SAMP ASM DUMP

samp.asm

[samp.dll+ADDR_SAMP_CHATMSG_PTR] + 11 = chatlog path
samp.dll+212A68 + 125 -> TimeStamp
samp.dll+2120E8 = DebugMode
samp.dll+212A6C + C = timestamp


See names through walls
samp.dll+86903 - 38 4A 2F              - cmp [edx+2F],cl
samp.dll+86906 - 74 4B                 - je samp.dll+86953
samp.dll+86908 - D9 40 14              - fld dword ptr [eax+14] // nop this
samp.dll+8690B - 51                    - push ecx
samp.dll+8690C - 6A 01                 - push 01
samp.dll+8690E - 51                    - push ecx
samp.dll+8690F - 51                    - push ecx
samp.dll+86910 - 6A 01                 - push 01
samp.dll+86912 - 83 EC 30              - sub esp,30
samp.dll+86915 - DD 5C 24 28           - fstp qword ptr [esp+28]
samp.dll+86919 - D9 40 10              - fld dword ptr [eax+10]
samp.dll+8691C - DD 5C 24 20           - fstp qword ptr [esp+20]
samp.dll+86920 - D9 40 0C              - fld dword ptr [eax+0C]
samp.dll+86923 - DD 5C 24 18           - fstp qword ptr [esp+18]
samp.dll+86927 - D9 05 7CEE6E05        - fld dword ptr [samp.dll+20EE7C]
samp.dll+8692D - DD 5C 24 10           - fstp qword ptr [esp+10]
samp.dll+86931 - D9 05 78EE6E05        - fld dword ptr [samp.dll+20EE78]
samp.dll+86937 - DD 5C 24 08           - fstp qword ptr [esp+08]
samp.dll+8693B - D9 05 74EE6E05        - fld dword ptr [samp.dll+20EE74]
samp.dll+86941 - DD 1C 24              - fstp qword ptr [esp]
samp.dll+86944 - 68 B4435B05           - push samp.dll+D43B4
samp.dll+86949 - E8 72C2FEFF           - call samp.dll+72BC0 // or nop this
...

See HP through walls
samp.dll+85803 - 38 4A 2F              - cmp [edx+2F],cl
samp.dll+85806 - 74 4B                 - je samp.dll+85853
samp.dll+85808 - D9 40 14              - fld dword ptr [eax+14] // nop this
samp.dll+8580B - 51                    - push ecx
samp.dll+8580C - 6A 01                 - push 01
samp.dll+8580E - 51                    - push ecx
samp.dll+8580F - 51                    - push ecx
samp.dll+85810 - 6A 01                 - push 01
samp.dll+85812 - 83 EC 30              - sub esp,30
samp.dll+85815 - DD 5C 24 28           - fstp qword ptr [esp+28]
samp.dll+85819 - D9 40 10              - fld dword ptr [eax+10]
samp.dll+8581C - DD 5C 24 20           - fstp qword ptr [esp+20]
samp.dll+85820 - D9 40 0C              - fld dword ptr [eax+0C]
samp.dll+85823 - DD 5C 24 18           - fstp qword ptr [esp+18]
samp.dll+85827 - D9 05 7CEE6E05        - fld dword ptr [samp.dll+20EE7C]
samp.dll+8582D - DD 5C 24 10           - fstp qword ptr [esp+10]
samp.dll+85831 - D9 05 78EE6E05        - fld dword ptr [samp.dll+20EE78]
samp.dll+85837 - DD 5C 24 08           - fstp qword ptr [esp+08]
samp.dll+8583B - D9 05 74EE6E05        - fld dword ptr [samp.dll+20EE74]
samp.dll+85841 - DD 1C 24              - fstp qword ptr [esp]
samp.dll+85844 - 68 B4435B05           - push samp.dll+D43B4
samp.dll+85849 - E8 72D3FEFF           - call samp.dll+72BC0 // or nop this
...

The Range of name
samp.dll+8573F - 8B 0D 802A7305        - mov ecx,[samp.dll+212A80]
samp.dll+85745 - 8B 91 D5030000        - mov edx,[ecx+000003D5]
samp.dll+8574B - D8 5A 27              - fcomp dword ptr [edx+27]
samp.dll+8574E - DFE0                  - fnstsw ax
samp.dll+85750 - F6 C4 41              - test ah,41
samp.dll+85753 - 0F8A 50010000         - jp samp.dll+858A9 // nop this
samp.dll+85759 - 80 7E 05 13           - cmp byte ptr [esi+05],13
samp.dll+8575D - 75 41                 - jne samp.dll+857A0
samp.dll+8575F - 8B 4E 0F              - mov ecx,[esi+0F]
samp.dll+85762 - 85 C9                 - test ecx,ecx
samp.dll+85764 - 74 3A                 - je samp.dll+857A0
samp.dll+85766 - E8 F529FFFF           - call samp.dll+78160
...

The Range of health
samp.dll+8683F - 8B 0D 802A7505        - mov ecx,[samp.dll+212A80]
samp.dll+86845 - 8B 91 D5030000        - mov edx,[ecx+000003D5]
samp.dll+8684B - D8 5A 27              - fcomp dword ptr [edx+27]
samp.dll+8684E - DFE0                  - fnstsw ax
samp.dll+86850 - F6 C4 41              - test ah,41
samp.dll+86853 - 0F8A 71010000         - jp samp.dll+869CA // nop this
samp.dll+86859 - 80 7E 05 13           - cmp byte ptr [esi+05],13
samp.dll+8685D - 75 41                 - jne samp.dll+868A0
samp.dll+8685F - 8B 4E 0F              - mov ecx,[esi+0F]
samp.dll+86862 - 85 C9                 - test ecx,ecx
samp.dll+86864 - 74 3A                 - je samp.dll+868A0
samp.dll+86866 - E8 F518FFFF           - call samp.dll+78160
...


Decimate-"sprinting time left"-routine
gta_sa.exe+20A5BA - D9 5E 18              - fstp dword ptr [esi+18] // nop this
gta_sa.exe+20A5BD - 83 C4 08              - add esp,08
gta_sa.exe+20A5C0 - B0 01                 - mov al,01
gta_sa.exe+20A5C2 - 5E                    - pop esi
gta_sa.exe+20A5C3 - C2 0800               - ret 0008


No-Recoil
gta_sa.exe+340676 - D9 58 2C              - fstp dword ptr [eax+2C] // nop this
gta_sa.exe+340679 - 8B 85 6C040000        - mov eax,[ebp+0000046C]
gta_sa.exe+34067F - F6 C4 01              - test ah,01
gta_sa.exe+340682 - 74 1A                 - je gta_sa.exe+34069E
gta_sa.exe+340684 - 8B 85 8C050000        - mov eax,[ebp+0000058C]
gta_sa.exe+34068A - 85 C0                 - test eax,eax
gta_sa.exe+34068C - 74 10                 - je gta_sa.exe+34069E
gta_sa.exe+34068E - F6 80 2D040000 04     - test byte ptr [eax+0000042D],04
gta_sa.exe+340695 - 75 07                 - jne gta_sa.exe+34069E
gta_sa.exe+340697 - A3 68CDB700           - mov [gta_sa.exe+77CD68],eax
gta_sa.exe+34069C - EB 29                 - jmp gta_sa.exe+3406C7
gta_sa.exe+34069E - 8B 85 FC000000        - mov eax,[ebp+000000FC]
gta_sa.exe+3406A4 - 85 C0                 - test eax,eax
gta_sa.exe+3406A6 - 74 19                 - je gta_sa.exe+3406C1
gta_sa.exe+3406A8 - 8A 48 36              - mov cl,[eax+36]
gta_sa.exe+3406AB - 80 E1 07              - and cl,07
gta_sa.exe+3406AE - 80 F9 02              - cmp cl,02
gta_sa.exe+3406B1 - 75 0E                 - jne gta_sa.exe+3406C1
gta_sa.exe+3406B3 - F6 80 2D040000 04     - test byte ptr [eax+0000042D],04
gta_sa.exe+3406BA - A3 68CDB700           - mov [gta_sa.exe+77CD68],eax
gta_sa.exe+3406BF - 74 06                 - je gta_sa.exe+3406C7
gta_sa.exe+3406C1 - 89 3D 68CDB700        - mov [gta_sa.exe+77CD68],edi
gta_sa.exe+3406C7 - 8D 54 24 10           - lea edx,[esp+10]
gta_sa.exe+3406CB - 52                    - push edx
gta_sa.exe+3406CC - 8D 44 24 3C           - lea eax,[esp+3C]
gta_sa.exe+3406D0 - 50                    - push eax
gta_sa.exe+3406D1 - C6 05 71CDB700 01     - mov byte ptr [gta_sa.exe+77CD71],01
gta_sa.exe+3406D8 - C6 05 70CDB700 01     - mov byte ptr [gta_sa.exe+77CD70],01
gta_sa.exe+3406DF - C6 05 6FCDB700 01     - mov byte ptr [gta_sa.exe+77CD6F],01


No-Recoil:

gta_sa.exe+34043F - D9 05 24868500        - fld dword ptr [gta_sa.exe+458624]
gta_sa.exe+340445 - EB 0F                 - jmp gta_sa.exe+340456
gta_sa.exe+340447 - D9 43 08              - fld dword ptr [ebx+08]
gta_sa.exe+34044A - D8 3D 14618D00        - fdivr dword ptr [gta_sa.exe+4D6114]
gta_sa.exe+340450 - D8 0D 3C8B8500        - fmul dword ptr [gta_sa.exe+458B3C] // nop this
gta_sa.exe+340456 - D8 4C 24 1C           - fmul dword ptr [esp+1C] //nop this
gta_sa.exe+34045A - 8B 85 80040000        - mov eax,[ebp+00000480]
gta_sa.exe+340460 - D8 48 2C              - fmul dword ptr [eax+2C] // nop this
gta_sa.exe+340463 - 66 A1 A8F1B600        - mov ax,[gta_sa.exe+76F1A8]
gta_sa.exe+340469 - 66 3D 3500            - cmp ax,0035
gta_sa.exe+34046D - D8 0D 10618D00        - fmul dword ptr [gta_sa.exe+4D6110]
gta_sa.exe+340473 - D9 5C 24 1C           - fstp dword ptr [esp+1C]
gta_sa.exe+340477 - 0F84 AE000000         - je gta_sa.exe+34052B



DecimateAmmoInClip
gta_sa.exe+3428B0 - 89 46 08              - mov [esi+08],eax // nop this for clip ammo
gta_sa.exe+3428B3 - 8B 46 0C              - mov eax,[esi+0C] // you may nop this for same effect like DecimateAmmoGeneral
gta_sa.exe+3428B6 - 85 C0                 - test eax,eax
gta_sa.exe+3428B8 - 7E 2F                 - jle gta_sa.exe+3428E9
gta_sa.exe+3428BA - 3D A8610000           - cmp eax,000061A8
gta_sa.exe+3428BF - 8A 44 24 60           - mov al,[esp+60]
gta_sa.exe+3428C3 - 7C 06                 - jnge gta_sa.exe+3428CB
gta_sa.exe+3428C5 - 84 C0                 - test al,al
gta_sa.exe+3428C7 - 74 20                 - je gta_sa.exe+3428E9
gta_sa.exe+3428C9 - EB 04                 - jmp gta_sa.exe+3428CF
gta_sa.exe+3428CB - 84 C0                 - test al,al
gta_sa.exe+3428CD - 74 17                 - je gta_sa.exe+3428E6
gta_sa.exe+3428CF - E8 0C69E1FF           - call gta_sa.exe+1591E0

DecimateAmmoGeneral
gta_sa.exe+3428D4 - D8 1D 28868500        - fcomp dword ptr [gta_sa.exe+458628]
gta_sa.exe+3428DA - DFE0                  - fnstsw ax
gta_sa.exe+3428DC - F6 C4 05              - test ah,05
gta_sa.exe+3428DF - 7B 05                 - jnp gta_sa.exe+3428E6
gta_sa.exe+3428E1 - 83 3E 28              - cmp dword ptr [esi],28
gta_sa.exe+3428E4 - 75 03                 - jne gta_sa.exe+3428E9
gta_sa.exe+3428E6 - FF 4E 0C              - dec [esi+0C] // nop this for general ammo
gta_sa.exe+3428E9 - 8B 46 08              - mov eax,[esi+08]
gta_sa.exe+3428EC - 85 C0                 - test eax,eax
gta_sa.exe+3428EE - C7 46 04 01000000     - mov [esi+04],00000001
gta_sa.exe+3428F5 - 0F85 B0000000         - jne gta_sa.exe+3429AB
gta_sa.exe+3428FB - 8B 46 0C              - mov eax,[esi+0C]


AntiFallFromBike:

original code:
gta_sa.exe+BA3B9 - 0F84 A6030000         - je gta_sa.exe+BA765

injected code:
gta_sa.exe+BA3B9 - E9 A7030000         - jmp gta_sa.exe+BA765
gta_sa.exe+BA3BE - 90                  - nop

complete original function:
gta_sa.exe+BA3B9 - 0F84 A6030000         - je gta_sa.exe+BA765 // change this to jmp
gta_sa.exe+BA3BF - 8B 16                 - mov edx,[esi]
gta_sa.exe+BA3C1 - 52                    - push edx
gta_sa.exe+BA3C2 - 8B CD                 - mov ecx,ebp
gta_sa.exe+BA3C4 - E8 975BFFFF           - call gta_sa.exe+AFF60


Enable CarName Rendering:

injected code:
gta_sa.exe+18FBE9 - E8 B2B2FFFF           - call gta_sa.exe+18AEA0


TogglePlayerControllable (return first and nop second byte):
gta_sa.exe+14A70 - 24 D9                 - and al,-27


Keep Cars on Fire (jmp every je instruction):
gta_sa.exe+2B3790 - 0F84 05040000         - je gta_sa.exe+2B3B9B
0x006B3790 E906040000

gta_sa.exe+2BEA1A - 0F84 F8000000         - je gta_sa.exe+2BEB18
0x6BEA1A E9F900000090

gta_sa.exe+2C6D3C - 0F84 03030000         - je gta_sa.exe+2C7045
0x6C6D3C E90403000090

gta_sa.exe+2CCCFD - 0F84 7C030000         - je gta_sa.exe+2CD07F
0x6CCCFD E97D03000090

gta_sa.exe+2F21D5 - 0F84 56030000         - je gta_sa.exe+2F2531
0x6F21D5 E95703000090

Sprint on any surface:
0x0055E870 B800000000 C20400

00439600 givejetpack func

0x439D80 blowallcars


gta_sa.exe+4AFA4 PNS Func

Decimate HP by weapon:


gta_sa.exe+B330E - D9 86 40050000        - fld dword ptr [esi+00000540]
gta_sa.exe+B3314 - D8 65 04              - fsub dword ptr [ebp+04] // nop this
gta_sa.exe+B3317 - D9 5C 24 14           - fstp dword ptr [esp+14]
gta_sa.exe+B331B - 8B 54 24 14           - mov edx,[esp+14]
gta_sa.exe+B331F - 89 96 40050000        - mov [esi+00000540],edx
gta_sa.exe+B3325 - 74 74                 - je gta_sa.exe+B339B
gta_sa.exe+B3327 - 83 7D 0C 35           - cmp dword ptr [ebp+0C],35



Decimate HP 2:

samp.dll+6DC60 - 8B 81 A4020000        - mov eax,[ecx+000002A4]
samp.dll+6DC66 - 85 C0                 - test eax,eax
samp.dll+6DC68 - 74 0A                 - je samp.dll+6DC74
samp.dll+6DC6A - 8B 4C 24 04           - mov ecx,[esp+04]
samp.dll+6DC6E - 89 88 40050000        - mov [eax+00000540],ecx // nop that
samp.dll+6DC74 - C2 0400               - ret 0004


decimate hp by fall:

gta_sa.exe+B338A - 88 4F 08              - mov [edi+08],cl
gta_sa.exe+B338D - 8B 86 40050000        - mov eax,[esi+00000540]
gta_sa.exe+B3393 - 89 07                 - mov [edi],eax
gta_sa.exe+B3395 - 89 9E 40050000        - mov [esi+00000540],ebx // this
gta_sa.exe+B339B - 5F                    - pop edi
gta_sa.exe+B339C - 5E                    - pop esi
gta_sa.exe+B339D - 5D                    - pop ebp
gta_sa.exe+B339E - 5B                    - pop ebx
gta_sa.exe+B339F - C2 0C00               - ret 000C


gta_sa.exe+23758E - 8B CF                 - mov ecx,edi
gta_sa.exe+237590 - C7 87 40050000 00000000 - mov [edi+00000540],00000000 // this
gta_sa.exe+23759A - E8 7177FAFF           - call gta_sa.exe+1DED10
gta_sa.exe+23759F - 8B 0D 84CBB700        - mov ecx,[gta_sa.exe+77CB84]
gta_sa.exe+2375A5 - 89 8F 50070000        - mov [edi+00000750],ecx
gta_sa.exe+2375AB - 5F                    - pop edi
gta_sa.exe+2375AC - 5E                    - pop esi
gta_sa.exe+2375AD - C2 0400               - ret 0004


samp.dll+6DC60 - 8B 81 A4020000        - mov eax,[ecx+000002A4]
samp.dll+6DC66 - 85 C0                 - test eax,eax
samp.dll+6DC68 - 74 0A                 - je samp.dll+6DC74
samp.dll+6DC6A - 8B 4C 24 04           - mov ecx,[esp+04]
samp.dll+6DC6E - 89 88 40050000        - mov [eax+00000540],ecx // this
samp.dll+6DC74 - C2 0400               - ret 0004

gta_sa.exe+2306F7 - 85 C0                 - test eax,eax
gta_sa.exe+2306F9 - 75 07                 - jne gta_sa.exe+230702
gta_sa.exe+2306FB - 84 DB                 - test bl,bl
gta_sa.exe+2306FD - 75 03                 - jne gta_sa.exe+230702
gta_sa.exe+2306FF - 21 7E 1C              - and [esi+1C],edi
gta_sa.exe+230702 - 0FBE 8E 18070000      - movsx ecx,byte ptr [esi+00000718]
gta_sa.exe+230709 - 6B C9 1C              - imul ecx,ecx,1C
gta_sa.exe+23070C - C7 86 40050000 00000000 - mov [esi+00000540],00000000 // this
gta_sa.exe+230716 - 8B 84 31 A0050000     - mov eax,[ecx+esi+000005A0]
gta_sa.exe+23071D - 6A 01                 - push 01
gta_sa.exe+23071F - 50                    - push eax
gta_sa.exe+230720 - E8 3B351100           - call gta_sa.exe+343C60




gta_sa.exe+420F8 - 89 56 40              - mov [esi+40],edx
gta_sa.exe+420FB - 89 9E 48050000        - mov [esi+00000548],ebx
gta_sa.exe+42101 - D9 9E 40050000        - fstp dword ptr [esi+00000540] // this
gta_sa.exe+42107 - 89 46 1C              - mov [esi+1C],eax
gta_sa.exe+4210A - 89 9E 50070000        - mov [esi+00000750],ebx
gta_sa.exe+42110 - 81 E7 FFFFFFEF        - and edi,EFFFFFFF
gta_sa.exe+42116 - 89 BE 6C040000        - mov [esi+0000046C],edi
gta_sa.exe+4211C - 88 59 40              - mov [ecx+40],bl
gta_sa.exe+4211F - 8B 96 80040000        - mov edx,[esi+00000480]
gta_sa.exe+42125 - 88 5A 41              - mov [edx+41],bl
gta_sa.exe+42128 - E8 53B62D00           - call gta_sa.exe+31D780



gta_sa.exe+B32F9 - F6 C4 01              - test ah,01
gta_sa.exe+B32FC - 0F85 88000000         - jne gta_sa.exe+B338A
gta_sa.exe+B3302 - 38 5C 24 1C           - cmp [esp+1C],bl
gta_sa.exe+B3306 - 88 5F 08              - mov [edi+08],bl
gta_sa.exe+B3309 - 8B 4D 04              - mov ecx,[ebp+04]
gta_sa.exe+B330C - 89 0F                 - mov [edi],ecx
gta_sa.exe+B330E - D9 86 40050000        - fld dword ptr [esi+00000540]
gta_sa.exe+B3314 - D8 65 04              - fsub dword ptr [ebp+04]
gta_sa.exe+B3317 - D9 5C 24 14           - fstp dword ptr [esp+14]
gta_sa.exe+B331B - 8B 54 24 14           - mov edx,[esp+14]
gta_sa.exe+B331F - 89 96 40050000        - mov [esi+00000540],edx // this



DL Func
samp.dll+7B5C0 - A0 A02A8C05           - mov ax,[samp.dll+212AA0]
samp.dll+7B5C5 - 84 C0                 - test al,al
samp.dll+7B5C7 - 0F94 C0               - sete al
samp.dll+7B5CA - A2 A02A8C05           - mov byte ptr [samp.dll+212AA0],al
samp.dll+7B5CF - C3                    - ret

DL Func 2

samp.dll+86BCA - 8B 0D 782A8C05        - mov ecx,[samp.dll+212A78]
samp.dll+86BD0 - 85 C9                 - test ecx,ecx
samp.dll+86BD2 - 74 05                 - je samp.dll+86BD9
samp.dll+86BD4 - E8 7728FFFF           - call samp.dll+79450
samp.dll+86BD9 - A0 A02A8C05           - mov ax,[samp.dll+212AA0]
samp.dll+86BDE - 84 C0                 - test al,al
samp.dll+86BE0 - 0F84 78010000         - je samp.dll+86D5E // ac changes this to jmp
samp.dll+86BE6 - 8B 0D 482A8C05        - mov ecx,[samp.dll+212A48]
samp.dll+86BEC - 85 C9                 - test ecx,ecx
samp.dll+86BEE - 74 05                 - je samp.dll+86BF5
samp.dll+86BF0 - E8 2B6AFFFF           - call samp.dll+7D620
samp.dll+86BF5 - 33 C0                 - xor eax,eax


AC RGN SET DL ANZEIGE TO 0 -> 5E7A58CE


push ebp
mov ebp,esp
push ecx
mov [ebp-04],ecx
mov eax,[ebp-04]
cmp dword ptr [eax],00
jne 5E7A58C3
xor al,al
jmp 5E7A58D2
mov ecx,[ebp-04]
mov edx,[ecx]
mov eax,[edx+01]
mov cl,[ebp+08]





start engine?

samp.dll+78560 - 8B 44 24 04           - mov eax,[esp+04]
samp.dll+78564 - 89 41 50              - mov [ecx+50],eax
samp.dll+78567 - C2 0400               - ret 0004