v.39 Addresses

[Oninuva]

..::Scripts::..

CRC Bypass:
Code:

[ENABLE]
ALLOC(CRC,128)
ALLOC(DUMP,3670018)
LABEL(OLDMEM)
LABEL(RET)
LOADBINARY(DUMP,v39.CEM)

CRC:
CMP ECX,00400000
JB OLDMEM
CMP ECX,00780000
JA OLDMEM
MOV EAX,DUMP
ADD ECX, DUMP-400000

OLDMEM:
MOV EAX,[EBP+10]
DB 56 57
JMP RET

00465379: //8B 45 10 56 57 8B 7D 0C 83 FF 10 0F 82 91 01 00
JMP CRC
RET:

[DISABLE]
00465379: //8B 45 10 56 57 8B 7D 0C 83 FF 10 0F 82 91 01 00
MOV EAX,[EBP+10]
DB 56 57
DEALLOC(CRC)
DEALLOC(DUMP)

Tubi cheat:
Code:

[Enable]
49918A:
db 90 90
[Disable]
49918A:
DB 75 36

PIN Unradomizer:

Code:

[Enable]
alloc(pinunrandom,128)
label(returnhere)

006289d5:
jmp pinunrandom
returnhere:

pinunrandom:
add eax,edx
push edx
shr edx,1
mov [eax],edx
pop edx
cmp byte ptr [eax],ff
jmp returnhere
[Disable]
006289d5:
add eax,edx
cmp byte ptr [eax],0a

dealloc(pinunrandom)

Godmode:

Code:

[Enable]
683BA9:
db 0F 84
[Disable]
683BA9:
db 0f 85

Instant Drop:

Code:

[Enable]
771C68:
add [eax],al
add [eax],al
add [eax],al
add [eax],al
[Disable]
771C68:
add [eax],al
add [eax],al
add [eax-71],al
inc eax

Item Filter:
Code:

[ENABLE]
Alloc(filter,124)
label(ifreject)
label(end)
label(skip)
Alloc(iftable,16024)
label(ifexit)

filter:
push ebx
push esi
xor ebx, ebx
mov esi,iftable

ifreject:
cmp eax,[esi]
je skip
cmp [esi],ebx
je end
add esi,4
jmp ifreject

skip:
mov eax,00

end:
pop esi
pop ebx
mov [edi+34], eax
mov edi, [ebp-14]
jmp ifexit

iftable:
dd 00

4A197D:
jmp filter
nop
ifexit:
[Disable]
004A197D:
mov [edi+34], eax
mov edi, [ebp-14]

Lag cheat:
Code:

[enable]
006B89DF:
jne 006B89EC
[disable]
006B89DF:
je 006B89EC

Tele Right:

Code:

[enable]
006BB396:
db 77

[disable]
006BB396:
db 73

Tele Left

Code:

[enable]
006BB327:
db 72

[disable]
006BB327:
db 73

Tele Up:

Code:

[enable]
006BB427:
db 76

[disable]
006BB427:
db 75

Item Vac:

Code:

[enable]
alloc(ItemVac,128)
label(return)
ItemVac:
pushad
mov ecx,[ebp+8]
mov ebx,[ebp-24]
mov [ecx],ebx
mov [ecx+4],eax
mov ecx,eax
mov eax,ebx
lea edx,[eax-19]
mov [ebp-34],edx
lea edx,[ecx-32]
add eax,19
add ecx,A
mov [ebp-30],edx
mov [ebp-2C],eax
mov [ebp-28],ecx
popad
push eax
push [ebp-24]
lea eax,[ebp-34]
jmp return
004A07FE:
jmp ItemVac
nop
nop
return:
[disable]
004A07FE:
push eax
push [ebp-24]
lea eax,[ebp-34]
//push eax

Dupex:

Code:

[ENABLE]
alloc(CodeCave,32)
alloc(Pointer,32)
registersymbol(CodeCave)
registersymbol(Pointer)
label(ReturnHere)

CodeCave:
push ecx
mov ecx,Pointer
mov [ecx],esi
pop ecx
mov [esi+00000114],edi
jmp ReturnHere

006BB645:
jmp CodeCave
nop
ReturnHere:

[DISABLE]
006BB645:
mov [esi+00000114],edi

dealloc(CodeCave)
dealloc(Pointer)
unregistersymbol(CodeCave)
unregistersymbol(Pointer)

Swim:

Code:

[Enable]
00574C47:
db 74 04

[Disable]

00574C47:
db 75 04

Levitate:

Code:

[Enable]
006C7330:
jne 006C3BEE

[Disable]
006C7330:
je 006C3BEE

Swear cheat:

Code:

[Enable]
00458C98:
db 90 90
[Disable]
00458C98:
db 74 1c

Selective Wall Vac:

Code:

[ENABLE]
alloc(begin,2048)
alloc(olddata,32)
alloc(pointer,4)
alloc(bool,4)
registersymbol(bool)
registersymbol(olddata)
label(set)
label(ret)
label(end)

begin:
cmp [bool],1
je set
ret:
mov esi,olddata
movsd
movsd
movsd
movsd
pop edi
jmp end
set:
mov esi,[007D8224]
mov esi,[esi+0C]
mov [pointer], esi
mov esi,[pointer]
mov [olddata],esi
mov esi,[007D8224]
mov esi,[esi+10]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+04],esi
mov esi,[007D8224]
mov esi,[esi+14]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+08],esi
mov esi,[007D8224]
mov esi,[esi+18]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+0C],esi

mov [bool],0
jmp ret

006B4E23:
jmp begin
end:

olddata:
DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
pointer:
DB 00 00 00 00
bool:
DB 01 00 00 00

[DISABLE]
dealloc(begin)
dealloc(olddata)
dealloc(pointer)
dealloc(bool)

006B4E23:
movsd
movsd
movsd
movsd
pop edi

DICE Vac:

Code:

[enable]
alloc(dICE,64)
alloc(right,4)
alloc(left,4)
registersymbol(right)
registersymbol(left)
label(return)

dICE:
pushad

mov edx, [007d8DA0]
mov ebx, [edx+57c]
mov ecx,[edx+580]
add ebx, [right]
sub ebx, [left]

mov eax,[007D8224]
mov [eax+C],ebx
mov [eax+14],ebx
mov [eax+10],ecx
mov [eax+18],ecx
popad

mov [ebx], eax
mov edi,[ebp+10]
jmp return

right: //Set right to 0.
db 00 00

left: //Set left to 0.
db 00 00

006BC849:
jmp dICE
return:

006BF1AB:
db 0f 84

006B8C98:
db 75

006B8F34:
db 0f 85

[disable]
006BC849:
mov [ebx], eax
mov edi,[ebp+10]

006BF1AB:
db 0f 85

006B8C98:
db 74

006B8F34:
db 0f 84

dealloc(dICE)
dealloc(left)
dealloc(right)
unregistersymbol(left)
unregistersymbol(right)

PID00

Code:

[ENABLE]
alloc(DeletePlatform, 64)
label(DeleteId)
label(Normal)
label(ret)
alloc(pID00drag, 512)
alloc(Counter, 4)
label(SetWalls)
label(Default)
label(ret1)

006BF1AB:
je 006BF313

006B6606:
jne 006B67F9

006BB687:
jmp DeletePlatform
nop
ret:

DeletePlatform:
pushad
mov edx,[007D8CFC]
mov edx,[edx+5A0]
sub edx, C
cmp esi, edx
popad
jne DeleteId
jmp Normal

DeleteId:
mov [esi+110], 00
jmp ret

Normal:
mov [esi+110], edi
jmp ret

00604483:
jmp pID00drag
nop
ret1:

pID00drag:
cmp [Counter], 1
je SetWalls
jmp Default

SetWalls:
pushad
mov eax, [007D8DA0]
mov eax, [eax+57C]
sub eax, 35
mov ebx, [007D8DA0]
mov ebx, [ebx+580]

mov ecx, [007D8224]
mov [ecx+C], eax
mov [ecx+14], eax
mov [ecx+10], ebx
mov [ecx+18], ebx
popad
mov [Counter], 0
jmp Default

Default:
mov [ebx+0000057C], eax
jmp ret1

Counter:
DB 01 00 00 00

[DISABLE]
006BF1AB:
jne 006BF313

006B6606:
je 006B67F9

006BB687:
mov [esi+00000110], edi

00604483:
mov [ebx+0000057C], eax

dealloc(DeletePlatform)
dealloc(pID00drag)
dealloc(Counter)

Pervac:

Code:

[enable]
alloc(DeletePlatform,128)
alloc(DeleteId,54)
alloc(Normal,54)
alloc(perX,200)
alloc(perY,200)
label(returnx)
label(returny)
label(ret)

006BB687:
jmp DeletePlatform
nop
ret:

DeletePlatform:
pushad
mov edx,[007D8CFC]
mov edx,[edx+5A0]
sub edx, C
cmp esi, edx
popad
jne DeleteId
jmp Normal

DeleteId:
mov [esi+110], 00
jmp ret

Normal:
mov [esi+110], edi
jmp ret

perX:
// original opcodes
mov eax,[edi+0c]
push ebx
mov esi,ecx

push eax
mov eax,[7D8DA0]
mov eax,[eax+57C]
sub eax,1E
mov [edi+0c],eax
pop eax
jmp returnx

perY:
// original opcodes
push [ebx+10]
mov eax,[edi+10]

push eax
mov eax,[7D8DA0]
mov eax,[eax+580]
mov [edi+0c],eax
pop eax
jmp returny

6B51A6:
jmp perX
nop
returnx:

6B51CB:
jmp perY
nop
returny:

[disable]

6B51A6:
mov eax,[edi+0c]
push ebx
mov esi,ecx

6B51CB:
push [ebx+10]
mov eax,[edi+10]

006BB687:
mov [esi+00000110],edi
call 006b807a

Unrandomizer - STR:

Code:

[ENABLE]
0071DBCD:
mov eax,0
[DISABLE]
0071DBCD:
mov eax,ecx
shr eax,10

Unrandomizer - DEX:

Code:

[ENABLE]
0071DBCD:
mov eax,1
[DISABLE]
0071DBCD:
mov eax,ecx
shr eax,10

Unrandomizer - INT:

Code:

[ENABLE]
0071DBCD:
mov eax,2
[DISABLE]
0071DBCD:
mov eax,ecx
shr eax,10

Unrandomizer - LUK:

Code:

[ENABLE]
0071DBCD:
mov eax,3
[DISABLE]
0071DBCD:
mov eax,ecx
shr eax,10

Horse Vac:
Code:

[ENABLE]
alloc(DeletePlatform, 64)
label(DeleteId)
label(Normal)
label(ret)
alloc(HorseVac, 512)
alloc(Counter, 4)
label(SetWallCoord)
label(DogShed)
label(ret1)

006BF1AB: //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C
je 006BBB77

006B9DA2: //0F 84 ED 01 00 00 8B 8E 78 01 00 00 A1
jne 006b9f95

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00
jmp DeletePlatform
nop
ret:

DeletePlatform:
pushad
mov edx,[007DBDBC] // Pointer
mov edx,[edx+618] // pID offset
sub edx, C
cmp esi, edx
popad
jne DeleteId
jmp Normal

DeleteId:
mov [esi+110], 00
jmp ret

Normal:
mov [esi+110], edi
jmp ret

00604483: //89 83 7C 05 00 00 8D 45 E8 50 8D 45 EC 89 8B 80
jmp HorseVac
nop
ret1:

HorseVac:
cmp [Counter], 1
je SetWallCoord
jmp DogShed

SetWallCoord:
pushad
mov eax, [007DBDBC] // Pointer
mov eax, [eax+608] // Item X
sub eax, 37
mov ebx, [007DBDBC] // Pointer
mov ebx, [ebx+60C] // Item Y

mov ecx, [7DB2E4] // Pointer
mov [ecx+C], eax
mov [ecx+14], eax
mov [ecx+10], ebx
mov [ecx+18], ebx
popad
mov [Counter], 0
jmp DogShed

DogShed:
mov [ebx+00000608], eax // << i am no sure of this change to 57c if not work //
jmp ret1

Counter:
DB 01 00 00 00

006B9D8F: //DB 45 08 DC 0D 28 D9 76 00 DD 5D E8 E8 1B 37 FD // Finally updated , was hard
db 90 90 90
006B8C98: //74 05 E8 25 02 00 00 39 B3 60 01 00 00 74 07 8B
db 75
006B8F34: //0F 84 D0 00 00 00 FF B6 48 01 00 00 8D 86 40 01
db 0f 85

[Disable]
006B9D8F:
db db 45 08
006B8C98:
db 74
006B8F34:
db 0f 84

006BF1AB:
je 006BBB77

006B9DA2:
jne 006b9f95

006BB687:
mov [esi+00000110], edi

00604483:
mov [ebx+0000057c], eax

dealloc(DeletePlatform)
dealloc(HorseVac)
dealloc(Counter)

[Danieru]

Thanks
+ repz

[plozwarrior]

rawr.

[plozwarrior]

Nice oninuva +rep for u