[REQUEST] The Thaumaturge

Vanecce · Post by **Vanecce** » Wed Mar 06, 2024 3:07 am

Sombra,
Could you share your save?

topboy · Post by **topboy** » Wed Mar 06, 2024 3:52 am

-skill gate by salutors. Last 4 gate I only got 1 ,Golem. so even with cheat u still gate.
-story mode in this game is extremely easy from start till the end. make enemies suffer and drain they health make u invincible.

geralt123 · Post by **geralt123** » Wed Mar 06, 2024 4:20 am

+1

sanitka · Post by **sanitka** » Wed Mar 06, 2024 5:22 am

Thaumaturgy Points Pointer

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>2</ID>
      <Description>"Thaumaturgy Points"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-06
  Author : SanitKa

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJTHP,TheThaumaturge-Win64-Shipping.exe,8B 41 30 41 89 00 C3) // should be unique
alloc(newmem,$1000,INJTHP)

label(code)
label(return)
label(thPoints)

newmem:
//  lea rax,[rcx+30]
  mov [thPoints],rcx

code:
  mov eax,[rcx+30]
  mov [r8],eax
  jmp return

thPoints:
  dq 0

INJTHP:
  jmp newmem
  nop
return:
registersymbol(INJTHP)
registersymbol(thPoints)

[DISABLE]

INJTHP:
  db 8B 41 30 41 89 00

unregistersymbol(*)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+1E9B1F5

TheThaumaturge-Win64-Shipping.exe+1E9B1DC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1E0: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B1E4: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B1E7: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1EA: 41 0F 95 C1  - setne r9b
TheThaumaturge-Win64-Shipping.exe+1E9B1EE: 4C 03 C8     - add r9,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1F1: 4C 89 4A 20  - mov [rdx+20],r9
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F5: 8B 41 30     - mov eax,[rcx+30]
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F8: 41 89 00     - mov [r8],eax
TheThaumaturge-Win64-Shipping.exe+1E9B1FB: C3           - ret 
TheThaumaturge-Win64-Shipping.exe+1E9B1FC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B200: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B204: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B207: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B20A: 41 0F 95 C1  - setne r9b
}
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>4</ID>
          <Description>"thPoints"</Description>
          <ShowAsHex>1</ShowAsHex>
          <ShowAsSigned>0</ShowAsSigned>
          <Color>C0C0C0</Color>
          <VariableType>8 Bytes</VariableType>
          <Address>thPoints</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>3</ID>
          <Description>"Points"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>[thPoints]+30</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>4</ID>
          <Description>"Exp"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>[thPoints]+100</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>5</ID>
          <Description>"Lvl"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>[thPoints]+104</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT:
you can add Exp and Level to your table if you want, just copy, paste Th points and update offsets:
Th Points are +30
Exp is +100
Level is +104

Vanecce · Post by **Vanecce** » Wed Mar 06, 2024 3:21 pm

Thank you Sanitka!

acecel · Post by **acecel** » Thu Mar 07, 2024 2:32 am

+1

Lord Blade · Post by **Lord Blade** » Thu Mar 07, 2024 4:30 am

sanitka wrote: ↑

Wed Mar 06, 2024 5:22 am

Thaumaturgy Points Pointer

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>2</ID>
      <Description>"Thaumaturgy Points"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-06
  Author : SanitKa

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJTHP,TheThaumaturge-Win64-Shipping.exe,8B 41 30 41 89 00 C3) // should be unique
alloc(newmem,$1000,INJTHP)

label(code)
label(return)
label(thPoints)

newmem:
//  lea rax,[rcx+30]
  mov [thPoints],rcx

code:
  mov eax,[rcx+30]
  mov [r8],eax
  jmp return

thPoints:
  dq 0

INJTHP:
  jmp newmem
  nop
return:
registersymbol(INJTHP)
registersymbol(thPoints)

[DISABLE]

INJTHP:
  db 8B 41 30 41 89 00

unregistersymbol(*)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+1E9B1F5

TheThaumaturge-Win64-Shipping.exe+1E9B1DC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1E0: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B1E4: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B1E7: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1EA: 41 0F 95 C1  - setne r9b
TheThaumaturge-Win64-Shipping.exe+1E9B1EE: 4C 03 C8     - add r9,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1F1: 4C 89 4A 20  - mov [rdx+20],r9
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F5: 8B 41 30     - mov eax,[rcx+30]
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F8: 41 89 00     - mov [r8],eax
TheThaumaturge-Win64-Shipping.exe+1E9B1FB: C3           - ret 
TheThaumaturge-Win64-Shipping.exe+1E9B1FC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B200: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B204: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B207: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B20A: 41 0F 95 C1  - setne r9b
}
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>4</ID>
          <Description>"thPoints"</Description>
          <ShowAsHex>1</ShowAsHex>
          <ShowAsSigned>0</ShowAsSigned>
          <Color>C0C0C0</Color>
          <VariableType>8 Bytes</VariableType>
          <Address>thPoints</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>3</ID>
          <Description>"Points"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>[thPoints]+30</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

How exactly do you use that?

zhenle1994 · Post by **zhenle1994** » Thu Mar 07, 2024 6:37 am

Lord Blade wrote: ↑

Thu Mar 07, 2024 4:30 am

sanitka wrote: ↑

Wed Mar 06, 2024 5:22 am

Thaumaturgy Points Pointer

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>2</ID>
      <Description>"Thaumaturgy Points"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-06
  Author : SanitKa

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJTHP,TheThaumaturge-Win64-Shipping.exe,8B 41 30 41 89 00 C3) // should be unique
alloc(newmem,$1000,INJTHP)

label(code)
label(return)
label(thPoints)

newmem:
//  lea rax,[rcx+30]
  mov [thPoints],rcx

code:
  mov eax,[rcx+30]
  mov [r8],eax
  jmp return

thPoints:
  dq 0

INJTHP:
  jmp newmem
  nop
return:
registersymbol(INJTHP)
registersymbol(thPoints)

[DISABLE]

INJTHP:
  db 8B 41 30 41 89 00

unregistersymbol(*)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+1E9B1F5

TheThaumaturge-Win64-Shipping.exe+1E9B1DC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1DF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1E0: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B1E4: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B1E7: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1EA: 41 0F 95 C1  - setne r9b
TheThaumaturge-Win64-Shipping.exe+1E9B1EE: 4C 03 C8     - add r9,rax
TheThaumaturge-Win64-Shipping.exe+1E9B1F1: 4C 89 4A 20  - mov [rdx+20],r9
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F5: 8B 41 30     - mov eax,[rcx+30]
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+1E9B1F8: 41 89 00     - mov [r8],eax
TheThaumaturge-Win64-Shipping.exe+1E9B1FB: C3           - ret 
TheThaumaturge-Win64-Shipping.exe+1E9B1FC: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FD: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FE: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B1FF: CC           - int 3 
TheThaumaturge-Win64-Shipping.exe+1E9B200: 48 8B 42 20  - mov rax,[rdx+20]
TheThaumaturge-Win64-Shipping.exe+1E9B204: 45 33 C9     - xor r9d,r9d
TheThaumaturge-Win64-Shipping.exe+1E9B207: 48 85 C0     - test rax,rax
TheThaumaturge-Win64-Shipping.exe+1E9B20A: 41 0F 95 C1  - setne r9b
}
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>4</ID>
          <Description>"thPoints"</Description>
          <ShowAsHex>1</ShowAsHex>
          <ShowAsSigned>0</ShowAsSigned>
          <Color>C0C0C0</Color>
          <VariableType>8 Bytes</VariableType>
          <Address>thPoints</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>3</ID>
          <Description>"Points"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>[thPoints]+30</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

How exactly do you use that?

Copy the entire code and open cheat engine, then Ctrl+V on the blank space.

sanitka · Post by **sanitka** » Thu Mar 07, 2024 12:39 pm

sanitka wrote: ↑
Wed Mar 06, 2024 5:22 am

you can add Exp and Level to your table if you want, just copy, paste Th points and update offsets:
Th Points are +30
Exp is +100
Level is +104

HeLLFoRCee · Post by **HeLLFoRCee** » Thu Mar 07, 2024 4:19 pm

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>9</ID>
      <Description>"Exp Multiplier 100x"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-07
  Author : osman1

  This script does blah blah blah
}

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat

 
 
aobscanmodule(INJECT,TheThaumaturge-Win64-Shipping.exe,44 01 BB 00 01 00 00) // should be unique
alloc(newmem,$1000,INJECT)

label(code)
label(return)

newmem:
imul,r15d,100
code:
  add [rbx+00000100],r15d
  jmp return

INJECT:
  jmp newmem
  nop 2
return:
registersymbol(INJECT)

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
  db 44 01 BB 00 01 00 00

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+264348A

TheThaumaturge-Win64-Shipping.exe+2643460: E8 DB E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+2643465: 8B BB 04 01 00 00     - mov edi,[rbx+00000104]
TheThaumaturge-Win64-Shipping.exe+264346B: 48 8B CB              - mov rcx,rbx
TheThaumaturge-Win64-Shipping.exe+264346E: 8D 57 01              - lea edx,[rdi+01]
TheThaumaturge-Win64-Shipping.exe+2643471: E8 3A 14 00 00        - call TheThaumaturge-Win64-Shipping.exe+26448B0
TheThaumaturge-Win64-Shipping.exe+2643476: 48 8D 8B 00 03 00 00  - lea rcx,[rbx+00000300]
TheThaumaturge-Win64-Shipping.exe+264347D: 44 8B C8              - mov r9d,eax
TheThaumaturge-Win64-Shipping.exe+2643480: 45 8B C7              - mov r8d,r15d
TheThaumaturge-Win64-Shipping.exe+2643483: 8B D7                 - mov edx,edi
TheThaumaturge-Win64-Shipping.exe+2643485: E8 D6 11 00 00        - call TheThaumaturge-Win64-Shipping.exe+2644660
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+264348A: 44 01 BB 00 01 00 00  - add [rbx+00000100],r15d
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+2643491: 48 8D 8B A0 02 00 00  - lea rcx,[rbx+000002A0]
TheThaumaturge-Win64-Shipping.exe+2643498: 8B 83 00 01 00 00     - mov eax,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+264349E: 48 8D 54 24 20        - lea rdx,[rsp+20]
TheThaumaturge-Win64-Shipping.exe+26434A3: 89 44 24 24           - mov [rsp+24],eax
TheThaumaturge-Win64-Shipping.exe+26434A7: 44 89 64 24 20        - mov [rsp+20],r12d
TheThaumaturge-Win64-Shipping.exe+26434AC: E8 8F E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+26434B1: 44 8B 83 00 01 00 00  - mov r8d,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+26434B8: 48 8D 8B B0 02 00 00  - lea rcx,[rbx+000002B0]
TheThaumaturge-Win64-Shipping.exe+26434BF: 41 8B D4              - mov edx,r12d
TheThaumaturge-Win64-Shipping.exe+26434C2: E8 E9 10 00 00        - call TheThaumaturge-Win64-Shipping.exe+26445B0
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

This one is for exp multiplier. It's currently set it to 100x but you can change it if you want.

sanitka · Post by **sanitka** » Thu Mar 07, 2024 9:08 pm

HeLLFoRCee wrote: ↑

Thu Mar 07, 2024 4:19 pm

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>9</ID>
      <Description>"Exp Multiplier 100x"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-07
  Author : osman1

  This script does blah blah blah
}

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat

 
 
aobscanmodule(INJECT,TheThaumaturge-Win64-Shipping.exe,44 01 BB 00 01 00 00) // should be unique
alloc(newmem,$1000,INJECT)

label(code)
label(return)

newmem:
imul,r15d,100
code:
  add [rbx+00000100],r15d
  jmp return

INJECT:
  jmp newmem
  nop 2
return:
registersymbol(INJECT)

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
  db 44 01 BB 00 01 00 00

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+264348A

TheThaumaturge-Win64-Shipping.exe+2643460: E8 DB E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+2643465: 8B BB 04 01 00 00     - mov edi,[rbx+00000104]
TheThaumaturge-Win64-Shipping.exe+264346B: 48 8B CB              - mov rcx,rbx
TheThaumaturge-Win64-Shipping.exe+264346E: 8D 57 01              - lea edx,[rdi+01]
TheThaumaturge-Win64-Shipping.exe+2643471: E8 3A 14 00 00        - call TheThaumaturge-Win64-Shipping.exe+26448B0
TheThaumaturge-Win64-Shipping.exe+2643476: 48 8D 8B 00 03 00 00  - lea rcx,[rbx+00000300]
TheThaumaturge-Win64-Shipping.exe+264347D: 44 8B C8              - mov r9d,eax
TheThaumaturge-Win64-Shipping.exe+2643480: 45 8B C7              - mov r8d,r15d
TheThaumaturge-Win64-Shipping.exe+2643483: 8B D7                 - mov edx,edi
TheThaumaturge-Win64-Shipping.exe+2643485: E8 D6 11 00 00        - call TheThaumaturge-Win64-Shipping.exe+2644660
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+264348A: 44 01 BB 00 01 00 00  - add [rbx+00000100],r15d
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+2643491: 48 8D 8B A0 02 00 00  - lea rcx,[rbx+000002A0]
TheThaumaturge-Win64-Shipping.exe+2643498: 8B 83 00 01 00 00     - mov eax,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+264349E: 48 8D 54 24 20        - lea rdx,[rsp+20]
TheThaumaturge-Win64-Shipping.exe+26434A3: 89 44 24 24           - mov [rsp+24],eax
TheThaumaturge-Win64-Shipping.exe+26434A7: 44 89 64 24 20        - mov [rsp+20],r12d
TheThaumaturge-Win64-Shipping.exe+26434AC: E8 8F E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+26434B1: 44 8B 83 00 01 00 00  - mov r8d,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+26434B8: 48 8D 8B B0 02 00 00  - lea rcx,[rbx+000002B0]
TheThaumaturge-Win64-Shipping.exe+26434BF: 41 8B D4              - mov edx,r12d
TheThaumaturge-Win64-Shipping.exe+26434C2: E8 E9 10 00 00        - call TheThaumaturge-Win64-Shipping.exe+26445B0
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

This one is for exp multiplier. It's currently set it to 100x but you can change it if you want.

Good job.
On tiny detail - your multiplier is set to 256 (0x100)

HeLLFoRCee · Post by **HeLLFoRCee** » Fri Mar 08, 2024 3:01 am

sanitka wrote: ↑

Thu Mar 07, 2024 9:08 pm

HeLLFoRCee wrote: ↑

Thu Mar 07, 2024 4:19 pm

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>9</ID>
      <Description>"Exp Multiplier 100x"</Description>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TheThaumaturge-Win64-Shipping.exe
  Version: 
  Date   : 2024-03-07
  Author : osman1

  This script does blah blah blah
}

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat

 
 
aobscanmodule(INJECT,TheThaumaturge-Win64-Shipping.exe,44 01 BB 00 01 00 00) // should be unique
alloc(newmem,$1000,INJECT)

label(code)
label(return)

newmem:
imul,r15d,100
code:
  add [rbx+00000100],r15d
  jmp return

INJECT:
  jmp newmem
  nop 2
return:
registersymbol(INJECT)

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
INJECT:
  db 44 01 BB 00 01 00 00

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: TheThaumaturge-Win64-Shipping.exe+264348A

TheThaumaturge-Win64-Shipping.exe+2643460: E8 DB E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+2643465: 8B BB 04 01 00 00     - mov edi,[rbx+00000104]
TheThaumaturge-Win64-Shipping.exe+264346B: 48 8B CB              - mov rcx,rbx
TheThaumaturge-Win64-Shipping.exe+264346E: 8D 57 01              - lea edx,[rdi+01]
TheThaumaturge-Win64-Shipping.exe+2643471: E8 3A 14 00 00        - call TheThaumaturge-Win64-Shipping.exe+26448B0
TheThaumaturge-Win64-Shipping.exe+2643476: 48 8D 8B 00 03 00 00  - lea rcx,[rbx+00000300]
TheThaumaturge-Win64-Shipping.exe+264347D: 44 8B C8              - mov r9d,eax
TheThaumaturge-Win64-Shipping.exe+2643480: 45 8B C7              - mov r8d,r15d
TheThaumaturge-Win64-Shipping.exe+2643483: 8B D7                 - mov edx,edi
TheThaumaturge-Win64-Shipping.exe+2643485: E8 D6 11 00 00        - call TheThaumaturge-Win64-Shipping.exe+2644660
// ---------- INJECTING HERE ----------
TheThaumaturge-Win64-Shipping.exe+264348A: 44 01 BB 00 01 00 00  - add [rbx+00000100],r15d
// ---------- DONE INJECTING  ----------
TheThaumaturge-Win64-Shipping.exe+2643491: 48 8D 8B A0 02 00 00  - lea rcx,[rbx+000002A0]
TheThaumaturge-Win64-Shipping.exe+2643498: 8B 83 00 01 00 00     - mov eax,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+264349E: 48 8D 54 24 20        - lea rdx,[rsp+20]
TheThaumaturge-Win64-Shipping.exe+26434A3: 89 44 24 24           - mov [rsp+24],eax
TheThaumaturge-Win64-Shipping.exe+26434A7: 44 89 64 24 20        - mov [rsp+20],r12d
TheThaumaturge-Win64-Shipping.exe+26434AC: E8 8F E7 55 FE        - call TheThaumaturge-Win64-Shipping.AK::WriteBytesMem::Bytes+1740
TheThaumaturge-Win64-Shipping.exe+26434B1: 44 8B 83 00 01 00 00  - mov r8d,[rbx+00000100]
TheThaumaturge-Win64-Shipping.exe+26434B8: 48 8D 8B B0 02 00 00  - lea rcx,[rbx+000002B0]
TheThaumaturge-Win64-Shipping.exe+26434BF: 41 8B D4              - mov edx,r12d
TheThaumaturge-Win64-Shipping.exe+26434C2: E8 E9 10 00 00        - call TheThaumaturge-Win64-Shipping.exe+26445B0
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

This one is for exp multiplier. It's currently set it to 100x but you can change it if you want.

Goog job.
On tiny detail - your multiplier is set to 256 (0x100)

It was my first attempt. So sorry about the little mistakes.

sanitka · Post by **sanitka** » Sun Mar 10, 2024 4:56 am

If you are looking for health:
- it is a Float data type
- all the values are a doubled, so you can search by a group command for two consecutive floats (f:43.0 f:43.0)
- values seem always to be rounded, so add .0 at the end of your value
- unfortunately values are updated by a generic procedure used to update more values and also enemy values, so creating a direct script is bit difficult

If you are toying with Unreal Engine objects, then GEngine should be at "TheThaumaturge-Win64-Shipping.exe"+7ECFEB8

debnet · Post by **debnet** » Sat Mar 16, 2024 11:02 pm

Is anyone succeed to find the pride characteristic in memory? I tried to read the whole GEngine tree but alas no success.

sanitka · Post by **sanitka** » Sun Mar 17, 2024 10:38 am

debnet wrote: ↑
Sat Mar 16, 2024 11:02 pm
Is anyone succeed to find the pride characteristic in memory? I tried to read the whole GEngine tree but alas no success.

If you are looking for Proud points, it should be 4 bytes at +1DC offset in the same object as Level or Exp (ProgressionSubsystem).

FearLess Cheat Engine

[REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Re: [REQUEST] The Thaumaturge

Who is online