5
"Battle control"
Auto Assembler Script
{ Game : Romancing SaGa 2 RotS-Win64.exe
Version:
Date : 2024-10-27
Author : bbfox@https://openchattables.com
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_HP,$process,45 89 BD B0 04 00 00) // should be unique
alloc(newmem,$1000,INJECT_BATTLE_HP)
label(code)
label(return)
label(is_keep_LP)
label(is_keep_BP)
label(is_min_HP)
label(i_min_HP)
label(is_keep_enemy_HP)
newmem:
cmp qword ptr [r13+304], 0
jne to_enemy
cmp qword ptr [r13+4B4], 1
je to_enemy
cmp dword ptr [is_keep_LP], 1
jne @F
push r15
mov r15d, [r13+5CC]
mov r14d, r15d
pop r15
@@:
cmp dword ptr [is_keep_BP], 1
jne @F
push r15
mov r15d, [r13+5D0]
mov rsi, r15d
pop r15
@@:
cmp dword ptr [is_min_HP], 1
jne code
cmp r15d, [i_min_HP]
jae code
mov r15d, [i_min_HP]
jmp code
to_enemy:
cmp dword ptr [is_keep_enemy_HP], 1
jne code
//cmp r15d, C8
//jae code
mov r15d, C8
code:
mov [r13+000004B0],r15d
jmp return
align 10 cc
is_keep_LP:
dd 1
is_keep_BP:
dd 1
is_min_HP:
dd 1
i_min_HP:
dd #1000
is_keep_enemy_HP:
dd 0
INJECT_BATTLE_HP:
jmp newmem
nop 2
return:
registersymbol(INJECT_BATTLE_HP)
registersymbol(is_keep_LP)
registersymbol(is_keep_BP)
registersymbol(is_min_HP)
registersymbol(i_min_HP)
registersymbol(is_keep_enemy_HP)
[DISABLE]
INJECT_BATTLE_HP:
db 45 89 BD B0 04 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Romancing SaGa 2 RotS-Win64.exe+13501C6
Romancing SaGa 2 RotS-Win64.exe+135018C: 4C 8B E9 - mov r13,rcx
Romancing SaGa 2 RotS-Win64.exe+135018F: 8B B1 B8 04 00 00 - mov esi,[rcx+000004B8]
Romancing SaGa 2 RotS-Win64.exe+1350195: 48 81 C1 B0 04 00 00 - add rcx,000004B0
Romancing SaGa 2 RotS-Win64.exe+135019C: E8 0F AB FF FF - call "Romancing SaGa 2 RotS-Win64.exe"+134ACB0
Romancing SaGa 2 RotS-Win64.exe+13501A1: 41 8B 9D C8 05 00 00 - mov ebx,[r13+000005C8]
Romancing SaGa 2 RotS-Win64.exe+13501A8: 49 8D 95 98 03 00 00 - lea rdx,[r13+00000398]
Romancing SaGa 2 RotS-Win64.exe+13501AF: 49 8D 8D C8 05 00 00 - lea rcx,[r13+000005C8]
Romancing SaGa 2 RotS-Win64.exe+13501B6: E8 F5 AA FF FF - call "Romancing SaGa 2 RotS-Win64.exe"+134ACB0
Romancing SaGa 2 RotS-Win64.exe+13501BB: 48 8D 4D 40 - lea rcx,[rbp+40]
Romancing SaGa 2 RotS-Win64.exe+13501BF: 41 89 9D C8 05 00 00 - mov [r13+000005C8],ebx
// ---------- INJECTING HERE ----------
Romancing SaGa 2 RotS-Win64.exe+13501C6: 45 89 BD B0 04 00 00 - mov [r13+000004B0],r15d
// ---------- DONE INJECTING ----------
Romancing SaGa 2 RotS-Win64.exe+13501CD: 45 89 B5 B4 04 00 00 - mov [r13+000004B4],r14d
Romancing SaGa 2 RotS-Win64.exe+13501D4: 41 89 B5 B8 04 00 00 - mov [r13+000004B8],esi
Romancing SaGa 2 RotS-Win64.exe+13501DB: E8 A0 A9 FF FF - call "Romancing SaGa 2 RotS-Win64.exe"+134AB80
Romancing SaGa 2 RotS-Win64.exe+13501E0: 49 8B CD - mov rcx,r13
Romancing SaGa 2 RotS-Win64.exe+13501E3: E8 E8 C4 FF FF - call "Romancing SaGa 2 RotS-Win64.exe"+134C6D0
Romancing SaGa 2 RotS-Win64.exe+13501E8: 4C 8D 4D 40 - lea r9,[rbp+40]
Romancing SaGa 2 RotS-Win64.exe+13501EC: 49 8B D5 - mov rdx,r13
Romancing SaGa 2 RotS-Win64.exe+13501EF: 4C 8D 85 F0 01 00 00 - lea r8,[rbp+000001F0]
Romancing SaGa 2 RotS-Win64.exe+13501F6: 48 8B C8 - mov rcx,rax
Romancing SaGa 2 RotS-Win64.exe+13501F9: E8 42 27 06 00 - call "Romancing SaGa 2 RotS-Win64.exe"+13B2940
}
6
"Keep LP?"
0:No
1:Yes
0
C08000
4 Bytes
is_keep_LP
7
"Keep BP?"
Keep LP?
0
C08000
4 Bytes
is_keep_BP
8
"Keep min. HP?"
Keep LP?
0
C08000
4 Bytes
is_min_HP
9
"min. HP"
0
C08000
4 Bytes
i_min_HP
19
"Try to keep enemy HP?"
Keep LP?
0
C08000
4 Bytes
is_keep_enemy_HP
11
"Get money"
Auto Assembler Script
{ Game : Romancing SaGa 2 RotS-Win64.exe
Version:
Date : 2024-10-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_MONEY,$process,CC CC CC CC 8B 41 78 C3 CC) // should be unique
alloc(newmem,$1000,INJECT_GET_MONEY)
label(code)
label(return)
label(i_base_mdata_addr)
newmem:
cmp qword ptr [i_base_mdata_addr], 0
jne code
mov [i_base_mdata_addr], rcx
code:
mov eax,[rcx+78]
ret
int 3
jmp return
align 10 cc
i_base_mdata_addr:
dq 0
INJECT_GET_MONEY+04:
jmp newmem
return:
registersymbol(INJECT_GET_MONEY)
registersymbol(i_base_mdata_addr)
[DISABLE]
INJECT_GET_MONEY+04:
db 8B 41 78 C3 CC
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Romancing SaGa 2 RotS-Win64.exe+151EA40
Romancing SaGa 2 RotS-Win64.exe+151EA36: C3 - ret
Romancing SaGa 2 RotS-Win64.exe+151EA37: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA38: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA39: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3A: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3B: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3C: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3D: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3E: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA3F: CC - int 3
// ---------- INJECTING HERE ----------
Romancing SaGa 2 RotS-Win64.exe+151EA40: 8B 41 78 - mov eax,[rcx+78]
// ---------- DONE INJECTING ----------
Romancing SaGa 2 RotS-Win64.exe+151EA43: C3 - ret
Romancing SaGa 2 RotS-Win64.exe+151EA44: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA45: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA46: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA47: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA48: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA49: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA4A: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA4B: CC - int 3
Romancing SaGa 2 RotS-Win64.exe+151EA4C: CC - int 3
}
12
"money"
0
FF8080
4 Bytes
i_base_mdata_addr
78
13
"Max money?"
0
FF8080
4 Bytes
i_base_mdata_addr
7C
14
"income?"
0
FF8080
4 Bytes
i_base_mdata_addr
80
26
"Battles total"
0
FF8080
4 Bytes
i_base_mdata_addr
64
27
"Battles win"
0
FF8080
4 Bytes
i_base_mdata_addr
68
28
"Battles lose"
0
FF8080
4 Bytes
i_base_mdata_addr
6C
29
"Battles flee"
0
FF8080
4 Bytes
i_base_mdata_addr
70
25
"Romancing SaGa 2: Revenge of the Seven / https://opencheattables.com / CE 7.5+"
1
24
"_not working"
1
16
"Browse item and set to watermark"
Auto Assembler Script
{ Game : Romancing SaGa 2 RotS-Win64.exe
Version:
Date : 2024-10-27
Author : bbfox@https://openchattables.com
}
[ENABLE]
aobscanmodule(INJECT_SET_ITEM_CNT,$process,49 63 46 18 48 8D 0C 40 4C 8D 3C) // should be unique
alloc(newmem,$1000,INJECT_SET_ITEM_CNT)
label(code)
label(return)
label(i_item_threshold)
label(i_item_set_to)
newmem:
pushfq
push r15
//mov r15d, [i_item_threshold]
//cmp [r14+18], r15d
//jb @F
//mov r15d, [i_item_set_to]
//cmp [r14+18], r15d
//jae @F
mov r15d, [r14+1C]
mov [r14+18], r15d
@@:
pop r15
popfq
code:
movsxd rax,dword ptr [r14+18]
lea rcx,[rax+rax*2]
jmp return
align 10 cc
i_item_threshold:
dd 2
i_item_set_to:
dd 9
INJECT_SET_ITEM_CNT:
jmp newmem
nop 3
return:
registersymbol(INJECT_SET_ITEM_CNT)
registersymbol(i_item_threshold)
registersymbol(i_item_set_to)
[DISABLE]
INJECT_SET_ITEM_CNT:
db 49 63 46 18 48 8D 0C 40
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Romancing SaGa 2 RotS-Win64.exe+1446694
Romancing SaGa 2 RotS-Win64.exe+144666A: 4C 63 67 18 - movsxd r12,dword ptr [rdi+18]
Romancing SaGa 2 RotS-Win64.exe+144666E: 49 C1 E4 05 - shl r12,05
Romancing SaGa 2 RotS-Win64.exe+1446672: 4D 03 E6 - add r12,r14
Romancing SaGa 2 RotS-Win64.exe+1446675: 4D 3B F4 - cmp r14,r12
Romancing SaGa 2 RotS-Win64.exe+1446678: 74 77 - je "Romancing SaGa 2 RotS-Win64.exe"+14466F1
Romancing SaGa 2 RotS-Win64.exe+144667A: 48 89 6C 24 40 - mov [rsp+40],rbp
Romancing SaGa 2 RotS-Win64.exe+144667F: 4C 89 7C 24 48 - mov [rsp+48],r15
Romancing SaGa 2 RotS-Win64.exe+1446684: 0F 1F 40 00 - nop dword ptr [rax+00]
Romancing SaGa 2 RotS-Win64.exe+1446688: 0F 1F 84 00 00 00 00 00 - nop dword ptr [rax+rax+00000000]
Romancing SaGa 2 RotS-Win64.exe+1446690: 49 8B 7E 10 - mov rdi,[r14+10]
// ---------- INJECTING HERE ----------
Romancing SaGa 2 RotS-Win64.exe+1446694: 49 63 46 18 - movsxd rax,dword ptr [r14+18]
// ---------- DONE INJECTING ----------
Romancing SaGa 2 RotS-Win64.exe+1446698: 48 8D 0C 40 - lea rcx,[rax+rax*2]
Romancing SaGa 2 RotS-Win64.exe+144669C: 4C 8D 3C 8F - lea r15,[rdi+rcx*4]
Romancing SaGa 2 RotS-Win64.exe+14466A0: 49 3B FF - cmp rdi,r15
Romancing SaGa 2 RotS-Win64.exe+14466A3: 74 39 - je "Romancing SaGa 2 RotS-Win64.exe"+14466DE
Romancing SaGa 2 RotS-Win64.exe+14466A5: 48 39 1F - cmp [rdi],rbx
Romancing SaGa 2 RotS-Win64.exe+14466A8: 75 2B - jne "Romancing SaGa 2 RotS-Win64.exe"+14466D5
Romancing SaGa 2 RotS-Win64.exe+14466AA: 48 63 6E 08 - movsxd rbp,dword ptr [rsi+08]
Romancing SaGa 2 RotS-Win64.exe+14466AE: 8D 45 01 - lea eax,[rbp+01]
Romancing SaGa 2 RotS-Win64.exe+14466B1: 89 46 08 - mov [rsi+08],eax
Romancing SaGa 2 RotS-Win64.exe+14466B4: 3B 46 0C - cmp eax,[rsi+0C]
}
17
"Item # must >="
0
C08000
4 Bytes
i_item_threshold
18
"Set # to:"
0
C08000
4 Bytes
i_item_set_to
21
"Sell 1 item and set item #"
Auto Assembler Script
{ Game : Romancing SaGa 2 RotS-Win64.exe
Version:
Date : 2024-10-27
Author : bbfox2https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SELL_ITEM_SET_CNT,$process,39 5F 18 0F 8E 7E 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_SELL_ITEM_SET_CNT)
label(code)
label(return)
label(i_set_item_cnt_to)
newmem:
push r15
mov r15d, [i_set_item_cnt_to]
cmp [rdi+18], r15d
jae @F
mov [rdi+18], r15d
mov [rdi+1C], r15d
@@:
pop r15
code:
cmp [rdi+18],ebx
//jng "Romancing SaGa 2 RotS-Win64.exe"+1447970
reassemble(INJECT_SELL_ITEM_SET_CNT+3)
jmp return
align 10 cc
i_set_item_cnt_to:
dd 10
INJECT_SELL_ITEM_SET_CNT:
jmp newmem
nop 4
return:
registersymbol(INJECT_SELL_ITEM_SET_CNT)
registersymbol(i_set_item_cnt_to)
[DISABLE]
INJECT_SELL_ITEM_SET_CNT:
db 39 5F 18 0F 8E 7E 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Romancing SaGa 2 RotS-Win64.exe+14478E9
Romancing SaGa 2 RotS-Win64.exe+14478C6: 4C 8D 61 10 - lea r12,[rcx+10]
Romancing SaGa 2 RotS-Win64.exe+14478CA: 66 0F 1F 44 00 00 - nop word ptr [rax+rax+00]
Romancing SaGa 2 RotS-Win64.exe+14478D0: 48 39 17 - cmp [rdi],rdx
Romancing SaGa 2 RotS-Win64.exe+14478D3: 74 14 - je "Romancing SaGa 2 RotS-Win64.exe"+14478E9
Romancing SaGa 2 RotS-Win64.exe+14478D5: 41 FF C6 - inc r14d
Romancing SaGa 2 RotS-Win64.exe+14478D8: 48 FF C0 - inc rax
Romancing SaGa 2 RotS-Win64.exe+14478DB: 48 83 C7 20 - add rdi,20
Romancing SaGa 2 RotS-Win64.exe+14478DF: 49 3B C1 - cmp rax,r9
Romancing SaGa 2 RotS-Win64.exe+14478E2: 7C EC - jl "Romancing SaGa 2 RotS-Win64.exe"+14478D0
Romancing SaGa 2 RotS-Win64.exe+14478E4: E9 05 01 00 00 - jmp "Romancing SaGa 2 RotS-Win64.exe"+14479EE
// ---------- INJECTING HERE ----------
Romancing SaGa 2 RotS-Win64.exe+14478E9: 39 5F 18 - cmp [rdi+18],ebx
// ---------- DONE INJECTING ----------
Romancing SaGa 2 RotS-Win64.exe+14478EC: 0F 8E 7E 00 00 00 - jng "Romancing SaGa 2 RotS-Win64.exe"+1447970
Romancing SaGa 2 RotS-Win64.exe+14478F2: 48 89 6C 24 70 - mov [rsp+70],rbp
Romancing SaGa 2 RotS-Win64.exe+14478F7: 48 8B EB - mov rbp,rbx
Romancing SaGa 2 RotS-Win64.exe+14478FA: 66 0F 1F 44 00 00 - nop word ptr [rax+rax+00]
Romancing SaGa 2 RotS-Win64.exe+1447900: 4C 8B 4F 10 - mov r9,[rdi+10]
Romancing SaGa 2 RotS-Win64.exe+1447904: 49 83 3C 29 00 - cmp qword ptr [r9+rbp],00
Romancing SaGa 2 RotS-Win64.exe+1447909: 75 50 - jne "Romancing SaGa 2 RotS-Win64.exe"+144795B
Romancing SaGa 2 RotS-Win64.exe+144790B: 8B 4F 18 - mov ecx,[rdi+18]
Romancing SaGa 2 RotS-Win64.exe+144790E: 8B C1 - mov eax,ecx
Romancing SaGa 2 RotS-Win64.exe+1447910: 2B C3 - sub eax,ebx
}
23
"Warning: Do not use with any equippable item type"
8000FF
1
22
"Set # to"
0
C08000
4 Bytes
i_set_item_cnt_to
Code :mov rax,[rbx+20]
Romancing SaGa 2 RotS-Win64.exe+1B00CEF
4B
18
FF
14
C6
48
8B
43
20
80
38
04
75
D8