29
"F1: One-Hit-Kill"
Auto Assembler Script
[ENABLE]
aobscanmodule(damage,Risen3.exe,89 74 8B 20 48 8B 03) // should be unique
alloc(newmem,$1000,"Risen3.exe"+2D8649)
label(code)
label(return)
newmem:
mov esi,0
code:
mov [rbx+rcx*4+20],esi
mov rax,[rbx]
jmp return
damage:
jmp newmem
nop 2
return:
registersymbol(damage)
[DISABLE]
damage:
db 89 74 8B 20 48 8B 03
unregistersymbol(damage)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Risen3.exe"+2D8649
"Risen3.exe"+2D8626: 8B C6 - mov eax,esi
"Risen3.exe"+2D8628: 41 8B 94 09 40 AA BE 00 - mov edx,[r9+rcx+00BEAA40]
"Risen3.exe"+2D8630: 8B F2 - mov esi,edx
"Risen3.exe"+2D8632: 3B D0 - cmp edx,eax
"Risen3.exe"+2D8634: 0F 4C F0 - cmovl esi,eax
"Risen3.exe"+2D8637: 48 63 8C B9 30 A5 FF 00 - movsxd rcx,dword ptr [rcx+rdi*4+00FFA530]
"Risen3.exe"+2D863F: 85 C9 - test ecx,ecx
"Risen3.exe"+2D8641: 78 46 - js Risen3.exe+2D8689
"Risen3.exe"+2D8643: 3B 74 8B 20 - cmp esi,[rbx+rcx*4+20]
"Risen3.exe"+2D8647: 74 40 - je Risen3.exe+2D8689
// ---------- INJECTING HERE ----------
"Risen3.exe"+2D8649: 89 74 8B 20 - mov [rbx+rcx*4+20],esi
"Risen3.exe"+2D864D: 48 8B 03 - mov rax,[rbx]
// ---------- DONE INJECTING ----------
"Risen3.exe"+2D8650: 8B D7 - mov edx,edi
"Risen3.exe"+2D8652: 48 8B CB - mov rcx,rbx
"Risen3.exe"+2D8655: FF 90 B8 01 00 00 - call qword ptr [rax+000001B8]
"Risen3.exe"+2D865B: 8B F0 - mov esi,eax
"Risen3.exe"+2D865D: 83 FF 09 - cmp edi,09
"Risen3.exe"+2D8660: 75 27 - jne Risen3.exe+2D8689
"Risen3.exe"+2D8662: 4C 8B 03 - mov r8,[rbx]
"Risen3.exe"+2D8665: 8D 57 01 - lea edx,[rdi+01]
"Risen3.exe"+2D8668: 48 8B CB - mov rcx,rbx
"Risen3.exe"+2D866B: 41 FF 90 B8 01 00 00 - call qword ptr [r8+000001B8]
}
Toggle Activation
112
0
Activate
Deactivate
46
"F2: Amount of Consumables does not change"
Auto Assembler Script
[ENABLE]
Risen3.exe+35964F:
nop 3
[DISABLE]
Risen3.exe+35964F:
mov [rcx+30],eax
{
Risen3.exe+35963E - 45 85 C9 - test r9d,r9d
Risen3.exe+359641 - 4C 8B E1 - mov r12,rcx
Risen3.exe+359644 - 41 0F4F C1 - cmovg eax,r9d
Risen3.exe+359648 - 48 83 C1 08 - add rcx,08
Risen3.exe+35964C - 49 8B E8 - mov rbp,r8
Risen3.exe+35964F - 89 41 30 - mov [rcx+30],eax
Risen3.exe+359652 - E8 99D1ECFF - call Risen3.exe+2267F0
Risen3.exe+359657 - 48 85 C0 - test rax,rax
Risen3.exe+35965A - 74 70 - je Risen3.exe+3596CC
Risen3.exe+35965C - 48 85 ED - test rbp,rbp
Risen3.exe+35965F - 74 6B - je Risen3.exe+3596CC
}
Toggle Activation
113
0
Activate
Deactivate
48
"F3: Fill gold and Item-Stacks to 100.000"
Auto Assembler Script
[ENABLE]
assert(Risen3.exe+359350,8B 41 38 C3)
Risen3.exe+359350:
mov eax,#100000
mov [rcx+38],eax
ret
[DISABLE]
Risen3.exe+359350:
mov eax,[rcx+38]
ret
int 3
int 3
int 3
int 3
Toggle Activation
114
0
Rich
Poor
64
"F4: Unlimited Bird-Flying"
Auto Assembler Script
[ENABLE]
// this is the actual cheat
Risen3.exe+51A739:
db EB 0A // - jmp Risen3.exe+51A745
// just for the optics (progress bar)
Risen3.exe+51A785:
nop 8
[DISABLE]
Risen3.exe+51A739:
db 76 0A // jna Risen3.exe+51A745
Risen3.exe+51A785:
mulss xmm6,xmm0
subss xmm0,xmm6
{
Risen3.exe+51A680 - 40 55 - push rbp
Risen3.exe+51A682 - 56 - push rsi
Risen3.exe+51A683 - 57 - push rdi
Risen3.exe+51A684 - 48 8B EC - mov rbp,rsp
Risen3.exe+51A687 - 48 83 EC 70 - sub rsp,70
Risen3.exe+51A68B - 48 8B F9 - mov rdi,rcx
Risen3.exe+51A68E - 48 8B CA - mov rcx,rdx
Risen3.exe+51A691 - 48 8B F2 - mov rsi,rdx
Risen3.exe+51A694 - E8 3757DCFF - call Risen3.exe+2DFDD0
Risen3.exe+51A699 - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A69D - 48 8B D0 - mov rdx,rax
Risen3.exe+51A6A0 - E8 1B4A2E00 - call Risen3.exe+7FF0C0
Risen3.exe+51A6A5 - 48 8B CE - mov rcx,rsi
Risen3.exe+51A6A8 - E8 035BDCFF - call Risen3.exe+2E01B0
Risen3.exe+51A6AD - 48 8D 4D 30 - lea rcx,[rbp+30]
Risen3.exe+51A6B1 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A6B4 - E8 074A2E00 - call Risen3.exe+7FF0C0
Risen3.exe+51A6B9 - 44 8B 1D 08B4B300 - mov r11d,[Risen3.exe+1055AC8]
Risen3.exe+51A6C0 - 8B 0D FEB3B300 - mov ecx,[Risen3.exe+1055AC4]
Risen3.exe+51A6C6 - 41 F6 C3 01 - test r11l,01
Risen3.exe+51A6CA - 75 1D - jne Risen3.exe+51A6E9
Risen3.exe+51A6CC - 41 83 CB 01 - or r11d,01
Risen3.exe+51A6D0 - 8B C1 - mov eax,ecx
Risen3.exe+51A6D2 - 89 0D E8B3B300 - mov [Risen3.exe+1055AC0],ecx
Risen3.exe+51A6D8 - FF C1 - inc ecx
Risen3.exe+51A6DA - 44 89 1D E7B3B300 - mov [Risen3.exe+1055AC8],r11d
Risen3.exe+51A6E1 - 89 0D DDB3B300 - mov [Risen3.exe+1055AC4],ecx
Risen3.exe+51A6E7 - EB 06 - jmp Risen3.exe+51A6EF
Risen3.exe+51A6E9 - 8B 05 D1B3B300 - mov eax,[Risen3.exe+1055AC0]
Risen3.exe+51A6EF - 48 63 57 08 - movsxd rdx,dword ptr [rdi+08]
Risen3.exe+51A6F3 - 4C 8B 07 - mov r8,[rdi]
Risen3.exe+51A6F6 - 48 6B D2 58 - imul rdx,rdx,58
Risen3.exe+51A6FA - 42 39 44 02 A8 - cmp [rdx+r8-58],eax
Risen3.exe+51A6FF - 0F8F 43010000 - jg Risen3.exe+51A848
Risen3.exe+51A705 - FF C0 - inc eax
Risen3.exe+51A707 - 48 89 9C 24 98000000 - mov [rsp+00000098],rbx
Risen3.exe+51A70F - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A713 - 0F29 74 24 60 - movaps [rsp+60],xmm6
Risen3.exe+51A718 - 0F29 7C 24 50 - movaps [rsp+50],xmm7
Risen3.exe+51A71D - 42 89 44 02 A8 - mov [rdx+r8-58],eax
Risen3.exe+51A722 - E8 D9B82F00 - call Risen3.exe+816000
Risen3.exe+51A727 - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A72B - 0F28 F8 - movaps xmm7,xmm0
Risen3.exe+51A72E - E8 4DB92F00 - call Risen3.exe+816080
Risen3.exe+51A733 - 0F28 F0 - movaps xmm6,xmm0
Risen3.exe+51A736 - 0F2F F7 - comiss xmm6,xmm7
----------------------------------------------------------------------
Risen3.exe+51A739 - 76 0A - jna Risen3.exe+51A745 // unlimited flying, ignore the progress bar
----------------------------------------------------------------------
Risen3.exe+51A73B - 32 D2 - xor dl,dl
Risen3.exe+51A73D - 88 15 B5B2B300 - mov [Risen3.exe+10559F8],dl
Risen3.exe+51A743 - EB 07 - jmp Risen3.exe+51A74C
Risen3.exe+51A745 - 0FB6 15 ACB2B300 - movzx edx,byte ptr [Risen3.exe+10559F8]
Risen3.exe+51A74C - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A750 - E8 2BB82F00 - call Risen3.exe+815F80
Risen3.exe+51A755 - F3 0F10 05 BB0A4A00 - movss xmm0,[Risen3.exe+9BB218]
Risen3.exe+51A75D - F3 0F5E F7 - divss xmm6,xmm7
Risen3.exe+51A761 - 0F28 7C 24 50 - movaps xmm7,[rsp+50]
Risen3.exe+51A766 - 0F2F F0 - comiss xmm6,xmm0
Risen3.exe+51A769 - 72 03 - jb Risen3.exe+51A76E
Risen3.exe+51A76B - 0F28 F0 - movaps xmm6,xmm0
Risen3.exe+51A76E - F3 0F10 05 DEA94A00 - movss xmm0,[Risen3.exe+9C5154]
Risen3.exe+51A776 - 48 8B 05 4BB2B300 - mov rax,[Risen3.exe+10559C8]
Risen3.exe+51A77D - 48 8D 55 20 - lea rdx,[rbp+20]
Risen3.exe+51A781 - 48 8D 4D 38 - lea rcx,[rbp+38]
Risen3.exe+51A785 - F3 0F59 F0 - mulss xmm6,xmm0
Risen3.exe+51A789 - F3 0F5C C6 - subss xmm0,xmm6
------------------------------------------------------------------------------
Risen3.exe+51A78D - F3 0F11 80 F0010000 - movss [rax+000001F0],xmm0 // master value for progress bar
------------------------------------------------------------------------------
Risen3.exe+51A795 - 48 8B 1D 2CB2B300 - mov rbx,[Risen3.exe+10559C8]
Risen3.exe+51A79C - E8 5F392E00 - call Risen3.exe+7FE100
Risen3.exe+51A7A1 - C6 44 24 30 00 - mov byte ptr [rsp+30],00
Risen3.exe+51A7A6 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A7A9 - 48 8D 05 9829B500 - lea rax,[Risen3.exe+106D148]
Risen3.exe+51A7B0 - 48 8D 8B F8020000 - lea rcx,[rbx+000002F8]
Risen3.exe+51A7B7 - 45 33 C9 - xor r9d,r9d
Risen3.exe+51A7BA - 45 33 C0 - xor r8d,r8d
Risen3.exe+51A7BD - C7 44 24 28 00000000 - mov [rsp+28],00000000
Risen3.exe+51A7C5 - 48 89 44 24 20 - mov [rsp+20],rax
Risen3.exe+51A7CA - E8 F11EFFFF - call Risen3.exe+50C6C0
Risen3.exe+51A7CF - 48 8B 0D F2B1B300 - mov rcx,[Risen3.exe+10559C8]
Risen3.exe+51A7D6 - 48 81 C1 08030000 - add rcx,00000308
Risen3.exe+51A7DD - E8 3E09FFFF - call Risen3.exe+50B120
Risen3.exe+51A7E2 - 48 8B 0D DFB1B300 - mov rcx,[Risen3.exe+10559C8]
Risen3.exe+51A7E9 - 48 81 C1 08030000 - add rcx,00000308
Risen3.exe+51A7F0 - 8B D8 - mov ebx,eax
Risen3.exe+51A7F2 - E8 1950FFFF - call Risen3.exe+50F810
Risen3.exe+51A7F7 - 83 FB 18 - cmp ebx,18
Risen3.exe+51A7FA - 48 8B 9C 24 98000000 - mov rbx,[rsp+00000098]
Risen3.exe+51A802 - 0F28 74 24 60 - movaps xmm6,[rsp+60]
Risen3.exe+51A807 - 75 32 - jne Risen3.exe+51A83B
Risen3.exe+51A809 - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A80D - E8 0E392E00 - call Risen3.exe+7FE120
Risen3.exe+51A812 - 45 33 C0 - xor r8d,r8d
Risen3.exe+51A815 - 33 D2 - xor edx,edx
Risen3.exe+51A817 - 48 8B C8 - mov rcx,rax
Risen3.exe+51A81A - E8 31F7FFFF - call Risen3.exe+519F50
Risen3.exe+51A81F - 48 8D 4D 30 - lea rcx,[rbp+30]
Risen3.exe+51A823 - E8 E8382E00 - call Risen3.exe+7FE110
Risen3.exe+51A828 - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A82C - E8 DF382E00 - call Risen3.exe+7FE110
Risen3.exe+51A831 - B0 01 - mov al,01
Risen3.exe+51A833 - 48 83 C4 70 - add rsp,70
Risen3.exe+51A837 - 5F - pop rdi
Risen3.exe+51A838 - 5E - pop rsi
Risen3.exe+51A839 - 5D - pop rbp
Risen3.exe+51A83A - C3 - ret
Risen3.exe+51A83B - 44 8B 1D 86B2B300 - mov r11d,[Risen3.exe+1055AC8]
Risen3.exe+51A842 - 8B 0D 7CB2B300 - mov ecx,[Risen3.exe+1055AC4]
Risen3.exe+51A848 - 41 F6 C3 02 - test r11l,02
Risen3.exe+51A84C - 75 1D - jne Risen3.exe+51A86B
Risen3.exe+51A84E - 41 83 CB 02 - or r11d,02
Risen3.exe+51A852 - 8B C1 - mov eax,ecx
Risen3.exe+51A854 - 89 0D 62B2B300 - mov [Risen3.exe+1055ABC],ecx
Risen3.exe+51A85A - FF C1 - inc ecx
Risen3.exe+51A85C - 44 89 1D 65B2B300 - mov [Risen3.exe+1055AC8],r11d
Risen3.exe+51A863 - 89 0D 5BB2B300 - mov [Risen3.exe+1055AC4],ecx
Risen3.exe+51A869 - EB 06 - jmp Risen3.exe+51A871
Risen3.exe+51A86B - 8B 05 4BB2B300 - mov eax,[Risen3.exe+1055ABC]
Risen3.exe+51A871 - 48 63 57 08 - movsxd rdx,dword ptr [rdi+08]
Risen3.exe+51A875 - 85 D2 - test edx,edx
Risen3.exe+51A877 - 74 A6 - je Risen3.exe+51A81F
Risen3.exe+51A879 - 4C 8B 07 - mov r8,[rdi]
Risen3.exe+51A87C - 48 6B D2 58 - imul rdx,rdx,58
Risen3.exe+51A880 - 42 39 44 02 A8 - cmp [rdx+r8-58],eax
Risen3.exe+51A885 - 7F 67 - jg Risen3.exe+51A8EE
Risen3.exe+51A887 - FF C0 - inc eax
Risen3.exe+51A889 - 48 8D 4D 38 - lea rcx,[rbp+38]
Risen3.exe+51A88D - 42 89 44 02 A8 - mov [rdx+r8-58],eax
Risen3.exe+51A892 - 48 8D 15 27285400 - lea rdx,[Risen3.exe+A5D0C0]
Risen3.exe+51A899 - E8 C25BB0FF - call Risen3.exe+20460
Risen3.exe+51A89E - 48 8D 0D 8E8CB500 - lea rcx,[Risen3.exe+1073533]
Risen3.exe+51A8A5 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A8A8 - E8 C3953000 - call Risen3.exe+823E70
Risen3.exe+51A8AD - 84 C0 - test al,al
Risen3.exe+51A8AF - 75 30 - jne Risen3.exe+51A8E1
Risen3.exe+51A8B1 - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A8B5 - E8 66382E00 - call Risen3.exe+7FE120
Risen3.exe+51A8BA - 48 8D 4D D0 - lea rcx,[rbp-30]
Risen3.exe+51A8BE - C7 45 D8 E8030000 - mov [rbp-28],000003E8
Risen3.exe+51A8C5 - 48 89 45 D0 - mov [rbp-30],rax
Risen3.exe+51A8C9 - E8 4252FAFF - call Risen3.exe+4BFB10
Risen3.exe+51A8CE - 48 8B CE - mov rcx,rsi
Risen3.exe+51A8D1 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A8D4 - E8 9754DCFF - call Risen3.exe+2DFD70
Risen3.exe+51A8D9 - 84 C0 - test al,al
Risen3.exe+51A8DB - 0F85 B5000000 - jne Risen3.exe+51A996
Risen3.exe+51A8E1 - 44 8B 1D E0B1B300 - mov r11d,[Risen3.exe+1055AC8]
Risen3.exe+51A8E8 - 8B 0D D6B1B300 - mov ecx,[Risen3.exe+1055AC4]
Risen3.exe+51A8EE - 41 F6 C3 04 - test r11l,04
Risen3.exe+51A8F2 - 75 1D - jne Risen3.exe+51A911
Risen3.exe+51A8F4 - 41 83 CB 04 - or r11d,04
Risen3.exe+51A8F8 - 8B C1 - mov eax,ecx
Risen3.exe+51A8FA - 89 0D B8B1B300 - mov [Risen3.exe+1055AB8],ecx
Risen3.exe+51A900 - FF C1 - inc ecx
Risen3.exe+51A902 - 44 89 1D BFB1B300 - mov [Risen3.exe+1055AC8],r11d
Risen3.exe+51A909 - 89 0D B5B1B300 - mov [Risen3.exe+1055AC4],ecx
Risen3.exe+51A90F - EB 06 - jmp Risen3.exe+51A917
Risen3.exe+51A911 - 8B 05 A1B1B300 - mov eax,[Risen3.exe+1055AB8]
Risen3.exe+51A917 - 48 63 4F 08 - movsxd rcx,dword ptr [rdi+08]
Risen3.exe+51A91B - 85 C9 - test ecx,ecx
Risen3.exe+51A91D - 0F84 FCFEFFFF - je Risen3.exe+51A81F
Risen3.exe+51A923 - 4C 8B 0F - mov r9,[rdi]
Risen3.exe+51A926 - 4C 8B C1 - mov r8,rcx
Risen3.exe+51A929 - 4D 6B C0 58 - imul r8,r8,58
Risen3.exe+51A92D - 43 39 44 08 A8 - cmp [r8+r9-58],eax
Risen3.exe+51A932 - 7F 29 - jg Risen3.exe+51A95D
Risen3.exe+51A934 - FF C0 - inc eax
Risen3.exe+51A936 - 48 8D 15 83275400 - lea rdx,[Risen3.exe+A5D0C0]
Risen3.exe+51A93D - 48 8D 4D 38 - lea rcx,[rbp+38]
Risen3.exe+51A941 - 43 89 44 08 A8 - mov [r8+r9-58],eax
Risen3.exe+51A946 - E8 155BB0FF - call Risen3.exe+20460
Risen3.exe+51A94B - 48 8D 0D E18BB500 - lea rcx,[Risen3.exe+1073533]
Risen3.exe+51A952 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A955 - 41 B0 01 - mov r8l,01
Risen3.exe+51A958 - E8 D3953000 - call Risen3.exe+823F30
Risen3.exe+51A95D - 48 8D 15 5C275400 - lea rdx,[Risen3.exe+A5D0C0]
Risen3.exe+51A964 - 48 8D 4D 38 - lea rcx,[rbp+38]
Risen3.exe+51A968 - E8 F35AB0FF - call Risen3.exe+20460
Risen3.exe+51A96D - 48 8D 0D BF8BB500 - lea rcx,[Risen3.exe+1073533]
Risen3.exe+51A974 - 48 8B D0 - mov rdx,rax
Risen3.exe+51A977 - E8 14943000 - call Risen3.exe+823D90
Risen3.exe+51A97C - 84 C0 - test al,al
Risen3.exe+51A97E - 0F84 9BFEFFFF - je Risen3.exe+51A81F
Risen3.exe+51A984 - 8B 47 08 - mov eax,[rdi+08]
Risen3.exe+51A987 - FF C8 - dec eax
Risen3.exe+51A989 - 48 63 C8 - movsxd rcx,eax
Risen3.exe+51A98C - 48 8B 07 - mov rax,[rdi]
Risen3.exe+51A98F - 48 6B C9 58 - imul rcx,rcx,58
Risen3.exe+51A993 - FF 0C 01 - dec [rcx+rax]
Risen3.exe+51A996 - 48 8D 4D 30 - lea rcx,[rbp+30]
Risen3.exe+51A99A - E8 71372E00 - call Risen3.exe+7FE110
Risen3.exe+51A99F - 48 8D 4D 20 - lea rcx,[rbp+20]
Risen3.exe+51A9A3 - E8 68372E00 - call Risen3.exe+7FE110
Risen3.exe+51A9A8 - 32 C0 - xor al,al
Risen3.exe+51A9AA - 48 83 C4 70 - add rsp,70
Risen3.exe+51A9AE - 5F - pop rdi
Risen3.exe+51A9AF - 5E - pop rsi
Risen3.exe+51A9B0 - 5D - pop rbp
Risen3.exe+51A9B1 - C3 - ret
}
Toggle Activation
115
0
Fly on
Fly off
68
"F5: Time of the Day does not advance"
Auto Assembler Script
[ENABLE]
Risen3.exe+34A50E:
nop
nop
nop
nop
nop
[DISABLE]
Risen3.exe+34A50E:
movss [rbx+14],xmm1
Toggle Activation
116
0
Stop
Go
9
"Gold"
4 Bytes
"Risen3.exe"+01002398
2F8
408
26
"Time of the Day (not when game is paused)"
28800:Morning
43200:Midday
72000:Evening
0:Midnight
Float
"Risen3.exe"+00FABC90
58
150
"Player Stats (Press C to update the Pointer if needed)"
1
"Risen3.exe"+00FB5720
0
50
"Current Hitpoints (without Bonusses)"
4 Bytes
+A0
49
"Maximum Hitpoints"
4 Bytes
+9C
51
"Fame (Experience)"
4 Bytes
+A4
52
"Infight"
4 Bytes
+7C
53
"Ranged Fight"
4 Bytes
+80
55
"List"
4 Bytes
+84
54
"Influence"
4 Bytes
+88
59
"Toughness"
4 Bytes
+8c
60
"Dexterity"
4 Bytes
+90
56
"Magic"
4 Bytes
+94
58
"Spirit"
4 Bytes
+98
57
"Reputation/Souls (50 = Neutral)"
4 Bytes
+A8
151
"Skills"
1
"Risen3.exe"+00FB5720
0
107
"========= Infight ========="
1
131
"Piercing Weapons (3)"
4080FF
4 Bytes
+104
130
"Swords (3)"
4080FF
4 Bytes
+108
129
"Cutting Weapon (3)"
4080FF
4 Bytes
+10C
128
"Counterattack (1)"
4080FF
4 Bytes
+110
127
"Bladedancer (1)"
4080FF
4 Bytes
+114
126
"Blademaster (1)"
4080FF
4 Bytes
+118
125
"Swordmaster (1)"
4080FF
4 Bytes
+11C
124
"Forgery (1)"
4080FF
4 Bytes
+120
145
"Shadowhunter (1)"
4080FF
4 Bytes
+1b8
146
"Undead-Slayer (1)"
4080FF
4 Bytes
+1bc
147
"Spider-Hunter (1)"
4080FF
4 Bytes
+1c0
148
"Pirate (1)"
4080FF
4 Bytes
+1c4
123
"========= Distance Fight ========="
1
122
"Muskets (3)"
FF0000
4 Bytes
+124
121
"Pumpgun (3)"
FF0000
4 Bytes
+128
120
"Pistols (3)"
FF0000
4 Bytes
+12c
119
"Crossbows (3)"
FF0000
4 Bytes
+130
118
"Dagger (3)"
FF0000
4 Bytes
+134
117
"Critical Hit (3)"
FF0000
4 Bytes
+138
116
"Gunmaker (1)"
FF0000
4 Bytes
+13c
115
"Thundergun (1)"
FF0000
4 Bytes
+140
143
"Big Game Hunter (1)"
FF0000
4 Bytes
+1b4
155
"Knifer (1)"
FF0000
4 Bytes
+1d8
108
"========= Thievery ========="
1
114
"Safe-Cracker (3)"
004080
4 Bytes
+144
113
"Masterthief (3)"
004080
4 Bytes
+148
112
"Silvertongue (3)"
004080
4 Bytes
+14c
111
"Sneak (1)"
004080
4 Bytes
+150
110
"Peddler (3)"
004080
4 Bytes
+154
109
"Monkey Trainer (1)"
004080
4 Bytes
+158
102
"========= Toughness ========="
1
106
"Bladeproof (2)"
008000
4 Bytes
+15C
105
"Bulletproof (2)"
008000
4 Bytes
+160
104
"Magic Resistance (3)"
008000
4 Bytes
+164
103
"Bullying (3)"
008000
4 Bytes
+168
94
"Liquid Courage (1)"
008000
4 Bytes
+16C
95
"Medicus (5)"
008000
4 Bytes
+170
96
"Wolverine (1)"
008000
4 Bytes
+174
97
"Drunkard (2)"
008000
4 Bytes
+178
98
"Distiller (1)"
008000
4 Bytes
+17C
99
"Resilient (1)"
008000
4 Bytes
+180
101
"========= Magic ========="
1
100
"Voodoo Magic (3)"
000000
4 Bytes
+184
132
"Crystal Magic (3)"
000000
4 Bytes
+188
133
"Rune Magic (3)"
000000
4 Bytes
+18C
134
"Master of Magic (2)"
000000
4 Bytes
+190
135
"Battle Mage (1)"
000000
4 Bytes
+194
136
"Ban Dancer (1)"
000000
4 Bytes
+198
137
"Alchemy (3)"
000000
4 Bytes
+19C
138
"Focus (3)"
000000
4 Bytes
+1a0
139
"Potion Brewery (1)"
000000
4 Bytes
+1a4
140
"Create Talismans (1)"
000000
4 Bytes
+1a8
141
"Create Spells (1)"
000000
4 Bytes
+1ac
142
"Ritual Master (1)"
000000
4 Bytes
+1b0
149
"========= Hunting ========="
1
144
"Carnivore (1)"
008080
4 Bytes
+1c8
152
"Vegetarian (1)"
008080
4 Bytes
+1cc
153
"Shadoweater (1)"
008080
4 Bytes
+1d0
154
"Miner (1)"
008080
4 Bytes
+1d4
156
"Skinner (1)"
008080
4 Bytes
+1dc
157
"Take Toothes (1)"
008080
4 Bytes
+1e0
158
"Take Claws (1)"
008080
4 Bytes
+1e4
159
"Take Horns (1)"
008080
4 Bytes
+1e8
160
"Take trophys (1)"
008080
4 Bytes
+1ec
210
"Coordinates"
1
"Risen3.exe"+00FB2518
0
0
58
213
"X"
Double
+1d0
211
"Y"
Double
+1e0
212
"Z"
Double
+1d8
183
"Debug - ignore me"
C0C0C0
1
182
"Static Jump Flag"
008000
4 Bytes
Risen3.exe+102A2D4
208
"Y Backup Pointer #1"
Double
"Risen3.exe"+00FB2450
1E0
0
98
209
"Y Backup Pointer #2"
Double
"Risen3.exe"+01002390
1E8
8
248
140