344
"============== Combat ============"
FF0000
1
144
"Invulnerability"
Auto Assembler Script
{
Possible locations to dissect between group and enemies:
+200 == 0 => we
+2b8 == 0 => we
+74 == 0 => enemies
+7c == 0 => enemies
+8c == 0 => enemies
+94 == 0 => enemies
+408 >= 40000000 => enemies (current xp)
+40c >= 40000000 => enemies (xp for lvl up)
}
[ENABLE]
aobscanmodule(health,Operencia-Win64-Shipping.exe,F3 0F 11 83 38 03 00 00 44) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+4D2799)
label(code)
label(return)
label(onehit)
label(onehit_on)
newmem:
cmp [rbx+00000408],40000000
jge onehit // more than 0x40000000 XP? => enemy
jmp return // otherwise, get out here
onehit:
cmp byte ptr [onehit_on],1
jne code
PXOR xmm0, xmm0 // zero remaining hitpoints for you!
code:
movss [rbx+00000338],xmm0
jmp return
onehit_on:
db 0
health:
jmp newmem
nop 3
return:
registersymbol(health)
registersymbol(onehit_on)
[DISABLE]
health:
db F3 0F 11 83 38 03 00 00
unregistersymbol(onehit_on)
unregistersymbol(health)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+4D2799
"Operencia-Win64-Shipping.exe"+4D277B: 41 D1 FC - sar r12d,1
"Operencia-Win64-Shipping.exe"+4D277E: 85 C0 - test eax,eax
"Operencia-Win64-Shipping.exe"+4D2780: 79 05 - jns Operencia-Win64-Shipping.exe+4D2787
"Operencia-Win64-Shipping.exe"+4D2782: 45 8B E6 - mov r12d,r14d
"Operencia-Win64-Shipping.exe"+4D2785: EB 07 - jmp Operencia-Win64-Shipping.exe+4D278E
"Operencia-Win64-Shipping.exe"+4D2787: 41 3B C4 - cmp eax,r12d
"Operencia-Win64-Shipping.exe"+4D278A: 44 0F 4C E0 - cmovl r12d,eax
"Operencia-Win64-Shipping.exe"+4D278E: 66 41 0F 6E C4 - movd xmm0,r12d
"Operencia-Win64-Shipping.exe"+4D2793: 45 8B EC - mov r13d,r12d
"Operencia-Win64-Shipping.exe"+4D2796: 0F 5B C0 - cvtdq2ps xmm0,xmm0
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+4D2799: F3 0F 11 83 38 03 00 00 - movss [rbx+00000338],xmm0
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+4D27A1: 44 2B E9 - sub r13d,ecx
"Operencia-Win64-Shipping.exe"+4D27A4: 0F 84 B0 03 00 00 - je Operencia-Win64-Shipping.exe+4D2B5A
"Operencia-Win64-Shipping.exe"+4D27AA: 48 89 B4 24 40 01 00 00 - mov [rsp+00000140],rsi
"Operencia-Win64-Shipping.exe"+4D27B2: 48 89 BC 24 F8 00 00 00 - mov [rsp+000000F8],rdi
"Operencia-Win64-Shipping.exe"+4D27BA: 4C 89 BC 24 F0 00 00 00 - mov [rsp+000000F0],r15
"Operencia-Win64-Shipping.exe"+4D27C2: 45 85 ED - test r13d,r13d
"Operencia-Win64-Shipping.exe"+4D27C5: 0F 8E C1 02 00 00 - jng Operencia-Win64-Shipping.exe+4D2A8C
"Operencia-Win64-Shipping.exe"+4D27CB: 41 B8 01 00 00 00 - mov r8d,00000001
"Operencia-Win64-Shipping.exe"+4D27D1: 48 8D 15 30 EE 05 02 - lea rdx,[Operencia-Win64-Shipping.exe+2531608]
"Operencia-Win64-Shipping.exe"+4D27D8: 48 8D 4C 24 38 - lea rcx,[rsp+38]
}
227
"One-Hit-Kill"
Auto Assembler Script
[ENABLE]
onehit_on:
db 1
[DISABLE]
onehit_on:
db 0
226
"No Cooldown on Abilities"
Auto Assembler Script
[ENABLE]
aobscanmodule(cooldown,Operencia-Win64-Shipping.exe,89 84 F7 00 01 00 00) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+4D3514)
label(code)
label(return)
newmem:
mov [rdi+rsi*8+00000100],0
code:
// mov [rdi+rsi*8+00000100],eax
jmp return
cooldown:
jmp newmem
nop 2
return:
registersymbol(cooldown)
[DISABLE]
cooldown:
db 89 84 F7 00 01 00 00
unregistersymbol(cooldown)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+4D3514
"Operencia-Win64-Shipping.exe"+4D34F7: F3 0F 2D C1 - cvtss2si eax,xmm1
"Operencia-Win64-Shipping.exe"+4D34FB: D1 F8 - sar eax,1
"Operencia-Win64-Shipping.exe"+4D34FD: 2B C8 - sub ecx,eax
"Operencia-Win64-Shipping.exe"+4D34FF: F3 0F 2D C3 - cvtss2si eax,xmm3
"Operencia-Win64-Shipping.exe"+4D3503: D1 F8 - sar eax,1
"Operencia-Win64-Shipping.exe"+4D3505: 2B C8 - sub ecx,eax
"Operencia-Win64-Shipping.exe"+4D3507: B8 01 00 00 00 - mov eax,00000001
"Operencia-Win64-Shipping.exe"+4D350C: 3B C8 - cmp ecx,eax
"Operencia-Win64-Shipping.exe"+4D350E: 0F 4E C8 - cmovle ecx,eax
"Operencia-Win64-Shipping.exe"+4D3511: 8D 41 01 - lea eax,[rcx+01]
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+4D3514: 89 84 F7 00 01 00 00 - mov [rdi+rsi*8+00000100],eax
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+4D351B: 8B 43 7C - mov eax,[rbx+7C]
"Operencia-Win64-Shipping.exe"+4D351E: 89 43 2C - mov [rbx+2C],eax
"Operencia-Win64-Shipping.exe"+4D3521: 45 8B 36 - mov r14d,[r14]
"Operencia-Win64-Shipping.exe"+4D3524: 45 8B 3F - mov r15d,[r15]
"Operencia-Win64-Shipping.exe"+4D3527: 39 AF A0 01 00 00 - cmp [rdi+000001A0],ebp
"Operencia-Win64-Shipping.exe"+4D352D: 7E 59 - jle Operencia-Win64-Shipping.exe+4D3588
"Operencia-Win64-Shipping.exe"+4D352F: 48 8B DD - mov rbx,rbp
"Operencia-Win64-Shipping.exe"+4D3532: 48 8B B7 98 01 00 00 - mov rsi,[rdi+00000198]
"Operencia-Win64-Shipping.exe"+4D3539: 83 7C 33 08 00 - cmp dword ptr [rbx+rsi+08],00
"Operencia-Win64-Shipping.exe"+4D353E: 7F 3A - jg Operencia-Win64-Shipping.exe+4D357A
}
185
"Unlimited Energy"
Auto Assembler Script
{
general idea: check for unit's XP to be 40a00000.
if actual xp and current XP both have this value, it's an enemy
so jump to the "write new energy" code
else return
}
[ENABLE]
aobscanmodule(energy,Operencia-Win64-Shipping.exe,F3 41 0F 11 87 3C 03 00 00) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+4D243E)
label(code)
label(return)
newmem:
cmp [r15+00000408],40000000
jg code
cmp [r15+0000040c],40000000
jg code
jmp return
code:
movss [r15+0000033C],xmm0
jmp return
energy:
jmp newmem
nop 4
return:
registersymbol(energy)
[DISABLE]
energy:
db F3 41 0F 11 87 3C 03 00 00
unregistersymbol(energy)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+4D243E
"Operencia-Win64-Shipping.exe"+4D2425: D1 FE - sar esi,1
"Operencia-Win64-Shipping.exe"+4D2427: 85 C0 - test eax,eax
"Operencia-Win64-Shipping.exe"+4D2429: 79 04 - jns Operencia-Win64-Shipping.exe+4D242F
"Operencia-Win64-Shipping.exe"+4D242B: 8B F3 - mov esi,ebx
"Operencia-Win64-Shipping.exe"+4D242D: EB 05 - jmp Operencia-Win64-Shipping.exe+4D2434
"Operencia-Win64-Shipping.exe"+4D242F: 3B C6 - cmp eax,esi
"Operencia-Win64-Shipping.exe"+4D2431: 0F 4C F0 - cmovl esi,eax
"Operencia-Win64-Shipping.exe"+4D2434: 66 0F 6E C6 - movd xmm0,esi
"Operencia-Win64-Shipping.exe"+4D2438: 44 8B F6 - mov r14d,esi
"Operencia-Win64-Shipping.exe"+4D243B: 0F 5B C0 - cvtdq2ps xmm0,xmm0
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+4D243E: F3 41 0F 11 87 3C 03 00 00 - movss [r15+0000033C],xmm0
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+4D2447: 44 2B F1 - sub r14d,ecx
"Operencia-Win64-Shipping.exe"+4D244A: 0F 84 80 02 00 00 - je Operencia-Win64-Shipping.exe+4D26D0
"Operencia-Win64-Shipping.exe"+4D2450: 45 85 F6 - test r14d,r14d
"Operencia-Win64-Shipping.exe"+4D2453: 0F 8E 5B 02 00 00 - jng Operencia-Win64-Shipping.exe+4D26B4
"Operencia-Win64-Shipping.exe"+4D2459: 48 89 BC 24 20 01 00 00 - mov [rsp+00000120],rdi
"Operencia-Win64-Shipping.exe"+4D2461: 48 8D 15 B8 F1 05 02 - lea rdx,[Operencia-Win64-Shipping.exe+2531620]
"Operencia-Win64-Shipping.exe"+4D2468: 41 B8 01 00 00 00 - mov r8d,00000001
"Operencia-Win64-Shipping.exe"+4D246E: 4C 89 A4 24 28 01 00 00 - mov [rsp+00000128],r12
"Operencia-Win64-Shipping.exe"+4D2476: 48 8D 4D 8F - lea rcx,[rbp-71]
"Operencia-Win64-Shipping.exe"+4D247A: E8 C1 67 21 00 - call Operencia-Win64-Shipping.exe+6E8C40
}
347
"============== Exploring ============"
FF0000
1
184
"Unlimited Air under water"
Auto Assembler Script
[ENABLE]
aobscanmodule(breathing,Operencia-Win64-Shipping.exe,F3 0F 11 0B 77 3E) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+57574B)
label(code)
label(return)
newmem:
code:
// movss [rbx],xmm1
ja Operencia-Win64-Shipping.exe+57578F
jmp return
breathing:
jmp newmem
nop
return:
registersymbol(breathing)
[DISABLE]
breathing:
db F3 0F 11 0B 77 3E
unregistersymbol(breathing)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+57574B
"Operencia-Win64-Shipping.exe"+575725: 76 68 - jna Operencia-Win64-Shipping.exe+57578F
"Operencia-Win64-Shipping.exe"+575727: 0F 28 C6 - movaps xmm0,xmm6
"Operencia-Win64-Shipping.exe"+57572A: F3 41 0F 5E 86 28 06 00 00 - divss xmm0,[r14+00000628]
"Operencia-Win64-Shipping.exe"+575733: F3 0F 5C C8 - subss xmm1,xmm0
"Operencia-Win64-Shipping.exe"+575737: 0F 2F CF - comiss xmm1,xmm7
"Operencia-Win64-Shipping.exe"+57573A: 73 04 - jae Operencia-Win64-Shipping.exe+575740
"Operencia-Win64-Shipping.exe"+57573C: 89 03 - mov [rbx],eax
"Operencia-Win64-Shipping.exe"+57573E: EB 11 - jmp Operencia-Win64-Shipping.exe+575751
"Operencia-Win64-Shipping.exe"+575740: F3 0F 5D 0D F0 AE F3 01 - minss xmm1,[Operencia-Win64-Shipping.exe+24B0638]
"Operencia-Win64-Shipping.exe"+575748: 0F 2F CF - comiss xmm1,xmm7
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+57574B: F3 0F 11 0B - movss [rbx],xmm1
"Operencia-Win64-Shipping.exe"+57574F: 77 3E - ja Operencia-Win64-Shipping.exe+57578F
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+575751: 49 8B BE 48 02 00 00 - mov rdi,[r14+00000248]
"Operencia-Win64-Shipping.exe"+575758: 41 89 86 BC 07 00 00 - mov [r14+000007BC],eax
"Operencia-Win64-Shipping.exe"+57575F: 48 85 FF - test rdi,rdi
"Operencia-Win64-Shipping.exe"+575762: 74 2B - je Operencia-Win64-Shipping.exe+57578F
"Operencia-Win64-Shipping.exe"+575764: E8 E7 2A 04 00 - call Operencia-Win64-Shipping.exe+5B8250
"Operencia-Win64-Shipping.exe"+575769: 48 8B 57 10 - mov rdx,[rdi+10]
"Operencia-Win64-Shipping.exe"+57576D: 4C 8D 40 30 - lea r8,[rax+30]
"Operencia-Win64-Shipping.exe"+575771: 48 63 40 38 - movsxd rax,dword ptr [rax+38]
"Operencia-Win64-Shipping.exe"+575775: 3B 42 38 - cmp eax,[rdx+38]
"Operencia-Win64-Shipping.exe"+575778: 7F 15 - jg Operencia-Win64-Shipping.exe+57578F
}
187
"Firewood does not use up"
Auto Assembler Script
{ Game : Operencia-Win64-Shipping.exe
Version: 1.30
Date : 2020-04-01
Author : Marc
This script prevents the firewood to be used up when resting
}
[ENABLE]
aobscanmodule(firewood,Operencia-Win64-Shipping.exe,01 B0 C4 00 00 00) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+545CBE)
label(code)
label(return)
newmem:
code:
// add [rax+000000C4],esi
jmp return
firewood:
jmp newmem
nop
return:
registersymbol(firewood)
[DISABLE]
firewood:
db 01 B0 C4 00 00 00
unregistersymbol(firewood)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+545CBE
"Operencia-Win64-Shipping.exe"+545C90: E8 BB 41 03 00 - call Operencia-Win64-Shipping.exe+579E50
"Operencia-Win64-Shipping.exe"+545C95: E8 16 20 F9 FF - call Operencia-Win64-Shipping.exe+4D7CB0
"Operencia-Win64-Shipping.exe"+545C9A: 48 8B 48 28 - mov rcx,[rax+28]
"Operencia-Win64-Shipping.exe"+545C9E: 48 85 C9 - test rcx,rcx
"Operencia-Win64-Shipping.exe"+545CA1: 74 14 - je Operencia-Win64-Shipping.exe+545CB7
"Operencia-Win64-Shipping.exe"+545CA3: 49 8B 86 10 01 00 00 - mov rax,[r14+00000110]
"Operencia-Win64-Shipping.exe"+545CAA: 8B 90 C4 00 00 00 - mov edx,[rax+000000C4]
"Operencia-Win64-Shipping.exe"+545CB0: 03 D6 - add edx,esi
"Operencia-Win64-Shipping.exe"+545CB2: E8 E9 28 FC FF - call Operencia-Win64-Shipping.exe+5085A0
"Operencia-Win64-Shipping.exe"+545CB7: 49 8B 86 10 01 00 00 - mov rax,[r14+00000110]
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+545CBE: 01 B0 C4 00 00 00 - add [rax+000000C4],esi
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+545CC4: 48 8B 8D 00 01 00 00 - mov rcx,[rbp+00000100]
"Operencia-Win64-Shipping.exe"+545CCB: 48 33 CC - xor rcx,rsp
"Operencia-Win64-Shipping.exe"+545CCE: E8 7D 8B ED 01 - call Operencia-Win64-Shipping.exe+241E850
"Operencia-Win64-Shipping.exe"+545CD3: 4C 8D 9C 24 10 02 00 00 - lea r11,[rsp+00000210]
"Operencia-Win64-Shipping.exe"+545CDB: 49 8B 5B 40 - mov rbx,[r11+40]
"Operencia-Win64-Shipping.exe"+545CDF: 49 8B 73 48 - mov rsi,[r11+48]
"Operencia-Win64-Shipping.exe"+545CE3: 49 8B E3 - mov rsp,r11
"Operencia-Win64-Shipping.exe"+545CE6: 41 5F - pop r15
"Operencia-Win64-Shipping.exe"+545CE8: 41 5E - pop r14
"Operencia-Win64-Shipping.exe"+545CEA: 41 5C - pop r12
}
343
"Unlimited Vial of Light"
Auto Assembler Script
[ENABLE]
aobscanmodule(vial_of_light,Operencia-Win64-Shipping.exe,F3 0F 11 43 08 77) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+5732B8)
label(code)
label(return)
newmem:
code:
// movss [rbx+08],xmm0
jmp return
vial_of_light:
jmp newmem
return:
registersymbol(vial_of_light)
[DISABLE]
vial_of_light:
db F3 0F 11 43 08
unregistersymbol(vial_of_light)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+5732B8
"Operencia-Win64-Shipping.exe"+57328B: 44 8D 67 01 - lea r12d,[rdi+01]
"Operencia-Win64-Shipping.exe"+57328F: 48 89 6C 24 60 - mov [rsp+60],rbp
"Operencia-Win64-Shipping.exe"+573294: 0F 1F 40 00 - nop [rax+00]
"Operencia-Win64-Shipping.exe"+573298: 0F 1F 84 00 00 00 00 00 - nop [rax+rax+00000000]
"Operencia-Win64-Shipping.exe"+5732A0: F3 0F 10 43 08 - movss xmm0,[rbx+08]
"Operencia-Win64-Shipping.exe"+5732A5: 0F 2F C6 - comiss xmm0,xmm6
"Operencia-Win64-Shipping.exe"+5732A8: 0F 86 8B 00 00 00 - jbe Operencia-Win64-Shipping.exe+573339
"Operencia-Win64-Shipping.exe"+5732AE: 0F B6 03 - movzx eax,byte ptr [rbx]
"Operencia-Win64-Shipping.exe"+5732B1: F3 0F 5C C7 - subss xmm0,xmm7
"Operencia-Win64-Shipping.exe"+5732B5: 0F 2F C6 - comiss xmm0,xmm6
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+5732B8: F3 0F 11 43 08 - movss [rbx+08],xmm0
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+5732BD: 77 6C - ja Operencia-Win64-Shipping.exe+57332B
"Operencia-Win64-Shipping.exe"+5732BF: 3C 04 - cmp al,04
"Operencia-Win64-Shipping.exe"+5732C1: 74 14 - je Operencia-Win64-Shipping.exe+5732D7
"Operencia-Win64-Shipping.exe"+5732C3: 3C 0B - cmp al,0B
"Operencia-Win64-Shipping.exe"+5732C5: 75 1C - jne Operencia-Win64-Shipping.exe+5732E3
"Operencia-Win64-Shipping.exe"+5732C7: 48 8B CE - mov rcx,rsi
"Operencia-Win64-Shipping.exe"+5732CA: 89 BE 98 07 00 00 - mov [rsi+00000798],edi
"Operencia-Win64-Shipping.exe"+5732D0: E8 5B 4B FD FF - call Operencia-Win64-Shipping.exe+547E30
"Operencia-Win64-Shipping.exe"+5732D5: EB 0C - jmp Operencia-Win64-Shipping.exe+5732E3
"Operencia-Win64-Shipping.exe"+5732D7: 48 8B 8E 98 06 00 00 - mov rcx,[rsi+00000698]
}
92
"Infinite Potions on the G-Key (script from acecel)"
000000
Auto Assembler Script
{ Game : Operencia-Win64-Shipping.exe
Version:
Date : 2019-04-01
Author : Axel
This script does blah blah blah
}
[ENABLE]
aobscanmodule(aobPotionDecrease2,Operencia-Win64-Shipping.exe,41 89 17 EB 0C) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+4A16B8)
label(code)
label(return)
newmem:
code:
jmp return
aobPotionDecrease2:
jmp newmem
return:
registersymbol(aobPotionDecrease2)
[DISABLE]
aobPotionDecrease2:
db 41 89 17 EB 0C
unregistersymbol(aobPotionDecrease2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+4A16B8
"Operencia-Win64-Shipping.exe"+4A168D: 8B 96 84 00 00 00 - mov edx,[rsi+00000084]
"Operencia-Win64-Shipping.exe"+4A1693: 48 8B 6C 24 48 - mov rbp,[rsp+48]
"Operencia-Win64-Shipping.exe"+4A1698: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"Operencia-Win64-Shipping.exe"+4A169D: 41 89 16 - mov [r14],edx
"Operencia-Win64-Shipping.exe"+4A16A0: 80 7E 49 05 - cmp byte ptr [rsi+49],05
"Operencia-Win64-Shipping.exe"+4A16A4: 75 10 - jne Operencia-Win64-Shipping.exe+4A16B6
"Operencia-Win64-Shipping.exe"+4A16A6: 49 8B 85 F0 07 00 00 - mov rax,[r13+000007F0]
"Operencia-Win64-Shipping.exe"+4A16AD: 03 90 18 01 00 00 - add edx,[rax+00000118]
"Operencia-Win64-Shipping.exe"+4A16B3: 41 89 16 - mov [r14],edx
"Operencia-Win64-Shipping.exe"+4A16B6: 2B D7 - sub edx,edi
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+4A16B8: 41 89 17 - mov [r15],edx
"Operencia-Win64-Shipping.exe"+4A16BB: EB 0C - jmp Operencia-Win64-Shipping.exe+4A16C9
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+4A16BD: 33 FF - xor edi,edi
"Operencia-Win64-Shipping.exe"+4A16BF: 41 C7 00 01 00 00 00 - mov [r8],00000001
"Operencia-Win64-Shipping.exe"+4A16C6: 41 89 39 - mov [r9],edi
"Operencia-Win64-Shipping.exe"+4A16C9: 48 8B 74 24 50 - mov rsi,[rsp+50]
"Operencia-Win64-Shipping.exe"+4A16CE: 48 8B 7C 24 58 - mov rdi,[rsp+58]
"Operencia-Win64-Shipping.exe"+4A16D3: 48 83 C4 20 - add rsp,20
"Operencia-Win64-Shipping.exe"+4A16D7: 41 5F - pop r15
"Operencia-Win64-Shipping.exe"+4A16D9: 41 5E - pop r14
"Operencia-Win64-Shipping.exe"+4A16DB: 41 5D - pop r13
"Operencia-Win64-Shipping.exe"+4A16DD: C3 - ret
}
Toggle Activation
0
Activate
Deactivate
345
"============== Misc ============"
FF0000
1
348
"Add the Experience 5 times instead of once"
Auto Assembler Script
[ENABLE]
aobscanmodule(experienceboost,Operencia-Win64-Shipping.exe,01 91 08 04 00 00) // should be unique
alloc(newmem,$1000,"Operencia-Win64-Shipping.exe"+4CFEA2)
label(code)
label(return)
newmem:
code:
add [rcx+00000408],edx
add [rcx+00000408],edx
add [rcx+00000408],edx
add [rcx+00000408],edx
add [rcx+00000408],edx
jmp return
experienceboost:
jmp newmem
nop
return:
registersymbol(experienceboost)
[DISABLE]
experienceboost:
db 01 91 08 04 00 00
unregistersymbol(experienceboost)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Operencia-Win64-Shipping.exe"+4CFEA2
"Operencia-Win64-Shipping.exe"+4CFE8C: 5F - pop rdi
"Operencia-Win64-Shipping.exe"+4CFE8D: 5E - pop rsi
"Operencia-Win64-Shipping.exe"+4CFE8E: C3 - ret
"Operencia-Win64-Shipping.exe"+4CFE8F: CC - int 3
"Operencia-Win64-Shipping.exe"+4CFE90: 41 C6 01 00 - mov byte ptr [r9],00
"Operencia-Win64-Shipping.exe"+4CFE94: 85 D2 - test edx,edx
"Operencia-Win64-Shipping.exe"+4CFE96: 7E 24 - jle Operencia-Win64-Shipping.exe+4CFEBC
"Operencia-Win64-Shipping.exe"+4CFE98: 8B 81 0C 04 00 00 - mov eax,[rcx+0000040C]
"Operencia-Win64-Shipping.exe"+4CFE9E: 85 C0 - test eax,eax
"Operencia-Win64-Shipping.exe"+4CFEA0: 7E 1A - jle Operencia-Win64-Shipping.exe+4CFEBC
// ---------- INJECTING HERE ----------
"Operencia-Win64-Shipping.exe"+4CFEA2: 01 91 08 04 00 00 - add [rcx+00000408],edx
// ---------- DONE INJECTING ----------
"Operencia-Win64-Shipping.exe"+4CFEA8: 39 81 08 04 00 00 - cmp [rcx+00000408],eax
"Operencia-Win64-Shipping.exe"+4CFEAE: 7C 0C - jl Operencia-Win64-Shipping.exe+4CFEBC
"Operencia-Win64-Shipping.exe"+4CFEB0: 49 8B D0 - mov rdx,r8
"Operencia-Win64-Shipping.exe"+4CFEB3: 41 C6 01 01 - mov byte ptr [r9],01
"Operencia-Win64-Shipping.exe"+4CFEB7: E9 24 2F 01 00 - jmp Operencia-Win64-Shipping.exe+4E2DE0
"Operencia-Win64-Shipping.exe"+4CFEBC: C3 - ret
"Operencia-Win64-Shipping.exe"+4CFEBD: CC - int 3
"Operencia-Win64-Shipping.exe"+4CFEBE: CC - int 3
"Operencia-Win64-Shipping.exe"+4CFEBF: CC - int 3
"Operencia-Win64-Shipping.exe"+4CFEC0: 48 89 5C 24 10 - mov [rsp+10],rbx
}
147
"Gold from Party"
4 Bytes
"Operencia-Win64-Shipping.exe"+0339DCE8
C0
708
A0
346
"============== Character Editors ============"
FF0000
1
188
"Editor for Main Char"
1
102
"Player Character"
Binary
0
1
0
"Operencia-Win64-Shipping.exe"+0339DEC0
0
115
"Health"
0000FF
Float
+338
114
"Energy"
FF0000
Float
+33c
112
"Health (max)"
000000
Float
+274
116
"Energy (max)"
Float
+278
113
"Strength"
Float
+1a8
117
"Agility"
Float
+1ac
118
"Intelligence"
Float
+1b0
119
"Wisdom"
Float
+1b4
120
"Vitality"
Float
+1b8
121
"Evasion"
FF8080
Float
+27c
122
"Defense"
FF8080
Float
+280
123
"Initiative"
FF8080
Float
+284
124
"Hit Rating Melee"
FF8080
Float
+288
125
"Hit Rating Ranged"
FF8080
Float
+28c
126
"Crit Chance"
FF8080
Float
+290
127
"Crit Damage"
FF8080
Float
+294
128
"Block"
FF8080
Float
+298
129
"Extra Attack Chance"
FF8080
Float
+29c
130
"Counter Attack Chance"
FF8080
Float
+2a0
131
"Physical Resist"
FF8080
Float
+2a4
132
"Fire Resist"
FF8080
Float
+2a8
133
"Lightning Resist"
FF8080
Float
+2ac
134
"Frost Resist"
FF8080
Float
+2b0
135
"Poison Resist"
FF8080
Float
+2b4
136
"Fear Resist"
FF8080
Float
+2b8
137
"Stun Resist"
FF8080
Float
+2bc
138
"Sleep Resist"
FF8080
Float
+2c0
139
"Attribute Points"
4 Bytes
+414
140
"Talent Points"
4 Bytes
+418
141
"Experience Points gained in current level"
808000
4 Bytes
+408
142
"Experience Points to level up"
4 Bytes
+40c
143
"Current Level"
4 Bytes
+410
290
"Editor for NPC 1"
1
148
"Base Address"
Binary
0
1
0
"Operencia-Win64-Shipping.exe"+034FBB00
0
8
728
30
150
"Health"
0000FF
Float
+338
151
"Energy"
FF0000
Float
+33c
154
"Strength"
Float
+1a8
155
"Agility"
Float
+1ac
156
"Intelligence"
Float
+1b0
157
"Wisdom"
Float
+1b4
158
"Vitality"
Float
+1b8
177
"Attribute Points"
4 Bytes
+414
178
"Talent Points"
4 Bytes
+418
179
"Experience Points gained in current level"
808000
4 Bytes
+408
180
"Experience Points to level up"
4 Bytes
+40c
291
"Editor for NPC 2"
1
292
"Base Address"
Binary
0
1
0
"Operencia-Win64-Shipping.exe"+034FBB00
0
10
728
30
293
"Health"
0000FF
Float
+338
294
"Energy"
FF0000
Float
+33c
297
"Strength"
Float
+1a8
298
"Agility"
Float
+1ac
299
"Intelligence"
Float
+1b0
300
"Wisdom"
Float
+1b4
301
"Vitality"
Float
+1b8
320
"Attribute Points"
4 Bytes
+414
321
"Talent Points"
4 Bytes
+418
322
"Experience Points gained in current level"
808000
4 Bytes
+408
323
"Experience Points to level up"
4 Bytes
+40c
325
"Editor for NPC 3"
1
326
"Base Address"
Binary
0
1
0
"Operencia-Win64-Shipping.exe"+034FBB00
0
18
728
30
327
"Health"
0000FF
Float
+338
328
"Energy"
FF0000
Float
+33c
329
"Strength"
Float
+1a8
330
"Agility"
Float
+1ac
331
"Intelligence"
Float
+1b0
332
"Wisdom"
Float
+1b4
333
"Vitality"
Float
+1b8
334
"Attribute Points"
4 Bytes
+414
335
"Talent Points"
4 Bytes
+418
336
"Experience Points gained in current level"
808000
4 Bytes
+408
337
"Experience Points to level up"
4 Bytes
+40c
341
"Debug (Backup Pathes, just ignore me)"
C0C0C0
1
338
"Hitpoints NPC 1"
Float
"Operencia-Win64-Shipping.exe"+034FBB00
338
8
728
30
340
"Hitpoints NPC 2"
Float
"Operencia-Win64-Shipping.exe"+034FBB00
338
10
728
30
339
"Hitpoints NPC 3"
Float
"Operencia-Win64-Shipping.exe"+034FBB00
338
18
728
30