Scripts thread rebooted.

Posts 1–15 of 21 · Page 1 of 2

So here we start again - because previous thread has to many posts and didn't go where I wanted it to go. So I have three news - one good, two neutral's. First neutral news that I am still busy - and will not dig in Warframe till Jule 6. Honestly - I almost lost interest in this game. Right now - it doesn't have true MMO elements and its more looks like generic sci-fi shooter. Which is bad actually... At least for me.

And finally good news - after seeing how you update scripts with each update i decided that we need something more stable. CE have aobscan function which i tried and created two scripts: 2 hit kill and ammo. You can found both on gist github or here:

Code:

/*
   - Infinite Ammo v2 Auto Update One
   - MPGH
   - Made by Lepage. Based on nilath research and development.
*/
DEFINE(AMMO_COUNT,1000)
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

label(injectpoint)
registersymbol(injectpoint)
aobscan(ammo_opcodes,66 89 01 0F B7 C0 66 C1 C0 03 66 33 C1 BA B1 0F 00 00)

newmem:
mov ax, AMMO_COUNT

originalcode:
mov [ecx],ax
movzx eax,ax

exit:
jmp returnhere

ammo_opcodes:
injectpoint:
jmp newmem
nop
returnhere:

[DISABLE]
injectpoint:
mov [ecx],ax
movzx eax,ax

unregistersymbol(injectpoint)
dealloc(newmem)

Code:

/*
   - 2-3 hit kill Alpha v3.
   - BIG Thanks to MPGH members for constant help. You guys are the best.
   - IMPORTANT!!!!!! - Enable at mission start - disable at mission end. Script may be flawed so be careful.
   - MPGH
   - Made by Lepage. Based on nilath research and development.
   - OPCODES by Nightshadess.
*/
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

label(healthinjectpoint)
registersymbol(healthinjectpoint)
aobscan(health_opcodes,8B 11 33 D1 89 01 81 F2 B1 0F 44 2F C1 CA 03 C1 C0 03 33 C1 35 B1 0F 44 2F 89 01 35 7F 0D D3 12)
aobscan(health_func_ret,80 BB BD 04 00 00 00 66 0F 6E 46 40 0F 5B C0 F3 0F 58 83 20 09 00 00 F3 0F 11 83 20 09 00 00 74)

newmem:
originalcode:
mov edx,[ecx]
xor edx,ecx
pushfd
cmp [esp+1C], health_func_ret
jne exit
cmp eax, 5
jle exit
mov eax 3

exit:
popfd
mov [ecx],eax
jmp returnhere

health_opcodes:
healthinjectpoint:
jmp newmem
nop
returnhere:

[DISABLE]
healthinjectpoint:
db 8B 11 33 D1 89 01

unregistersymbol(healthinjectpoint)
dealloc(newmem)

Cheers.

how is this different from the other dudes?

Code:

/*
   - 2-3 hit kill Alpha v2.
   - BIG Thanks to MPGH members for constant help. You guys are the best.
   - Multiplayer status - UNKNOWN. I Suggest not use it there.
   - Shield hack currently in development.
   - IMPORTANT!!!!!! - Enable at mission start - disable at mission end. Script may be flawed so be careful.
   - MPGH
   - Original Made by Lepage. Based on nilath research and development.
   - Remade By Nightshadess, Credits to Lepage.
*/
[ENABLE]
AOBSCAN(AOB_HEALTH_OPCODE_ADDRESS,8B 11 33 D1 89 01 81 F2 B1 0F 44 2F C1 CA 03 C1 C0 03 33 C1 35 B1 0F 44)
AOBSCAN(AOB_NPC_HEALTH_FUNC_RET,80 BB BD 04 00 00 00 66 0F 6E 46 40 0F 5B C0 F3 0F 58 83 20 09 00 00 F3)
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(HEALTH_OPCODE_ADDRESS)

registersymbol(HEALTH_OPCODE_ADDRESS)

newmem:
originalcode:
mov edx,[ecx]
xor edx,ecx
pushfd
cmp [esp+1C], AOB_NPC_HEALTH_FUNC_RET
jne exit
cmp eax, 5
jle exit
mov eax 3

exit:
popfd
mov [ecx],eax
jmp returnhere

AOB_HEALTH_OPCODE_ADDRESS:
HEALTH_OPCODE_ADDRESS:
jmp newmem
nop
returnhere:

[DISABLE]
dealloc(newmem)
HEALTH_OPCODE_ADDRESS:
db 8B 11 33 D1 89 01
unregistersymbol(HEALTH_OPCODE_ADDRESS)

Originally Posted by Rampant_uterus

how is this different from the other dudes?

They're totally the same.
I t Lepage didn't have time to see all update script to see we already use aobscan in script

Btw, here the other aobscan code:

Shield:

Code:

/*
   - Shields Script v2.  !!!!YOU NEED TO ADJUST IT YOURSELF - CHANGE FLOAT VALUE IN CODE. I MARKED IT!!!!
   - !!!!!!!!DONT USE IT IN MULTIPLAYER YOU WILL GET BANNED!!!!!!!!
   - IMPORTANT!!!!!! - Enable at mission start - disable at mission end. Script may be flawed so be careful.
   - IMPORTANT!!!!!! - This script will not defend you against attack's that overpowers you shields.
   - MPGH
   - Made by Lepage. Based on nilath research and development.
   - Remade by Nightshadess. Credits to Lepage for his script.
*/
AOBSCAN(AOB_SHIELD_SET,F3 0F 11 22 8B 02 C1 C0 03)
AOBSCAN(AOB_SHIELD_ADDRESS_SET,F3 0F 10 81 14 0A 00 00 8D 81 14 0A 00 00)
[ENABLE]
ASSERT(AOB_SHIELD_SET,F3 0F 11 22 8B 02 C1 C0 03)
ASSERT(AOB_SHIELD_ADDRESS_SET,F3 0F 10 81 14 0A 00 00 8D 81 14 0A 00 00)
alloc(setShieldAddress,200)
alloc(setShields,200)
alloc(isShieldAddressDefined,4)
alloc(shieldAddress,4)

registersymbol(setShieldAddress)
registersymbol(setShields)
registersymbol(isShieldAddressDefined)
registersymbol(shieldAddress)

label(returnhere1)
label(originalcode1)
label(exit1)

label(returnhere2)
label(originalcode2)
label(exit2)

label(SHIELD_SET)
label(SHIELD_ADDRESS_SET)
registersymbol(SHIELD_SET)
registersymbol(SHIELD_ADDRESS_SET)

setShieldAddress:
pushfd
cmp [isShieldAddressDefined], 1
je originalcode1
push eax
mov eax, ecx
add eax, 00000A14
mov [shieldAddress], eax
mov eax, [ecx+00000A14]
mov [isShieldAddressDefined], 1
pop eax

originalcode1:
popfd
movss xmm0,[ecx+00000A14]

exit1:
jmp returnhere1

AOB_SHIELD_ADDRESS_SET:
SHIELD_ADDRESS_SET:
jmp setShieldAddress
nop
nop
nop
returnhere1:

setShields:
movss [edx],xmm4
pushfd
cmp edx, [shieldAddress]
jne originalcode2
mov [edx], (float)810

originalcode2:
popfd
mov eax,[edx]

exit2:
jmp returnhere2

AOB_SHIELD_SET:
SHIELD_SET:
jmp setShields
nop
returnhere2:

[DISABLE]
SHIELD_ADDRESS_SET:
movss xmm0,[ecx+00000A14]

SHIELD_SET:
movss [edx],xmm4
mov eax,[edx]

unregistersymbol(shieldAddress)
unregistersymbol(isShieldAddressDefined)
unregistersymbol(setShields)
unregistersymbol(setShieldAddress)
unregistersymbol(SHIELD_ADDRESS_SET)
unregistersymbol(SHIELD_SET)

Artifact Building Shield:

Code:

/*
   - Artifact Building Shield V1.  !!!!YOU NEED TO ADJUST IT YOURSELF - CHANGE THE VALUE IN CODE. I MARKED IT!!!!
   - !!!!!!!!DONT USE IT IN MULTIPLAYER YOU WILL GET BANNED!!!!!!!!
   - Made by Lepage. Based on nilath research and development.
   - Remade by Nightshadess. Credits to Lepage for his script.
   - IMPORTANT: ENABLE IT WHEN YOUR AT THE MISSION SELECTION MENU ! OR IT WILL NOT WORK !
*/
[ENABLE]
AOBSCAN(AOB_SHIELD_SET,F3 0F 11 22 8B 02 C1 C0 03 33 C2 35 B1 0F 44 2F 89 44 24 08 F3 0F 10 44) //F3 0F 11 22 8B 02 C1 C0 03 33 C2 35 B1 0F 44 2F 89 44 24 08 F3 0F 10 44
AOBSCAN(AOB_SHIELD_ADDRESS_SET,F3 0F 10 81 14 0A 00 00 8D 81 14 0A 00 00 F3 0F 11 04 24 33 04 24 35 B1) //F3 0F 10 81 14 0A 00 00 8D 81 14 0A 00 00 F3 0F 11 04 24 33 04 24 35 B1

alloc(setShieldAddress,200)
alloc(setShields,200)
alloc(isShieldAddressDefined,4)
alloc(shieldAddress,4)

registersymbol(setShieldAddress)
registersymbol(setShields)
registersymbol(isShieldAddressDefined)
registersymbol(shieldAddress)

label(returnhere1)
label(originalcode1)
label(exit1)

label(returnhere2)
label(originalcode2)
label(exit2)
label(SHIELD_SET)
label(SHIELD_ADDRESS_SET)

registersymbol(SHIELD_SET)
registersymbol(SHIELD_ADDRESS_SET)

setShieldAddress:
pushfd
cmp [isShieldAddressDefined], 1
je originalcode1
push eax
mov eax, ecx
add eax, 00000A14
mov [shieldAddress], eax
mov eax, [ecx+00000A14]
mov [isShieldAddressDefined], 1
pop eax

originalcode1:
popfd
movss xmm0,[ecx+00000A14]

exit1:
jmp returnhere1

AOB_SHIELD_ADDRESS_SET:
SHIELD_ADDRESS_SET:
jmp setShieldAddress
nop
nop
nop
returnhere1:

setShields:
movss [edx],xmm4
pushfd
cmp edx, [shieldAddress]
cmp byte ptr [edx],00 //!!!!!!! REMOVE THIS LINE IF YOU WANT TO KILL THE STALKER!!!!!!!!!!!
jne originalcode2
mov [edx], (float)810

originalcode2:
popfd
mov eax,[edx]

exit2:
jmp returnhere2

AOB_SHIELD_SET:
SHIELD_SET:
jmp setShields
nop
returnhere2:

[DISABLE]
SHIELD_ADDRESS_SET:
movss xmm0,[ecx+00000A14]

SHIELD_SET:
movss [edx],xmm4
mov eax,[edx]

unregistersymbol(shieldAddress)
unregistersymbol(isShieldAddressDefined)
unregistersymbol(setShields)
unregistersymbol(setShieldAddress)
unregistersymbol(SHIELD_SET)
unregistersymbol(SHIELD_ADDRESS_SET)

dealloc(shieldAddress)
dealloc(isShieldAddressDefined)
dealloc(setShields)
dealloc(setShieldAddress)

Infinite Energy:

Code:

/*
   - Energy script (Alpha). Activates when you use any ability if you have enough energy for it.
   - BIG Thanks to MPGH members for constant help. You guys are the best.
   - Multiplayer status - UNKNOWN. I Suggest not use it there.
   - You need to adjust one value by yourself.
   - IMPORTANT!!!!!! - Enable at mission start - disable at mission end. Script may be flawed so be careful.
   - MPGH
   - Original Made by Lepage. Based on nilath research and development.
   - Remade by Nightshadess, credits to lepage.
*/
[ENABLE]
AOBSCAN(AOB_GENERIC_FLOAT_FUNCTION_OPCODE,F3 0F 11 22 8B 02 C1 C0 03 33 C2 35 B1 0F 44 2F 89 44)//F3 0F 11 22 8B 02 C1 C0 03 33 C2 35 B1 0F 44 2F 89 44 24 08 F3 0F 10 44
AOBSCAN(AOB_PLAYER_ENERGY_FUNC_RET,8B 03 8B 08 8B 11 8B 82 58 03 00 00 FF D0 8B 0D)//F3 0F 11 22 8B 02 C1 C0 03 33 C2 35 B1 0F 44 2F 89 44 24 08 F3 0F 10 44

alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(GENERIC_FLOAT_FUNCTION_OPCODE)

registersymbol(GENERIC_FLOAT_FUNCTION_OPCODE)

newmem:
originalcode:
movss [edx],xmm4
pushfd
cmp [esp+8], AOB_PLAYER_ENERGY_FUNC_RET
jne exit
mov [edx], (float)105 //Change this value to your maximum energy.

exit:
popfd
mov eax,[edx]
jmp returnhere

AOB_GENERIC_FLOAT_FUNCTION_OPCODE:
GENERIC_FLOAT_FUNCTION_OPCODE:
jmp newmem
nop
returnhere:

[DISABLE]
GENERIC_FLOAT_FUNCTION_OPCODE:
movss [edx],xmm4
mov eax,[edx]

dealloc(newmem)
unregistersymbol(GENERIC_FLOAT_FUNCTION_OPCODE)

Infinite Stamina:

Code:

/*
   - Infinite Stamina
   - MPGH
   - Made by nilath
   - Updated by Nightshadess
*/
[ENABLE]
AOBSCAN(AOB_STAMINA,F3 0F 11 86 34 1F 00 00 5E 59 C2 04 00 CC CC 8A 81 44 1F 00 00 C3 CC CC)
alloc(newmem,512)
label(returnhere)
label(originalcode)
label(exit)
label(STAMINA)

registersymbol(STAMINA)
newmem:

originalcode:
//movss [esi+00001F34],xmm0 // F3 0F 11 86 34 1F 00 00 5E 59 C2 04 00 CC CC 8A 81 44 1F 00 00 C3 CC CC
mov [esi+00001EF4], (float)80       // Basic stamina is 80 (Float type)

exit:
jmp returnhere

AOB_STAMINA:
STAMINA:
jmp newmem
nop
nop
nop
returnhere:

[DISABLE]
dealloc(newmem)
STAMINA:
db F3 0F 11 86 34 1F 00 00 5E 59 C2 04 00 CC CC 8A 81 44 1F 00 00 C3 CC CC
unregistersymbol(STAMINA)

Originally Posted by whitegun

They're totally the same.
I t Lepage didn't have time to see all update script to see we already use aobscan in script

Btw, here the other aobscan code:

Lol, didnt check every post in that thread. Well no suprise's for now then =)

Omg again error with this script for artifact shield WHY LOL !?

How?

How to disable codes at the end??

Weapon xp script.Edit value under the comment line to adjust xp per kill.

Code:

/*
- EXP HACK
- MPGH
- Made by whitegun
 - Updated by nomercyboy
*/

[ENABLE]

aobscan(AOB_XP_HACK,8B 4C 24 0C 8B 51 08 8B F0 8B 41 04 48 03 D0 89 41 04 75 ** 8B 44 24 0C 50 E8 ** ** ** ** 83 C4 04 5F 8B C6 5E 5B 59 C3 8B )
alloc(new_expmem,2048)
label(return_exp)
label(original_expcode)
label(exit_exp)
label(EXP_HACK)
registersymbol(EXP_HACK)

new_expmem:
/* Change amount of EXP below in base16 (current at 10,000)*/
mov eax,0x10e1
original_expcode:
mov ecx,[esp+0C]
mov edx,[ecx+08]

exit_exp:
jmp return_exp

AOB_XP_HACK:
EXP_HACK:
jmp new_expmem
nop
nop
return_exp:

[DISABLE]
dealloc(new_expmem)
EXP_HACK:
mov ecx,[esp+0C]
mov edx,[ecx+08]
unregistersymbol(EXP_HACK)

Color hack aob:

Code:

89 10 8B 4E 04 89 48 04 83 7E 04 04 0F 8C 7D FD FF FF 8B 36 F6 46 05 03 0F 84 71 FD FF FF F6 47 05 04

Originally Posted by whitegun

Color hack aob:

Code:

89 10 8B 4E 04 89 48 04 83 7E 04 04 0F 8C 7D FD FF FF 8B 36 F6 46 05 03 0F 84 71 FD FF FF F6 47 05 04

unable to execute the script?

Originally Posted by boiiwonder

unable to execute the script?

You don't understand, the "aob" mean "Array of bytes". It is not a script.

Originally Posted by whitegun

Color hack aob:

Code:

89 10 8B 4E 04 89 48 04 83 7E 04 04 0F 8C 7D FD FF FF 8B 36 F6 46 05 03 0F 84 71 FD FF FF F6 47 05 04

Dude good thing you actually gave that, ppl can try to look up the address themselves now, instead of asking at the thread each time.

how to add the scripts in CE ?

Credits to whitegun.Aob for melee hack might need update for versions after 8.2.
Also if someone more experienced could add a check in melle script for dethcube it would be really nice.

Code:

/*
- MELEE HACK
- MPGH
- Made by whitegun
 - Updated by perfomance
*/

[ENABLE]


//code from here to '[DISABLE]' will be used to enable the cheat
aobscan(MELLE,8B 11 ** ** 89 01 81 ** ** ** ** ** ** ** 03 C1 C0 03 33 C1 35 B1 0F 44 2F 89 01 35 7F 0D D3 12 89 46 08 8B 06 83 C8 01 89 06 83 E0 FE 89 54 24 0C 74 08 B9 01 00 00 00 66 89 08 80 7E 1C 00 74 3B 53 8A 1D ** ** ** ** C6 05 ** ** ** ** 01 83 7E 0C 00 75 10 68 ** ** ** ** FF 15 ** ** ** ** 85 C0 74 01 CC 8B 4E 0C 8B 11 8B 52 10 8D 44 24 10 50 57 FF D2 88 1D ** ** ** ** 5B 5F 5E C2 04 00 CC CC CC CC CC CC CC CC CC CC CC CC CC CC 51 53 55 56 57 8B F1 E8 A4 91 FF FF)

alloc(newmem,2048) //2kb should be enough

label(returnhere)
label(originalcode)
label(exit)
label(MELLE_HACK)
registersymbol(MELLE_HACK)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
//cmp 
//je originalcode
mov eax, 00000000

originalcode:
mov edx,[ecx]
xor edx,ecx
mov [ecx],eax

exit:
jmp returnhere


MELLE:
MELLE_HACK:
jmp newmem
nop
returnhere:



 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)

MELLE_HACK:
mov edx,[ecx]
xor edx,ecx
mov [ecx],eax
unregistersymbol(MELLE_HACK)
//Alt: db 8B 11 33 D1 89 01

1.Open CE
2.Click Memory View button
3.Hit ctrl+a or navigate in Memory View window Tools->Auto Assemble
4.A window will open.Put your script there
5.In Auto Assemble window navigate File->Assign to current cheat table
6.Save the thing to a file so you don't have to do this every time.