=O1DY6W0}Kk{R)teqmm2p%YDUzy.zELj$Ev6IqCuj;mQ[g,P,htfjTR/Mpm1t,9bNFq4?ClBR^G/xw)B,LS)UfTpxFK$)O]5?=V}ft1=#fqC2JUB_TG$LYDdD_xL+#D;yemFAn;y.t^q:bU?a+^icQgAi{g,-XT)Z-C]RE-,ULR9anb=I_IjE0s.h4T+UiUsf*gZV.1Ksxs_2nV.tUa:B?dA:(AZ]Nf/_66Js-Fm^+QRnGY.N}GFH7#CY5@OBf2em+Odb9_+klj/m0.wYf/N=AcjatS.q$]Jy*]W%+Tc1eO1NXX30B){LolC3.5j8AyFoR;N4Jf9=H(tYZOwm+%K[Yi}[?au5UtAqRwN5/e-76OOJ6GR/XJ}-zmDu)):BTW/uh^:db#8yNjq6@WNMjHE4$eylbvZWER6)J.)y2(ZzorDxpNAC8c/DG=Ak7z@mAYcHEkV5tX?+%c[)StaJScl@=Q4dq^F!a!PDaIjQLtGlnspo!Q(l=M!h+ik^WxSFUvTdl]GZ7yk]tN{_jDEy@*Zy#N/hLZ5Z2cl]7vf{WUcJw@3;O$5bxx^7v;$Zbv,fgj7!9byqjWElbvkI:.{Hk$%;DkoaEGx@jfXltw,Zp1^^eRxt5V2zBj!e!e;S4=KKVQrI%saveb8++5Q^sRG)ZyCorL,FgzN4GHu8J0BVy;V4t,qmr*sq(!kdanPdEurJbE0K*_]Mft53n2HEqMj;YubiZS_*xW6EwwGJKA_mDWk+lMuan=lDX:*C4::MDs0ZzXs58^q8}6e_,RK[;Sv9v;#{l6p)ZKV4pX@GoE%hb*gR}UhRkTmsMQ2)huh?@{+TBp2,jXtDuaj/Gl+Pzt?B6v1]v2aEy9a+%Ot(4(!R*JIL9j:O3BS48MG/OIZ[MPkFZO+asEjV*+m!zbbsK:WoK#Hf*Afudjz!URw*t%=dblq%_i0dDOM[TrapE,o!_;/*/.7Mj9HBvs;?]3}LL#yW:MMZD2k1.nEjZg4t_[pRW5A9Bb$RUXUS=VPMMChaqSBOvw1sIM{iCBRJF1qxga9sMq0idmj]$]GLZ)ayL?We?55%5r!sM^o?.h=5F)8D1TxiEMEE(/QI5Rmqftw0h6a;EBrQ[9f}^*p?b9Qh3Xe!-?y{bwxcKFzxrd^ke#[x$tR5*w746?pMrQS:PVrl/hG(%-Dib:]ARSt43Iu?6xi%Z?a!TECS+;8tglUloEfvgXf)kCj.{*IgIPHC5WM^A(y[v8h-+*][d-xQ4ylH^dhRfPcXZy/eVF)7dD!u%o6vH$58AJ+^M6pG5$W*Q6_3OmzqP?])]LY:tSO597K.@f:gfn].sxND^}T/3d%MDaDAWbq@G9H]Wk1SojIJ?%_IM+#5B0/NlonXN=5bk[n^RD{S,gI9H]c!mE$6zS:{Z?V+ZYjJ7xNcBujnxeeL:4iCryS?^slPEav7=Gqqyhq#p0%+?%M+#b*V,qiXUE8;[5_f8yeegL}?MAS3}PH[/QqZ[)$tiB[?wHv]6r1Qzslf?fmz.]Z1-B#@Ip)SEa8%)frG5t_/1aIS,$knm(i2*Ececblw1HyVwu4!A=jwos7p#(vLZ;JQQ7j[569=J]YW(]./70ncIjn=ftOpFaLrA2XDc[!=$2dT^k?EZHF/IW,j(5?V9DbT6*IZ7.g[oCpN;(FI[][[YbOvYF.6+PHfuL1rtV{LbSrfj8iby,N^LS9k=mhY41Mz4+X]kb0)EBF1ZC^:]tKTd;eB}t-WVE]r)t}J(JCbV[PG9U%)kghj!M_pFduY[j@UAu=Z%Br45SbU4W8jJ79jnMR=?F*A+hoGN(G_B8-$f;iqTLoz_r(F;w-Wn2MC*@HS^B(i1j,pWldnAN]lnsGaSJo/B,l[kGfVo}v[XamVq*hw:Y@3:93+xq9ZExMS!rUW;]g[rQHg]wus6DBN-Wf6mtG!_8Z,G77y}J:;t:Si+34/LF]5(Z$,{]:VKUZ{w}G*=#M6cAlIvR9.wNfPO-j[Y)5;zX@HZIw7fTgfM#vF_8oPKykOahu2eCR3=;8IVcz9q{*uQ:n_wL$JmsMOW:JKmLe)0)?qMLQYCqO0ge-0oG5bvTfQrQJ^JhmCJU33O}2EK-Rp9DssvufA6Px@B6qRVTUe{ga+SkfBgaV8K912$h_P/VB_+rQYHhAOx6?nXEO6)Kbc)*mDd6G#92JmFZx_}Z4CG3)ELDykm[}8g.VzK5utwwpV,SUSDQVR7sOae@+%/?#;Ol5DlPSN?/Ia7];n$vZvg[I*yG*A:;3LFMsb)1*$Sz^bIMeqG;F6}%YP69sDr3-YW-CxiB3nU*Gi-(TpM_YZ@(s_KDd6V/9)jqtF@MI=0!icsx3R88x3Mf/wxp0QG8(W)QkrDwYJI./HN}QtVjQVh!e}3RDAG,!c8hF?z(UUoD,etYFXgOQ#xdg{UAyn:gsPJR@caSzl*pNNmgH8WJ*,(2TlkbWmOE7*Ow9xCw0X+/nxX)#%GX,}PJu5IE73}EBC{dV(IzzJs)Y-Oo74v0#+G[@P4gSSlrtLaD!DqFm6b*tr}]ROEKqXJug;M:/(ji%ZjMx:EwETD#9Ay;i,*{#TVS,B=iU)ucGWnliD/Dr8IWpd/Is^iH@5eM!6H/E@GTxLm?!I};J/4)mb%tc#c[VqA)Bj((Xs*C!D7xQTkOg$:U4SkQ:Z%cUxnGJ@djv)A*;Td?d.yL1vOSI(T3hr3$2m.GdoM9YFWv1%x%V_JgRv/5F]xVdSt1{8e[Y3)LW_CJ.NC=lnhokZ1m?^EGiAv7Vw*/A?NbTa!mSvMBF)dB1J[jCj)[9R(1!XKN1[dcR)aIjJnuhFgDzNUS]ybT0%[baKGL-R(CdZH+0}]O=NmP#8S,$^z6e$VjU1_O7L;Ea@j4F]d31GLc93TA49);3,/=Xqkcnq:,}jm@:swOTAbTm8rl_G%hvxw2yGVXS5C.8J{bxK.RKJ(24thdinsZkScZ(b1eKV[i!$_iq/5byu*c}xQ)7?C4dzOM)vSZS
=O1DY6W0}Kk{R)teqmm2p%YDUzy.!fp?Gt-#1=W*$78#eLLf/L+7Dlk?p^+h+4RKBn8^26Nz,2p?,cW5ZAu=FKvUWopiIIe2^g#0KuT?:z]Skqu47v8/MiC!m9$nQVngY#O7qR]-m81QbIv^I=A6)jMu=^/cUpqS/70V_@W^puD!bFAJ$-,ATs}JOn?$,w@Eke_LN=tbCXZBYI$$zC(6mm+rp1QDY[H5O.hd5v]y[$E#m*-OTUjF2O:p}JwaiOm^P,c_P^Hw44o$A3WT}To${3_9A.Br_oG6C}=CNt,zS$]Wk{objJ*PKckt9:jW+D#VbOkSS+7.sZ%$(!^tnEMwA?3mwG2qwXpjQX@9gd8[u=z$bktc^cu6%H:l(Bc$CxtXq#33dlsu0?^O@9wpe,p@pPa:D{6Uo+l#5RPGNa]mik$2+fNIkjNkB*aXVgsTb)TjjEnjnen1LQ,(4Wbuu8nGV7XQ3XZ#9];6?luRKyoR[um^ZUFzMeN4x*7[8_I2tKNo4y[xo06hKn(amcMt:J1E_B-6UlE$BH8vu,*l**:*8KLZyhc$KI+fn4v}J*anF80,)9(:4v+2jNYv=_agRqFygT;%[ro2.el.HI[1q?JkNyYTL99,9JB+kcLH.=2t[S4vXy}N5N%ujsePcB4MA8TeXm/kUcLJ]v7ud,{!H$Tc!,P]q/)^h5mJn_.A}o)5Jn]5GSXO%y*}-1XYuC098+6@j26Z*]!ptdqAi=lC^x)]CkxxSO;AA-,El{)4gp*0_q2oG0:Z$+?UH_dX(*[?GgOPrqby7gi9fN)_49}bb.Pl0QxO8m+E=iM??#,AazuXV!x[U#.m#%;[rjGY12;xCVs;klVSHUsrU1d+H^)6k7UGE?gvz}usTnqg2t!]yaa6RSOzH;iRic8=nd.Y5MwOzOcKijwkR:;UhUU[XD$h9ls?X?xY^1.Hyw*1]9dVIeU50szAbP8!}M9v/*?6*WU?b1oA:)q5C;ceF)t@%^!3[o4{D;(ZR3A]XfJj1{0sgFX_j9HNOrE#!x+GF*,vsdv0*lsj+nT}!ac:7^/U+(G1od1lh?goe*u.#{%2iZ@gms9?ucv!ORCCD%Epf2%%/pU.9$yE4lHair#7eNUpzza1m!u}?i.aq2L$bSvTdmuA=my%B!H*wG.h)8JOc-A;M@2r?V2fEJ,_B6+$Fc:[p/S4M(6X4m!985?]2pM0S3RyE{gVAV$ha6vp@oKKW;:AhR*t?VSbP3m/;F5K$bOMqM]{EvF^,]IZr}5E{=giNSr)4i@t^+yXsQlF4lo6?$gO#h^/G.1Tqtj-;q;L$w^T7QAa@{s4!s3PCUho]jetU/*e;l)$-1A3awB-QGZHlZh*c-BfY7h0p[?q]=vHY51_C=]ZgV{TD!W$djhSu^v)0sNVzUz5L+@32;o;%mkgubBHiIXNn8UF(DY]p@2!ZF/Q[o8uA)D=g9th!Hgape!MDfXZ3xC2e=H$yo[/EydlI^dxm3jCw)ni7-88aqPxw7Cn8o%^@GHRHHaM]Li%^Hxa2pGf{YwO1AU*trYxF-?O=P-:{/Z?O++v_k#4I*4_Wnoh.yre]?=e.$dfzk2=;Z)o4sGyO@(M$K*,+@U9(^g.2i!9%y/)2=7*wY}=Q@K]%%ON$aqG5FiGGc7%1Zi:-BqvKoP/)ICbzXt{?Lp84uSSL1b=uH4YPb1o3V%ljKYi(^D:Puk7;$P[ueFuIs*.W^P7=.:zvUCLwAGw3Mq{JYZodfX6iC#sw@s#LrzAxYmqEkC-;CYdp$NIe?*7T7=ztRrH@Djclvz?S?.1W!K[zb:$hs;$Rs_X_IjyQjPc)-+*N:%%;8m1y=[]DPcw6lG+@XE4r-$)ytG-,phqUVp$!S#T2py%qGXxuUU?L{x#AH%_ccCMavH_^7pjMrlF%6*KO+8and8wz*f_DSWT]fw(zos2-AR=jwSITkk?-WYnAwR38/[P%J+-kSp(dbF6=p]9nE43!sF8eo8s6?7%v^Wl;G-5=}noe+XpA+Pjt7%1+l[uzUei@]/3DF?{EoRpg;6rF/P:NOxEaSFV+)o!V)dD:-}lBy-Q+T-=9lM]jmXUliyFW]KB,GJs{GU/03v3r}?ceTLF[yeokRpctp[7oN=og5/;,^iH!wU1+o6JqnAWJwTmq(k}3(z0;d${Vu[kIWXm6[U?+mvU4/CcR.-tlyU-$,A;6Iy^ZyGJ^/pb78H;]NoDPiz#Wu@r+/]2-#]jd37K(,,?lxbh}n%?@{ghBJ8=8$S%]jLu#JnTc%mY]Z9}ya=bQULn=Yrju;qsjLPV?o7qZ}63/pr.S5].:x1RoRXvD3NAi[(KDWG7.F$Ole{N:(gWFiwBimRO4[i]57a0x81{RN4bhW-.rkY}WOfimBEMc?AS^(-8CAvhmMBp5[j,OlujF$;lEa#YU.l7/ts5%+?$1qH$^55^GB(P:L5$*MIg-;},xl]4[*Dm^5(0QhY7Wud]zRqIJ7Wi[p3aw-.GOI:8JRe*Dy2q-yNp0Y5,O(z-G^5o7IHSR=lB:@B85v{ZI+@CN0ww24*w#U9Jd(*:(68?i1s02iSc_0@v6L6f7aDD$]$a}ZT^VtsB3dj?]lMRgIJ6_@]q)PYUxW(9UP(x9rj1giW^Z3kOI[:):D1SRVUkFf:1Sfge:,BkEq3LWD@;MQQJ!1@Uya$R@djwEA+8ff?d.yL1vOSI+*[667g_I6XU.B;YGftPF{E3.?}Gx^I7k?0b/0w/HOhABqJK/8dImFOC;gA7+yzt=SwtGDE#NmJLgJ%f/)TyUh]4*1go:t+PQqm+T5PDbKNK6fcR)mMjJnuhFg9GJyv)Q/tzT}r[Unyf*pmVwvleRIbce%1EX5pKS__!jtzproI1g7R$ImQicqOnmu$vG3G4Px6z_Mv?8a7r0ejV7-uucxF!=][Wf$f2HY^M@vz!srl*r71Wv$HI2PH?YtPc{NNc$=3O/.X{zP;FfGC^vGzdiOa3;#ZC#r4]dMe}u)5^rLX=
27
"Enable"
00FF00
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
Thx to aSwedishMagyar for some feature ideas like weapon & bow strenght
(https://fearlessrevolution.com/viewtopic.php?t=14599)
}
[ENABLE]
//Player Stats
aobscanmodule(getPbase,Arcania.exe,F4 D9 80 FC 00 00 00)
alloc(newmem,$1000)
label(code)
label(return)
label(pbase)
newmem:
cmp [eax+2C],1
jne @f
mov [pbase],eax
code:
fld dword ptr [eax+000000FC]
jmp return
pbase:
dd 00
getPbase+01:
jmp newmem
nop
return:
registersymbol(getPbase pbase)
//Player Movement
aobscanmodule(getMovementBase,Arcania.exe,D9 58 74 8B 8D A0 FE FF FF) // should be unique
alloc(mmmem,$1000)
label(mmcode)
label(mmreturn)
label(mmbase)
mmmem:
cmp [eax+124],0 //12C,4 //744,1
jne @f
mov [mmbase],eax
mmcode:
fstp dword ptr [eax+74]
mov ecx,[ebp-00000160]
jmp mmreturn
mmbase:
dd 00
getMovementBase:
jmp mmmem
nop 4
mmreturn:
registersymbol(getMovementBase mmbase)
//coords
aobscanmodule(getCoords,Arcania.exe,D9 40 2C DE D9) // should be unique
alloc(anewmem,$1000)
label(acode)
label(areturn)
label(coordBase)
anewmem:
mov [coordBase],eax
acode:
fld dword ptr [eax+2C]
fcompp
jmp areturn
coordBase:
dd 00
getCoords:
jmp anewmem
areturn:
registersymbol(getCoords coordBase)
[DISABLE]
getPbase+01:
db D9 80 FC 00 00 00
getMovementBase:
db D9 58 74 8B 8D A0 FE FF FF
getCoords:
db D9 40 2C DE D9
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+49AC
Arcania.simul::base::Observer::objectDeleted+4998: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+499A: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+499B: C2 04 00 - ret 0004
Arcania.simul::base::Observer::objectDeleted+499E: CC - int 3
Arcania.simul::base::Observer::objectDeleted+499F: CC - int 3
Arcania.simul::base::Observer::objectDeleted+49A0: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+49A1: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+49A3: 83 EC 0C - sub esp,0C
Arcania.simul::base::Observer::objectDeleted+49A6: 89 4D F4 - mov [ebp-0C],ecx
Arcania.simul::base::Observer::objectDeleted+49A9: 8B 45 F4 - mov eax,[ebp-0C]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+49AC: D9 80 FC 00 00 00 - fld dword ptr [eax+000000FC]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+49B2: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
Arcania.simul::base::Observer::objectDeleted+49B8: DF E0 - fnstsw ax
Arcania.simul::base::Observer::objectDeleted+49BA: F6 C4 44 - test ah,44
Arcania.simul::base::Observer::objectDeleted+49BD: 7B 68 - jnp Arcania.simul::base::Observer::objectDeleted+4A27
Arcania.simul::base::Observer::objectDeleted+49BF: 8B 4D F4 - mov ecx,[ebp-0C]
Arcania.simul::base::Observer::objectDeleted+49C2: D9 81 B4 01 00 00 - fld dword ptr [ecx+000001B4]
Arcania.simul::base::Observer::objectDeleted+49C8: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
Arcania.simul::base::Observer::objectDeleted+49CE: DF E0 - fnstsw ax
Arcania.simul::base::Observer::objectDeleted+49D0: F6 C4 44 - test ah,44
Arcania.simul::base::Observer::objectDeleted+49D3: 7B 1E - jnp Arcania.simul::base::Observer::objectDeleted+49F3
}
521
"Player"
1
541
"Coordinates"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(getCoords,Arcania.exe,D9 40 2C DE D9) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(coordBase)
newmem:
mov [coordBase],eax
code:
fld dword ptr [eax+2C]
fcompp
jmp return
coordBase:
dd 00
getCoords:
jmp newmem
return:
registersymbol(getCoords coordBase)
[DISABLE]
getCoords:
db D9 40 2C DE D9
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+7E6FD9
Arcania.exe+7E6FBA: 8B 02 - mov eax,[edx]
Arcania.exe+7E6FBC: 8B 4D C4 - mov ecx,[ebp-3C]
Arcania.exe+7E6FBF: 8B 50 24 - mov edx,[eax+24]
Arcania.exe+7E6FC2: FF D2 - call edx
Arcania.exe+7E6FC4: D9 5D E4 - fstp dword ptr [ebp-1C]
Arcania.exe+7E6FC7: D9 45 E4 - fld dword ptr [ebp-1C]
Arcania.exe+7E6FCA: DC 25 A0 BF D9 00 - fsub qword ptr [Arcania.exe+99BFA0]
Arcania.exe+7E6FD0: D9 5D C0 - fstp dword ptr [ebp-40]
Arcania.exe+7E6FD3: D9 45 C0 - fld dword ptr [ebp-40]
Arcania.exe+7E6FD6: 8B 45 EC - mov eax,[ebp-14]
// ---------- INJECTING HERE ----------
Arcania.exe+7E6FD9: D9 40 2C - fld dword ptr [eax+2C]
// ---------- DONE INJECTING ----------
Arcania.exe+7E6FDC: DE D9 - fcompp
Arcania.exe+7E6FDE: DF E0 - fnstsw ax
Arcania.exe+7E6FE0: F6 C4 05 - test ah,05
Arcania.exe+7E6FE3: 7B 1C - jnp Arcania.exe+7E7001
Arcania.exe+7E6FE5: 83 7D FC 00 - cmp dword ptr [ebp-04],00
Arcania.exe+7E6FE9: 74 20 - je Arcania.exe+7E700B
Arcania.exe+7E6FEB: 8B 4D EC - mov ecx,[ebp-14]
Arcania.exe+7E6FEE: 83 C1 24 - add ecx,24
Arcania.exe+7E6FF1: 51 - push ecx
Arcania.exe+7E6FF2: 8B 4D FC - mov ecx,[ebp-04]
}
542
"ActorComponentObject3DBase"
0
4 Bytes
[coordBase]
6
"Inf Health"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(infHealth,Arcania.exe,D8 3A D9 5D F4 D9 45 F4 8B E5 5D C3 CC CC CC CC CC CC CC 55 8B EC 51) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(ohkf)
newmem:
push ebx
lea ebx,[edx-FC]
cmp [pbase],ebx
jne @f
mov ebx,[edx+8]
mov [edx],ebx
jmp code
onehit:
cmp [ohkf],0
je @f
mov [edx],0
code:
pop ebx
fdivr dword ptr [edx]
fstp dword ptr [ebp-0C]
jmp return
ohkf:
db 00
infHealth:
jmp newmem
return:
registersymbol(infHealth ohkf)
[DISABLE]
infHealth:
db D8 3A D9 5D F4
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+21BD
Arcania.simul::base::Observer::objectDeleted+21A0: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+21A1: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+21A3: 83 EC 0C - sub esp,0C
Arcania.simul::base::Observer::objectDeleted+21A6: 89 4D F8 - mov [ebp-08],ecx
Arcania.simul::base::Observer::objectDeleted+21A9: 8B 45 F8 - mov eax,[ebp-08]
Arcania.simul::base::Observer::objectDeleted+21AC: 05 FC 00 00 00 - add eax,000000FC
Arcania.simul::base::Observer::objectDeleted+21B1: 89 45 FC - mov [ebp-04],eax
Arcania.simul::base::Observer::objectDeleted+21B4: 8B 4D FC - mov ecx,[ebp-04]
Arcania.simul::base::Observer::objectDeleted+21B7: D9 41 08 - fld dword ptr [ecx+08]
Arcania.simul::base::Observer::objectDeleted+21BA: 8B 55 FC - mov edx,[ebp-04]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+21BD: D8 3A - fdivr dword ptr [edx]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+21BF: D9 5D F4 - fstp dword ptr [ebp-0C]
Arcania.simul::base::Observer::objectDeleted+21C2: D9 45 F4 - fld dword ptr [ebp-0C]
Arcania.simul::base::Observer::objectDeleted+21C5: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+21C7: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+21C8: C3 - ret
Arcania.simul::base::Observer::objectDeleted+21C9: CC - int 3
Arcania.simul::base::Observer::objectDeleted+21CA: CC - int 3
Arcania.simul::base::Observer::objectDeleted+21CB: CC - int 3
Arcania.simul::base::Observer::objectDeleted+21CC: CC - int 3
Arcania.simul::base::Observer::objectDeleted+21CD: CC - int 3
}
556
"Kill nearby enemies"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('ohkf',1)
[DISABLE]
writeByte('ohkf',0)
12
"Inf Stamina"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(infStamina,Arcania.exe,00 CC CC 55 8B EC 51 89 4D FC 8B 45 FC D9 80 08 01 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
cmp [pbase],eax
jne @f
push ebx
mov ebx,[eax+110]
mov [eax+108],ebx
pop ebx
code:
fld dword ptr [eax+00000108]
jmp return
infStamina+0D:
jmp newmem
nop
return:
registersymbol(infStamina)
[DISABLE]
infStamina+0D:
db D9 80 08 01 00 00
unregistersymbol(infStamina)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+2A8A
Arcania.simul::base::Observer::objectDeleted+2A78: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+2A7A: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+2A7B: C2 08 00 - ret 0008
Arcania.simul::base::Observer::objectDeleted+2A7E: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A7F: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A80: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+2A81: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+2A83: 51 - push ecx
Arcania.simul::base::Observer::objectDeleted+2A84: 89 4D FC - mov [ebp-04],ecx
Arcania.simul::base::Observer::objectDeleted+2A87: 8B 45 FC - mov eax,[ebp-04]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+2A8A: D9 80 08 01 00 00 - fld dword ptr [eax+00000108]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+2A90: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+2A92: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+2A93: C3 - ret
Arcania.simul::base::Observer::objectDeleted+2A94: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A95: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A96: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A97: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A98: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A99: CC - int 3
Arcania.simul::base::Observer::objectDeleted+2A9A: CC - int 3
}
526
"Inf Mana"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(manaAccess,Arcania.exe,00 CC CC CC CC 55 8B EC 51 89 4D FC 8B 45 FC D9 80 14 01 00 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
cmp [pbase],eax
jne @f
push ebp
mov ebp,[eax+11C]
mov [eax+114],ebp
pop ebp
code:
fld dword ptr [eax+00000114]
jmp return
manaAccess+0F:
jmp newmem
nop
return:
registersymbol(manaAccess)
[DISABLE]
manaAccess+0F:
db D9 80 14 01 00 00
unregistersymbol(manaAccess)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+28CA
Arcania.simul::base::Observer::objectDeleted+28B9: C2 10 00 - ret 0010
Arcania.simul::base::Observer::objectDeleted+28BC: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28BD: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28BE: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28BF: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28C0: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+28C1: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+28C3: 51 - push ecx
Arcania.simul::base::Observer::objectDeleted+28C4: 89 4D FC - mov [ebp-04],ecx
Arcania.simul::base::Observer::objectDeleted+28C7: 8B 45 FC - mov eax,[ebp-04]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+28CA: D9 80 14 01 00 00 - fld dword ptr [eax+00000114]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+28D0: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+28D2: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+28D3: C3 - ret
Arcania.simul::base::Observer::objectDeleted+28D4: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28D5: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28D6: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28D7: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28D8: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28D9: CC - int 3
Arcania.simul::base::Observer::objectDeleted+28DA: CC - int 3
}
475
"Inf Skill Points"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(abilityPts,Arcania.exe,01 B1 CC 00 00 00)
abilityPts:
db 90 90 90 90 90 90
luacall(showMessage('You need at least one point'))
[DISABLE]
abilityPts:
db 01 B1 CC 00 00 00
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+681120
Arcania.exe+6810FE: 74 44 - je Arcania.exe+681144
Arcania.exe+681100: 8D 4C 24 18 - lea ecx,[esp+18]
Arcania.exe+681104: E8 C7 58 E9 FF - call Arcania.exe+5169D0
Arcania.exe+681109: 83 C0 04 - add eax,04
Arcania.exe+68110C: 8B 00 - mov eax,[eax]
Arcania.exe+68110E: BE 01 00 00 00 - mov esi,00000001
Arcania.exe+681113: 01 70 40 - add [eax+40],esi
Arcania.exe+681116: 8B C8 - mov ecx,eax
Arcania.exe+681118: E8 33 F9 FF FF - call Arcania.exe+680A50
Arcania.exe+68111D: 8B 4F 70 - mov ecx,[edi+70]
// ---------- INJECTING HERE ----------
Arcania.exe+681120: 01 B1 CC 00 00 00 - add [ecx+000000CC],esi
// ---------- DONE INJECTING ----------
Arcania.exe+681126: E8 85 A1 FF FF - call Arcania.exe+67B2B0
Arcania.exe+68112B: 8B CF - mov ecx,edi
Arcania.exe+68112D: E8 DE D3 FF FF - call Arcania.exe+67E510
Arcania.exe+681132: 8B 8F 94 00 00 00 - mov ecx,[edi+00000094]
Arcania.exe+681138: 8B 11 - mov edx,[ecx]
Arcania.exe+68113A: 8B 42 18 - mov eax,[edx+18]
Arcania.exe+68113D: 68 D0 36 E8 00 - push Arcania.exe+A836D0
Arcania.exe+681142: FF D0 - call eax
Arcania.exe+681144: 8B 4C 24 3C - mov ecx,[esp+3C]
Arcania.exe+681148: 64 89 0D 00 00 00 00 - mov fs:[00000000],ecx
}
2
"No item loss"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(writeItems,Arcania.exe,89 50 34 8B 4D A8)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
push ecx
mov ecx,[eax+34]
cmp edx,ecx
jl @f
mov [eax+34],edx
@@:
pop ecx
mov ecx,[ebp-58]
jmp return
writeItems:
jmp newmem
nop
return:
registersymbol(writeItems)
[DISABLE]
writeItems:
db 89 50 34 8B 4D A8
unregistersymbol(writeItems)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+334175
Arcania.exe+334155: E8 56 BE EC FF - call Arcania.exe+1FFFB0
Arcania.exe+33415A: 8B 4D A8 - mov ecx,[ebp-58]
Arcania.exe+33415D: E8 FE 01 00 00 - call Arcania.exe+334360
Arcania.exe+334162: 0F B6 C0 - movzx eax,al
Arcania.exe+334165: 85 C0 - test eax,eax
Arcania.exe+334167: 75 0F - jne Arcania.exe+334178
Arcania.exe+334169: 8B 4D A8 - mov ecx,[ebp-58]
Arcania.exe+33416C: 8B 51 34 - mov edx,[ecx+34]
Arcania.exe+33416F: 83 EA 01 - sub edx,01
Arcania.exe+334172: 8B 45 A8 - mov eax,[ebp-58]
// ---------- INJECTING HERE ----------
Arcania.exe+334175: 89 50 34 - mov [eax+34],edx
// ---------- DONE INJECTING ----------
Arcania.exe+334178: 8B 4D A8 - mov ecx,[ebp-58]
Arcania.exe+33417B: 83 79 34 00 - cmp dword ptr [ecx+34],00
Arcania.exe+33417F: 76 08 - jna Arcania.exe+334189
Arcania.exe+334181: 8B 4D A8 - mov ecx,[ebp-58]
Arcania.exe+334184: E8 57 11 00 00 - call Arcania.exe+3352E0
Arcania.exe+334189: C7 45 EC 00 00 00 00 - mov [ebp-14],00000000
Arcania.exe+334190: 8B 55 A8 - mov edx,[ebp-58]
Arcania.exe+334193: 52 - push edx
Arcania.exe+334194: 8D 4D EC - lea ecx,[ebp-14]
Arcania.exe+334197: E8 14 BE EC FF - call Arcania.exe+1FFFB0
}
467
"XP"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(experience,Arcania.exe,D9 80 A0 01 00 00 8B E5 5D C3 CC CC CC CC CC CC CC CC CC CC CC CC 55 8B EC 83) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(reqxp)
label(curxp)
label(newxp)
newmem:
push ebp
//get max xp
mov ebp,[eax+1A0]
mov [reqxp],ebp
//get current xp
mov ebp,[eax+198]
mov [curxp],ebp
pop ebp
writeXP:
cmp [newxp],0
je @f
push ebp
mov ebp,[newxp]
mov [eax+198],ebp
pop ebp
mov [newxp],00
code:
fld dword ptr [eax+000001A0]
jmp return
reqxp:
dd 00
curxp:
dd 00
newxp:
dd 00
experience:
jmp newmem
nop
return:
registersymbol(experience reqxp curxp newxp)
[DISABLE]
experience:
db D9 80 A0 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+324A
Arcania.simul::base::Observer::objectDeleted+323B: CC - int 3
Arcania.simul::base::Observer::objectDeleted+323C: CC - int 3
Arcania.simul::base::Observer::objectDeleted+323D: CC - int 3
Arcania.simul::base::Observer::objectDeleted+323E: CC - int 3
Arcania.simul::base::Observer::objectDeleted+323F: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3240: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+3241: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+3243: 51 - push ecx
Arcania.simul::base::Observer::objectDeleted+3244: 89 4D FC - mov [ebp-04],ecx
Arcania.simul::base::Observer::objectDeleted+3247: 8B 45 FC - mov eax,[ebp-04]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+324A: D9 80 A0 01 00 00 - fld dword ptr [eax+000001A0]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+3250: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+3252: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+3253: C3 - ret
Arcania.simul::base::Observer::objectDeleted+3254: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3255: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3256: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3257: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3258: CC - int 3
Arcania.simul::base::Observer::objectDeleted+3259: CC - int 3
Arcania.simul::base::Observer::objectDeleted+325A: CC - int 3
}
471
"Set New XP"
0
Float
newxp
470
"Current XP"
0
Float
curxp
468
"Next Level"
0
Float
reqxp
479
"Gold"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(gold,Arcania.exe,8B 80 AC 01 00 00 74)
alloc(newmem,$1000)
label(code)
label(return)
label(newgold)
newmem:
cmp [newgold],0
je @f
push ebp
mov ebp,[newgold]
mov [eax+1AC],ebp
pop ebp
mov [newgold],00
code:
mov eax,[eax+000001AC]
jmp return
newgold:
dd 00
gold:
jmp newmem
nop
return:
registersymbol(gold newgold)
[DISABLE]
gold:
db 8B 80 AC 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+6C4DCA
Arcania.exe+6C4DA7: 8B BE 98 00 00 00 - mov edi,[esi+00000098]
Arcania.exe+6C4DAD: 85 FF - test edi,edi
Arcania.exe+6C4DAF: 74 5C - je Arcania.exe+6C4E0D
Arcania.exe+6C4DB1: E8 EA 31 AE FF - call Arcania.simul::base::Observer::objectDeleted+6A0
Arcania.exe+6C4DB6: 50 - push eax
Arcania.exe+6C4DB7: 8D 4F 10 - lea ecx,[edi+10]
Arcania.exe+6C4DBA: E8 21 8A A9 FF - call Arcania.exe+15D7E0
Arcania.exe+6C4DBF: 85 C0 - test eax,eax
Arcania.exe+6C4DC1: 74 4A - je Arcania.exe+6C4E0D
Arcania.exe+6C4DC3: 83 BE AC 00 00 00 00 - cmp dword ptr [esi+000000AC],00
// ---------- INJECTING HERE ----------
Arcania.exe+6C4DCA: 8B 80 AC 01 00 00 - mov eax,[eax+000001AC]
// ---------- DONE INJECTING ----------
Arcania.exe+6C4DD0: 74 3B - je Arcania.exe+6C4E0D
Arcania.exe+6C4DD2: 50 - push eax
Arcania.exe+6C4DD3: 8D 44 24 10 - lea eax,[esp+10]
Arcania.exe+6C4DD7: 68 78 6D E4 00 - push Arcania.exe+A46D78
Arcania.exe+6C4DDC: 50 - push eax
Arcania.exe+6C4DDD: E8 5E FB 9D FF - call Arcania.simul::clouds::CloudClientInterface::Relight+8AD0
Arcania.exe+6C4DE2: 83 C4 0C - add esp,0C
Arcania.exe+6C4DE5: 8B 8E AC 00 00 00 - mov ecx,[esi+000000AC]
Arcania.exe+6C4DEB: 6A 00 - push 00
Arcania.exe+6C4DED: 50 - push eax
}
480
"New Value"
0
Float
newgold
37
"Fast Run"
Auto Assembler Script
{$lua}
[ENABLE]
speedBackup = readFloat('[mmbase]-50')
writeFloat('[mmbase]-50',1000)
[DISABLE]
writeFloat('[mmbase]-50',speedBackup)
15
"Bow Power"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(pullStrengt,Arcania.exe,D9 80 A0 01 00 00 D9 45) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(bowPower)
newmem:
cmp [bowPower],0
je @f
push ebp
mov ebp,[bowPower]
mov [eax+000001A0],ebp
pop ebp
code:
fld dword ptr [eax+000001A0]
jmp return
bowPower:
dd 00
pullStrengt:
jmp newmem
nop
return:
registersymbol(pullStrengt bowPower)
[DISABLE]
pullStrengt:
db D9 80 A0 01 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+1FECDC
Arcania.exe+1FECCB: CC - int 3
Arcania.exe+1FECCC: CC - int 3
Arcania.exe+1FECCD: CC - int 3
Arcania.exe+1FECCE: CC - int 3
Arcania.exe+1FECCF: CC - int 3
Arcania.exe+1FECD0: 55 - push ebp
Arcania.exe+1FECD1: 8B EC - mov ebp,esp
Arcania.exe+1FECD3: 83 EC 3C - sub esp,3C
Arcania.exe+1FECD6: 89 4D D0 - mov [ebp-30],ecx
Arcania.exe+1FECD9: 8B 45 D0 - mov eax,[ebp-30]
// ---------- INJECTING HERE ----------
Arcania.exe+1FECDC: D9 80 A0 01 00 00 - fld dword ptr [eax+000001A0]
// ---------- DONE INJECTING ----------
Arcania.exe+1FECE2: D9 45 08 - fld dword ptr [ebp+08]
Arcania.exe+1FECE5: DA E9 - fucompp
Arcania.exe+1FECE7: DF E0 - fnstsw ax
Arcania.exe+1FECE9: F6 C4 44 - test ah,44
Arcania.exe+1FECEC: 0F 8B E7 01 00 00 - jnp Arcania.exe+1FEED9
Arcania.exe+1FECF2: C7 45 FC 00 00 00 00 - mov [ebp-04],00000000
Arcania.exe+1FECF9: 8B 4D 14 - mov ecx,[ebp+14]
Arcania.exe+1FECFC: 51 - push ecx
Arcania.exe+1FECFD: 8B 55 0C - mov edx,[ebp+0C]
Arcania.exe+1FED00: 52 - push edx
}
465
"New Value"
0
Float
bowPower
463
"MeleePower"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(meleePower,Arcania.exe,D9 84 01 FC 00 00 00 D9) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(newPower)
newmem:
cmp [newPower],0
je @f
push ebp
mov ebp,[newPower]
mov [ecx+eax+000000FC],ebp
pop ebp
code:
fld dword ptr [ecx+eax+000000FC]
jmp return
newPower:
dd 00
meleePower:
jmp newmem
nop 2
return:
registersymbol(meleePower newPower)
[DISABLE]
meleePower:
db D9 84 01 FC 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+2E12
Arcania.simul::base::Observer::objectDeleted+2DFA: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+2DFC: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+2DFD: C2 08 00 - ret 0008
Arcania.simul::base::Observer::objectDeleted+2E00: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+2E01: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+2E03: 83 EC 1C - sub esp,1C
Arcania.simul::base::Observer::objectDeleted+2E06: 89 4D E8 - mov [ebp-18],ecx
Arcania.simul::base::Observer::objectDeleted+2E09: 8B 45 08 - mov eax,[ebp+08]
Arcania.simul::base::Observer::objectDeleted+2E0C: 6B C0 0C - imul eax,eax,0C
Arcania.simul::base::Observer::objectDeleted+2E0F: 8B 4D E8 - mov ecx,[ebp-18]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+2E12: D9 84 01 FC 00 00 00 - fld dword ptr [ecx+eax+000000FC]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+2E19: D9 5D FC - fstp dword ptr [ebp-04]
Arcania.simul::base::Observer::objectDeleted+2E1C: 8B 4D E8 - mov ecx,[ebp-18]
Arcania.simul::base::Observer::objectDeleted+2E1F: E8 0C 42 00 00 - call Arcania.simul::base::Observer::objectDeleted+7030
Arcania.simul::base::Observer::objectDeleted+2E24: 89 45 F8 - mov [ebp-08],eax
Arcania.simul::base::Observer::objectDeleted+2E27: 83 7D F8 00 - cmp dword ptr [ebp-08],00
Arcania.simul::base::Observer::objectDeleted+2E2B: 74 69 - je Arcania.simul::base::Observer::objectDeleted+2E96
Arcania.simul::base::Observer::objectDeleted+2E2D: 8B 55 F8 - mov edx,[ebp-08]
Arcania.simul::base::Observer::objectDeleted+2E30: 8A 42 1C - mov al,[edx+1C]
Arcania.simul::base::Observer::objectDeleted+2E33: 88 45 F7 - mov [ebp-09],al
Arcania.simul::base::Observer::objectDeleted+2E36: 0F B6 4D F7 - movzx ecx,byte ptr [ebp-09]
}
464
"New Value"
0
Float
newPower
36
"Stats"
1
29
"Health"
0
Float
[pbase]+FC
31
"Stamina"
0
Float
[pbase]+108
524
"Mana"
0
Float
[pbase]+114
525
"Max Mana"
0
Float
[pbase]+11C
34
"Current Speed"
0
Float
[mmbase]+74
30
"Max Health"
0
Float
[pbase]+104
32
"Max Stamina"
0
Float
[pbase]+110
33
"Max Run Speed"
450:Default
0
Float
[mmbase]-50
543
"X"
Float
[coordBase]+24
544
"Y"
Float
[coordBase]+28
545
"Z"
Float
[coordBase]+2C
546
"Current Island"
0
String
32
0
0
1
[coordBase]+8C
E8
547
"Current Location"
0
String
32
0
0
1
[coordBase]+8C
168
530
"World"
1
518
"Time of Day"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(timeOfDay,Arcania.exe,D9 40 30 8B E5)
alloc(newmem,$1000)
label(code)
label(return)
label(newTime)
label(curTime)
newmem:
push ebp
mov ebp,[eax+30]
mov [curTime],ebp
pop ebp
setTime:
cmp [newTime],0
je @f
push ebp
mov ebp,[newTime]
mov [eax+30],ebp
pop ebp
mov [newTime],0
code:
fld dword ptr [eax+30]
mov esp,ebp
jmp return
newTime:
dd 00
curTime:
dd 00
timeOfDay:
jmp newmem
return:
registersymbol(timeOfDay newTime curTime)
[DISABLE]
timeOfDay:
db D9 40 30 8B E5
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+25740A
Arcania.exe+2573FB: CC - int 3
Arcania.exe+2573FC: CC - int 3
Arcania.exe+2573FD: CC - int 3
Arcania.exe+2573FE: CC - int 3
Arcania.exe+2573FF: CC - int 3
Arcania.exe+257400: 55 - push ebp
Arcania.exe+257401: 8B EC - mov ebp,esp
Arcania.exe+257403: 51 - push ecx
Arcania.exe+257404: 89 4D FC - mov [ebp-04],ecx
Arcania.exe+257407: 8B 45 FC - mov eax,[ebp-04]
// ---------- INJECTING HERE ----------
Arcania.exe+25740A: D9 40 30 - fld dword ptr [eax+30]
// ---------- DONE INJECTING ----------
Arcania.exe+25740D: 8B E5 - mov esp,ebp
Arcania.exe+25740F: 5D - pop ebp
Arcania.exe+257410: C3 - ret
Arcania.exe+257411: CC - int 3
Arcania.exe+257412: CC - int 3
Arcania.exe+257413: CC - int 3
Arcania.exe+257414: CC - int 3
Arcania.exe+257415: CC - int 3
Arcania.exe+257416: CC - int 3
Arcania.exe+257417: CC - int 3
}
520
"Current Time"
0
Float
curTime
519
"New Time"
0
Float
newTime
528
"World Timescale"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(worldTimeMult,Arcania.exe,D8 49 38 8B 55 F8)
alloc(newmem,$1000)
label(code)
label(return)
label(wTime)
newmem:
push ebp
mov ebp,[wTime]
mov [ecx+38],ebp
pop ebp
code:
fmul dword ptr [ecx+38]
mov edx,[ebp-08]
jmp return
wTime:
dd (float)1
worldTimeMult:
jmp newmem
nop
return:
registersymbol(worldTimeMult wTime)
[DISABLE]
worldTimeMult:
db D8 49 38 8B 55 F8
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+257164
Arcania.exe+257146: 89 4D F8 - mov [ebp-08],ecx
Arcania.exe+257149: 51 - push ecx
Arcania.exe+25714A: D9 45 08 - fld dword ptr [ebp+08]
Arcania.exe+25714D: D9 1C 24 - fstp dword ptr [esp]
Arcania.exe+257150: 8B 4D F8 - mov ecx,[ebp-08]
Arcania.exe+257153: E8 A8 07 F5 FF - call Arcania.simul::base::Observer::objectDeleted
Arcania.exe+257158: D9 45 08 - fld dword ptr [ebp+08]
Arcania.exe+25715B: 8B 45 F8 - mov eax,[ebp-08]
Arcania.exe+25715E: D8 70 34 - fdiv dword ptr [eax+34]
Arcania.exe+257161: 8B 4D F8 - mov ecx,[ebp-08]
// ---------- INJECTING HERE ----------
Arcania.exe+257164: D8 49 38 - fmul dword ptr [ecx+38]
// ---------- DONE INJECTING ----------
Arcania.exe+257167: 8B 55 F8 - mov edx,[ebp-08]
Arcania.exe+25716A: D8 42 30 - fadd dword ptr [edx+30]
Arcania.exe+25716D: D9 5D FC - fstp dword ptr [ebp-04]
Arcania.exe+257170: D9 45 FC - fld dword ptr [ebp-04]
Arcania.exe+257173: D9 E8 - fld1
Arcania.exe+257175: E8 02 CF 51 00 - call Arcania.std::_Init_locks::operator=+7B6
Arcania.exe+25717A: D9 5D F4 - fstp dword ptr [ebp-0C]
Arcania.exe+25717D: D9 45 F4 - fld dword ptr [ebp-0C]
Arcania.exe+257180: 51 - push ecx
Arcania.exe+257181: D9 1C 24 - fstp dword ptr [esp]
}
529
"Multiplier"
0
Float
wTime
532
"Debug"
1
485
"Enable Debug View"
Auto Assembler Script
{$lua}
[ENABLE]
writeInteger('Arcania.exe+E8ECC8',1)
writeInteger('Arcania.exe+E8F818',1)
[DISABLE]
writeInteger('Arcania.exe+E8ECC8',0)
writeInteger('Arcania.exe+E8F818',0)
531
"Unlock ingame cheat menu"
Auto Assembler Script
{$lua}
[ENABLE]
--set path to inputfile
local documentsPath = os.getenv("USERPROFILE") .. "\\Documents\\ArcaniA - Gothic 4\\Input.xml"
--code to enable debug menu
local newCode = [[
<Input command="cheat menu">
<Key code="41"/>
<Activation type="first active"/>
</Input>
]]
--append new text to file
function appendToFile(filePath, text)
local file = io.open(filePath, "a") --argument a = open file for appending
if file then
file:write(text)
file:close()
showMessage("Debug Menu enabled successfully! Please restart the game and click the ^ key (next to 1) to open the menu")
else
showMessage("Failed to open Input.xml for writing. Make sure the file exists and you have the necessary permissions.")
end
end
appendToFile(documentsPath, newCode)
[DISABLE]
28
"pbase"
0
808080
4 Bytes
[pbase]
35
"mmbase"
0
808080
4 Bytes
[mmbase]
26
"StandaloneScripts"
C0C0C0
1
7
"PlayerStats"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(getPbase,Arcania.exe,F4 D9 80 FC 00 00 00)
alloc(newmem,$1000)
label(code)
label(return)
label(pbase)
newmem:
cmp [eax+2C],1
jne @f
mov [pbase],eax
code:
fld dword ptr [eax+000000FC]
jmp return
pbase:
dd 00
getPbase+01:
jmp newmem
nop
return:
registersymbol(getPbase pbase)
[DISABLE]
getPbase+01:
db D9 80 FC 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+49AC
Arcania.simul::base::Observer::objectDeleted+4998: 8B E5 - mov esp,ebp
Arcania.simul::base::Observer::objectDeleted+499A: 5D - pop ebp
Arcania.simul::base::Observer::objectDeleted+499B: C2 04 00 - ret 0004
Arcania.simul::base::Observer::objectDeleted+499E: CC - int 3
Arcania.simul::base::Observer::objectDeleted+499F: CC - int 3
Arcania.simul::base::Observer::objectDeleted+49A0: 55 - push ebp
Arcania.simul::base::Observer::objectDeleted+49A1: 8B EC - mov ebp,esp
Arcania.simul::base::Observer::objectDeleted+49A3: 83 EC 0C - sub esp,0C
Arcania.simul::base::Observer::objectDeleted+49A6: 89 4D F4 - mov [ebp-0C],ecx
Arcania.simul::base::Observer::objectDeleted+49A9: 8B 45 F4 - mov eax,[ebp-0C]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+49AC: D9 80 FC 00 00 00 - fld dword ptr [eax+000000FC]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+49B2: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
Arcania.simul::base::Observer::objectDeleted+49B8: DF E0 - fnstsw ax
Arcania.simul::base::Observer::objectDeleted+49BA: F6 C4 44 - test ah,44
Arcania.simul::base::Observer::objectDeleted+49BD: 7B 68 - jnp Arcania.simul::base::Observer::objectDeleted+4A27
Arcania.simul::base::Observer::objectDeleted+49BF: 8B 4D F4 - mov ecx,[ebp-0C]
Arcania.simul::base::Observer::objectDeleted+49C2: D9 81 B4 01 00 00 - fld dword ptr [ecx+000001B4]
Arcania.simul::base::Observer::objectDeleted+49C8: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
Arcania.simul::base::Observer::objectDeleted+49CE: DF E0 - fnstsw ax
Arcania.simul::base::Observer::objectDeleted+49D0: F6 C4 44 - test ah,44
Arcania.simul::base::Observer::objectDeleted+49D3: 7B 1E - jnp Arcania.simul::base::Observer::objectDeleted+49F3
}
8
"pbase"
0
4 Bytes
[pbase]
9
"Health"
0
Float
[pbase]+FC
13
"Max Health"
0
Float
[pbase]+104
10
"Stamina"
0
Float
[pbase]+108
11
"Max Stamina"
0
Float
[pbase]+110
22
"Movement"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
}
[ENABLE]
aobscanmodule(getMovementBase,Arcania.exe,D9 58 74 8B 8D A0 FE FF FF) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(mmbase)
newmem:
cmp [eax+124],0 //12C,4 //744,1
jne @f
mov [mmbase],eax
code:
fstp dword ptr [eax+74]
mov ecx,[ebp-00000160]
jmp return
mmbase:
dd 00
getMovementBase:
jmp newmem
nop 4
return:
registersymbol(getMovementBase mmbase)
[DISABLE]
getMovementBase:
db D9 58 74 8B 8D A0 FE FF FF
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.simul::base::Observer::objectDeleted+C70D
Arcania.simul::base::Observer::objectDeleted+C6E8: D9 41 1C - fld dword ptr [ecx+1C]
Arcania.simul::base::Observer::objectDeleted+C6EB: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
Arcania.simul::base::Observer::objectDeleted+C6F1: DF E0 - fnstsw ax
Arcania.simul::base::Observer::objectDeleted+C6F3: F6 C4 41 - test ah,41
Arcania.simul::base::Observer::objectDeleted+C6F6: 7A 0C - jp Arcania.simul::base::Observer::objectDeleted+C704
Arcania.simul::base::Observer::objectDeleted+C6F8: 8B 95 A0 FE FF FF - mov edx,[ebp-00000160]
Arcania.simul::base::Observer::objectDeleted+C6FE: D9 42 78 - fld dword ptr [edx+78]
Arcania.simul::base::Observer::objectDeleted+C701: D9 5D C4 - fstp dword ptr [ebp-3C]
Arcania.simul::base::Observer::objectDeleted+C704: 8B 85 A0 FE FF FF - mov eax,[ebp-00000160]
Arcania.simul::base::Observer::objectDeleted+C70A: D9 45 C4 - fld dword ptr [ebp-3C]
// ---------- INJECTING HERE ----------
Arcania.simul::base::Observer::objectDeleted+C70D: D9 58 74 - fstp dword ptr [eax+74]
// ---------- DONE INJECTING ----------
Arcania.simul::base::Observer::objectDeleted+C710: 8B 8D A0 FE FF FF - mov ecx,[ebp-00000160]
Arcania.simul::base::Observer::objectDeleted+C716: 83 C1 74 - add ecx,74
Arcania.simul::base::Observer::objectDeleted+C719: 51 - push ecx
Arcania.simul::base::Observer::objectDeleted+C71A: 6A 00 - push 00
Arcania.simul::base::Observer::objectDeleted+C71C: 8B 8D A0 FE FF FF - mov ecx,[ebp-00000160]
Arcania.simul::base::Observer::objectDeleted+C722: 83 C1 10 - add ecx,10
Arcania.simul::base::Observer::objectDeleted+C725: E8 56 A9 00 00 - call Arcania.exe+1BE980
Arcania.simul::base::Observer::objectDeleted+C72A: 8B 95 A0 FE FF FF - mov edx,[ebp-00000160]
Arcania.simul::base::Observer::objectDeleted+C730: D9 42 74 - fld dword ptr [edx+74]
Arcania.simul::base::Observer::objectDeleted+C733: DC 1D 30 B1 D4 00 - fcomp qword ptr [Arcania.exe+94B130]
}
25
"Max Run Speed"
450:Default
0
Float
[mmbase]-50
24
"Current Speed"
0
Float
[mmbase]+74
23
"mmbase"
0
808080
4 Bytes
[mmbase]
548
"Coordinates"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-10
Author : nightfall
}
[ENABLE]
aobscanmodule(getCoords,Arcania.exe,D9 40 2C DE D9) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(coordBase)
newmem:
mov [coordBase],eax
code:
fld dword ptr [eax+2C]
fcompp
jmp return
coordBase:
dd 00
getCoords:
jmp newmem
return:
registersymbol(getCoords coordBase)
[DISABLE]
getCoords:
db D9 40 2C DE D9
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+7E6FD9
Arcania.exe+7E6FBA: 8B 02 - mov eax,[edx]
Arcania.exe+7E6FBC: 8B 4D C4 - mov ecx,[ebp-3C]
Arcania.exe+7E6FBF: 8B 50 24 - mov edx,[eax+24]
Arcania.exe+7E6FC2: FF D2 - call edx
Arcania.exe+7E6FC4: D9 5D E4 - fstp dword ptr [ebp-1C]
Arcania.exe+7E6FC7: D9 45 E4 - fld dword ptr [ebp-1C]
Arcania.exe+7E6FCA: DC 25 A0 BF D9 00 - fsub qword ptr [Arcania.exe+99BFA0]
Arcania.exe+7E6FD0: D9 5D C0 - fstp dword ptr [ebp-40]
Arcania.exe+7E6FD3: D9 45 C0 - fld dword ptr [ebp-40]
Arcania.exe+7E6FD6: 8B 45 EC - mov eax,[ebp-14]
// ---------- INJECTING HERE ----------
Arcania.exe+7E6FD9: D9 40 2C - fld dword ptr [eax+2C]
// ---------- DONE INJECTING ----------
Arcania.exe+7E6FDC: DE D9 - fcompp
Arcania.exe+7E6FDE: DF E0 - fnstsw ax
Arcania.exe+7E6FE0: F6 C4 05 - test ah,05
Arcania.exe+7E6FE3: 7B 1C - jnp Arcania.exe+7E7001
Arcania.exe+7E6FE5: 83 7D FC 00 - cmp dword ptr [ebp-04],00
Arcania.exe+7E6FE9: 74 20 - je Arcania.exe+7E700B
Arcania.exe+7E6FEB: 8B 4D EC - mov ecx,[ebp-14]
Arcania.exe+7E6FEE: 83 C1 24 - add ecx,24
Arcania.exe+7E6FF1: 51 - push ecx
Arcania.exe+7E6FF2: 8B 4D FC - mov ecx,[ebp-04]
}
549
"ActorComponentObject3DBase"
0
4 Bytes
[coordBase]
550
"X"
Float
[coordBase]+24
551
"Y"
Float
[coordBase]+28
552
"Z"
Float
[coordBase]+2C
553
"Current Island"
0
String
32
0
0
1
[coordBase]+8C
E8
554
"Current Location"
0
String
32
0
0
1
[coordBase]+8C
168
481
"Testing"
3F3F3F
1
38
"startJump"
Auto Assembler Script
{ Game : Arcania.exe
Version:
Date : 2024-11-09
Author : nightfall
This script does blah blah blah
}
[ENABLE]
aobscanmodule(starJump,Arcania.exe,CC CC CC CC CC 55 8B EC 83 EC 08 89 4D FC 8B 45 FC C7) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
push ebp
mov ebp,esp
sub esp,08
jmp return
starJump+05:
jmp newmem
nop
return:
registersymbol(starJump)
[DISABLE]
starJump+05:
db 55 8B EC 83 EC 08
unregistersymbol(starJump)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Arcania.exe+32A670
Arcania.exe+32A666: CC - int 3
Arcania.exe+32A667: CC - int 3
Arcania.exe+32A668: CC - int 3
Arcania.exe+32A669: CC - int 3
Arcania.exe+32A66A: CC - int 3
Arcania.exe+32A66B: CC - int 3
Arcania.exe+32A66C: CC - int 3
Arcania.exe+32A66D: CC - int 3
Arcania.exe+32A66E: CC - int 3
Arcania.exe+32A66F: CC - int 3
// ---------- INJECTING HERE ----------
Arcania.exe+32A670: 55 - push ebp
// ---------- DONE INJECTING ----------
Arcania.exe+32A671: 8B EC - mov ebp,esp
Arcania.exe+32A673: 83 EC 08 - sub esp,08
Arcania.exe+32A676: 89 4D FC - mov [ebp-04],ecx
Arcania.exe+32A679: 8B 45 FC - mov eax,[ebp-04]
Arcania.exe+32A67C: C7 40 18 02 00 00 00 - mov [eax+18],00000002
Arcania.exe+32A683: 8B 4D FC - mov ecx,[ebp-04]
Arcania.exe+32A686: 83 79 34 04 - cmp dword ptr [ecx+34],04
Arcania.exe+32A68A: 75 69 - jne Arcania.exe+32A6F5
Arcania.exe+32A68C: 8B 55 FC - mov edx,[ebp-04]
Arcania.exe+32A68F: 8B 42 10 - mov eax,[edx+10]
}
0
"Compact UI Cheat engine"
808080
Auto Assembler Script
[ENABLE]
luacall(function cycleFullCompact(sender,force); local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full view Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu(); if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
luacall(cycleFullCompact(nil,false))
Change of fld dword ptr [edx+24]
Arcania.exe+2028DD
24
8B
55
D8
51
D9
42
24
D9
1C
24
8B
45
"Arcania.exe"+32A8C4
crashOnNop
"Arcania.exe"+32A8CE
crashOnNop
"Arcania.exe"+32A8DF
crashOnNop