808
"Enable Mono"
Auto Assembler Script
[ENABLE]
{$lua}
LaunchMonoDataCollector()
{$asm}
[DISABLE]
851
"Always Full Life, Endurance, Food, Water...whatever"
Auto Assembler Script
{ Game : Dungeon Kingdom.exe
Version:
Date : 2021-02-11
Author : Ich
This script changes the ApplyModifier-Code.
This one is very useful because only our party memebers get modified values.
It is used for
* mana regeneration
* health regeneration
* food
* water
* damage output
* and possibly even more
}
define(address,dkCharacteristic:ApplyModifier+12)
define(bytes,D9 5E 10 0F B6 45 10)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
registersymbol(magicvalue)
newmem:
fadd dword ptr [magicvalue] // just add our value to whatever comes our way
code:
fstp dword ptr [esi+10]
movzx eax,byte ptr [ebp+10]
jmp return
magicvalue:
dd (float)1000
address:
jmp newmem
nop
nop
return:
[DISABLE]
address:
db bytes
dealloc(newmem)
unregistersymbol(magicvalue)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacteristic:ApplyModifier+12
0CB8B61C: 00 00 - add [eax],al
0CB8B61E: 00 00 - add [eax],al
dkCharacteristic:ApplyModifier: 55 - push ebp
dkCharacteristic:ApplyModifier+1: 8B EC - mov ebp,esp
dkCharacteristic:ApplyModifier+3: 56 - push esi
dkCharacteristic:ApplyModifier+4: 83 EC 14 - sub esp,14
dkCharacteristic:ApplyModifier+7: 8B 75 08 - mov esi,[ebp+08]
dkCharacteristic:ApplyModifier+a: D9 46 10 - fld dword ptr [esi+10]
dkCharacteristic:ApplyModifier+d: D9 45 0C - fld dword ptr [ebp+0C]
dkCharacteristic:ApplyModifier+10: DE C1 - faddp
// ---------- INJECTING HERE ----------
dkCharacteristic:ApplyModifier+12: D9 5E 10 - fstp dword ptr [esi+10]
dkCharacteristic:ApplyModifier+15: 0F B6 45 10 - movzx eax,byte ptr [ebp+10]
// ---------- DONE INJECTING ----------
dkCharacteristic:ApplyModifier+19: 85 C0 - test eax,eax
dkCharacteristic:ApplyModifier+1b: 74 26 - je dkCharacteristic:ApplyModifier+43
dkCharacteristic:ApplyModifier+1d: D9 46 10 - fld dword ptr [esi+10]
dkCharacteristic:ApplyModifier+20: D9 46 0C - fld dword ptr [esi+0C]
dkCharacteristic:ApplyModifier+23: DF F1 - fcomip st(0),st(1)
dkCharacteristic:ApplyModifier+25: DD D8 - fstp st(0)
dkCharacteristic:ApplyModifier+27: 7A 0A - jp dkCharacteristic:ApplyModifier+33
dkCharacteristic:ApplyModifier+29: 73 08 - jae dkCharacteristic:ApplyModifier+33
dkCharacteristic:ApplyModifier+2b: D9 46 0C - fld dword ptr [esi+0C]
}
849
"Experience Boost"
1
811
"Get 2.000 XP with each Melee Attack"
Auto Assembler Script
define(address,dkCharacterCoreRules:ApplyXpForMeleeAttack+db)
define(bytes,DE C1 D9 5D F8)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(addon)
newmem:
fiadd [addon]
code:
faddp
fstp dword ptr [ebp-08]
jmp return
addon:
dd #2000
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// faddp
// fstp dword ptr [ebp-08]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacterCoreRules:ApplyXpForMeleeAttack+db
dkCharacterCoreRules:ApplyXpForMeleeAttack+c2: D9 5D F4 - fstp dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForMeleeAttack+c5: D9 45 F4 - fld dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForMeleeAttack+c8: D9 EE - fldz
dkCharacterCoreRules:ApplyXpForMeleeAttack+ca: DF F1 - fcomip st(0),st(1)
dkCharacterCoreRules:ApplyXpForMeleeAttack+cc: DD D8 - fstp st(0)
dkCharacterCoreRules:ApplyXpForMeleeAttack+ce: 76 05 - jna dkCharacterCoreRules:ApplyXpForMeleeAttack+d5
dkCharacterCoreRules:ApplyXpForMeleeAttack+d0: D9 EE - fldz
dkCharacterCoreRules:ApplyXpForMeleeAttack+d2: D9 5D F4 - fstp dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForMeleeAttack+d5: D9 45 F8 - fld dword ptr [ebp-08]
dkCharacterCoreRules:ApplyXpForMeleeAttack+d8: D9 45 F4 - fld dword ptr [ebp-0C]
// ---------- INJECTING HERE ----------
dkCharacterCoreRules:ApplyXpForMeleeAttack+db: DE C1 - faddp
dkCharacterCoreRules:ApplyXpForMeleeAttack+dd: D9 5D F8 - fstp dword ptr [ebp-08]
// ---------- DONE INJECTING ----------
dkCharacterCoreRules:ApplyXpForMeleeAttack+e0: 0F B6 45 10 - movzx eax,byte ptr [ebp+10]
dkCharacterCoreRules:ApplyXpForMeleeAttack+e4: 85 C0 - test eax,eax
dkCharacterCoreRules:ApplyXpForMeleeAttack+e6: 74 16 - je dkCharacterCoreRules:ApplyXpForMeleeAttack+fe
dkCharacterCoreRules:ApplyXpForMeleeAttack+e8: D9 45 F8 - fld dword ptr [ebp-08]
dkCharacterCoreRules:ApplyXpForMeleeAttack+eb: D9 5C 24 04 - fstp dword ptr [esp+04]
dkCharacterCoreRules:ApplyXpForMeleeAttack+ef: 89 1C 24 - mov [esp],ebx
dkCharacterCoreRules:ApplyXpForMeleeAttack+f2: 39 1B - cmp [ebx],ebx
dkCharacterCoreRules:ApplyXpForMeleeAttack+f4: 8D 6D 00 - lea ebp,[ebp+00]
dkCharacterCoreRules:ApplyXpForMeleeAttack+f7: E8 2C 00 00 00 - call 0CBAA878
}
813
"Get 2.000 XP with each Nija Attack"
Auto Assembler Script
define(address,dkCharacterCoreRules:ApplyXpForRangeAttack+af)
define(bytes,DE C1 D9 5D F8)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(addon)
newmem:
fiadd [addon]
code:
faddp
fstp dword ptr [ebp-08]
jmp return
addon:
dd #2000
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// faddp
// fstp dword ptr [ebp-08]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacterCoreRules:ApplyXpForRangeAttack+af
dkCharacterCoreRules:ApplyXpForRangeAttack+96: D9 5D F4 - fstp dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForRangeAttack+99: D9 45 F4 - fld dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForRangeAttack+9c: D9 EE - fldz
dkCharacterCoreRules:ApplyXpForRangeAttack+9e: DF F1 - fcomip st(0),st(1)
dkCharacterCoreRules:ApplyXpForRangeAttack+a0: DD D8 - fstp st(0)
dkCharacterCoreRules:ApplyXpForRangeAttack+a2: 76 05 - jna dkCharacterCoreRules:ApplyXpForRangeAttack+a9
dkCharacterCoreRules:ApplyXpForRangeAttack+a4: D9 EE - fldz
dkCharacterCoreRules:ApplyXpForRangeAttack+a6: D9 5D F4 - fstp dword ptr [ebp-0C]
dkCharacterCoreRules:ApplyXpForRangeAttack+a9: D9 45 F8 - fld dword ptr [ebp-08]
dkCharacterCoreRules:ApplyXpForRangeAttack+ac: D9 45 F4 - fld dword ptr [ebp-0C]
// ---------- INJECTING HERE ----------
dkCharacterCoreRules:ApplyXpForRangeAttack+af: DE C1 - faddp
dkCharacterCoreRules:ApplyXpForRangeAttack+b1: D9 5D F8 - fstp dword ptr [ebp-08]
// ---------- DONE INJECTING ----------
dkCharacterCoreRules:ApplyXpForRangeAttack+b4: D9 45 F8 - fld dword ptr [ebp-08]
dkCharacterCoreRules:ApplyXpForRangeAttack+b7: D9 5C 24 04 - fstp dword ptr [esp+04]
dkCharacterCoreRules:ApplyXpForRangeAttack+bb: 89 34 24 - mov [esp],esi
dkCharacterCoreRules:ApplyXpForRangeAttack+be: 39 36 - cmp [esi],esi
dkCharacterCoreRules:ApplyXpForRangeAttack+c0: 8D 6D 00 - lea ebp,[ebp+00]
dkCharacterCoreRules:ApplyXpForRangeAttack+c3: E8 DC 11 D2 0B - call 0CBAA86C
dkCharacterCoreRules:ApplyXpForRangeAttack+c8: 8D 65 FC - lea esp,[ebp-04]
dkCharacterCoreRules:ApplyXpForRangeAttack+cb: 8D 65 FC - lea esp,[ebp-04]
dkCharacterCoreRules:ApplyXpForRangeAttack+ce: 5E - pop esi
}
814
"More XP for Mage-Casts (20x)"
Auto Assembler Script
define(address,dkCharacter:AddXpMagic+66)
define(bytes,DE C9 DE C1 8B 45 F0)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(addon)
newmem:
fiadd [addon]
code:
fmulp st(1),st(0)
faddp
mov eax,[ebp-10]
jmp return
addon:
dd #20
address:
jmp newmem
nop 2
return:
[DISABLE]
address:
db bytes
// fmulp st(1),st(0)
// faddp
// mov eax,[ebp-0C]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacter:AddXpMagic+66 (moved with update 2021-07-03)
dkCharacter:AddXpMagic+3b: DD 45 E8 - fld qword ptr [ebp-18]
dkCharacter:AddXpMagic+3e: DD 45 E0 - fld qword ptr [ebp-20]
dkCharacter:AddXpMagic+41: D9 05 B8 BD 0C 69 - fld dword ptr [690CBDB8]
dkCharacter:AddXpMagic+47: D9 CA - fxch st(2)
dkCharacter:AddXpMagic+49: DD 5D E8 - fstp qword ptr [ebp-18]
dkCharacter:AddXpMagic+4c: DD 5D E0 - fstp qword ptr [ebp-20]
dkCharacter:AddXpMagic+4f: DD 5D D8 - fstp qword ptr [ebp-28]
dkCharacter:AddXpMagic+52: DD 45 E8 - fld qword ptr [ebp-18]
dkCharacter:AddXpMagic+55: DD 45 E0 - fld qword ptr [ebp-20]
dkCharacter:AddXpMagic+58: DD 45 D8 - fld qword ptr [ebp-28]
// ---------- INJECTING HERE ----------
dkCharacter:AddXpMagic+5b: DE C9 - fmulp st(1),st(0)
dkCharacter:AddXpMagic+5d: DE C1 - faddp
dkCharacter:AddXpMagic+5f: 8B 45 F0 - mov eax,[ebp-10]
// ---------- DONE INJECTING ----------
dkCharacter:AddXpMagic+62: D9 58 48 - fstp dword ptr [eax+48]
dkCharacter:AddXpMagic+65: D9 47 48 - fld dword ptr [edi+48]
dkCharacter:AddXpMagic+68: C7 44 24 08 28 95 03 32 - mov [esp+08],32039528
dkCharacter:AddXpMagic+70: D9 5C 24 04 - fstp dword ptr [esp+04]
dkCharacter:AddXpMagic+74: 89 3C 24 - mov [esp],edi
dkCharacter:AddXpMagic+77: E8 3C C4 FF FF - call dkCharacter:SetLevelFromXp
dkCharacter:AddXpMagic+7c: 85 C0 - test eax,eax
dkCharacter:AddXpMagic+7e: 0F 84 90 00 00 00 - je dkCharacter:AddXpMagic+114
}
815
"More XP for Priest Casts (20x)"
Auto Assembler Script
define(address,dkCharacter:AddXpPriest+66)
define(bytes,DE C9 DE C1 8B 45 F0)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(addon)
newmem:
fiadd [addon]
code:
fmulp st(1),st(0)
faddp
mov eax,[ebp-10]
jmp return
addon:
dd #20
address:
jmp newmem
nop 2
return:
[DISABLE]
address:
db bytes
// fmulp st(1),st(0)
// faddp
// mov eax,[ebp-0C]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacter:AddXpPriest+5b
// moved to +66 with update from 2021-07-03
dkCharacter:AddXpPriest+3b: DD 45 E8 - fld qword ptr [ebp-18]
dkCharacter:AddXpPriest+3e: DD 45 E0 - fld qword ptr [ebp-20]
dkCharacter:AddXpPriest+41: D9 05 B8 17 0D 69 - fld dword ptr [690D17B8]
dkCharacter:AddXpPriest+47: D9 CA - fxch st(2)
dkCharacter:AddXpPriest+49: DD 5D E8 - fstp qword ptr [ebp-18]
dkCharacter:AddXpPriest+4c: DD 5D E0 - fstp qword ptr [ebp-20]
dkCharacter:AddXpPriest+4f: DD 5D D8 - fstp qword ptr [ebp-28]
dkCharacter:AddXpPriest+52: DD 45 E8 - fld qword ptr [ebp-18]
dkCharacter:AddXpPriest+55: DD 45 E0 - fld qword ptr [ebp-20]
dkCharacter:AddXpPriest+58: DD 45 D8 - fld qword ptr [ebp-28]
// ---------- INJECTING HERE ----------
dkCharacter:AddXpPriest+5b: DE C9 - fmulp st(1),st(0)
dkCharacter:AddXpPriest+5d: DE C1 - faddp
dkCharacter:AddXpPriest+5f: 8B 45 F4 - mov eax,[ebp-0C]
// ---------- DONE INJECTING ----------
dkCharacter:AddXpPriest+62: D9 58 4C - fstp dword ptr [eax+4C]
dkCharacter:AddXpPriest+65: D9 47 4C - fld dword ptr [edi+4C]
dkCharacter:AddXpPriest+68: C7 44 24 08 D8 94 03 32 - mov [esp+08],320394D8
dkCharacter:AddXpPriest+70: D9 5C 24 04 - fstp dword ptr [esp+04]
dkCharacter:AddXpPriest+74: 89 3C 24 - mov [esp],edi
dkCharacter:AddXpPriest+77: E8 1C AB FF FF - call 0CBAA9C8
dkCharacter:AddXpPriest+7c: 85 C0 - test eax,eax
dkCharacter:AddXpPriest+7e: 0F 84 90 00 00 00 - je dkCharacter:AddXpPriest+114
}
807
"Get Character Data"
Auto Assembler Script
{ Game : Dungeon Kingdom.exe
Version:
Date : 2021-02-09
Author : Marc
This script captures the address of the dkGame-Structure.
The code used is constantly reading the structure
Alternative addresses are:
1. dkUIPortrait:OnClick+2ed - 39 00 - cmp [eax],eax
2. mono-2.0-bdwgc.mono_breakpoint_clean_code+A41F - 8B 02 - mov eax,[edx]
which are both only executed when another character gets selected
}
define(address,DungeonKings:Update+30e)
define(bytes,39 00 8D 6D 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
label(dkGameAddy)
newmem:
mov [dkGameAddy],eax
code:
cmp [eax],eax
lea ebp,[ebp+00]
jmp return
dkGameAddy:
dd 0
address:
jmp newmem
return:
registersymbol(dkGameAddy)
[DISABLE]
address:
db bytes
// cmp [eax],eax
// lea ebp,[ebp+00]
dealloc(newmem)
unregistersymbol(dkGameAddy)
{
// ORIGINAL CODE - INJECTION POINT: DungeonKings:Update+30e
DungeonKings:Update+2e8: 74 0A - je DungeonKings:Update+2f4
DungeonKings:Update+2ea: 89 3C 24 - mov [esp],edi
DungeonKings:Update+2ed: 8B C0 - mov eax,eax
DungeonKings:Update+2ef: E8 38 06 00 00 - call 2050A414
DungeonKings:Update+2f4: B8 70 CB 72 33 - mov eax,3372CB70
DungeonKings:Update+2f9: 39 00 - cmp [eax],eax
DungeonKings:Update+2fb: 8B 05 CC 6E 23 06 - mov eax,[06236ECC]
DungeonKings:Update+301: D9 87 20 02 00 00 - fld dword ptr [edi+00000220]
DungeonKings:Update+307: D9 5C 24 04 - fstp dword ptr [esp+04]
DungeonKings:Update+30b: 89 04 24 - mov [esp],eax
// ---------- INJECTING HERE ----------
DungeonKings:Update+30e: 39 00 - cmp [eax],eax
DungeonKings:Update+310: 8D 6D 00 - lea ebp,[ebp+00]
// ---------- DONE INJECTING ----------
DungeonKings:Update+313: E8 30 F9 79 F9 - call dkGame:Update
DungeonKings:Update+318: B8 70 CB 72 33 - mov eax,3372CB70
DungeonKings:Update+31d: 39 00 - cmp [eax],eax
DungeonKings:Update+31f: 8B 05 CC 6E 23 06 - mov eax,[06236ECC]
DungeonKings:Update+325: 89 87 80 01 00 00 - mov [edi+00000180],eax
DungeonKings:Update+32b: C7 44 24 04 01 00 00 00 - mov [esp+04],00000001
DungeonKings:Update+333: 89 3C 24 - mov [esp],edi
DungeonKings:Update+336: 90 - nop
DungeonKings:Update+337: E8 F4 0F 74 F9 - call DungeonKings:UpdateGauges
}
525
"dkGame"
0
1
dkGameAddy
0
684
"Gold of the Party"
Float
+60
526
"Heroes"
1
+8
0
527
"Pointer to dkCharacter[]"
1
+8
0
528
"Hero 1"
1
+10
0
370
"Given Name"
1
008000
String
20
1
0
1
+8
C
533
"Name"
1
008000
String
20
1
0
1
+C
C
375
"CurrentWeight"
0
800080
Float
+3c
819
"MaxWeight"
0
800080
Float
+40
818
"XP Warrior"
C08000
Float
+44
534
"XP Mage"
C08000
Float
+48
535
"XP Priest"
C08000
Float
+4c
536
"XP Ninja"
C08000
Float
+50
751
"Health - Current Value"
0000FF
Float
+18
10
10
8
538
"Health - Normal Value"
0000FF
Float
+18
C
10
8
539
"Endurance - Current Value"
404080
Float
+18
10
14
8
540
"Endurance - Normal Value"
404080
Float
+18
C
14
8
541
"Mana - Current Value"
FF0000
Float
+18
10
18
8
543
"Mana - Normal Value"
FF0000
Float
+18
C
18
8
544
"Strength - Current Value"
FF00FF
Float
+18
10
20
8
545
"Strength - Normal Value"
FF00FF
Float
+18
C
20
8
546
"Dexterity - Current Value"
FF00FF
Float
+18
10
24
8
547
"Dexterity - Normal Value"
FF00FF
Float
+18
C
24
8
548
"Constitution - Current Value"
FF00FF
Float
+18
10
28
8
549
"Constitution - Normal Value"
FF00FF
Float
+18
C
28
8
550
"Intelligence - Current Value"
FF00FF
Float
+18
10
2C
8
551
"Intelligence - Normal Value"
FF00FF
Float
+18
C
2C
8
552
"Wisdom - Current Value"
FF00FF
Float
+18
10
30
8
553
"Wisdom - Normal Value"
FF00FF
Float
+18
C
30
8
752
"Right-Hand-Damage (Upper Hand)"
4080FF
Float
+18
-80
30
8
556
"Water %"
008000
Float
+18
-C8
30
8
557
"Food %"
008000
Float
+18
-b0
30
8
716
"Upper Hand (Item[7] in Inventory List)"
0
008000
Binary
0
1
0
+1c
8
2c
8
725
"Name"
String
30
1
0
1
+14
c
717
"Critical Attack Bonus"
Float
+7c
719
"Charge Count"
Float
+dc
718
"Reload Time"
Float
+fc
529
"Hero 2"
1
+14
0
558
"Given Name"
1
008000
String
20
1
0
1
+8
C
559
"Name"
1
008000
String
20
1
0
1
+C
C
560
"XP Warrior"
C08000
Float
+44
561
"XP Mage"
C08000
Float
+48
562
"XP Priest"
C08000
Float
+4c
563
"XP Ninja"
C08000
Float
+50
564
"Health - Current Value"
0000FF
Float
+18
10
10
8
565
"Health - Normal Value"
0000FF
Float
+18
C
10
8
566
"Endurance - Current Value"
404080
Float
+18
10
14
8
567
"Endurance - Normal Value"
404080
Float
+18
C
14
8
568
"Mana - Current Value"
FF0000
Float
+18
10
18
8
569
"Mana - Normal Value"
FF0000
Float
+18
C
18
8
570
"Strength - Current Value"
FF00FF
Float
+18
10
20
8
571
"Strength - Normal Value"
FF00FF
Float
+18
C
20
8
572
"Dexterity - Current Value"
FF00FF
Float
+18
10
24
8
573
"Dexterity - Normal Value"
FF00FF
Float
+18
C
24
8
574
"Constitution - Current Value"
FF00FF
Float
+18
10
28
8
575
"Constitution - Normal Value"
FF00FF
Float
+18
C
28
8
576
"Intelligence - Current Value"
FF00FF
Float
+18
10
2C
8
577
"Intelligence - Normal Value"
FF00FF
Float
+18
C
2C
8
578
"Wisdom - Current Value"
FF00FF
Float
+18
10
30
8
579
"Wisdom - Normal Value"
FF00FF
Float
+18
C
30
8
753
"Right-Hand-Damage (Upper Hand)"
4080FF
Float
+18
-80
30
8
580
"Water %"
008000
Float
+18
-C8
30
8
581
"Food %"
008000
Float
+18
-b0
30
8
720
"Upper Hand (Item[7] in Inventory List)"
0
008000
Binary
0
1
0
+1c
8
2c
8
733
"Name"
String
30
1
0
1
+14
c
721
"Critical Attack Bonus"
Float
+7c
722
"Charge Count"
Float
+dc
723
"Reload Time"
Float
+fc
582
"Hero 3"
1
+18
0
583
"Given Name"
1
008000
String
20
1
0
1
+8
C
584
"Name"
1
008000
String
20
1
0
1
+C
C
585
"XP Warrior"
C08000
Float
+44
586
"XP Mage"
C08000
Float
+48
587
"XP Priest"
C08000
Float
+4c
588
"XP Ninja"
C08000
Float
+50
589
"Health - Current Value"
0000FF
Float
+18
10
10
8
590
"Health - Normal Value"
0000FF
Float
+18
C
10
8
591
"Endurance - Current Value"
404080
Float
+18
10
14
8
592
"Endurance - Normal Value"
404080
Float
+18
C
14
8
593
"Mana - Current Value"
FF0000
Float
+18
10
18
8
594
"Mana - Normal Value"
FF0000
Float
+18
C
18
8
595
"Strength - Current Value"
FF00FF
Float
+18
10
20
8
596
"Strength - Normal Value"
FF00FF
Float
+18
C
20
8
597
"Dexterity - Current Value"
FF00FF
Float
+18
10
24
8
598
"Dexterity - Normal Value"
FF00FF
Float
+18
C
24
8
599
"Constitution - Current Value"
FF00FF
Float
+18
10
28
8
600
"Constitution - Normal Value"
FF00FF
Float
+18
C
28
8
601
"Intelligence - Current Value"
FF00FF
Float
+18
10
2C
8
602
"Intelligence - Normal Value"
FF00FF
Float
+18
C
2C
8
603
"Wisdom - Current Value"
FF00FF
Float
+18
10
30
8
604
"Wisdom - Normal Value"
FF00FF
Float
+18
C
30
8
754
"Right-Hand-Damage (Upper Hand)"
4080FF
Float
+18
-80
30
8
605
"Water %"
008000
Float
+18
-C8
30
8
606
"Food %"
008000
Float
+18
-b0
30
8
724
"Upper Hand (Item[7] in Inventory List)"
0
008000
Binary
0
1
0
+1c
8
2c
8
734
"Name"
String
30
1
0
1
+14
c
732
"Critical Attack Bonus"
Float
+7c
726
"Charge Count"
Float
+dc
727
"Reload Time"
Float
+fc
607
"Hero 4"
1
+1c
0
608
"Given Name"
1
008000
String
20
1
0
1
+8
C
609
"Name"
1
008000
String
20
1
0
1
+C
C
610
"XP Warrior"
C08000
Float
+44
611
"XP Mage"
C08000
Float
+48
612
"XP Priest"
C08000
Float
+4c
613
"XP Ninja"
C08000
Float
+50
614
"Health - Current Value"
0000FF
Float
+18
10
10
8
615
"Health - Normal Value"
0000FF
Float
+18
C
10
8
616
"Endurance - Current Value"
404080
Float
+18
10
14
8
617
"Endurance - Normal Value"
404080
Float
+18
C
14
8
618
"Mana - Current Value"
FF0000
Float
+18
10
18
8
619
"Mana - Normal Value"
FF0000
Float
+18
C
18
8
620
"Strength - Current Value"
FF00FF
Float
+18
10
20
8
621
"Strength - Normal Value"
FF00FF
Float
+18
C
20
8
622
"Dexterity - Current Value"
FF00FF
Float
+18
10
24
8
623
"Dexterity - Normal Value"
FF00FF
Float
+18
C
24
8
624
"Constitution - Current Value"
FF00FF
Float
+18
10
28
8
625
"Constitution - Normal Value"
FF00FF
Float
+18
C
28
8
626
"Intelligence - Current Value"
FF00FF
Float
+18
10
2C
8
627
"Intelligence - Normal Value"
FF00FF
Float
+18
C
2C
8
628
"Wisdom - Current Value"
FF00FF
Float
+18
10
30
8
629
"Wisdom - Normal Value"
FF00FF
Float
+18
C
30
8
755
"Right-Hand-Damage (Upper Hand)"
4080FF
Float
+18
-80
30
8
630
"Water %"
008000
Float
+18
-C8
30
8
631
"Food %"
008000
Float
+18
-b0
30
8
728
"Upper Hand (Item[7] in Inventory List)"
0
008000
Binary
0
1
0
+1c
8
2c
8
735
"Name"
String
30
1
0
1
+14
c
729
"Critical Attack Bonus"
Float
+7c
730
"Charge Count"
Float
+dc
731
"Reload Time"
Float
+fc
821
"Prevent Overweight-Flagging"
Auto Assembler Script
define(address,dkCharacter:Update+366)
define(bytes,88 87 5C 01 00 00)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
mov eax,0
code:
mov [edi+0000015C],al
jmp return
address:
jmp newmem
nop
return:
[DISABLE]
address:
db bytes
// mov [edi+0000015C],al
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: dkCharacter:Update+366
dkCharacter:Update+34c: D9 5F 3C - fstp dword ptr [edi+3C]
dkCharacter:Update+34f: D9 47 40 - fld dword ptr [edi+40]
dkCharacter:Update+352: D9 47 3C - fld dword ptr [edi+3C]
dkCharacter:Update+355: 33 C0 - xor eax,eax
dkCharacter:Update+357: DF F1 - fcomip st(0),st(1)
dkCharacter:Update+359: DD D8 - fstp st(0)
dkCharacter:Update+35b: 0F 92 C0 - setb al
dkCharacter:Update+35e: 85 C0 - test eax,eax
dkCharacter:Update+360: 0F 94 C0 - sete al
dkCharacter:Update+363: 0F B6 C0 - movzx eax,al
// ---------- INJECTING HERE ----------
dkCharacter:Update+366: 88 87 5C 01 00 00 - mov [edi+0000015C],al
// ---------- DONE INJECTING ----------
dkCharacter:Update+36c: 0F B6 47 34 - movzx eax,byte ptr [edi+34]
dkCharacter:Update+370: 85 C0 - test eax,eax
dkCharacter:Update+372: 0F 85 75 00 00 00 - jne dkCharacter:Update+3ed
dkCharacter:Update+378: D9 EE - fldz
dkCharacter:Update+37a: D9 9F E8 00 00 00 - fstp dword ptr [edi+000000E8]
dkCharacter:Update+380: D9 EE - fldz
dkCharacter:Update+382: D9 9F E4 00 00 00 - fstp dword ptr [edi+000000E4]
dkCharacter:Update+388: D9 05 90 2A CB 35 - fld dword ptr [35CB2A90]
dkCharacter:Update+38e: D9 9F EC 00 00 00 - fstp dword ptr [edi+000000EC]
dkCharacter:Update+394: D9 05 98 2A CB 35 - fld dword ptr [35CB2A98]
}
845
"Coordinates"
1
792
"Coordinates via mono.dll"
1
"mono-2.0-bdwgc.dll"+003A4128
80
20
4
1c
28
1f0
713
"X"
Float
+0
715
"Z"
Float
+4
714
"Y"
Float
+8
794
"Coordinates via UnityPlayer.dll"
1
"UnityPlayer.dll"+010991FC
80
44
8
20
4
795
"X"
Float
+0
796
"Z"
Float
+4
797
"Y"
Float
+8
839
"Achievements"
0
1
"UnityPlayer.dll"+010C994C
0
180
18
8
4
842
"Monsters Killed"
0
4 Bytes
+78
844
"Steps Walked"
0
4 Bytes
+7c
843
"Amount of Spells casted by Group"
0
4 Bytes
+84
847
"Number of Different Spells casted by Group"
0
4 Bytes
+8c
846
"Potions drunk by Group"
0
4 Bytes
+a4
804
"Debug"
C0C0C0
Auto Assembler Script
{
dkFadeLight:UpdateIntensity
FlickerLight:LateUpdate
FlickerLight:Start
dkTorchReducePowerFromItemData:Start
dkFlammable:Update
}
[ENABLE]
[DISABLE]
852
"Informations (edit Script to read them^^)"
Auto Assembler Script
{
Some Mono-Funktions which seem to be of interest:
dkSpellProjectile:OnTriggerEnter
dkSpellsManager:Cast
}
[ENABLE]
[DISABLE]
840
"Achievements"
0
4 Bytes
"UnityPlayer.dll"+010C994C
0
180
18
14
4
841
"Achievements"
0
4 Bytes
"UnityPlayer.dll"+010C994C
0
180
3C
2C
4
850
"Spell Damage Modifier ???"
0
Float
dkSpellProjectile:OnTriggerEnter+2a
0
40
"Always Full Life, Endurance, Food, Water...whatever (old AOB version)"
Auto Assembler Script
{
This script changes the ApplyModifier-Code.
This one is very useful because only our party memebers get modified values.
It is used for
* mana regeneration
* health regeneration
* damage output
* and many more, hehe
}
[ENABLE]
aobscan(modifier,C1 D9 5E 10 0F B6 45 10)
alloc(newmem,$1000)
alloc(magicvalue,4)
label(code)
label(return)
magicvalue:
dd (float)1000
newmem:
fadd dword ptr [magicvalue] // just add our value to whatever comes our way
code:
fstp dword ptr [esi+10]
movzx eax,byte ptr [ebp+10]
jmp return
modifier+01:
jmp newmem
nop
nop
return:
registersymbol(modifier)
[DISABLE]
modifier+01:
db D9 5E 10 0F B6 45 10
unregistersymbol(modifier)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 19ACADDA
// dkCharacteristic:ApplyModifier+12 - D9 5E 10 - fstp dword ptr [esi+10]
19ACADC1: E9 62 52 F5 EB - jmp 05A20028
19ACADC6: 00 00 - add [eax],al
19ACADC8: 55 - push ebp
19ACADC9: 8B EC - mov ebp,esp
19ACADCB: 56 - push esi
19ACADCC: 83 EC 04 - sub esp,04
19ACADCF: 8B 75 08 - mov esi,[ebp+08]
19ACADD2: D9 46 10 - fld dword ptr [esi+10]
19ACADD5: D9 45 0C - fld dword ptr [ebp+0C]
19ACADD8: DE C1 - faddp
// ---------- INJECTING HERE ----------
19ACADDA: D9 5E 10 - fstp dword ptr [esi+10]
19ACADDD: 0F B6 45 10 - movzx eax,byte ptr [ebp+10]
// ---------- DONE INJECTING ----------
19ACADE1: 85 C0 - test eax,eax
19ACADE3: 74 26 - je 19ACAE0B
19ACADE5: D9 46 10 - fld dword ptr [esi+10]
19ACADE8: D9 46 0C - fld dword ptr [esi+0C]
19ACADEB: DF F1 - fcomip st(0),st(1)
19ACADED: DD D8 - fstp st(0)
19ACADEF: 7A 0A - jp 19ACADFB
19ACADF1: 73 08 - jae 19ACADFB
19ACADF3: D9 46 0C - fld dword ptr [esi+0C]
19ACADF6: D9 5E 10 - fstp dword ptr [esi+10]
}
Change of jp dkTorchReducePowerFromItemData:Start+e1
19B49F00
68
DF
F1
DD
D8
7A
07
73
05
D9
E8
D9
Change of jae dkTorchReducePowerFromItemData:Start+e1
19B49F02
F1
DD
D8
90
90
73
05
D9
E8
D9
5D
F0
Change of jna dkTorchReducePowerFromItemData:Start+170
19B49F82
68
DF
F1
DD
D8
76
14
D9
05
98
ED
64
Change of mov [edi+0000015C],al
171B2A1E
94
C0
0F
B6
C0
88
87
5C
01
00
00
0F
B6
47
34
85
xcoord
00BB0010
coord_address
00520000
Give Hero 1 the +5 Long Dagger in upper Hand
lower Hand must be empty
AOB-Scan for "00 00 00 00 00 d0 19 2d" and you've got the items in his hands, where 00 d0 19 2d is the +5 dagger
--------------------------------------------
011366FD - 47 - inc edi
011366FE - 83 FF 04 - cmp edi,04 { 4 }
01136701 - 0F8C F1FEFFFF - jl 011365F8
01136707 - 8B 05 0CAF4804 - mov eax,[0448AF0C] { (2BC4FE58) }
0113670D - D9 40 3C - fld dword ptr [eax+3C]
01136710 - B9 C4AE4804 - mov ecx,0448AEC4 { (3.00) }
====== Writes to gold here ! ========
01136715 - D9 01 - fld dword ptr [ecx]
======
01136717 - DEE9 - fsubp st(1),st(0)
01136719 - D9 58 3C - fstp dword ptr [eax+3C]
0113671C - 8D 65 F8 - lea esp,[ebp-08]
0113671F - 8D 65 F8 - lea esp,[ebp-08]
01136722 - 5E - pop esi
01136723 - 5F - pop edi
01136724 - C9 - leave
01136725 - C3 - ret
This Code will be formerly known as "dkCityBarimbarGameplay:OnClicAnswer1+167 - DEE9 - fsubp st(1),st(0)" ^^