v.38 Addresses

[Oninuva]

v.38 Addresses


CRC Script:
Code:

[enable] alloc(newmem,2048) alloc(blaaaa,3670018) label(originalcode) loadbinary(blaaaa,v38.CEM) newmem: cmp ecx,00400000 jb originalcode cmp ecx,00780000 ja originalcode mov eax,blaaaa sub eax,00400000 add ecx, eax originalcode: mov eax,[ebp+10] push esi push edi jmp 0046526D 00465268: jmp newmem [disable] 00465268: mov eax,[ebp+10] push esi push edi dealloc(newmem) dealloc(blaaaa)


Pin Unrandomizer:
Code:

[ENABLE] alloc(pinunrandom,128) label(returnhere) 00625489: jmp pinunrandom returnhere: pinunrandom: add eax,edx push edx shr edx,1 mov [eax],edx pop edx cmp byte ptr [eax],ff jmp returnhere [DISABLE] 00625489: add eax,edx cmp byte ptr [eax],0a dealloc(pinunrandom)


Godmode:
Code:

[ENABLE] 006803EC: je 0068133E [DISABLE] 006803EC: jne 0068133E


Super Tubi:
Code:

[enable] 00498DF5: nop nop [disable] 00498DF5: jne 00498e2d


No Breath:
Code:

[enable] 00667DF4: mov [esi+000002d0],0 [disable] 00667DF4: mov [esi+000002d0],00001388


Instant Drop:
Code:

[enable] 0076EC38: add [eax],al add [eax],al add [eax],al add [eax],al [disable] 0076EC38: add [eax],al add [eax],al add [eax-71],al inc eax


Swear cheat:
Code:

[Enable] 00458C6C: db 90 90 [Disable] 00458C6C: db 74 1c


Item Vac:
Code:

[enable] alloc(ItemVac,128) label(return) ItemVac: pushad mov ecx,[ebp+8] mov ebx,[ebp-24] mov [ecx],ebx mov [ecx+4],eax mov ecx,eax mov eax,ebx lea edx,[eax-19] mov [ebp-34],edx lea edx,[ecx-32] add eax,19 add ecx,A mov [ebp-30],edx mov [ebp-2C],eax mov [ebp-28],ecx popad push eax push [ebp-24] lea eax,[ebp-34] jmp return 4A01DF: jmp ItemVac nop nop return: [disable] 4A01DF: push eax push [ebp-24] lea eax,[ebp-34] //push eax


Selective Wall Vac:
Code:

[ENABLE] alloc(begin,2048) alloc(olddata,32) alloc(pointer,4) alloc(bool,4) registersymbol(bool) registersymbol(olddata) label(set) label(ret) label(end) begin: cmp [bool],1 je set ret: mov esi,olddata movsd movsd movsd movsd pop edi jmp end set: mov esi,[007D8224] mov esi,[esi+0C] mov [pointer], esi mov esi,[pointer] mov [olddata],esi mov esi,[007D8224] mov esi,[esi+10] mov [pointer], esi mov esi,[pointer] mov [olddata+04],esi mov esi,[007D8224] mov esi,[esi+14] mov [pointer], esi mov esi,[pointer] mov [olddata+08],esi mov esi,[007D8224] mov esi,[esi+18] mov [pointer], esi mov esi,[pointer] mov [olddata+0C],esi mov [bool],0 jmp ret 006B4E23: jmp begin end: olddata: DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 pointer: DB 00 00 00 00 bool: DB 01 00 00 00 [DISABLE] dealloc(begin) dealloc(olddata) dealloc(pointer) dealloc(bool) 006B4E23: movsd movsd movsd movsd pop edi


Mouse Controlled Dice Vac:
Code:

[enable] alloc(dICE,64) label(return) dICE: pushad mov edx, [007d4d88] // 00 00 00 00 00 00 00 00 00 00 mov edx, [edx+978] mov ebx, [edx+80] mov ecx, [edx+84] mov eax,[007d5214] // 00 00 00 00 00 00 00 00 00 00 mov [eax+C],ebx mov [eax+14],ebx mov [eax+10],ecx mov [eax+18],ecx popad mov [ebx], eax mov edi,[ebp+10] jmp return 006B621B: // 89 03 8B 7D 10 85 FF 74 5E FF jmp dICE return: 006B8B7D: // 0F 85 62 01 00 00 FF 77 30 83 db 0f 84 006B266A: // 74 05 E8 25 02 00 00 39 B3 60 db 75 006B2906: // 0F 84 D0 00 00 00 FF B6 48 01 db 0f 85 [disable] 006B621B: // 89 03 8B 7D 10 85 FF 74 5E FF mov [ebx], eax mov edi,[ebp+10] 006B8B7D: // 0F 85 62 01 00 00 FF 77 30 83 db 0f 85 006B266A: // 74 05 E8 25 02 00 00 39 B3 60 db 74 006B2906: // 0F 84 D0 00 00 00 FF B6 48 01 db 0f 84 dealloc(dICE)


Super Dice:
Code:

[ENABLE] alloc(SuperDICE,300) alloc(Right,4) alloc(Left,4) label(backToIt) registersymbol(Right) registersymbol(Left) label(Mreturn) alloc(Options,4) alloc(GetWallValues,88) alloc(NoVac,20) alloc(MesoDrop,24) alloc(MoveLeft,64) alloc(MoveRight,64) alloc(VacStart,4) alloc(Xcheck,44) alloc(Xcheck2,44) alloc(Xcheck3,44) alloc(RestoreJumping,44) alloc(RestoreRopeJump,44) label(ON) label(ON2) label(OFF) alloc(LeftWall,4) alloc(RightWall,4) alloc(TopWall,4) alloc(BottomWall,4) alloc(ResetWalls,88) alloc(Mouse,88) alloc(KeepOn,4) alloc(KeepSettingMouse,32) alloc(JustSetOnce,32) NoVac: push [ebx+00000548] push [ebx+00000544] jmp backToIt GetWallValues: pushad mov eax,[7d4214] mov ecx,[eax+C] mov [LeftWall],ecx mov ebx,[eax+14] mov [RightWall],ebx mov ecx,[eax+10] mov [TopWall],ecx mov ebx,[eax+18] mov [BottomWall],ebx mov [VacStart],0 mov [Options],A mov [right],0 mov [left],0 popad jmp SuperDICE ResetWalls: pushad mov eax,[7d4214] mov ecx,[LeftWall] mov [eax+C],ecx mov ebx,[RightWall] mov [eax+14],ebx mov ecx,[TopWall] mov [eax+10],ecx mov ebx,[BottomWall] mov [eax+18],ebx mov [VacStart],0 mov [Options],A mov [right],0 mov [left],0 popad jmp SuperDICE Mouse: pushad mov edx, [7d4360] mov edx, [edx+978] mov ebx, [edx+80] mov ecx, [edx+84] mov eax,[7d4214] mov [eax+C],ebx mov [eax+14],ebx mov [eax+10],ecx mov [eax+18],ecx popad cmp [KeepOn],01 je NoVac mov [Options],A jmp SuperDICE MesoDrop: mov [Options],eax cmp eax,[esi+000000b4] jmp Mreturn MoveRight: mov [left],0 add [right],32 mov [Options],F jmp SuperDICE MoveLeft: mov [right],0 add [left],32 mov [Options],F jmp SuperDICE KeepSettingMouse: mov [KeepOn],01 mov [Options],46 jmp Mouse JustSetOnce: mov [KeepOn],0 mov [Options],A jmp Mouse SuperDICE: cmp [VacStart],00 jne GetWallValues cmp [Options],A // 10 to stay in one spot je NoVac cmp [Options],14 // 20 to move left je MoveLeft cmp [Options],1E // 30 to move right je MoveRight cmp [Options],28 // 40 to reset walls to original values je ResetWalls // 50 to completely disable dice after resetting walls cmp [Options],3C // 60 to set vac to mouse pointer je JustSetOnce cmp [Options],46 // 70 to constantly set vac to mouse pointer je KeepSettingMouse cmp [Options],63 // 99 to get new wall values if you change map je GetWallValues mov edx,[ebx+00000548] //item Y mov ecx,[ebx+00000544] // item X push edx push ecx push [ebx+00000548] push [ebx+00000544] //Walls mov eax,[7d4214] pop ecx sub ecx,[left] add ecx,[right] mov [eax+C],ecx mov [eax+14],ecx pop edx mov [eax+10],edx mov [eax+18],edx jmp backToIt 006B1EBC: jmp MesoDrop nop Mreturn: 004339EA: jmp SuperDICE nop nop nop nop nop nop nop backToIt: VacStart: db 00 00 00 99 Options: db 00 00 00 00 Right: db 00 00 00 00 Left: db 00 00 00 00 KeepOn: db 00 00 00 00 Xcheck2: cmp [Options],32 je 006BBB77 jmp ON2 006BBA08: jmp Xcheck2 nop nop nop nop nop nop nop nop ON2: RestoreRopeJump: cmp eax,edi pop ecx pop ecx je 006B586E jmp ON Xcheck: cmp [Options],32 je RestoreRopeJump cmp eax,edi pop ecx pop ecx jne 006B586E jmp ON 006B5794: jmp Xcheck nop nop nop nop nop ON: RestoreJumping: cmp [ebx+00000158],esi push edi je 006B5503 jmp OFF Xcheck3: cmp [Options],32 je RestoreJumping cmp [ebx+00000158],esi push edi jne 006B5503 jmp OFF 006B54F5: jmp Xcheck3 nop nop nop nop OFF: [disable] 004339EA: push [ebx+00000548] push [ebx+00000544] 006B1EBC: cmp eax,[esi+000000b4] 006B54F5: cmp [ebx+00000158],esi push edi je 006B5503 006BBA08: cmp dword ptr [edi+00000220],03 jne 006BBB77 006B5794: cmp eax,edi pop ecx pop ecx je 006B586E dealloc(SuperDICE) dealloc(Right) dealloc(Left) unregistersymbol(Right) unregistersymbol(Left) dealloc(VacStart) dealloc(NoVac) dealloc(MesoDrop) dealloc(Options) dealloc(MoveLeft) dealloc(MoveRight) dealloc(LeftWall) dealloc(RightWall) dealloc(TopWall) dealloc(BottomWall) dealloc(ResetWalls) dealloc(Mouse) dealloc(Xcheck) dealloc(Xcheck2) dealloc(Xcheck3) dealloc(RestoreJumping) dealloc(RestoreRopeJump) dealloc(KeepOn) dealloc(KeepSettingMouse) dealloc(JustSetOnce)


Dice Vac:
Code:

[enable] alloc(dICE,64) alloc(right,4) alloc(left,4) registersymbol(right) registersymbol(left) label(return) dICE: pushad mov edx, [007d4d88] mov ebx, [edx+57c] mov ecx,[edx+580] add ebx, [right] sub ebx, [left] mov eax,[007d4214] mov [eax+C],ebx mov [eax+14],ebx mov [eax+10],ecx mov [eax+18],ecx popad mov [ebx], eax mov edi,[ebp+10] jmp return right: //Set right to 0. db 00 00 left: //Set left to 0. db 00 00 006B621B: jmp dICE return: 006B8B7D: db 0f 84 006B266A: db 75 006B2906: db 0f 85 [disable] 006B621B: mov [ebx], eax mov edi,[ebp+10] 006B8B7D: db 0f 85 006B266A: db 74 006B2906: db 0f 84 dealloc(dICE) dealloc(left) dealloc(right) unregistersymbol(left) unregistersymbol(right)


Mouse Vac:
Code:

[ENABLE] Alloc(MouserX,512) Alloc(MouserY,512) label(back) label(return) 006B90AD: jmp MouserX back: 006B9112: jmp MouserY return: MouserX: mov eax, [007d8370] mov eax, [eax+978] mov eax, [eax+80] mov [ebx], eax mov edi,[ebp+10] jmp back MouserY: mov eax, [007d8370] mov eax, [eax+978] mov eax, [eax+84] mov [edi], eax mov ebx,[ebp+14] jmp return [DISABLE] 006B90AD: mov [ebx], eax mov edi,[ebp+10] 006B9112: mov [edi],eax mov ebx,[ebp+14] dealloc(MouserX) dealloc(MouserY)


Lag cheat:
Code:

[enable] 006B23B1: jne 006B23BE [disable] 006B23B1: je 006B23BE


Teleport Left:
Code:

[enable] 006b7B8B: db 72 [disable] 006b7B8B: db 73


Teleport Right:
Code:

[enable] 006b7BFA: db 77 [disable] 006b7BFA: db 75


Teleport Up:
Code:

[enable] 006b7C8B: db 76 [disable] 006b7C8B: db 73


Levitate:
Code:

[Enable] 6B6606: jne 006b67f9 [Disable] 6B6606: je 006b67f9


Pap/Zak Vac:
Code:

[Enable] alloc(sseax, 20) label(exit) 006B51D2: jmp sseax nop nop nop exit: sseax: mov eax, faded mov [ebp+0c],eax call 0054aa4c jmp exit [Disable] 006B51D2: mov [ebp+0c],eax call 0054aa4c dealloc(sseax)


Shadow Partner:
Code:

[ENABLE] 006653A1: jne 0066584C [DISABLE] 006653A1: je 0066584C


Dug Dig
Code:

[enable] alloc(NoPlatform, 64) label(return) 006B7EEB: jmp NoPlatform nop return: NoPlatform: mov [esi+110], 00 jmp return 6b6532: jmp 006b653F [Disable] 6b6532: jae 006b6577 6B7EEB: mov [esi+00000110],edi dealloc(NoPlatform)


Dark Sight:
Code:

[ENABLE] 006674BC: je 006674C9 [DISABLE] 006674BC: jne 006674c9


Zero Vac:
Code:

[Enable] 00534760: db 75 15 [Disable] 00534760: db 74 15


Fall Through Floor
Code:

[enable] 006B6F1D: db 0f 83 [disable] 006B6F1D: db 0f 86


Item Filter:
Code:

[enable] Alloc(filter,124) label(ifreject) label(end) label(skip) Alloc(iftable,512) label(ifexit) filter: push ebx push esi xor ebx, ebx mov esi,iftable ifreject: cmp eax,[esi] je skip cmp [esi],ebx je end add esi,4 jmp ifreject skip: mov eax,00 end: pop esi pop ebx mov [edi+34], eax mov edi, [ebp-14] jmp ifexit iftable: dd 00 004A1381: jmp filter nop ifexit: [disable] 004A1381: mov [edi+34], eax mov edi, [ebp-14]


Unrandomizer STR:
Code:

[Enable] 0071A258: mov eax,0 [Disable] 0071A258: mov eax,00007fff


Unrandomizer DEX:
Code:

[Enable] 0071A258: mov eax,1 [Disable] 0071A258: mov eax,00007fff


Unrandomizer INT:
Code:

[Enable] 0071A258: mov eax,2 [Disable] 0071A258: mov eax,00007fff


Unrandomizer LUK:
Code:

[Enable] 0071A258: mov eax,3 [Disable] 0071A258: mov eax,00007fff


Unlimited Death
Code:

[Enable] 667db4: db 74 [Disable] 667dd0: db 77


Infinite Ladder
Code:

[Enable] 6C41B1: db 73 6C421B: db 73 [Disable] 6C41B1: db 7d 6C421B: db 7e


Scary cheat
Code:

[enable] 005357E1: jne 005358AB [disable] 005357E1: je 005358AB


Slow Dupex
Code:

[ENABLE] alloc(CodeCave,32) alloc(Pointer,32) registersymbol(CodeCave) registersymbol(Pointer) label(ReturnHere) CodeCave: push ecx mov ecx,Pointer mov [ecx],esi pop ecx mov [esi+00000114],edi jmp ReturnHere 006B7EAF: jmp CodeCave nop ReturnHere: [DISABLE] 006B7EAF: mov [esi+00000114],edi dealloc(CodeCave) dealloc(Pointer) unregistersymbol(CodeCave) unregistersymbol(Pointer)