1
"Step_2_Mov_1000"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [ebx+00000480],#1000
originalcode:
//sub [ebx+00000480],eax
exit:
jmp returnhere
"Tutorial-i386.exe"+24FFB:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Tutorial-i386.exe"+24FFB:
sub [ebx+00000480],eax
//Alt: db 29 83 80 04 00 00
5
"Step_3_Mov_5000"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
mov [esi+00000484],#5000
originalcode:
//sub [esi+00000484],ebx
exit:
jmp returnhere
"Tutorial-i386.exe"+25567:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Tutorial-i386.exe"+25567:
sub [esi+00000484],ebx
//Alt: db 29 9E 84 04 00 00
8
"Step_4_Mov_5000_FloatDouble"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,512)
alloc(memammo,512)
label(returnhere)
label(returnhere2)
label(originalcode)
label(exit)
alloc(double5,4)
newmem: //this is allocated memory, you have read,write,execute access
fstp dword ptr [ebx+00000494]
mov [ebx+00000494],(float)5000
originalcode:
//fstp dword ptr [ebx+00000494]
exit:
jmp returnhere
memammo:
fild qword ptr[double5] //write to temp double5 value
fstp qword ptr [ebx+00000498] //swap from temp to address
jmp returnhere2
//write to mem double5 5000
double5:
dd (int)5000
//health address
"Tutorial-i386.exe"+25DF0:
jmp newmem
nop
returnhere:
//ammo address
"Tutorial-i386.exe"+25B9B:
jmp memammo
nop
returnhere2:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
dealloc(memammo)
dealloc(double5)
//health
"Tutorial-i386.exe"+25DF0:
fstp dword ptr [ebx+00000494]
//Alt: db D9 9B 94 04 00 00
//ammo
"Tutorial-i386.exe"+25B9B:
fstp qword ptr [ebx+00000498]
//Alt: db DD 9B 98 04 00 00
10
"Step_5_NOP"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax],edx
mov eax,[ebp-08]
exit:
jmp returnhere
"Tutorial-i386.exe"+26119:
nop
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Tutorial-i386.exe"+26119:
mov [eax],edx
mov eax,[ebp-08]
//Alt: db 89 10 8B 45 F8
12
"Step_6_NOP"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [edx],eax
exit:
jmp returnhere
"Tutorial-i386.exe"+26562:
nop
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Tutorial-i386.exe"+26562:
mov [edx],eax
//Alt: db 89 02 A1 60 53 64 00
14
"Step_7_Increase_2"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
inc [ebx+00000478]
inc [ebx+00000478]
originalcode:
//dec [ebx+00000478]
exit:
jmp returnhere
"Tutorial-i386.exe"+26C40:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"Tutorial-i386.exe"+26C40:
dec [ebx+00000478]
//Alt: db FF 8B 78 04 00 00
19
"Step_8_Freeze_Pointer"
80000008
Auto Assembler Script
[enable]
define(FREEZE_TIME,#100) //in miliseconds
globalalloc(MyFreezer,500)
label(StopFreezing)
registersymbol(StopFreezing)
label(Inside_Step8)
label(Exit_Freeze)
createthread(MyFreezer) //create the thread that will freeze the value
MyFreezer: //never deallocate that or you risk a crash
push FREEZE_TIME //sleep between each write operation
call kernel32.Sleep //otherwise you'll get 100% cpu usage
cmp byte [StopFreezing],1 //should we stop?
je Exit_Freeze
cmp ["Tutorial-i386.exe"+00245390],0
jne Inside_Step8
retn
StopFreezing:
db 0
Inside_Step8:
push eax
mov eax,["Tutorial-i386.exe"+00245390]
mov eax,[eax+C]
mov eax,[eax+14]
mov eax,[eax+0]
mov [eax+18],#5000
pop eax
jmp MyFreezer
Exit_Freeze:
retn
[disable]
unregistersymbol(StopFreezing)
StopFreezing:
db 1
16
"Step_9_If_Dave_or_Eric_String"
80000008
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(ifdaveeric)
newmem: //this is allocated memory, you have read,write,execute access
cmp dword [ebx+15],'Dave'
je ifdaveeric
cmp dword [ebx+15],'Eric'
je ifdaveeric
originalcode:
mov [ebx+04],eax
fldz
exit:
jmp returnhere
ifdaveeric:
mov [ebx+04],(float)300
fldz
jmp exit
"Tutorial-i386.exe"+27DA6:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
unregistersymbol(ifdaveeric)
dealloc(newmem)
"Tutorial-i386.exe"+27DA6:
mov [ebx+04],eax
fldz
//Alt: db 89 43 04 D9 EE
MyFreezer
001F0000
StopFreezing
001F0022