[Request] Wolcen: Lords of Mayhem

[Theorac]

Requesting a table for Wolcen:
[Link]

Now curious about using a table in this game since they posted an update with the note "RIP cheat engine."
Hoping for: XP, gold, skill points.

Thank you.

[Reppin]

I 2nd this. It seems the newest update they did something and blocked all CE. I can't seem to get the values anymore. I am still going to try.

[hentai-sama]

[QUOTE="Reppin, post: 32983, member: 11439"]I 2nd this. It seems the newest update they did something and blocked all CE. I can't seem to get the values anymore. I am still going to try.[/QUOTE]

Thats sad.

[headshot0052]

up
money edit
exp edit
skill points edit
attributes points
one hit kill
infinite hp

pls,make this happen

[Crowley1661]

What's the current status of this?

[V43s]

Finded a way to change stats, exp, lvl, gold, items and other for v1.0.0.69.
Go \Wolcen Lords of Mayhem v1.0.0.69\user\savegames\characters\
then open file "(your character name).json" in text editor
and change whatever you like

[Darkedone02]

Everytime I attempt to do the above, It end up resetting itself back to defaults.

[demorest]

up

[Yooffette]

hello someone would be how to change our state or have infinite gold my in connect mode

[nexcellene]

up

[cfemen]

Now curious about using a table in this game since they posted an update with the note "RIP cheat engine."

I 2nd this. It seems the newest update they did something and blocked all CE. I can't seem to get the values anymore. I am still going to try.

well, they did not "block" CE lol xD
devs are using a retarded simple XOR ^^ -> i guess they think gamehackers are stupid

The game does not even validate the value / generating new Keys.

sample from me for Gold:
you can change #999999 to every value you want
then spend gold and you get this amount.

Code: Select all

[ENABLE]

aobscanmodule(aobGold,CryGameSDK.dll,89 54 24 34 41 33 C0 89 44 24 30 48 8B 44 24 30 48 89 83 C4) // should be unique
alloc(newmem,$1000,"CryGameSDK.dll"+7763D8)

label(code)
label(return)

newmem:

code:
  mov [rsp+34],edx
  mov r8d,#999999
  xor eax,r8d
  jmp return

aobGold:
  jmp newmem
  nop 2
return:
registersymbol(aobGold)

[DISABLE]

aobGold:
  db 89 54 24 34 41 33 C0

unregistersymbol(aobGold)
dealloc(newmem)

then i tried some other things, got the player pos/cam pos/move+game speed and played a bit with it to see something from a "different perspectiv"



unfortunately i only have a [Non-Steam] Version 1.2.0, and Early Access games are annoying :/ often updates, so its makes no sense to make a full-featured table if i cant be sure it works for the newest Steam version :/

but if i buy the final game i will make a table

i just quickly gave a look at this game and sharing my observations here, and can assure they dont "Blocked/RIPed" CE

Some additional Infos:
Health is at:
8B 81 D0 00 00 00 33 C2 89 44 24 08 F3 0F 10 44 24 08 C3 - mov eax,[rcx+000000D0]
// needs a player cmp first (i used R14) then write new health to eax, xor it with the key, and write to RCX+D0

Rage is at:
F3 44 0F 11 84 24 90 00 00 00 - movss [rsp+00000090],xmm8
// just write new value to RSP+90

and thats it, i didnt look further.

[sieutruc]

@cfemen : thank you for your script, it works flawlessly.
Can you show me the way that you search for the gold value ? i tried to use 4b and float but i did not find anything even i used unknown initial value of those 2 types.

Thanks

[cfemen]

@cfemen : thank you for your script, it works flawlessly.
Can you show me the way that you search for the gold value ? i tried to use 4b and float but i did not find anything even i used unknown initial value of those 2 types.

Thanks

4b unknown initial, then changed/unchanged.

[sieutruc]

Thank you so much ! i got that ! )) so interesting !

and for move+game speed is it the same ?

Thanks

[cfemen]

Thank you so much ! i got that ! )) so interesting !

and for move+game speed is it the same ?

Thanks

well, the most of the variables are obfuscated(like gold, coz this the changed/unchanged scan) but i figured out bools like isMenuOpen are not obfuscated
i used the UI flags and this brought me here:

CrySystem.dll+C32A0 - 80 79 48 00 - cmp byte ptr [rcx+48],00

rcx contains a lot -> LOD, Cam Offsets, Speed and more.

//

but yes you can do a unknown scan for the player position to see whats writing on it to get the move-speed.