1337160883
"Compact mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1337110796
"Get skill pt"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_SKPT,Starfield.exe,8B 88 20 0F 00 00) // should be unique
alloc(newmem,$1000,INJECT_GET_SKPT)
label(code)
label(return)
label(i_sk_pt_addr)
newmem:
mov [i_sk_pt_addr], rax
code:
mov ecx,[rax+00000F20]
jmp return
align 10 cc
i_sk_pt_addr:
dq 0
INJECT_GET_SKPT:
jmp newmem
nop
return:
registersymbol(INJECT_GET_SKPT)
registersymbol(i_sk_pt_addr)
[DISABLE]
INJECT_GET_SKPT:
db 8B 88 20 0F 00 00
unregistersymbol(INJECT_GET_SKPT)
unregistersymbol(i_sk_pt_addr)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+208B47D
Starfield.exe+208C7A3: CC - int 3
Starfield.exe+208C7A4: 40 53 - push rbx
Starfield.exe+208C7A6: 48 83 EC 30 - sub rsp,30
Starfield.exe+208C7AA: 48 83 3D 86 76 51 03 00 - cmp qword ptr [Starfield.exe+55A3E38],00
Starfield.exe+208C7B2: 74 69 - je Starfield.exe+208C81D
Starfield.exe+208C7B4: 48 81 C1 88 00 00 00 - add rcx,00000088
Starfield.exe+208C7BB: 48 8D 54 24 20 - lea rdx,[rsp+20]
Starfield.exe+208C7C0: E8 17 FD 7F FF - call Starfield.exe+188C4DC
Starfield.exe+208C7C5: 90 - nop
Starfield.exe+208C7C6: 48 8B 05 6B 76 51 03 - mov rax,[Starfield.exe+55A3E38]
// ---------- INJECTING HERE ----------
Starfield.exe+208C7CD: 8B 88 20 0F 00 00 - mov ecx,[rax+00000F20]
// ---------- DONE INJECTING ----------
Starfield.exe+208C7D3: 89 4C 24 48 - mov [rsp+48],ecx
Starfield.exe+208C7D7: 48 8B 5C 24 20 - mov rbx,[rsp+20]
Starfield.exe+208C7DC: 48 8D 8B E0 00 00 00 - lea rcx,[rbx+000000E0]
Starfield.exe+208C7E3: 48 8D 54 24 48 - lea rdx,[rsp+48]
Starfield.exe+208C7E8: E8 47 E4 24 FF - call Starfield.exe+12DAC34
Starfield.exe+208C7ED: 48 8B 05 44 76 51 03 - mov rax,[Starfield.exe+55A3E38]
Starfield.exe+208C7F4: 8A 88 E3 10 00 00 - mov cl,[rax+000010E3]
Starfield.exe+208C7FA: 80 E1 01 - and cl,01
Starfield.exe+208C7FD: 88 4C 24 48 - mov [rsp+48],cl
Starfield.exe+208C801: 48 8D 8B 20 01 00 00 - lea rcx,[rbx+00000120]
Starfield.exe+208C808 - 48 8D 54 24 48 - lea rdx,[rsp+48]
Starfield.exe+208C80D - E8 B6E424FF - call Starfield.exe+12DACC8
Starfield.exe+208C812 - 90 - nop
Starfield.exe+208C813 - 48 8B 4C 24 28 - mov rcx,[rsp+28]
Starfield.exe+208C818 - E8 07D64FFE - call Starfield.exe+589E24
Starfield.exe+208C81D - 48 83 C4 30 - add rsp,30
Starfield.exe+208C821 - 5B - pop rbx
Starfield.exe+208C822 - C3 - ret
Starfield.exe+208C823 - CC - int 3
}
1337110797
"pt"
0
FF8080
2 Bytes
i_sk_pt_addr
F20
1337110762
"Get credit (Usage: Open stats)"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_CREDIT,Starfield.exe,03 48 08 48 83 C0 10 EB ?? 49 8B 04) // should be unique
alloc(newmem,$1000,INJECT_GET_CREDIT)
label(code)
label(return)
label(i_base_credit_addr)
label(i_base_credit_addr2)
label(i_base_credit_addr3)
label(i_base_credit_addr4)
newmem:
cmp qword ptr [i_base_credit_addr], rax
je code
cmp qword ptr [i_base_credit_addr], 0
jne write2
mov [i_base_credit_addr], rax
jmp code
write2:
cmp qword ptr [i_base_credit_addr2], rax
je code
cmp qword ptr [i_base_credit_addr2], 0
jne write3
mov [i_base_credit_addr2], rax
jmp code
write3:
cmp qword ptr [i_base_credit_addr3], rax
je code
cmp qword ptr [i_base_credit_addr3], 0
jne write4
mov [i_base_credit_addr3], rax
jmp code
write4:
cmp qword ptr [i_base_credit_addr4], rax
je code
cmp qword ptr [i_base_credit_addr4], 0
jne code
mov [i_base_credit_addr4], rax
jmp code
code:
add ecx,[rax+08]
add rax,10
jmp return
align 10 cc
i_base_credit_addr:
dq 0
i_base_credit_addr2:
dq 0
i_base_credit_addr3:
dq 0
i_base_credit_addr4:
dq 0
INJECT_GET_CREDIT:
jmp newmem
nop 2
return:
registersymbol(INJECT_GET_CREDIT)
registersymbol(i_base_credit_addr)
registersymbol(i_base_credit_addr2)
registersymbol(i_base_credit_addr3)
registersymbol(i_base_credit_addr4)
[DISABLE]
INJECT_GET_CREDIT:
db 03 48 08 48 83 C0 10
unregistersymbol(INJECT_GET_CREDIT)
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+19C1FA5
Starfield.exe+19C1F8D: 75 06 - jne Starfield.exe+19C1F95
Starfield.exe+19C1F8F: 33 C0 - xor eax,eax
Starfield.exe+19C1F91: 33 D2 - xor edx,edx
Starfield.exe+19C1F93: EB 0B - jmp Starfield.exe+19C1FA0
Starfield.exe+19C1F95: 48 8B 00 - mov rax,[rax]
Starfield.exe+19C1F98: 48 C1 E2 04 - shl rdx,04
Starfield.exe+19C1F9C: 48 03 D0 - add rdx,rax
Starfield.exe+19C1F9F: 90 - nop
Starfield.exe+19C1FA0: 48 3B C2 - cmp rax,rdx
Starfield.exe+19C1FA3: 74 09 - je Starfield.exe+19C1FAE
// ---------- INJECTING HERE ----------
Starfield.exe+19C1FA5: 03 48 08 - add ecx,[rax+08]
// ---------- DONE INJECTING ----------
Starfield.exe+19C1FA8: 48 83 C0 10 - add rax,10
Starfield.exe+19C1FAC: EB F2 - jmp Starfield.exe+19C1FA0
Starfield.exe+19C1FAE: 49 8B 04 24 - mov rax,[r12]
Starfield.exe+19C1FB2: 89 08 - mov [rax],ecx
Starfield.exe+19C1FB4: 33 DB - xor ebx,ebx
Starfield.exe+19C1FB6: EB 57 - jmp Starfield.exe+19C200F
Starfield.exe+19C1FB8: 33 FF - xor edi,edi
Starfield.exe+19C1FBA: 48 89 7C 24 28 - mov [rsp+28],rdi
Starfield.exe+19C1FBF: 4D 85 F6 - test r14,r14
Starfield.exe+19C1FC2: 74 29 - je Starfield.exe+19C1FED
Starfield.exe+19C1FC4 - 48 8D 4D 04 - lea rcx,[rbp+04]
Starfield.exe+19C1FC8 - 8B D6 - mov edx,esi
Starfield.exe+19C1FCA - F0 0FC1 11 - lock xadd [rcx],edx
Starfield.exe+19C1FCE - 8B C2 - mov eax,edx
Starfield.exe+19C1FD0 - 25 FF0FC0FF - and eax,FFC00FFF
Starfield.exe+19C1FD5 - 83 F8 01 - cmp eax,01
Starfield.exe+19C1FD8 - 75 0E - jne Starfield.exe+19C1FE8
Starfield.exe+19C1FDA - F7 C2 00F03F00 - test edx,003FF000
Starfield.exe+19C1FE0 - 74 06 - je Starfield.exe+19C1FE8
Starfield.exe+19C1FE2 - FF 15 88D24E02 - call qword ptr [Starfield.exe+3EAF270]
Starfield.exe+19C1FE8 - 48 8B 7C 24 28 - mov rdi,[rsp+28]
Starfield.exe+19C1FED - 4C 89 7C 24 30 - mov [rsp+30],r15
Starfield.exe+19C1FF2 - 4C 89 64 24 38 - mov [rsp+38],r12
Starfield.exe+19C1FF7 - E8 18C2E6FE - call Starfield.exe+82E214
Starfield.exe+19C1FFC - 48 8D 54 24 30 - lea rdx,[rsp+30]
Starfield.exe+19C2001 - 48 8B 88 88080000 - mov rcx,[rax+00000888]
Starfield.exe+19C2008 - E8 535DFFFF - call Starfield.exe+19B7D60
Starfield.exe+19C200D - 8B D8 - mov ebx,eax
Starfield.exe+19C200F - 48 85 FF - test rdi,rdi
Starfield.exe+19C2012 - 74 28 - je Starfield.exe+19C203C
Starfield.exe+19C2014 - 48 8B 4C 24 20 - mov rcx,[rsp+20]
Starfield.exe+19C2019 - 48 83 C1 04 - add rcx,04
Starfield.exe+19C201D - F0 0FC1 31 - lock xadd [rcx],esi
Starfield.exe+19C2021 - 8B D6 - mov edx,esi
Starfield.exe+19C2023 - 81 E2 FF0FC0FF - and edx,FFC00FFF
Starfield.exe+19C2029 - 83 FA 01 - cmp edx,01
Starfield.exe+19C202C - 75 0E - jne Starfield.exe+19C203C
}
1337110763
"Credit #1 (Player?)"
0
FF8080
4 Bytes
i_base_credit_addr
8
1337160902
"Credit #2 (Team member?)"
0
FF8080
4 Bytes
i_base_credit_addr2
8
1337160903
"Credit #3"
0
FF8080
4 Bytes
i_base_credit_addr3
8
1337160904
"Credit #4"
0
FF8080
4 Bytes
i_base_credit_addr4
8
1337110766
"inf. medic kit (recovery pack) from quick menu when use (min = 12)"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_MEDI,Starfield.exe,44 03 40 08 48 83 C0 10 EB ?? 49 8B 06 44) // should be unique
alloc(newmem,$1000,INJECT_INF_MEDI)
label(code)
label(return)
label(i_last_consume_addr)
newmem:
mov [i_last_consume_addr], rax
push r15
mov r15d, [rax+08]
cmp r15d, D
jae endp
mov r15d, D
mov [rax+08], r15d
endp:
pop r15
code:
add r8d,[rax+08]
add rax,10
jmp return
align 10 cc
i_last_consume_addr:
dq 0
INJECT_INF_MEDI:
jmp newmem
nop 3
return:
registersymbol(INJECT_INF_MEDI)
registersymbol(i_last_consume_addr)
[DISABLE]
INJECT_INF_MEDI:
db 44 03 40 08 48 83 C0 10
unregistersymbol(INJECT_INF_MEDI)
unregistersymbol(i_last_consume_addr)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+289EA65
Starfield.exe+289EA0F - CC - int 3
Starfield.exe+289EA10 - 40 53 - push rbx
Starfield.exe+289EA12 - 55 - push rbp
Starfield.exe+289EA13 - 56 - push rsi
Starfield.exe+289EA14 - 57 - push rdi
Starfield.exe+289EA15 - 41 54 - push r12
Starfield.exe+289EA17 - 41 56 - push r14
Starfield.exe+289EA19 - 41 57 - push r15
Starfield.exe+289EA1B - 48 83 EC 70 - sub rsp,70
Starfield.exe+289EA1F - 48 8B F2 - mov rsi,rdx
Starfield.exe+289EA22 - 4C 8B F1 - mov r14,rcx
Starfield.exe+289EA25 - 44 0FB6 4A 24 - movzx r9d,byte ptr [rdx+24]
Starfield.exe+289EA2A - 41 BF 01000000 - mov r15d,00000001
Starfield.exe+289EA30 - 45 33 E4 - xor r12d,r12d
Starfield.exe+289EA33 - 41 80 F9 0C - cmp r9b,0C
Starfield.exe+289EA37 - 0F83 04010000 - jae Starfield.exe+289EB41
Starfield.exe+289EA3D - 45 8B C4 - mov r8d,r12d
Starfield.exe+289EA40 - 8B 52 10 - mov edx,[rdx+10]
Starfield.exe+289EA43 - 85 D2 - test edx,edx
Starfield.exe+289EA45 - 75 08 - jne Starfield.exe+289EA4F
Starfield.exe+289EA47: 41 8B C4 - mov eax,r12d
Starfield.exe+289EA4A: 41 8B CC - mov ecx,r12d
Starfield.exe+289EA4D: EB 11 - jmp Starfield.exe+289EA60
Starfield.exe+289EA4F: 48 8B 46 18 - mov rax,[rsi+18]
Starfield.exe+289EA53: 48 8B CA - mov rcx,rdx
Starfield.exe+289EA56: 48 C1 E1 04 - shl rcx,04
Starfield.exe+289EA5A: 48 03 C8 - add rcx,rax
Starfield.exe+289EA5D: 0F 1F 00 - nop dword ptr [rax]
Starfield.exe+289EA60: 48 3B C1 - cmp rax,rcx
Starfield.exe+289EA63: 74 0A - je Starfield.exe+289EA6F
// ---------- INJECTING HERE ----------
Starfield.exe+289EA65: 44 03 40 08 - add r8d,[rax+08]
// ---------- DONE INJECTING ----------
Starfield.exe+289EA69: 48 83 C0 10 - add rax,10
Starfield.exe+289EA6D: EB F1 - jmp Starfield.exe+289EA60
Starfield.exe+289EA6F: 49 8B 06 - mov rax,[r14]
Starfield.exe+289EA72: 44 88 8C 24 B8 00 00 00 - mov [rsp+000000B8],r9b
Starfield.exe+289EA7A: 44 89 84 24 BC 00 00 00 - mov [rsp+000000BC],r8d
Starfield.exe+289EA82: 48 8B 68 08 - mov rbp,[rax+08]
Starfield.exe+289EA86: 48 85 ED - test rbp,rbp
Starfield.exe+289EA89: 0F 84 B2 00 00 00 - je Starfield.exe+289EB41
Starfield.exe+289EA8F: 48 8B 3D 9A 0B E6 02 - mov rdi,[Starfield.exe+56FF630]
Starfield.exe+289EA96: 48 85 FF - test rdi,rdi
Starfield.exe+289EA99 - 0F84 A9000000 - je Starfield.exe+289EB48
Starfield.exe+289EA9F - 4C 39 65 10 - cmp [rbp+10],r12
Starfield.exe+289EAA3 - 0F84 9F000000 - je Starfield.exe+289EB48
Starfield.exe+289EAA9 - 41 8B C7 - mov eax,r15d
Starfield.exe+289EAAC - F0 0FC1 45 08 - lock xadd [rbp+08],eax
Starfield.exe+289EAB1 - 4C 89 A4 24 C8000000 - mov [rsp+000000C8],r12
Starfield.exe+289EAB9 - 48 89 6C 24 38 - mov [rsp+38],rbp
Starfield.exe+289EABE - 48 8B 9C 24 B8000000 - mov rbx,[rsp+000000B8]
Starfield.exe+289EAC6 - 48 89 5C 24 40 - mov [rsp+40],rbx
Starfield.exe+289EACB - 41 B9 08000000 - mov r9d,00000008
Starfield.exe+289EAD1 - 45 8D 41 18 - lea r8d,[r9+18]
Starfield.exe+289EAD5 - 48 8D 54 24 28 - lea rdx,[rsp+28]
Starfield.exe+289EADA - 48 8D 8F 80000000 - lea rcx,[rdi+00000080]
Starfield.exe+289EAE1 - E8 12F43E00 - call Starfield.exe+2C8DEF8
Starfield.exe+289EAE6 - 48 8D 0D D3250000 - lea rcx,[Starfield.exe+28A10C0]
Starfield.exe+289EAED - 48 89 48 08 - mov [rax+08],rcx
}
1337110790
"Item stock# must >= 2"
8000FF
1
1337110767
"Last item #"
0
FF8080
4 Bytes
i_last_consume_addr
8
1337110777
"Set min ammo# / recovery item# / material# when "trade from" robot / cargo"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SWAP_AND_GET_AMMO,Starfield.exe,03 58 08 48 83 C0 10 EB ?? 4C 8D 45 C0 49 8B CC E8 ?? 37 00 00) // should be unique
alloc(newmem,$1000,INJECT_SWAP_AND_GET_AMMO)
label(code)
label(return)
label(i_min_ammo_per_batch)
label(i_last_xchg_item_addr)
label(i_last_xchg_item_addr2)
newmem:
cmp rdi, 7
je do_it
cmp rdi, 8
je do_it
do_it:
push rbx
mov rbx, [i_last_xchg_item_addr]
mov [i_last_xchg_item_addr2], rbx
mov [i_last_xchg_item_addr], rax
mov ebx, [rax+08]
cmp ebx, [i_min_ammo_per_batch]
jae endp
mov ebx, [i_min_ammo_per_batch]
mov [rax+08], ebx
endp:
pop rbx
code:
add ebx,[rax+08]
add rax,10
jmp return
align 10 cc
i_last_xchg_item_addr:
dq 0
i_last_xchg_item_addr2:
dq 0
i_min_ammo_per_batch:
dd 32
INJECT_SWAP_AND_GET_AMMO:
jmp newmem
nop 2
return:
registersymbol(INJECT_SWAP_AND_GET_AMMO)
registersymbol(i_min_ammo_per_batch)
registersymbol(i_last_xchg_item_addr)
registersymbol(i_last_xchg_item_addr2)
[DISABLE]
INJECT_SWAP_AND_GET_AMMO:
db 03 58 08 48 83 C0 10
unregistersymbol(INJECT_SWAP_AND_GET_AMMO)
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+288994C
Starfield.exe+2889930: 85 C9 - test ecx,ecx
Starfield.exe+2889932: 75 08 - jne Starfield.exe+288993C
Starfield.exe+2889934: 41 8B C0 - mov eax,r8d
Starfield.exe+2889937: 41 8B C8 - mov ecx,r8d
Starfield.exe+288993A: EB 0B - jmp Starfield.exe+2889947
Starfield.exe+288993C: 48 8B 42 18 - mov rax,[rdx+18]
Starfield.exe+2889940: 48 C1 E1 04 - shl rcx,04
Starfield.exe+2889944: 48 03 C8 - add rcx,rax
Starfield.exe+2889947: 48 3B C1 - cmp rax,rcx
Starfield.exe+288994A: 74 09 - je Starfield.exe+2889955
// ---------- INJECTING HERE ----------
Starfield.exe+288994C: 03 58 08 - add ebx,[rax+08]
// ---------- DONE INJECTING ----------
Starfield.exe+288994F: 48 83 C0 10 - add rax,10
Starfield.exe+2889953: EB F2 - jmp Starfield.exe+2889947
Starfield.exe+2889955: 4C 8D 45 C0 - lea r8,[rbp-40]
Starfield.exe+2889959: 49 8B CC - mov rcx,r12
Starfield.exe+288995C: E8 FF 37 00 00 - call Starfield.exe+288D160
Starfield.exe+2889961: 44 8B E8 - mov r13d,eax
Starfield.exe+2889964: 89 45 48 - mov [rbp+48],eax
Starfield.exe+2889967: 3B 7E 28 - cmp edi,[rsi+28]
Starfield.exe+288996A: 0F 97 C2 - seta dl
Starfield.exe+288996D: 41 88 56 05 - mov [r14+05],dl
}
1337110779
"Only activate when absolutely necessary!"
8000FF
1
1337110798
"Set min. value to a lower value (i.e. 10) when trade ship repatr parts!"
8000FF
1
1337110778
"min. value"
0
C08000
4 Bytes
i_min_ammo_per_batch
1337110800
"Last item#"
0
FF8080
4 Bytes
i_last_xchg_item_addr
8
1337110804
"Last item #2"
0
4 Bytes
i_last_xchg_item_addr2
8
1337110759
"Personal ammo: No reload (# of ammo still decrease)"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_PAMMO,Starfield.exe,44 39 48 18 74 3F) // should be unique
alloc(newmem,$1000,INJECT_INF_PAMMO)
label(code)
label(return)
newmem:
push r15
mov r15d, [rax+18]
cmp r15d, 5
mov r15d, 5
mov [rax+18], r15d
jae endp
endp:
pop r15
code:
cmp [rax+18],r9d
je Starfield.exe+1F4AF43
jmp return
INJECT_INF_PAMMO:
jmp newmem
nop
return:
registersymbol(INJECT_INF_PAMMO)
[DISABLE]
INJECT_INF_PAMMO:
db 44 39 48 18 74 3F
unregistersymbol(INJECT_INF_PAMMO)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1F4A98E
Starfield.exe+1F4A933 - CC - int 3
Starfield.exe+1F4A934 - 40 53 - push rbx
Starfield.exe+1F4A936 - 48 83 EC 60 - sub rsp,60
Starfield.exe+1F4A93A - 45 33 C9 - xor r9d,r9d
Starfield.exe+1F4A93D - C7 02 03000000 - mov [rdx],00000003
Starfield.exe+1F4A943 - 4C 89 4A 08 - mov [rdx+08],r9
Starfield.exe+1F4A947 - 48 8B DA - mov rbx,rdx
Starfield.exe+1F4A94A - 4C 89 4A 30 - mov [rdx+30],r9
Starfield.exe+1F4A94E - 48 8B 05 E3946503 - mov rax,[Starfield.exe+55A3E38]
Starfield.exe+1F4A955 - 44 8A 80 34010000 - mov r8b,[rax+00000134]
Starfield.exe+1F4A95C - 41 80 E0 07 - and r8b,07
Starfield.exe+1F4A960 - 41 80 F8 03 - cmp r8b,03
Starfield.exe+1F4A964 - 73 0C - jae Starfield.exe+1F4A972
Starfield.exe+1F4A966: 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+1F4A96B: E8 EC F4 FF FF - call Starfield.exe+1F49E5C
Starfield.exe+1F4A970: EB 6B - jmp Starfield.exe+1F4A9DD
Starfield.exe+1F4A972: 48 8B 41 40 - mov rax,[rcx+40]
Starfield.exe+1F4A976: 48 8B 10 - mov rdx,[rax]
Starfield.exe+1F4A979: 48 8B 82 F0 00 00 00 - mov rax,[rdx+000000F0]
Starfield.exe+1F4A980: 48 8B 48 20 - mov rcx,[rax+20]
Starfield.exe+1F4A984: 48 8B 41 28 - mov rax,[rcx+28]
Starfield.exe+1F4A988: 4C 39 48 10 - cmp [rax+10],r9
Starfield.exe+1F4A98C: 74 45 - je Starfield.exe+1F4A9D3
// ---------- INJECTING HERE ----------
Starfield.exe+1F4A98E: 44 39 48 18 - cmp [rax+18],r9d
// ---------- DONE INJECTING ----------
Starfield.exe+1F4A992: 74 3F - je Starfield.exe+1F4A9D3
Starfield.exe+1F4A994: 44 38 8A EA 00 00 00 - cmp [rdx+000000EA],r9b
Starfield.exe+1F4A99B: 74 0C - je Starfield.exe+1F4A9A9
Starfield.exe+1F4A99D: 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+1F4A9A2: E8 61 EF FF FF - call Starfield.exe+1F49908
Starfield.exe+1F4A9A7: EB 34 - jmp Starfield.exe+1F4A9DD
Starfield.exe+1F4A9A9: 48 8B 82 F8 00 00 00 - mov rax,[rdx+000000F8]
Starfield.exe+1F4A9B0: C5 FA 10 40 40 - vmovss xmm0,[rax+40]
Starfield.exe+1F4A9B5: C5 FA 5C 0D EB EF 63 03 - vsubss xmm1,xmm0,[Starfield.exe+55899A8]
Starfield.exe+1F4A9BD: C5 F8 2F 8A EC 00 00 00 - vcomiss xmm1,[rdx+000000EC]
Starfield.exe+1F4A9C5 - 76 39 - jna Starfield.exe+1F4AA00
Starfield.exe+1F4A9C7 - 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+1F4A9CC - E8 9BF2FFFF - call Starfield.exe+1F49C6C
Starfield.exe+1F4A9D1 - EB 0A - jmp Starfield.exe+1F4A9DD
Starfield.exe+1F4A9D3 - 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+1F4A9D8 - E8 03F4FFFF - call Starfield.exe+1F49DE0
Starfield.exe+1F4A9DD - 8B 08 - mov ecx,[rax]
Starfield.exe+1F4A9DF - 48 8D 50 10 - lea rdx,[rax+10]
Starfield.exe+1F4A9E3 - 89 0B - mov [rbx],ecx
Starfield.exe+1F4A9E5 - 48 8B 48 08 - mov rcx,[rax+08]
Starfield.exe+1F4A9E9 - 48 89 4B 08 - mov [rbx+08],rcx
Starfield.exe+1F4A9ED - 48 8D 4B 10 - lea rcx,[rbx+10]
Starfield.exe+1F4A9F1 - E8 CEC28DFE - call Starfield.exe+826CC4
Starfield.exe+1F4A9F6 - 48 8D 4C 24 30 - lea rcx,[rsp+30]
Starfield.exe+1F4A9FB - E8 B8718EFE - call Starfield.exe+831BB8
Starfield.exe+1F4AA00 - 48 8B C3 - mov rax,rbx
Starfield.exe+1F4AA03 - 48 83 C4 60 - add rsp,60
Starfield.exe+1F4AA07 - 5B - pop rbx
Starfield.exe+1F4AA08 - C3 - ret
Starfield.exe+1F4AA09 - CC - int 3
Starfield.exe+1F4AA0A - CC - int 3
}
1337160889
"Enable O2 / HP / EN / Pickpocket / booster scripts"
Auto Assembler Script
[ENABLE]
{$asm}
//registersymbol(imp_item_box)
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
getLuaEngine().MenuItem5.doClick()
--aobscanmodule(INJECT_DIFFICULT_AOB,Atelier_Sophie_2.exe,8B 05 ?? ?? ?? ?? 89 45 A4 33 C0)
--aobscanmodule(INJECT_TIME_AOB,Atelier_Sophie_2.exe,48 8B 05 ?? ?? ?? ?? 48 89 01 48 8B C1 C3 CC CC 8B 05 ?? ?? ?? ?? C3 CC) // should be unique
--aobscanmodule(INJECT_RANK,Atelier_Sophie_2.exe,8B 15 ?? ?? ?? ?? 83 CB FF ) // should be unique
local _dbg = true
if (_dbg) then
AOBs = {
{["name"]="Player Ptr AOB1", ["aob"]="48 3B 1D ?? ?? ?? ?? 75 1C 48 8B", ["pos"]= 3, ["aoblen"]= 7 , ["symbol"]="player_ptr1"},
{["name"]="Pickpocket AOB", ["aob"]="C5 FA 10 55 57 C5 FA 10 05 ?? ?? ?? ?? C5", ["pos"]=9, ["aoblen"]=13 , ["symbol"]="pickpocket_const"},
}
local a1 = 'n/a'
local a2 = 'n/a'
local a3 = 0
local a4 = 0
local a5 = 'n/a'
for k,v in pairs(AOBs) do
-- k = array seq.
for k1,v1 in pairs(v) do
if (k1 == 'name') then
a1 = v1
end
if (k1 == 'aob') then
a2 = v1
end
if (k1 == 'pos') then
a3 = v1
end
if (k1 == 'aoblen') then
a4 = v1
end
if (k1 == 'symbol') then
a5 = v1
end
--print(k1,v1)
end
local aob_addr_str = AOBScanModule('Starfield.exe', a2, '+X-C-W')
local name_addr_str = getAddressSafe(aob_addr_str[0])+a3
local name_addr_val = readInteger(name_addr_str)
local aob_addr_val = tonumber(aob_addr_str[0], 16)
local final_addr_val = name_addr_val + aob_addr_val + a4
--print(a1 .. " addr: " .. string.format("%08X", final_addr_val))
registerSymbol(a5, final_addr_val)
--print('-------')
end
end
getLuaEngine().Close()
--[[ Player base ptr #1
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1A08A85
Starfield.exe+1A08A5B: 48 89 5C 24 40 - mov [rsp+40],rbx
Starfield.exe+1A08A60: 48 8D 54 24 30 - lea rdx,[rsp+30]
Starfield.exe+1A08A65: E8 CE 03 B3 FF - call Starfield.exe+1538E38
Starfield.exe+1A08A6A: C5 F8 28 F0 - vmovaps xmm6,xmm0
Starfield.exe+1A08A6E: 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+1A08A73: E8 4C CD AA FF - call Starfield.exe+14B57C4
Starfield.exe+1A08A78: 80 7B 36 4B - cmp byte ptr [rbx+36],4B
Starfield.exe+1A08A7C: 48 0F 45 DE - cmovne rbx,rsi
Starfield.exe+1A08A80: 48 85 DB - test rbx,rbx
Starfield.exe+1A08A83: 74 7A - je Starfield.exe+1A08AFF
// ---------- INJECTING HERE ----------
Starfield.exe+1A08A85: 48 3B 1D E4 DA EF 03 - cmp rbx,[Starfield.exe+5906570]
// ---------- DONE INJECTING ----------
Starfield.exe+1A08A8C: 75 1C - jne Starfield.exe+1A08AAA
Starfield.exe+1A08A8E: 48 8B 05 A3 B3 B9 03 - mov rax,[Starfield.exe+55A3E38]
Starfield.exe+1A08A95: 48 8B 88 C0 0F 00 00 - mov rcx,[rax+00000FC0]
Starfield.exe+1A08A9C: 48 85 C9 - test rcx,rcx
Starfield.exe+1A08A9F: 74 09 - je Starfield.exe+1A08AAA
Starfield.exe+1A08AA1: E8 4E FF FF FF - call Starfield.exe+1A089F4
Starfield.exe+1A08AA6: C5 CA 58 F0 - vaddss xmm6,xmm6,xmm0
Starfield.exe+1A08AAA: 40 84 FF - test dil,dil
Starfield.exe+1A08AAD: 74 14 - je Starfield.exe+1A08AC3
Starfield.exe+1A08AAF: C5 F8 28 D6 - vmovaps xmm2,xmm6
--]]
--[[ Player base ptr #2
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1BB1017
Starfield.exe+1BB0FE7: C5 EA 5C 05 89 A4 9A 03 - vsubss xmm0,xmm2,[Starfield.exe+555B478]
Starfield.exe+1BB0FEF: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB0FF4: 48 8D 45 57 - lea rax,[rbp+57]
Starfield.exe+1BB0FF8: 48 89 44 24 20 - mov [rsp+20],rax
Starfield.exe+1BB0FFD: 4C 8D 4D CF - lea r9,[rbp-31]
Starfield.exe+1BB1001: 4C 8D 45 DF - lea r8,[rbp-21]
Starfield.exe+1BB1005: 49 8B D6 - mov rdx,r14
Starfield.exe+1BB1008: B9 38 00 00 00 - mov ecx,00000038
Starfield.exe+1BB100D: E8 0A F7 F3 FF - call Starfield.exe+1AF071C
Starfield.exe+1BB1012: C5 FA 10 55 57 - vmovss xmm2,[rbp+57]
// ---------- INJECTING HERE ----------
Starfield.exe+1BB1017: C5 FA 10 05 D9 A4 9A 03 - vmovss xmm0,[Starfield.exe+555B4F8]
// ---------- DONE INJECTING ----------
Starfield.exe+1BB101F: C5 F8 2F D0 - vcomiss xmm2,xmm0
Starfield.exe+1BB1023: 76 07 - jna Starfield.exe+1BB102C
Starfield.exe+1BB1025: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB102A: EB 18 - jmp Starfield.exe+1BB1044
Starfield.exe+1BB102C: C5 FA 10 0D A4 A4 9A 03 - vmovss xmm1,[Starfield.exe+555B4D8]
Starfield.exe+1BB1034: C5 EA C2 C1 01 - vcmpltss xmm0,xmm2,xmm1
Starfield.exe+1BB1039: C4 E3 69 4A C1 00 - vblendvps xmm0,xmm2,xmm1,xmm0
Starfield.exe+1BB103F: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB1044: 48 8D 4D D7 - lea rcx,[rbp-29]
Starfield.exe+1BB1048: E8 AF 63 C8 FE - call Starfield.exe+8373FC
Starfield.exe+1BB104D - 90 - nop
Starfield.exe+1BB104E - 48 8D 4D E7 - lea rcx,[rbp-19]
Starfield.exe+1BB1052 - E8 A563C8FE - call Starfield.exe+8373FC
Starfield.exe+1BB1057 - C5FA1075 57 - vmovss xmm6,[rbp+57]
Starfield.exe+1BB105C - C5FA2CC6 - vcvttss2si eax,xmm6
Starfield.exe+1BB1060 - C5F857C0 - vxorps xmm0,xmm0,xmm0
Starfield.exe+1BB1064 - C5FA2AC0 - vcvtsi2ss xmm0,eax,eax
Starfield.exe+1BB1068 - C5CA5CC8 - vsubss xmm1,xmm6,xmm0
Starfield.exe+1BB106C - C5F82F0D B0 E0BE02 - vcomiss xmm1,[Starfield.exe+479F124]
Starfield.exe+1BB1074 - 40 0F93 C6 - setae sil
Starfield.exe+1BB1078 - 03 C6 - add eax,esi
Starfield.exe+1BB107A - C5F857C0 - vxorps xmm0,xmm0,xmm0
Starfield.exe+1BB107E - C5FA2AC0 - vcvtsi2ss xmm0,eax,eax
Starfield.exe+1BB1082 - C5FA2CC0 - vcvttss2si eax,xmm0
Starfield.exe+1BB1086 - 4C 8D 9C 24 90000000 - lea r11,[rsp+00000090]
Starfield.exe+1BB108E - 49 8B 5B 38 - mov rbx,[r11+38]
Starfield.exe+1BB1092 - 49 8B 73 40 - mov rsi,[r11+40]
Starfield.exe+1BB1096 - 49 8B 7B 48 - mov rdi,[r11+48]
Starfield.exe+1BB109A - C4C1782873 F0 - vmovaps xmm6,[r11-10]
Starfield.exe+1BB10A0 - C5F8287C 24 70 - vmovaps xmm7,[rsp+70]
Starfield.exe+1BB10A6 - C441782843 D0 - vmovaps xmm8,[r11-30]
Starfield.exe+1BB10AC - 49 8B E3 - mov rsp,r11
Starfield.exe+1BB10AF - 41 5F - pop r15
Starfield.exe+1BB10B1 - 41 5E - pop r14
Starfield.exe+1BB10B3 - 41 5D - pop r13
Starfield.exe+1BB10B5 - 41 5C - pop r12
Starfield.exe+1BB10B7 - 5D - pop rbp
Starfield.exe+1BB10B8 - C3 - ret
Starfield.exe+1BB10B9 - CC - int 3
--]]
--[[Char base ptr +70
Starfield.exe+2B3D10D: 5D - pop rbp
Starfield.exe+2B3D10E: C3 - ret
Starfield.exe+2B3D10F: CC - int 3
Starfield.exe+2B3D110: 48 83 EC 28 - sub rsp,28
Starfield.exe+2B3D114: 48 8B 15 7D 4F 9C 02 - mov rdx,[Starfield.exe+5502098]
Starfield.exe+2B3D11B: 4C 8B C9 - mov r9,rcx
Starfield.exe+2B3D11E: 48 8B CA - mov rcx,rdx
Starfield.exe+2B3D121: E8 0A 76 71 FE - call Starfield.exe+1254730
Starfield.exe+2B3D126: 48 85 C0 - test rax,rax
Starfield.exe+2B3D129: 74 1E - je Starfield.exe+2B3D149
// ---------- INJECTING HERE ----------
Starfield.exe+2B3D12B: 49 8B 41 70 - mov rax,[r9+70]
// ---------- DONE INJECTING ----------
Starfield.exe+2B3D12F: 48 8B CA - mov rcx,rdx
Starfield.exe+2B3D132: 4C 8B 40 08 - mov r8,[rax+08]
Starfield.exe+2B3D136: E8 F5 75 71 FE - call Starfield.exe+1254730
Starfield.exe+2B3D13B: 48 8B D0 - mov rdx,rax
Starfield.exe+2B3D13E: 49 8D 49 70 - lea rcx,[r9+70]
Starfield.exe+2B3D142: 48 83 C4 28 - add rsp,28
Starfield.exe+2B3D146: 49 FF E0 - jmp r8
Starfield.exe+2B3D149: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
Starfield.exe+2B3D14D: 48 83 C4 28 - add rsp,28
Starfield.exe+2B3D151: C3 - ret
--]]
{$asm}
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
{$asm}
//unregistersymbol(imp_item_box)
{$lua}
if syntaxcheck then return end
local disable_array = {"player_ptr1", "pickpocket_const"}
local a_len = #(disable_array)
local i = 0
for i = 1, a_len do
--print(disable_array[i])
unregisterSymbol(disable_array[i])
end
getLuaEngine().Close()
1337160890
"Player_ptr (do not edit)"
1
0
808080
8 Bytes
player_ptr1
1337161347
"inf. Boostpack / Star Power / ship booster"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-10-15
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_STARPOWER,Starfield.exe,C5 F2 58 73 10) // should be unique
alloc(newmem,$1000,INJECT_INF_STARPOWER)
label(code)
label(return)
label(is_ship_booster_on)
newmem:
pushfq
push r14
push r15
mov r15, [rsp+50]
cmp r15, [player_ptr1]
jne chk_booster_pre
mov r15, [rbx]
test r15, r15
jz endp
mov r15, [r15+48]
test r15, r15
jz endp
mov r14d, [r15+18] //StarPower
cmp r14d, 72617453
jne chk_boostpack
mov r14d, [r15+1C]
cmp r14d, 65776F50
jne endp
// StarPower
vmovss xmm15, [vf_60]
vmovss [rbx+10], xmm15
jmp endp
chk_boostpack:
cmp r14d, 736F6F42 //BoostpackFuel
jne chk_booster
mov r14d, [r15+1C]
cmp r14d, 63617074
jne endp
mov r14d, [r15+20]
cmp r14d, 6575466B
jne endp
vmovss xmm15, [vf_100]
vmovss [rbx+10], xmm15
jmp endp
chk_booster_pre:
mov r15, [rbx]
test r15, r15
jz endp
mov r15, [r15+48]
test r15, r15
jz endp
mov r14d, [r15+18]
chk_booster:
cmp dword ptr [is_ship_booster_on], 1
jne endp
cmp r14d, 63617053 //SpaceshipBoostFuel
jne endp
mov r14d, [r15+1C]
cmp r14d, 69687365
jne endp
mov r14d, [r15+20]
cmp r14d, 6F6F4270
jne endp
vxorps xmm15, xmm15, xmm15
vmovss [rbx+10], xmm15
vmovss xmm1, [vf_15]
jmp endp
endp:
pop r15
pop r14
popfq
code:
vaddss xmm6,xmm1,[rbx+10]
jmp return
align 10 cc
vf_01:
dd (float)0
vf_15:
dd (float)15
vf_60:
dd (float)60
vf_100:
dd (float)60
is_ship_booster_on:
dd 1
INJECT_INF_STARPOWER:
jmp newmem
return:
registersymbol(INJECT_INF_STARPOWER)
registersymbol(is_ship_booster_on)
[DISABLE]
INJECT_INF_STARPOWER:
db C5 F2 58 73 10
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24F248B
Starfield.exe+24F2468: 48 8D 04 CB - lea rax,[rbx+rcx*8]
Starfield.exe+24F246C: 4C 8B 7C 24 30 - mov r15,[rsp+30]
Starfield.exe+24F2471: 48 3B D8 - cmp rbx,rax
Starfield.exe+24F2474: 74 1A - je Starfield.exe+24F2490
Starfield.exe+24F2476: 48 39 2B - cmp [rbx],rbp
Starfield.exe+24F2479: 74 06 - je Starfield.exe+24F2481
Starfield.exe+24F247B: 48 83 C3 18 - add rbx,18
Starfield.exe+24F247F: EB F0 - jmp Starfield.exe+24F2471
Starfield.exe+24F2481: C5 FA 10 43 0C - vmovss xmm0,[rbx+0C]
Starfield.exe+24F2486: C5 FA 58 4B 08 - vaddss xmm1,xmm0,[rbx+08]
// ---------- INJECTING HERE ----------
Starfield.exe+24F248B: C5 F2 58 73 10 - vaddss xmm6,xmm1,[rbx+10]
// ---------- DONE INJECTING ----------
Starfield.exe+24F2490: 48 8B 6C 24 60 - mov rbp,[rsp+60]
Starfield.exe+24F2495: 48 85 FF - test rdi,rdi
Starfield.exe+24F2498: 48 8B 7C 24 38 - mov rdi,[rsp+38]
Starfield.exe+24F249D: 48 8B 5C 24 58 - mov rbx,[rsp+58]
Starfield.exe+24F24A2: 74 27 - je Starfield.exe+24F24CB
Starfield.exe+24F24A4: B9 FF FF FF FF - mov ecx,FFFFFFFF
Starfield.exe+24F24A9: F0 41 0F C1 0E - lock xadd [r14],ecx
Starfield.exe+24F24AE: 8B C1 - mov eax,ecx
Starfield.exe+24F24B0: 25 FF 0F C0 FF - and eax,FFC00FFF
Starfield.exe+24F24B5: 83 F8 01 - cmp eax,01
}
1337161348
"Ship booster: may affect all ships"
8000FF
1
1337161349
"Ship booster enabled?"
0:No
1:Yes
0
FF8080
4 Bytes
is_ship_booster_on
1337110783
"Lock O2"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_O2,Starfield.exe,C5 FA 10 04 90 ?? ?? ?? ?? 90) // should be unique
alloc(newmem,$1000,INJECT_INF_O2)
label(code)
label(return)
label(i_base_o2_addr)
label(is_O2_enabled)
newmem:
// max O2 = 80
// xmm1 = -??? value, used O2 (i.e. O2 = 50, xmm1 = -30)
pushfq
cmp rsi, [player_ptr1]
jne code_pre
push rbx
vxorps xmm15, xmm15, xmm15
lea rbx, [rax+rdx*4+34] // 8+34 = 3C
vmovss xmm14, [rax+rdx*4+34]
vucomiss xmm14, [vf_1]
je next1
vmovss xmm14, [rax+rdx*4+40]
vucomiss xmm14, [vf_1]
je next1
jmp endp
next1:
vmovss xmm14, [rax+rdx*4]
vcomiss xmm14, xmm15
jae endp
lea rbx, [rax+rdx*4-C]
mov [i_base_o2_addr], rbx
cmp dword ptr [is_O2_enabled], 1
jne endp
vxorps xmm1, xmm1, xmm1
vmovss [rax+rdx*4], xmm1
vmovss [rax+rdx*4-C], xmm1
endp:
pop rbx
code_pre:
popfq
code:
vmovss xmm0,[rax+rdx*4]
jmp return
align 10 cc
i_base_o2_addr:
dq 0
vf_1:
dd (float)1
is_O2_enabled:
dd 1
INJECT_INF_O2:
jmp newmem
return:
registersymbol(INJECT_INF_O2)
registersymbol(i_base_o2_addr)
registersymbol(is_O2_enabled)
[DISABLE]
INJECT_INF_O2:
db C5 FA 10 04 90
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24C0248
Starfield.exe+24C0224: C5 78 28 C8 - vmovaps xmm9,xmm0
Starfield.exe+24C0228: 48 8B 53 08 - mov rdx,[rbx+08]
Starfield.exe+24C022C: 48 8B 0B - mov rcx,[rbx]
Starfield.exe+24C022F: E8 E0 35 00 00 - call Starfield.exe+24C3814
Starfield.exe+24C0234: 48 85 C0 - test rax,rax
Starfield.exe+24C0237: 74 1F - je Starfield.exe+24C0258
Starfield.exe+24C0239: 48 8B 4B 18 - mov rcx,[rbx+18]
Starfield.exe+24C023D: C5 FA 10 09 - vmovss xmm1,[rcx]
Starfield.exe+24C0241: 48 8B 4B 10 - mov rcx,[rbx+10]
Starfield.exe+24C0245: 48 63 11 - movsxd rdx,dword ptr [rcx]
// ---------- INJECTING HERE ----------
Starfield.exe+24C0248: C5 FA 10 04 90 - vmovss xmm0,[rax+rdx*4]
// ---------- DONE INJECTING ----------
Starfield.exe+24C024D: C5 FA 11 0C 90 - vmovss [rax+rdx*4],xmm1
Starfield.exe+24C0252: C5 72 5C C0 - vsubss xmm8,xmm1,xmm0
Starfield.exe+24C0256: EB 25 - jmp Starfield.exe+24C027D
Starfield.exe+24C0258: 48 8B 0B - mov rcx,[rbx]
Starfield.exe+24C025B: 48 81 C1 98 02 00 00 - add rcx,00000298
Starfield.exe+24C0262: 48 8B 43 18 - mov rax,[rbx+18]
Starfield.exe+24C0266: 48 8B 53 10 - mov rdx,[rbx+10]
Starfield.exe+24C026A: C5 FA 10 18 - vmovss xmm3,[rax]
Starfield.exe+24C026E: 4C 8B 43 08 - mov r8,[rbx+08]
Starfield.exe+24C0272: 8B 12 - mov edx,[rdx]
}
1337160912
"Enabled?"
0:No
1:Yes
0
4 Bytes
is_O2_enabled
1337160909
"O2-1"
0
808080
Float
i_base_o2_addr
0
1337160910
"O2-2"
0
808080
Float
i_base_o2_addr
C
1337160911
"O2-3"
0
808080
Float
i_base_o2_addr
40
1337160865
"Lock HP"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-03
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_HP_TEST,Starfield.exe,C5 FA 10 04 98 EB) // should be unique
alloc(newmem,$1000,INJECT_INF_HP_TEST)
label(code)
label(return)
newmem:
pushfq
cmp rbp, [player_ptr1]
jne code_pre
push r15
xor r15, r15
cmp dword ptr [rax+rbx*4+20], r15d
jne endp
mov r15d, 4
cmp [rax+rbx*4+30], r15d
jne endp
mov r15d, [vf_1]
cmp [rax+rbx*4+40], r15d
jne endp
vxorps xmm0, xmm0, xmm0
vmovss [rax+rbx*4], xmm0
endp:
pop r15
code_pre:
popfq
code:
vmovss xmm0,[rax+rbx*4]
jmp return
align 10 cc
vf_1:
dd (float)1
INJECT_INF_HP_TEST:
jmp newmem
return:
registersymbol(INJECT_INF_HP_TEST)
[DISABLE]
INJECT_INF_HP_TEST:
db C5 FA 10 04 98
unregistersymbol(INJECT_INF_HP_TEST)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24C3965
Starfield.exe+24C3946: 57 - push rdi
Starfield.exe+24C3947: 48 83 EC 20 - sub rsp,20
Starfield.exe+24C394B: 48 63 DA - movsxd rbx,edx
Starfield.exe+24C394E: 48 8B F1 - mov rsi,rcx
Starfield.exe+24C3951: 48 83 C1 90 - add rcx,-70
Starfield.exe+24C3955: 49 8B D0 - mov rdx,r8
Starfield.exe+24C3958: 49 8B F8 - mov rdi,r8
Starfield.exe+24C395B: E8 B4 FE FF FF - call Starfield.exe+24C3814
Starfield.exe+24C3960: 48 85 C0 - test rax,rax
Starfield.exe+24C3963: 74 07 - je Starfield.exe+24C396C
// ---------- INJECTING HERE ----------
Starfield.exe+24C3965: C5 FA 10 04 98 - vmovss xmm0,[rax+rbx*4]
// ---------- DONE INJECTING ----------
Starfield.exe+24C396A: EB 11 - jmp Starfield.exe+24C397D
Starfield.exe+24C396C: 48 8D 8E 28 02 00 00 - lea rcx,[rsi+00000228]
Starfield.exe+24C3973: 4C 8B C7 - mov r8,rdi
Starfield.exe+24C3976: 8B D3 - mov edx,ebx
Starfield.exe+24C3978: E8 E3 E7 02 00 - call Starfield.exe+24F2160
Starfield.exe+24C397D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Starfield.exe+24C3982: 48 8B 74 24 38 - mov rsi,[rsp+38]
Starfield.exe+24C3987: 48 83 C4 20 - add rsp,20
Starfield.exe+24C398B: 5F - pop rdi
Starfield.exe+24C398C: C3 - ret
}
1337160866
"Turn on when really needed!!"
8000FF
1
1337160894
"EN / ship weapon / Shield"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-05
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SHIP_ADDR_CHK1,Starfield.exe,49 8B 45 00 49 8B CD FF 90 E0) // should be unique
alloc(newmem,$1000,INJECT_SHIP_ADDR_CHK1)
label(code)
label(return)
label(i_base_ship_addr_chk)
label(i_base_ship_addr_chk1_cnt)
label(i_base_ship_addr_top)
newmem:
// rax, rcx = safe to use
pushfq
// record ship address / calclate times appeared
push r15
push r14
push r12
xor rcx, rcx
xor r12, r12
loops:
mov r15, i_base_ship_addr_chk
mov r14, i_base_ship_addr_chk1_cnt
cmp r13, [player_ptr1]
je endp
lea rcx, [r15+r12d*8]
cmp [rcx], 0
je write_data
cmp [rcx], r13 // record found
je count_times
jmp loop_proc
write_data:
mov [rcx], r13
count_times:
lea rcx, [r14+r12d*8] // calc & write count
inc qword ptr [rcx]
jmp endp // write count and exit loop
loop_proc:
inc r12d
cmp r12d, 15 // only record 20 ship addresses
jae endp
jmp loops
endp:
pop r12
pop r14
pop r15
// get top ship address count
push r15
push r14
push r12
xor rcx, rcx
xor r12, r12
xor rax, rax
loops2:
mov r15, i_base_ship_addr_chk
mov r14, i_base_ship_addr_chk1_cnt
lea rcx, [r14+r12d*8]
cmp rax, [rcx]
jbe loops2_proc
mov rax, [rcx] // record number
lea rcx, [r15+r12d*8] // record address
mov r15, rcx
loops2_proc:
inc r12d
cmp r12d, 15 // only process 20 ship addresses
jae endp2
jmp loops2
endp2:
mov r15, [r15]
mov [i_base_ship_addr_top], r15
pop r12
pop r14
pop r15
code_pre:
popfq
code:
mov rax,[r13+00]
mov rcx,r13
jmp return
align 10 cc
i_base_ship_addr_chk:
dq 0
align 100 0
db 0
align 10 cc
i_base_ship_addr_chk1_cnt:
dq 0
align 100 0
db 0
i_base_ship_addr_top:
dq 0
INJECT_SHIP_ADDR_CHK1:
jmp newmem
nop 2
return:
registersymbol(INJECT_SHIP_ADDR_CHK1)
registersymbol(i_base_ship_addr_chk)
registersymbol(i_base_ship_addr_chk1_cnt)
registersymbol(i_base_ship_addr_top)
[DISABLE]
INJECT_SHIP_ADDR_CHK1:
db 49 8B 45 00 49 8B CD
unregistersymbol(INJECT_SHIP_ADDR_CHK1)
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+22E0735
Starfield.exe+22E06CF - 55 - push rbp
Starfield.exe+22E06D0 - 41 54 - push r12
Starfield.exe+22E06D2 - 41 55 - push r13
Starfield.exe+22E06D4 - 41 56 - push r14
Starfield.exe+22E06D6 - 41 57 - push r15
Starfield.exe+22E06D8 - 48 8D 68 B9 - lea rbp,[rax-47]
Starfield.exe+22E06DC - 48 81 EC 90000000 - sub rsp,00000090
Starfield.exe+22E06E3 - C5F82970 C8 - vmovaps [rax-38],xmm6
Starfield.exe+22E06E8 - C5F82978 B8 - vmovaps [rax-48],xmm7
Starfield.exe+22E06ED - 4D 8B F1 - mov r14,r9
Starfield.exe+22E06F0 - 4D 8B F8 - mov r15,r8
Starfield.exe+22E06F3 - 48 8B FA - mov rdi,rdx
Starfield.exe+22E06F6 - 4C 8B E9 - mov r13,rcx
Starfield.exe+22E06F9 - 49 8B C9 - mov rcx,r9
Starfield.exe+22E06FC - E8 FB1C12FF - call Starfield.exe+14023FC
Starfield.exe+22E0701 - 48 8B 5D 6F - mov rbx,[rbp+6F]
Starfield.exe+22E0705 - C5FA1103 - vmovss [rbx],xmm0
Starfield.exe+22E0709 - 49 8B C9 - mov rcx,r9
Starfield.exe+22E070C: E8 B3 7D D7 FF - call Starfield.exe+20584C4
Starfield.exe+22E0711: 48 8B 75 77 - mov rsi,[rbp+77]
Starfield.exe+22E0715: C5 FA 11 06 - vmovss [rsi],xmm0
Starfield.exe+22E0719: 45 33 C0 - xor r8d,r8d
Starfield.exe+22E071C: 49 8B D7 - mov rdx,r15
Starfield.exe+22E071F: 48 8D 4D BF - lea rcx,[rbp-41]
Starfield.exe+22E0723: E8 D8 47 5E FF - call Starfield.exe+18C4F00
Starfield.exe+22E0728: 90 - nop
Starfield.exe+22E0729: C5 FA 10 3D B3 B1 C4 01 - vmovss xmm7,[Starfield.exe+3F2B8E4]
Starfield.exe+22E0731: C5 F8 28 F7 - vmovaps xmm6,xmm7
// ---------- INJECTING HERE ----------
Starfield.exe+22E0735: 49 8B 45 00 - mov rax,[r13+00]
// ---------- DONE INJECTING ----------
Starfield.exe+22E0739: 49 8B CD - mov rcx,r13
Starfield.exe+22E073C: FF 90 E0 04 00 00 - call qword ptr [rax+000004E0]
Starfield.exe+22E0742: 33 C9 - xor ecx,ecx
Starfield.exe+22E0744: 48 85 C0 - test rax,rax
Starfield.exe+22E0747: 74 21 - je Starfield.exe+22E076A
Starfield.exe+22E0749: 38 4D 7F - cmp [rbp+7F],cl
Starfield.exe+22E074C: 75 1C - jne Starfield.exe+22E076A
Starfield.exe+22E074E: 48 8B 08 - mov rcx,[rax]
Starfield.exe+22E0751: 4C 8B 51 48 - mov r10,[rcx+48]
Starfield.exe+22E0755: 45 33 C9 - xor r9d,r9d
Starfield.exe+22E0758 - 4D 8B C6 - mov r8,r14
Starfield.exe+22E075B - 49 8B D7 - mov rdx,r15
Starfield.exe+22E075E - 48 8B C8 - mov rcx,rax
Starfield.exe+22E0761 - 41 FF D2 - call r10
Starfield.exe+22E0764 - C5F828F0 - vmovaps xmm6,xmm0
Starfield.exe+22E0768 - 33 C9 - xor ecx,ecx
Starfield.exe+22E076A - C5F057C9 - vxorps xmm1,xmm1,xmm1
Starfield.exe+22E076E - C5F82E0E - vucomiss xmm1,[rsi]
Starfield.exe+22E0772 - 74 13 - je Starfield.exe+22E0787
Starfield.exe+22E0774 - 49 8B 46 10 - mov rax,[r14+10]
Starfield.exe+22E0778 - F7 80 58010000 00020000 - test [rax+00000158],00000200
Starfield.exe+22E0782 - 44 8A E1 - mov r12b,cl
Starfield.exe+22E0785 - 74 03 - je Starfield.exe+22E078A
Starfield.exe+22E0787 - 41 B4 01 - mov r12b,01
Starfield.exe+22E078A - 4D 8B FD - mov r15,r13
Starfield.exe+22E078D - 41 80 7D 36 4B - cmp byte ptr [r13+36],4B
Starfield.exe+22E0792 - 4C 0F45 F9 - cmovne r15,rcx
Starfield.exe+22E0796 - 4D 85 FF - test r15,r15
Starfield.exe+22E0799 - 0F84 9A010000 - je Starfield.exe+22E0939
Starfield.exe+22E079F - 45 33 C0 - xor r8d,r8d
Starfield.exe+22E07A2 - 49 8B D7 - mov rdx,r15
Starfield.exe+22E07A5 - 48 8D 4D EF - lea rcx,[rbp-11]
Starfield.exe+22E07A9 - E8 52475EFF - call Starfield.exe+18C4F00
Starfield.exe+22E07AE - 90 - nop
Starfield.exe+22E07AF - 45 33 C0 - xor r8d,r8d
Starfield.exe+22E07B2 - 48 8B D7 - mov rdx,rdi
Starfield.exe+22E07B5 - 48 8D 4D CF - lea rcx,[rbp-31]
Starfield.exe+22E07B9 - E8 42475EFF - call Starfield.exe+18C4F00
Starfield.exe+22E07BE - 90 - nop
Starfield.exe+22E07BF - 45 33 C0 - xor r8d,r8d
Starfield.exe+22E07C2 - 49 8B 56 10 - mov rdx,[r14+10]
Starfield.exe+22E07C6 - 48 8D 4D DF - lea rcx,[rbp-21]
Starfield.exe+22E07CA - E8 31475EFF - call Starfield.exe+18C4F00
Starfield.exe+22E07CF - 90 - nop
Starfield.exe+22E07D0 - 33 C0 - xor eax,eax
Starfield.exe+22E07D2 - 48 85 FF - test rdi,rdi
}
1337160907
"Re-enable when change ship / or not working"
8000FF
1
1337160897
"For ship's suggestion: Activate this in the status window when piloting a ship"
8000FF
1
1337160895
"Top ship address (do not edit)"
1
0
808080
8 Bytes
i_base_ship_addr_top
1337160983
"Get shield data"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-10-07
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_SHIP_INFO,Starfield.exe,8B 48 08 40 B7 01) // should be unique
alloc(newmem,$1000,INJECT_GET_SHIP_INFO)
label(code)
label(return)
label(i_base_dship_design_data_addr1)
label(i_base_dship_design_data_addr2)
label(i_base_dship_design_data_addr3)
label(i_base_shd_bonus_addr)
label(i_base_eng_bonus_addr)
label(vf_def_bvalue)
label(i_shield_now)
label(is_auto_lock_shield)
label(is_shd_adv_chk)
newmem:
pushfq
push r15
push r14
//mov r15, [rsp+50]
//cmp r15, [i_base_ship_addr_top]
//jne stage2
mov ecx,[rax+08] // shield value should not be zero
test ecx, ecx
jz stage2
mov r15, [rax]
test r15, r15
jz endp
mov r14, [r15+150]
test r14, r14
jz endp
mov r14d, [r14+18] // SHD
stage1: // get shield value
cmp dword ptr [is_shd_adv_chk], 1
jne after_adv_chk
cmp dword ptr [rax+C], -1
jne stage2
after_adv_chk:
cmp r14d, 00444853 // SHD
jne stage2
mov r14, [r15+48]
test r14, r14
jz endp
mov r14d, [r14+1C] //ShieldHealth
cmp r14d, 6548646C
jne stage2
mov ecx,[rax+08]
cmp qword ptr [i_base_dship_design_data_addr1], rax
//je stage2
je chk_is_shield
cmp qword ptr [i_base_dship_design_data_addr1], 0
//jne write2
jne write2
mov [i_base_dship_design_data_addr1], rax
jmp stage2
write2:
cmp qword ptr [i_base_dship_design_data_addr2], rax
//je stage2
je chk_is_shield
cmp qword ptr [i_base_dship_design_data_addr2], 0
//jne write3
jne write3
mov [i_base_dship_design_data_addr2], rax
jmp stage2
write3:
cmp qword ptr [i_base_dship_design_data_addr3], rax
//je stage2
je chk_is_shield
cmp qword ptr [i_base_dship_design_data_addr3], 0
//jne stage2
jne stage2
mov [i_base_dship_design_data_addr3], rax
jmp stage2
chk_is_shield:
cmp dword ptr [is_auto_lock_shield], 1
jne stage2
mov r14, [r15+48]
test r14, r14
jz stage2
mov r14d, [r14+1C]
cmp r14d, 6548646C //ShieldHealth
jne stage2
vmovss xmm15, [rax+8]
vucomiss xmm15, [i_shield_now]
jae update_shield_value_record
vmovss xmm15, [i_shield_now]
vmovss [rax+8], xmm15
jmp endp
update_shield_value_record:
vmovss [i_shield_now], xmm15
jmp endp
stage2: // get bonus
mov r15, [rax]
test r15, r15
jz endp
mov r14, [r15+150]
test r14, r14
jz endp
mov r14d, [r14+18]
cmp qword ptr [i_base_shd_bonus_addr], 0
jne write_bonus_1
cmp r14d, 42444853 // SHDB
jne test2_2
cmp qword ptr [i_base_shd_bonus_addr], 0
jne write_bonus_1
mov [i_base_shd_bonus_addr], rax
write_bonus_1:
cmp qword ptr [i_base_shd_bonus_addr], rax
jne endp
mov r15, [i_base_shd_bonus_addr]
vmovss xmm15, [vf_def_bvalue]
vmovss [r15+8], xmm15
//mov ecx,[rax+08]
jmp endp
test2_2:
cmp qword ptr [i_base_eng_bonus_addr], 0
jne write_bonus_2
cmp r14d, 42474E45 // ENGB
jne endp
cmp qword ptr [i_base_eng_bonus_addr], 0
jne write_bonus_2
mov [i_base_eng_bonus_addr], rax
write_bonus_2:
cmp qword ptr [i_base_eng_bonus_addr], rax
jne endp
mov r15, [i_base_eng_bonus_addr]
vmovss xmm15, [vf_def_bvalue]
vmovss [r15+8], xmm15
endp:
pop r14
pop r15
popfq
code:
mov ecx,[rax+08]
mov dil,01
jmp return
align 10 cc
i_base_dship_design_data_addr1:
dq 0
i_base_dship_design_data_addr2:
dq 0
i_base_dship_design_data_addr3:
dq 0
i_base_shd_bonus_addr:
dq 0
i_base_eng_bonus_addr:
dq 0
vf_def_bvalue:
dd (float)30000
i_shield_now:
dd 0
is_auto_lock_shield:
dd 1
is_shd_adv_chk:
dd 0
INJECT_GET_SHIP_INFO:
jmp newmem
nop
return:
registersymbol(INJECT_GET_SHIP_INFO)
registersymbol(i_base_dship_design_data_addr1)
registersymbol(i_base_dship_design_data_addr2)
registersymbol(i_base_dship_design_data_addr3)
registersymbol(i_base_shd_bonus_addr)
registersymbol(i_base_eng_bonus_addr)
registersymbol(vf_def_bvalue)
registersymbol(i_shield_now)
registersymbol(is_auto_lock_shield)
registersymbol(is_shd_adv_chk)
[DISABLE]
INJECT_GET_SHIP_INFO:
db 8B 48 08 40 B7 01
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24F209C
Starfield.exe+24F2076: E8 E1 A8 35 FE - call Starfield.exe+84C95C
Starfield.exe+24F207B: 48 8D 54 24 68 - lea rdx,[rsp+68]
Starfield.exe+24F2080: E8 87 B7 D8 FE - call Starfield.exe+127D80C
Starfield.exe+24F2085: 48 8B 44 24 50 - mov rax,[rsp+50]
Starfield.exe+24F208A: 48 3B 44 24 68 - cmp rax,[rsp+68]
Starfield.exe+24F208F: 74 13 - je Starfield.exe+24F20A4
Starfield.exe+24F2091: 48 39 28 - cmp [rax],rbp
Starfield.exe+24F2094: 74 06 - je Starfield.exe+24F209C
Starfield.exe+24F2096: 48 83 C0 10 - add rax,10
Starfield.exe+24F209A: EB EE - jmp Starfield.exe+24F208A
// ---------- INJECTING HERE ----------
Starfield.exe+24F209C: 8B 48 08 - mov ecx,[rax+08]
// ---------- DONE INJECTING ----------
Starfield.exe+24F209F: 40 B7 01 - mov dil,01
Starfield.exe+24F20A2: 89 0E - mov [rsi],ecx
Starfield.exe+24F20A4: 48 8D 4C 24 20 - lea rcx,[rsp+20]
Starfield.exe+24F20A9: E8 AA EB 35 FE - call Starfield.exe+850C58
Starfield.exe+24F20AE: 48 8B 5C 24 58 - mov rbx,[rsp+58]
Starfield.exe+24F20B3: 40 8A C7 - mov al,dil
Starfield.exe+24F20B6: 48 83 C4 30 - add rsp,30
Starfield.exe+24F20BA: 5F - pop rdi
Starfield.exe+24F20BB: 5E - pop rsi
Starfield.exe+24F20BC: 5D - pop rbp
}
1337161061
"Watermark"
0
808080
Float
i_shield_now
1337160985
"Usage: modify ship -> Ship builder"
8000FF
1
1337160998
"Disable / enable after change ship"
8000FF
1
1337161062
"Try to auto lock shield?"
0:No
1:Yes
0
FF8080
4 Bytes
is_auto_lock_shield
1337161063
"More restrict check?"
0:No
1:Yes
0
FF8080
4 Bytes
is_shd_adv_chk
1337160989
"Shield #1"
1
1337160986
"Value"
0
FF8080
Float
i_base_dship_design_data_addr1
8
1337160988
"ID ?"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr1
18
48
0
1337160987
"Desc"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr1
18
40
0
1337160990
"Shield #2"
1
1337160991
"Value"
0
FF8080
Float
i_base_dship_design_data_addr2
8
1337160992
"ID ?"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr2
18
48
0
1337160993
"Desc"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr2
18
40
0
1337160994
"Shield #3"
1
1337160995
"Value"
0
FF8080
Float
i_base_dship_design_data_addr3
8
1337160996
"ID ?"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr3
18
48
0
1337160997
"Desc"
0
FF8080
String
64
0
0
1
i_base_dship_design_data_addr3
18
40
0
1337161060
"Engine / Shield bonus"
1
1337161053
"Get data: before & leave / leave Cockpit seat"
8000FF
1
1337161054
"Usage: when success, the engine / shield bar color will be green, not white"
8000FF
1
1337161055
"Shield bonus"
0
FF8080
Float
i_base_shd_bonus_addr
8
1337161056
"Engine bonus"
0
FF8080
Float
i_base_eng_bonus_addr
8
1337161058
"Bonus value"
0
C08000
Float
vf_def_bvalue
1337110785
"inf. personal/ship EN weapon energy"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-02
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_EN_WEAPON,Starfield.exe,C5 FA 10 47 20 C5 FA 58) // should be unique
alloc(newmem,$1000,INJECT_INF_EN_WEAPON)
label(code)
label(return)
label(i_1st_w_en_addr)
label(i_1st_w_en_addr2)
label(i_1st_w_en_addr3)
label(i_1st_w_en_addr4)
label(i_1st_w_en_addr5)
label(is_only_1st_fired_w_en)
newmem:
pushfq
mov dword ptr [is_ship_addr], 0
cmp r9, 0 // ship weapon check
je ship_pre
cmp r9, [player_ptr1] // personal weapon player ptr check
jne code_pre
jmp loop_pre
ship_pre:
cmp rsi, [i_base_ship_addr_top] // Ship address is not the #1 count
jne code_pre
mov dword ptr [is_ship_addr], 1
loop_pre:
push r15
push r14
push r13
xor r14, r14
loops:
// new code
mov r15, i_1st_w_en_addr
lea r13, [r15+r14d*8]
//jmp skip_auto_set // skip this test block
cmp dword ptr [is_only_1st_fired_w_en], 0
jne skip_auto_set
cmp dword ptr [is_ship_addr], 1
jne skip_auto_set
push r12
mov r12d, (float)1
mov [rdi+20], r12d
pop r12
skip_auto_set:
cmp qword ptr [r13], rdi
je endp1
cmp qword ptr [r13], 0
je write_data
jmp loop_tail
write_data:
mov [r13], rdi
jmp endp1_1
loop_tail:
inc r14d
cmp r14, 21
jae endp1_1
jmp loops
endp1:
// check if value too low
//vxorps xmm15, xmm15, xmm15
//vmovss xmm14, [r13]
//vucomiss xmm15, xmm14
//je endp1_1
//vmovss xmm15, [vf_0001]
//vcomiss xmm14, xmm15
//a endp1_1 // ignore if value too low
//mov qword ptr [r13], 0 // delete record
endp1_1:
endp1_2:
pop r13
pop r14
pop r15
next1:
cmp dword ptr [is_only_1st_fired_w_en], 2
je code_pre
cmp dword ptr [is_only_1st_fired_w_en], 1
jne next2
//cmp dword ptr [is_only_1st_fired_w_en], 0
//jne code_pre
cmp qword ptr [i_1st_w_en_addr], 0
je code_pre
cmp rdi, [i_1st_w_en_addr]
jne code_pre
// match 1st weapon
db EB 3B 54
db 68 69 73 20 74
db 61 62 6C 65 20 63 6F 6D 65 73 20 66 72 6F 6D 20 68 74
db 74 70 73 3A 2F
db 2F 6F 70 65 6E 63 68 65
db 61 74 74 61 62 6C 65 73
db 2E 63 6F 6D
db 20 2F 20 43 45 20 37 2E 34 2B
next2:
//vxorps xmm15, xmm15, xmm15
//vmovss xmm14, [rdi+20]
//vucomiss xmm15, xmm14
//je do_set_1
//vmovss xmm15, [vf_0001]
//vucomiss xmm14, xmm15
//jb code_pre // ignore if value too low
//jmp do_set_1
do_set_1:
mov [rdi+20], (float)1.0 // full EN
code_pre:
popfq
code:
vmovss xmm0,[rdi+20]
jmp return
align 10 cc
i_1st_w_en_addr:
dq 0
i_1st_w_en_addr2:
dq 0
i_1st_w_en_addr3:
dq 0
i_1st_w_en_addr4:
dq 0
i_1st_w_en_addr5:
dq 0
i_1st_w_en_addrx:
db 0
align 100 0
db 0
align 100 0
db 0
is_only_1st_fired_w_en:
dd 2
vf_0001:
dd (float)0.0001
vf_0:
dd 0
vf_1:
dd (float)1
is_ship_addr:
dd 0
INJECT_INF_EN_WEAPON:
jmp newmem
return:
registersymbol(INJECT_INF_EN_WEAPON)
registersymbol(i_1st_w_en_addr)
registersymbol(i_1st_w_en_addr2)
registersymbol(i_1st_w_en_addr3)
registersymbol(i_1st_w_en_addr4)
registersymbol(i_1st_w_en_addr5)
registersymbol(is_only_1st_fired_w_en)
[DISABLE]
INJECT_INF_EN_WEAPON:
db C5 FA 10 47 20
unregistersymbol(INJECT_INF_EN_WEAPON)
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1F26D05
Starfield.exe+1F26CC6 - CC - int 3
Starfield.exe+1F26CC7 - CC - int 3
Starfield.exe+1F26CC8 - 48 89 5C 24 08 - mov [rsp+08],rbx
Starfield.exe+1F26CCD - 48 89 74 24 10 - mov [rsp+10],rsi
Starfield.exe+1F26CD2 - 57 - push rdi
Starfield.exe+1F26CD3 - 48 83 EC 30 - sub rsp,30
Starfield.exe+1F26CD7 - C5F82974 24 20 - vmovaps [rsp+20],xmm6
Starfield.exe+1F26CDD - 48 8B F2 - mov rsi,rdx
Starfield.exe+1F26CE0 - 48 8B F9 - mov rdi,rcx
Starfield.exe+1F26CE3: B3 01 - mov bl,01
Starfield.exe+1F26CE5: E8 FE FE FF FF - call Starfield.exe+1F26BE8
Starfield.exe+1F26CEA: C5 C8 57 F6 - vxorps xmm6,xmm6,xmm6
Starfield.exe+1F26CEE: C5 F8 2F C6 - vcomiss xmm0,xmm6
Starfield.exe+1F26CF2: 76 32 - jna Starfield.exe+1F26D26
Starfield.exe+1F26CF4: 48 8B D6 - mov rdx,rsi
Starfield.exe+1F26CF7: 48 8B CF - mov rcx,rdi
Starfield.exe+1F26CFA: E8 A9 FE FF FF - call Starfield.exe+1F26BA8
Starfield.exe+1F26CFF: C5 F8 2F C6 - vcomiss xmm0,xmm6
Starfield.exe+1F26D03: 76 23 - jna Starfield.exe+1F26D28
// ---------- INJECTING HERE ----------
Starfield.exe+1F26D05: C5 FA 10 47 20 - vmovss xmm0,[rdi+20]
// ---------- DONE INJECTING ----------
Starfield.exe+1F26D0A: C5 FA 58 35 4E 08 00 02 - vaddss xmm6,xmm0,[Starfield.exe+3F27560]
Starfield.exe+1F26D12: 48 8B D6 - mov rdx,rsi
Starfield.exe+1F26D15: 48 8B CF - mov rcx,rdi
Starfield.exe+1F26D18: E8 2B FE FF FF - call Starfield.exe+1F26B48
Starfield.exe+1F26D1D: C5 F8 2F F0 - vcomiss xmm6,xmm0
Starfield.exe+1F26D21: 0F 93 C3 - setae bl
Starfield.exe+1F26D24: EB 02 - jmp Starfield.exe+1F26D28
Starfield.exe+1F26D26: 32 DB - xor bl,bl
Starfield.exe+1F26D28: 48 8B 74 24 48 - mov rsi,[rsp+48]
Starfield.exe+1F26D2D: 8A C3 - mov al,bl
Starfield.exe+1F26D2F - 48 8B 5C 24 40 - mov rbx,[rsp+40]
Starfield.exe+1F26D34 - C5F82874 24 20 - vmovaps xmm6,[rsp+20]
Starfield.exe+1F26D3A - 48 83 C4 30 - add rsp,30
Starfield.exe+1F26D3E - 5F - pop rdi
Starfield.exe+1F26D3F - C3 - ret
Starfield.exe+1F26D40 - 48 89 5C 24 10 - mov [rsp+10],rbx
}
1337110787
"Current lock mode"
0:Lock all ship weapon
1:Only lock 1st EN position
2:No auto lock
0
C08000
4 Bytes
is_only_1st_fired_w_en
1337160870
"EN data include NPC and player (first come first record)"
8000FF
1
1337160882
"#1 ~ #5: fast value response, others: slower"
8000FF
1
1337110786
"1st EN data"
0
FF8080
Float
i_1st_w_en_addr
20
1337110788
"2nd EN data"
0
FF8080
Float
i_1st_w_en_addr2
20
1337110789
"3rd EN data"
0
FF8080
Float
i_1st_w_en_addr3
20
1337160868
"4th EN data"
0
FF8080
Float
i_1st_w_en_addr4
20
1337160869
"5th EN data"
0
FF8080
Float
i_1st_w_en_addr5
20
1337160871
"6th EN data"
0
FF8080
Float
i_1st_w_en_addr+28
20
1337160872
"7th EN data"
0
FF8080
Float
i_1st_w_en_addr+28
28
1337160873
"8th EN data"
0
FF8080
Float
i_1st_w_en_addr+28
30
1337160874
"9th EN data"
0
FF8080
Float
i_1st_w_en_addr+30
30
1337160875
"10th EN data"
0
FF8080
Float
i_1st_w_en_addr+38
30
1337160876
"11th EN data"
0
FF8080
Float
i_1st_w_en_addr+40
30
1337160877
"12th EN data"
0
FF8080
Float
i_1st_w_en_addr+48
30
1337160878
"13th EN data"
0
FF8080
Float
i_1st_w_en_addr+50
30
1337160879
"14th EN data"
0
FF8080
Float
i_1st_w_en_addr+58
30
1337160880
"15th EN data"
0
FF8080
Float
i_1st_w_en_addr+60
30
1337160881
"16th EN data"
0
FF8080
Float
i_1st_w_en_addr+68
30
1337160884
"17th EN data"
0
FF8080
Float
i_1st_w_en_addr+70
30
1337160885
"18th EN data"
0
FF8080
Float
i_1st_w_en_addr+78
30
1337160886
"19th EN data"
0
FF8080
Float
i_1st_w_en_addr+80
30
1337160887
"20th EN data"
0
FF8080
Float
i_1st_w_en_addr+88
30
1337160898
"21th EN data"
0
FF8080
Float
i_1st_w_en_addr+90
30
1337160899
"22th EN data"
0
FF8080
Float
i_1st_w_en_addr+98
30
1337160900
"23th EN data"
0
FF8080
Float
i_1st_w_en_addr+100
30
1337160901
"24th EN data"
0
FF8080
Float
i_1st_w_en_addr+108
30
1337160921
"Easy Pickpocket (~90%)"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-17
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_PICKPCOKET,Starfield.exe,C5 F8 2F D0 76 ?? C5 FA 11 45 57) // should be unique
alloc(newmem,$1000,INJECT_PICKPCOKET)
alloc(INJECT_PICKPCOKETo, 6)
label(code)
label(return)
INJECT_PICKPCOKETo:
readmem(INJECT_PICKPCOKET, 6)
newmem:
vmovss xmm2, [vf_100]
vmovss [rbp+57], xmm2
code:
vcomiss xmm2,xmm0
reassemble(INJECT_PICKPCOKET+4)
//jna Starfield.exe+1BB157C
jmp return
align 10 cc
vf_100:
dd (float)100
INJECT_PICKPCOKET:
jmp newmem
nop
return:
registersymbol(INJECT_PICKPCOKET)
registersymbol(INJECT_PICKPCOKETo)
[DISABLE]
INJECT_PICKPCOKET:
//db C5 F8 2F D0 76 07
readmem(INJECT_PICKPCOKETo, 6)
unregistersymbol(INJECT_PICKPCOKET)
dealloc(newmem)
unregistersymbol(INJECT_PICKPCOKETo)
dealloc(INJECT_PICKPCOKETo)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1BB101F
Starfield.exe+1BB0FEF: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB0FF4: 48 8D 45 57 - lea rax,[rbp+57]
Starfield.exe+1BB0FF8: 48 89 44 24 20 - mov [rsp+20],rax
Starfield.exe+1BB0FFD: 4C 8D 4D CF - lea r9,[rbp-31]
Starfield.exe+1BB1001: 4C 8D 45 DF - lea r8,[rbp-21]
Starfield.exe+1BB1005: 49 8B D6 - mov rdx,r14
Starfield.exe+1BB1008: B9 38 00 00 00 - mov ecx,00000038
Starfield.exe+1BB100D: E8 0A F7 F3 FF - call Starfield.exe+1AF071C
Starfield.exe+1BB1012: C5 FA 10 55 57 - vmovss xmm2,[rbp+57]
Starfield.exe+1BB1017: C5 FA 10 05 D9 A4 9A 03 - vmovss xmm0,[pickpocket_const]
// ---------- INJECTING HERE ----------
Starfield.exe+1BB101F: C5 F8 2F D0 - vcomiss xmm2,xmm0
// ---------- DONE INJECTING ----------
Starfield.exe+1BB1023: 76 07 - jna Starfield.exe+1BB102C
Starfield.exe+1BB1025: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB102A: EB 18 - jmp Starfield.exe+1BB1044
Starfield.exe+1BB102C: C5 FA 10 0D A4 A4 9A 03 - vmovss xmm1,[Starfield.exe+555B4D8]
Starfield.exe+1BB1034: C5 EA C2 C1 01 - vcmpltss xmm0,xmm2,xmm1
Starfield.exe+1BB1039: C4 E3 69 4A C1 00 - vblendvps xmm0,xmm2,xmm1,xmm0
Starfield.exe+1BB103F: C5 FA 11 45 57 - vmovss [rbp+57],xmm0
Starfield.exe+1BB1044: 48 8D 4D D7 - lea rcx,[rbp-29]
Starfield.exe+1BB1048: E8 AF 63 C8 FE - call Starfield.exe+8373FC
Starfield.exe+1BB104D: 90 - nop
}
1337160922
"You will be caught if not in stealth mode"
8000FF
1
1337160924
"Max pickpocket success rate (%)"
0
FF8080
Float
pickpocket_const
1337160915
"Enable stealth helper - step 1"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-17
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SET_STEA,Starfield.exe,41 88 46 6C 49 8B CF) // should be unique
alloc(newmem,$1000,INJECT_SET_STEA)
label(code)
label(return)
newmem:
mov al, 1
code:
mov [r14+6C],al
mov rcx,r15
jmp return
INJECT_SET_STEA:
jmp newmem
nop 2
return:
registersymbol(INJECT_SET_STEA)
[DISABLE]
INJECT_SET_STEA:
db 41 88 46 6C 49 8B CF
unregistersymbol(INJECT_SET_STEA)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24868C6
Starfield.exe+248689E: 48 8B 7D D8 - mov rdi,[rbp-28]
Starfield.exe+24868A2: 48 8B 07 - mov rax,[rdi]
Starfield.exe+24868A5: 48 8B CF - mov rcx,rdi
Starfield.exe+24868A8: FF 90 30 06 00 00 - call qword ptr [rax+00000630]
Starfield.exe+24868AE: 41 88 46 6A - mov [r14+6A],al
Starfield.exe+24868B2: 48 8B CF - mov rcx,rdi
Starfield.exe+24868B5: E8 B6 36 01 00 - call Starfield.exe+2499F70
Starfield.exe+24868BA: 41 88 46 6B - mov [r14+6B],al
Starfield.exe+24868BE: 49 8B CF - mov rcx,r15
Starfield.exe+24868C1: E8 5A 37 01 00 - call Starfield.exe+249A020
// ---------- INJECTING HERE ----------
Starfield.exe+24868C6: 41 88 46 6C - mov [r14+6C],al
// ---------- DONE INJECTING ----------
Starfield.exe+24868CA: 49 8B CF - mov rcx,r15
Starfield.exe+24868CD: E8 A6 27 01 00 - call Starfield.exe+2499078
Starfield.exe+24868D2: 41 88 46 6D - mov [r14+6D],al
Starfield.exe+24868D6: 83 BD B8 03 00 00 04 - cmp dword ptr [rbp+000003B8],04
Starfield.exe+24868DD: 74 43 - je Starfield.exe+2486922
Starfield.exe+24868DF: 49 8B 87 60 02 00 00 - mov rax,[r15+00000260]
Starfield.exe+24868E6: 48 85 C0 - test rax,rax
Starfield.exe+24868E9: 74 37 - je Starfield.exe+2486922
Starfield.exe+24868EB: 48 8B 48 08 - mov rcx,[rax+08]
Starfield.exe+24868EF: 48 85 C9 - test rcx,rcx
}
1337160918
"Enable stealth helper - step 2"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-17
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_STEA_ALWAYS,Starfield.exe,C5 FA 11 43 60 C5 FA 10 05 ?? ?? ?? ?? C5 FA 11 43 5C) // should be unique
alloc(newmem,$1000,INJECT_STEA_ALWAYS)
label(code)
label(return)
newmem:
pushfq
cmp rsi, [player_ptr1]
jne code_pre
vmovss xmm0, [vf__num]
vmovss [rbx+60],xmm0
vmovss [rbx+60],xmm0
code_pre:
popfq
code:
vmovss [rbx+60],xmm0
jmp return+8 // bypass vmovss xmm0,[Starfield.exe+552B440]
align 10 cc
vf__num:
dd (float)-1000.0
INJECT_STEA_ALWAYS:
jmp newmem
return:
registersymbol(INJECT_STEA_ALWAYS)
[DISABLE]
INJECT_STEA_ALWAYS:
db C5 FA 11 43 60
unregistersymbol(INJECT_STEA_ALWAYS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1BB0BB5
Starfield.exe+1BB0B83: C5 D8 57 E4 - vxorps xmm4,xmm4,xmm4
Starfield.exe+1BB0B87: C5 9A 59 15 11 8A 98 03 - vmulss xmm2,xmm12,[Starfield.exe+55395A0]
Starfield.exe+1BB0B8F: C4 C1 3A 58 C9 - vaddss xmm1,xmm8,xmm9
Starfield.exe+1BB0B94: C5 EA 59 D1 - vmulss xmm2,xmm2,xmm1
Starfield.exe+1BB0B98: C5 EA 5C DB - vsubss xmm3,xmm2,xmm3
Starfield.exe+1BB0B9C: C5 DA 58 C7 - vaddss xmm0,xmm4,xmm7
Starfield.exe+1BB0BA0: C5 E2 59 E0 - vmulss xmm4,xmm3,xmm0
Starfield.exe+1BB0BA4: C5 AA 59 0D 68 E1 BE 02 - vmulss xmm1,xmm10,[Starfield.exe+479ED14]
Starfield.exe+1BB0BAC: C5 DA 59 D1 - vmulss xmm2,xmm4,xmm1
Starfield.exe+1BB0BB0: C5 EA 58 43 60 - vaddss xmm0,xmm2,[rbx+60]
// ---------- INJECTING HERE ----------
Starfield.exe+1BB0BB5: C5 FA 11 43 60 - vmovss [rbx+60],xmm0
// ---------- DONE INJECTING ----------
Starfield.exe+1BB0BBA: C5 FA 10 05 7E 88 98 03 - vmovss xmm0,[Starfield.exe+5539440]
Starfield.exe+1BB0BC2: C5 FA 11 43 5C - vmovss [rbx+5C],xmm0
Starfield.exe+1BB0BC7: 80 7B 64 00 - cmp byte ptr [rbx+64],00
Starfield.exe+1BB0BCB: 0F 84 B6 01 00 00 - je Starfield.exe+1BB0D87
Starfield.exe+1BB0BD1: 80 7B 68 00 - cmp byte ptr [rbx+68],00
Starfield.exe+1BB0BD5: 0F 85 AC 01 00 00 - jne Starfield.exe+1BB0D87
Starfield.exe+1BB0BDB: C5 FA 10 4B 1C - vmovss xmm1,[rbx+1C]
Starfield.exe+1BB0BE0: C5 F2 5C 43 34 - vsubss xmm0,xmm1,[rbx+34]
Starfield.exe+1BB0BE5: C5 FA 5E D1 - vdivss xmm2,xmm0,xmm1
Starfield.exe+1BB0BE9: C5 EA 5F C6 - vmaxss xmm0,xmm2,xmm6
}
1337160905
"Carry item weight multiplier"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-07
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_WEIGHT_MULTI,Starfield.exe,08 C5 FA 58 47 08) // should be unique
alloc(newmem,$1000,INJECT_WEIGHT_MULTI)
label(code)
label(return)
label(vf_weight_multi)
newmem:
//vmovss xmm15, [rdi+08]
vmovss xmm14, [vf_weight_multi]
vmulss xmm0, xmm14, xmm0
//vmovss [rdi+08], xmm15
//vaddss xmm0, xmm0, xmm15
//vxorps xmm0, xmm0, xmm0
code:
vaddss xmm0,xmm0,[rdi+08]
jmp return
align 10 cc
vf_weight_multi:
dd (float)0.1
INJECT_WEIGHT_MULTI+01:
jmp newmem
return:
registersymbol(INJECT_WEIGHT_MULTI)
registersymbol(vf_weight_multi)
[DISABLE]
INJECT_WEIGHT_MULTI+01:
db C5 FA 58 47 08
unregistersymbol(INJECT_WEIGHT_MULTI)
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+1535E31
Starfield.exe+1535E0A: E8 8D 70 31 FF - call Starfield.exe+84CE9C
Starfield.exe+1535E0F: 48 8D 54 24 40 - lea rdx,[rsp+40]
Starfield.exe+1535E14: E8 DB 08 D9 FF - call Starfield.exe+12C66F4
Starfield.exe+1535E19: 48 8B 5C 24 30 - mov rbx,[rsp+30]
Starfield.exe+1535E1E: 48 3B 5C 24 40 - cmp rbx,[rsp+40]
Starfield.exe+1535E23: 74 1C - je Starfield.exe+1535E41
Starfield.exe+1535E25: 48 8B 07 - mov rax,[rdi]
Starfield.exe+1535E28: 48 8B D3 - mov rdx,rbx
Starfield.exe+1535E2B: 48 8B CF - mov rcx,rdi
Starfield.exe+1535E2E: FF 50 08 - call qword ptr [rax+08]
// ---------- INJECTING HERE ----------
Starfield.exe+1535E31: C5 FA 58 47 08 - vaddss xmm0,xmm0,[rdi+08]
// ---------- DONE INJECTING ----------
Starfield.exe+1535E36: C5 FA 11 47 08 - vmovss [rdi+08],xmm0
Starfield.exe+1535E3B: 48 83 C3 28 - add rbx,28
Starfield.exe+1535E3F: EB DD - jmp Starfield.exe+1535E1E
Starfield.exe+1535E41: 48 8B 5C 24 38 - mov rbx,[rsp+38]
Starfield.exe+1535E46: B8 01 00 00 00 - mov eax,00000001
Starfield.exe+1535E4B: 48 83 C4 20 - add rsp,20
Starfield.exe+1535E4F: 5F - pop rdi
Starfield.exe+1535E50: C3 - ret
Starfield.exe+1535E51: CC - int 3
Starfield.exe+1535E52: CC - int 3
}
1337160896
"Usage: Pick up / drop item"
8000FF
1
1337160908
"You may become overweight if this script doesn't work in future versions!!"
8000FF
1
1337160906
"multiplier"
0
C08000
Float
vf_weight_multi
1337160913
"Manufacturing/ Research Lab: submit one item to fill stock# to nn"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-09-16
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_LAB_SUMBIT_ITEM,Starfield.exe,03 48 08 48 83 C0 10 EB F2 44 03 C9 49 83 C0 28 EB 9E) // should be unique
alloc(newmem,$1000,INJECT_LAB_SUMBIT_ITEM)
label(code)
label(return)
label(vf_m_fill_to_number)
label(vf_m_ignore_number)
newmem:
mov ecx, [rax+08]
cmp ecx, [vf_m_ignore_number]
jae code
cmp ecx, [vf_m_fill_to_number]
jae code
mov ecx, [vf_m_fill_to_number]
mov [rax+08], ecx
code:
add ecx,[rax+08]
//mov ecx, 14
add rax,10
jmp return
align 10 cc
vf_m_fill_to_number:
dd #15
vf_m_ignore_number:
dd #101
INJECT_LAB_SUMBIT_ITEM:
jmp newmem
nop 2
return:
registersymbol(INJECT_LAB_SUMBIT_ITEM)
registersymbol(vf_m_fill_to_number)
registersymbol(vf_m_ignore_number)
[DISABLE]
INJECT_LAB_SUMBIT_ITEM:
db 03 48 08 48 83 C0 10
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+19C61E5
Starfield.exe+19C61CB: 75 06 - jne Starfield.exe+19C61D3
Starfield.exe+19C61CD: 33 C0 - xor eax,eax
Starfield.exe+19C61CF: 33 D2 - xor edx,edx
Starfield.exe+19C61D1: EB 0D - jmp Starfield.exe+19C61E0
Starfield.exe+19C61D3: 49 8B 00 - mov rax,[r8]
Starfield.exe+19C61D6: 48 C1 E2 04 - shl rdx,04
Starfield.exe+19C61DA: 48 03 D0 - add rdx,rax
Starfield.exe+19C61DD: 0F 1F 00 - nop dword ptr [rax]
Starfield.exe+19C61E0: 48 3B C2 - cmp rax,rdx
Starfield.exe+19C61E3: 74 09 - je Starfield.exe+19C61EE
// ---------- INJECTING HERE ----------
Starfield.exe+19C61E5: 03 48 08 - add ecx,[rax+08]
// ---------- DONE INJECTING ----------
Starfield.exe+19C61E8: 48 83 C0 10 - add rax,10
Starfield.exe+19C61EC: EB F2 - jmp Starfield.exe+19C61E0
Starfield.exe+19C61EE: 44 03 C9 - add r9d,ecx
Starfield.exe+19C61F1: 49 83 C0 28 - add r8,28
Starfield.exe+19C61F5: EB 9E - jmp Starfield.exe+19C6195
Starfield.exe+19C61F7: 41 8B C1 - mov eax,r9d
Starfield.exe+19C61FA: C3 - ret
Starfield.exe+19C61FB: CC - int 3
Starfield.exe+19C61FC: CC - int 3
Starfield.exe+19C61FD: CC - int 3
}
1337160914
"Only activate when absolutely necessary!"
8000FF
1
1337161066
"Fill # to:"
0
FF8080
4 Bytes
vf_m_fill_to_number
1337161067
"do not set when stock# >="
0
FF8080
4 Bytes
vf_m_ignore_number
1337161064
"Zero material during crafting"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-10-08
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_IGNORE_CRAFT_MAT,Starfield.exe,8B 72 10 C5 D0 57 ED) // should be unique
alloc(newmem,$1000,INJECT_IGNORE_CRAFT_MAT)
label(code)
label(return)
newmem:
code:
mov esi,[rdx+10]
// code
xor esi, esi
// code end
vxorps xmm5,xmm5,xmm5
jmp return
INJECT_IGNORE_CRAFT_MAT:
jmp newmem
nop 2
return:
registersymbol(INJECT_IGNORE_CRAFT_MAT)
[DISABLE]
INJECT_IGNORE_CRAFT_MAT:
db 8B 72 10 C5 D0 57 ED
unregistersymbol(INJECT_IGNORE_CRAFT_MAT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+18B5CA4
Starfield.exe+18B5C76: 48 81 EC C0 00 00 00 - sub rsp,000000C0
Starfield.exe+18B5C7D: C5 F8 29 70 B8 - vmovaps [rax-48],xmm6
Starfield.exe+18B5C82: C5 F8 29 78 A8 - vmovaps [rax-58],xmm7
Starfield.exe+18B5C87: C5 78 29 40 98 - vmovaps [rax-68],xmm8
Starfield.exe+18B5C8C: C5 78 29 48 88 - vmovaps [rax-78],xmm9
Starfield.exe+18B5C91: 4C 8B E1 - mov r12,rcx
Starfield.exe+18B5C94: 4C 8B 32 - mov r14,[rdx]
Starfield.exe+18B5C97: 4C 89 75 7F - mov [rbp+7F],r14
Starfield.exe+18B5C9B: 4D 85 F6 - test r14,r14
Starfield.exe+18B5C9E: 0F 84 28 06 00 00 - je Starfield.exe+18B62CC
// ---------- INJECTING HERE ----------
Starfield.exe+18B5CA4: 8B 72 10 - mov esi,[rdx+10]
// ---------- DONE INJECTING ----------
Starfield.exe+18B5CA7: C5 D0 57 ED - vxorps xmm5,xmm5,xmm5
Starfield.exe+18B5CAB: C4 E1 D2 2A EE - vcvtsi2ss xmm5,rbp,rsi
Starfield.exe+18B5CB0: 48 8B 5A 08 - mov rbx,[rdx+08]
Starfield.exe+18B5CB4: 48 85 DB - test rbx,rbx
Starfield.exe+18B5CB7: 0F 84 46 01 00 00 - je Starfield.exe+18B5E03
Starfield.exe+18B5CBD: 0F B6 4B 71 - movzx ecx,byte ptr [rbx+71]
Starfield.exe+18B5CC1: 85 C9 - test ecx,ecx
Starfield.exe+18B5CC3: 0F 84 AC 00 00 00 - je Starfield.exe+18B5D75
Starfield.exe+18B5CC9: 83 E9 01 - sub ecx,01
Starfield.exe+18B5CCC: 74 2F - je Starfield.exe+18B5CFD
}
1337161068
"XP Multiplier"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-10-09
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_XP_MULTI,Starfield.exe,C4 E3 71 4A C4 00 C5 FA 11 45 ?? 45) // should be unique
alloc(newmem,$1000,INJECT_XP_MULTI)
label(code)
label(return)
label(vf_xp_multi)
newmem:
code:
vblendvps xmm0,xmm1,xmm4,xmm0
// code start
vmovss xmm15, [vf_xp_multi]
vmulss xmm0, xmm0, xmm15
// code end
jmp return
align 10 cc
vf_xp_multi:
dd (float)3.33333333
INJECT_XP_MULTI:
jmp newmem
nop
return:
registersymbol(INJECT_XP_MULTI)
registersymbol(vf_xp_multi)
[DISABLE]
INJECT_XP_MULTI:
db C4 E3 71 4A C4 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+24ADBB3
Starfield.exe+24ADB76: 0F 85 9B 00 00 00 - jne Starfield.exe+24ADC17
Starfield.exe+24ADB7C: E8 CF 6C 37 FE - call Starfield.exe+824850
Starfield.exe+24ADB81: 48 8B 90 30 01 00 00 - mov rdx,[rax+00000130]
Starfield.exe+24ADB88: 48 8D 4E 70 - lea rcx,[rsi+70]
Starfield.exe+24ADB8C: E8 0B 20 72 FF - call Starfield.exe+1BCFB9C
Starfield.exe+24ADB91: C5 FA 59 05 9F 0C 09 03 - vmulss xmm0,xmm0,[Starfield.exe+553E838]
Starfield.exe+24ADB99: C5 FA 58 1D 77 0C 09 03 - vaddss xmm3,xmm0,[Starfield.exe+553E818]
Starfield.exe+24ADBA1: C5 E2 59 65 28 - vmulss xmm4,xmm3,[rbp+28]
Starfield.exe+24ADBA6: C5 FA 10 0D 36 DD A7 01 - vmovss xmm1,[Starfield.exe+3F2B8E4]
Starfield.exe+24ADBAE: C5 F2 C2 C4 01 - vcmpltss xmm0,xmm1,xmm4
// ---------- INJECTING HERE ----------
Starfield.exe+24ADBB3: C4 E3 71 4A C4 00 - vblendvps xmm0,xmm1,xmm4,xmm0
// ---------- DONE INJECTING ----------
Starfield.exe+24ADBB9: C5 FA 11 45 28 - vmovss [rbp+28],xmm0
Starfield.exe+24ADBBE: 45 33 C0 - xor r8d,r8d
Starfield.exe+24ADBC1: 48 8B 55 48 - mov rdx,[rbp+48]
Starfield.exe+24ADBC5: 48 8D 4D E0 - lea rcx,[rbp-20]
Starfield.exe+24ADBC9: E8 32 73 41 FF - call Starfield.exe+18C4F00
Starfield.exe+24ADBCE: 90 - nop
Starfield.exe+24ADBCF: 45 33 C0 - xor r8d,r8d
Starfield.exe+24ADBD2: 48 8B 55 50 - mov rdx,[rbp+50]
Starfield.exe+24ADBD6: 48 8D 4D D0 - lea rcx,[rbp-30]
Starfield.exe+24ADBDA: E8 15 65 46 FF - call Starfield.exe+19140F4
}
1337161069
"multiplier"
0
FF8080
Float
vf_xp_multi
1337161070
"Get game statistics"
Auto Assembler Script
{ Game : Starfield.exe
Version:
Date : 2023-10-14
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_SOME_STATS,Starfield.exe,F3 FF FF 8B 48 10 41 89 0B) // should be unique
alloc(newmem,$1000,INJECT_GET_SOME_STATS)
label(code)
label(return)
label(i_base_stats_addr)
newmem:
pushfq
push r15
push r14
push r13
xor r14, r14
mov r15, i_base_stats_addr
loop1:
lea r13, [r15+r14d*8]
cmp [r13], rax
je endp
cmp qword ptr [r13], 0
jne mov_next
write_empty_slot:
mov [r13], rax
jmp endp
mov_next:
inc r14d
cmp r14d, #88
jae endp
jmp loop1
endp:
pop r13
pop r14
pop r15
popfq
code:
mov ecx,[rax+10]
mov [r11],ecx
jmp return
align 10 cc
i_base_stats_addr:
dq 0
align 100 0
db 0
align 100 0
db 0
align 100 0
db 0
align 100 0
db 0
INJECT_GET_SOME_STATS+03:
jmp newmem
nop
return:
registersymbol(INJECT_GET_SOME_STATS)
registersymbol(i_base_stats_addr)
[DISABLE]
INJECT_GET_SOME_STATS+03:
db 8B 48 10 41 89 0B
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Starfield.exe+155B7DA
Starfield.exe+155B7B8: 41 8B D0 - mov edx,r8d
Starfield.exe+155B7BB: E8 70 F3 FF FF - call Starfield.exe+155AB30
Starfield.exe+155B7C0: 48 8B C8 - mov rcx,rax
Starfield.exe+155B7C3: 48 8B D3 - mov rdx,rbx
Starfield.exe+155B7C6: E8 E5 1E 01 FF - call Starfield.exe+56D6B0
Starfield.exe+155B7CB: 44 8A C8 - mov r9b,al
Starfield.exe+155B7CE: 84 C0 - test al,al
Starfield.exe+155B7D0: 74 15 - je Starfield.exe+155B7E7
Starfield.exe+155B7D2: 41 8B D0 - mov edx,r8d
Starfield.exe+155B7D5: E8 56 F3 FF FF - call Starfield.exe+155AB30
// ---------- INJECTING HERE ----------
Starfield.exe+155B7DA: 8B 48 10 - mov ecx,[rax+10]
// ---------- DONE INJECTING ----------
Starfield.exe+155B7DD: 41 89 0B - mov [r11],ecx
Starfield.exe+155B7E0: 44 8B 15 81 0F F9 03 - mov r10d,[Starfield.exe+54EC768]
Starfield.exe+155B7E7: 41 FF C0 - inc r8d
Starfield.exe+155B7EA: 45 3B C2 - cmp r8d,r10d
Starfield.exe+155B7ED: 72 C4 - jb Starfield.exe+155B7B3
Starfield.exe+155B7EF: 41 8A C1 - mov al,r9b
Starfield.exe+155B7F2: 48 83 C4 20 - add rsp,20
Starfield.exe+155B7F6: 5B - pop rbx
Starfield.exe+155B7F7: C3 - ret
Starfield.exe+155B7F8: 40 53 - push rbx
}
1337161073
"Open char stats menu"
8000FF
1
1337161076
"#001"
1
1337161074
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr
18
0
1337161075
"Value"
0
FF8080
4 Bytes
i_base_stats_addr
10
1337161077
"#002"
1
1337161078
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+8
18
0
1337161079
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+8
10
1337161080
"#003"
1
1337161081
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+10
18
0
1337161082
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+10
10
1337161083
"#004"
1
1337161084
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+18
18
0
1337161085
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+18
10
1337161086
"#005"
1
1337161087
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+20
18
0
1337161088
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+20
10
1337161089
"#006"
1
1337161090
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+28
18
0
1337161091
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+28
10
1337161092
"#007"
1
1337161093
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+30
18
0
1337161094
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+30
10
1337161095
"#008"
1
1337161096
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+38
18
0
1337161097
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+38
10
1337161098
"#009"
1
1337161099
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+40
18
0
1337161100
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+40
10
1337161101
"#010"
1
1337161102
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+48
18
0
1337161103
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+48
10
1337161314
"#011"
1
1337161315
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+50
18
0
1337161316
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+50
10
1337161317
"#012"
1
1337161318
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+58
18
0
1337161319
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+58
10
1337161320
"#013"
1
1337161321
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+60
18
0
1337161322
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+60
10
1337161323
"#014"
1
1337161324
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+68
18
0
1337161325
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+68
10
1337161326
"#015"
1
1337161327
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+70
18
0
1337161328
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+70
10
1337161329
"#016"
1
1337161330
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+78
18
0
1337161331
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+78
10
1337161332
"#017"
1
1337161333
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+80
18
0
1337161334
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+80
10
1337161335
"#018"
1
1337161336
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+88
18
0
1337161337
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+88
10
1337161338
"#019"
1
1337161339
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+90
18
0
1337161340
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+90
10
1337161341
"#020"
1
1337161342
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+98
18
0
1337161343
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+98
10
1337161284
"#021"
1
1337161285
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+A0
18
0
1337161286
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+A0
10
1337161287
"#022"
1
1337161288
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+A8
18
0
1337161289
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+A8
10
1337161290
"#023"
1
1337161291
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+B0
18
0
1337161292
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+B0
10
1337161293
"#024"
1
1337161294
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+B8
18
0
1337161295
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+B8
10
1337161296
"#025"
1
1337161297
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+C0
18
0
1337161298
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+C0
10
1337161299
"#026"
1
1337161300
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+C8
18
0
1337161301
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+C8
10
1337161302
"#027"
1
1337161303
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+D0
18
0
1337161304
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+D0
10
1337161305
"#028"
1
1337161306
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+D8
18
0
1337161307
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+D8
10
1337161308
"#029"
1
1337161309
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+E0
18
0
1337161310
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+E0
10
1337161311
"#030"
1
1337161312
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+E8
18
0
1337161313
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+E8
10
1337161254
"#031"
1
1337161255
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+F0
18
0
1337161256
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+F0
10
1337161257
"#032"
1
1337161258
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+F8
18
0
1337161259
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+F8
10
1337161260
"#033"
1
1337161261
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+100
18
0
1337161262
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+100
10
1337161263
"#034"
1
1337161264
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+108
18
0
1337161265
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+108
10
1337161266
"#035"
1
1337161267
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+110
18
0
1337161268
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+110
10
1337161269
"#036"
1
1337161270
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+118
18
0
1337161271
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+118
10
1337161272
"#037"
1
1337161273
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+120
18
0
1337161274
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+120
10
1337161275
"#038"
1
1337161276
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+128
18
0
1337161277
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+128
10
1337161278
"#039"
1
1337161279
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+130
18
0
1337161280
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+130
10
1337161281
"#040"
1
1337161282
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+138
18
0
1337161283
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+138
10
1337161224
"#041"
1
1337161225
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+140
18
0
1337161226
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+140
10
1337161227
"#042"
1
1337161228
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+148
18
0
1337161229
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+148
10
1337161230
"#043"
1
1337161231
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+150
18
0
1337161232
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+150
10
1337161233
"#044"
1
1337161234
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+158
18
0
1337161235
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+158
10
1337161236
"#045"
1
1337161237
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+160
18
0
1337161238
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+160
10
1337161239
"#046"
1
1337161240
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+168
18
0
1337161241
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+168
10
1337161242
"#047"
1
1337161243
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+170
18
0
1337161244
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+170
10
1337161245
"#048"
1
1337161246
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+178
18
0
1337161247
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+178
10
1337161248
"#049"
1
1337161249
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+180
18
0
1337161250
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+180
10
1337161251
"#050"
1
1337161252
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+188
18
0
1337161253
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+188
10
1337161194
"#051"
1
1337161195
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+190
18
0
1337161196
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+190
10
1337161197
"#052"
1
1337161198
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+198
18
0
1337161199
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+198
10
1337161200
"#053"
1
1337161201
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1A0
18
0
1337161202
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1A0
10
1337161203
"#054"
1
1337161204
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1A8
18
0
1337161205
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1A8
10
1337161206
"#055"
1
1337161207
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1B0
18
0
1337161208
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1B0
10
1337161209
"#056"
1
1337161210
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1B8
18
0
1337161211
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1B8
10
1337161212
"#057"
1
1337161213
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1C0
18
0
1337161214
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1C0
10
1337161215
"#058"
1
1337161216
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1C8
18
0
1337161217
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1C8
10
1337161218
"#059"
1
1337161219
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1D0
18
0
1337161220
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1D0
10
1337161221
"#060"
1
1337161222
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1D8
18
0
1337161223
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1D8
10
1337161164
"#061"
1
1337161165
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1E0
18
0
1337161166
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1E0
10
1337161167
"#062"
1
1337161168
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1E8
18
0
1337161169
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1E8
10
1337161170
"#063"
1
1337161171
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1F0
18
0
1337161172
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1F0
10
1337161173
"#064"
1
1337161174
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+1F8
18
0
1337161175
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+1F8
10
1337161176
"#065"
1
1337161177
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+200
18
0
1337161178
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+200
10
1337161179
"#066"
1
1337161180
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+208
18
0
1337161181
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+208
10
1337161182
"#067"
1
1337161183
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+210
18
0
1337161184
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+210
10
1337161185
"#068"
1
1337161186
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+218
18
0
1337161187
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+218
10
1337161188
"#069"
1
1337161189
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+220
18
0
1337161190
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+220
10
1337161191
"#070"
1
1337161192
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+228
18
0
1337161193
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+228
10
1337161134
"#071"
1
1337161135
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+230
18
0
1337161136
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+230
10
1337161137
"#072"
1
1337161138
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+238
18
0
1337161139
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+238
10
1337161140
"#073"
1
1337161141
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+240
18
0
1337161142
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+240
10
1337161143
"#074"
1
1337161144
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+248
18
0
1337161145
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+248
10
1337161146
"#075"
1
1337161147
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+250
18
0
1337161148
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+250
10
1337161149
"#076"
1
1337161150
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+258
18
0
1337161151
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+258
10
1337161152
"#077"
1
1337161153
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+260
18
0
1337161154
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+260
10
1337161155
"#078"
1
1337161156
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+268
18
0
1337161157
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+268
10
1337161158
"#079"
1
1337161159
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+270
18
0
1337161160
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+270
10
1337161161
"#080"
1
1337161162
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+278
18
0
1337161163
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+278
10
1337161104
"#081"
1
1337161105
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+280
18
0
1337161106
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+280
10
1337161107
"#082"
1
1337161108
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+288
18
0
1337161109
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+288
10
1337161110
"#083"
1
1337161111
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+290
18
0
1337161112
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+290
10
1337161113
"#084"
1
1337161114
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+298
18
0
1337161115
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+298
10
1337161116
"#085"
1
1337161117
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2A0
18
0
1337161118
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2A0
10
1337161119
"#086"
1
1337161120
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2A8
18
0
1337161121
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2A8
10
1337161122
"#087"
1
1337161123
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2B0
18
0
1337161124
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2B0
10
1337161125
"#088"
1
1337161126
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2B8
18
0
1337161127
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2B8
10
1337161128
"#089"
1
1337161129
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2C0
18
0
1337161130
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2C0
10
1337161131
"#090"
1
1337161132
"Description"
0
FF8080
String
40
0
0
1
i_base_stats_addr+2C8
18
0
1337161133
"Value"
0
FF8080
4 Bytes
i_base_stats_addr+2C8
10
1337160867
"Starfield (32E64ED5 V1.7.33.0) / https://opencheattables.com / CE 7.5+"
00A452
1
Player Character Ptr AOB:
48 3B 1D ?? ?? ?? ?? 75 1C 48 8B
48 8B 05 ?? ?? ?? ?? 48 3B D8 74 ?? 48 8B D7 48 8B CB
48 8B 05 ?? ?? ?? ?? 48 3B D8 74 ?? 48 8B D7
Weight total:
C5 FA 10 47 08 C5 FA 11 43 3C
Pickocket constant:
C5 FA 10 55 57 C5 FA 10 05 ?? ?? ?? ?? C5
--lua scripts that table checkbox will not be checked with "NO_ACTIVATE" in comment
function onMemRecPostExecute(memoryrecord, newState, succeeded )
if memoryrecord.Type == vtAutoAssembler and memoryrecord.Script:find("NO_ACTIVATE") and newState and succeeded then
memoryrecord.disableWithoutExecute()
end
end
--memory record IDs now allowed to be 'locked'
IDs = {1337160890, 9999998,
}
--determine event trigger sequence
function contains(table, val)
local i = 0
for i=1, #table do
if table[i] == val then
return true
end
end
return false
end
function onMemRecPreExecute(memoryrecord, newstate)
if contains(IDs, memoryrecord.ID) and newstate then
memoryrecord.OnActivate = function(memoryrecord, before, currentstate)
return false
end
end
end
function AOBScanModule(moduleName, signature, aobSignaturePrivileges, alignmentType, alignmentParam)
--checkArgType(moduleName, 1, 'string')
if not signature or not moduleName then return end
index = index or 1
local modStartAddr = getAddress(moduleName)
local modEndAddr = modStartAddr + getModuleSize(moduleName)
local ms = createMemScan()
if type(signature) == 'table' then
local sig = ''
for i, byte in ipairs(signature) do
sig = sig..string.format('%02X', byte)
end
signature = sig
end
ms.firstScan(soExactValue, vtByteArray, nil, signature, nil, modStartAddr, modEndAddr,
aobSignaturePrivileges, alignmentType, alignmentParam, true, true, false, false)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
ms.destroy()
return results
end
registerLuaFunctionHighlight('AOBScanModule')
AddressList.Header.OnSectionClick = nil