8
"Current Cheat Table"
1
6
"HP PTR"
0
4 Bytes
"Game.exe"+003B49DC
24
9C
4D8
134188
"Experience Gained with Multiplier"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-07
Author : scarl
This is my first script ever.. Experience multiplier, but definitely could be better.
}
[ENABLE]
aobscanmodule(INJECT,Game.exe,2B ?? 51 6A ?? 56 E8 ?? ?? ?? ?? 6A ?? 57) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
registersymbol(xpGain)
newmem:
code:
sub ecx,ebp
push ecx
imul ecx,[xpGain]
add edi,ecx
push 1D
jmp return
xpGain:
dd #1
INJECT:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 2B CD 51 6A 1D
unregistersymbol(INJECT xpGain)
dealloc(newmem xpGain)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+17C54C
Game.exe+17C533: E8 A8 45 09 00 - call Game.exe+210AE0
Game.exe+17C538: 83 E8 01 - sub eax,01
Game.exe+17C53B: 50 - push eax
Game.exe+17C53C: 53 - push ebx
Game.exe+17C53D: E8 6E 45 09 00 - call Game.exe+210AB0
Game.exe+17C542: 3B F8 - cmp edi,eax
Game.exe+17C544: 76 02 - jna Game.exe+17C548
Game.exe+17C546: 8B F8 - mov edi,eax
Game.exe+17C548: 6A 00 - push 00
Game.exe+17C54A: 8B CF - mov ecx,edi
// ---------- INJECTING HERE ----------
Game.exe+17C54C: 2B CD - sub ecx,ebp
// ---------- DONE INJECTING ----------
Game.exe+17C54E: 51 - push ecx
Game.exe+17C54F: 6A 1D - push 1D
Game.exe+17C551: 56 - push esi
Game.exe+17C552: E8 59 B0 0A 00 - call Game.exe+2275B0
Game.exe+17C557: 6A 00 - push 00
Game.exe+17C559: 57 - push edi
Game.exe+17C55A: 6A 0D - push 0D
Game.exe+17C55C: 56 - push esi
Game.exe+17C55D: E8 4E B0 0A 00 - call Game.exe+2275B0
Game.exe+17C562: 57 - push edi
}
134189
"Multiply Exp Gained"
0
4 Bytes
xpGain
134195
"Max Skill Points (need to add a point first)"
9316EF
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-10
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(maxSkill,Game.exe,89 ?? ?? 53 55 E8 ?? ?? ?? ?? 8B ?? 5E) // should be unique
alloc(newmem,$100)
label(previousSkill)
label(skillMax)
label(code)
label(return)
registerSymbol(skillMax)
registersymbol(previousSkill)
newmem:
lea edi,[esi+28]
mov [previousSkill],edi
mov edi,[skillMax]
code:
mov [esi+28],edi
push ebx
push ebp
jmp return
skillMax:
dd #20
previousSkill:
maxSkill:
jmp newmem
return:
registersymbol(maxSkill)
[DISABLE]
maxSkill:
db 89 7E 28 53 55
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+248623
Game.exe+248608: 5D - pop ebp
Game.exe+248609: C2 08 00 - ret 0008
Game.exe+24860C: 8B 7E 28 - mov edi,[esi+28]
Game.exe+24860F: 8B CB - mov ecx,ebx
Game.exe+248611: E8 DA E9 E5 FF - call Game.exe+A6FF0
Game.exe+248616: 3B F8 - cmp edi,eax
Game.exe+248618: 7C 06 - jl Game.exe+248620
Game.exe+24861A: 83 7D 00 01 - cmp dword ptr [ebp+00],01
Game.exe+24861E: 75 06 - jne Game.exe+248626
Game.exe+248620: 83 C7 01 - add edi,01
// ---------- INJECTING HERE ----------
Game.exe+248623: 89 7E 28 - mov [esi+28],edi
// ---------- DONE INJECTING ----------
Game.exe+248626: 53 - push ebx
Game.exe+248627: 55 - push ebp
Game.exe+248628: E8 03 FB FF FF - call Game.exe+248130
Game.exe+24862D: 8B C6 - mov eax,esi
Game.exe+24862F: 5E - pop esi
Game.exe+248630: 5F - pop edi
Game.exe+248631: 5B - pop ebx
Game.exe+248632: 5D - pop ebp
Game.exe+248633: C2 08 00 - ret 0008
Game.exe+248636: CC - int 3
}
134196
"Skill Modifier"
20:Default Max Skill
40:Skill Points when adding
99:Max Skill Points when adding
0
4 Bytes
skillMax
134595
"Previous Skill"
0
4 Bytes
previousSkill
0
134200
"Run Speed Hack"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-10
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(speedInject,Game.exe,83 ?? ?? 50 6A ?? 57 E8 ?? ?? ?? ?? 6A) // should be unique
alloc(newmem,$100)
label(speedy)
label(code)
label(return)
registersymbol(speedy)
newmem:
add eax,[speedy]
jmp code
speedy:
dd #1000
code:
sub eax,64
push eax
push 43
jmp return
speedInject:
jmp newmem
nop
return:
registersymbol(speedInject)
[DISABLE]
speedInject:
db 83 E8 64 50 6A 43
unregistersymbol(speedInject)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+2210ED
Game.exe+2210D5: EB 02 - jmp Game.exe+2210D9
Game.exe+2210D7: 33 F6 - xor esi,esi
Game.exe+2210D9: 0F B6 4E 40 - movzx ecx,byte ptr [esi+40]
Game.exe+2210DD: 85 C9 - test ecx,ecx
Game.exe+2210DF: 74 21 - je Game.exe+221102
Game.exe+2210E1: 0F B6 46 41 - movzx eax,byte ptr [esi+41]
Game.exe+2210E5: 6B C0 64 - imul eax,eax,64
Game.exe+2210E8: 99 - cdq
Game.exe+2210E9: F7 F9 - idiv ecx
Game.exe+2210EB: 6A 00 - push 00
// ---------- INJECTING HERE ----------
Game.exe+2210ED: 83 E8 64 - sub eax,64
// ---------- DONE INJECTING ----------
Game.exe+2210F0: 50 - push eax
Game.exe+2210F1: 6A 43 - push 43
Game.exe+2210F3: 57 - push edi
Game.exe+2210F4: E8 07 63 00 00 - call Game.exe+227400
Game.exe+2210F9: 6A 01 - push 01
Game.exe+2210FB: 57 - push edi
Game.exe+2210FC: 53 - push ebx
Game.exe+2210FD: E8 5E 60 00 00 - call Game.exe+227160
Game.exe+221102: 5F - pop edi
Game.exe+221103: 5E - pop esi
}
134201
"Speed! Must be running to work."
0:Disables the Speed.
50:Slight increase in speed.
150:Faster Speed...
300:Even Faster...
500:This is getting a bit much.
1000:Partial Sonic.
10000:Super Sonic (not recommended)
100000:GOTTA GO FAST! (still... not recommended)
0
4 Bytes
speedy
134205
"Shift Player away from cam"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-10
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(testLoc,Game.exe,89 0D 90 D2 79 00) // should be unique
alloc(newmem,$100)
label(code)
label(return)
newmem:
sub ecx,#100
code:
mov [Game.exe+39D290],ecx
jmp return
testLoc:
jmp newmem
nop
return:
registersymbol(testLoc)
[DISABLE]
testLoc:
db 89 0D 90 D2 79 00
unregistersymbol(testLoc)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+56C10
Game.exe+56BFA: 99 - cdq
Game.exe+56BFB: 2B C2 - sub eax,edx
Game.exe+56BFD: D1 F8 - sar eax,1
Game.exe+56BFF: 2B F0 - sub esi,eax
Game.exe+56C01: A1 4C 0F 71 00 - mov eax,[Game.exe+310F4C]
Game.exe+56C06: 99 - cdq
Game.exe+56C07: 2B C2 - sub eax,edx
Game.exe+56C09: D1 F8 - sar eax,1
Game.exe+56C0B: 2B C8 - sub ecx,eax
Game.exe+56C0D: 83 C1 10 - add ecx,10
// ---------- INJECTING HERE ----------
Game.exe+56C10: 89 0D 90 D2 79 00 - mov [Game.exe+39D290],ecx
// ---------- DONE INJECTING ----------
Game.exe+56C16: 8D 54 24 0C - lea edx,[esp+0C]
Game.exe+56C1A: 8D 4C 24 08 - lea ecx,[esp+08]
Game.exe+56C1E: 89 35 94 D2 79 00 - mov [Game.exe+39D294],esi
Game.exe+56C24: E8 D7 BB 01 00 - call Game.exe+72800
Game.exe+56C29: 85 C0 - test eax,eax
Game.exe+56C2B: 5F - pop edi
Game.exe+56C2C: 5E - pop esi
Game.exe+56C2D: 74 13 - je Game.exe+56C42
Game.exe+56C2F: 8B 04 24 - mov eax,[esp]
Game.exe+56C32: 8B 4C 24 04 - mov ecx,[esp+04]
}
134574
"Freeze Enemy Position"
CFCFCF
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-11
Author : scarl
This script will freeze all other entities.
}
[ENABLE]
aobscanmodule(freezeall,Game.exe,66 ?? ?? ?? 66 ?? ?? 66 ?? ?? ?? 66 ?? ?? ?? ?? 66 ?? ?? ?? ?? 8B) // should be unique
alloc(newmem,$200)
label(playerlocation)
label(code)
label(return)
registersymbol(playerlocation)
newmem:
pushf
cmp [ecx],0 // Comparison to make us see if it is our player or not.
je code
popf
//mov [ebx+02],playerlocation Trying to move mosters to me. Didn't work, did in a diff script.
cmp ax,bp
jmp return
code:
popf
mov ax,[ebx+02]
// mov [playerlocation],ax
//mov ax,#100000
cmp ax,bp
jmp return
playerlocation:
dw 0
freezeall:
jmp newmem
nop 2
return:
registersymbol(freezeall)
[DISABLE]
freezeall:
db 66 8B 43 02 66 3B C5
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+24ACF6
Game.exe+24ACE0: 8B CE - mov ecx,esi
Game.exe+24ACE2: E8 79 B8 E0 FF - call Game.exe+56560
Game.exe+24ACE7: 85 C0 - test eax,eax
Game.exe+24ACE9: 75 0B - jne Game.exe+24ACF6
Game.exe+24ACEB: 5E - pop esi
Game.exe+24ACEC: 5D - pop ebp
Game.exe+24ACED: 33 C0 - xor eax,eax
Game.exe+24ACEF: 5B - pop ebx
Game.exe+24ACF0: 83 C4 34 - add esp,34
Game.exe+24ACF3: C2 0C 00 - ret 000C
// ---------- INJECTING HERE ----------
Game.exe+24ACF6: 66 8B 43 02 - mov ax,[ebx+02]
// ---------- DONE INJECTING ----------
Game.exe+24ACFA: 66 3B C5 - cmp ax,bp
Game.exe+24ACFD: 66 8B 4B 06 - mov cx,[ebx+06]
Game.exe+24AD01: 66 89 44 24 44 - mov [esp+44],ax
Game.exe+24AD06: 66 89 4C 24 46 - mov [esp+46],cx
Game.exe+24AD0B: 8B 54 24 44 - mov edx,[esp+44]
Game.exe+24AD0F: 57 - push edi
Game.exe+24AD10: 89 54 24 10 - mov [esp+10],edx
Game.exe+24AD14: 75 09 - jne Game.exe+24AD1F
Game.exe+24AD16: 66 3B CD - cmp cx,bp
Game.exe+24AD19: 0F 84 96 02 00 00 - je Game.exe+24AFB5
}
134607
"X loc"
0
4 Bytes
"Game.exe"+0039D1F8
4
1A8
18
24
Increase Value
100
100000
left x
0
Decrease Value
102
100000
right x
1
134606
"Y loc"
0
4 Bytes
"Game.exe"+0039D1F8
0
1A8
18
24
Increase Value
98
100000
down y
0
Decrease Value
104
100000
up y
1
134609
"Telport To Me"
D9041A
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-12
Author : scarl
This script teleports all monsters and friendlies, to you, as long as they are moving.
This will also make your projectiles land in the same spot of the enemy.
}
[ENABLE]
aobscanmodule(tplocationtest,Game.exe,89 ?? 89 ?? ?? 51 8D ?? ?? ?? C1 ?? ?? C1 ?? ?? 52) // should be unique
label(x_original_code)
label(return_x)
label(x_player_loc)
label(new_x_code)
label(y_player_loc)
label(x_monster_loc)
label(y_monster_loc)
label(y_monster_loc_addy)
registersymbol(x_player_loc) // to test my compare -- no need for it unless manual telporting is desired
registersymbol(y_player_loc) // to test my compare -- no need for it unless manual telporting is desired
registersymbol(x_monster_loc)
registersymbol(y_monster_loc)
registersymbol(y_monster_loc_addy)
alloc(newmem,$1000)
newmem:
new_x_code:
cmp [eax+4C],#128 // comparison to check if player
je x_original_code // jump back to orignal if player
push ebx
// mov [edi],ebx
mov [x_monster_loc],ebx
mov ebx,[x_player_loc] // push monsters to players x
add ebx,#1000000 // Move entities away from player, comment out if you want on top of you.
mov [edi],ebx
push eax
lea eax,[edi+04]
mov [y_monster_loc_addy],eax
pop eax
mov [y_monster_loc],esi
mov ebx,[y_player_loc]
mov [edi+04],ebx
pop ebx
jmp return_x
x_player_loc:
dd #0
y_player_loc:
dd #0
x_monster_loc:
dd #0
y_monster_loc:
dd #0
y_monster_loc_addy:
dd #0
x_original_code:
mov [edi],ebx
mov [x_player_loc],ebx // moving the same value that was moved into edi, injection point
mov [edi+04],esi // esi == y code
mov [y_player_loc],esi
jmp return_x
tplocationtest:
jmp newmem
return_x:
registersymbol(tplocationtest)
[DISABLE]
tplocationtest:
db 89 1F 89 77 04
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+25100C
Game.exe+250FF5: E8 56 DF E0 FF - call Game.exe+5EF50
Game.exe+250FFA: 85 C0 - test eax,eax
Game.exe+250FFC: 75 0A - jne Game.exe+251008
Game.exe+250FFE: 89 47 28 - mov [edi+28],eax
Game.exe+251001: 5F - pop edi
Game.exe+251002: 5E - pop esi
Game.exe+251003: 5B - pop ebx
Game.exe+251004: 59 - pop ecx
Game.exe+251005: C2 0C 00 - ret 000C
Game.exe+251008: 8D 4C 24 0C - lea ecx,[esp+0C]
// ---------- INJECTING HERE ----------
Game.exe+25100C: 89 1F - mov [edi],ebx
// ---------- DONE INJECTING ----------
Game.exe+25100E: 89 77 04 - mov [edi+04],esi
Game.exe+251011: 51 - push ecx
Game.exe+251012: 8D 54 24 18 - lea edx,[esp+18]
Game.exe+251016: C1 EB 0B - shr ebx,0B
Game.exe+251019: C1 EE 0B - shr esi,0B
Game.exe+25101C: 52 - push edx
Game.exe+25101D: 89 5C 24 1C - mov [esp+1C],ebx
Game.exe+251021: 89 74 24 14 - mov [esp+14],esi
Game.exe+251025: E8 C6 36 FF FF - call Game.exe+2446F0
Game.exe+25102A: 83 7F 30 00 - cmp dword ptr [edi+30],00
}
134631
"Trying Stuff"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-17
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(test_movement,Game.exe,8B 0E 89 0F 8B 56 04 89) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
push eax
mov eax,[x_player_loc]
mov [x_monster_loc],eax
mov eax,[y_player_loc]
mov [y_monster_loc_addy],eax
pop eax
code:
mov ecx,[esi]
mov [edi],ecx
mov edx,[esi+04]
jmp return
test_movement:
jmp newmem
nop 2
return:
registersymbol(test_movement)
[DISABLE]
test_movement:
db 8B 0E 89 0F 8B 56 04
unregistersymbol(test_movement)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+5F915
Game.exe.text+5F8FD: 8B 44 24 14 - mov eax,[esp+14]
Game.exe.text+5F901: 50 - push eax
Game.exe.text+5F902: 55 - push ebp
Game.exe.text+5F903: 53 - push ebx
Game.exe.text+5F904: 8B 5C 24 1C - mov ebx,[esp+1C]
Game.exe.text+5F908: 53 - push ebx
Game.exe.text+5F909: 57 - push edi
Game.exe.text+5F90A: E8 B1 17 1F 00 - call Game.exe.text+2510C0
Game.exe.text+5F90F: EB 04 - jmp Game.exe.text+5F915
Game.exe.text+5F911: 8B 5C 24 10 - mov ebx,[esp+10]
// ---------- INJECTING HERE ----------
Game.exe.text+5F915: 8B 0E - mov ecx,[esi]
// ---------- DONE INJECTING ----------
Game.exe.text+5F917: 89 0F - mov [edi],ecx
Game.exe.text+5F919: 8B 56 04 - mov edx,[esi+04]
Game.exe.text+5F91C: 89 57 04 - mov [edi+04],edx
Game.exe.text+5F91F: 8B 46 08 - mov eax,[esi+08]
Game.exe.text+5F922: 89 47 08 - mov [edi+08],eax
Game.exe.text+5F925: 8B 4E 0C - mov ecx,[esi+0C]
Game.exe.text+5F928: 89 4F 0C - mov [edi+0C],ecx
Game.exe.text+5F92B: 8B 56 24 - mov edx,[esi+24]
Game.exe.text+5F92E: 89 57 24 - mov [edi+24],edx
Game.exe.text+5F931: 8B 46 28 - mov eax,[esi+28]
}
134728
"DISPLAY Inventory Last Moved Item (INJ COPY)"
Auto Assembler Script
{ Game : Diablo II
Version:
Date : 2022-08-30
Author : CrazySquirrel
This script is a basic injection copy.
}
[ENABLE]
aobscanmodule(inventoryInjection,Game.exe,8B ?? ?? 50 E8 ?? ?? ?? ?? 85 ?? 74 ?? 0F ?? ?? ?? ?? ?? ?? 66 ?? ?? 7E ?? 0F) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(injectionInv)
registersymbol(injectionInv)
newmem:
mov [injectionInv],esi
jmp code
injectionInv:
dd 0
code:
mov eax,[esi+04]
push eax
reassemble(inventoryInjection+4)
jmp return
inventoryInjection:
jmp newmem
nop 4
return:
registersymbol(inventoryInjection)
[DISABLE]
inventoryInjection:
db 8B 46 04 50 E8 18 56 17 00
unregistersymbol(inventoryInjection)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+BD63F
Game.exe.text+BD62E: CC - int 3
Game.exe.text+BD62F: CC - int 3
Game.exe.text+BD630: 56 - push esi
Game.exe.text+BD631: 57 - push edi
Game.exe.text+BD632: 8B F1 - mov esi,ecx
Game.exe.text+BD634: 33 FF - xor edi,edi
Game.exe.text+BD636: 85 F6 - test esi,esi
Game.exe.text+BD638: 75 05 - jne Game.exe.text+BD63F
Game.exe.text+BD63A: 83 C8 FF - or eax,-01
Game.exe.text+BD63D: EB 03 - jmp Game.exe.text+BD642
// ---------- INJECTING HERE ----------
Game.exe.text+BD63F: 8B 46 04 - mov eax,[esi+04]
// ---------- DONE INJECTING ----------
Game.exe.text+BD642: 50 - push eax
Game.exe.text+BD643: E8 18 56 17 00 - call Game.exe.text+232C60
Game.exe.text+BD648: 85 C0 - test eax,eax
Game.exe.text+BD64A: 74 0F - je Game.exe.text+BD65B
Game.exe.text+BD64C: 0F B7 80 24 01 00 00 - movzx eax,word ptr [eax+00000124]
Game.exe.text+BD653: 66 85 C0 - test ax,ax
Game.exe.text+BD656: 7E 03 - jle Game.exe.text+BD65B
Game.exe.text+BD658: 0F BF F8 - movsx edi,ax
Game.exe.text+BD65B: 56 - push esi
Game.exe.text+BD65C: E8 FF 9A 16 00 - call Game.exe.text+227160
}
134729
"Last Moved Item PTR"
0
4 Bytes
injectionInv
4
134730
"Writable Inv Injection"
Auto Assembler Script
{ Game : Diablo II
Version:
Date : 2022-08-30
Author : CrazySquirrel
This script does blah blah blah
}
[ENABLE]
aobscanmodule(writeInv,Game.exe,83 ?? ?? 75 ?? 8B ?? ?? 50 56 E8) // should be unique
alloc(newmem,$1000)
label(writeInvInj)
registersymbol(writeInvInj)
label(code)
label(return)
newmem:
mov [writeInvInj],edi
jmp code
writeInvInj:
dd 0
code:
cmp dword ptr [edi],04
reassemble(writeInv+3)
jmp return
writeInv:
jmp newmem
return:
registersymbol(writeInv)
[DISABLE]
writeInv:
db 83 3F 04 75 7B
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+23CD46
Game.exe.text+23CD20: 56 - push esi
Game.exe.text+23CD21: 8B 74 24 08 - mov esi,[esp+08]
Game.exe.text+23CD25: 85 F6 - test esi,esi
Game.exe.text+23CD27: 0F 84 9A 00 00 00 - je Game.exe.text+23CDC7
Game.exe.text+23CD2D: 81 3E 04 03 02 01 - cmp [esi],01020304
Game.exe.text+23CD33: 0F 85 8E 00 00 00 - jne Game.exe.text+23CDC7
Game.exe.text+23CD39: 57 - push edi
Game.exe.text+23CD3A: 8B 7C 24 10 - mov edi,[esp+10]
Game.exe.text+23CD3E: 85 FF - test edi,edi
Game.exe.text+23CD40: 0F 84 80 00 00 00 - je Game.exe.text+23CDC6
// ---------- INJECTING HERE ----------
Game.exe.text+23CD46: 83 3F 04 - cmp dword ptr [edi],04
// ---------- DONE INJECTING ----------
Game.exe.text+23CD49: 75 7B - jne Game.exe.text+23CDC6
Game.exe.text+23CD4B: 8B 47 0C - mov eax,[edi+0C]
Game.exe.text+23CD4E: 50 - push eax
Game.exe.text+23CD4F: 56 - push esi
Game.exe.text+23CD50: E8 8B FF FF FF - call Game.exe.text+23CCE0
Game.exe.text+23CD55: 85 C0 - test eax,eax
Game.exe.text+23CD57: 75 6D - jne Game.exe.text+23CDC6
Game.exe.text+23CD59: 8B 4E 04 - mov ecx,[esi+04]
Game.exe.text+23CD5C: 50 - push eax
Game.exe.text+23CD5D: 68 0A 0D 00 00 - push 00000D0A
}
134731
"Last Moved Writable Injection"
0
4 Bytes
writeInvInj
0
134737
"Gold Injection"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-30
Author : CrazySquirrel
This script will need to be merged, but here is for now.
Gold injection copy.
}
[ENABLE]
aobscanmodule(goldInject,Game.exe,89 ?? ?? 7E ?? 8B ?? ?? ?? 80 ?? ?? ?? 74 ?? 81) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(goldAddy)
registersymbol(goldAddy)
newmem:
cmp [eax+F78],1
jne code
push ebx
lea ebx,[eax+04]
mov [goldAddy],ebx
pop ebx
jmp code
goldAddy:
dd 0
code:
mov [eax+04],edi
reassemble(goldInject+3)
jmp return
goldInject:
jmp newmem
return:
registersymbol(goldInject)
[DISABLE]
goldInject:
db 89 78 04 7E 11
unregistersymbol(goldInject)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+224354
Game.exe.text+22433A: 85 C0 - test eax,eax
Game.exe.text+22433C: 75 0A - jne Game.exe.text+224348
Game.exe.text+22433E: 8B 13 - mov edx,[ebx]
Game.exe.text+224340: 52 - push edx
Game.exe.text+224341: 8B C7 - mov eax,edi
Game.exe.text+224343: E8 B8 FB FF FF - call Game.exe.text+223F00
Game.exe.text+224348: 8B 68 04 - mov ebp,[eax+04]
Game.exe.text+22434B: 8B 4C 24 14 - mov ecx,[esp+14]
Game.exe.text+22434F: 8D 3C 29 - lea edi,[ecx+ebp]
Game.exe.text+224352: 85 FF - test edi,edi
// ---------- INJECTING HERE ----------
Game.exe.text+224354: 89 78 04 - mov [eax+04],edi
// ---------- DONE INJECTING ----------
Game.exe.text+224357: 7E 11 - jle Game.exe.text+22436A
Game.exe.text+224359: 8B 54 24 18 - mov edx,[esp+18]
Game.exe.text+22435D: 80 7A 53 00 - cmp byte ptr [edx+53],00
Game.exe.text+224361: 74 07 - je Game.exe.text+22436A
Game.exe.text+224363: 81 4B 10 00 00 00 20 - or [ebx+10],20000000
Game.exe.text+22436A: 83 78 04 00 - cmp dword ptr [eax+04],00
Game.exe.text+22436E: 75 14 - jne Game.exe.text+224384
Game.exe.text+224370: 8B 4C 24 18 - mov ecx,[esp+18]
Game.exe.text+224374: 80 79 50 00 - cmp byte ptr [ecx+50],00
Game.exe.text+224378: 75 0A - jne Game.exe.text+224384
}
134738
"Gold Value (drop or gain to activate)"
0
4 Bytes
goldAddy
0
134191
"Stats & Item Stat Multiplier"
Auto Assembler Script
// This script will modify all stat and item values. Some may have a limit, vit and energy
// have some issues with this. Items will have crazy values if you crank this up
[ENABLE]
aobscanmodule(statSkill,Game.exe,01 ?? ?? 75 ?? 8B ?? 51 8B ?? E8)
alloc(newmem,$100)
label(stat_modifier)
label(code)
label(return)
registersymbol(stat_modifier)
newmem:
pushf
cmp [eax+36C],0
je code
push ebx
mov ebx,[stat_modifier]
add [eax+04],ebx
pop ebx
popf
reassemble(statSkill+3)
jmp return
stat_modifier:
dd #100 // Default value, add 100 to all values brought in.
code:
popf
add [eax+04],ebp
reassemble(statSkill+3)
jmp return
statSkill:
jmp newmem
return:
registersymbol(statSkill)
[DISABLE]
statSkill:
db 01 68 04 75 0A
unregistersymbol(*)
dealloc(*)
134192
"Amount Added"
0
4 Bytes
stat_modifier
134709
"Item Rarity (Rares and Uniques)"
9:Set
8:Custom/Orange
7:Unique
6:Rare
4:Magic
2:Common
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-25
Author : scarl
This script rewrites item rarity before it is dropped.
}
[ENABLE]
aobscanmodule(testinginv,Game.exe,8B ?? ?? 85 ?? ?? ?? 8B ?? 50 8B ?? ?? 50) // should be unique
aobscanmodule(pushType,Game.exe,6A 04 51 E8 ?? ?? ?? ?? C7 ?? ?? 04 00 00 00)
aobscanmodule(changeTo,Game.exe,?? 6A ?? 51 E8 ?? ?? ?? ?? C7 ?? ?? 06 00 00 00 8B ?? 52 E8 ?? ?? ?? ?? 8B ??)
alloc(newmem,$1000)
label(code)
label(return)
label(returntest)
label(itemrarity)
label(pushing)
label(returnPushingTwo)
label(pushing_two)
registersymbol(itemrarity)
newmem:
push ebx
mov ebx,[itemrarity] // Pushing item rarity value into the item.
mov [edi+30],ebx
pop ebx
jmp code
pushing_two:
push [itemrarity] // normally push 06
push ecx
reassemble(changeTo+4)
push eax
mov eax,[itemrarity] // Pushing item rarity value into the item.
mov [ebx+30],eax
pop eax
jmp returnPushingTwo
pushing:
push eax
mov eax,[itemrarity]
push itemrarity
push ecx
reassemble(pushType+3)
mov [ebx+30],eax
pop eax
jmp return
/* ORIGINAL CODE
push 04
push ecx
call Game.exe+228190
mov [ebx+30],00000004
*/
itemrarity:
dd #7 // unique value
code:
reassemble(testinginv)
reassemble(testinginv+3)
jmp returntest
testinginv:
jmp newmem
returntest:
pushType:
jmp pushing
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
return:
changeTo+01:
jmp pushing_two
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
returnPushingTwo:
registersymbol(testinginv)
registersymbol(pushType)
registersymbol(changeTo)
[DISABLE]
testinginv:
db 8B 4F 30 85 C9
pushType:
db 6A 04 51 E8 01 2D 0D 00 C7 45 30 04 00 00 00
changeTo+01:
db 6A 06 51 E8 99 2C 0D 00 C7 43 30 06 00 00 00
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+1545A9
Game.exe.text+15458B: E8 60 2D 0D 00 - call Game.exe.text+2272F0
Game.exe.text+154590: 8B 4D 00 - mov ecx,[ebp+00]
Game.exe.text+154593: 6A 00 - push 00
Game.exe.text+154595: 51 - push ecx
Game.exe.text+154596: E8 A5 2D 0D 00 - call Game.exe.text+227340
Game.exe.text+15459B: 8B 7C 24 1C - mov edi,[esp+1C]
Game.exe.text+15459F: 8B 55 00 - mov edx,[ebp+00]
Game.exe.text+1545A2: 57 - push edi
Game.exe.text+1545A3: 52 - push edx
Game.exe.text+1545A4: E8 A7 FA FF FF - call Game.exe.text+154050
// ---------- INJECTING HERE ----------
Game.exe.text+1545A9: 8B 4F 30 - mov ecx,[edi+30]
// ---------- DONE INJECTING ----------
Game.exe.text+1545AC: 85 C9 - test ecx,ecx
Game.exe.text+1545AE: 74 02 - je Game.exe.text+1545B2
Game.exe.text+1545B0: 8B C1 - mov eax,ecx
Game.exe.text+1545B2: 50 - push eax
Game.exe.text+1545B3: 8B 45 00 - mov eax,[ebp+00]
Game.exe.text+1545B6: 50 - push eax
Game.exe.text+1545B7: E8 D4 2B 0D 00 - call Game.exe.text+227190
Game.exe.text+1545BC: 8B 4D 00 - mov ecx,[ebp+00]
Game.exe.text+1545BF: 51 - push ecx
Game.exe.text+1545C0: E8 1B 95 0D 00 - call Game.exe.text+22DAE0
}
134716
"Rarity (WIP, Sets don't work)"
9:Set
8:Custom/Orange
7:Unique
6:Rare
4:Magic
2:Common
0
4 Bytes
itemrarity
134708
"Choose Item type (not rarity) Drop"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-24
Currently only chooses ID, not rarity of item drop
}
[ENABLE]
aobscanmodule(ItemTest,Game.exe,8B F8 85 FF 89 7C 24 0C 75 1F 68 0A) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(itemid)
registersymbol(itemid)
newmem:
//cmp ebp,0510007C
//jne code
push ebx
mov ebx,[itemid]
mov [eax+04],ebx
pop ebx
jmp code
itemid:
dd #522
code:
mov edi,eax
test edi,edi
mov [esp+0C],edi
jmp return
ItemTest:
jmp newmem
nop 3
return:
registersymbol(ItemTest)
[DISABLE]
ItemTest:
db 8B F8 85 FF 89 7C 24 0C
unregistersymbol(ItemTest)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+155E85
Game.exe.text+155E6D: 50 - push eax
Game.exe.text+155E6E: 8B 46 08 - mov eax,[esi+08]
Game.exe.text+155E71: 51 - push ecx
Game.exe.text+155E72: 8B 4E 20 - mov ecx,[esi+20]
Game.exe.text+155E75: 50 - push eax
Game.exe.text+155E76: 8B 46 1C - mov eax,[esi+1C]
Game.exe.text+155E79: 51 - push ecx
Game.exe.text+155E7A: 50 - push eax
Game.exe.text+155E7B: B9 04 00 00 00 - mov ecx,00000004
Game.exe.text+155E80: E8 5B C4 FF FF - call Game.exe.text+1522E0
// ---------- INJECTING HERE ----------
Game.exe.text+155E85: 8B F8 - mov edi,eax
// ---------- DONE INJECTING ----------
Game.exe.text+155E87: 85 FF - test edi,edi
Game.exe.text+155E89: 89 7C 24 0C - mov [esp+0C],edi
Game.exe.text+155E8D: 75 1F - jne Game.exe.text+155EAE
Game.exe.text+155E8F: 68 0A 08 00 00 - push 0000080A
Game.exe.text+155E94: E8 67 CD EA FF - call Game.exe.text+2C00
Game.exe.text+155E99: 50 - push eax
Game.exe.text+155E9A: 68 EF D6 6C 00 - push Game.exe.rdata+6EF
Game.exe.text+155E9F: E8 3C CC EA FF - call Game.exe.text+2AE0
Game.exe.text+155EA4: 83 C4 0C - add esp,0C
Game.exe.text+155EA7: 6A FF - push -01
}
134719
"Item ID"
1:Axe
2:Double axe
3:Pick
4:War axe
5:Large axe
6:Broad axe
7:Battle axe
8:Great axe
9:Giant axe
10:Wand
11:Yew wand
12:Bone wand
13:Grim wand
14:Club
15:Scepter
16:Grand scepter
17:War scepter
18:Spiked club
19:Mace
20:Morning Star
21:Flail
22:War Hammer
23:Maul
24:Great Maul
25:Short Sword
26:Scimitar
27:Sabre
28:Falchion
29:Crystal Sword
30:Broad Sword
31:Long Sword
32:War Sword
33:Two-Handed Sword
34:Claymore
35:Giant Sword
36:Bastard Sword
37:Flamberge
38:Great Sword
39:Dagger
40:Dirk
41:Kris
42:Blade
43:Throwing Knife
44:Throwing Axe
45:Balanced Knife
46:Balanced Axe
47:Javelin
48:Pilum
49:Short Spear
50:Glaive
51:Throwing Spear
52:Spear
53:Trident
54:Brandistock
55:Spetum
56:Pike
57:Bardiche
58:Voulge
59:Scythe
60:Poleaxe
61:Halberd
62:War Scythe
63:Short Staff
64:Long Staff
65:Gnarled Staff
66:Battle Staff
67:War Staff
68:Short Bow
69:Hunter's Bow
70:Long Bow
71:Composite Bow
72:Short Battle Bow
73:Long Battle Bow
74:Short War Bow
75:Long War Bow
76:Light Crossbow
77:Crossbow
78:Heavy Crossbow
79:Repeating Crossbow
80:Rancid Gas Potion
81:Oil Potion
82:Choking Gas Potion
83:Exploding Potion
84:Strangling Gas Potion
85:Fulminating Potion
86:Decoy Gidbinn
87:THE Gidbinn
88:Wirt's Leg
89:Malus
90:Hell's Forge Hammer
91:Horadric Staff
92:Shaft of the Horadric Staff
93:Hatchet
94:Cleaver
95:Twin Axe
96:Crowbill
97:Naga
98:Military Axe
99:Bearded Axe
100:Tabar
101:Gothic Axe
102:Ancient Axe
103:Burnt Wand
104:Petrified Wand
105:Tomb Wand
106:Grave Wand
107:Cudgel
108:Rune Scepter
109:Holy Water Sprinkler
110:Divine Scepter
111:Barbed Club
112:Flanged Mace
113:Jagged Star
114:Knout
115:Battle Hammer
116:War Club
117:Martel De Fer
118:Gladius
119:Cutlass
120:Shamshir
121:Tulwar
122:Dimensional Blade
123:Battle Sword
124:Rune Sword
125:Ancient Sword
126:Espandon
127:Dacion Falx
128:Tusk Sword
129:Gothic Sword
130:Zweihander
131:Executioner Sword
132:Poignard
133:Rondel
134:Cinquedeas
135:Stiletto
136:Battle Dart
137:Francisca
138:War Dart
139:Hurlbat
140:War Javelin
0
4 Bytes
itemid
134739
"Deprecated / WIP"
1
134651
"Ent List WIP"
1
0
4 Bytes
Game.exe+3986C8
2C
134683
"Writable Inventory (top left item) (deprecated)"
0
4 Bytes
"Game.exe"+003B49E0
0
0
2C
54
34
134671
"DISPLAY Inventory (top left item)"
1:Axe
2:Double axe
3:Pick
4:War axe
5:Large axe
6:Broad axe
7:Battle axe
8:Great axe
9:Giant axe
10:Wand
11:Yew wand
12:Bone wand
13:Grim wand
14:Club
15:Scepter
16:Grand scepter
17:War scepter
18:Spiked club
0
4 Bytes
"Game.exe"+0039DEFC
4
0
2C
14
60
Increase Value
187
1
0
134642
"WIP change names?"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-20
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(MonsterTest,Game.exe,55 8B EC 83 E4 F8 B8 24) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(monsterName)
registersymbol(monsterName)
newmem:
push eax
mov eax,[ecx+14]
pop eax
mov ecx,[ecx+2C]
mov [monsterName],ecx
test [monsterName],monsterName
jne code
mov ecx,[monsterName]
jmp code
monsterName:
dw ''
code:
push ebp
mov ebp,esp
and esp,-08
jmp return
MonsterTest:
jmp newmem
nop
return:
registersymbol(MonsterTest)
[DISABLE]
MonsterTest:
db 55 8B EC 83 E4 F8
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe.text+4F150
Game.exe.text+4F138: 8B 0D 00 AD 79 00 - mov ecx,[Game.exe+39AD00]
Game.exe.text+4F13E: 51 - push ecx
Game.exe.text+4F13F: 56 - push esi
Game.exe.text+4F140: 6A 06 - push 06
Game.exe.text+4F142: BB 00 AB 79 00 - mov ebx,Game.exe+39AB00
Game.exe.text+4F147: E8 24 FF FF FF - call Game.exe.text+4F070
Game.exe.text+4F14C: 5E - pop esi
Game.exe.text+4F14D: 5B - pop ebx
Game.exe.text+4F14E: C3 - ret
Game.exe.text+4F14F: CC - int 3
// ---------- INJECTING HERE ----------
Game.exe.text+4F150: 55 - push ebp
// ---------- DONE INJECTING ----------
Game.exe.text+4F151: 8B EC - mov ebp,esp
Game.exe.text+4F153: 83 E4 F8 - and esp,-08
Game.exe.text+4F156: B8 24 14 00 00 - mov eax,00001424
Game.exe.text+4F15B: E8 C0 5B 23 00 - call Game.exe.text+284D20
Game.exe.text+4F160: 53 - push ebx
Game.exe.text+4F161: 56 - push esi
Game.exe.text+4F162: 8B D9 - mov ebx,ecx
Game.exe.text+4F164: 57 - push edi
Game.exe.text+4F165: B9 01 00 00 00 - mov ecx,00000001
Game.exe.text+4F16A: E8 E1 05 0B 00 - call Game.exe.text+FF750
}
7
"pointerscan result"
1
4 Bytes
"Game.exe"+003B49DC
24
C8
38
134157
"God Mode (just terrible)"
Auto Assembler Script
{ Game : Game.exe
Version:
Date : 2022-08-06
Author : scarl
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,Game.exe,8B 4C 24 14 8D 3C 29) // should be unique
alloc(newmem,$1000)
alloc(maxHealth,4)
label(code)
label(return)
registersymbol(maxHealth)
newmem:
mov ecx,[esp+14]
cmp esp,0019F764
jne code
mov ecx,#0
push ebx
mov ebx,[eax+08]
mov [eax+04],ebx
pop ebx
code:
// Moved this above to ensure it's ran before the cmp, then modify if ESP
// equals player (seems to be static for now).
// mov ecx,[esp+14]
lea edi,[ecx+ebp]
jmp return
INJECT:
jmp newmem
nop 2
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 8B 4C 24 14 8D 3C 29
unregistersymbol(INJECT maxHealth)
dealloc(newmem maxHealth)
{
// ORIGINAL CODE - INJECTION POINT: Game.exe+22534B
Game.exe+225333: 7C 09 - jl Game.exe+22533E
Game.exe+225335: 8B 0E - mov ecx,[esi]
Game.exe+225337: 8D 04 C1 - lea eax,[ecx+eax*8]
Game.exe+22533A: 85 C0 - test eax,eax
Game.exe+22533C: 75 0A - jne Game.exe+225348
Game.exe+22533E: 8B 13 - mov edx,[ebx]
Game.exe+225340: 52 - push edx
Game.exe+225341: 8B C7 - mov eax,edi
Game.exe+225343: E8 B8 FB FF FF - call Game.exe+224F00
Game.exe+225348: 8B 68 04 - mov ebp,[eax+04]
// ---------- INJECTING HERE ----------
Game.exe+22534B: 8B 4C 24 14 - mov ecx,[esp+14]
// ---------- DONE INJECTING ----------
Game.exe+22534F: 8D 3C 29 - lea edi,[ecx+ebp]
Game.exe+225352: 85 FF - test edi,edi
Game.exe+225354: 89 78 04 - mov [eax+04],edi
Game.exe+225357: 7E 11 - jle Game.exe+22536A
Game.exe+225359: 8B 54 24 18 - mov edx,[esp+18]
Game.exe+22535D: 80 7A 53 00 - cmp byte ptr [edx+53],00
Game.exe+225361: 74 07 - je Game.exe+22536A
Game.exe+225363: 81 4B 10 00 00 00 20 - or [ebx+10],20000000
Game.exe+22536A: 83 78 04 00 - cmp dword ptr [eax+04],00
Game.exe+22536E: 75 14 - jne Game.exe+225384
}
Change of cmp ecx,08
Game.exe+133190
CC
CC
CC
CC
CC
83
F9
08
77
06
89
0D
B0
Change of mov eax,[esp+7C]
Game.exe+17B593
E8
BD
F0
FF
FF
8B
44
24
7C
85
C0
7E
09
6A
Change of mov eax,00000001
Game.exe+16D047
E4
00
00
5B
5F
B8
01
00
00
00
5E
83
C4
70
C2
Change of add edi,edx
Game.exe+58F1C
B6
55
01
8B
F8
03
FA
EB
35
6A
00
BE
Change of mov eax,[Game.exe+39D294]
Game.exe+56700
CC
CC
CC
CC
CC
A1
94
D2
79
00
2B
05
9C
D2
79
Change of mov [Game.exe+39D294],esi
Game.exe+56C1E
0C
8D
4C
24
08
89
35
94
D2
79
00
E8
D7
BB
01
00
Change of mov [Game.exe+30F218],eax
Game.exe+47EC2
15
1C
F2
70
00
A3
18
F2
70
00
E8
04
9F
02
00
Change of mov esi,[Game.exe+30F218]
Game.exe+47E92
0C
8B
44
24
10
8B
35
18
F2
70
00
75
05
83
FE
FF
Change of mov [Game.exe+3C0A9C],ecx
Game.exe+DA9D5
18
8B
44
24
1C
89
0D
9C
0A
7C
00
8B
4C
24
20
89
Change of mov [Game.exe+3C0A90],edx
Game.exe+DAB24
EA
02
83
F8
02
89
15
90
0A
7C
00
74
1F
83
F8
03
Change of mov [edi],ebx
Game.exe+25100C
00
8D
4C
24
0C
89
1F
89
77
04
51
8D
Change of cmp edi,[esi]
Game.exe+251305
C3
00
80
00
00
3B
3E
74
BF
8B
4E
04
Change of movzx eax,word ptr [eax+02]
Game.exe+249CA7
E8
64
B1
03
00
0F
B7
40
02
C2
04
00
CC
CC
Change of mov ax,[ebx+02]
Game.exe+24ACF6
C4
34
C2
0C
00
66
8B
43
02
66
3B
C5
66
8B
Change of movzx edi,word ptr [eax+02]
Game.exe+24AA35
0E
85
C0
74
06
0F
B7
78
02
EB
07
33
FF
EB
Change of cmp edi,[esi]
Game.exe+2512BD
C3
00
80
00
00
3B
3E
89
54
24
10
75
Change of mov ecx,[esi]
Game.exe+60915
04
8B
5C
24
10
8B
0E
89
0F
8B
56
04
Change of movzx eax,word ptr [edi+02]
Game.exe+250F25
8B
4F
1C
85
C9
0F
B7
47
02
0F
B7
57
06
53
Change of sub ebp,[esi]
Game.exe+251529
C2
00
80
00
00
2B
2E
78
06
89
6C
24
Change of movzx edi,word ptr [ecx+02]
Game.exe+24A814
0E
85
C9
74
06
0F
B7
79
02
EB
07
33
FF
EB
Change of mov cx,[esi+02]
Game.exe+27C9DD
02
33
C0
59
C3
66
8B
4E
02
66
8B
56
06
66
Change of movzx ebp,word ptr [esi+02]
Game.exe+608D7
0F
B7
46
06
55
0F
B7
6E
02
3B
E9
89
44
24
Change of mov di,[esi+02]
Game.exe+2518E2
66
8B
6E
06
57
66
8B
7E
02
8B
D6
8D
4C
24
Code :nop
Game.exe+78292
83
FE
01
7E
48
90
90
90
90
90
90
Change of dec [eax]
Game.exe+78293
FE
01
7E
48
90
FE
08
7C
05
BE
08
00
Change of jl Game.exe+7829C
Game.exe+78295
7E
48
90
90
90
7C
05
BE
08
00
00
00
Change of mov esi,00000008
Game.exe+78297
90
90
90
90
90
BE
08
00
00
00
8B
CE
E8
ED
AE
Change of ja Game.exe+13319B
Game.exe+133193
CC
CC
83
F9
08
77
06
89
0D
B0
BD
87
Change of je Game.exe+284F55
Game.exe+284F4D
E2
03
C1
E9
02
74
06
F3
AB
85
D2
74
Testing Item ID
Game.exe+156E85
E8
5B
C4
FF
FF
8B
F8
85
FF
89
7C
24
Change of call Game.exe+228190
Game.exe+15548A
8B
0E
6A
04
51
E8
01
2D
0D
00
C7
45
30
04
00
Change of add [eax],al
Game.exe+155494
90
90
90
90
90
00
00
8B
16
52
E8
12
Testing Rarity
Game.exe+1555A9
E8
A7
FA
FF
FF
8B
4F
30
85
C9
74
02
8B
Ret for Waypoint Usage to Turn off
Game.exe+7C760
CC
CC
CC
CC
CC
C3
90
90
53
55
56
SkillManager_savedAOB
0100295F
Item_savedAOB
010839EE
Skill_savedAOB
010209E3
address
00624F9A
Info about this table:
"Game.exe"+56700
camera
"Game.exe"+58F51
Current area investigating for experience.
"Game.exe"+78297
Check for /players being higher than 8 (nopped out)
"Game.exe"+7C760
ret for turn off waypoint gui and discovery
"Game.exe"+155487
Was originally push 04, think this is what changes that back
"Game.exe"+1554EF
7 test unique
"Game.exe"+1554F7
7 test unique (6 before)
"Game.exe"+1555A9
Testing Rarity
2 = common
4 = magic
6 = rare
7 = unique?
8 = custom (orange)?
9 = set
"Game.exe"+15580F
changed from 7 to 6
"Game.exe"+155981
changes from 6 to 4
"Game.exe"+156E2C
Start of Item Drops
"Game.exe"+156E80
2 / 47
"Game.exe"+156E85
EAX + 4 = Item ID (Can be used to make only certain items drop)
"Game.exe"+220574
Pushing 4 to Item at offset 0, 4 means valid item?
"Game.exe"+223A16
Entity List is held within [ESI]
"Game.exe"+233C64
Highest Item ID is 659, checking for that.
"Game.exe"+23CEB5
[EAX+C] = Pointer
"Game.exe"+2635E8
ECX + 2 @ 510 = all act WP