129
"--Main--"
80000008
1
16
"Working Scripts"
80000008
1
12
"Ammunition in Mag ("R6Vegas2_Game.exe"+3CD5B6)"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-08-11
Author : JJXB
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(MAGNUM,R6Vegas2_Game.exe,83 81 B0 03 00 00 FF) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add dword ptr [ecx+000003B0],-00 //add dword ptr [ecx+000003B0],-01
jmp return
MAGNUM:
jmp code
nop
nop
return:
registersymbol(MAGNUM)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
MAGNUM:
db 83 81 B0 03 00 00 FF
unregistersymbol(MAGNUM)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+3CD5B6
"R6Vegas2_Game.exe"+3CD59D: 01 86 AC 03 00 00 - add [esi+000003AC],eax
"R6Vegas2_Game.exe"+3CD5A3: 83 8E 94 00 00 00 04 - or dword ptr [esi+00000094],04
"R6Vegas2_Game.exe"+3CD5AA: 5E - pop esi
"R6Vegas2_Game.exe"+3CD5AB: C3 - ret
"R6Vegas2_Game.exe"+3CD5AC: CC - int 3
"R6Vegas2_Game.exe"+3CD5AD: CC - int 3
"R6Vegas2_Game.exe"+3CD5AE: CC - int 3
"R6Vegas2_Game.exe"+3CD5AF: CC - int 3
"R6Vegas2_Game.exe"+3CD5B0: 80 79 6E 03 - cmp byte ptr [ecx+6E],03
"R6Vegas2_Game.exe"+3CD5B4: 72 0E - jb R6Vegas2_Game.exe+3CD5C4
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+3CD5B6: 83 81 B0 03 00 00 FF - add dword ptr [ecx+000003B0],-01
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+3CD5BD: 83 89 94 00 00 00 04 - or dword ptr [ecx+00000094],04
"R6Vegas2_Game.exe"+3CD5C4: C2 04 00 - ret 0004
"R6Vegas2_Game.exe"+3CD5C7: CC - int 3
"R6Vegas2_Game.exe"+3CD5C8: CC - int 3
"R6Vegas2_Game.exe"+3CD5C9: CC - int 3
"R6Vegas2_Game.exe"+3CD5CA: CC - int 3
"R6Vegas2_Game.exe"+3CD5CB: CC - int 3
"R6Vegas2_Game.exe"+3CD5CC: CC - int 3
"R6Vegas2_Game.exe"+3CD5CD: CC - int 3
"R6Vegas2_Game.exe"+3CD5CE: CC - int 3
}
15
"Health Drop THunt ("R6Vegas2_Game.exe"+8781C7)"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-08-11
Author : JJXB
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(HEALTHDROP,R6Vegas2_Game.exe,29 8E 54 03 00 00) // should be unique
alloc(newmem,$1000)
//if esi is less than 26000000 then do normal thing
//if esi is more than 26000000 then do if esi is less than 27000000
//if esi is less than 27000000 then nop
//if esi is more than 27000000 then do normal thing
label(code)
label(cmp1)
label(cmp2)
label(plynop)
label(return)
newmem:
cmp1:
cmp esi,2601BFFF
jg cmp2
jmp code
cmp2:
cmp esi,27000000
jl plynop
jmp code
plynop:
nop
jmp return
code:
sub [esi+00000354],ecx
jmp return
HEALTHDROP:
jmp cmp1
nop
return:
registersymbol(HEALTHDROP)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
HEALTHDROP:
db 29 8E 54 03 00 00
unregistersymbol(HEALTHDROP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+8781C7
"R6Vegas2_Game.exe"+8781B2: 50 - push eax
"R6Vegas2_Game.exe"+8781B3: 8B 44 24 60 - mov eax,[esp+60]
"R6Vegas2_Game.exe"+8781B7: 57 - push edi
"R6Vegas2_Game.exe"+8781B8: 51 - push ecx
"R6Vegas2_Game.exe"+8781B9: 53 - push ebx
"R6Vegas2_Game.exe"+8781BA: 52 - push edx
"R6Vegas2_Game.exe"+8781BB: 50 - push eax
"R6Vegas2_Game.exe"+8781BC: 8B CE - mov ecx,esi
"R6Vegas2_Game.exe"+8781BE: E8 8D 37 F9 FF - call R6Vegas2_Game.exe+80B950
"R6Vegas2_Game.exe"+8781C3: 8B 4C 24 10 - mov ecx,[esp+10]
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+8781C7: 29 8E 54 03 00 00 - sub [esi+00000354],ecx
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+8781CD: 68 C0 67 42 12 - push R6Vegas2_Game.exe+1B267C0
"R6Vegas2_Game.exe"+8781D2: 8B CF - mov ecx,edi
"R6Vegas2_Game.exe"+8781D4: E8 E7 7F 7E FF - call R6Vegas2_Game.exe+601C0
"R6Vegas2_Game.exe"+8781D9: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+8781DB: 74 14 - je R6Vegas2_Game.exe+8781F1
"R6Vegas2_Game.exe"+8781DD: 8B 96 60 01 00 00 - mov edx,[esi+00000160]
"R6Vegas2_Game.exe"+8781E3: 8B 86 64 01 00 00 - mov eax,[esi+00000164]
"R6Vegas2_Game.exe"+8781E9: 8B 8E 68 01 00 00 - mov ecx,[esi+00000168]
"R6Vegas2_Game.exe"+8781EF: EB 08 - jmp R6Vegas2_Game.exe+8781F9
"R6Vegas2_Game.exe"+8781F1: 8B 17 - mov edx,[edi]
}
22
"Health Drop SP ("R6Vegas2_Game.exe"+8781C7)"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-08-11
Author : JJXB
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(HEALTHDROP,R6Vegas2_Game.exe,29 8E 54 03 00 00) // should be unique
alloc(newmem,$1000)
//if esi is less than 26000000 then do normal thing
//if esi is more than 26000000 then do if esi is less than 27000000
//if esi is less than 27000000 then nop
//if esi is more than 27000000 then do normal thing
label(code)
label(cmp1)
label(cmp2)
label(plynop)
label(return)
newmem:
cmp1:
cmp esi,3873C000
jg cmp2
jmp code
cmp2:
cmp esi,38740000
jl plynop
jmp code
plynop:
nop
jmp return
code:
sub [esi+00000354],ecx
jmp return
HEALTHDROP:
jmp cmp1
nop
return:
registersymbol(HEALTHDROP)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
HEALTHDROP:
db 29 8E 54 03 00 00
unregistersymbol(HEALTHDROP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+8781C7
"R6Vegas2_Game.exe"+8781B2: 50 - push eax
"R6Vegas2_Game.exe"+8781B3: 8B 44 24 60 - mov eax,[esp+60]
"R6Vegas2_Game.exe"+8781B7: 57 - push edi
"R6Vegas2_Game.exe"+8781B8: 51 - push ecx
"R6Vegas2_Game.exe"+8781B9: 53 - push ebx
"R6Vegas2_Game.exe"+8781BA: 52 - push edx
"R6Vegas2_Game.exe"+8781BB: 50 - push eax
"R6Vegas2_Game.exe"+8781BC: 8B CE - mov ecx,esi
"R6Vegas2_Game.exe"+8781BE: E8 8D 37 F9 FF - call R6Vegas2_Game.exe+80B950
"R6Vegas2_Game.exe"+8781C3: 8B 4C 24 10 - mov ecx,[esp+10]
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+8781C7: 29 8E 54 03 00 00 - sub [esi+00000354],ecx
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+8781CD: 68 C0 67 42 12 - push R6Vegas2_Game.exe+1B267C0
"R6Vegas2_Game.exe"+8781D2: 8B CF - mov ecx,edi
"R6Vegas2_Game.exe"+8781D4: E8 E7 7F 7E FF - call R6Vegas2_Game.exe+601C0
"R6Vegas2_Game.exe"+8781D9: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+8781DB: 74 14 - je R6Vegas2_Game.exe+8781F1
"R6Vegas2_Game.exe"+8781DD: 8B 96 60 01 00 00 - mov edx,[esi+00000160]
"R6Vegas2_Game.exe"+8781E3: 8B 86 64 01 00 00 - mov eax,[esi+00000164]
"R6Vegas2_Game.exe"+8781E9: 8B 8E 68 01 00 00 - mov ecx,[esi+00000168]
"R6Vegas2_Game.exe"+8781EF: EB 08 - jmp R6Vegas2_Game.exe+8781F9
"R6Vegas2_Game.exe"+8781F1: 8B 17 - mov edx,[edi]
}
25
"Grenade Decrease ("R6Vegas2_Game.exe"+335787)"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-08-11
Author : JJXB
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(GREN,R6Vegas2_Game.exe,83 86 D0 02 00 00 FF) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
nop //add dword ptr [esi+000002D0],-01
jmp return
GREN:
jmp code
nop
nop
return:
registersymbol(GREN)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
GREN:
db 83 86 D0 02 00 00 FF
unregistersymbol(GREN)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+335787
"R6Vegas2_Game.exe"+335769: 8B 8E F0 00 00 00 - mov ecx,[esi+000000F0]
"R6Vegas2_Game.exe"+33576F: 85 C9 - test ecx,ecx
"R6Vegas2_Game.exe"+335771: 74 2E - je R6Vegas2_Game.exe+3357A1
"R6Vegas2_Game.exe"+335773: F6 41 4C 10 - test byte ptr [ecx+4C],10
"R6Vegas2_Game.exe"+335777: 74 0E - je R6Vegas2_Game.exe+335787
"R6Vegas2_Game.exe"+335779: 8B 01 - mov eax,[ecx]
"R6Vegas2_Game.exe"+33577B: 8B 90 B8 06 00 00 - mov edx,[eax+000006B8]
"R6Vegas2_Game.exe"+335781: FF D2 - call edx
"R6Vegas2_Game.exe"+335783: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+335785: 75 1A - jne R6Vegas2_Game.exe+3357A1
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+335787: 83 86 D0 02 00 00 FF - add dword ptr [esi+000002D0],-01
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+33578E: 8B 86 D0 02 00 00 - mov eax,[esi+000002D0]
"R6Vegas2_Game.exe"+335794: 8B 16 - mov edx,[esi]
"R6Vegas2_Game.exe"+335796: 50 - push eax
"R6Vegas2_Game.exe"+335797: 8B 82 40 06 00 00 - mov eax,[edx+00000640]
"R6Vegas2_Game.exe"+33579D: 8B CE - mov ecx,esi
"R6Vegas2_Game.exe"+33579F: FF D0 - call eax
"R6Vegas2_Game.exe"+3357A1: 8B 16 - mov edx,[esi]
"R6Vegas2_Game.exe"+3357A3: 8B 82 A4 06 00 00 - mov eax,[edx+000006A4]
"R6Vegas2_Game.exe"+3357A9: 8B CE - mov ecx,esi
"R6Vegas2_Game.exe"+3357AB: FF D0 - call eax
}
93
"ECX Latch - Use to find Camera Info"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-06
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(CamXWrite,R6Vegas2_Game.exe,CC 8B 91 68 03 00 00) // should be unique
alloc(newmem,$1000)
alloc(CXecx,16)
registersymbol(CXecx)
label(code)
label(return)
newmem:
code:
mov edx,[ecx+00000368]
push ecx
pop [CXecx]
jmp return
CamXWrite+01:
jmp code
nop
return:
registersymbol(CamXWrite)
[DISABLE]
CamXWrite+01:
db 8B 91 68 03 00 00
unregistersymbol(CamXWrite)
unregistersymbol(CXecx)
dealloc(CXecx)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+314970
"R6Vegas2_Game.exe"+31494B: 89 50 08 - mov [eax+08],edx
"R6Vegas2_Game.exe"+31494E: 8B 91 80 03 00 00 - mov edx,[ecx+00000380]
"R6Vegas2_Game.exe"+314954: 8B 44 24 08 - mov eax,[esp+08]
"R6Vegas2_Game.exe"+314958: 89 10 - mov [eax],edx
"R6Vegas2_Game.exe"+31495A: 8B 91 84 03 00 00 - mov edx,[ecx+00000384]
"R6Vegas2_Game.exe"+314960: 89 50 04 - mov [eax+04],edx
"R6Vegas2_Game.exe"+314963: 8B 89 88 03 00 00 - mov ecx,[ecx+00000388]
"R6Vegas2_Game.exe"+314969: 89 48 08 - mov [eax+08],ecx
"R6Vegas2_Game.exe"+31496C: C2 08 00 - ret 0008
"R6Vegas2_Game.exe"+31496F: CC - int 3
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+314970: 8B 91 68 03 00 00 - mov edx,[ecx+00000368]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+314976: 8B 44 24 04 - mov eax,[esp+04]
"R6Vegas2_Game.exe"+31497A: 89 10 - mov [eax],edx
"R6Vegas2_Game.exe"+31497C: 8B 91 6C 03 00 00 - mov edx,[ecx+0000036C]
"R6Vegas2_Game.exe"+314982: 89 50 04 - mov [eax+04],edx
"R6Vegas2_Game.exe"+314985: 8B 91 70 03 00 00 - mov edx,[ecx+00000370]
"R6Vegas2_Game.exe"+31498B: 89 50 08 - mov [eax+08],edx
"R6Vegas2_Game.exe"+31498E: 8B 81 8C 03 00 00 - mov eax,[ecx+0000038C]
"R6Vegas2_Game.exe"+314994: 8B 91 90 03 00 00 - mov edx,[ecx+00000390]
"R6Vegas2_Game.exe"+31499A: 03 81 80 03 00 00 - add eax,[ecx+00000380]
"R6Vegas2_Game.exe"+3149A0: 03 91 84 03 00 00 - add edx,[ecx+00000384]
}
94
"CXecx"
1
80000008
4 Bytes
CXecx
126
"No description"
80000008
Float
[CXecx]+294
125
"No description"
80000008
Float
[CXecx]+320
97
"Camera X"
80000008
Float
[CXecx]+368
101
"Camera Y"
80000008
Float
[CXecx]+36C
102
"Camera Z"
80000008
Float
[CXecx]+370
106
"Character X"
80000008
Float
[CXecx]+374
105
"Character Y"
80000008
Float
[CXecx]+378
104
"Character Z"
80000008
Float
[CXecx]+37C
119
"More Camera Stuff - Vert Angle?"
80000008
2 Bytes
[CXecx]+380
118
"More Camera Stuff - Horizontal Angle?"
80000008
2 Bytes
[CXecx]+384
117
"??"
80000008
4 Bytes
[CXecx]+388
116
"Camera Vert?"
80000008
2 Bytes
[CXecx]+38C
120
"Camera Horz"
80000008
2 Bytes
[CXecx]+390
121
"Lean Angle"
80000008
4 Bytes
[CXecx]+394
103
""FOV""
80000008
Float
[CXecx]+398
122
"No description"
80000008
4 Bytes
[CXecx]+39C
124
"No description"
80000008
Float
[CXecx]+3B8
123
"No description"
80000008
Float
[CXecx]+3CC
115
"??"
80000008
4 Bytes
[CXecx]+3D0
127
"--WIP--"
80000008
1
88
"Third Person WIP"
80000008
1
107
"RenderMov1"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(RenderMov1,R6Vegas2_Game.exe,89 84 BE 8C 02 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
mov [esi+edi*4+0000028C],eax
jmp return
RenderMov1:
jmp code
nop
nop
return:
registersymbol(RenderMov1)
[DISABLE]
RenderMov1:
db 89 84 BE 8C 02 00 00
unregistersymbol(RenderMov1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+766BD0
"R6Vegas2_Game.exe"+766BA8: 74 2D - je R6Vegas2_Game.exe+766BD7
"R6Vegas2_Game.exe"+766BAA: 8B 90 E8 00 00 00 - mov edx,[eax+000000E8]
"R6Vegas2_Game.exe"+766BB0: 89 94 BE 9C 02 00 00 - mov [esi+edi*4+0000029C],edx
"R6Vegas2_Game.exe"+766BB7: A1 C0 B7 1A 12 - mov eax,[R6Vegas2_Game.exe+18AB7C0]
"R6Vegas2_Game.exe"+766BBC: 89 84 BE 94 02 00 00 - mov [esi+edi*4+00000294],eax
"R6Vegas2_Game.exe"+766BC3: 8B 16 - mov edx,[esi]
"R6Vegas2_Game.exe"+766BC5: 8B 82 D8 01 00 00 - mov eax,[edx+000001D8]
"R6Vegas2_Game.exe"+766BCB: 53 - push ebx
"R6Vegas2_Game.exe"+766BCC: 8B CE - mov ecx,esi
"R6Vegas2_Game.exe"+766BCE: FF D0 - call eax
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+766BD0: 89 84 BE 8C 02 00 00 - mov [esi+edi*4+0000028C],eax
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+766BD7: 8B 46 40 - mov eax,[esi+40]
"R6Vegas2_Game.exe"+766BDA: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+766BDC: 74 14 - je R6Vegas2_Game.exe+766BF2
"R6Vegas2_Game.exe"+766BDE: F7 40 40 00 20 00 00 - test [eax+40],2000
"R6Vegas2_Game.exe"+766BE5: 74 0B - je R6Vegas2_Game.exe+766BF2
"R6Vegas2_Game.exe"+766BE7: BD 01 00 00 00 - mov ebp,00000001
"R6Vegas2_Game.exe"+766BEC: EB 06 - jmp R6Vegas2_Game.exe+766BF4
"R6Vegas2_Game.exe"+766BEE: 33 FF - xor edi,edi
"R6Vegas2_Game.exe"+766BF0: EB 8E - jmp R6Vegas2_Game.exe+766B80
"R6Vegas2_Game.exe"+766BF2: 33 ED - xor ebp,ebp
}
108
"RenderMov2?"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECTION_POINT,R6Vegas2_Game.exe,85 C0 74 27 8B 8C 24 9C 00 00 00 6A 04 6A 01 E8 BB) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
test eax,eax
je R6Vegas2_Game.DareObjectFactory::DareObjectFactory+B3C47C
mov ecx,[esp+0000009C]
jmp return
INJECTION_POINT:
jmp code
nop
nop
nop
nop
nop
nop
return:
registersymbol(INJECTION_POINT)
[DISABLE]
INJECTION_POINT:
db 85 C0 74 27 8B 8C 24 9C 00 00 00
unregistersymbol(INJECTION_POINT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+B3DB51
"R6Vegas2_Game.exe"+B3DB3A: DD D8 - fstp st(0)
"R6Vegas2_Game.exe"+B3DB3C: 73 3E - jae R6Vegas2_Game.exe+B3DB7C
"R6Vegas2_Game.exe"+B3DB3E: 8B 03 - mov eax,[ebx]
"R6Vegas2_Game.exe"+B3DB40: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+B3DB42: 74 11 - je R6Vegas2_Game.exe+B3DB55
"R6Vegas2_Game.exe"+B3DB44: 8B 17 - mov edx,[edi]
"R6Vegas2_Game.exe"+B3DB46: 50 - push eax
"R6Vegas2_Game.exe"+B3DB47: 8B 82 44 01 00 00 - mov eax,[edx+00000144]
"R6Vegas2_Game.exe"+B3DB4D: 8B CF - mov ecx,edi
"R6Vegas2_Game.exe"+B3DB4F: FF D0 - call eax
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+B3DB51: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+B3DB53: 74 27 - je R6Vegas2_Game.exe+B3DB7C
"R6Vegas2_Game.exe"+B3DB55: 8B 8C 24 9C 00 00 00 - mov ecx,[esp+0000009C]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+B3DB5C: 6A 04 - push 04
"R6Vegas2_Game.exe"+B3DB5E: 6A 01 - push 01
"R6Vegas2_Game.exe"+B3DB60: E8 BB D8 4D FF - call R6Vegas2_Game.exe+1B420
"R6Vegas2_Game.exe"+B3DB65: 8B 8C 24 9C 00 00 00 - mov ecx,[esp+0000009C]
"R6Vegas2_Game.exe"+B3DB6C: 8B 11 - mov edx,[ecx]
"R6Vegas2_Game.exe"+B3DB6E: 8D 04 82 - lea eax,[edx+eax*4]
"R6Vegas2_Game.exe"+B3DB71: 85 C0 - test eax,eax
"R6Vegas2_Game.exe"+B3DB73: 74 02 - je R6Vegas2_Game.exe+B3DB77
"R6Vegas2_Game.exe"+B3DB75: 89 38 - mov [eax],edi
"R6Vegas2_Game.exe"+B3DB77: BD 01 00 00 00 - mov ebp,00000001
}
61
"FOV Old WIP"
80000008
1
73
"FOV Mod - 29/08/2015"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version: ??
Date : 2015-08-15
Author : JJXB
This is a WIP FOV Modification Script
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(FOV2,R6Vegas2_Game.exe,D8 46 30 D9 5E 30 8B 4F) // should be unique
alloc(newmem,$1000)
alloc(newfov,16)
alloc(existfov,64)
label(code)
label(fovcmp)
label(fovcmp2)
label(fovchange)
label(fovchange2)
label(fovchange3)
label(fovchange4)
label(return)
registersymbol(newfov)
registersymbol(existfov)
newmem:
fovcmp: //first check
cmp [edi+30],(float)51
jg fovchange3
je fovchange2
jmp fovcmp2
fovcmp2:
cmp [edi+30],(float)49
jg fovchange3
jl fovchange
fovchange: //if anything below 51
mov [newfov],(float)0
jmp code
fovchange2: //if 51 - normal
mov [newfov],(float)18
jmp code
fovchange3: //if 51 - normal
mov [newfov],(float)6.995
jmp code
fovchange4:
//incase i need to add anything
jmp code
code:
//push [edi+30]
//pop [existfov]
fadd dword ptr [esi+30] //fadd dword ptr [esi+30]
fadd dword ptr [newfov]
fstp dword ptr [esi+30]
mov [newfov],(float)0
jmp return
FOV2:
jmp fovcmp
nop
return:
registersymbol(FOV2)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
FOV2:
db D8 46 30 D9 5E 30
unregistersymbol(FOV2)
unregistersymbol(newfov)
dealloc(newmem)
dealloc(newfov)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31F9BB
"R6Vegas2_Game.exe"+31F9B6: D9 47 30 - fld dword ptr [edi+30]
"R6Vegas2_Game.exe"+31F9B9: D8 C9 - fmul st(0),st(1)
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31F9BB: D8 46 30 - fadd dword ptr [esi+30]
"R6Vegas2_Game.exe"+31F9BE: D9 5E 30 - fstp dword ptr [esi+30]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31F9C1: 8B 4F 4C - mov ecx,[edi+4C]
}
74
"FOV 29/08/2015 - 12/09/2015 Modification"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version: ??
Date : 2015-08-15
Author : JJXB
This is a WIP FOV Modification Script
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(FOV2,R6Vegas2_Game.exe,D8 46 30 D9 5E 30 8B 4F) // should be unique
alloc(newmem,$1000)
alloc(newfov,16)
alloc(existfov,16)
label(code)
label(fovcmp)
label(fovcmp2)
label(fovchange)
label(fovchange2)
label(fovchange3)
label(fovchange4)
label(return)
registersymbol(newfov)
registersymbol(existfov)
newmem:
fovcmp: //first check
cmp [edi+30],(float)51
jg fovchange3
je fovchange3
jmp fovcmp2
fovcmp2:
cmp [edi+30],(float)49
jg fovchange3
jl fovchange
fovchange: //if anything below 51
mov [newfov],(float)0
jmp code
fovchange2: //if 49-50 - crouched normal
mov [newfov],(float)11.10
jmp code
fovchange3: //if 51 - normal
mov [newfov],(float)9.8
jmp code
fovchange4:
//incase i need to add anything
jmp code
code:
push [edi+30]
pop [existfov]
fadd dword ptr [esi+30] //fadd dword ptr [esi+30]
fadd dword ptr [newfov]
fstp dword ptr [esi+30]
mov [newfov],(float)0
jmp return
FOV2:
jmp fovcmp
nop
return:
registersymbol(FOV2)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
FOV2:
db D8 46 30 D9 5E 30
unregistersymbol(FOV2)
unregistersymbol(newfov)
unregistersymbol(existfov)
dealloc(newmem)
dealloc(newfov)
dealloc(existfov)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31F9BB
"R6Vegas2_Game.exe"+31F9B6: D9 47 30 - fld dword ptr [edi+30]
"R6Vegas2_Game.exe"+31F9B9: D8 C9 - fmul st(0),st(1)
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31F9BB: D8 46 30 - fadd dword ptr [esi+30]
"R6Vegas2_Game.exe"+31F9BE: D9 5E 30 - fstp dword ptr [esi+30]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31F9C1: 8B 4F 4C - mov ecx,[edi+4C]
}
65
"FOV Script - Zoom, Skewed, FOV Display - PreSplit"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-08-15
Author : JJXB
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(FOV2,R6Vegas2_Game.exe,D8 46 30 D9 5E 30 8B 4F) // should be unique
alloc(newmem,$1000)
alloc(newfov,64)
alloc(existfov,64)
registersymbol(newfov)
registersymbol(existfov)
label(code)
label(fovchange)
label(return)
newmem:
fovchange:
push [edi+30]
pop [existfov]
nop //mov [newfov],(float)09.8
jmp code
code:
fadd dword ptr [esi+30] //fadd dword ptr [esi+30]
fadd dword ptr [newfov]
fstp dword ptr [esi+30]
push [esi+30]
pop [existfov+32]
jmp return
FOV2:
jmp fovchange
nop
return:
registersymbol(FOV2)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
FOV2:
db D8 46 30 D9 5E 30
unregistersymbol(FOV2)
unregistersymbol(newfov)
unregistersymbol(existfov)
dealloc(newmem)
dealloc(newfov)
dealloc(existfov)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31F9BB
"R6Vegas2_Game.exe"+31F98A: D9 84 24 F4 00 00 00 - fld dword ptr [esp+000000F4]
"R6Vegas2_Game.exe"+31F991: D9 5C 24 18 - fstp dword ptr [esp+18]
"R6Vegas2_Game.exe"+31F995: D9 84 24 F8 00 00 00 - fld dword ptr [esp+000000F8]
"R6Vegas2_Game.exe"+31F99C: D9 5C 24 1C - fstp dword ptr [esp+1C]
"R6Vegas2_Game.exe"+31F9A0: D9 84 24 FC 00 00 00 - fld dword ptr [esp+000000FC]
"R6Vegas2_Game.exe"+31F9A7: D9 5C 24 20 - fstp dword ptr [esp+20]
"R6Vegas2_Game.exe"+31F9AB: D9 84 24 00 01 00 00 - fld dword ptr [esp+00000100]
"R6Vegas2_Game.exe"+31F9B2: D9 5C 24 24 - fstp dword ptr [esp+24]
"R6Vegas2_Game.exe"+31F9B6: D9 47 30 - fld dword ptr [edi+30]
"R6Vegas2_Game.exe"+31F9B9: D8 C9 - fmul st(0),st(1)
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31F9BB: D8 46 30 - fadd dword ptr [esi+30]
"R6Vegas2_Game.exe"+31F9BE: D9 5E 30 - fstp dword ptr [esi+30]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31F9C1: 8B 4F 4C - mov ecx,[edi+4C]
"R6Vegas2_Game.exe"+31F9C4: D9 44 24 64 - fld dword ptr [esp+64]
"R6Vegas2_Game.exe"+31F9C8: 83 C9 FE - or ecx,-02
"R6Vegas2_Game.exe"+31F9CB: 21 4E 4C - and [esi+4C],ecx
"R6Vegas2_Game.exe"+31F9CE: D9 C9 - fxch st(1)
"R6Vegas2_Game.exe"+31F9D0: 8B 47 54 - mov eax,[edi+54]
"R6Vegas2_Game.exe"+31F9D3: 8B 4E 54 - mov ecx,[esi+54]
"R6Vegas2_Game.exe"+31F9D6: 83 E0 01 - and eax,01
"R6Vegas2_Game.exe"+31F9D9: 0B C1 - or eax,ecx
"R6Vegas2_Game.exe"+31F9DB: 89 46 54 - mov [esi+54],eax
}
58
"NewFOV Multiplier (every +1 = +4 fov)"
80000008
Float
newfov
66
"FOV"
80000008
Float
existfov
75
"FOV"
80000008
Float
existfov+32
109
"FOVNew WIP"
80000008
1
113
"NFOV1"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(NFOV1,R6Vegas2_Game.exe,D9 5E 30 8B 4F 4C) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
fstp dword ptr [esi+30]
mov ecx,[edi+4C]
jmp return
NFOV1:
jmp code
nop
return:
registersymbol(NFOV1)
[DISABLE]
NFOV1:
db D9 5E 30 8B 4F 4C
unregistersymbol(NFOV1)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31F9BE
"R6Vegas2_Game.exe"+31F991: D9 5C 24 18 - fstp dword ptr [esp+18]
"R6Vegas2_Game.exe"+31F995: D9 84 24 F8 00 00 00 - fld dword ptr [esp+000000F8]
"R6Vegas2_Game.exe"+31F99C: D9 5C 24 1C - fstp dword ptr [esp+1C]
"R6Vegas2_Game.exe"+31F9A0: D9 84 24 FC 00 00 00 - fld dword ptr [esp+000000FC]
"R6Vegas2_Game.exe"+31F9A7: D9 5C 24 20 - fstp dword ptr [esp+20]
"R6Vegas2_Game.exe"+31F9AB: D9 84 24 00 01 00 00 - fld dword ptr [esp+00000100]
"R6Vegas2_Game.exe"+31F9B2: D9 5C 24 24 - fstp dword ptr [esp+24]
"R6Vegas2_Game.exe"+31F9B6: D9 47 30 - fld dword ptr [edi+30]
"R6Vegas2_Game.exe"+31F9B9: D8 C9 - fmul st(0),st(1)
"R6Vegas2_Game.exe"+31F9BB: D8 46 30 - fadd dword ptr [esi+30]
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31F9BE: D9 5E 30 - fstp dword ptr [esi+30]
"R6Vegas2_Game.exe"+31F9C1: 8B 4F 4C - mov ecx,[edi+4C]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31F9C4: D9 44 24 64 - fld dword ptr [esp+64]
"R6Vegas2_Game.exe"+31F9C8: 83 C9 FE - or ecx,-02
"R6Vegas2_Game.exe"+31F9CB: 21 4E 4C - and [esi+4C],ecx
"R6Vegas2_Game.exe"+31F9CE: D9 C9 - fxch st(1)
"R6Vegas2_Game.exe"+31F9D0: 8B 47 54 - mov eax,[edi+54]
"R6Vegas2_Game.exe"+31F9D3: 8B 4E 54 - mov ecx,[esi+54]
"R6Vegas2_Game.exe"+31F9D6: 83 E0 01 - and eax,01
"R6Vegas2_Game.exe"+31F9D9: 0B C1 - or eax,ecx
"R6Vegas2_Game.exe"+31F9DB: 89 46 54 - mov [esi+54],eax
"R6Vegas2_Game.exe"+31F9DE: 8B 4F 54 - mov ecx,[edi+54]
}
110
"NFOV2"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(NFOV2,R6Vegas2_Game.exe,8B B4 24 14 01 00 00 83 C4) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
mov esi,[esp+00000114]
jmp return
NFOV2:
jmp code
nop
nop
return:
registersymbol(NFOV2)
[DISABLE]
NFOV2:
db 8B B4 24 14 01 00 00
unregistersymbol(NFOV2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31F504
"R6Vegas2_Game.exe"+31F4EA: 8B DF - mov ebx,edi
"R6Vegas2_Game.exe"+31F4EC: EB 16 - jmp R6Vegas2_Game.exe+31F504
"R6Vegas2_Game.exe"+31F4EE: 8B 4D 68 - mov ecx,[ebp+68]
"R6Vegas2_Game.exe"+31F4F1: 6B F6 58 - imul esi,esi,58
"R6Vegas2_Game.exe"+31F4F4: 8D 45 68 - lea eax,[ebp+68]
"R6Vegas2_Game.exe"+31F4F7: 56 - push esi
"R6Vegas2_Game.exe"+31F4F8: 6A 00 - push 00
"R6Vegas2_Game.exe"+31F4FA: 51 - push ecx
"R6Vegas2_Game.exe"+31F4FB: 89 44 24 44 - mov [esp+44],eax
"R6Vegas2_Game.exe"+31F4FF: E8 62 4A A7 00 - call R6Vegas2_Game.exe+D93F66
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31F504: 8B B4 24 14 01 00 00 - mov esi,[esp+00000114]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31F50B: 83 C4 0C - add esp,0C
"R6Vegas2_Game.exe"+31F50E: 39 7D 5C - cmp [ebp+5C],edi
"R6Vegas2_Game.exe"+31F511: 89 7C 24 68 - mov [esp+68],edi
"R6Vegas2_Game.exe"+31F515: 0F 8E 08 05 00 00 - jng R6Vegas2_Game.exe+31FA23
"R6Vegas2_Game.exe"+31F51B: 33 DB - xor ebx,ebx
"R6Vegas2_Game.exe"+31F51D: 8D 49 00 - lea ecx,[ecx+00]
"R6Vegas2_Game.exe"+31F520: 8B 55 58 - mov edx,[ebp+58]
"R6Vegas2_Game.exe"+31F523: 83 7C 13 04 00 - cmp dword ptr [ebx+edx+04],00
"R6Vegas2_Game.exe"+31F528: F3 0F 10 44 13 08 - movss xmm0,[ebx+edx+08]
"R6Vegas2_Game.exe"+31F52E: 8D 04 13 - lea eax,[ebx+edx]
}
111
"NFOV3"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(NFOV3,R6Vegas2_Game.exe,FF 5E D9 44 24 10) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
pop esi
fld dword ptr [esp+10]
jmp return
NFOV3+01:
jmp code
return:
registersymbol(NFOV3)
[DISABLE]
NFOV3+01:
db 5E D9 44 24 10
unregistersymbol(NFOV3)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+3272B0
"R6Vegas2_Game.exe"+32728D: 0F 57 C0 - xorps xmm0,xmm0
"R6Vegas2_Game.exe"+327290: EB 08 - jmp R6Vegas2_Game.exe+32729A
"R6Vegas2_Game.exe"+327292: F3 0F 10 83 AC 00 00 00 - movss xmm0,[ebx+000000AC]
"R6Vegas2_Game.exe"+32729A: F3 0F 11 44 24 08 - movss [esp+08],xmm0
"R6Vegas2_Game.exe"+3272A0: D9 44 24 08 - fld dword ptr [esp+08]
"R6Vegas2_Game.exe"+3272A4: 51 - push ecx
"R6Vegas2_Game.exe"+3272A5: D9 1C 24 - fstp dword ptr [esp]
"R6Vegas2_Game.exe"+3272A8: 56 - push esi
"R6Vegas2_Game.exe"+3272A9: 8B CB - mov ecx,ebx
"R6Vegas2_Game.exe"+3272AB: E8 00 FE FF FF - call R6Vegas2_Game.exe+3270B0
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+3272B0: 5E - pop esi
"R6Vegas2_Game.exe"+3272B1: D9 44 24 10 - fld dword ptr [esp+10]
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+3272B5: 83 EC 08 - sub esp,08
"R6Vegas2_Game.exe"+3272B8: D9 5C 24 04 - fstp dword ptr [esp+04]
"R6Vegas2_Game.exe"+3272BC: 8B CB - mov ecx,ebx
"R6Vegas2_Game.exe"+3272BE: D9 44 24 14 - fld dword ptr [esp+14]
"R6Vegas2_Game.exe"+3272C2: D9 1C 24 - fstp dword ptr [esp]
"R6Vegas2_Game.exe"+3272C5: E8 26 6F FF FF - call R6Vegas2_Game.exe+31E1F0
"R6Vegas2_Game.exe"+3272CA: 5B - pop ebx
"R6Vegas2_Game.exe"+3272CB: 59 - pop ecx
"R6Vegas2_Game.exe"+3272CC: C2 08 00 - ret 0008
"R6Vegas2_Game.exe"+3272CF: CC - int 3
}
112
"NFOV4 (Multi Function?)"
80000008
Auto Assembler Script
{ Game : R6Vegas2_Game.exe
Version:
Date : 2015-10-07
Author : JJXB
This script does blah blah blah
}
[ENABLE]
aobscanmodule(NFOV4,R6Vegas2_Game.exe,83 C3 01 83 C7 10 3B 5E 5C 0F) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add ebx,01
add edi,10
jmp return
NFOV4:
jmp code
nop
return:
registersymbol(NFOV4)
[DISABLE]
NFOV4:
db 83 C3 01 83 C7 10
unregistersymbol(NFOV4)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "R6Vegas2_Game.exe"+31E027
"R6Vegas2_Game.exe"+31E003: 8B 4C 07 04 - mov ecx,[edi+eax+04]
"R6Vegas2_Game.exe"+31E007: 8B 11 - mov edx,[ecx]
"R6Vegas2_Game.exe"+31E009: 8B 82 CC 00 00 00 - mov eax,[edx+000000CC]
"R6Vegas2_Game.exe"+31E00F: D9 5C 24 10 - fstp dword ptr [esp+10]
"R6Vegas2_Game.exe"+31E013: 83 EC 08 - sub esp,08
"R6Vegas2_Game.exe"+31E016: D9 44 24 18 - fld dword ptr [esp+18]
"R6Vegas2_Game.exe"+31E01A: D9 5C 24 04 - fstp dword ptr [esp+04]
"R6Vegas2_Game.exe"+31E01E: D9 44 24 20 - fld dword ptr [esp+20]
"R6Vegas2_Game.exe"+31E022: D9 1C 24 - fstp dword ptr [esp]
"R6Vegas2_Game.exe"+31E025: FF D0 - call eax
// ---------- INJECTING HERE ----------
"R6Vegas2_Game.exe"+31E027: 83 C3 01 - add ebx,01
"R6Vegas2_Game.exe"+31E02A: 83 C7 10 - add edi,10
// ---------- DONE INJECTING ----------
"R6Vegas2_Game.exe"+31E02D: 3B 5E 5C - cmp ebx,[esi+5C]
"R6Vegas2_Game.exe"+31E030: 0F 8C 5F FF FF FF - jl R6Vegas2_Game.exe+31DF95
"R6Vegas2_Game.exe"+31E036: 8B 0D 90 8E 18 12 - mov ecx,[R6Vegas2_Game.exe+1888E90]
"R6Vegas2_Game.exe"+31E03C: 5F - pop edi
"R6Vegas2_Game.exe"+31E03D: 89 4E 54 - mov [esi+54],ecx
"R6Vegas2_Game.exe"+31E040: 5E - pop esi
"R6Vegas2_Game.exe"+31E041: 5B - pop ebx
"R6Vegas2_Game.exe"+31E042: 83 C4 08 - add esp,08
"R6Vegas2_Game.exe"+31E045: C2 08 00 - ret 0008
"R6Vegas2_Game.exe"+31E048: 8B 15 90 8E 18 12 - mov edx,[R6Vegas2_Game.exe+1888E90]
}
128
"--Other--"
80000008
1
60
"Storage"
80000008
1
26
"TMPAddr"
80000008
1
19
"InstAddresses"
80000008
1
20
"Ammo Decrease Instruction"
80000008
4 Bytes
"R6Vegas2_Game.exe"+3CD5B6
21
"Health Decrease Instruction"
80000008
4 Bytes
"R6Vegas2_Game.exe"+8781C7
17
"CameraNotes"
80000008
1
8
"Third Person Offline (LB) cheatcode XBXB LS LS YAYA RS RS"
80000008
1
18
"HealthNotes"
80000008
1
14
"Max Health = 84/89?"
80000008
1
YHC2
035A502D
bla
1A3A0000
cmd
1A3A0400
arg0
1A3A0410
arg1
1A3A0510
arg2
1A3A0610
result
1A3A0710
pipename
1A3A0720
TOOLDURA
034EB8D9
InvDropCode
7FF76436C5B1
BDropCode
7FF76439D536
HEALTHDEC
01469ED5
FOV7
10C14920
Optimal FOV Values:
Normal 51 - fadd 9.8 = 90.2
ACOG 16 - fadd 0 = 16
6X Scope 8.5 - fadd 0 = 8.5
ADS (with or without Reflex) 34.01699829 - fadd 0 = 34
Crouched ADS (with or without Reflex) 33.16657257 - fadd 0 = 34
Crouch 49 - fadd 10.11 = 90.2
Lean out (Crouch) 39 - fadd 4 = 70-80
Lean out (Not Crouched) 40 - fadd 4 = 67-77
---
On fadd ESI+30, FOV is stored in Extended FPU Reg.
51-49.73=1.27
-----
fld:
38FAA530
2BC4BD30
37192A30
38EE73B0
fadd:
2BC4BD30
37192A30
38EE73B0
298FEE98
fstp:
2BC4BD30
37192A30
38EE73B0
298FEE98