1
"Basic info (open menu)"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-20
Author :
}
[ENABLE]
aobscanmodule(INJECT_PARTY_WORK,GameAssembly.dll,8B 41 18 89 84 24 80 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_PARTY_WORK)
label(code)
label(return)
label(i_base_partywork_addr)
newmem:
// dissect:partyWork
lea rax, [rcx]
mov [i_base_partywork_addr], rax
code:
mov eax,[rcx+18]
mov [rsp+00000080],eax
jmp return
align 10 cc
i_base_partywork_addr:
dq 0
INJECT_PARTY_WORK:
jmp newmem
nop 5
return:
registersymbol(i_base_partywork_addr)
registersymbol(INJECT_PARTY_WORK)
[DISABLE]
INJECT_PARTY_WORK:
db 8B 41 18 89 84 24 80 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+F5D33F
GameAssembly.dll+F5D310: 48 8B D0 - mov rdx,rax
GameAssembly.dll+F5D313: 48 8B CB - mov rcx,rbx
GameAssembly.dll+F5D316: 41 FF 91 50 05 00 00 - call qword ptr [r9+00000550]
GameAssembly.dll+F5D31D: 49 8B 76 58 - mov rsi,[r14+58]
GameAssembly.dll+F5D321: E8 AA E9 CA FF - call GameAssembly.dll+C0BCD0
GameAssembly.dll+F5D326: 48 85 C0 - test rax,rax
GameAssembly.dll+F5D329: 0F 84 FC 01 00 00 - je GameAssembly.dll+F5D52B
GameAssembly.dll+F5D32F: 48 8B 88 18 03 00 00 - mov rcx,[rax+00000318]
GameAssembly.dll+F5D336: 48 85 C9 - test rcx,rcx
GameAssembly.dll+F5D339: 0F 84 EC 01 00 00 - je GameAssembly.dll+F5D52B
// ---------- INJECTING HERE ----------
GameAssembly.dll+F5D33F: 8B 41 18 - mov eax,[rcx+18]
// ---------- DONE INJECTING ----------
GameAssembly.dll+F5D342: 89 84 24 80 00 00 00 - mov [rsp+00000080],eax
GameAssembly.dll+F5D349: 48 8D 94 24 80 00 00 00 - lea rdx,[rsp+00000080]
GameAssembly.dll+F5D351: 48 8B 0D 50 C5 63 01 - mov rcx,[GameAssembly.dll+25998A8]
GameAssembly.dll+F5D358: E8 93 7E 24 FF - call GameAssembly.DllCanUnloadNow+E780
GameAssembly.dll+F5D35D: 48 8B 1D 9C 9D 63 01 - mov rbx,[GameAssembly.dll+2597100]
GameAssembly.dll+F5D364: 0F 57 C0 - xorps xmm0,xmm0
GameAssembly.dll+F5D367: 0F 11 44 24 20 - movups [rsp+20],xmm0
GameAssembly.dll+F5D36C: 0F 11 44 24 30 - movups [rsp+30],xmm0
GameAssembly.dll+F5D371: 48 8B D0 - mov rdx,rax
GameAssembly.dll+F5D374: 48 8D 4C 24 20 - lea rcx,[rsp+20]
}
2
"Base addr."
1
0
808080
8 Bytes
i_base_partywork_addr
3
"money"
0
4 Bytes
[i_base_partywork_addr]+18
4
"Name.Length"
0
4 Bytes
[i_base_partywork_addr]+20
10
5
"Name.Value"
0
String
128
1
0
1
[i_base_partywork_addr]+20
14
6
"PlayTimeHours"
0
4 Bytes
[i_base_partywork_addr]+100
7
"PlayTimeMinutes"
0
4 Bytes
[i_base_partywork_addr]+104
8
"PlayTimeSeconds"
0
Float
[i_base_partywork_addr]+108
30
"Get main data address (open menu=> item)"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-25
Author :
}
[ENABLE]
aobscanmodule(INJECT_GET_MAINGAME_ADDRESS,GameAssembly.dll,48 8B 80 18 03 00 00 48 85 C0 0F 84 92) // should be unique
alloc(newmem,$1000,INJECT_GET_MAINGAME_ADDRESS)
label(code)
label(return)
label(i_main_game_addr)
newmem:
mov [i_main_game_addr], rax
code:
mov rax,[rax+00000318]
jmp return
i_main_game_addr:
dq 0
INJECT_GET_MAINGAME_ADDRESS:
jmp newmem
nop 2
return:
registersymbol(i_main_game_addr)
registersymbol(INJECT_GET_MAINGAME_ADDRESS)
[DISABLE]
INJECT_GET_MAINGAME_ADDRESS:
db 48 8B 80 18 03 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+FAE09E
GameAssembly.dll+FAE06C: 0F 84 6A 01 00 00 - je GameAssembly.dll+FAE1DC
GameAssembly.dll+FAE072: 48 8B 0D 87 AA 5B 01 - mov rcx,[GameAssembly.dll+2568B00]
GameAssembly.dll+FAE079: F6 81 2F 01 00 00 02 - test byte ptr [rcx+0000012F],02
GameAssembly.dll+FAE080: 74 0E - je GameAssembly.dll+FAE090
GameAssembly.dll+FAE082: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+FAE089: 75 05 - jne GameAssembly.dll+FAE090
GameAssembly.dll+FAE08B: E8 B0 EB 1F FF - call GameAssembly.dll+1ACC40
GameAssembly.dll+FAE090: E8 3B DC C5 FF - call GameAssembly.dll+C0BCD0
GameAssembly.dll+FAE095: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE098: 0F 84 A2 01 00 00 - je GameAssembly.dll+FAE240
// ---------- INJECTING HERE ----------
GameAssembly.dll+FAE09E: 48 8B 80 18 03 00 00 - mov rax,[rax+00000318]
// ---------- DONE INJECTING ----------
GameAssembly.dll+FAE0A5: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE0A8: 0F 84 92 01 00 00 - je GameAssembly.dll+FAE240
GameAssembly.dll+FAE0AE: 48 8B 40 60 - mov rax,[rax+60]
GameAssembly.dll+FAE0B2: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE0B5: 0F 84 85 01 00 00 - je GameAssembly.dll+FAE240
GameAssembly.dll+FAE0BB: 3B 78 18 - cmp edi,[rax+18]
GameAssembly.dll+FAE0BE: 0F 83 A2 01 00 00 - jae GameAssembly.dll+FAE266
GameAssembly.dll+FAE0C4: 80 7C 58 21 00 - cmp byte ptr [rax+rbx*2+21],00
GameAssembly.dll+FAE0C9: 0F 86 0D 01 00 00 - jbe GameAssembly.dll+FAE1DC
GameAssembly.dll+FAE0CF: 48 8B 0D 2A AA 5B 01 - mov rcx,[GameAssembly.dll+2568B00]
}
31
"Base addr"
1
0
808080
8 Bytes
i_main_game_addr
51
"PARTY_ADDR"
1
142
"plaWork"
1
44
"Count"
0
4 Bytes
[i_main_game_addr]+1B0
18
10
50
"Char[0]"
1
32
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
20
10
33
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
20
10
34
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
20
10
35
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
20
10
36
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
20
10
37
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
20
10
38
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
20
10
39
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
20
10
40
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
20
10
41
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
20
10
42
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
20
10
43
"id"
0
Byte
[i_main_game_addr]+1B0
40
20
10
49
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
20
10
45
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
20
10
46
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
20
10
47
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
20
10
48
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
20
10
52
"Char[1]"
1
53
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
28
10
54
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
28
10
55
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
28
10
56
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
28
10
57
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
28
10
58
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
28
10
59
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
28
10
60
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
28
10
61
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
28
10
62
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
28
10
63
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
28
10
64
"id"
0
Byte
[i_main_game_addr]+1B0
40
28
10
65
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
28
10
66
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
28
10
67
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
28
10
68
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
28
10
69
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
28
10
70
"Char[2]"
1
71
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
30
10
72
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
30
10
73
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
30
10
74
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
30
10
75
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
30
10
76
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
30
10
77
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
30
10
78
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
30
10
79
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
30
10
80
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
30
10
81
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
30
10
82
"id"
0
Byte
[i_main_game_addr]+1B0
40
30
10
83
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
30
10
84
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
30
10
85
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
30
10
86
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
28
10
87
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
28
10
88
"Char[3]"
1
89
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
38
10
90
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
38
10
91
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
38
10
92
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
38
10
93
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
38
10
94
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
38
10
95
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
38
10
96
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
38
10
97
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
38
10
98
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
38
10
99
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
38
10
100
"id"
0
Byte
[i_main_game_addr]+1B0
40
38
10
101
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
38
10
102
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
38
10
103
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
38
10
104
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
38
10
105
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
38
10
106
"Char[4]"
1
107
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
40
10
108
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
40
10
109
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
40
10
110
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
40
10
111
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
40
10
112
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
40
10
113
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
40
10
114
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
40
10
115
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
40
10
116
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
40
10
117
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
40
10
118
"id"
0
Byte
[i_main_game_addr]+1B0
40
40
10
119
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
40
10
120
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
40
10
121
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
40
10
122
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
40
10
123
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
40
10
124
"Char[5]"
1
125
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
48
10
126
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
48
10
127
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
48
10
128
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
48
10
129
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
48
10
130
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
48
10
131
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
48
10
132
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
48
10
133
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
48
10
134
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
48
10
135
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
48
10
136
"id"
0
Byte
[i_main_game_addr]+1B0
40
48
10
137
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
48
10
138
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
48
10
139
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
48
10
140
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
48
10
141
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
48
10
147
"Char[6]"
1
148
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
50
10
149
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
50
10
150
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
50
10
151
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
50
10
152
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
50
10
153
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
50
10
154
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
50
10
155
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
50
10
156
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
50
10
157
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
50
10
158
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
50
10
159
"id"
0
Byte
[i_main_game_addr]+1B0
40
50
10
160
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
50
10
161
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
50
10
162
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
50
10
163
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
50
10
164
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
50
10
165
"Char[7]"
1
166
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
58
10
167
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
58
10
168
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
58
10
169
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
58
10
170
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
58
10
171
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
58
10
172
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
58
10
173
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
58
10
174
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
58
10
175
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
58
10
176
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
58
10
177
"id"
0
Byte
[i_main_game_addr]+1B0
40
58
10
178
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
58
10
179
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
58
10
180
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
58
10
181
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
58
10
182
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
58
10
183
"Char[8]"
1
184
"Name.Length"
0
4 Bytes
[i_main_game_addr]+1B0
10
138
60
10
185
"Name.Value"
0
String
128
1
0
1
[i_main_game_addr]+1B0
14
138
60
10
186
"hp"
0
4 Bytes
[i_main_game_addr]+1B0
28
60
10
187
"inithp"
0
4 Bytes
[i_main_game_addr]+1B0
2C
60
10
188
"maxhp"
0
4 Bytes
[i_main_game_addr]+1B0
30
60
10
189
"lp"
0
2 Bytes
[i_main_game_addr]+1B0
34
60
10
190
"maxlp"
0
2 Bytes
[i_main_game_addr]+1B0
36
60
10
191
"wp"
0
2 Bytes
[i_main_game_addr]+1B0
38
60
10
192
"maxwp"
0
2 Bytes
[i_main_game_addr]+1B0
3A
60
10
193
"mp"
0
2 Bytes
[i_main_game_addr]+1B0
3C
60
10
194
"maxmp"
0
2 Bytes
[i_main_game_addr]+1B0
3E
60
10
195
"id"
0
Byte
[i_main_game_addr]+1B0
40
60
10
196
"NotGrowCnt"
0
Byte
[i_main_game_addr]+1B0
41
60
10
197
"initResist"
0
Byte
[i_main_game_addr]+1B0
CA
60
10
198
"damageResist"
0
Byte
[i_main_game_addr]+1B0
CB
60
10
199
"staResAmp"
0
2 Bytes
[i_main_game_addr]+1B0
CC
60
10
200
"statusResist"
0
2 Bytes
[i_main_game_addr]+1B0
CE
60
10
10
"Battle: when get hit HP/WP/LP/JP (not god mode)"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-20
Author :
}
[ENABLE]
aobscanmodule(INJECT_INF_BATTLE_HPLPMP,GameAssembly.dll,89 4A 28 4C 8B 83 F8 02 00 00) // should be unique
alloc(newmem,$1000,INJECT_INF_BATTLE_HPLPMP)
label(code)
label(return)
label(i_base_battle_stat_addr)
label(is_hp_on)
label(is_mp_on)
label(is_lp_on)
label(is_wp_on)
label(is_faster_grow_on)
label(vf_hp_divide)
label(is_enemy_on)
label(vf_enemy_hp_mul)
label(i_last_hp)
newmem:
push rax
lea rax, [rdx]
mov [i_base_battle_stat_addr], rax
pop rax
mov [i_last_hp], ecx
check_start:
push rax
mov al, [rdx+128]
cmp al, 0
pop rax
je check_enemy
push rax
cmp dword ptr [is_hp_on], 0
jne check_hp
jmp check_lp
check_hp:
cmp dword ptr [is_hp_on], 1
jne check_hp2
mov ecx, [rdx+30]
//mov [rdx+28], ecx
mov r10d, 0
jmp check_lp
check_hp2:
cmp dword ptr [is_hp_on], 2
jne check_hp3
add ecx, r10d
cvtsi2ss xmm15, r10d
vmovss xmm14, [vf_hp_divide]
divss xmm15, xmm14
cvtss2si r10d, xmm15
sub ecx, r10d
//mov [rdx+28], ecx
jmp check_lp
check_hp3:
cmp dword ptr [is_hp_on], 3
jne check_lp
mov r10d, 1
mov ecx, [rdx+30]
dec ecx
//mov [rdx+28], ecx
check_lp:
cmp dword ptr [is_lp_on], 1
jne check_mp
mov ax, [rdx+36]
mov [rdx+34], ax
check_mp:
cmp dword ptr [is_mp_on], 1
jne check_wp
mov ax, [rdx+3E]
mov [rdx+3C], ax
check_wp:
cmp dword ptr [is_wp_on], 1
jne endp
mov ax, [rdx+3A]
mov [rdx+38], ax
endp:
pop rax
jmp code
check_enemy:
cmp dword ptr [is_enemy_on], 0
je code
push rax
mov al, [rdx+128]
cmp al, 0
pop rax
jne code
cmp dword ptr [is_enemy_on], 1
jne check_enemy2
mov ecx, [rdx+30]
mov [rdx+28], ecx
mov r10d, 0
jmp code
check_enemy2:
cmp dword ptr [is_enemy_on], 2
jne check_enemy3
add ecx, r10d
cvtsi2ss xmm15, r10d
vmovss xmm14, [vf_enemy_hp_mul]
mulss xmm15, xmm14
cvtss2si r10d, xmm15
sub ecx, r10d
jmp code
check_enemy3:
cmp dword ptr [is_enemy_on], 3
jne code
mov r15d, [rdx+30]
mov ecx, 0
code:
mov [rdx+28],ecx
mov r8,[rbx+000002F8]
jmp return
align 10 cc
i_base_battle_stat_addr:
dq 0
is_hp_on: // 0: Normal, 1:no dmg, 2:Divide, 3:1pt
dd 0
vf_hp_divide:
dd (float)1.5
is_wp_on:
dd 1
is_mp_on:
dd 1
is_lp_on:
dd 1
is_faster_grow_on:
dd 0
is_enemy_on: // 0: Normal, 1:no dmg, 2:multi, 3: 1hit
dd 0
vf_enemy_hp_mul:
dd (float)1.2
i_last_hp:
dd 0
INJECT_INF_BATTLE_HPLPMP:
jmp newmem
nop 5
return:
registersymbol(i_last_hp)
registersymbol(vf_hp_divide)
registersymbol(is_enemy_on)
registersymbol(vf_enemy_hp_mul)
registersymbol(is_wp_on)
registersymbol(is_hp_on)
registersymbol(is_mp_on)
registersymbol(is_lp_on)
registersymbol(i_base_battle_stat_addr)
registersymbol(INJECT_INF_BATTLE_HPLPMP)
[DISABLE]
INJECT_INF_BATTLE_HPLPMP:
db 89 4A 28 4C 8B 83 F8 02 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+C9FF1F
GameAssembly.dll+C9FEFF: 0F 86 73 03 00 00 - jbe GameAssembly.dll+CA0278
GameAssembly.dll+C9FF05: 8B 40 20 - mov eax,[rax+20]
GameAssembly.dll+C9FF08: 03 C8 - add ecx,eax
GameAssembly.dll+C9FF0A: 45 8B C3 - mov r8d,r11d
GameAssembly.dll+C9FF0D: 44 0F 49 C1 - cmovns r8d,ecx
GameAssembly.dll+C9FF11: 8B 4A 30 - mov ecx,[rdx+30]
GameAssembly.dll+C9FF14: 49 63 C0 - movsxd rax,r8d
GameAssembly.dll+C9FF17: 48 3B C1 - cmp rax,rcx
GameAssembly.dll+C9FF1A: 7F 03 - jg GameAssembly.dll+C9FF1F
GameAssembly.dll+C9FF1C: 41 8B C8 - mov ecx,r8d
// ---------- INJECTING HERE ----------
GameAssembly.dll+C9FF1F: 89 4A 28 - mov [rdx+28],ecx
// ---------- DONE INJECTING ----------
GameAssembly.dll+C9FF22: 4C 8B 83 F8 02 00 00 - mov r8,[rbx+000002F8]
GameAssembly.dll+C9FF29: 4D 85 C0 - test r8,r8
GameAssembly.dll+C9FF2C: 0F 84 00 03 00 00 - je GameAssembly.dll+CA0232
GameAssembly.dll+C9FF32: 45 39 58 28 - cmp [r8+28],r11d
GameAssembly.dll+C9FF36: 0F 85 B0 00 00 00 - jne GameAssembly.dll+C9FFEC
GameAssembly.dll+C9FF3C: 48 8B 8B D8 02 00 00 - mov rcx,[rbx+000002D8]
GameAssembly.dll+C9FF43: 48 85 C9 - test rcx,rcx
GameAssembly.dll+C9FF46: 0F 84 E6 02 00 00 - je GameAssembly.dll+CA0232
GameAssembly.dll+C9FF4C: 8B 81 80 00 00 00 - mov eax,[rcx+00000080]
GameAssembly.dll+C9FF52: 83 E0 0C - and eax,0C
}
11
"HP Option"
0:Normal
1:try to full
2:Divide by divisor
3:1pt
0
4 Bytes
is_hp_on
145
"Divisor"
0
Float
vf_hp_divide
16
"Recover WP?"
0:No
1:Yes
0
4 Bytes
is_wp_on
12
"Recover JP?"
Recover WP?
0
4 Bytes
is_mp_on
13
"Recover LP?"
Recover WP?
0
4 Bytes
is_lp_on
143
"Damage to monster"
0:Normal
1:try to full
2:by multiplier
3:1 hit
0
4 Bytes
is_enemy_on
144
"Damage multiplier"
0
Float
vf_enemy_hp_mul
146
"Last HP"
0
808080
4 Bytes
i_last_hp
201
"Last addr."
1
0
808080
8 Bytes
i_base_battle_stat_addr
15
"Faster grow"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-24
Author :
}
[ENABLE]
aobscanmodule(INJECT_FAST_GROW,GameAssembly.dll,4C 8B 4A 78 33 C0) // should be unique
alloc(newmem,$1000,INJECT_FAST_GROW)
label(code)
label(return)
newmem:
push rax
cmp byte ptr [rdx+143], 0
je endp
mov al, #255
mov byte ptr [rdx+143], al
endp:
pop rax
code:
mov r9,[rdx+78]
xor eax,eax
jmp return
INJECT_FAST_GROW:
jmp newmem
nop
return:
registersymbol(INJECT_FAST_GROW)
[DISABLE]
INJECT_FAST_GROW:
db 4C 8B 4A 78 33 C0
unregistersymbol(INJECT_FAST_GROW)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+C9D967
GameAssembly.dll+C9D94D: 74 14 - je GameAssembly.dll+C9D963
GameAssembly.dll+C9D94F: 85 C0 - test eax,eax
GameAssembly.dll+C9D951: 74 14 - je GameAssembly.dll+C9D967
GameAssembly.dll+C9D953: 48 8B 5C 24 30 - mov rbx,[rsp+30]
GameAssembly.dll+C9D958: 48 8B 74 24 38 - mov rsi,[rsp+38]
GameAssembly.dll+C9D95D: 48 83 C4 20 - add rsp,20
GameAssembly.dll+C9D961: 5F - pop rdi
GameAssembly.dll+C9D962: C3 - ret
GameAssembly.dll+C9D963: 85 C0 - test eax,eax
GameAssembly.dll+C9D965: 74 EC - je GameAssembly.dll+C9D953
// ---------- INJECTING HERE ----------
GameAssembly.dll+C9D967: 4C 8B 4A 78 - mov r9,[rdx+78]
// ---------- DONE INJECTING ----------
GameAssembly.dll+C9D96B: 33 C0 - xor eax,eax
GameAssembly.dll+C9D96D: 8D 70 63 - lea esi,[rax+63]
GameAssembly.dll+C9D970: 8B C8 - mov ecx,eax
GameAssembly.dll+C9D972: 8B D7 - mov edx,edi
GameAssembly.dll+C9D974: 83 E1 1F - and ecx,1F
GameAssembly.dll+C9D977: D3 FA - sar edx,cl
GameAssembly.dll+C9D979: F6 C2 01 - test dl,01
GameAssembly.dll+C9D97C: 74 27 - je GameAssembly.dll+C9D9A5
GameAssembly.dll+C9D97E: 4D 85 C9 - test r9,r9
GameAssembly.dll+C9D981: 74 49 - je GameAssembly.dll+C9D9CC
}
19
"Credit multiplier"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-24
Author :
}
[ENABLE]
aobscanmodule(INJECT_CREDIT_MULTIPLIER,GameAssembly.dll,44 03 C2 B8 7F 96 98 00) // should be unique
alloc(newmem,$1000,INJECT_CREDIT_MULTIPLIER)
label(code)
label(return)
label(vf_credit_multi)
newmem:
cvtsi2ss xmm15, edx
vmovss xmm14, [vf_credit_multi]
vmulss xmm15, xmm15, xmm14
cvtss2si edx, xmm15
code:
add r8d,edx
mov eax,0098967F
jmp return
align 10 cc
vf_credit_multi:
dd (float)2
INJECT_CREDIT_MULTIPLIER:
jmp newmem
nop 3
return:
registersymbol(vf_credit_multi)
registersymbol(INJECT_CREDIT_MULTIPLIER)
[DISABLE]
INJECT_CREDIT_MULTIPLIER:
db 44 03 C2 B8 7F 96 98 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+CCAB6A
GameAssembly.dll+CCAB3B: 48 8B 88 90 01 00 00 - mov rcx,[rax+00000190]
GameAssembly.dll+CCAB42: 48 85 C9 - test rcx,rcx
GameAssembly.dll+CCAB45: 0F 84 60 01 00 00 - je GameAssembly.dll+CCACAB
GameAssembly.dll+CCAB4B: 8B 51 2C - mov edx,[rcx+2C]
GameAssembly.dll+CCAB4E: 85 D2 - test edx,edx
GameAssembly.dll+CCAB50: 0F 84 3F 01 00 00 - je GameAssembly.dll+CCAC95
GameAssembly.dll+CCAB56: 48 8B 8E 18 03 00 00 - mov rcx,[rsi+00000318]
GameAssembly.dll+CCAB5D: 48 85 C9 - test rcx,rcx
GameAssembly.dll+CCAB60: 0F 84 45 01 00 00 - je GameAssembly.dll+CCACAB
GameAssembly.dll+CCAB66: 44 8B 41 18 - mov r8d,[rcx+18]
// ---------- INJECTING HERE ----------
GameAssembly.dll+CCAB6A: 44 03 C2 - add r8d,edx
// ---------- DONE INJECTING ----------
GameAssembly.dll+CCAB6D: B8 7F 96 98 00 - mov eax,0098967F
GameAssembly.dll+CCAB72: 44 3B C0 - cmp r8d,eax
GameAssembly.dll+CCAB75: 77 03 - ja GameAssembly.dll+CCAB7A
GameAssembly.dll+CCAB77: 41 8B C0 - mov eax,r8d
GameAssembly.dll+CCAB7A: 89 41 18 - mov [rcx+18],eax
GameAssembly.dll+CCAB7D: 48 8B 86 18 03 00 00 - mov rax,[rsi+00000318]
GameAssembly.dll+CCAB84: 48 85 C0 - test rax,rax
GameAssembly.dll+CCAB87: 0F 84 1E 01 00 00 - je GameAssembly.dll+CCACAB
GameAssembly.dll+CCAB8D: 81 78 18 A0 86 01 00 - cmp [rax+18],000186A0
GameAssembly.dll+CCAB94: 76 12 - jna GameAssembly.dll+CCABA8
}
20
"multiplier"
0
Float
vf_credit_multi
21
"Treasure drop multiplier"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-24
Author :
}
[ENABLE]
aobscanmodule(INJECT_TREASURE_MULTI,GameAssembly.dll,4C 8B 86 B0 01 00 00 4D 85 C0 0F 84 ?? ?? ?? ?? 49 8B 48 18) // should be unique
alloc(newmem,$1000,INJECT_TREASURE_MULTI)
label(code)
label(return)
label(vf_treasure_multi)
newmem:
cvtsi2ss xmm15, edx
movss xmm14, [vf_treasure_multi]
vmulss xmm15, xmm14, xmm14
cvtss2si edx, xmm15
code:
mov r8,[rsi+000001B0]
jmp return
align 10 cc
vf_treasure_multi:
dd (float)4
i_255:
dd #255
INJECT_TREASURE_MULTI:
jmp newmem
nop 2
return:
registersymbol(vf_treasure_multi)
registersymbol(INJECT_TREASURE_MULTI)
[DISABLE]
INJECT_TREASURE_MULTI:
db 4C 8B 86 B0 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+CC93D0
GameAssembly.dll+CC93B6: 8B D0 - mov edx,eax
GameAssembly.dll+CC93B8: 83 E2 1F - and edx,1F
GameAssembly.dll+CC93BB: EB 13 - jmp GameAssembly.dll+CC93D0
GameAssembly.dll+CC93BD: 33 D2 - xor edx,edx
GameAssembly.dll+CC93BF: 48 8B CE - mov rcx,rsi
GameAssembly.dll+CC93C2: E8 19 D6 02 00 - call MainGame.RandGet
GameAssembly.dll+CC93C7: 8B D0 - mov edx,eax
GameAssembly.dll+CC93C9: 83 E2 0F - and edx,0F
GameAssembly.dll+CC93CC: EB 02 - jmp GameAssembly.dll+CC93D0
GameAssembly.dll+CC93CE: 33 D2 - xor edx,edx
// ---------- INJECTING HERE ----------
GameAssembly.dll+CC93D0: 4C 8B 86 B0 01 00 00 - mov r8,[rsi+000001B0]
// ---------- DONE INJECTING ----------
GameAssembly.dll+CC93D7: 4D 85 C0 - test r8,r8
GameAssembly.dll+CC93DA: 0F 84 A3 01 00 00 - je GameAssembly.dll+CC9583
GameAssembly.dll+CC93E0: 49 8B 48 18 - mov rcx,[r8+18]
GameAssembly.dll+CC93E4: 48 85 C9 - test rcx,rcx
GameAssembly.dll+CC93E7: 0F 84 96 01 00 00 - je GameAssembly.dll+CC9583
GameAssembly.dll+CC93ED: 3B 59 18 - cmp ebx,[rcx+18]
GameAssembly.dll+CC93F0: 0F 83 E3 01 00 00 - jae GameAssembly.dll+CC95D9
GameAssembly.dll+CC93F6: 4C 8D 1C DD 20 00 00 00 - lea r11,[rbx*8+00000020]
GameAssembly.dll+CC93FE: 49 8B 0C 0B - mov rcx,[r11+rcx]
GameAssembly.dll+CC9402: 48 85 C9 - test rcx,rcx
}
22
"multiplier"
0
Float
vf_treasure_multi
26
"Min. item amount (active: open item menu)"
Auto Assembler Script
{ Game : SaGa Frontier Remastered.exe
Version:
Date : 2022-03-25
Author :
}
[ENABLE]
aobscanregion(INJECT_MIN_ITEM_CNT,"GameAssembly.dll"+FADF23,"GameAssembly.dll"+FDDF23,80 7C 58 20 FF 0F 84 6A) // should be unique
//aobscanmodule(INJECT_MIN_ITEM_CNT,GameAssembly.dll,80 7C 58 20 FF 0F 84 6A) // should be unique
alloc(newmem,$1000,INJECT_MIN_ITEM_CNT)
label(code)
label(return)
label(i_min_item_cnt)
label(i_item_base_addr)
newmem:
cmp rbx, 0
jne @F
push r15
lea r15, [rax+rbx*2+20]
mov [i_item_base_addr], r15
pop r15
next0:
cmp byte ptr [rax+rbx*2+20],-01 // item id: FF = none
je code
push r15
mov r15l, [rax+rbx*2+21]
cmp r15l, [i_min_item_cnt]
jae @F
mov r15l, [i_min_item_cnt]
mov [rax+rbx*2+21], r15l
next1:
pop r15
code:
cmp byte ptr [rax+rbx*2+20],-01
jmp return
align 10 cc
i_min_item_cnt:
dd #15
i_item_base_addr:
dq 0
INJECT_MIN_ITEM_CNT:
jmp newmem
return:
registersymbol(i_item_base_addr)
registersymbol(i_min_item_cnt)
registersymbol(INJECT_MIN_ITEM_CNT)
[DISABLE]
INJECT_MIN_ITEM_CNT:
db 80 7C 58 20 FF
unregistersymbol(*)
dealloc(newmem)
{
ItemSelect.CreateList - 4C 8B DC - mov r11,rsp
GameAssembly.dll+FADF23- 49 89 5B 08 - mov [r11+08],rbx
GameAssembly.dll+FADF27- 49 89 6B 10 - mov [r11+10],rbp
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll+FAE067
GameAssembly.dll+FAE038: 0F 84 02 02 00 00 - je GameAssembly.dll+FAE240
GameAssembly.dll+FAE03E: 48 8B 80 18 03 00 00 - mov rax,[rax+00000318]
GameAssembly.dll+FAE045: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE048: 0F 84 F2 01 00 00 - je GameAssembly.dll+FAE240
GameAssembly.dll+FAE04E: 48 8B 40 60 - mov rax,[rax+60]
GameAssembly.dll+FAE052: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE055: 0F 84 E5 01 00 00 - je GameAssembly.dll+FAE240
GameAssembly.dll+FAE05B: 48 63 DF - movsxd rbx,edi
GameAssembly.dll+FAE05E: 3B 78 18 - cmp edi,[rax+18]
GameAssembly.dll+FAE061: 0F 83 C9 01 00 00 - jae GameAssembly.dll+FAE230
// ---------- INJECTING HERE ----------
GameAssembly.dll+FAE067: 80 7C 58 20 FF - cmp byte ptr [rax+rbx*2+20],-01
// ---------- DONE INJECTING ----------
GameAssembly.dll+FAE06C: 0F 84 6A 01 00 00 - je GameAssembly.dll+FAE1DC
GameAssembly.dll+FAE072: 48 8B 0D 87 AA 5B 01 - mov rcx,[GameAssembly.dll+2568B00]
GameAssembly.dll+FAE079: F6 81 2F 01 00 00 02 - test byte ptr [rcx+0000012F],02
GameAssembly.dll+FAE080: 74 0E - je GameAssembly.dll+FAE090
GameAssembly.dll+FAE082: 83 B9 E0 00 00 00 00 - cmp dword ptr [rcx+000000E0],00
GameAssembly.dll+FAE089: 75 05 - jne GameAssembly.dll+FAE090
GameAssembly.dll+FAE08B: E8 B0 EB 1F FF - call GameAssembly.dll+1ACC40
GameAssembly.dll+FAE090: E8 3B DC C5 FF - call GameAssembly.dll+C0BCD0
GameAssembly.dll+FAE095: 48 85 C0 - test rax,rax
GameAssembly.dll+FAE098: 0F 84 A2 01 00 00 - je GameAssembly.dll+FAE240
}
27
"Min amount"
0
4 Bytes
i_min_item_cnt
28
"First item (id-#)"
1
0
Array of byte
2
i_item_base_addr
0
202
"SaGa Frontier Remastered / https://opencheattables.com / CE 7.4+"
400080
1