands4.exe+9F20222: F3 0F 58 80 1C 01 00 00 - addss xmm0,[rax+0000011C]
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+983514
Borderlands4.exe+9834C4: F3 0F 10 B1 0C 02 00 00 - movss xmm6,[rcx+0000020C]
Borderlands4.exe+9834CC: 8B B9 DC 02 00 00 - mov edi,[rcx+000002DC]
Borderlands4.exe+9834D2: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+9834D5: FF 90 C8 03 00 00 - call qword ptr [rax+000003C8]
Borderlands4.exe+9834DB: 39 C7 - cmp edi,eax
Borderlands4.exe+9834DD: 7C 0F - jl Borderlands4.exe+9834EE
Borderlands4.exe+9834DF: 0F 28 C6 - movaps xmm0,xmm6
Borderlands4.exe+9834E2: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+9834E7: 48 83 C4 38 - add rsp,38
Borderlands4.exe+9834EB: 5F - pop rdi
Borderlands4.exe+9834EC: 5E - pop rsi
Borderlands4.exe+9834ED: C3 - ret
Borderlands4.exe+9834EE: F3 0F 59 B6 18 02 00 00 - mulss xmm6,[rsi+00000218]
Borderlands4.exe+9834F6: EB E7 - jmp Borderlands4.exe+9834DF
Borderlands4.exe+9834F8: 48 83 EC 38 - sub rsp,38
Borderlands4.exe+9834FC: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Borderlands4.exe+983501: 48 8B 81 50 01 00 00 - mov rax,[rcx+00000150]
Borderlands4.exe+983508: 48 85 C0 - test rax,rax
Borderlands4.exe+98350B: 74 16 - je Borderlands4.exe+983523
Borderlands4.exe+98350D: 80 B8 78 01 00 00 03 - cmp byte ptr [rax+00000178],03
// ---------- INJECTING HERE ----------
Borderlands4.exe+983514: 75 0D - jne Borderlands4.exe+983523
// ---------- DONE INJECTING ----------
Borderlands4.exe+983516: 0F 28 F2 - movaps xmm6,xmm2
Borderlands4.exe+983519: E8 A0 EC 7C FF - call Borderlands4.exe+1521BE
Borderlands4.exe+98351E: 48 85 C0 - test rax,rax
Borderlands4.exe+983521: 75 0A - jne Borderlands4.exe+98352D
Borderlands4.exe+983523: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+983528: 48 83 C4 38 - add rsp,38
Borderlands4.exe+98352C: C3 - ret
Borderlands4.exe+98352D: 48 89 C1 - mov rcx,rax
Borderlands4.exe+983530: E8 B9 81 70 FF - call Borderlands4.exe+8B6EE
Borderlands4.exe+983535: F3 0F 10 88 C8 00 00 00 - movss xmm1,[rax+000000C8]
Borderlands4.exe+98353D: F3 0F 58 88 20 01 00 00 - addss xmm1,[rax+00000120]
Borderlands4.exe+983545: F3 0F 58 CE - addss xmm1,xmm6
Borderlands4.exe+983549: 48 89 C1 - mov rcx,rax
Borderlands4.exe+98354C: 41 B0 01 - mov r8b,01
Borderlands4.exe+98354F: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+983554: 48 83 C4 38 - add rsp,38
Borderlands4.exe+983558: E9 71 13 00 00 - jmp Borderlands4.exe+9848CE
Borderlands4.exe+98355D: CC - int 3
Borderlands4.exe+98355E: 41 57 - push r15
Borderlands4.exe+983560: 41 56 - push r14
}
Toggle Activation
109
0
1337317197
"getRapid"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(rapidFire_AOB,$process,488Bxxxxxxxxxx4885xx0F84xxxxxxxx488Bxx488Bxxxxxxxxxx488Dxxxxxxxxxx4839xx0F85xxxxxxxx488Bxxxxxxxxxx4885)
registersymbol(rapidFire_AOB)
alloc(rapidFireHook,0x1000)
registersymbol(rapidFireHook)
label(code_rapidFire)
label(return_rapidFire)
label(exit_rapidFire)
label(rapidFireFlag)
registersymbol(rapidFireFlag)
registersymbol(code_rapidFire)
rapidFireHook:
cmp [rapidFireFlag], 0
js code_rapidFire
push rax
push rbx
push rdx
mov rdx,rax
mov rax, [playerPtr]
mov rbx, rax
mov eax, 168 // Actor_owner
cmp [rdx+rax], rbx
jne exit_rapidFire
cmp [rapidFireFlag],1
jne @F
mov eax, 18C //Fire_firerate:Value
mov [rdi+rax], (float)99
mov eax, 1B0 // Fire_BurstFireDelay:Value
cmp [rdi+rax], 0
jle exit_rapidFire
mov [rdi+rax], (float)0.01
jmp exit_rapidFire
@@:
mov eax, 1B4 //Fire_BurstFireDelay:BaseValue
mov edx, [rdi+rax]
cmp edx, 0
jle @F
mov eax, 1B0 // Fire_BurstFireDelay:Value
cmp [rdi+rax], 0
jle @F
mov [rdi+rax], edx
exit_rapidFire:
pop rdx
pop rbx
pop rax
code_rapidFire:
readmem(rapidFire_AOB,7)
{
mov rbx,[rax+000001B0]
}
jmp return_rapidFire
align 10 CC
rapidFireHook+200:
rapidFireFlag:
dd -1
midjumpmem+A0:
jmp rapidFireHook
rapidFire_AOB:
jmp midjumpmem+A0
nop 2
return_rapidFire:
[DISABLE]
rapidFire_AOB:
readmem(code_rapidFire,7) // db 48 8B 98 B0 01 00 00
unregistersymbol(rapidFire_AOB)
unregistersymbol(rapidFireHook)
unregistersymbol(code_rapidFire)
unregistersymbol(rapidFireFlag)
dealloc(rapidFireHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+9F1D1D9
Borderlands4.exe+9F1D1B4: 74 12 - je Borderlands4.exe+9F1D1C8
Borderlands4.exe+9F1D1B6: F6 87 D1 02 00 00 10 - test byte ptr [rdi+000002D1],10
Borderlands4.exe+9F1D1BD: 75 0D - jne Borderlands4.exe+9F1D1CC
Borderlands4.exe+9F1D1BF: 0F B6 AF F9 02 00 00 - movzx ebp,byte ptr [rdi+000002F9]
Borderlands4.exe+9F1D1C6: EB 0B - jmp Borderlands4.exe+9F1D1D3
Borderlands4.exe+9F1D1C8: 31 ED - xor ebp,ebp
Borderlands4.exe+9F1D1CA: EB 09 - jmp Borderlands4.exe+9F1D1D5
Borderlands4.exe+9F1D1CC: 0F B6 AF F8 02 00 00 - movzx ebp,byte ptr [rdi+000002F8]
Borderlands4.exe+9F1D1D3: FF C5 - inc ebp
Borderlands4.exe+9F1D1D5: 48 8B 47 30 - mov rax,[rdi+30]
// ---------- INJECTING HERE ----------
Borderlands4.exe+9F1D1D9: 48 8B 88 B0 01 00 00 - mov rcx,[rax+000001B0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+9F1D1E0: 48 85 C9 - test rcx,rcx
Borderlands4.exe+9F1D1E3: 48 89 8C 24 80 00 00 00 - mov [rsp+00000080],rcx
Borderlands4.exe+9F1D1EB: 74 15 - je Borderlands4.exe+9F1D202
Borderlands4.exe+9F1D1ED: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+9F1D1F0: FF 90 E8 05 00 00 - call qword ptr [rax+000005E8]
Borderlands4.exe+9F1D1F6: 48 85 C0 - test rax,rax
Borderlands4.exe+9F1D1F9: 0F 95 C0 - setne al
Borderlands4.exe+9F1D1FC: 89 44 24 7C - mov [rsp+7C],eax
Borderlands4.exe+9F1D200: EB 08 - jmp Borderlands4.exe+9F1D20A
Borderlands4.exe+9F1D202: C7 44 24 7C 00 00 00 00 - mov [rsp+7C],00000000
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+8FFF5E
Borderlands4.exe+8FFF07: 0F 8E 23 05 00 00 - jng Borderlands4.exe+900430
Borderlands4.exe+8FFF0D: 0F B6 86 C9 0B 00 00 - movzx eax,byte ptr [rsi+00000BC9]
Borderlands4.exe+8FFF14: FF C0 - inc eax
Borderlands4.exe+8FFF16: 31 D2 - xor edx,edx
Borderlands4.exe+8FFF18: F7 F1 - div ecx
Borderlands4.exe+8FFF1A: 88 96 CA 0B 00 00 - mov [rsi+00000BCA],dl
Borderlands4.exe+8FFF20: E9 0B 05 00 00 - jmp Borderlands4.exe+900430
Borderlands4.exe+8FFF25: 80 BE 78 01 00 00 03 - cmp byte ptr [rsi+00000178],03
Borderlands4.exe+8FFF2C: 0F 85 22 08 00 00 - jne Borderlands4.exe+900754
Borderlands4.exe+8FFF32: 80 BF FA 02 00 00 00 - cmp byte ptr [rdi+000002FA],00
Borderlands4.exe+8FFF39: 74 12 - je Borderlands4.exe+8FFF4D
Borderlands4.exe+8FFF3B: F6 87 D1 02 00 00 10 - test byte ptr [rdi+000002D1],10
Borderlands4.exe+8FFF42: 75 0D - jne Borderlands4.exe+8FFF51
Borderlands4.exe+8FFF44: 0F B6 AF F9 02 00 00 - movzx ebp,byte ptr [rdi+000002F9]
Borderlands4.exe+8FFF4B: EB 0B - jmp Borderlands4.exe+8FFF58
Borderlands4.exe+8FFF4D: 31 ED - xor ebp,ebp
Borderlands4.exe+8FFF4F: EB 09 - jmp Borderlands4.exe+8FFF5A
Borderlands4.exe+8FFF51: 0F B6 AF F8 02 00 00 - movzx ebp,byte ptr [rdi+000002F8]
Borderlands4.exe+8FFF58: FF C5 - inc ebp
Borderlands4.exe+8FFF5A: 48 8B 47 30 - mov rax,[rdi+30]
// ---------- INJECTING HERE ----------
Borderlands4.exe+8FFF5E: 48 8B 98 B0 01 00 00 - mov rbx,[rax+000001B0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+8FFF65: 48 85 DB - test rbx,rbx
Borderlands4.exe+8FFF68: 0F 84 B3 00 00 00 - je Borderlands4.exe+900021
Borderlands4.exe+8FFF6E: 48 8B 0B - mov rcx,[rbx]
Borderlands4.exe+8FFF71: 48 8B 81 E8 05 00 00 - mov rax,[rcx+000005E8]
Borderlands4.exe+8FFF78: 48 8D 15 5F 42 29 00 - lea rdx,[Borderlands4.exe+B941DE]
Borderlands4.exe+8FFF7F: 48 39 D0 - cmp rax,rdx
Borderlands4.exe+8FFF82: 0F 85 C0 05 00 00 - jne Borderlands4.exe+900548
Borderlands4.exe+8FFF88: 48 8B 83 B0 03 00 00 - mov rax,[rbx+000003B0]
Borderlands4.exe+8FFF8F: 48 85 C0 - test rax,rax
Borderlands4.exe+8FFF92: 0F 85 80 00 00 00 - jne Borderlands4.exe+900018
Borderlands4.exe+8FFF98: 48 8B 81 F8 05 00 00 - mov rax,[rcx+000005F8]
Borderlands4.exe+8FFF9F: 48 8D 0D 22 86 9F 03 - lea rcx,[Borderlands4.exe+42F85C8]
Borderlands4.exe+8FFFA6: 48 39 C8 - cmp rax,rcx
Borderlands4.exe+8FFFA9: 0F 85 8D 07 00 00 - jne Borderlands4.exe+90073C
Borderlands4.exe+8FFFAF: 48 8B 83 48 3B 00 00 - mov rax,[rbx+00003B48]
Borderlands4.exe+8FFFB6: 48 8B 40 18 - mov rax,[rax+18]
Borderlands4.exe+8FFFBA: 48 8D 0D FF D6 96 03 - lea rcx,[Borderlands4.exe+426D6C0]
Borderlands4.exe+8FFFC1: 48 39 C8 - cmp rax,rcx
Borderlands4.exe+8FFFC4: 0F 85 7C 07 00 00 - jne Borderlands4.exe+900746
Borderlands4.exe+8FFFCA: 8B 8B E4 73 00 00 - mov ecx,[rbx+000073E4]
}
16218
"Rapid Fire"
Auto Assembler Script
[ENABLE]
rapidFireFlag:
dd 1
[DISABLE]
rapidFireFlag:
dd 0
Toggle Activation
107
0
1337317243
"No Weapon Overheat"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(waeponHeat_AOB,$process,74xx0F28xx4883xxxx5E)
registersymbol(waeponHeat_AOB)
alloc(waeponHeatHook,0x1000)
registersymbol(waeponHeatHook)
label(code_waeponHeat)
label(return_waeponHeat)
label(exit_waeponHeat)
registersymbol(code_waeponHeat)
waeponHeatHook:
xorps xmm0,xmm0
jmp return_waeponHeat
exit_waeponHeat:
code_waeponHeat:
readmem(waeponHeat_AOB+17,8)
{
movss xmm0,[rcx+00000258]
}
jmp return_waeponHeat
align 10 CC
waeponHeatHook+200:
midjumpmem+200:
jmp waeponHeatHook
waeponHeat_AOB+17:
jmp midjumpmem+200
nop 3
return_waeponHeat:
[DISABLE]
waeponHeat_AOB+17:
readmem(code_waeponHeat,8) // db F3 0F 10 81 58 02 00 00
unregistersymbol(waeponHeat_AOB)
unregistersymbol(waeponHeatHook)
unregistersymbol(code_waeponHeat)
dealloc(waeponHeatHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+7E8BFC
Borderlands4.exe+7E8BBD: 48 8B 4E 30 - mov rcx,[rsi+30]
Borderlands4.exe+7E8BC1: 0F B6 46 38 - movzx eax,byte ptr [rsi+38]
Borderlands4.exe+7E8BC5: 39 81 E0 0B 00 00 - cmp [rcx+00000BE0],eax
Borderlands4.exe+7E8BCB: 7E 27 - jle Borderlands4.exe+7E8BF4
Borderlands4.exe+7E8BCD: 48 8B 89 D8 0B 00 00 - mov rcx,[rcx+00000BD8]
Borderlands4.exe+7E8BD4: 89 C2 - mov edx,eax
Borderlands4.exe+7E8BD6: C1 E2 07 - shl edx,07
Borderlands4.exe+7E8BD9: 48 8D 04 C2 - lea rax,[rdx+rax*8]
Borderlands4.exe+7E8BDD: 48 8B 4C 01 40 - mov rcx,[rcx+rax+40]
Borderlands4.exe+7E8BE2: 48 85 C9 - test rcx,rcx
Borderlands4.exe+7E8BE5: 74 0D - je Borderlands4.exe+7E8BF4
Borderlands4.exe+7E8BE7: 0F 28 C8 - movaps xmm1,xmm0
Borderlands4.exe+7E8BEA: 48 83 C4 20 - add rsp,20
Borderlands4.exe+7E8BEE: 5E - pop rsi
Borderlands4.exe+7E8BEF: E9 12 00 00 00 - jmp Borderlands4.exe+7E8C06
Borderlands4.exe+7E8BF4: 90 - nop
Borderlands4.exe+7E8BF5: 48 83 C4 20 - add rsp,20
Borderlands4.exe+7E8BF9: 5E - pop rsi
Borderlands4.exe+7E8BFA: C3 - ret
Borderlands4.exe+7E8BFB: CC - int 3
// ---------- INJECTING HERE ----------
Borderlands4.exe+7E8BFC: F3 0F 10 81 58 02 00 00 - movss xmm0,[rcx+00000258]
// ---------- DONE INJECTING ----------
Borderlands4.exe+7E8C04: C3 - ret
Borderlands4.exe+7E8C05: CC - int 3
Borderlands4.exe+7E8C06: 56 - push rsi
Borderlands4.exe+7E8C07: 48 83 EC 30 - sub rsp,30
Borderlands4.exe+7E8C0B: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Borderlands4.exe+7E8C10: 48 89 CE - mov rsi,rcx
Borderlands4.exe+7E8C13: 8A 81 C4 00 00 00 - mov al,[rcx+000000C4]
Borderlands4.exe+7E8C19: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+7E8C1C: 0F 2E C8 - ucomiss xmm1,xmm0
Borderlands4.exe+7E8C1F: 0F 9B C1 - setnp cl
Borderlands4.exe+7E8C22: 0F 94 C2 - sete dl
Borderlands4.exe+7E8C25: 20 CA - and dl,cl
Borderlands4.exe+7E8C27: 08 C2 - or dl,al
Borderlands4.exe+7E8C29: F6 C2 01 - test dl,01
Borderlands4.exe+7E8C2C: 74 0B - je Borderlands4.exe+7E8C39
Borderlands4.exe+7E8C2E: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+7E8C33: 48 83 C4 30 - add rsp,30
Borderlands4.exe+7E8C37: 5E - pop rsi
Borderlands4.exe+7E8C38: C3 - ret
Borderlands4.exe+7E8C39: 0F 28 F1 - movaps xmm6,xmm1
}
Toggle Activation
17
97
0
1337317211
"Set Money"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local addr = getAddressSafe('[[[inventoryPtr]+0xC30]+0x38]+0x28')
if addr then
local str = inputQuery('Set Money', 'Set To:', readInteger(addr))
if str and str ~= '' then
writeInteger(addr, tonumber(str)) -- Convert input to integer
end
else
print("Oops, something went wrong.")
end
createTimer(100, function() memrec.Active = false end)
[DISABLE]
Toggle Activation
17
98
0
1337317212
"Set Eridium"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local addr = getAddressSafe('[[[inventoryPtr]+0xC30]+0x38]+0x40')
if addr then
local str = inputQuery('Set Eridium', 'Set To:', readInteger(addr))
if str and str ~= '' then
writeInteger(addr, tonumber(str)) -- Convert input to integer
end
else
print("Oops, something went wrong.")
end
createTimer(100, function() memrec.Active = false end)
[DISABLE]
Toggle Activation
17
99
0
1337317213
"Easy Level Up"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local xpNeededToLevel = readInteger('[[[playerPtr]+0x3B0]+0x6C0]+0x20')
local currentXP = getAddressSafe('[[[playerPtr]+0x3B0]+0x6C0]+0x8')
local finalVal = xpNeededToLevel + 1
writeInteger(currentXP,finalVal)
createTimer(100, function() memrec.Active = false end)
[DISABLE]
Toggle Activation
17
100
0
1337317214
"getPoints"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(skillPoints_AOB,$process,488Bxxxxxxxxxx89xx8Bxxxx4863)
registersymbol(skillPoints_AOB)
alloc(skillPointsHook,0x1000)
registersymbol(skillPointsHook)
label(code_skillPoints)
label(return_skillPoints)
label(exit_skillPoints)
label(skillPts)
label(sdu)
registersymbol(code_skillPoints)
registersymbol(skillPts)
registersymbol(sdu)
skillPointsHook:
readmem(skillPoints_AOB,9)
cmp eax,0
jne @f
mov edi,[skillPts]
jmp @@2
@@:
cmp eax,2
jne exit_skillPoints
mov edi,[sdu]
jmp @@2
@@2:
cmp edi,0
jle @f
mov [rcx+rax*4],edi
exit_skillPoints:
jmp return_skillPoints
code_skillPoints:
readmem(skillPoints_AOB,9)
{
mov rcx,[rbx+00000100]
}
jmp return_skillPoints
align 10 CC
skillPointsHook+200:
skillPts:
dd 0
sdu:
dd 0
midjumpmem+C0:
jmp skillPointsHook
skillPoints_AOB:
jmp midjumpmem+c0
nop 4
return_skillPoints:
[DISABLE]
skillPoints_AOB:
readmem(code_skillPoints,9) // db 48 8B 8B 00 01 00 00
unregistersymbol(skillPoints_AOB)
unregistersymbol(skillPointsHook)
unregistersymbol(code_skillPoints)
unregistersymbol(skillPts)
unregistersymbol(sdu)
dealloc(skillPointsHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+C1A6DA
Borderlands4.exe+C1A6A1: 41 5E - pop r14
Borderlands4.exe+C1A6A3: 41 5F - pop r15
Borderlands4.exe+C1A6A5: C3 - ret
Borderlands4.exe+C1A6A6: 41 57 - push r15
Borderlands4.exe+C1A6A8: 41 56 - push r14
Borderlands4.exe+C1A6AA: 56 - push rsi
Borderlands4.exe+C1A6AB: 57 - push rdi
Borderlands4.exe+C1A6AC: 53 - push rbx
Borderlands4.exe+C1A6AD: 48 83 EC 20 - sub rsp,20
Borderlands4.exe+C1A6B1: 48 85 D2 - test rdx,rdx
Borderlands4.exe+C1A6B4: 0F 84 9E 00 00 00 - je Borderlands4.exe+C1A758
Borderlands4.exe+C1A6BA: 48 89 D6 - mov rsi,rdx
Borderlands4.exe+C1A6BD: 48 89 CB - mov rbx,rcx
Borderlands4.exe+C1A6C0: 48 81 C1 D8 00 00 00 - add rcx,000000D8
Borderlands4.exe+C1A6C7: E8 A0 C5 DF FF - call Borderlands4.exe+A16C6C
Borderlands4.exe+C1A6CC: 31 FF - xor edi,edi
Borderlands4.exe+C1A6CE: 85 C0 - test eax,eax
Borderlands4.exe+C1A6D0: 78 14 - js Borderlands4.exe+C1A6E6
Borderlands4.exe+C1A6D2: 39 83 08 01 00 00 - cmp [rbx+00000108],eax
Borderlands4.exe+C1A6D8: 7E 0C - jle Borderlands4.exe+C1A6E6
// ---------- INJECTING HERE ----------
Borderlands4.exe+C1A6DA: 48 8B 8B 00 01 00 00 - mov rcx,[rbx+00000100]
// ---------- DONE INJECTING ----------
Borderlands4.exe+C1A6E1: 89 C0 - mov eax,eax
Borderlands4.exe+C1A6E3: 8B 3C 81 - mov edi,[rcx+rax*4]
Borderlands4.exe+C1A6E6: 48 63 83 A0 00 00 00 - movsxd rax,dword ptr [rbx+000000A0]
Borderlands4.exe+C1A6ED: 48 85 C0 - test rax,rax
Borderlands4.exe+C1A6F0: 74 68 - je Borderlands4.exe+C1A75A
Borderlands4.exe+C1A6F2: 4C 8B B3 98 00 00 00 - mov r14,[rbx+00000098]
Borderlands4.exe+C1A6F9: 4D 8D 3C C6 - lea r15,[r14+rax*8]
Borderlands4.exe+C1A6FD: 49 8B 1E - mov rbx,[r14]
Borderlands4.exe+C1A700: 48 85 DB - test rbx,rbx
Borderlands4.exe+C1A703: 74 0D - je Borderlands4.exe+C1A712
Borderlands4.exe+C1A705: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+C1A708: E8 5B 00 00 00 - call Borderlands4.exe+C1A768
Borderlands4.exe+C1A70D: 48 39 F0 - cmp rax,rsi
Borderlands4.exe+C1A710: 74 0B - je Borderlands4.exe+C1A71D
Borderlands4.exe+C1A712: 49 83 C6 08 - add r14,08
Borderlands4.exe+C1A716: 4D 39 FE - cmp r14,r15
Borderlands4.exe+C1A719: 75 E2 - jne Borderlands4.exe+C1A6FD
Borderlands4.exe+C1A71B: EB 3D - jmp Borderlands4.exe+C1A75A
Borderlands4.exe+C1A71D: 48 63 83 40 01 00 00 - movsxd rax,dword ptr [rbx+00000140]
Borderlands4.exe+C1A724: 48 85 C0 - test rax,rax
}
1337317215
"Edit: Skill Points"
4 Bytes
skillPts
1337317216
"Edit: SDU Tokens"
4 Bytes
sdu
1337317220
"Unlimited Jumps"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(infJumps_AOB,$process,8Bxxxxxxxxxx89xxxxxxxxxx4885xx74xx8AxxxxxxxxxxA8)
registersymbol(infJumps_AOB)
alloc(infJumpsHook,0x1000)
registersymbol(infJumpsHook)
alloc(jumpOffset,4)
registersymbol(jumpOffset)
jumpOffset:
readmem(infJumps_AOB+2,4)
label(code_infJumps)
label(return_infJumps)
label(exit_infJumps)
registersymbol(code_infJumps)
infJumpsHook:
push rcx
mov rcx,playerPtr
mov rcx,[rcx]
test rcx,rcx
je exit_infJumps
cmp rcx,rsi
jne @f
movzx ecx,word ptr [jumpOffset]
mov [rsi+rcx],0
exit_infJumps:
pop rcx
code_infJumps:
readmem(infJumps_AOB,6)
{
mov eax,[rsi+00000568]
}
jmp return_infJumps
align 10 CC
infJumpsHook+200:
midjumpmem+F0:
jmp infJumpsHook
infJumps_AOB:
jmp midjumpmem+f0
nop
return_infJumps:
[DISABLE]
infJumps_AOB:
readmem(code_infJumps,6) // db 8B 86 68 05 00 00
unregistersymbol(infJumps_AOB)
unregistersymbol(infJumpsHook)
unregistersymbol(code_infJumps)
dealloc(infJumpsHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+F875D6
Borderlands4.exe+F8758B: E8 3A 9F 07 FF - call Borderlands4.exe+14CA
Borderlands4.exe+F87590: EB 9E - jmp Borderlands4.exe+F87530
Borderlands4.exe+F87592: 56 - push rsi
Borderlands4.exe+F87593: 57 - push rdi
Borderlands4.exe+F87594: 48 83 EC 38 - sub rsp,38
Borderlands4.exe+F87598: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Borderlands4.exe+F8759D: 48 89 CE - mov rsi,rcx
Borderlands4.exe+F875A0: 48 8B 89 F0 66 00 00 - mov rcx,[rcx+000066F0]
Borderlands4.exe+F875A7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+F875AA: 0F 84 C1 00 00 00 - je Borderlands4.exe+F87671
Borderlands4.exe+F875B0: 0F 28 F1 - movaps xmm6,xmm1
Borderlands4.exe+F875B3: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+F875B6: FF 90 00 0D 00 00 - call qword ptr [rax+00000D00]
stuff_AOB: E9 EF 90 07 FF - jmp Borderlands4.exe+6B0
Borderlands4.exe+F875C1: 66 90 - nop 2
Borderlands4.exe+F875C3: 8A 86 50 05 00 00 - mov al,[rsi+00000550]
Borderlands4.exe+F875C9: 89 C2 - mov edx,eax
Borderlands4.exe+F875CB: F6 D2 - not dl
Borderlands4.exe+F875CD: F6 C2 0A - test dl,0A
Borderlands4.exe+F875D0: 0F 84 B6 00 00 00 - je Borderlands4.exe+F8768C
// ---------- INJECTING HERE ----------
Borderlands4.exe+F875D6: 8B 86 68 05 00 00 - mov eax,[rsi+00000568]
// ---------- DONE INJECTING ----------
Borderlands4.exe+F875DC: 89 86 6C 05 00 00 - mov [rsi+0000056C],eax
Borderlands4.exe+F875E2: 48 85 C9 - test rcx,rcx
Borderlands4.exe+F875E5: 74 0A - je Borderlands4.exe+F875F1
Borderlands4.exe+F875E7: 8A 86 50 05 00 00 - mov al,[rsi+00000550]
Borderlands4.exe+F875ED: A8 08 - test al,08
Borderlands4.exe+F875EF: 75 0C - jne Borderlands4.exe+F875FD
Borderlands4.exe+F875F1: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+F875F6: 48 83 C4 38 - add rsp,38
Borderlands4.exe+F875FA: 5F - pop rdi
Borderlands4.exe+F875FB: 5E - pop rsi
Borderlands4.exe+F875FC: C3 - ret
Borderlands4.exe+F875FD: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+F87600: E8 31 C5 9D FF - call Borderlands4.exe+963B36
Borderlands4.exe+F87605: 84 C0 - test al,al
Borderlands4.exe+F87607: 74 23 - je Borderlands4.exe+F8762C
Borderlands4.exe+F87609: 48 8B 8E F0 66 00 00 - mov rcx,[rsi+000066F0]
Borderlands4.exe+F87610: 8A 96 50 05 00 00 - mov dl,[rsi+00000550]
Borderlands4.exe+F87616: 80 E2 10 - and dl,10
Borderlands4.exe+F87619: C0 EA 04 - shr dl,04
Borderlands4.exe+F8761C: 48 8B 01 - mov rax,[rcx]
}
Toggle Activation
17
101
0
1337317223
"Unlimited Glide Duration"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(glideDuration_AOB,$process,F3xxxxxxxxxxxxxxF3xxxxxxF3xxxxxx4889xxE8xxxxxxxx4889)
registersymbol(glideDuration_AOB)
alloc(glideDurationHook,0x1000)
registersymbol(glideDurationHook)
label(code_glideDuration)
label(return_glideDuration)
label(exit_glideDuration)
registersymbol(code_glideDuration)
glideDurationHook:
movss xmm7,[rax+30]
push (float)0.5
subss xmm7,[rsp]
movss [rax+C8],xmm7
add rsp,8
exit_glideDuration:
code_glideDuration:
readmem(glideDuration_AOB,8)
{
movss xmm7,[rax+000000C8]
}
jmp return_glideDuration
align 10 CC
glideDurationHook+200:
midjumpmem+110:
jmp glideDurationHook
glideDuration_AOB:
jmp midjumpmem+110
nop 3
return_glideDuration:
[DISABLE]
glideDuration_AOB:
readmem(code_glideDuration,8) // db F3 0F 10 B8 C8 00 00 00
unregistersymbol(glideDuration_AOB)
unregistersymbol(glideDurationHook)
unregistersymbol(code_glideDuration)
dealloc(glideDurationHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+88AEA0B
Borderlands4.exe+88AE9CF: 5B - pop rbx
Borderlands4.exe+88AE9D0: 5F - pop rdi
Borderlands4.exe+88AE9D1: 5E - pop rsi
Borderlands4.exe+88AE9D2: 41 5E - pop r14
Borderlands4.exe+88AE9D4: 41 5F - pop r15
Borderlands4.exe+88AE9D6: C3 - ret
Borderlands4.exe+88AE9D7: 48 8D 8F 88 42 00 00 - lea rcx,[rdi+00004288]
Borderlands4.exe+88AE9DE: E8 0F FE 9E F7 - call Borderlands4.exe+29E7F2
Borderlands4.exe+88AE9E3: 0F 57 FF - xorps xmm7,xmm7
Borderlands4.exe+88AE9E6: 48 85 C0 - test rax,rax
Borderlands4.exe+88AE9E9: 74 30 - je Borderlands4.exe+88AEA1B
Borderlands4.exe+88AE9EB: 48 89 C1 - mov rcx,rax
Borderlands4.exe+88AE9EE: E8 FB CC 7D F7 - call Borderlands4.exe+8B6EE
Borderlands4.exe+88AE9F3: F3 0F 10 48 24 - movss xmm1,[rax+24]
Borderlands4.exe+88AE9F8: F3 0F 10 40 30 - movss xmm0,[rax+30]
Borderlands4.exe+88AE9FD: F3 0F 5C C1 - subss xmm0,xmm1
Borderlands4.exe+88AEA01: 0F 57 FF - xorps xmm7,xmm7
Borderlands4.exe+88AEA04: 0F 2E C7 - ucomiss xmm0,xmm7
Borderlands4.exe+88AEA07: 75 02 - jne Borderlands4.exe+88AEA0B
Borderlands4.exe+88AEA09: 7B 10 - jnp Borderlands4.exe+88AEA1B
// ---------- INJECTING HERE ----------
Borderlands4.exe+88AEA0B: F3 0F 10 B8 C8 00 00 00 - movss xmm7,[rax+000000C8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+88AEA13: F3 0F 5C F9 - subss xmm7,xmm1
Borderlands4.exe+88AEA17: F3 0F 5E F8 - divss xmm7,xmm0
Borderlands4.exe+88AEA1B: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+88AEA1E: E8 55 02 00 00 - call Borderlands4.exe+88AEC78
Borderlands4.exe+88AEA23: 48 89 C3 - mov rbx,rax
Borderlands4.exe+88AEA26: 48 8B 80 90 00 00 00 - mov rax,[rax+00000090]
Borderlands4.exe+88AEA2D: 48 85 C0 - test rax,rax
Borderlands4.exe+88AEA30: 75 14 - jne Borderlands4.exe+88AEA46
Borderlands4.exe+88AEA32: E8 6F DF D5 F7 - call Borderlands4.exe+60C9A6
Borderlands4.exe+88AEA37: 48 89 C1 - mov rcx,rax
Borderlands4.exe+88AEA3A: E8 B1 A8 9C FB - call Borderlands4.exe+42792F0
Borderlands4.exe+88AEA3F: 48 89 83 90 00 00 00 - mov [rbx+00000090],rax
Borderlands4.exe+88AEA46: 48 8B 93 98 00 00 00 - mov rdx,[rbx+00000098]
Borderlands4.exe+88AEA4D: 48 85 D2 - test rdx,rdx
Borderlands4.exe+88AEA50: 75 5C - jne Borderlands4.exe+88AEAAE
Borderlands4.exe+88AEA52: 31 D2 - xor edx,edx
Borderlands4.exe+88AEA54: 48 85 C0 - test rax,rax
Borderlands4.exe+88AEA57: 74 55 - je Borderlands4.exe+88AEAAE
Borderlands4.exe+88AEA59: 49 89 DE - mov r14,rbx
Borderlands4.exe+88AEA5C: 49 81 C6 88 00 00 00 - add r14,00000088
}
Toggle Activation
17
102
0
1337317224
"getSkills"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(skillCD_AOB,$process,F3xxxxxxxx4CxxxxxxxxF3xxxxxxxxxx4889xx410F)
registersymbol(skillCD_AOB)
alloc(skillCDHook,0x1000)
registersymbol(skillCDHook)
label(code_skillCD)
label(return_skillCD)
label(exit_skillCD)
label(skilldurflag)
label(skillcdflag)
label(counter)
registersymbol(code_skillCD)
registersymbol(skilldurflag)
registersymbol(skillcdflag)
skillCDHook:
cmp [rax+60],(float)0.01
jg @@2
cmp [rax+54],(float)0.01
jle exit_skillCD
cmp [skilldurflag],1
jne exit_skillCD
movss xmm6,[rax+30]
movss [rax+C8],xmm6
@@2:
cmp [skillcdflag],1
jne @f
dec [counter]
jns @f
mov [counter],#20
mov [rax+C8],(float)9999
exit_skillCD:
code_skillCD:
readmem(skillCD_AOB,5)
{
movss xmm0,[rax+60]
}
jmp return_skillCD
align 10 CC
skillCDHook+200:
skilldurflag:
dd 0
skillcdflag:
dd 0
counter:
dd #20
midjumpmem+120:
jmp skillCDHook
skillCD_AOB:
jmp midjumpmem+120
return_skillCD:
[DISABLE]
skillCD_AOB:
readmem(code_skillCD,5) // db F3 0F 10 40 60
unregistersymbol(skillCD_AOB)
unregistersymbol(skillCDHook)
unregistersymbol(code_skillCD)
unregistersymbol(skilldurflag)
unregistersymbol(skillcdflag)
dealloc(skillCDHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+8B5E550
Borderlands4.exe+8B5E4FE: 0F 28 F0 - movaps xmm6,xmm0
Borderlands4.exe+8B5E501: 80 7B 20 00 - cmp byte ptr [rbx+20],00
Borderlands4.exe+8B5E505: 75 06 - jne Borderlands4.exe+8B5E50D
Borderlands4.exe+8B5E507: 41 0F 28 F8 - movaps xmm7,xmm8
Borderlands4.exe+8B5E50B: EB 08 - jmp Borderlands4.exe+8B5E515
Borderlands4.exe+8B5E50D: 0F 28 FE - movaps xmm7,xmm6
Borderlands4.exe+8B5E510: F3 41 0F 5C F8 - subss xmm7,xmm8
Borderlands4.exe+8B5E515: 4C 8B B4 24 B0 00 00 00 - mov r14,[rsp+000000B0]
Borderlands4.exe+8B5E51D: F3 44 0F 5E C6 - divss xmm8,xmm6
Borderlands4.exe+8B5E522: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+8B5E525: F3 0F C2 C6 00 - cmpeqss xmm0,xmm6
Borderlands4.exe+8B5E52A: 41 0F 55 C0 - andnps xmm0,xmm8
Borderlands4.exe+8B5E52E: 80 7B 21 00 - cmp byte ptr [rbx+21],00
Borderlands4.exe+8B5E532: 75 06 - jne Borderlands4.exe+8B5E53A
Borderlands4.exe+8B5E534: 44 0F 28 C0 - movaps xmm8,xmm0
Borderlands4.exe+8B5E538: EB 0E - jmp Borderlands4.exe+8B5E548
Borderlands4.exe+8B5E53A: F3 44 0F 10 05 DD 6C AD 00 - movss xmm8,[Borderlands4.exe+9635220]
Borderlands4.exe+8B5E543: F3 44 0F 5C C0 - subss xmm8,xmm0
Borderlands4.exe+8B5E548: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+8B5E54B: E8 9E D1 52 F7 - call Borderlands4.exe+8B6EE
// ---------- INJECTING HERE ----------
Borderlands4.exe+8B5E550: F3 0F 10 40 60 - movss xmm0,[rax+60]
// ---------- DONE INJECTING ----------
Borderlands4.exe+8B5E555: 4C 89 74 24 28 - mov [rsp+28],r14
Borderlands4.exe+8B5E55A: F3 0F 11 44 24 20 - movss [rsp+20],xmm0
Borderlands4.exe+8B5E560: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+8B5E563: 0F 28 CF - movaps xmm1,xmm7
Borderlands4.exe+8B5E566: 0F 28 D6 - movaps xmm2,xmm6
Borderlands4.exe+8B5E569: 41 0F 28 D8 - movaps xmm3,xmm8
Borderlands4.exe+8B5E56D: E8 F8 91 A4 FF - call Borderlands4.exe+85A776A
Borderlands4.exe+8B5E572: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
Borderlands4.exe+8B5E577: 0F 28 7C 24 40 - movaps xmm7,[rsp+40]
Borderlands4.exe+8B5E57C: 44 0F 28 44 24 50 - movaps xmm8,[rsp+50]
Borderlands4.exe+8B5E582: 48 83 C4 68 - add rsp,68
Borderlands4.exe+8B5E586: 5B - pop rbx
Borderlands4.exe+8B5E587: 5F - pop rdi
Borderlands4.exe+8B5E588: 5E - pop rsi
Borderlands4.exe+8B5E589: 41 5E - pop r14
Borderlands4.exe+8B5E58B: C3 - ret
Borderlands4.exe+8B5E58C: 48 83 EC 38 - sub rsp,38
Borderlands4.exe+8B5E590: 48 8B 02 - mov rax,[rdx]
Borderlands4.exe+8B5E593: F3 0F 2A 88 D4 00 00 00 - cvtsi2ss xmm1,[rax+000000D4]
Borderlands4.exe+8B5E59B: 8B 80 CC 00 00 00 - mov eax,[rax+000000CC]
}
1337317225
"Unlimited Skill Duration"
Auto Assembler Script
[ENABLE]
skilldurflag:
dd 1
[DISABLE]
skilldurflag:
dd 0
Toggle Activation
17
103
0
1337317226
"Fast Skill Cooldown"
Auto Assembler Script
[ENABLE]
skillcdflag:
dd 1
[DISABLE]
skillcdflag:
dd 0
Toggle Activation
17
104
0
1337317227
"Unlimited Grenades"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(ordenance_AOB,$process,83xxxxxxxxxxxx0F9Exx89)
registersymbol(ordenance_AOB)
alloc(ordenanceHook,0x1000)
registersymbol(ordenanceHook)
label(code_ordenance)
label(return_ordenance)
label(exit_ordenance)
registersymbol(code_ordenance)
ordenanceHook:
push rdx
mov edx, [rsi+254]
inc edx
mov dword ptr [rsi+25C], edx
pop rdx
exit_ordenance:
code_ordenance:
readmem(ordenance_AOB,7)
{
cmp dword ptr [rsi+0000025C],00
}
jmp return_ordenance
align 10 CC
ordenanceHook+200:
midjumpmem+130:
jmp ordenanceHook
ordenance_AOB:
jmp midjumpmem+130
nop 2
return_ordenance:
[DISABLE]
ordenance_AOB:
readmem(code_ordenance,7) // db 83 BE 5C 02 00 00 00
unregistersymbol(ordenance_AOB)
unregistersymbol(ordenanceHook)
unregistersymbol(code_ordenance)
dealloc(ordenanceHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+10BCB51
Borderlands4.exe+10BCAEC: 89 D3 - mov ebx,edx
Borderlands4.exe+10BCAEE: 48 89 CE - mov rsi,rcx
Borderlands4.exe+10BCAF1: 48 8B 05 48 5E 2B 0B - mov rax,[Borderlands4.exe+C372940]
Borderlands4.exe+10BCAF8: 48 31 E0 - xor rax,rsp
Borderlands4.exe+10BCAFB: 48 89 84 24 98 00 00 00 - mov [rsp+00000098],rax
Borderlands4.exe+10BCB03: 80 B9 C0 F8 FF FF 03 - cmp byte ptr [rcx-00000740],03
Borderlands4.exe+10BCB0A: 75 07 - jne Borderlands4.exe+10BCB13
Borderlands4.exe+10BCB0C: 80 8E 5C 01 00 00 01 - or byte ptr [rsi+0000015C],01
Borderlands4.exe+10BCB13: 48 8D 8E 98 02 00 00 - lea rcx,[rsi+00000298]
Borderlands4.exe+10BCB1A: E8 A1 A2 34 03 - call Borderlands4.exe+4406DC0
Borderlands4.exe+10BCB1F: 80 BE 78 03 00 00 00 - cmp byte ptr [rsi+00000378],00
Borderlands4.exe+10BCB26: 75 5C - jne Borderlands4.exe+10BCB84
Borderlands4.exe+10BCB28: 80 BE C0 F8 FF FF 03 - cmp byte ptr [rsi-00000740],03
Borderlands4.exe+10BCB2F: 75 53 - jne Borderlands4.exe+10BCB84
Borderlands4.exe+10BCB31: 48 8D BE 48 F7 FF FF - lea rdi,[rsi-000008B8]
Borderlands4.exe+10BCB38: F6 86 79 03 00 00 01 - test byte ptr [rsi+00000379],01
Borderlands4.exe+10BCB3F: 75 74 - jne Borderlands4.exe+10BCBB5
Borderlands4.exe+10BCB41: C6 86 A0 03 00 00 00 - mov byte ptr [rsi+000003A0],00
Borderlands4.exe+10BCB48: 83 BE 54 02 00 00 02 - cmp dword ptr [rsi+00000254],02
Borderlands4.exe+10BCB4F: 7C 13 - jl Borderlands4.exe+10BCB64
// ---------- INJECTING HERE ----------
Borderlands4.exe+10BCB51: 83 BE 5C 02 00 00 00 - cmp dword ptr [rsi+0000025C],00
// ---------- DONE INJECTING ----------
Borderlands4.exe+10BCB58: 0F 9E C0 - setle al
Borderlands4.exe+10BCB5B: 89 D9 - mov ecx,ebx
Borderlands4.exe+10BCB5D: 80 F1 01 - xor cl,01
Borderlands4.exe+10BCB60: 84 C8 - test al,cl
Borderlands4.exe+10BCB62: 75 20 - jne Borderlands4.exe+10BCB84
Borderlands4.exe+10BCB64: C6 86 5E 01 00 00 01 - mov byte ptr [rsi+0000015E],01
Borderlands4.exe+10BCB6B: 48 8B 15 E6 09 77 0B - mov rdx,[Borderlands4.exe+C82D558]
Borderlands4.exe+10BCB72: 88 5C 24 20 - mov [rsp+20],bl
Borderlands4.exe+10BCB76: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+10BCB79: E8 78 01 00 00 - call Borderlands4.exe+10BCCF6
Borderlands4.exe+10BCB7E: 88 86 78 03 00 00 - mov [rsi+00000378],al
Borderlands4.exe+10BCB84: 48 8B 8C 24 98 00 00 00 - mov rcx,[rsp+00000098]
Borderlands4.exe+10BCB8C: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+10BCB8F: 48 3B 0D AA 5D 2B 0B - cmp rcx,[Borderlands4.exe+C372940]
Borderlands4.exe+10BCB96: 75 17 - jne Borderlands4.exe+10BCBAF
Borderlands4.exe+10BCB98: 0F 28 B4 24 A0 00 00 00 - movaps xmm6,[rsp+000000A0]
Borderlands4.exe+10BCBA0: 48 81 C4 B0 00 00 00 - add rsp,000000B0
Borderlands4.exe+10BCBA7: 5B - pop rbx
Borderlands4.exe+10BCBA8: 5F - pop rdi
Borderlands4.exe+10BCBA9: 5E - pop rsi
}
Toggle Activation
17
105
0
1337317228
"Fast Grenade Cooldown"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(grenadeCD_AOB,$process,F3xxxxxxxxxxxxxx0F57xx0F2Exx76xx4881xxxxxxxxxx4889)
registersymbol(grenadeCD_AOB)
alloc(grenadeCDHook,0x1000)
registersymbol(grenadeCDHook)
label(code_grenadeCD)
label(return_grenadeCD)
label(exit_grenadeCD)
registersymbol(code_grenadeCD)
grenadeCDHook:
exit_grenadeCD:
code_grenadeCD:
readmem(grenadeCD_AOB,8)
{
movss xmm7,[rsi+00000154]
}
push (float)100
divss xmm7,[rsp]
add rsp,8
jmp return_grenadeCD
align 10 CC
grenadeCDHook+200:
midjumpmem+140:
jmp grenadeCDHook
grenadeCD_AOB:
jmp midjumpmem+140
nop 3
return_grenadeCD:
[DISABLE]
grenadeCD_AOB:
readmem(code_grenadeCD,8) // db F3 0F 10 BE 54 01 00 00
unregistersymbol(grenadeCD_AOB)
unregistersymbol(grenadeCDHook)
unregistersymbol(code_grenadeCD)
dealloc(grenadeCDHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+E9DCC7
Borderlands4.exe+E9DC80: 48 8B 86 B8 08 00 00 - mov rax,[rsi+000008B8]
Borderlands4.exe+E9DC87: 48 81 C6 B8 08 00 00 - add rsi,000008B8
Borderlands4.exe+E9DC8E: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+E9DC91: 48 83 C4 20 - add rsp,20
Borderlands4.exe+E9DC95: 5E - pop rsi
Borderlands4.exe+E9DC96: 48 FF 60 70 - jmp qword ptr [rax+70]
Borderlands4.exe+E9DC9A: 90 - nop
Borderlands4.exe+E9DC9B: 48 83 C4 20 - add rsp,20
Borderlands4.exe+E9DC9F: 5E - pop rsi
Borderlands4.exe+E9DCA0: C3 - ret
Borderlands4.exe+E9DCA1: CC - int 3
Borderlands4.exe+E9DCA2: 56 - push rsi
Borderlands4.exe+E9DCA3: 48 83 EC 40 - sub rsp,40
Borderlands4.exe+E9DCA7: 0F 29 7C 24 30 - movaps [rsp+30],xmm7
Borderlands4.exe+E9DCAC: 0F 29 74 24 20 - movaps [rsp+20],xmm6
Borderlands4.exe+E9DCB1: 48 83 B9 88 02 00 00 00 - cmp qword ptr [rcx+00000288],00
Borderlands4.exe+E9DCB9: 74 7B - je Borderlands4.exe+E9DD36
Borderlands4.exe+E9DCBB: 48 89 CE - mov rsi,rcx
Borderlands4.exe+E9DCBE: 80 B9 C0 F8 FF FF 03 - cmp byte ptr [rcx-00000740],03
Borderlands4.exe+E9DCC5: 75 6F - jne Borderlands4.exe+E9DD36
// ---------- INJECTING HERE ----------
Borderlands4.exe+E9DCC7: F3 0F 10 BE 54 01 00 00 - movss xmm7,[rsi+00000154]
// ---------- DONE INJECTING ----------
Borderlands4.exe+E9DCCF: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+E9DCD2: 0F 2E F8 - ucomiss xmm7,xmm0
Borderlands4.exe+E9DCD5: 76 5F - jna Borderlands4.exe+E9DD36
Borderlands4.exe+E9DCD7: 48 81 C6 68 02 00 00 - add rsi,00000268
Borderlands4.exe+E9DCDE: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+E9DCE1: E8 34 D7 32 FF - call Borderlands4.exe+1CB41A
Borderlands4.exe+E9DCE6: 84 C0 - test al,al
Borderlands4.exe+E9DCE8: 74 4C - je Borderlands4.exe+E9DD36
Borderlands4.exe+E9DCEA: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+E9DCED: E8 FC D9 1E FF - call Borderlands4.exe+8B6EE
Borderlands4.exe+E9DCF2: F3 0F 10 35 26 75 79 08 - movss xmm6,[Borderlands4.exe+9635220]
Borderlands4.exe+E9DCFA: 0F 28 C6 - movaps xmm0,xmm6
Borderlands4.exe+E9DCFD: F3 0F 5E C7 - divss xmm0,xmm7
Borderlands4.exe+E9DD01: F3 0F 11 40 58 - movss [rax+58],xmm0
Borderlands4.exe+E9DD06: 48 8D 48 50 - lea rcx,[rax+50]
Borderlands4.exe+E9DD0A: B2 01 - mov dl,01
Borderlands4.exe+E9DD0C: E8 49 30 70 FF - call Borderlands4.exe+5A0D5A
Borderlands4.exe+E9DD11: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+E9DD14: E8 D5 D9 1E FF - call Borderlands4.exe+8B6EE
Borderlands4.exe+E9DD19: 48 89 C1 - mov rcx,rax
}
Toggle Activation
17
96
0
1337317229
"Max Drop Rate"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(dropRate_AOB,$process,F3xxxxxxF3xxxxxx440Fxxxx76xx440Fxxxx73)
registersymbol(dropRate_AOB)
alloc(re_dropRate,4)
registersymbol(re_dropRate)
re_dropRate:
readmem(dropRate_AOB,4)
dropRate_AOB:
nop 4
[DISABLE]
dropRate_AOB:
readmem(re_dropRate,4) // db F3 0F 2A C5
unregistersymbol(dropRate_AOB)
unregistersymbol(re_dropRate)
dealloc(re_dropRate)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+45747E
Borderlands4.exe+457414: 80 BC 24 20 01 00 00 03 - cmp byte ptr [rsp+00000120],03
Borderlands4.exe+45741C: 0F 85 B4 00 00 00 - jne Borderlands4.exe+4574D6
Borderlands4.exe+457422: B8 03 00 00 00 - mov eax,00000003
Borderlands4.exe+457427: F3 44 0F 10 84 24 00 01 00 00 - movss xmm8,[rsp+00000100]
Borderlands4.exe+457431: 48 8D 04 C0 - lea rax,[rax+rax*8]
Borderlands4.exe+457435: C1 E0 05 - shl eax,05
Borderlands4.exe+457438: 48 8B 84 30 C8 00 00 00 - mov rax,[rax+rsi+000000C8]
Borderlands4.exe+457440: 48 85 C0 - test rax,rax
Borderlands4.exe+457443: 74 18 - je Borderlands4.exe+45745D
Borderlands4.exe+457445: 66 83 BC 24 18 01 00 00 19 - cmp word ptr [rsp+00000118],19
Borderlands4.exe+45744E: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+457451: 72 08 - jb Borderlands4.exe+45745B
Borderlands4.exe+457453: 48 8B 8C 24 00 01 00 00 - mov rcx,[rsp+00000100]
Borderlands4.exe+45745B: FF D0 - call rax
Borderlands4.exe+45745D: 66 83 BC 24 18 01 00 00 19 - cmp word ptr [rsp+00000118],19
Borderlands4.exe+457466: 72 0D - jb Borderlands4.exe+457475
Borderlands4.exe+457468: 48 8B 8C 24 00 01 00 00 - mov rcx,[rsp+00000100]
Borderlands4.exe+457470: E8 55 A0 BA FF - call Borderlands4.exe+14CA
Borderlands4.exe+457475: 81 E5 FF 7F 00 00 - and ebp,00007FFF
Borderlands4.exe+45747B: 0F 57 C0 - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
Borderlands4.exe+45747E: F3 0F 2A C5 - cvtsi2ss xmm0,ebp
// ---------- DONE INJECTING ----------
Borderlands4.exe+457482: F3 0F 5E C6 - divss xmm0,xmm6
Borderlands4.exe+457486: 44 0F 2E C7 - ucomiss xmm8,xmm7
Borderlands4.exe+45748A: 76 06 - jna Borderlands4.exe+457492
Borderlands4.exe+45748C: 44 0F 2E C0 - ucomiss xmm8,xmm0
Borderlands4.exe+457490: 73 19 - jae Borderlands4.exe+4574AB
Borderlands4.exe+457492: 49 81 C7 D0 00 00 00 - add r15,000000D0
Borderlands4.exe+457499: 49 81 C4 30 FF FF FF - add r12,FFFFFFFFFFFFFF30
Borderlands4.exe+4574A0: 0F 85 51 FF FF FF - jne Borderlands4.exe+4573F7
Borderlands4.exe+4574A6: E9 6C 01 00 00 - jmp Borderlands4.exe+457617
Borderlands4.exe+4574AB: 4C 63 6C 24 68 - movsxd r13,dword ptr [rsp+68]
Borderlands4.exe+4574B0: 41 8D 45 01 - lea eax,[r13+01]
Borderlands4.exe+4574B4: 89 44 24 68 - mov [rsp+68],eax
Borderlands4.exe+4574B8: 3B 44 24 6C - cmp eax,[rsp+6C]
Borderlands4.exe+4574BC: 76 0D - jna Borderlands4.exe+4574CB
Borderlands4.exe+4574BE: 48 8D 4C 24 60 - lea rcx,[rsp+60]
Borderlands4.exe+4574C3: 44 89 EA - mov edx,r13d
Borderlands4.exe+4574C6: E8 7B 0A 00 00 - call Borderlands4.exe+457F46
Borderlands4.exe+4574CB: 48 8B 44 24 60 - mov rax,[rsp+60]
Borderlands4.exe+4574D0: 4E 89 3C E8 - mov [rax+r13*8],r15
Borderlands4.exe+4574D4: EB BC - jmp Borderlands4.exe+457492
}
Toggle Activation
17
109
0
1337317230
"Max Legendary Items Drop Rate"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(dropRarity_AOB,$process,25xxxxxxxxF3xxxxxxF3xxxxxxxxxxxxxxF3xxxxxx488Dxxxxxxxxxx8Bxxxxxxxxxx85)
registersymbol(dropRarity_AOB)
alloc(dropRarityHook,0x1000)
registersymbol(dropRarityHook)
label(code_dropRarity)
label(return_dropRarity)
label(exit_dropRarity)
registersymbol(code_dropRarity)
dropRarityHook:
cmp [rdi],(float)90
jl @f
mov eax,00007FFE
exit_dropRarity:
code_dropRarity:
readmem(dropRarity_AOB,5)
{
and eax,00007FFF
}
jmp return_dropRarity
align 10 CC
dropRarityHook+200:
midjumpmem+150:
jmp dropRarityHook
dropRarity_AOB:
jmp midjumpmem+150
return_dropRarity:
[DISABLE]
dropRarity_AOB:
readmem(code_dropRarity,5) // db 25 FF 7F 00 00
unregistersymbol(dropRarity_AOB)
unregistersymbol(dropRarityHook)
unregistersymbol(code_dropRarity)
dealloc(dropRarityHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+3A6A5E2
Borderlands4.exe+3A6A5B3: 41 5F - pop r15
Borderlands4.exe+3A6A5B5: C3 - ret
Borderlands4.exe+3A6A5B6: E8 05 3F DF 00 - call Borderlands4.exe+485E4C0
Borderlands4.exe+3A6A5BB: CC - int 3
Borderlands4.exe+3A6A5BC: 48 89 D1 - mov rcx,rdx
Borderlands4.exe+3A6A5BF: E8 FD 26 71 01 - call Borderlands4.exe+517CCC1
Borderlands4.exe+3A6A5C4: CC - int 3
Borderlands4.exe+3A6A5C5: CC - int 3
Borderlands4.exe+3A6A5C6: 41 57 - push r15
Borderlands4.exe+3A6A5C8: 41 56 - push r14
Borderlands4.exe+3A6A5CA: 41 55 - push r13
Borderlands4.exe+3A6A5CC: 41 54 - push r12
Borderlands4.exe+3A6A5CE: 56 - push rsi
Borderlands4.exe+3A6A5CF: 57 - push rdi
Borderlands4.exe+3A6A5D0: 55 - push rbp
Borderlands4.exe+3A6A5D1: 53 - push rbx
Borderlands4.exe+3A6A5D2: 48 83 EC 28 - sub rsp,28
Borderlands4.exe+3A6A5D6: 48 89 D6 - mov rsi,rdx
Borderlands4.exe+3A6A5D9: 48 89 CF - mov rdi,rcx
Borderlands4.exe+3A6A5DC: FF 15 9E F4 15 08 - call qword ptr [Borderlands4.exe+BBC9A80]
// ---------- INJECTING HERE ----------
Borderlands4.exe+3A6A5E2: 25 FF 7F 00 00 - and eax,00007FFF
// ---------- DONE INJECTING ----------
Borderlands4.exe+3A6A5E7: F3 0F 2A C0 - cvtsi2ss xmm0,eax
Borderlands4.exe+3A6A5EB: F3 0F 5E 05 19 EE BC 05 - divss xmm0,[Borderlands4.exe+963940C]
Borderlands4.exe+3A6A5F3: F3 0F 59 07 - mulss xmm0,[rdi]
Borderlands4.exe+3A6A5F7: 48 8D 8F 18 01 00 00 - lea rcx,[rdi+00000118]
Borderlands4.exe+3A6A5FE: 8B 97 28 01 00 00 - mov edx,[rdi+00000128]
Borderlands4.exe+3A6A604: 85 D2 - test edx,edx
Borderlands4.exe+3A6A606: 74 57 - je Borderlands4.exe+3A6A65F
Borderlands4.exe+3A6A608: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
Borderlands4.exe+3A6A60F: 48 85 C0 - test rax,rax
Borderlands4.exe+3A6A612: 48 0F 44 C1 - cmove rax,rcx
Borderlands4.exe+3A6A616: 44 8B 18 - mov r11d,[rax]
Borderlands4.exe+3A6A619: 45 31 C0 - xor r8d,r8d
Borderlands4.exe+3A6A61C: 41 B9 00 00 00 00 - mov r9d,00000000
Borderlands4.exe+3A6A622: 45 85 DB - test r11d,r11d
Borderlands4.exe+3A6A625: 75 5A - jne Borderlands4.exe+3A6A681
Borderlands4.exe+3A6A627: 44 8D 42 FF - lea r8d,[rdx-01]
Borderlands4.exe+3A6A62B: 44 8D 52 1E - lea r10d,[rdx+1E]
Borderlands4.exe+3A6A62F: 45 85 C0 - test r8d,r8d
Borderlands4.exe+3A6A632: 45 0F 49 D0 - cmovns r10d,r8d
Borderlands4.exe+3A6A636: 41 C1 FA 05 - sar r10d,05
}
Toggle Activation
17
107
0
1337317231
"No Vending Machine Cooldown"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(vendorTimer_AOB,$process,80xxxxxxxxxxxx75xx80xxxxxxxxxxxx74xx488Dxxxxxxxxxx83xxxxxxxxxxxx0F9F)
registersymbol(vendorTimer_AOB)
alloc(vendorTimerHook,0x1000)
registersymbol(vendorTimerHook)
alloc(vend,4)
registersymbol(vend)
vend:
readmem(vendorTimer_AOB+2,4)
label(code_vendorTimer)
label(return_vendorTimer)
label(exit_vendorTimer)
registersymbol(code_vendorTimer)
vendorTimerHook:
push rcx
movzx ecx,word ptr [vend]
mov byte ptr [rsi+rcx],01
pop rcx
exit_vendorTimer:
code_vendorTimer:
readmem(vendorTimer_AOB,7)
{
cmp byte ptr [rsi+00001040],01
}
jmp return_vendorTimer
align 10 CC
vendorTimerHook+200:
midjumpmem+160:
jmp vendorTimerHook
vendorTimer_AOB:
jmp midjumpmem+160
nop 2
return_vendorTimer:
[DISABLE]
vendorTimer_AOB:
readmem(code_vendorTimer,7) // db 80 BE 40 10 00 00 01
unregistersymbol(vendorTimer_AOB)
unregistersymbol(vendorTimerHook)
unregistersymbol(code_vendorTimer)
dealloc(vendorTimerHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+8B95118
Borderlands4.exe+8B950CB: 48 85 C9 - test rcx,rcx
Borderlands4.exe+8B950CE: 0F 84 80 00 00 00 - je Borderlands4.exe+8B95154
Borderlands4.exe+8B950D4: E8 ED 56 35 F8 - call Borderlands4.exe+EEA7C6
Borderlands4.exe+8B950D9: 48 85 C0 - test rax,rax
Borderlands4.exe+8B950DC: 74 76 - je Borderlands4.exe+8B95154
Borderlands4.exe+8B950DE: 49 89 C6 - mov r14,rax
Borderlands4.exe+8B950E1: 48 8D 54 24 28 - lea rdx,[rsp+28]
Borderlands4.exe+8B950E6: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+8B950E9: E8 3C 06 4D F8 - call Borderlands4.exe+106572A
Borderlands4.exe+8B950EE: 80 BE E8 E6 FF FF 03 - cmp byte ptr [rsi-00001918],03
Borderlands4.exe+8B950F5: 75 53 - jne Borderlands4.exe+8B9514A
Borderlands4.exe+8B950F7: 48 8D 54 24 28 - lea rdx,[rsp+28]
Borderlands4.exe+8B950FC: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+8B950FF: 84 DB - test bl,bl
Borderlands4.exe+8B95101: 74 0D - je Borderlands4.exe+8B95110
Borderlands4.exe+8B95103: 41 B8 01 00 00 00 - mov r8d,00000001
Borderlands4.exe+8B95109: E8 F8 98 32 FB - call Borderlands4.exe+3EBEA06
Borderlands4.exe+8B9510E: EB 3A - jmp Borderlands4.exe+8B9514A
Borderlands4.exe+8B95110: 45 31 C0 - xor r8d,r8d
Borderlands4.exe+8B95113: E8 EE 98 32 FB - call Borderlands4.exe+3EBEA06
// ---------- INJECTING HERE ----------
Borderlands4.exe+8B95118: 80 BE 40 10 00 00 01 - cmp byte ptr [rsi+00001040],01
// ---------- DONE INJECTING ----------
Borderlands4.exe+8B9511F: 75 09 - jne Borderlands4.exe+8B9512A
Borderlands4.exe+8B95121: 80 BE E8 E6 FF FF 03 - cmp byte ptr [rsi-00001918],03
Borderlands4.exe+8B95128: 74 52 - je Borderlands4.exe+8B9517C
Borderlands4.exe+8B9512A: 48 8D 8E 48 0D 00 00 - lea rcx,[rsi+00000D48]
Borderlands4.exe+8B95131: 83 BE 20 10 00 00 00 - cmp dword ptr [rsi+00001020],00
Borderlands4.exe+8B95138: 0F 9F C2 - setg dl
Borderlands4.exe+8B9513B: E8 D2 47 C9 FF - call Borderlands4.exe+8829912
Borderlands4.exe+8B95140: C7 86 20 10 00 00 00 00 00 00 - mov [rsi+00001020],00000000
Borderlands4.exe+8B9514A: 48 8B 4C 24 50 - mov rcx,[rsp+50]
Borderlands4.exe+8B9514F: 48 85 C9 - test rcx,rcx
Borderlands4.exe+8B95152: 75 21 - jne Borderlands4.exe+8B95175
Borderlands4.exe+8B95154: 48 8B 4C 24 60 - mov rcx,[rsp+60]
Borderlands4.exe+8B95159: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+8B9515C: 48 3B 0D DD D7 7D 03 - cmp rcx,[Borderlands4.exe+C372940]
Borderlands4.exe+8B95163: 75 0A - jne Borderlands4.exe+8B9516F
Borderlands4.exe+8B95165: 48 83 C4 68 - add rsp,68
Borderlands4.exe+8B95169: 5B - pop rbx
Borderlands4.exe+8B9516A: 5F - pop rdi
Borderlands4.exe+8B9516B: 5E - pop rsi
Borderlands4.exe+8B9516C: 41 5E - pop r14
}
Toggle Activation
18
97
0
1337317232
"Freeze Daytime"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(daytime_AOB,$process,F3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxx4889xx41B0xxE8xxxxxxxxF3xxxxxxxxxxxxxx0F2Exxxxxxxxxx73)
registersymbol(daytime_AOB)
alloc(daytimeHook,0x1000)
registersymbol(daytimeHook)
label(code_daytime)
label(return_daytime)
label(exit_daytime)
registersymbol(code_daytime)
daytimeHook:
push (float)0.01
comiss xmm1,[rsp]
ja @f
xorps xmm1,xmm1
exit_daytime:
add rsp,8
code_daytime:
readmem(daytime_AOB,8)
{
addss xmm1,[rbx+000001F4]
}
jmp return_daytime
align 10 CC
daytimeHook+200:
midjumpmem+170:
jmp daytimeHook
daytime_AOB:
jmp midjumpmem+170
nop 3
return_daytime:
[DISABLE]
daytime_AOB:
readmem(code_daytime,8) // db F3 0F 58 8B F4 01 00 00
unregistersymbol(daytime_AOB)
unregistersymbol(daytimeHook)
unregistersymbol(code_daytime)
dealloc(daytimeHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+3E2F3B
Borderlands4.exe+3E2EE5: 0F 84 8B 00 00 00 - je Borderlands4.exe+3E2F76
Borderlands4.exe+3E2EEB: 83 7F 08 00 - cmp dword ptr [rdi+08],00
Borderlands4.exe+3E2EEF: 0F 8E 81 00 00 00 - jng Borderlands4.exe+3E2F76
Borderlands4.exe+3E2EF5: 8B 47 08 - mov eax,[rdi+08]
Borderlands4.exe+3E2EF8: 85 C0 - test eax,eax
Borderlands4.exe+3E2EFA: 0F 84 20 01 00 00 - je Borderlands4.exe+3E3020
Borderlands4.exe+3E2F00: 8D 48 01 - lea ecx,[rax+01]
Borderlands4.exe+3E2F03: F0 0F B1 4F 08 - lock cmpxchg [rdi+08],ecx
Borderlands4.exe+3E2F08: 75 EE - jne Borderlands4.exe+3E2EF8
Borderlands4.exe+3E2F0A: 48 89 FB - mov rbx,rdi
Borderlands4.exe+3E2F0D: 48 85 FF - test rdi,rdi
Borderlands4.exe+3E2F10: 74 05 - je Borderlands4.exe+3E2F17
Borderlands4.exe+3E2F12: 48 8B 5C 24 28 - mov rbx,[rsp+28]
Borderlands4.exe+3E2F17: 80 BE F4 04 00 00 01 - cmp byte ptr [rsi+000004F4],01
Borderlands4.exe+3E2F1E: 0F 84 03 01 00 00 - je Borderlands4.exe+3E3027
Borderlands4.exe+3E2F24: F3 0F 10 83 F8 01 00 00 - movss xmm0,[rbx+000001F8]
Borderlands4.exe+3E2F2C: F3 0F 5E F0 - divss xmm6,xmm0
Borderlands4.exe+3E2F30: 0F 57 C9 - xorps xmm1,xmm1
Borderlands4.exe+3E2F33: F3 0F C2 C8 04 - cmpneqss xmm1,xmm0
Borderlands4.exe+3E2F38: 0F 54 CE - andps xmm1,xmm6
// ---------- INJECTING HERE ----------
Borderlands4.exe+3E2F3B: F3 0F 58 8B F4 01 00 00 - addss xmm1,[rbx+000001F4]
// ---------- DONE INJECTING ----------
Borderlands4.exe+3E2F43: F3 0F 11 8E 28 04 00 00 - movss [rsi+00000428],xmm1
Borderlands4.exe+3E2F4B: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+3E2F4E: 41 B0 01 - mov r8b,01
Borderlands4.exe+3E2F51: E8 C4 04 00 00 - call Borderlands4.exe+3E341A
Borderlands4.exe+3E2F56: F3 0F 10 86 28 04 00 00 - movss xmm0,[rsi+00000428]
Borderlands4.exe+3E2F5E: 0F 2E 05 BB 22 25 09 - ucomiss xmm0,[Borderlands4.exe+9635220]
Borderlands4.exe+3E2F65: 73 47 - jae Borderlands4.exe+3E2FAE
Borderlands4.exe+3E2F67: 48 85 FF - test rdi,rdi
Borderlands4.exe+3E2F6A: 74 0A - je Borderlands4.exe+3E2F76
Borderlands4.exe+3E2F6C: F0 FF 4F 08 - lock dec [rdi+08]
Borderlands4.exe+3E2F70: 0F 84 C6 00 00 00 - je Borderlands4.exe+3E303C
Borderlands4.exe+3E2F76: 48 8B 4C 24 30 - mov rcx,[rsp+30]
Borderlands4.exe+3E2F7B: 48 85 C9 - test rcx,rcx
Borderlands4.exe+3E2F7E: 74 0A - je Borderlands4.exe+3E2F8A
Borderlands4.exe+3E2F80: F0 FF 49 0C - lock dec [rcx+0C]
Borderlands4.exe+3E2F84: 0F 84 D2 00 00 00 - je Borderlands4.exe+3E305C
Borderlands4.exe+3E2F8A: 48 8B 4C 24 38 - mov rcx,[rsp+38]
Borderlands4.exe+3E2F8F: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+3E2F92: 48 3B 0D A7 F9 F8 0B - cmp rcx,[Borderlands4.exe+C372940]
Borderlands4.exe+3E2F99: 75 0D - jne Borderlands4.exe+3E2FA8
}
Toggle Activation
18
98
0
315860
"getTimescale"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(timescale_AOB,$process,F3xxxxxxxxEBxxF3xxxxxxxxxxxxxxF3xxxxxx488Bxxxx488Bxx488Bxxxxxxxxxx4189)
alloc(tScaleHook,0x1000)
registersymbol(tScaleHook)
define(midjumpmem, $process+530)
fullaccess(midjumpmem, $1000)
label(code_timescale)
label(playerspeed)
label(enemyspeed)
label(pSpeed)
label(eSpeed)
label(return)
label(exit)
label(tMul)
registersymbol(playerspeed)
registersymbol(enemyspeed)
registersymbol(pSpeed)
registersymbol(eSpeed)
registersymbol(code_timescale)
registersymbol(tMul)
tScaleHook:
readmem(timescale_AOB,5)
push rax
{$try}
mov rax,playerPtr
mov rax,[rax]
test rax,rax
je exit
cmp rbx,rax
jne @@2
cmp [playerspeed],1
jne @f
mulss xmm1,[pSpeed]
jmp exit
@@:
mulss xmm1,[tMul]
jmp exit
@@2:
mov rax,[rbx+328] // CharacterMovement
cmp rax,10000
jle exit
cmp [enemyspeed],1
jne exit
mulss xmm1,[eSpeed]
{$except}
exit:
pop rax
jmp return
tScaleHook+200:
code_timescale:
readmem(timescale_AOB,5)
align 10 CC
playerspeed:
dd 0
enemyspeed:
dd 0
pSpeed:
dd (float)3
eSpeed:
dd (float)0.5
tMul:
dd (float)1
midjumpmem:
jmp tScaleHook
timescale_AOB:
jmp midjumpmem
return:
registersymbol(timescale_AOB)
[DISABLE]
timescale_AOB:
readmem(code_timescale,5)
unregistersymbol(timescale_AOB)
unregistersymbol(playerspeed)
unregistersymbol(enemyspeed)
unregistersymbol(pSpeed)
unregistersymbol(eSpeed)
unregistersymbol(tScaleHook)
unregistersymbol(code_timescale)
unregistersymbol(tMul)
dealloc(tScaleHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+3132541
Borderlands4.exe+313250F: 5B - pop rbx
Borderlands4.exe+3132510: 5D - pop rbp
Borderlands4.exe+3132511: 5F - pop rdi
Borderlands4.exe+3132512: 5E - pop rsi
Borderlands4.exe+3132513: C3 - ret
Borderlands4.exe+3132514: 48 8B 9B A8 00 00 00 - mov rbx,[rbx+000000A8]
Borderlands4.exe+313251B: 83 FE 01 - cmp esi,01
Borderlands4.exe+313251E: 75 1C - jne Borderlands4.exe+313253C
Borderlands4.exe+3132520: 40 84 ED - test bpl,bpl
Borderlands4.exe+3132523: 78 17 - js Borderlands4.exe+313253C
Borderlands4.exe+3132525: 48 85 DB - test rbx,rbx
Borderlands4.exe+3132528: 74 DC - je Borderlands4.exe+3132506
Borderlands4.exe+313252A: 48 8B 03 - mov rax,[rbx]
Borderlands4.exe+313252D: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+3132530: FF 90 60 04 00 00 - call qword ptr [rax+00000460]
Borderlands4.exe+3132536: 84 C0 - test al,al
Borderlands4.exe+3132538: 74 CC - je Borderlands4.exe+3132506
Borderlands4.exe+313253A: EB 05 - jmp Borderlands4.exe+3132541
Borderlands4.exe+313253C: 48 85 DB - test rbx,rbx
Borderlands4.exe+313253F: 74 07 - je Borderlands4.exe+3132548
// ---------- INJECTING HERE ----------
Borderlands4.exe+3132541: F3 0F 10 4B 74 - movss xmm1,[rbx+74]
// ---------- DONE INJECTING ----------
Borderlands4.exe+3132546: EB 08 - jmp Borderlands4.exe+3132550
Borderlands4.exe+3132548: F3 0F 10 0D D0 2C 50 06 - movss xmm1,[Borderlands4.exe+9635220]
Borderlands4.exe+3132550: F3 0F 59 CE - mulss xmm1,xmm6
Borderlands4.exe+3132554: 48 8B 4F 28 - mov rcx,[rdi+28]
Borderlands4.exe+3132558: 48 8B 01 - mov rax,[rcx]
Borderlands4.exe+313255B: 48 8B 80 A0 03 00 00 - mov rax,[rax+000003A0]
Borderlands4.exe+3132562: 41 89 F0 - mov r8d,esi
Borderlands4.exe+3132565: 49 89 F9 - mov r9,rdi
Borderlands4.exe+3132568: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+313256D: 48 83 C4 38 - add rsp,38
Borderlands4.exe+3132571: 5B - pop rbx
Borderlands4.exe+3132572: 5D - pop rbp
Borderlands4.exe+3132573: 5F - pop rdi
Borderlands4.exe+3132574: 5E - pop rsi
Borderlands4.exe+3132575: 48 FF E0 - jmp rax
Borderlands4.exe+3132578: 41 56 - push r14
Borderlands4.exe+313257A: 56 - push rsi
Borderlands4.exe+313257B: 57 - push rdi
Borderlands4.exe+313257C: 53 - push rbx
Borderlands4.exe+313257D: 48 83 EC 48 - sub rsp,48
}
315861
"Super Player Speed"
Auto Assembler Script
[ENABLE]
playerspeed:
dd 1
[DISABLE]
playerspeed:
dd 0
Toggle Activation
18
99
0
315862
"Slow AI"
Auto Assembler Script
[ENABLE]
enemyspeed:
dd 1
[DISABLE]
enemyspeed:
dd 0
Toggle Activation
18
100
0
315863
"Player Speed Multiplier"
Float
tMul
1337317170
"AI Speed Multiplier"
Float
eSpeed
26170
"getSpeed"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(speed_AOB,$process,F3xxxxxxxxxxxxxxEBxx4889xxFF)
registersymbol(speed_AOB)
alloc(speedHook,0x1000)
registersymbol(speedHook)
label(code_speed)
label(return_speed)
label(exit_speed)
label(speedflag)
label(spdMul)
registersymbol(code_speed)
registersymbol(speedflag)
registersymbol(spdMul)
speedHook:
push rbx
mov rbx,playerPtr
mov rbx,[rbx]
test rbx,rbx
je exit_speed
cmp qword ptr [rbx+430],rsi
jne exit_speed
cmp [speedflag],1
jne @f
push (float)4
mulss xmm7,[rsp]
add rsp,8
jmp exit_speed
@@:
mulss xmm7,[spdMul]
exit_speed:
pop rbx
code_speed:
readmem(speed_AOB,8)
{
mulss xmm7,[rsi+00001CB0]
}
jmp return_speed
align 10 CC
speedHook+200:
speedflag:
dd 0
spdMul:
dd (float)1
midjumpmem+10:
jmp speedHook
speed_AOB:
jmp midjumpmem+10
nop 3
return_speed:
[DISABLE]
speed_AOB:
readmem(code_speed,8) // db F3 0F 59 BE B0 1C 00 00
unregistersymbol(speed_AOB)
unregistersymbol(speedHook)
unregistersymbol(code_speed)
unregistersymbol(speedflag)
unregistersymbol(spdMul)
dealloc(speedHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+3CF32AC
Borderlands4.exe+3CF3252: 48 8B 06 - mov rax,[rsi]
Borderlands4.exe+3CF3255: 48 8B 80 E8 0B 00 00 - mov rax,[rax+00000BE8]
Borderlands4.exe+3CF325C: 48 8D 0D C1 8D 39 FC - lea rcx,[Borderlands4.exe+8C024]
Borderlands4.exe+3CF3263: 48 39 C8 - cmp rax,rcx
Borderlands4.exe+3CF3266: 75 4E - jne Borderlands4.exe+3CF32B6
Borderlands4.exe+3CF3268: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+3CF326B: E8 B4 8D 39 FC - call Borderlands4.exe+8C024
Borderlands4.exe+3CF3270: 0F 28 F8 - movaps xmm7,xmm0
Borderlands4.exe+3CF3273: 48 8D BE 78 01 00 00 - lea rdi,[rsi+00000178]
Borderlands4.exe+3CF327A: 48 8B 86 78 01 00 00 - mov rax,[rsi+00000178]
Borderlands4.exe+3CF3281: 48 8B 90 E0 00 00 00 - mov rdx,[rax+000000E0]
Borderlands4.exe+3CF3288: 48 8D 0D 7B A9 7E 00 - lea rcx,[Borderlands4.exe+44DDC0A]
Borderlands4.exe+3CF328F: 48 39 CA - cmp rdx,rcx
Borderlands4.exe+3CF3292: 75 29 - jne Borderlands4.exe+3CF32BD
Borderlands4.exe+3CF3294: 0F B6 8E 91 02 00 00 - movzx ecx,byte ptr [rsi+00000291]
Borderlands4.exe+3CF329B: FF C9 - dec ecx
Borderlands4.exe+3CF329D: 83 F9 02 - cmp ecx,02
Borderlands4.exe+3CF32A0: 73 27 - jae Borderlands4.exe+3CF32C9
Borderlands4.exe+3CF32A2: 48 83 BE 10 01 00 00 00 - cmp qword ptr [rsi+00000110],00
Borderlands4.exe+3CF32AA: 74 1D - je Borderlands4.exe+3CF32C9
// ---------- INJECTING HERE ----------
Borderlands4.exe+3CF32AC: F3 0F 59 BE B0 1C 00 00 - mulss xmm7,[rsi+00001CB0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+3CF32B4: EB 20 - jmp Borderlands4.exe+3CF32D6
Borderlands4.exe+3CF32B6: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+3CF32B9: FF D0 - call rax
Borderlands4.exe+3CF32BB: EB B3 - jmp Borderlands4.exe+3CF3270
Borderlands4.exe+3CF32BD: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+3CF32C0: FF D2 - call rdx
Borderlands4.exe+3CF32C2: 84 C0 - test al,al
Borderlands4.exe+3CF32C4: 75 E6 - jne Borderlands4.exe+3CF32AC
Borderlands4.exe+3CF32C6: 48 8B 07 - mov rax,[rdi]
Borderlands4.exe+3CF32C9: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+3CF32CC: FF 90 D8 00 00 00 - call qword ptr [rax+000000D8]
Borderlands4.exe+3CF32D2: 84 C0 - test al,al
Borderlands4.exe+3CF32D4: 75 D6 - jne Borderlands4.exe+3CF32AC
Borderlands4.exe+3CF32D6: 80 BE 00 11 00 00 05 - cmp byte ptr [rsi+00001100],05
Borderlands4.exe+3CF32DD: 0F 84 01 01 00 00 - je Borderlands4.exe+3CF33E4
Borderlands4.exe+3CF32E3: F3 0F 59 F7 - mulss xmm6,xmm7
Borderlands4.exe+3CF32E7: 48 8B 8E D8 41 00 00 - mov rcx,[rsi+000041D8]
Borderlands4.exe+3CF32EE: 48 85 C9 - test rcx,rcx
Borderlands4.exe+3CF32F1: 0F 84 77 01 00 00 - je Borderlands4.exe+3CF346E
Borderlands4.exe+3CF32F7: 48 8B 01 - mov rax,[rcx]
}
26171
"Super Movement Speed"
Auto Assembler Script
[ENABLE]
speedflag:
dd 1
[DISABLE]
speedflag:
dd 0
Toggle Activation
18
101
0
26172
"Movement Speed Multiplier"
Float
spdMul
26137
"getJumpHeight"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(superJump_AOB,$process,F3xxxxxxF2xxxxxxxxxxxxxx4889xxE8xxxxxxxxEBxx4885)
registersymbol(superJump_AOB)
alloc(superJumpHook,0x1000)
registersymbol(superJumpHook)
label(code_superJump)
label(return_superJump)
label(exit_superJump)
label(jumpflag)
label(jMul)
registersymbol(code_superJump)
registersymbol(jumpflag)
registersymbol(jMul)
superJumpHook:
readmem(superJump_AOB,4)
cvtsd2ss xmm0,xmm0
push rcx
mov rcx,playerPtr
mov rcx,[rcx]
test rcx,rcx
je exit_superJump
cmp qword ptr [rcx+430],rsi
jne exit_superJump
@@:
cmp [jumpflag],1
jne @f
push (float)3
mulss xmm0,[rsp]
add rsp,8
jmp exit_superJump
@@:
mulss xmm0,[jMul]
exit_superJump:
cvtss2sd xmm0,xmm0
pop rcx
readmem(superJump_AOB+4,8)
jmp return_superJump
superJumpHook+200:
code_superJump:
readmem(superJump_AOB,12)
{
cvtss2sd xmm0,[rdi]
movsd [rsi+00000138],xmm0
}
align 10 CC
jumpflag:
dd 0
jMul:
dd (float)1
midjumpmem+20:
jmp superJumpHook
superJump_AOB:
jmp midjumpmem+20
nop 7
return_superJump:
[DISABLE]
superJump_AOB:
readmem(code_superJump,12) // db F3 0F 5A 07 F2 0F 11 86 38 01 00 00
unregistersymbol(superJump_AOB)
unregistersymbol(superJumpHook)
unregistersymbol(code_superJump)
unregistersymbol(jumpflag)
unregistersymbol(jMul)
dealloc(superJumpHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+F46413
Borderlands4.exe+F463C0: 48 85 DB - test rbx,rbx
Borderlands4.exe+F463C3: 0F 84 CD 03 00 00 - je Borderlands4.exe+F46796
Borderlands4.exe+F463C9: 48 8B 03 - mov rax,[rbx]
Borderlands4.exe+F463CC: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+F463CF: FF 90 08 01 00 00 - call qword ptr [rax+00000108]
Borderlands4.exe+F463D5: 84 C0 - test al,al
Borderlands4.exe+F463D7: 0F 84 B9 03 00 00 - je Borderlands4.exe+F46796
Borderlands4.exe+F463DD: 48 8B 03 - mov rax,[rbx]
Borderlands4.exe+F463E0: 48 89 D9 - mov rcx,rbx
Borderlands4.exe+F463E3: FF 90 10 01 00 00 - call qword ptr [rax+00000110]
Borderlands4.exe+F463E9: 48 89 C1 - mov rcx,rax
Borderlands4.exe+F463EC: 48 89 FA - mov rdx,rdi
Borderlands4.exe+F463EF: E8 F2 41 57 01 - call Borderlands4.exe+24BA5E6
Borderlands4.exe+F463F4: 48 89 C1 - mov rcx,rax
Borderlands4.exe+F463F7: 48 89 8E C8 2B 00 00 - mov [rsi+00002BC8],rcx
Borderlands4.exe+F463FE: 4C 8D 44 24 24 - lea r8,[rsp+24]
Borderlands4.exe+F46403: 48 8D 7C 24 20 - lea rdi,[rsp+20]
Borderlands4.exe+F46408: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+F4640B: 49 89 F9 - mov r9,rdi
Borderlands4.exe+F4640E: E8 47 C1 E6 FF - call Borderlands4.exe+DB255A
// ---------- INJECTING HERE ----------
Borderlands4.exe+F46413: F3 0F 5A 07 - cvtss2sd xmm0,[rdi]
// ---------- DONE INJECTING ----------
Borderlands4.exe+F46417: F2 0F 11 86 38 01 00 00 - movsd [rsi+00000138],xmm0
Borderlands4.exe+F4641F: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+F46422: E8 1B 10 EF FF - call Borderlands4.exe+E37442
Borderlands4.exe+F46427: EB 79 - jmp Borderlands4.exe+F464A2
Borderlands4.exe+F46429: 48 85 C0 - test rax,rax
Borderlands4.exe+F4642C: 74 5F - je Borderlands4.exe+F4648D
Borderlands4.exe+F4642E: 48 83 3F 00 - cmp qword ptr [rdi],00
Borderlands4.exe+F46432: 74 59 - je Borderlands4.exe+F4648D
Borderlands4.exe+F46434: 4C 8B B0 B8 00 00 00 - mov r14,[rax+000000B8]
Borderlands4.exe+F4643B: 4D 85 F6 - test r14,r14
Borderlands4.exe+F4643E: 74 42 - je Borderlands4.exe+F46482
Borderlands4.exe+F46440: 49 8B 06 - mov rax,[r14]
Borderlands4.exe+F46443: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+F46446: FF 90 08 01 00 00 - call qword ptr [rax+00000108]
Borderlands4.exe+F4644C: 84 C0 - test al,al
Borderlands4.exe+F4644E: 74 32 - je Borderlands4.exe+F46482
Borderlands4.exe+F46450: 49 8B 06 - mov rax,[r14]
Borderlands4.exe+F46453: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+F46456: FF 90 10 01 00 00 - call qword ptr [rax+00000110]
Borderlands4.exe+F4645C: 48 89 C1 - mov rcx,rax
}
26138
"Super Jump"
Auto Assembler Script
[ENABLE]
jumpflag:
dd 1
[DISABLE]
jumpflag:
dd 0
Toggle Activation
18
102
0
26139
"Jump Height Multiplier"
Float
jval
314871
"Teleport"
Auto Assembler Script
[ENABLE]
alloc(SaveLocation_X,8)
alloc(SaveLocation_Y,8)
alloc(SaveLocation_Z,8)
alloc(World_,8)
SaveLocation_X:
dq 0
SaveLocation_Y:
dq 0
SaveLocation_Z:
dq 0
World_:
dq 0
registersymbol(SaveLocation_X)
registersymbol(SaveLocation_Y)
registersymbol(SaveLocation_Z)
registersymbol(World_)
[DISABLE]
unregistersymbol(SaveLocation_X)
unregistersymbol(SaveLocation_Y)
unregistersymbol(SaveLocation_Z)
unregistersymbol(World_)
dealloc(SaveLocation_X)
dealloc(SaveLocation_Y)
dealloc(SaveLocation_Z)
dealloc(World_)
315684
"Save Coordinates"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
{$ASM}
[ENABLE]
{$LUA}
function toHex(str)
str = string.format("%X", str)
return str
end
if syntaxcheck then return end
local PlayerCharacterBase = toHex(getAddressSafe('[playerPtr]+1C8'))
local SaveLocationXBase = toHex(getAddressSafe('SaveLocation_X'))
local SaveLocationYBase = toHex(getAddressSafe('SaveLocation_Y'))
local SaveLocationZBase = toHex(getAddressSafe('SaveLocation_Z'))
if PlayerCharacterBase ~= nil or SaveLocationBase ~= nil then
--PlayerCharacter
adPlayerCharacter_X = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+260'))
adPlayerCharacter_Y = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+268'))
adPlayerCharacter_Z = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+270'))
writeDouble(SaveLocationXBase, readDouble(adPlayerCharacter_X))
writeDouble(SaveLocationYBase, readDouble(adPlayerCharacter_Y))
writeDouble(SaveLocationZBase, readDouble(adPlayerCharacter_Z))
end
local ce = getMainForm()
memrec.OnActivate = function(memrec, anteState, curState)
if not anteState and curState then
local t = createTimer(ce)
t.Interval = 1000
t.OnTimer = function(t)
t.destroy()
t = nil
memrec.Active = false
end
end
return true
end
{$ASM}
[DISABLE]
Toggle Activation
18
103
0
315685
"Load Coordinates"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
-- Function to convert a string to hexadecimal
function toHex(str)
str = string.format("%X", str)
return str
end
-- Get the hexadecimal address for 'SaveLocation_X'
local SaveLocationXBase = toHex(getAddressSafe('SaveLocation_X'))
-- Check if SaveLocationXBase is not equal to "0" before performing an action
if SaveLocationXBase ~= "0" then
-- Get the hexadecimal address for '[PlayerCharacter]+130'
local PlayerCharacterBase = toHex(getAddressSafe('[playerPtr]+1C8'))
-- Get the hexadecimal addresses for 'SaveLocation_Y' and 'SaveLocation_Z'
local SaveLocationYBase = toHex(getAddressSafe('SaveLocation_Y'))
local SaveLocationZBase = toHex(getAddressSafe('SaveLocation_Z'))
-- Check if all necessary addresses are not nil
if PlayerCharacterBase ~= nil and SaveLocationYBase ~= nil and SaveLocationZBase ~= nil then
-- Get the hexadecimal addresses for player character X, Y, and Z
local adPlayerCharacter_X = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+260'))
local adPlayerCharacter_Y = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+268'))
local adPlayerCharacter_Z = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+270'))
-- Read the float value from SaveLocationXBase
local xValue = readDouble(SaveLocationXBase)
-- Check if xValue is not equal to 0 before writing to player character coordinates
if xValue ~= 0 then
-- Write the xValue to player character X coordinate and the corresponding Y and Z coordinates
writeDouble(adPlayerCharacter_X, xValue)
writeDouble(adPlayerCharacter_Y, readDouble(SaveLocationYBase))
writeDouble(adPlayerCharacter_Z, readDouble(SaveLocationZBase))
end
end
end
-- Get the main form
local ce = getMainForm()
-- Define a function to be executed when the memory record is activated
memrec.OnActivate = function(memrec, anteState, curState)
if not anteState and curState then
-- Create a timer with a 1-second interval
local t = createTimer(ce)
if t ~= nil then
t.Interval = 1000
t.OnTimer = function(t)
-- Destroy the timer and set it to nil
t.destroy()
t = nil
memrec.Active = false
end
end
-- Remove the showMessage part to avoid displaying a message
end
return true
end
[DISABLE]
Toggle Activation
18
104
0
315686
"Saved Coordinates"
Byte
315687
"X"
Double
SaveLocation_X
315688
"Y"
Double
SaveLocation_Y
315689
"Z"
Double
SaveLocation_Z
1337317217
"getWaypoint"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(waypoint_AOB,$process,0F57xx0F10xxxxxxxxxxF2 )
registersymbol(waypoint_AOB)
alloc(waypointHook,0x1000)
registersymbol(waypointHook)
label(code_waypoint)
label(return_waypoint)
label(exit_waypoint)
label(waypoint_x)
registersymbol(waypoint_x)
label(waypoint_y)
registersymbol(waypoint_y)
label(waypoint_z)
registersymbol(waypoint_z)
registersymbol(code_waypoint)
waypointHook:
exit_waypoint:
code_waypoint:
readmem(waypoint_AOB+A,9)
{
movsd xmm2,[rcx+rdx*8+000000F0]
}
@@:
movups [waypoint_x], xmm1
movsd [waypoint_z], xmm2
jmp return_waypoint
align 10 CC
waypointHook+200:
waypoint_x:
dq 0
waypoint_y:
dq 0
waypoint_z:
dq 0
midjumpmem+D0:
jmp waypointHook
waypoint_AOB+A:
jmp midjumpmem+D0
nop 4
return_waypoint:
[DISABLE]
waypoint_AOB+A:
readmem(code_waypoint,9) // db F2 0F 10 94 D1 F0 00 00 00
unregistersymbol(waypoint_AOB)
unregistersymbol(waypointHook)
unregistersymbol(code_waypoint)
unregistersymbol(waypoint_x)
unregistersymbol(waypoint_y)
unregistersymbol(waypoint_z)
dealloc(waypointHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+8343D0C
Borderlands4.exe+8343CC1: 48 8D B1 08 01 00 00 - lea rsi,[rcx+00000108]
Borderlands4.exe+8343CC8: E8 1D 4E 44 F8 - call Borderlands4.exe+788AEA
Borderlands4.exe+8343CCD: 48 85 C0 - test rax,rax
Borderlands4.exe+8343CD0: 74 18 - je Borderlands4.exe+8343CEA
Borderlands4.exe+8343CD2: 48 89 C1 - mov rcx,rax
Borderlands4.exe+8343CD5: E8 A2 CB 69 FB - call Borderlands4.exe+39E087C
Borderlands4.exe+8343CDA: 48 85 C0 - test rax,rax
Borderlands4.exe+8343CDD: 74 0B - je Borderlands4.exe+8343CEA
Borderlands4.exe+8343CDF: 48 89 C1 - mov rcx,rax
Borderlands4.exe+8343CE2: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+8343CE5: E8 16 5A 53 F8 - call Borderlands4.exe+879700
Borderlands4.exe+8343CEA: 48 C7 06 00 00 00 00 - mov qword ptr [rsi],00000000
Borderlands4.exe+8343CF1: 48 83 C4 20 - add rsp,20
Borderlands4.exe+8343CF5: 5E - pop rsi
Borderlands4.exe+8343CF6: C3 - ret
Borderlands4.exe+8343CF7: CC - int 3
Borderlands4.exe+8343CF8: 48 89 D0 - mov rax,rdx
Borderlands4.exe+8343CFB: 0F B6 91 00 01 00 00 - movzx edx,byte ptr [rcx+00000100]
Borderlands4.exe+8343D02: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+8343D05: 0F 10 89 E0 00 00 00 - movups xmm1,[rcx+000000E0]
// ---------- INJECTING HERE ----------
Borderlands4.exe+8343D0C: F2 0F 10 94 D1 F0 00 00 00 - movsd xmm2,[rcx+rdx*8+000000F0]
// ---------- DONE INJECTING ----------
Borderlands4.exe+8343D15: 0F 29 00 - movaps [rax],xmm0
Borderlands4.exe+8343D18: 0F 16 05 E1 12 2F 01 - movhps xmm0,[Borderlands4.exe+9635000]
Borderlands4.exe+8343D1F: 0F 29 40 10 - movaps [rax+10],xmm0
Borderlands4.exe+8343D23: F2 0F 10 05 D5 12 2F 01 - movsd xmm0,[Borderlands4.exe+9635000]
Borderlands4.exe+8343D2B: 0F 29 48 20 - movaps [rax+20],xmm1
Borderlands4.exe+8343D2F: 0F 29 50 30 - movaps [rax+30],xmm2
Borderlands4.exe+8343D33: 0F 28 0D 46 50 2F 01 - movaps xmm1,[Borderlands4.exe+9638D80]
Borderlands4.exe+8343D3A: 0F 29 48 40 - movaps [rax+40],xmm1
Borderlands4.exe+8343D3E: 0F 29 40 50 - movaps [rax+50],xmm0
Borderlands4.exe+8343D42: C3 - ret
Borderlands4.exe+8343D43: CC - int 3
Borderlands4.exe+8343D44: 56 - push rsi
Borderlands4.exe+8343D45: 57 - push rdi
Borderlands4.exe+8343D46: 53 - push rbx
Borderlands4.exe+8343D47: 48 83 EC 20 - sub rsp,20
Borderlands4.exe+8343D4B: E8 F6 D7 EB F7 - call Borderlands4.exe+201546
Borderlands4.exe+8343D50: 48 89 C6 - mov rsi,rax
Borderlands4.exe+8343D53: 48 89 C3 - mov rbx,rax
Borderlands4.exe+8343D56: 48 8B 88 90 00 00 00 - mov rcx,[rax+00000090]
Borderlands4.exe+8343D5D: 48 85 C9 - test rcx,rcx
}
16224
"Waypoint X"
Double
waypoint_x
16225
"Waypoint Y"
Double
waypoint_y
16226
"Waypoint Z"
Double
waypoint_z
315690
"Teleport to Waypoint"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
{$ASM}
[ENABLE]
{$LUA}
function toHex(str)
str = string.format("%X", str)
return str
end
if syntaxcheck then return end
local LocalPlayerBase = toHex(getAddressSafe('[playerPtr]+1C8'))
local SaveLocationXBase = toHex(getAddressSafe('waypoint_x'))
local SaveLocationYBase = toHex(getAddressSafe('waypoint_y'))
local SaveLocationZBase = toHex(getAddressSafe('waypoint_z'))
if LocalPlayerBase ~= nil or Client1Base ~= nil then
--LocalPlayer
adLocalPlayer_X = toHex(getAddressSafe('[' .. LocalPlayerBase .. ']+260'))
adLocalPlayer_Y = toHex(getAddressSafe('[' .. LocalPlayerBase .. ']+268'))
adLocalPlayer_Z = toHex(getAddressSafe('[' .. LocalPlayerBase .. ']+270'))
writeDouble(adLocalPlayer_X, readDouble(SaveLocationXBase))
writeDouble(adLocalPlayer_Y, readDouble(SaveLocationYBase))
writeDouble(adLocalPlayer_Z, readDouble(SaveLocationZBase)+600)
end
local ce = getMainForm()
memrec.OnActivate = function(memrec, anteState, curState)
if not anteState and curState then
local t = createTimer(ce)
t.Interval = 1000
t.OnTimer = function(t)
t.destroy()
t = nil
memrec.Active = false
end
end
return true
end
{$ASM}
[DISABLE]
Toggle Activation
18
105
0
1337317218
"getFOV"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(fov_AOB,$process,74xxF3xxxxxxxxxxxxxxF3xxxxxxxx488BxxxxxxxxxxF3)
registersymbol(fov_AOB)
alloc(fovHook,0x1000)
registersymbol(fovHook)
label(code_fov)
label(return_fov)
label(exit_fov)
label(fovVal)
registersymbol(code_fov)
registersymbol(fovVal)
fovHook:
cmp [fovVal],0
jle @f
movss xmm0,[fovVal]
jmp return_fov
exit_fov:
code_fov:
readmem(fov_AOB+2,8)
{
movss xmm0,[rcx+000003A8]
}
jmp return_fov
align 10 CC
fovHook+200:
fovVal:
dd (float)0
midjumpmem+E0:
jmp fovHook
fov_AOB+2:
jmp midjumpmem+E0
nop 3
return_fov:
[DISABLE]
fov_AOB+2:
readmem(code_fov,8) // db F3 0F 10 81 A8 03 00 00
unregistersymbol(fov_AOB)
unregistersymbol(fovHook)
unregistersymbol(code_fov)
unregistersymbol(fovVal)
dealloc(fovHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+233ACC
Borderlands4.exe+233A71: 48 89 CE - mov rsi,rcx
Borderlands4.exe+233A74: 48 85 D2 - test rdx,rdx
Borderlands4.exe+233A77: 74 09 - je Borderlands4.exe+233A82
Borderlands4.exe+233A79: 80 3D E9 62 38 0C 00 - cmp byte ptr [Borderlands4.exe+C5B9D69],00
Borderlands4.exe+233A80: 75 72 - jne Borderlands4.exe+233AF4
Borderlands4.exe+233A82: 48 89 BE E8 00 00 00 - mov [rsi+000000E8],rdi
Borderlands4.exe+233A89: 48 85 FF - test rdi,rdi
Borderlands4.exe+233A8C: 74 5F - je Borderlands4.exe+233AED
Borderlands4.exe+233A8E: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+233A91: E8 14 45 00 04 - call Borderlands4.exe+4237FAA
Borderlands4.exe+233A96: F2 0F 5A 80 D0 06 00 00 - cvtsd2ss xmm0,[rax+000006D0]
Borderlands4.exe+233A9E: F3 0F 11 46 28 - movss [rsi+28],xmm0
Borderlands4.exe+233AA3: 48 8B 86 E8 00 00 00 - mov rax,[rsi+000000E8]
Borderlands4.exe+233AAA: 48 8B 88 20 06 00 00 - mov rcx,[rax+00000620]
Borderlands4.exe+233AB1: 48 89 4E 40 - mov [rsi+40],rcx
Borderlands4.exe+233AB5: 0F 10 80 10 06 00 00 - movups xmm0,[rax+00000610]
Borderlands4.exe+233ABC: 0F 11 46 30 - movups [rsi+30],xmm0
Borderlands4.exe+233AC0: 48 8B 88 48 04 00 00 - mov rcx,[rax+00000448]
Borderlands4.exe+233AC7: 48 85 C9 - test rcx,rcx
Borderlands4.exe+233ACA: 74 21 - je Borderlands4.exe+233AED
// ---------- INJECTING HERE ----------
Borderlands4.exe+233ACC: F3 0F 10 81 A8 03 00 00 - movss xmm0,[rcx+000003A8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+233AD4: F3 0F 11 46 48 - movss [rsi+48],xmm0
Borderlands4.exe+233AD9: 48 8B 80 48 04 00 00 - mov rax,[rax+00000448]
Borderlands4.exe+233AE0: F3 0F 10 80 AC 03 00 00 - movss xmm0,[rax+000003AC]
Borderlands4.exe+233AE8: F3 0F 11 46 4C - movss [rsi+4C],xmm0
Borderlands4.exe+233AED: 48 83 C4 28 - add rsp,28
Borderlands4.exe+233AF1: 5F - pop rdi
Borderlands4.exe+233AF2: 5E - pop rsi
Borderlands4.exe+233AF3: C3 - ret
Borderlands4.exe+233AF4: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+233AF7: E8 D6 D4 F8 04 - call Borderlands4.exe+51C0FD2
Borderlands4.exe+233AFC: 48 89 BE E8 00 00 00 - mov [rsi+000000E8],rdi
Borderlands4.exe+233B03: EB 89 - jmp Borderlands4.exe+233A8E
Borderlands4.exe+233B05: CC - int 3
Borderlands4.exe+233B06: 41 57 - push r15
Borderlands4.exe+233B08: 41 56 - push r14
Borderlands4.exe+233B0A: 41 55 - push r13
Borderlands4.exe+233B0C: 41 54 - push r12
Borderlands4.exe+233B0E: 56 - push rsi
Borderlands4.exe+233B0F: 57 - push rdi
Borderlands4.exe+233B10: 55 - push rbp
}
1337317219
"Edit: FOV"
Float
fovVal
1337317221
"getGravity"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(gravity_AOB,$process,F3xxxxxxxxxxxxxx488Bxxxxxxxxxx4885xx0F85xxxxxxxx80)
registersymbol(gravity_AOB)
alloc(gravityHook,0x1000)
registersymbol(gravityHook)
label(code_gravity)
label(return_gravity)
label(exit_gravity)
label(gravMul)
registersymbol(code_gravity)
registersymbol(gravMul)
gravityHook:
exit_gravity:
code_gravity:
readmem(gravity_AOB,8)
{
mulss xmm0,[rsi+000001F8]
}
@@:
cmp [gravMul],0
jle @f
mulss xmm6,[gravMul]
@@:
jmp return_gravity
align 10 CC
gravityHook+200:
gravMul:
dd (float)1
midjumpmem+100:
jmp gravityHook
gravity_AOB:
jmp midjumpmem+100
nop 3
return_gravity:
[DISABLE]
gravity_AOB:
readmem(code_gravity,8) // db F3 0F 59 86 F8 01 00 00
unregistersymbol(gravity_AOB)
unregistersymbol(gravityHook)
unregistersymbol(code_gravity)
unregistersymbol(gravMul)
dealloc(gravityHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+5A913
Borderlands4.exe+5A8CE: 0F 56 F9 - orps xmm7,xmm1
Borderlands4.exe+5A8D1: 0F 28 C7 - movaps xmm0,xmm7
Borderlands4.exe+5A8D4: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
Borderlands4.exe+5A8D9: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
Borderlands4.exe+5A8DE: 44 0F 28 44 24 40 - movaps xmm8,[rsp+40]
Borderlands4.exe+5A8E4: 48 83 C4 50 - add rsp,50
Borderlands4.exe+5A8E8: 5E - pop rsi
Borderlands4.exe+5A8E9: C3 - ret
Borderlands4.exe+5A8EA: 48 89 C1 - mov rcx,rax
Borderlands4.exe+5A8ED: E8 60 02 00 00 - call Borderlands4.exe+5AB52
Borderlands4.exe+5A8F2: EB AE - jmp Borderlands4.exe+5A8A2
Borderlands4.exe+5A8F4: 48 89 F1 - mov rcx,rsi
Borderlands4.exe+5A8F7: E8 DC 4F 85 08 - call Borderlands4.exe+88AF8D8
Borderlands4.exe+5A8FC: F3 0F 59 F0 - mulss xmm6,xmm0
Borderlands4.exe+5A900: E9 48 FF FF FF - jmp Borderlands4.exe+5A84D
Borderlands4.exe+5A905: CC - int 3
Borderlands4.exe+5A906: 56 - push rsi
Borderlands4.exe+5A907: 48 83 EC 20 - sub rsp,20
Borderlands4.exe+5A90B: 48 89 CE - mov rsi,rcx
Borderlands4.exe+5A90E: E8 09 01 00 00 - call Borderlands4.exe+5AA1C
// ---------- INJECTING HERE ----------
Borderlands4.exe+5A913: F3 0F 59 86 F8 01 00 00 - mulss xmm0,[rsi+000001F8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+5A91B: 48 8B 86 40 31 00 00 - mov rax,[rsi+00003140]
Borderlands4.exe+5A922: 48 8D 88 D8 00 00 00 - lea rcx,[rax+000000D8]
Borderlands4.exe+5A929: 48 89 CA - mov rdx,rcx
Borderlands4.exe+5A92C: 48 85 C0 - test rax,rax
Borderlands4.exe+5A92F: 75 7D - jne Borderlands4.exe+5A9AE
Borderlands4.exe+5A931: 80 BE 80 34 00 00 01 - cmp byte ptr [rsi+00003480],01
Borderlands4.exe+5A938: 74 6D - je Borderlands4.exe+5A9A7
Borderlands4.exe+5A93A: F3 0F 10 96 A0 2B 00 00 - movss xmm2,[rsi+00002BA0]
Borderlands4.exe+5A942: 0F 28 D8 - movaps xmm3,xmm0
Borderlands4.exe+5A945: F3 0F 59 DA - mulss xmm3,xmm2
Borderlands4.exe+5A949: 0F 57 C9 - xorps xmm1,xmm1
Borderlands4.exe+5A94C: F3 0F C2 CA 01 - cmpltss xmm1,xmm2
Borderlands4.exe+5A951: 0F 54 D9 - andps xmm3,xmm1
Borderlands4.exe+5A954: 0F 55 C8 - andnps xmm1,xmm0
Borderlands4.exe+5A957: 0F 56 CB - orps xmm1,xmm3
Borderlands4.exe+5A95A: 48 8B 86 C0 1C 00 00 - mov rax,[rsi+00001CC0]
Borderlands4.exe+5A961: 48 85 C0 - test rax,rax
Borderlands4.exe+5A964: 74 09 - je Borderlands4.exe+5A96F
Borderlands4.exe+5A966: 80 BE 78 2C 00 00 01 - cmp byte ptr [rsi+00002C78],01
Borderlands4.exe+5A96D: 74 12 - je Borderlands4.exe+5A981
}
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+46921F2
Borderlands4.exe+4692196: 4F 8D 04 40 - lea r8,[r8+r8*2]
Borderlands4.exe+469219A: 41 C1 E0 03 - shl r8d,03
Borderlands4.exe+469219E: 4D 03 04 D1 - add r8,[r9+rdx*8]
Borderlands4.exe+46921A2: 0F 84 BD 00 00 00 - je Borderlands4.exe+4692265
Borderlands4.exe+46921A8: 41 39 40 10 - cmp [r8+10],eax
Borderlands4.exe+46921AC: 0F 85 B3 00 00 00 - jne Borderlands4.exe+4692265
Borderlands4.exe+46921B2: 41 8B 40 08 - mov eax,[r8+08]
Borderlands4.exe+46921B6: A9 00 00 20 10 - test eax,10200000
Borderlands4.exe+46921BB: 0F 85 A4 00 00 00 - jne Borderlands4.exe+4692265
Borderlands4.exe+46921C1: 49 8B 10 - mov rdx,[r8]
Borderlands4.exe+46921C4: 48 85 D2 - test rdx,rdx
Borderlands4.exe+46921C7: 0F 84 98 00 00 00 - je Borderlands4.exe+4692265
Borderlands4.exe+46921CD: 48 8B 02 - mov rax,[rdx]
Borderlands4.exe+46921D0: 48 8B 80 68 06 00 00 - mov rax,[rax+00000668]
Borderlands4.exe+46921D7: 48 8D 0D 1C 39 F2 FF - lea rcx,[Borderlands4.exe+45B5AFA]
Borderlands4.exe+46921DE: 48 39 C8 - cmp rax,rcx
Borderlands4.exe+46921E1: 0F 85 49 01 00 00 - jne Borderlands4.exe+4692330
Borderlands4.exe+46921E7: 48 89 D1 - mov rcx,rdx
Borderlands4.exe+46921EA: E8 0B 39 F2 FF - call Borderlands4.exe+45B5AFA
Borderlands4.exe+46921EF: 0F 28 F0 - movaps xmm6,xmm0
// ---------- INJECTING HERE ----------
Borderlands4.exe+46921F2: F3 0F 59 B6 F8 01 00 00 - mulss xmm6,[rsi+000001F8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+46921FA: 48 8B BE 40 31 00 00 - mov rdi,[rsi+00003140]
Borderlands4.exe+4692201: 48 85 FF - test rdi,rdi
Borderlands4.exe+4692204: 0F 85 8F 00 00 00 - jne Borderlands4.exe+4692299
Borderlands4.exe+469220A: 80 BE 80 34 00 00 01 - cmp byte ptr [rsi+00003480],01
Borderlands4.exe+4692211: 0F 84 40 01 00 00 - je Borderlands4.exe+4692357
Borderlands4.exe+4692217: F3 0F 10 8E A0 2B 00 00 - movss xmm1,[rsi+00002BA0]
Borderlands4.exe+469221F: 0F 28 D6 - movaps xmm2,xmm6
Borderlands4.exe+4692222: F3 0F 59 D1 - mulss xmm2,xmm1
Borderlands4.exe+4692226: 0F 57 C0 - xorps xmm0,xmm0
Borderlands4.exe+4692229: F3 0F C2 C1 01 - cmpltss xmm0,xmm1
Borderlands4.exe+469222E: 0F 54 D0 - andps xmm2,xmm0
Borderlands4.exe+4692231: 0F 55 C6 - andnps xmm0,xmm6
Borderlands4.exe+4692234: 0F 56 C2 - orps xmm0,xmm2
Borderlands4.exe+4692237: 48 8B 86 C0 1C 00 00 - mov rax,[rsi+00001CC0]
Borderlands4.exe+469223E: 48 85 C0 - test rax,rax
Borderlands4.exe+4692241: 74 09 - je Borderlands4.exe+469224C
Borderlands4.exe+4692243: 80 BE 78 2C 00 00 01 - cmp byte ptr [rsi+00002C78],01
Borderlands4.exe+469224A: 74 46 - je Borderlands4.exe+4692292
Borderlands4.exe+469224C: 80 BE 90 2C 00 00 01 - cmp byte ptr [rsi+00002C90],01
Borderlands4.exe+4692253: 0F 84 9A 00 00 00 - je Borderlands4.exe+46922F3
}
1337317222
"Gravity Multiplier"
Float
gravMul
16154
"getGameSpeed"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(slowmovals,1024)
label(speedhckval)
registersymbol(speedhckval)
///
slowmovals:
speedhckval:
dd (float)1.0
{$lua}
local function slowmokeyLuaThread(thread3)
local addr = getAddressSafe('speedhckval')
while SlowMokeyLuaThreadLoop do
sleep(100)
if (addr)then
if speedhack_getSpeed() ~= readFloat("speedhckval") then
speedhack_setSpeed(readFloat("speedhckval"))
end
else
addr = getAddressSafe('speedhckval')
end
end
thread3.terminate()
end
----------------------------------
if syntaxcheck then return end
SlowMokeyLuaThreadLoop = true
createThread(slowmokeyLuaThread)
{$asm}
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$lua}
speedhack_setSpeed(1.0)
if syntaxcheck then return end
SlowMokeyLuaThreadLoop = false
{$asm}
dealloc(slowmovals)
unregistersymbol(speedhckval)
16163
"Game Speed Multiplier"
Float
speedhckval
Toggle Activation
18
96
0.5
Increase Game Speed
0
Toggle Activation
18
109
0.5
Decrease Game Speed
1
Toggle Activation
18
107
1.0
Reset Game Speed
2
1337317245
"getEXP"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(expMult_AOB,$process,49 03 5E 08 48 39 C3)
registersymbol(expMult_AOB)
alloc(expMultHook,0x1000)
registersymbol(expMultHook)
label(code_expMult)
label(return_expMult)
label(exit_expMult)
label(xpMul)
registersymbol(code_expMult)
registersymbol(xpMul)
expMultHook:
cmp [xpMul],0
jl @f
imul rbx,[xpMul]
exit_expMult:
code_expMult:
readmem(expMult_AOB,7)
{
add rbx,[r14+08]
cmp rbx,rax
}
jmp return_expMult
align 10 CC
expMultHook+200:
xpMul:
dd #1
midjumpmem+420:
jmp expMultHook
expMult_AOB:
jmp midjumpmem+420
nop 2
return_expMult:
[DISABLE]
expMult_AOB:
readmem(code_expMult,7) // db 49 03 5E 08 48 39 C3
unregistersymbol(expMult_AOB)
unregistersymbol(expMultHook)
unregistersymbol(code_expMult)
unregistersymbol(xpMul)
dealloc(expMultHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+10F5419
Borderlands4.exe+10F53CA: E8 05 FA 07 FF - call Borderlands4.exe+174DD4
Borderlands4.exe+10F53CF: 48 8B 58 08 - mov rbx,[rax+08]
Borderlands4.exe+10F53D3: 48 F7 D3 - not rbx
Borderlands4.exe+10F53D6: 49 39 DF - cmp r15,rbx
Borderlands4.exe+10F53D9: 49 0F 42 DF - cmovb rbx,r15
Borderlands4.exe+10F53DD: 48 85 DB - test rbx,rbx
Borderlands4.exe+10F53E0: 0F 84 95 00 00 00 - je Borderlands4.exe+10F547B
Borderlands4.exe+10F53E6: 49 89 C6 - mov r14,rax
Borderlands4.exe+10F53E9: 80 78 50 01 - cmp byte ptr [rax+50],01
Borderlands4.exe+10F53ED: 0F 85 88 00 00 00 - jne Borderlands4.exe+10F547B
Borderlands4.exe+10F53F3: E8 8D 56 C5 FF - call Borderlands4.exe+D4AA85
Borderlands4.exe+10F53F8: 49 89 C7 - mov r15,rax
Borderlands4.exe+10F53FB: E8 85 56 C5 FF - call Borderlands4.exe+D4AA85
Borderlands4.exe+10F5400: 48 89 C1 - mov rcx,rax
Borderlands4.exe+10F5403: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+10F5406: E8 49 43 A4 FF - call Borderlands4.exe+B39754
Borderlands4.exe+10F540B: 4C 89 F9 - mov rcx,r15
Borderlands4.exe+10F540E: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+10F5411: 41 89 C0 - mov r8d,eax
Borderlands4.exe+10F5414: E8 45 58 C5 FF - call Borderlands4.exe+D4AC5E
// ---------- INJECTING HERE ----------
Borderlands4.exe+10F5419: 49 03 5E 08 - add rbx,[r14+08]
// ---------- DONE INJECTING ----------
Borderlands4.exe+10F541D: 48 39 C3 - cmp rbx,rax
Borderlands4.exe+10F5420: 48 0F 43 D8 - cmovae rbx,rax
Borderlands4.exe+10F5424: 41 8B 2E - mov ebp,[r14]
Borderlands4.exe+10F5427: E8 59 56 C5 FF - call Borderlands4.exe+D4AA85
Borderlands4.exe+10F542C: 48 89 C1 - mov rcx,rax
Borderlands4.exe+10F542F: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+10F5432: E8 1D 43 A4 FF - call Borderlands4.exe+B39754
Borderlands4.exe+10F5437: 39 C5 - cmp ebp,eax
Borderlands4.exe+10F5439: 7D 25 - jnl Borderlands4.exe+10F5460
Borderlands4.exe+10F543B: 49 3B 5E 20 - cmp rbx,[r14+20]
Borderlands4.exe+10F543F: 72 1F - jb Borderlands4.exe+10F5460
Borderlands4.exe+10F5441: 41 89 C7 - mov r15d,eax
Borderlands4.exe+10F5444: E8 3C 56 C5 FF - call Borderlands4.exe+D4AA85
Borderlands4.exe+10F5449: 48 89 C1 - mov rcx,rax
Borderlands4.exe+10F544C: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+10F544F: 49 89 D8 - mov r8,rbx
Borderlands4.exe+10F5452: E8 DB 38 EB 02 - call Borderlands4.exe+3FA8D32
Borderlands4.exe+10F5457: 89 C5 - mov ebp,eax
Borderlands4.exe+10F5459: 41 39 C7 - cmp r15d,eax
Borderlands4.exe+10F545C: 41 0F 4C EF - cmovl ebp,r15d
}
1337317246
"EXP Multiplier"
4 Bytes
xpMul
1337317247
"getCurrencyMult"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(currencyMult_AOB,$process,89xx4Cxxxx48C7xxxxxxxxxx480Fxxxx41B8)
registersymbol(currencyMult_AOB)
alloc(currencyMultHook,0x1000)
registersymbol(currencyMultHook)
label(code_currencyMult)
label(return_currencyMult)
label(exit_currencyMult)
label(cMul)
registersymbol(code_currencyMult)
registersymbol(cMul)
currencyMultHook:
cmp ebx,0
jle @f
cmp [cMul],0
jle @f
imul ebx,[cMul]
exit_currencyMult:
code_currencyMult:
readmem(currencyMult_AOB,5)
{
mov ecx,ebx
add rcx,r9
}
jmp return_currencyMult
align 10 CC
currencyMultHook+200:
cMul:
dd #1
midjumpmem+430:
jmp currencyMultHook
currencyMult_AOB:
jmp midjumpmem+430
return_currencyMult:
[DISABLE]
currencyMult_AOB:
readmem(code_currencyMult,5) // db 89 D9 4C 01 C9
unregistersymbol(currencyMult_AOB)
unregistersymbol(currencyMultHook)
unregistersymbol(code_currencyMult)
unregistersymbol(cMul)
dealloc(currencyMultHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+1078382
Borderlands4.exe+1078330: 48 8D 4C 24 38 - lea rcx,[rsp+38]
Borderlands4.exe+1078335: E8 A4 9D 5A 03 - call Borderlands4.exe+46220DE
Borderlands4.exe+107833A: 48 8B 0D 07 CA 88 0B - mov rcx,[Borderlands4.exe+C904D48]
Borderlands4.exe+1078341: 48 85 C9 - test rcx,rcx
Borderlands4.exe+1078344: 0F 84 AC 00 00 00 - je Borderlands4.exe+10783F6
Borderlands4.exe+107834A: 4C 8D 64 24 38 - lea r12,[rsp+38]
Borderlands4.exe+107834F: 4C 89 E2 - mov rdx,r12
Borderlands4.exe+1078352: E8 F7 6A 63 03 - call Borderlands4.exe+46AEE4E
Borderlands4.exe+1078357: 49 89 C7 - mov r15,rax
Borderlands4.exe+107835A: 49 8B 4C 24 18 - mov rcx,[r12+18]
Borderlands4.exe+107835F: 48 85 C9 - test rcx,rcx
Borderlands4.exe+1078362: 0F 85 84 00 00 00 - jne Borderlands4.exe+10783EC
Borderlands4.exe+1078368: 4D 85 FF - test r15,r15
Borderlands4.exe+107836B: 74 5A - je Borderlands4.exe+10783C7
Borderlands4.exe+107836D: 41 80 7F 48 00 - cmp byte ptr [r15+48],00
Borderlands4.exe+1078372: 75 53 - jne Borderlands4.exe+10783C7
Borderlands4.exe+1078374: 4C 89 F1 - mov rcx,r14
Borderlands4.exe+1078377: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+107837A: E8 89 00 00 00 - call Borderlands4.exe+1078408
Borderlands4.exe+107837F: 4C 8B 08 - mov r9,[rax]
// ---------- INJECTING HERE ----------
Borderlands4.exe+1078382: 89 D9 - mov ecx,ebx
// ---------- DONE INJECTING ----------
Borderlands4.exe+1078384: 4C 01 C9 - add rcx,r9
Borderlands4.exe+1078387: 48 C7 C2 FF FF FF FF - mov rdx,FFFFFFFFFFFFFFFF
Borderlands4.exe+107838E: 48 0F 43 D1 - cmovae rdx,rcx
Borderlands4.exe+1078392: 41 B8 FF FF FF 7F - mov r8d,7FFFFFFF
Borderlands4.exe+1078398: 4C 39 C2 - cmp rdx,r8
Borderlands4.exe+107839B: 4C 0F 42 C2 - cmovb r8,rdx
Borderlands4.exe+107839F: 80 3D FA D4 47 0B 00 - cmp byte ptr [Borderlands4.D3D12SDKPath+1900],00
Borderlands4.exe+10783A6: 4C 0F 44 C2 - cmove r8,rdx
Borderlands4.exe+10783AA: 4C 89 00 - mov [rax],r8
Borderlands4.exe+10783AD: 4D 39 C8 - cmp r8,r9
Borderlands4.exe+10783B0: 74 15 - je Borderlands4.exe+10783C7
Borderlands4.exe+10783B2: 80 BC 24 C0 00 00 00 00 - cmp byte ptr [rsp+000000C0],00
Borderlands4.exe+10783BA: 74 0B - je Borderlands4.exe+10783C7
Borderlands4.exe+10783BC: 48 89 F9 - mov rcx,rdi
Borderlands4.exe+10783BF: 48 89 F2 - mov rdx,rsi
Borderlands4.exe+10783C2: E8 09 01 00 00 - call Borderlands4.exe+10784D0
Borderlands4.exe+10783C7: 48 8B 4C 24 60 - mov rcx,[rsp+60]
Borderlands4.exe+10783CC: 48 31 E1 - xor rcx,rsp
Borderlands4.exe+10783CF: 48 3B 0D 6A 15 42 0B - cmp rcx,[Borderlands4.exe+C499940]
Borderlands4.exe+10783D6: 75 0E - jne Borderlands4.exe+10783E6
}
1337317248
"Currency Multiplier"
4 Bytes
cMul
1337317249
"gReloadSpeed"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : Borderlands4.exe
// 🧾 Version : 1.3.0
// 📅 Date : 30-01-2026
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(reloadSpeed_AOB,$process,8B 86 B8 00 00 00 85 C0 7F)
registersymbol(reloadSpeed_AOB)
alloc(reloadSpeedHook,0x1000)
registersymbol(reloadSpeedHook)
label(code_reloadSpeed)
label(return_reloadSpeed)
label(exit_reloadSpeed)
registersymbol(code_reloadSpeed)
reloadSpeedHook:
push (float)0.05
movss xmm0,[rsp]
add rsp,8
exit_reloadSpeed:
code_reloadSpeed:
readmem(reloadSpeed_AOB,6)
{
mov eax,[rsi+000000B8]
}
jmp return_reloadSpeed
align 10 CC
reloadSpeedHook+200:
midjumpmem+60:
jmp reloadSpeedHook
reloadSpeed_AOB:
jmp midjumpmem+60
nop
return_reloadSpeed:
[DISABLE]
reloadSpeed_AOB:
readmem(code_reloadSpeed,6) // db 8B 86 B8 00 00 00
unregistersymbol(reloadSpeed_AOB)
unregistersymbol(reloadSpeedHook)
unregistersymbol(code_reloadSpeed)
dealloc(reloadSpeedHook)
{
// ORIGINAL CODE - INJECTION POINT: Borderlands4.exe+DD730D
Borderlands4.exe+DD72B2: E9 6C FC FF FF - jmp Borderlands4.exe+DD6F23
Borderlands4.exe+DD72B7: 45 31 FF - xor r15d,r15d
Borderlands4.exe+DD72BA: E9 B9 FD FF FF - jmp Borderlands4.exe+DD7078
Borderlands4.exe+DD72BF: 48 8D 0D EA 76 EF 08 - lea rcx,[Borderlands4.exe+9CCE9B0]
Borderlands4.exe+DD72C6: 4C 8D 05 03 79 EF 08 - lea r8,[Borderlands4.exe+9CCEBD0]
Borderlands4.exe+DD72CD: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+DD72D2: 45 89 F1 - mov r9d,r14d
Borderlands4.exe+DD72D5: E8 DF C9 25 FF - call Borderlands4.exe+33CB9
Borderlands4.exe+DD72DA: E9 FF FE FF FF - jmp Borderlands4.exe+DD71DE
Borderlands4.exe+DD72DF: 48 8D 0D CA 76 EF 08 - lea rcx,[Borderlands4.exe+9CCE9B0]
Borderlands4.exe+DD72E6: 4C 8D 05 E3 78 EF 08 - lea r8,[Borderlands4.exe+9CCEBD0]
Borderlands4.exe+DD72ED: BA 3D 02 00 00 - mov edx,0000023D
Borderlands4.exe+DD72F2: 41 89 F1 - mov r9d,esi
Borderlands4.exe+DD72F5: E8 BF C9 25 FF - call Borderlands4.exe+33CB9
Borderlands4.exe+DD72FA: E9 0E FF FF FF - jmp Borderlands4.exe+DD720D
Borderlands4.exe+DD72FF: CC - int 3
Borderlands4.exe+DD7300: 56 - push rsi
Borderlands4.exe+DD7301: 48 83 EC 20 - sub rsp,20
Borderlands4.exe+DD7305: 48 89 CE - mov rsi,rcx
Borderlands4.exe+DD7308: E8 57 01 00 00 - call Borderlands4.exe+DD7464
// ---------- INJECTING HERE ----------
Borderlands4.exe+DD730D: 8B 86 B8 00 00 00 - mov eax,[rsi+000000B8]
// ---------- DONE INJECTING ----------
Borderlands4.exe+DD7313: 85 C0 - test eax,eax
Borderlands4.exe+DD7315: 7F 06 - jg Borderlands4.exe+DD731D
Borderlands4.exe+DD7317: 48 83 C4 20 - add rsp,20
Borderlands4.exe+DD731B: 5E - pop rsi
Borderlands4.exe+DD731C: C3 - ret
Borderlands4.exe+DD731D: 0F B6 8E CF 00 00 00 - movzx ecx,byte ptr [rsi+000000CF]
Borderlands4.exe+DD7324: 39 C8 - cmp eax,ecx
Borderlands4.exe+DD7326: 76 EF - jna Borderlands4.exe+DD7317
Borderlands4.exe+DD7328: F3 0F 10 96 90 00 00 00 - movss xmm2,[rsi+00000090]
Borderlands4.exe+DD7330: F3 0F 10 86 C0 00 00 00 - movss xmm0,[rsi+000000C0]
Borderlands4.exe+DD7338: F3 0F 10 0D E0 BE 97 08 - movss xmm1,[Borderlands4.exe+9753220]
Borderlands4.exe+DD7340: 0F 57 E4 - xorps xmm4,xmm4
Borderlands4.exe+DD7343: 0F 2E D4 - ucomiss xmm2,xmm4
Borderlands4.exe+DD7346: 76 14 - jna Borderlands4.exe+DD735C
Borderlands4.exe+DD7348: F3 0F 10 9E 8C 00 00 00 - movss xmm3,[rsi+0000008C]
Borderlands4.exe+DD7350: 0F 2E DC - ucomiss xmm3,xmm4
Borderlands4.exe+DD7353: 76 07 - jna Borderlands4.exe+DD735C
Borderlands4.exe+DD7355: F3 0F 5E DA - divss xmm3,xmm2
Borderlands4.exe+DD7359: 0F 28 CB - movaps xmm1,xmm3
Borderlands4.exe+DD735C: F3 0F 59 C1 - mulss xmm0,xmm1
}
1337317250
"Float"
Float
21A0B5560+1F8