33
"Compact Mode"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not toggleCompactView then
function toggleCompactView(sender, forceEnable)
local isCompactMode = not (compactViewMenuItem.Caption == 'Compact View Mode')
if forceEnable ~= nil then
isCompactMode = not forceEnable
end
synchronize(function()
compactViewMenuItem.Caption = isCompactMode and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = isCompactMode
getMainForm().Panel4.Visible = isCompactMode
getMainForm().Panel5.Visible = isCompactMode
end)
end
end
if not createCompactViewMenu then
function createCompactViewMenu()
if isCompactMenuCreated then return end
synchronize(function()
local mainMenu = getMainForm().Menu.Items
compactViewMenuItem = createMenuItem(mainMenu)
compactViewMenuItem.Caption = 'Compact View Mode'
compactViewMenuItem.OnClick = toggleCompactView
mainMenu.add(compactViewMenuItem)
end)
isCompactMenuCreated = true
end
end
createCompactViewMenu()
toggleCompactView(nil, true)
[DISABLE]
{$lua}
if toggleCompactView then
toggleCompactView(nil, false)
end
146
"一次開啟/關閉多個修改器/ Turn most scripts On / Off"
4080FF
Auto Assembler Script
[ENABLE]
{$lua}
if (syntaxcheck) then return end
synchronize(function()
getLuaEngine().menuItem5.doClick()
getLuaEngine().Close()
end)
local enableBattleScripts = {
1186, -- "快速釣魚 / Fast fishing"
156, -- "部份基本資料 / Base data"
170, -- "填充道具數量 / Fill items / 取得部份道具數"
176, -- "駭入寶箱時間不減 / inf. treasure hacking time"
178, -- "任務中進行追蹤不被發現 / undetected tracking during quests"
198, -- "快速快捷魔法 / no CD for Quick magic"
200, -- "戰鬥：Stun倍率 / Battle: Stun multiplier"
204, -- "取得部份統計值 / Some stats"
22, -- "HP/EP/CP (受傷害時 / when get hit)"
27, -- "CP使用時回滿 / When use CP: full recharge"
29, -- "EXP倍率 / EXP Multiplier"
33, -- "Compact Mode"
53, -- "EP使用時回滿 / When use EP: full recharge"
57, -- "戰鬥中：取得S-Boost值 / Battle: Get S-Boost"
65, -- "即時戰鬥：快速蓄力 / Field battle: Fast charge"
66, -- "即時戰門：蓄力攻擊不扣能量條 / Field battle: No degrade for charge bar"
72, -- "戰鬥中：快速CHAIN / Battle: fast chain"
78, -- "核心EXP倍率 / Core EXP multiplier"
92, -- "親密度 / Closeness"
98, -- "取得LGC數值 / Get LGC value"
}
local addressList = getAddressList()
synchronize(function()
for _, id in ipairs(enableBattleScripts) do
local memRec = addressList.getMemoryRecordByID(id)
if memRec and not memRec.Active then
memRec.Active = true
sleep(30)
end
addressList.refresh()
end
end)
synchronize(function() getLuaEngine().Close() end)
[DISABLE]
{$lua}
if (syntaxcheck) then return end
synchronize(function()
getLuaEngine().menuItem5.doClick()
getLuaEngine().Close()
end)
local disableBattleScripts = {
909, -- "結晶迴路 Chips #5"
807, -- "結晶迴路 Chips #4"
705, -- "結晶迴路 Chips #3"
603, -- "結晶迴路 Chips #2"
435, -- "其它道具 / Others"
384, -- "結晶迴路 Chips #1"
333, -- "食材 / Cooking materials"
281, -- "一般道具 / General"
23, -- "HP Option"
1113, -- "結晶迴路 Chips #7"
1011, -- "結晶迴路 Chips #6"
89, -- "敵方 / Enemy"
54, -- "Player"
231, -- "Advanced data"
196, -- "+Others"
1214, -- "_calc data"
98, -- "取得LGC數值 / Get LGC value"
92, -- "親密度 / Closeness"
81, -- "取得核心資料 / Current Core data"
78, -- "核心EXP倍率 / Core EXP multiplier"
72, -- "戰鬥中：快速CHAIN / Battle: fast chain"
66, -- "即時戰門：蓄力攻擊不扣能量條 / Field battle: No degrade for charge bar"
65, -- "即時戰鬥：快速蓄力 / Field battle: Fast charge"
63, -- "戰鬥中：S-Boost不減 / Battle: inf. S-Boost"
57, -- "戰鬥中：取得S-Boost值 / Battle: Get S-Boost"
53, -- "EP使用時回滿 / When use EP: full recharge"
33, -- "Compact Mode"
31, -- "角色狀態 / Char. stats"
29, -- "EXP倍率 / EXP Multiplier"
27, -- "CP使用時回滿 / When use CP: full recharge"
226, -- "練成石&道具使用時不減 / inf. item/Craft stone when use"
22, -- "HP/EP/CP (受傷害時 / when get hit)"
204, -- "取得部份統計值 / Some stats"
200, -- "戰鬥：Stun倍率 / Battle: Stun multiplier"
198, -- "快速快捷魔法 / no CD for Quick magic"
178, -- "任務中進行追蹤不被發現 / undetected tracking during quests"
176, -- "駭入寶箱時間不減 / inf. treasure hacking time"
170, -- "填充道具數量 / Fill items / 取得部份道具數"
156, -- "部份基本資料 / Base data"
146, -- "一次開啟/關閉多個修改器/ Turn most scripts On / Off"
1224, -- "目前選到的道具 / Selected item in menu"
1203, -- "七耀之心生命值資料 / Card game life data"
1199, -- "戰鬥：戰鬥總傷害統計倍率 / Battle: Total damage calculation multiplier"
1186, -- "快速釣魚 / Fast fishing"
}
local addressList = getAddressList()
synchronize(function()
for _, id in ipairs(disableBattleScripts) do
local memRec = addressList.getMemoryRecordByID(id)
if memRec and memRec.Active then
memRec.Active = false
sleep(30)
end
addressList.refresh()
end
end)
synchronize(function() getLuaEngine().Close() end)
-- Comments:
-- ID: 33, Description: "Compact Mode", Depth: 0
-- ID: 146, Description: "一次開啟/關閉多個修改器/ Turn most scripts On / Off", Depth: 0
-- ID: 98, Description: "取得LGC數值 / Get LGC value", Depth: 0
-- ID: 196, Description: "+Others", Depth: 1
-- ID: 156, Description: "部份基本資料 / Base data", Depth: 0
-- ID: 22, Description: "HP/EP/CP (受傷害時 / when get hit)", Depth: 0
-- ID: 54, Description: "Player", Depth: 1
-- ID: 23, Description: "HP Option", Depth: 2
-- ID: 89, Description: "敵方 / Enemy", Depth: 1
-- ID: 1214, Description: "_calc data", Depth: 1
-- ID: 72, Description: "戰鬥中：快速CHAIN / Battle: fast chain", Depth: 0
-- ID: 63, Description: "戰鬥中：S-Boost不減 / Battle: inf. S-Boost", Depth: 0
-- ID: 57, Description: "戰鬥中：取得S-Boost值 / Battle: Get S-Boost", Depth: 0
-- ID: 200, Description: "戰鬥：Stun倍率 / Battle: Stun multiplier", Depth: 0
-- ID: 1199, Description: "戰鬥：戰鬥總傷害統計倍率 / Battle: Total damage calculation multiplier", Depth: 0
-- ID: 65, Description: "即時戰鬥：快速蓄力 / Field battle: Fast charge", Depth: 0
-- ID: 66, Description: "即時戰門：蓄力攻擊不扣能量條 / Field battle: No degrade for charge bar", Depth: 0
-- ID: 92, Description: "親密度 / Closeness", Depth: 0
-- ID: 27, Description: "CP使用時回滿 / When use CP: full recharge", Depth: 0
-- ID: 198, Description: "快速快捷魔法 / no CD for Quick magic", Depth: 0
-- ID: 53, Description: "EP使用時回滿 / When use EP: full recharge", Depth: 0
-- ID: 29, Description: "EXP倍率 / EXP Multiplier", Depth: 0
-- ID: 78, Description: "核心EXP倍率 / Core EXP multiplier", Depth: 0
-- ID: 81, Description: "取得核心資料 / Current Core data", Depth: 0
-- ID: 178, Description: "任務中進行追蹤不被發現 / undetected tracking during quests", Depth: 0
-- ID: 176, Description: "駭入寶箱時間不減 / inf. treasure hacking time", Depth: 0
-- ID: 170, Description: "填充道具數量 / Fill items / 取得部份道具數", Depth: 0
-- ID: 231, Description: "Advanced data", Depth: 1
-- ID: 281, Description: "一般道具 / General", Depth: 2
-- ID: 435, Description: "其它道具 / Others", Depth: 2
-- ID: 333, Description: "食材 / Cooking materials", Depth: 2
-- ID: 384, Description: "結晶迴路 Chips #1", Depth: 2
-- ID: 603, Description: "結晶迴路 Chips #2", Depth: 2
-- ID: 705, Description: "結晶迴路 Chips #3", Depth: 2
-- ID: 807, Description: "結晶迴路 Chips #4", Depth: 2
-- ID: 909, Description: "結晶迴路 Chips #5", Depth: 2
-- ID: 1011, Description: "結晶迴路 Chips #6", Depth: 2
-- ID: 1113, Description: "結晶迴路 Chips #7", Depth: 2
-- ID: 31, Description: "角色狀態 / Char. stats", Depth: 0
-- ID: 204, Description: "取得部份統計值 / Some stats", Depth: 0
-- ID: 1224, Description: "目前選到的道具 / Selected item in menu", Depth: 0
-- ID: 226, Description: "練成石&道具使用時不減 / inf. item/Craft stone when use", Depth: 0
-- ID: 1203, Description: "七耀之心生命值資料 / Card game life data", Depth: 0
-- ID: 1186, Description: "快速釣魚 / Fast fishing", Depth: 0
98
"取得LGC數值 / Get LGC value"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_LGC_RAW,ed9.exe,41 8B BE 48 11 01 00) // should be unique
alloc(newmem,$1000,INJECT_GET_LGC_RAW)
label(code)
label(return)
label(i_base_lgc_raw_addr)
newmem:
mov [i_base_lgc_raw_addr] ,r14
code:
mov edi,[r14+00011148]
jmp return
align 10 cc
i_base_lgc_raw_addr:
dq 0
INJECT_GET_LGC_RAW:
jmp newmem
nop 2
return:
registersymbol(INJECT_GET_LGC_RAW)
registersymbol(i_base_lgc_raw_addr)
[DISABLE]
INJECT_GET_LGC_RAW:
db 41 8B BE 48 11 01 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+4B8EF8
ed9.exe+4B8EC7: 48 8B 05 CA 12 4E 00 - mov rax,[ed9.exe+99A198]
ed9.exe+4B8ECE: 48 33 C4 - xor rax,rsp
ed9.exe+4B8ED1: 48 89 84 24 08 02 00 00 - mov [rsp+00000208],rax
ed9.exe+4B8ED9: 4C 8B 35 F8 09 51 00 - mov r14,[ed9.exe+9C98D8]
ed9.exe+4B8EE0: 48 8B F1 - mov rsi,rcx
ed9.exe+4B8EE3: 48 8B 05 7E 09 51 00 - mov rax,[ed9.exe+9C9868]
ed9.exe+4B8EEA: 45 8B E8 - mov r13d,r8d
ed9.exe+4B8EED: 48 89 11 - mov [rcx],rdx
ed9.exe+4B8EF0: 4C 8B FA - mov r15,rdx
ed9.exe+4B8EF3: 44 89 4C 24 44 - mov [rsp+44],r9d
// ---------- INJECTING HERE ----------
ed9.exe+4B8EF8: 41 8B BE 48 11 01 00 - mov edi,[r14+00011148]
// ---------- DONE INJECTING ----------
ed9.exe+4B8EFF: 8B DF - mov ebx,edi
ed9.exe+4B8F01: 48 8B 88 90 01 00 00 - mov rcx,[rax+00000190]
ed9.exe+4B8F08: C1 EB 1E - shr ebx,1E
ed9.exe+4B8F0B: 48 8B 69 08 - mov rbp,[rcx+08]
ed9.exe+4B8F0F: 83 FB 01 - cmp ebx,01
ed9.exe+4B8F12: 75 0E - jne ed9.exe+4B8F22
ed9.exe+4B8F14: 44 8D 04 BD 00 00 00 00 - lea r8d,[rdi*4+00000000]
ed9.exe+4B8F1C: 41 C1 F8 02 - sar r8d,02
ed9.exe+4B8F20: EB 1C - jmp ed9.exe+4B8F3E
ed9.exe+4B8F22: 83 FB 02 - cmp ebx,02
}
224
"開啟資訊選單->主線 / Info menu -> main"
8000FF
1
100
"Law (20 = L4, 40 = L5)"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11148
229
"Gray (16 = L4, 32 = L5)"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
1114C
101
"Chaos (10 = L4, 20 = L5)"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11150
1222
"Activity"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11190
1221
"Connect"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11154
112
"Year"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11168
113
"Month"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
1116C
114
"Day"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11170
115
"Day of Week"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11174
117
"Total SP (read only)"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11178
196
"+Others"
1
105
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11144
145
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11154
188
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11158
190
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
1115C
192
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11160
194
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11164
119
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11138
120
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
1113C
187
"??"
0
FF8080
Custom
Kueo2 integer
i_base_lgc_raw_addr
11140
156
"部份基本資料 / Base data"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_MIRA,ed9.exe,8B B0 E8 0C 27 00) // should be unique
alloc(newmem,$1000,INJECT_GET_MIRA)
label(code)
label(return)
label(i_base_mira_addr)
newmem:
mov [i_base_mira_addr], rax
code:
mov esi,[rax+00270CE8]
jmp return
align 10 cc
i_base_mira_addr:
dq 0
INJECT_GET_MIRA:
jmp newmem
nop
return:
registersymbol(INJECT_GET_MIRA)
registersymbol(i_base_mira_addr)
[DISABLE]
INJECT_GET_MIRA:
db 8B B0 E8 0C 27 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+146C87
ed9.exe+146C60: 48 8B 05 61 2C 88 00 - mov rax,[ed9.exe+9C98C8]
ed9.exe+146C67: 44 8B 04 06 - mov r8d,[rsi+rax]
ed9.exe+146C6B: 8B D7 - mov edx,edi
ed9.exe+146C6D: 48 8B CB - mov rcx,rbx
ed9.exe+146C70: E8 1B 9C 00 00 - call ed9.exe+150890
ed9.exe+146C75: FF C7 - inc edi
ed9.exe+146C77: 48 8D 76 04 - lea rsi,[rsi+04]
ed9.exe+146C7B: 83 FF 08 - cmp edi,08
ed9.exe+146C7E: 72 E0 - jb ed9.exe+146C60
ed9.exe+146C80: 48 8B 05 41 2C 88 00 - mov rax,[ed9.exe+9C98C8]
// ---------- INJECTING HERE ----------
ed9.exe+146C87: 8B B0 E8 0C 27 00 - mov esi,[rax+00270CE8]
// ---------- DONE INJECTING ----------
ed9.exe+146C8D: 48 8B 03 - mov rax,[rbx]
ed9.exe+146C90: 48 8B 80 A0 00 00 00 - mov rax,[rax+000000A0]
ed9.exe+146C97: 4C 8B 90 40 02 00 00 - mov r10,[rax+00000240]
ed9.exe+146C9E: 48 8B 80 48 02 00 00 - mov rax,[rax+00000248]
ed9.exe+146CA5: 4D 8D 1C C2 - lea r11,[r10+rax*8]
ed9.exe+146CA9: 4C 8D 35 D4 F4 77 00 - lea r14,[ed9.exe+8C6184]
ed9.exe+146CB0: 4D 3B D3 - cmp r10,r11
ed9.exe+146CB3: 74 31 - je ed9.exe+146CE6
ed9.exe+146CB5: 66 66 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
ed9.exe+146CC0: 41 B1 01 - mov r9l,01
}
223
"開啟選單 / Usage: open menu"
8000FF
1
158
"地 / Earth"
0
FF8080
4 Bytes
i_base_mira_addr
270CC8
166
"水 / Water"
0
FF8080
4 Bytes
i_base_mira_addr
270CCC
165
"火 / Fire"
0
FF8080
4 Bytes
i_base_mira_addr
270CD0
164
"風 / Wind"
0
FF8080
4 Bytes
i_base_mira_addr
270CD4
163
"時 / Time"
0
FF8080
4 Bytes
i_base_mira_addr
270CD8
162
"空 / Space"
0
FF8080
4 Bytes
i_base_mira_addr
270CDC
161
"幻 / Mirage"
0
FF8080
4 Bytes
i_base_mira_addr
270CE0
160
"耀金石塊 / Exchange"
0
FF8080
4 Bytes
i_base_mira_addr
270CE4
157
"米拉 / Mira"
0
FF8080
4 Bytes
i_base_mira_addr
270CE8
159
"S-Token"
0
FF8080
4 Bytes
i_base_mira_addr
270CEC
167
"Gourmet Point"
0
FF8080
4 Bytes
i_base_mira_addr
270CF8
168
"遊戲時間 / Playing time"
0
808080
Double
i_base_mira_addr
270D00
22
"HP/EP/CP (受傷害時 / when get hit)"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DMG_CTRL,ed9.exe,41 89 52 0C C3) // should be unique
alloc(newmem,$1000,INJECT_DMG_CTRL)
label(code)
label(return)
label(is_cp_full)
label(is_ep_full)
label(is_hp_full)
label(is_1hk)
label(i_last_orig_value)
label(i_last_new_value)
label(vf_damage_multi)
label(i_char_id_threshold)
label(i_last_orig_damage)
label(i_last_calc_damage)
newmem:
push rax
//mov eax, [r10]
//cmp eax, dword ptr [i_char_id_threshold]
//ja to_enemy
// may check +44: 1 = player
mov eax, [r10+44]
test eax, eax
jz to_enemy
mov eax, [r10+78] // stun threshold
test eax, eax
jnz to_enemy
//mov eax, [r10+74]
//test eax, eax
//jnz to_enemy
mov eax, [r10+0C]
cmp edx, eax
jae endp
mov [i_last_orig_value], edx
check_ep:
cmp dword ptr [is_ep_full], 1
jne check_cp
mov eax, [r10+18]
mov [r10+14], eax
check_cp:
cmp dword ptr [is_cp_full], 1
jne check_hp
mov eax, [r10+20]
mov [r10+1C], eax
check_hp:
cmp dword ptr [is_hp_full], 0
je endp
cmp dword ptr [is_hp_full], 1
jne check_hp2
mov edx, [r10+10]
jmp endp
check_hp2:
cmp dword ptr [is_hp_full], 2
jne check_hp3
vmovss xmm12, [vf_0_5]
jmp player_hp_calc
check_hp3:
cmp dword ptr [is_hp_full], 3
jne check_hp4
vmovss xmm12, [vf_0_333]
jmp player_hp_calc
check_hp4:
cmp dword ptr [is_hp_full], 4
jne check_hp5
vmovss xmm12, [vf_0_125]
jmp player_hp_calc
check_hp5:
mov dword ptr [is_hp_full], 5
vmovss xmm12, [vf_damage_multi]
jmp player_hp_calc
player_hp_calc:
cvtsi2ss xmm15, edx
cvtsi2ss xmm14, dword ptr [r10+0C]
vucomiss xmm14, xmm15
jbe endp
db EB 3B
db 54 68 69 73 20 74 61 62 6C 65 20 63 6F 6D
db 65 73 20 66 72 6F 6D 20
db 68 74 74 70 73 3A 2F
db 2F 6F 70 65 6E 63 68 65 61 74
db 74 61 62 6C 65 73 2E 63 6F 6D 20 2F 20 43 45 20 37 2E 34 2B
vsubss xmm13, xmm14, xmm15
vcvtss2si edx, xmm13
mov [i_last_orig_damage], edx
vmulss xmm13, xmm13, xmm12
vcvtss2si edx, xmm13
mov [i_last_calc_damage], edx
vmulss xmm13, xmm13, xmm12
vsubss xmm15, xmm14, xmm13
//vaddss xmm15, xmm15, xmm13
cvtss2si edx, xmm15
mov [i_last_new_value], edx
jmp endp
to_enemy:
cmp dword ptr [is_1hk], 1
jne to_enemy_chk2
mov edx, 0
jmp endp
to_enemy_chk2:
cmp dword ptr [is_1hk], 2
jne endp
mov edx, #119600
jmp endp
endp:
pop rax
code:
mov [r10+0C],edx
ret
jmp return
align 10 cc
is_cp_full:
dd 1
is_ep_full:
dd 1
is_hp_full: //0:None, 1:Full, 2:Half dmg, 3: 1/3 dmg, 4: 1/8 dmg, 5: By factor
dd 5
is_1hk:
dd 0
vf_damage_multi:
dd (float)0.8500001
vf_0_5:
dd (float)0.5
vf_0_333:
dd (float)0.3333333333
vf_0_125:
dd (float)0.125
vf_0_75:
dd (float)0.75
i_last_orig_value:
dd 0
i_last_new_value:
dd 0
i_last_orig_damage:
dd 0
i_char_id_threshold:
dd 14
i_last_calc_damage:
dd 0
INJECT_DMG_CTRL:
jmp newmem
return:
registersymbol(INJECT_DMG_CTRL)
registersymbol(is_cp_full)
registersymbol(is_ep_full)
registersymbol(is_hp_full)
registersymbol(is_1hk)
registersymbol(i_last_orig_value)
registersymbol(i_last_new_value)
registersymbol(vf_damage_multi)
registersymbol(i_char_id_threshold)
registersymbol(i_last_orig_damage)
registersymbol(i_last_calc_damage)
[DISABLE]
INJECT_DMG_CTRL:
db 41 89 52 0C C3
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+F0665
ed9.exe+F0649: 41 89 42 0C - mov [r10+0C],eax
ed9.exe+F064D: C3 - ret
ed9.exe+F064E: 41 8B 4A 0C - mov ecx,[r10+0C]
ed9.exe+F0652: 41 8B 52 10 - mov edx,[r10+10]
ed9.exe+F0656: 41 03 CB - add ecx,r11d
ed9.exe+F0659: 3B CA - cmp ecx,edx
ed9.exe+F065B: 0F 4C D1 - cmovl edx,ecx
ed9.exe+F065E: 33 C9 - xor ecx,ecx
ed9.exe+F0660: 85 D2 - test edx,edx
ed9.exe+F0662: 0F 48 D1 - cmovs edx,ecx
// ---------- INJECTING HERE ----------
ed9.exe+F0665: 41 89 52 0C - mov [r10+0C],edx
// ---------- DONE INJECTING ----------
ed9.exe+F0669: C3 - ret
ed9.exe+F066A: 41 8B 42 18 - mov eax,[r10+18]
ed9.exe+F066E: 44 3B D8 - cmp r11d,eax
ed9.exe+F0671: 41 0F 4C C3 - cmovl eax,r11d
ed9.exe+F0675: 33 C9 - xor ecx,ecx
ed9.exe+F0677: 85 C0 - test eax,eax
ed9.exe+F0679: 0F 48 C1 - cmovs eax,ecx
ed9.exe+F067C: 41 89 42 14 - mov [r10+14],eax
ed9.exe+F0680: C3 - ret
ed9.exe+F0681: 41 8B 4A 14 - mov ecx,[r10+14]
}
54
"Player"
1
23
"HP Option"
0:None
1:全滿 / Full
2:一半傷害 / Half damage
3:1/3 damage
4:1/8 damage
5:依下方倍率 / by factor below
0
C08000
4 Bytes
is_hp_full
108
"所受傷害倍率 / damage factor (if HP Option = 5)"
0
C08000
Float
vf_damage_multi
24
"EP全滿? / Full EP?"
0:No
1:Yes
0
C08000
4 Bytes
is_ep_full
25
"CP全滿? / Full CP?"
0:No
1:Yes
0
C08000
4 Bytes
is_cp_full
89
"敵方 / Enemy"
1
88
"一擊必殺? / 1 hit kill?"
0:無 / No
1:一擊必殺 / 1HK
2:高血量 / High HP
0
C08000
4 Bytes
is_1hk
1214
"_calc data"
808080
1
1212
"orig. damage"
0
808080
4 Bytes
i_last_orig_damage
1213
"Calc. damage"
0
808080
4 Bytes
i_last_calc_damage
107
"原本HP / Orig. HP"
0
808080
4 Bytes
i_last_orig_value
106
"計算後HP / Calc HP"
0
808080
4 Bytes
i_last_new_value
72
"戰鬥中：快速CHAIN / Battle: fast chain"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_BATT_FAST_CHAIN,ed9.exe,45 03 C6 B8 E7 03 00 00) // should be unique
alloc(newmem,$1000,INJECT_BATT_FAST_CHAIN)
label(code)
label(return)
label(i_chain_inc_no)
newmem:
add r8d, [i_chain_inc_no]
code:
add r8d,r14d
mov eax,000003E7
jmp return
align 10 cc
i_chain_inc_no:
dd 3
INJECT_BATT_FAST_CHAIN:
jmp newmem
nop 3
return:
registersymbol(INJECT_BATT_FAST_CHAIN)
registersymbol(i_chain_inc_no)
[DISABLE]
INJECT_BATT_FAST_CHAIN:
db 45 03 C6 B8 E7 03 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+12E6A4
ed9.exe+12E677: 48 8D 15 52 1A 79 00 - lea rdx,[ed9.exe+8C00D0]
ed9.exe+12E67E: 48 8D 4C 24 30 - lea rcx,[rsp+30]
ed9.exe+12E683: E8 A8 F6 F3 FF - call ed9.exe+6DD30
ed9.exe+12E688: 90 - nop
ed9.exe+12E689: C6 83 1D 04 00 00 01 - mov byte ptr [rbx+0000041D],01
ed9.exe+12E690: 48 8D 8B 60 03 00 00 - lea rcx,[rbx+00000360]
ed9.exe+12E697: 48 8B D0 - mov rdx,rax
ed9.exe+12E69A: E8 91 F8 F3 FF - call ed9.exe+6DF30
ed9.exe+12E69F: 90 - nop
ed9.exe+12E6A0: 44 8B 47 20 - mov r8d,[rdi+20]
// ---------- INJECTING HERE ----------
ed9.exe+12E6A4: 45 03 C6 - add r8d,r14d
// ---------- DONE INJECTING ----------
ed9.exe+12E6A7: B8 E7 03 00 00 - mov eax,000003E7
ed9.exe+12E6AC: 44 3B C0 - cmp r8d,eax
ed9.exe+12E6AF: 44 0F 4F C0 - cmovg r8d,eax
ed9.exe+12E6B3: 44 89 47 20 - mov [rdi+20],r8d
ed9.exe+12E6B7: 48 8B 5F 10 - mov rbx,[rdi+10]
ed9.exe+12E6BB: C6 83 1D 04 00 00 01 - mov byte ptr [rbx+0000041D],01
ed9.exe+12E6C2: 48 8D 15 07 1A 79 00 - lea rdx,[ed9.exe+8C00D0]
ed9.exe+12E6C9: 48 8D 4C 24 30 - lea rcx,[rsp+30]
ed9.exe+12E6CE: E8 5D F6 F3 FF - call ed9.exe+6DD30
ed9.exe+12E6D3: 90 - nop
}
73
"額外的CHAIN數"
0
C08000
4 Bytes
i_chain_inc_no
63
"戰鬥中：S-Boost不減 / Battle: inf. S-Boost"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_SBOOST,ed9.exe,F3 0F 11 81 0C 01 00 00 0F 28) // should be unique
alloc(newmem,$1000,INJECT_INF_SBOOST)
label(code)
label(return)
newmem:
movss xmm0,[rcx+00000108]
code:
movss [rcx+0000010C],xmm0
jmp return
INJECT_INF_SBOOST:
jmp newmem
nop 3
return:
registersymbol(INJECT_INF_SBOOST)
[DISABLE]
INJECT_INF_SBOOST:
db F3 0F 11 81 0C 01 00 00
unregistersymbol(INJECT_INF_SBOOST)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+5079D6
ed9.exe+5079B8: 48 89 74 24 38 - mov [rsp+38],rsi
ed9.exe+5079BD: 0F 28 C2 - movaps xmm0,xmm2
ed9.exe+5079C0: F7 E2 - mul edx
ed9.exe+5079C2: F3 0F 5C C1 - subss xmm0,xmm1
ed9.exe+5079C6: F3 0F 5F C3 - maxss xmm0,xmm3
ed9.exe+5079CA: 8B F2 - mov esi,edx
ed9.exe+5079CC: C1 EE 05 - shr esi,05
ed9.exe+5079CF: 0F 2E D0 - ucomiss xmm2,xmm0
ed9.exe+5079D2: 7A 02 - jp ed9.exe+5079D6
ed9.exe+5079D4: 74 12 - je ed9.exe+5079E8
// ---------- INJECTING HERE ----------
ed9.exe+5079D6: F3 0F 11 81 0C 01 00 00 - movss [rcx+0000010C],xmm0
// ---------- DONE INJECTING ----------
ed9.exe+5079DE: 0F 28 D0 - movaps xmm2,xmm0
ed9.exe+5079E1: C6 81 10 01 00 00 01 - mov byte ptr [rcx+00000110],01
ed9.exe+5079E8: F3 48 0F 2C CA - cvttss2si rcx,xmm2
ed9.exe+5079ED: B8 1F 85 EB 51 - mov eax,51EB851F
ed9.exe+5079F2: F7 E1 - mul ecx
ed9.exe+5079F4: 8B DA - mov ebx,edx
ed9.exe+5079F6: C1 EB 05 - shr ebx,05
ed9.exe+5079F9: 3B DE - cmp ebx,esi
ed9.exe+5079FB: 73 16 - jae ed9.exe+507A13
ed9.exe+5079FD: 0F 1F 00 - nop dword ptr [rax]
}
57
"戰鬥中：取得S-Boost值 / Battle: Get S-Boost"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_SBOOST,ed9.exe,F3 0F 10 87 0C 01 00 00 E8) // should be unique
alloc(newmem,$1000,INJECT_GET_SBOOST)
label(code)
label(return)
label(i_base_sboost_addr)
newmem:
mov [i_base_sboost_addr], rdi
code:
movss xmm0,[rdi+0000010C]
jmp return
align 10 cc
i_base_sboost_addr:
dq 0
INJECT_GET_SBOOST:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_SBOOST)
registersymbol(i_base_sboost_addr)
[DISABLE]
INJECT_GET_SBOOST:
db F3 0F 10 87 0C 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+506600
ed9.exe+5065CF: 0F 28 C1 - movaps xmm0,xmm1
ed9.exe+5065D2: F3 0F 5C C2 - subss xmm0,xmm2
ed9.exe+5065D6: F3 0F 5D C8 - minss xmm1,xmm0
ed9.exe+5065DA: F3 0F 11 4C 24 20 - movss [rsp+20],xmm1
ed9.exe+5065E0: C7 44 24 24 00 00 80 3F - mov [rsp+24],3F800000
ed9.exe+5065E8: C7 44 24 28 00 00 80 3F - mov [rsp+28],3F800000
ed9.exe+5065F0: 45 33 C9 - xor r9d,r9d
ed9.exe+5065F3: 0F 57 D2 - xorps xmm2,xmm2
ed9.exe+5065F6: 48 8D 54 24 20 - lea rdx,[rsp+20]
ed9.exe+5065FB: E8 D0 6E 00 00 - call ed9.exe+50D4D0
// ---------- INJECTING HERE ----------
ed9.exe+506600: F3 0F 10 87 0C 01 00 00 - movss xmm0,[rdi+0000010C]
// ---------- DONE INJECTING ----------
ed9.exe+506608: E8 2B D2 2E 00 - call ed9.exe+7F3838
ed9.exe+50660D: F3 0F 2C C8 - cvttss2si ecx,xmm0
ed9.exe+506611: B8 1F 85 EB 51 - mov eax,51EB851F
ed9.exe+506616: F7 E9 - imul ecx
ed9.exe+506618: 8B EA - mov ebp,edx
ed9.exe+50661A: C1 FD 05 - sar ebp,05
ed9.exe+50661D: 8B CD - mov ecx,ebp
ed9.exe+50661F: C1 E9 1F - shr ecx,1F
ed9.exe+506622: 03 E9 - add ebp,ecx
ed9.exe+506624: F3 0F 10 87 08 01 00 00 - movss xmm0,[rdi+00000108]
}
58
"Base addr"
1
0
808080
8 Bytes
i_base_sboost_addr
60
"Max"
0
FF8080
Float
i_base_sboost_addr
108
61
"Current"
0
FF8080
Float
i_base_sboost_addr
10C
200
"戰鬥：Stun倍率 / Battle: Stun multiplier"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_STUN_MULTI,ed9.exe,F3 0F 58 C6 0F 28 CA) // should be unique
alloc(newmem,$1000,INJECT_STUN_MULTI)
label(code)
label(return)
label(vf_stun_multi)
newmem:
vmovss xmm14, [vf_stun_multi]
vmulss xmm6, xmm6, xmm14
code:
addss xmm0,xmm6
movaps xmm1,xmm2
jmp return
align 10 cc
vf_stun_multi:
dd (float)3.666666666
INJECT_STUN_MULTI:
jmp newmem
nop 2
return:
registersymbol(INJECT_STUN_MULTI)
registersymbol(vf_stun_multi)
[DISABLE]
INJECT_STUN_MULTI:
db F3 0F 58 C6 0F 28 CA
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+E1597
ed9.exe+E156D: F3 44 0F 11 44 24 30 - movss [rsp+30],xmm8
ed9.exe+E1574: 49 8B 0C 24 - mov rcx,[r12]
ed9.exe+E1578: 48 8D 44 24 30 - lea rax,[rsp+30]
ed9.exe+E157D: 45 84 ED - test r13l,r13l
ed9.exe+E1580: 48 0F 44 C7 - cmove rax,rdi
ed9.exe+E1584: F3 0F 10 51 78 - movss xmm2,[rcx+78]
ed9.exe+E1589: 44 0F 2F C2 - comiss xmm8,xmm2
ed9.exe+E158D: 73 64 - jae ed9.exe+E15F3
ed9.exe+E158F: F3 0F 10 59 74 - movss xmm3,[rcx+74]
ed9.exe+E1594: 0F 28 C3 - movaps xmm0,xmm3
// ---------- INJECTING HERE ----------
ed9.exe+E1597: F3 0F 58 C6 - addss xmm0,xmm6
// ---------- DONE INJECTING ----------
ed9.exe+E159B: 0F 28 CA - movaps xmm1,xmm2
ed9.exe+E159E: F3 0F 5D C8 - minss xmm1,xmm0
ed9.exe+E15A2: 84 DB - test bl,bl
ed9.exe+E15A4: 74 10 - je ed9.exe+E15B6
ed9.exe+E15A6: 0F 2F CA - comiss xmm1,xmm2
ed9.exe+E15A9: 72 0B - jb ed9.exe+E15B6
ed9.exe+E15AB: 0F 28 CA - movaps xmm1,xmm2
ed9.exe+E15AE: F3 0F 5C 0D 26 B7 81 00 - subss xmm1,[ed9.exe+8FCCDC]
ed9.exe+E15B6: 48 85 C0 - test rax,rax
ed9.exe+E15B9: 74 11 - je ed9.exe+E15CC
}
201
"Multiplier"
0
C08000
Float
vf_stun_multi
1199
"戰鬥：戰鬥總傷害統計倍率 / Battle: Total damage calculation multiplier"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-29
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DAMAGE_CALC_MULTI,ed9.exe,41 03 C6 B9 7F 96 98 00 3B C1 0F 4C C8 85 C9 0F 48 CE 89 8B 80 00 00 00 89) // should be unique
alloc(newmem,$1000,INJECT_DAMAGE_CALC_MULTI)
label(code)
label(return)
label(vf_damage_calc_multi)
newmem:
vmovss xmm14, [vf_damage_calc_multi]
cvtsi2ss xmm15, r14d
vmulss xmm15, xmm15, xmm14
vcvtss2si r14d, xmm15
code:
add eax,r14d
mov ecx,0098967F
jmp return
align 10 cc
vf_damage_calc_multi:
dd (float)1.15
INJECT_DAMAGE_CALC_MULTI:
jmp newmem
nop 3
return:
registersymbol(INJECT_DAMAGE_CALC_MULTI)
registersymbol(vf_damage_calc_multi)
[DISABLE]
INJECT_DAMAGE_CALC_MULTI:
db 41 03 C6 B9 7F 96 98 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+E2223
ed9.exe+E21F6: 8B 83 80 00 00 00 - mov eax,[rbx+00000080]
ed9.exe+E21FC: 84 C9 - test cl,cl
ed9.exe+E21FE: 74 69 - je ed9.exe+E2269
ed9.exe+E2200: 85 C0 - test eax,eax
ed9.exe+E2202: 7F 1F - jg ed9.exe+E2223
ed9.exe+E2204: 89 83 8C 00 00 00 - mov [rbx+0000008C],eax
ed9.exe+E220A: 89 83 84 00 00 00 - mov [rbx+00000084],eax
ed9.exe+E2210: 89 83 88 00 00 00 - mov [rbx+00000088],eax
ed9.exe+E2216: 48 89 B3 90 00 00 00 - mov [rbx+00000090],rsi
ed9.exe+E221D: 89 B3 98 00 00 00 - mov [rbx+00000098],esi
// ---------- INJECTING HERE ----------
ed9.exe+E2223: 41 03 C6 - add eax,r14d
// ---------- DONE INJECTING ----------
ed9.exe+E2226: B9 7F 96 98 00 - mov ecx,0098967F
ed9.exe+E222B: 3B C1 - cmp eax,ecx
ed9.exe+E222D: 0F 4C C8 - cmovl ecx,eax
ed9.exe+E2230: 85 C9 - test ecx,ecx
ed9.exe+E2232: 0F 48 CE - cmovs ecx,esi
ed9.exe+E2235: 89 8B 80 00 00 00 - mov [rbx+00000080],ecx
ed9.exe+E223B: 89 B3 A0 00 00 00 - mov [rbx+000000A0],esi
ed9.exe+E2241: 44 8B C1 - mov r8d,ecx
ed9.exe+E2244: BA 62 00 00 00 - mov edx,00000062
ed9.exe+E2249: 48 8B 0D 78 02 8E 00 - mov rcx,[ed9.exe+9C24C8]
}
1211
"不影響實際傷害 / do not affect real damage"
8000FF
1
1200
"Multiplier"
0
C08000
Float
vf_damage_calc_multi
65
"即時戰鬥：快速蓄力 / Field battle: Fast charge"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattablesc.com
}
[ENABLE]
aobscanmodule(INJECT_FIELD_BATT_CHARGE_ATK,ed9.exe,F3 0F 11 83 70 03 00 00 48 8B CB) // should be unique
alloc(newmem,$1000,INJECT_FIELD_BATT_CHARGE_ATK)
label(code)
label(return)
newmem:
vmovss xmm0, [vf_100]
code:
movss [rbx+00000370],xmm0
jmp return
align 10 cc
vf_100:
dd (float)100
INJECT_FIELD_BATT_CHARGE_ATK:
jmp newmem
nop 3
return:
registersymbol(INJECT_FIELD_BATT_CHARGE_ATK)
[DISABLE]
INJECT_FIELD_BATT_CHARGE_ATK:
db F3 0F 11 83 70 03 00 00
unregistersymbol(INJECT_FIELD_BATT_CHARGE_ATK)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+DB5C2
ed9.exe+DB5A1: 66 0F 6E C7 - movd xmm0,edi
ed9.exe+DB5A5: 0F 5B C0 - cvtdq2ps xmm0,xmm0
ed9.exe+DB5A8: F3 0F 58 83 70 03 00 00 - addss xmm0,[rbx+00000370]
ed9.exe+DB5B0: 0F 2F C3 - comiss xmm0,xmm3
ed9.exe+DB5B3: 76 05 - jna ed9.exe+DB5BA
ed9.exe+DB5B5: 0F 28 C3 - movaps xmm0,xmm3
ed9.exe+DB5B8: EB 08 - jmp ed9.exe+DB5C2
ed9.exe+DB5BA: 0F 2F E0 - comiss xmm4,xmm0
ed9.exe+DB5BD: 76 03 - jna ed9.exe+DB5C2
ed9.exe+DB5BF: 0F 57 C0 - xorps xmm0,xmm0
// ---------- INJECTING HERE ----------
ed9.exe+DB5C2: F3 0F 11 83 70 03 00 00 - movss [rbx+00000370],xmm0
// ---------- DONE INJECTING ----------
ed9.exe+DB5CA: 48 8B CB - mov rcx,rbx
ed9.exe+DB5CD: E8 EE EA 1D 00 - call ed9.exe+2BA0C0
ed9.exe+DB5D2: 48 85 C0 - test rax,rax
ed9.exe+DB5D5: 0F 84 05 15 00 00 - je ed9.exe+DCAE0
ed9.exe+DB5DB: 8B CF - mov ecx,edi
ed9.exe+DB5DD: 0F 57 D2 - xorps xmm2,xmm2
ed9.exe+DB5E0: F3 48 0F 2A D1 - cvtsi2ss xmm2,rcx
ed9.exe+DB5E5: F3 0F 5E D3 - divss xmm2,xmm3
ed9.exe+DB5E9: 0F BF 80 86 00 00 00 - movsx eax,word ptr [rax+00000086]
ed9.exe+DB5F0: 66 0F 6E C0 - movd xmm0,eax
}
66
"即時戰門：蓄力攻擊不扣能量條 / Field battle: No degrade for charge bar"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FIELD_BATT_CHARGE_NO_DEC,ed9.exe,F3 0F 11 8B 70 03 00 00) // should be unique
alloc(newmem,$1000,INJECT_FIELD_BATT_CHARGE_NO_DEC)
label(code)
label(return)
newmem:
vmovss xmm1, [vf_100]
code:
movss [rbx+00000370],xmm1
jmp return
align 10 cc
vf_100:
dd (float)100
INJECT_FIELD_BATT_CHARGE_NO_DEC:
jmp newmem
nop 3
return:
registersymbol(INJECT_FIELD_BATT_CHARGE_NO_DEC)
[DISABLE]
INJECT_FIELD_BATT_CHARGE_NO_DEC:
db F3 0F 11 8B 70 03 00 00
unregistersymbol(INJECT_FIELD_BATT_CHARGE_NO_DEC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+210911
ed9.exe+2108F2: 66 0F 6E C1 - movd xmm0,ecx
ed9.exe+2108F6: 0F 5B C0 - cvtdq2ps xmm0,xmm0
ed9.exe+2108F9: F3 0F 5C C8 - subss xmm1,xmm0
ed9.exe+2108FD: 41 0F 2F CA - comiss xmm1,xmm10
ed9.exe+210901: 76 06 - jna ed9.exe+210909
ed9.exe+210903: 41 0F 28 CA - movaps xmm1,xmm10
ed9.exe+210907: EB 08 - jmp ed9.exe+210911
ed9.exe+210909: 0F 2F F9 - comiss xmm7,xmm1
ed9.exe+21090C: 76 03 - jna ed9.exe+210911
ed9.exe+21090E: 0F 28 CF - movaps xmm1,xmm7
// ---------- INJECTING HERE ----------
ed9.exe+210911: F3 0F 11 8B 70 03 00 00 - movss [rbx+00000370],xmm1
// ---------- DONE INJECTING ----------
ed9.exe+210919: 48 63 83 5C 03 00 00 - movsxd rax,dword ptr [rbx+0000035C]
ed9.exe+210920: 48 8D 0C 40 - lea rcx,[rax+rax*2]
ed9.exe+210924: 89 B4 8B 2C 03 00 00 - mov [rbx+rcx*4+0000032C],esi
ed9.exe+21092B: 48 8B 0D 96 8F 7B 00 - mov rcx,[ed9.exe+9C98C8]
ed9.exe+210932: BA 02 00 00 00 - mov edx,00000002
ed9.exe+210937: 44 0F B6 81 4D 3E 19 00 - movzx r8d,byte ptr [rcx+00193E4D]
ed9.exe+21093F: 41 FF C0 - inc r8d
ed9.exe+210942: E8 49 30 1F 00 - call ed9.exe+403990
ed9.exe+210947: 48 8B 7D A7 - mov rdi,[rbp-59]
ed9.exe+21094B: BA 01 00 00 00 - mov edx,00000001
}
92
"親密度 / Closeness"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_RELATIONS,ed9.exe,0F B7 84 47 08 05 27 00) // should be unique
alloc(newmem,$1000,INJECT_GET_RELATIONS)
label(code)
label(return)
label(i_rel_base_addr)
label(i_rel_char_idx)
label(i_min_rel_value)
newmem:
push rbx
lea rbx, [rdi+rax*2+00270508]
mov [i_rel_base_addr], rbx
mov [i_rel_char_idx], rax
mov bx, [rdi+rax*2+00270508]
cmp bx, [i_min_rel_value]
jae endp
mov bx, [i_min_rel_value]
mov [rdi+rax*2+00270508], bx
endp:
pop rbx
code:
movzx eax,word ptr [rdi+rax*2+00270508]
jmp return
align 10 cc
i_rel_base_addr:
dq 0
i_rel_char_idx:
dq 0
i_min_rel_value:
dw 0
INJECT_GET_RELATIONS:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_RELATIONS)
registersymbol(i_rel_base_addr)
registersymbol(i_rel_char_idx)
registersymbol(i_min_rel_value)
[DISABLE]
INJECT_GET_RELATIONS:
db 0F B7 84 47 08 05 27 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+403105
ed9.exe+4030E3: B9 03 00 00 00 - mov ecx,00000003
ed9.exe+4030E8: E8 23 65 10 00 - call ed9.exe+509610
ed9.exe+4030ED: 33 C0 - xor eax,eax
ed9.exe+4030EF: 48 8B 5C 24 40 - mov rbx,[rsp+40]
ed9.exe+4030F4: 48 83 C4 30 - add rsp,30
ed9.exe+4030F8: 5F - pop rdi
ed9.exe+4030F9: C3 - ret
ed9.exe+4030FA: 42 0F B7 44 1A 02 - movzx eax,word ptr [rdx+r11+02]
ed9.exe+403100: 83 F8 20 - cmp eax,20
ed9.exe+403103: 73 C5 - jae ed9.exe+4030CA
// ---------- INJECTING HERE ----------
ed9.exe+403105: 0F B7 84 47 08 05 27 00 - movzx eax,word ptr [rdi+rax*2+00270508]
// ---------- DONE INJECTING ----------
ed9.exe+40310D: 48 8B 5C 24 40 - mov rbx,[rsp+40]
ed9.exe+403112: 48 83 C4 30 - add rsp,30
ed9.exe+403116: 5F - pop rdi
ed9.exe+403117: C3 - ret
ed9.exe+403118: CC - int 3
ed9.exe+403119: CC - int 3
ed9.exe+40311A: CC - int 3
ed9.exe+40311B: CC - int 3
ed9.exe+40311C: CC - int 3
ed9.exe+40311D: CC - int 3
}
222
"資訊選單 -> 連結 / info menu->link"
8000FF
1
1178
"設定最小值 / set min. value"
0
C08000
2 Bytes
i_min_rel_value
93
"親密度 / Closeness"
0
FF8080
2 Bytes
i_rel_base_addr
0
94
"角色編號 / Char. index"
0
FF8080
8 Bytes
i_rel_char_idx
27
"CP使用時回滿 / When use CP: full recharge"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_USE_CP,ed9.exe,41 8B 4A 1C 41 8B 52 20) // should be unique
alloc(newmem,$1000,INJECT_USE_CP)
label(code)
label(return)
newmem:
push rax
mov eax, [r10]
cmp eax, 14
je to_enemy
mov eax, [r10+20]
mov [r10+1C], eax
to_enemy:
endp:
pop rax
code:
mov ecx,[r10+1C]
mov edx,[r10+20]
jmp return
INJECT_USE_CP:
jmp newmem
nop 3
return:
registersymbol(INJECT_USE_CP)
[DISABLE]
INJECT_USE_CP:
db 41 8B 4A 1C 41 8B 52 20
unregistersymbol(INJECT_USE_CP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+F06B4
ed9.exe+F0695: 0F 48 D1 - cmovs edx,ecx
INJECT_BATTLE_FULL_EP: E9 63 F9 E5 FF - jmp 7FF6D5A80000
ed9.exe+F069D: 41 8B 42 20 - mov eax,[r10+20]
ed9.exe+F06A1: 44 3B D8 - cmp r11d,eax
ed9.exe+F06A4: 41 0F 4C C3 - cmovl eax,r11d
ed9.exe+F06A8: 33 C9 - xor ecx,ecx
ed9.exe+F06AA: 85 C0 - test eax,eax
ed9.exe+F06AC: 0F 48 C1 - cmovs eax,ecx
ed9.exe+F06AF: 41 89 42 1C - mov [r10+1C],eax
ed9.exe+F06B3: C3 - ret
// ---------- INJECTING HERE ----------
ed9.exe+F06B4: 41 8B 4A 1C - mov ecx,[r10+1C]
// ---------- DONE INJECTING ----------
ed9.exe+F06B8: 41 8B 52 20 - mov edx,[r10+20]
ed9.exe+F06BC: 41 03 CB - add ecx,r11d
ed9.exe+F06BF: 3B CA - cmp ecx,edx
ed9.exe+F06C1: 0F 4C D1 - cmovl edx,ecx
ed9.exe+F06C4: 33 C9 - xor ecx,ecx
ed9.exe+F06C6: 85 D2 - test edx,edx
ed9.exe+F06C8: 0F 48 D1 - cmovs edx,ecx
ed9.exe+F06CB: 41 89 52 1C - mov [r10+1C],edx
ed9.exe+F06CF: C3 - ret
ed9.exe+F06D0: 45 8B 42 10 - mov r8d,[r10+10]
}
198
"快速快捷魔法 / no CD for Quick magic"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FAST_QUICK_MAGIC,ed9.exe,F3 0F 11 83 50 04 00 00 48) // should be unique
alloc(newmem,$1000,INJECT_FAST_QUICK_MAGIC)
label(code)
label(return)
newmem:
vxorps xmm0, xmm0, xmm0
code:
movss [rbx+00000450],xmm0
jmp return
INJECT_FAST_QUICK_MAGIC:
jmp newmem
nop 3
return:
registersymbol(INJECT_FAST_QUICK_MAGIC)
[DISABLE]
INJECT_FAST_QUICK_MAGIC:
db F3 0F 11 83 50 04 00 00
unregistersymbol(INJECT_FAST_QUICK_MAGIC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+438E66
ed9.exe+438E37: 48 89 5C 24 20 - mov [rsp+20],rbx
ed9.exe+438E3C: 48 8B 98 88 05 00 00 - mov rbx,[rax+00000588]
ed9.exe+438E43: 48 8B CB - mov rcx,rbx
ed9.exe+438E46: E8 75 12 E8 FF - call ed9.exe+2BA0C0
ed9.exe+438E4B: 48 85 C0 - test rax,rax
ed9.exe+438E4E: 74 1E - je ed9.exe+438E6E
ed9.exe+438E50: 0F BF 80 86 00 00 00 - movsx eax,word ptr [rax+00000086]
ed9.exe+438E57: 66 0F 6E C0 - movd xmm0,eax
ed9.exe+438E5B: 0F 5B C0 - cvtdq2ps xmm0,xmm0
ed9.exe+438E5E: F3 0F 5E 05 12 45 4C 00 - divss xmm0,[ed9.exe+8FD378]
// ---------- INJECTING HERE ----------
ed9.exe+438E66: F3 0F 11 83 50 04 00 00 - movss [rbx+00000450],xmm0
// ---------- DONE INJECTING ----------
ed9.exe+438E6E: 48 8B 5C 24 20 - mov rbx,[rsp+20]
ed9.exe+438E73: 48 83 C4 28 - add rsp,28
ed9.exe+438E77: C3 - ret
ed9.exe+438E78: CC - int 3
ed9.exe+438E79: CC - int 3
ed9.exe+438E7A: CC - int 3
ed9.exe+438E7B: CC - int 3
ed9.exe+438E7C: CC - int 3
ed9.exe+438E7D: CC - int 3
ed9.exe+438E7E: CC - int 3
}
53
"EP使用時回滿 / When use EP: full recharge"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_FULL_EP,ed9.exe,41 89 52 14 C3) // should be unique
alloc(newmem,$1000,INJECT_BATTLE_FULL_EP)
label(code)
label(return)
newmem:
mov edx, [r10+18]
code:
mov [r10+14],edx
ret
jmp return
INJECT_BATTLE_FULL_EP:
jmp newmem
return:
registersymbol(INJECT_BATTLE_FULL_EP)
[DISABLE]
INJECT_BATTLE_FULL_EP:
db 41 89 52 14 C3
unregistersymbol(INJECT_BATTLE_FULL_EP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+F0698
ed9.exe+F067C: 41 89 42 14 - mov [r10+14],eax
ed9.exe+F0680: C3 - ret
ed9.exe+F0681: 41 8B 4A 14 - mov ecx,[r10+14]
ed9.exe+F0685: 41 8B 52 18 - mov edx,[r10+18]
ed9.exe+F0689: 41 03 CB - add ecx,r11d
ed9.exe+F068C: 3B CA - cmp ecx,edx
ed9.exe+F068E: 0F 4C D1 - cmovl edx,ecx
ed9.exe+F0691: 33 C9 - xor ecx,ecx
ed9.exe+F0693: 85 D2 - test edx,edx
ed9.exe+F0695: 0F 48 D1 - cmovs edx,ecx
// ---------- INJECTING HERE ----------
ed9.exe+F0698: 41 89 52 14 - mov [r10+14],edx
// ---------- DONE INJECTING ----------
ed9.exe+F069C: C3 - ret
ed9.exe+F069D: 41 8B 42 20 - mov eax,[r10+20]
ed9.exe+F06A1: 44 3B D8 - cmp r11d,eax
ed9.exe+F06A4: 41 0F 4C C3 - cmovl eax,r11d
ed9.exe+F06A8: 33 C9 - xor ecx,ecx
ed9.exe+F06AA: 85 C0 - test eax,eax
ed9.exe+F06AC: 0F 48 C1 - cmovs eax,ecx
ed9.exe+F06AF: 41 89 42 1C - mov [r10+1C],eax
ed9.exe+F06B3: C3 - ret
ed9.exe+F06B4: 41 8B 4A 1C - mov ecx,[r10+1C]
}
29
"EXP倍率 / EXP Multiplier"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_EXP_MULTI,ed9.exe,03 D3 3B D0 41 B8 96 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_EXP_MULTI)
label(code)
label(return)
label(vf_xp_multi)
newmem:
vmovss xmm14, [vf_xp_multi]
cvtsi2ss xmm15, ebx
vmulss xmm13, xmm14, xmm15
vcvtss2si ebx, xmm13
code:
add edx,ebx
cmp edx,eax
mov r8d,00000096
jmp return
align 10 cc
vf_xp_multi:
dd (float)1.2
INJECT_EXP_MULTI:
jmp newmem
nop 5
return:
registersymbol(INJECT_EXP_MULTI)
registersymbol(vf_xp_multi)
[DISABLE]
INJECT_EXP_MULTI:
db 03 D3 3B D0 41 B8 96 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+F0F8F
ed9.exe+F0F6E: 8B 29 - mov ebp,[rcx]
ed9.exe+F0F70: 45 8B F8 - mov r15d,r8d
ed9.exe+F0F73: 8B DA - mov ebx,edx
ed9.exe+F0F75: 41 B8 96 00 00 00 - mov r8d,00000096
ed9.exe+F0F7B: 8B D5 - mov edx,ebp
ed9.exe+F0F7D: 4C 8B F1 - mov r14,rcx
ed9.exe+F0F80: E8 9B 00 00 00 - call ed9.exe+F1020
ed9.exe+F0F85: 41 8B 56 08 - mov edx,[r14+08]
ed9.exe+F0F89: 8B F8 - mov edi,eax
ed9.exe+F0F8B: 45 8B 66 04 - mov r12d,[r14+04]
// ---------- INJECTING HERE ----------
ed9.exe+F0F8F: 03 D3 - add edx,ebx
// ---------- DONE INJECTING ----------
ed9.exe+F0F91: 3B D0 - cmp edx,eax
ed9.exe+F0F93: 41 B8 96 00 00 00 - mov r8d,00000096
ed9.exe+F0F99: 0F 4C FA - cmovl edi,edx
ed9.exe+F0F9C: 33 DB - xor ebx,ebx
ed9.exe+F0F9E: 85 FF - test edi,edi
ed9.exe+F0FA0: 8B D5 - mov edx,ebp
ed9.exe+F0FA2: 0F 48 FB - cmovs edi,ebx
ed9.exe+F0FA5: E8 76 00 00 00 - call ed9.exe+F1020
ed9.exe+F0FAA: 3B F8 - cmp edi,eax
ed9.exe+F0FAC: 0F 4C C7 - cmovl eax,edi
}
30
"倍率 / Multiplier"
0
C08000
Float
vf_xp_multi
78
"核心EXP倍率 / Core EXP multiplier"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_CORE_EXP_MULTI2,ed9.exe,03 79 04 41 8B D6) // should be unique
alloc(newmem,$1000,INJECT_CORE_EXP_MULTI2)
label(code)
label(return)
label(vf_core_xp_multi)
newmem:
cvtsi2ss xmm15, edi
vmovss xmm14, [vf_core_xp_multi]
vmulss xmm13, xmm14, xmm15
cvtss2si edi, xmm13
code:
add edi,[rcx+04]
mov edx,r14d
jmp return
align 10 cc
vf_core_xp_multi:
dd (float)8.66666666
INJECT_CORE_EXP_MULTI2:
jmp newmem
nop
return:
registersymbol(INJECT_CORE_EXP_MULTI2)
registersymbol(vf_core_xp_multi)
[DISABLE]
INJECT_CORE_EXP_MULTI2:
db 03 79 04 41 8B D6
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+3FF193
ed9.exe+3FF164: E8 D7 2A D2 FF - call ed9.exe+121C40
ed9.exe+3FF169: 48 85 C0 - test rax,rax
ed9.exe+3FF16C: 0F 84 42 01 00 00 - je ed9.exe+3FF2B4
ed9.exe+3FF172: 48 0F BE 40 0D - movsx rax,byte ptr [rax+0D]
ed9.exe+3FF177: 84 C0 - test al,al
ed9.exe+3FF179: 0F 88 35 01 00 00 - js ed9.exe+3FF2B4
ed9.exe+3FF17F: 48 8D 8B 08 B9 19 00 - lea rcx,[rbx+0019B908]
ed9.exe+3FF186: 48 8D 0C C1 - lea rcx,[rcx+rax*8]
ed9.exe+3FF18A: 48 85 C9 - test rcx,rcx
ed9.exe+3FF18D: 0F 84 21 01 00 00 - je ed9.exe+3FF2B4
// ---------- INJECTING HERE ----------
ed9.exe+3FF193: 03 79 04 - add edi,[rcx+04]
// ---------- DONE INJECTING ----------
ed9.exe+3FF196: 41 8B D6 - mov edx,r14d
ed9.exe+3FF199: 48 8B 05 C8 A6 5C 00 - mov rax,[ed9.exe+9C9868]
ed9.exe+3FF1A0: 48 8B 88 00 01 00 00 - mov rcx,[rax+00000100]
ed9.exe+3FF1A7: 48 8B 49 08 - mov rcx,[rcx+08]
ed9.exe+3FF1AB: E8 90 2A D2 FF - call ed9.exe+121C40
ed9.exe+3FF1B0: 48 85 C0 - test rax,rax
ed9.exe+3FF1B3: 74 1C - je ed9.exe+3FF1D1
ed9.exe+3FF1B5: 48 0F BE 40 0D - movsx rax,byte ptr [rax+0D]
ed9.exe+3FF1BA: 84 C0 - test al,al
ed9.exe+3FF1BC: 78 13 - js ed9.exe+3FF1D1
}
79
"倍率"
0
C08000
Float
vf_core_xp_multi
81
"取得核心資料 / Current Core data"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_CORE_DATA,ed9.exe,44 8B 61 04 83 A6 BC 00 00 00 FE) // should be unique
alloc(newmem,$1000,INJECT_GET_CORE_DATA)
label(code)
label(return)
label(i_core_base_addr)
newmem:
mov [i_core_base_addr] ,rcx
code:
mov r12d,[rcx+04]
and dword ptr [rsi+000000BC],-02
jmp return
align 10 cc
i_core_base_addr:
dq 0
INJECT_GET_CORE_DATA:
jmp newmem
nop 6
return:
registersymbol(INJECT_GET_CORE_DATA)
registersymbol(i_core_base_addr)
[DISABLE]
INJECT_GET_CORE_DATA:
db 44 8B 61 04 83 A6 BC 00 00 00 FE
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+1BBC7A
ed9.exe+1BBC57: E8 E4 5F F6 FF - call ed9.exe+121C40
ed9.exe+1BBC5C: 48 85 C0 - test rax,rax
ed9.exe+1BBC5F: 74 1D - je ed9.exe+1BBC7E
ed9.exe+1BBC61: 48 0F BE 40 0D - movsx rax,byte ptr [rax+0D]
ed9.exe+1BBC66: 84 C0 - test al,al
ed9.exe+1BBC68: 78 14 - js ed9.exe+1BBC7E
ed9.exe+1BBC6A: 49 8D 8F 08 B9 19 00 - lea rcx,[r15+0019B908]
ed9.exe+1BBC71: 48 8D 0C C1 - lea rcx,[rcx+rax*8]
ed9.exe+1BBC75: 48 85 C9 - test rcx,rcx
ed9.exe+1BBC78: 74 04 - je ed9.exe+1BBC7E
// ---------- INJECTING HERE ----------
ed9.exe+1BBC7A: 44 8B 61 04 - mov r12d,[rcx+04]
// ---------- DONE INJECTING ----------
ed9.exe+1BBC7E: 83 A6 BC 00 00 00 FE - and dword ptr [rsi+000000BC],-02
ed9.exe+1BBC85: C6 86 1D 04 00 00 01 - mov byte ptr [rsi+0000041D],01
ed9.exe+1BBC8C: 45 8B C4 - mov r8d,r12d
ed9.exe+1BBC8F: 48 8D 15 3A 44 70 00 - lea rdx,[ed9.exe+8C00D0]
ed9.exe+1BBC96: 48 8D 4C 24 38 - lea rcx,[rsp+38]
ed9.exe+1BBC9B: E8 90 20 EB FF - call ed9.exe+6DD30
ed9.exe+1BBCA0: 90 - nop
ed9.exe+1BBCA1: C6 86 1D 04 00 00 01 - mov byte ptr [rsi+0000041D],01
ed9.exe+1BBCA8: 48 8B D0 - mov rdx,rax
ed9.exe+1BBCAB: 48 8D 8E 60 03 00 00 - lea rcx,[rsi+00000360]
}
221
"商店中關閉；選單->ORBMENT / Disable in vendor menu; Menu -> ORBMENT"
8000FF
1
82
"目前核心 Lv"
0
FF8080
4 Bytes
i_core_base_addr
0
83
"目前核心 Exp"
0
FF8080
4 Bytes
i_core_base_addr
4
178
"任務中進行追蹤不被發現 / undetected tracking during quests"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_TRACKING_GAUGE,ed9.exe,F3 0F 10 82 CC 00 00 00 F3) // should be unique
alloc(newmem,$1000,INJECT_INF_TRACKING_GAUGE)
label(code)
label(return)
newmem:
vxorps xmm0, xmm0, xmm0
vmovss [rdx+000000CC], xmm0
code:
movss xmm0,[rdx+000000CC]
jmp return
INJECT_INF_TRACKING_GAUGE:
jmp newmem
nop 3
return:
registersymbol(INJECT_INF_TRACKING_GAUGE)
[DISABLE]
INJECT_INF_TRACKING_GAUGE:
db F3 0F 10 82 CC 00 00 00
unregistersymbol(INJECT_INF_TRACKING_GAUGE)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+AB65E
ed9.exe+AB625: C7 82 0C 03 00 00 00 00 80 3F - mov [rdx+0000030C],3F800000
ed9.exe+AB62F: F6 80 68 03 00 00 01 - test byte ptr [rax+00000368],01
ed9.exe+AB636: 74 12 - je ed9.exe+AB64A
ed9.exe+AB638: F3 0F 10 88 14 03 00 00 - movss xmm1,[rax+00000314]
ed9.exe+AB640: F3 0F 59 88 FC 02 00 00 - mulss xmm1,[rax+000002FC]
ed9.exe+AB648: EB 08 - jmp ed9.exe+AB652
ed9.exe+AB64A: F3 0F 10 88 FC 02 00 00 - movss xmm1,[rax+000002FC]
ed9.exe+AB652: 49 8B 91 88 00 00 00 - mov rdx,[r9+00000088]
ed9.exe+AB659: 48 85 D2 - test rdx,rdx
ed9.exe+AB65C: 74 08 - je ed9.exe+AB666
// ---------- INJECTING HERE ----------
ed9.exe+AB65E: F3 0F 10 82 CC 00 00 00 - movss xmm0,[rdx+000000CC]
// ---------- DONE INJECTING ----------
ed9.exe+AB666: F3 0F 10 15 56 1E 85 00 - movss xmm2,[ed9.exe+8FD4C4]
ed9.exe+AB66E: F3 0F 59 C2 - mulss xmm0,xmm2
ed9.exe+AB672: F3 0F 11 88 FC 02 00 00 - movss [rax+000002FC],xmm1
ed9.exe+AB67A: F3 0F 11 80 F8 02 00 00 - movss [rax+000002F8],xmm0
ed9.exe+AB682: 49 8B 81 88 00 00 00 - mov rax,[r9+00000088]
ed9.exe+AB689: 48 85 C0 - test rax,rax
ed9.exe+AB68C: 74 08 - je ed9.exe+AB696
ed9.exe+AB68E: 44 0F B6 80 E4 00 00 00 - movzx r8d,byte ptr [rax+000000E4]
ed9.exe+AB696: 48 8B 51 78 - mov rdx,[rcx+78]
ed9.exe+AB69A: E8 71 00 00 00 - call ed9.exe+AB710
}
176
"駭入寶箱時間不減 / inf. treasure hacking time"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_HACKING_TIME,ed9.exe,F3 41 0F 11 46 08 48 8B 41) // should be unique
alloc(newmem,$1000,INJECT_INF_HACKING_TIME)
label(code)
label(return)
newmem:
vmovss xmm0, [r14+08]
vmovss [rax], xmm0
code:
movss [r14+08],xmm0
jmp return
align 10 cc
vf_60:
dd (float)60
INJECT_INF_HACKING_TIME:
jmp newmem
nop
return:
registersymbol(INJECT_INF_HACKING_TIME)
[DISABLE]
INJECT_INF_HACKING_TIME:
db F3 41 0F 11 46 08
unregistersymbol(INJECT_INF_HACKING_TIME)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+504B18
ed9.exe+504AEB: 41 80 7E 40 00 - cmp byte ptr [r14+40],00
ed9.exe+504AF0: 75 3D - jne ed9.exe+504B2F
ed9.exe+504AF2: F3 0F 5C C1 - subss xmm0,xmm1
ed9.exe+504AF6: F3 41 0F 11 43 08 - movss [r11+08],xmm0
ed9.exe+504AFC: 41 C7 43 18 00 00 00 00 - mov [r11+18],00000000
ed9.exe+504B04: 49 8D 43 08 - lea rax,[r11+08]
ed9.exe+504B08: 49 8D 53 18 - lea rdx,[r11+18]
ed9.exe+504B0C: 41 0F 2F C0 - comiss xmm0,xmm8
ed9.exe+504B10: 48 0F 46 C2 - cmovbe rax,rdx
ed9.exe+504B14: F3 0F 10 00 - movss xmm0,[rax]
// ---------- INJECTING HERE ----------
ed9.exe+504B18: F3 41 0F 11 46 08 - movss [r14+08],xmm0
// ---------- DONE INJECTING ----------
ed9.exe+504B1E: 48 8B 41 08 - mov rax,[rcx+08]
ed9.exe+504B22: 80 78 10 00 - cmp byte ptr [rax+10],00
ed9.exe+504B26: 74 07 - je ed9.exe+504B2F
ed9.exe+504B28: 66 41 C7 46 40 01 01 - mov word ptr [r14+40],0101
ed9.exe+504B2F: 48 8B 41 08 - mov rax,[rcx+08]
ed9.exe+504B33: 80 78 10 00 - cmp byte ptr [rax+10],00
ed9.exe+504B37: 75 0E - jne ed9.exe+504B47
ed9.exe+504B39: 41 80 7E 41 00 - cmp byte ptr [r14+41],00
ed9.exe+504B3E: 74 07 - je ed9.exe+504B47
ed9.exe+504B40: 66 41 C7 46 40 00 00 - mov word ptr [r14+40],0000
}
170
"填充道具數量 / Fill items / 取得部份道具數"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FILL_ITEMS,ed9.exe,0F B7 BC 88 E8 6A 19 00 4D 85) // should be unique
alloc(newmem,$1000,INJECT_FILL_ITEMS)
label(code)
label(return)
label(i_item_min_threshold)
label(i_item_refill_to)
label(i_item_base_addr)
newmem:
push rbx
lea rbx, [rax+rcx*4+00196AE8]
cmp rbx, [i_item_base_addr]
jae do_next
mov [i_item_base_addr], rbx
do_next:
mov bx, [rax+rcx*4+00196AE8]
cmp bx, [i_item_min_threshold]
jb endp
cmp bx, [i_item_refill_to]
jae endp
mov bx, [i_item_refill_to]
mov [rax+rcx*4+00196AE8], bx
endp:
pop rbx
code:
movzx edi,word ptr [rax+rcx*4+00196AE8]
jmp return
align 10 cc
i_item_min_threshold:
dw 2
i_item_refill_to:
dw 50
i_item_base_addr:
dq 7FFFFFFFFFFFFFFF
INJECT_FILL_ITEMS:
jmp newmem
nop 3
return:
registersymbol(INJECT_FILL_ITEMS)
registersymbol(i_item_min_threshold)
registersymbol(i_item_refill_to)
registersymbol(i_item_base_addr)
[DISABLE]
INJECT_FILL_ITEMS:
db 0F B7 BC 88 E8 6A 19 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+4D31FE
ed9.exe+4D31CE: 48 8B 05 F3 66 4F 00 - mov rax,[ed9.exe+9C98C8]
ed9.exe+4D31D5: 8B BC 88 C8 0C 27 00 - mov edi,[rax+rcx*4+00270CC8]
ed9.exe+4D31DC: EB 28 - jmp ed9.exe+4D3206
ed9.exe+4D31DE: 3D 3F 01 00 00 - cmp eax,0000013F
ed9.exe+4D31E3: 75 0F - jne ed9.exe+4D31F4
ed9.exe+4D31E5: 48 8B 05 DC 66 4F 00 - mov rax,[ed9.exe+9C98C8]
ed9.exe+4D31EC: 8B B8 EC 0C 27 00 - mov edi,[rax+00270CEC]
ed9.exe+4D31F2: EB 12 - jmp ed9.exe+4D3206
ed9.exe+4D31F4: 48 8B C8 - mov rcx,rax
ed9.exe+4D31F7: 48 8B 05 CA 66 4F 00 - mov rax,[ed9.exe+9C98C8]
// ---------- INJECTING HERE ----------
ed9.exe+4D31FE: 0F B7 BC 88 E8 6A 19 00 - movzx edi,word ptr [rax+rcx*4+00196AE8]
// ---------- DONE INJECTING ----------
ed9.exe+4D3206: 4D 85 DB - test r11,r11
ed9.exe+4D3209: 74 65 - je ed9.exe+4D3270
ed9.exe+4D320B: 41 09 AB BC 00 00 00 - or [r11+000000BC],ebp
ed9.exe+4D3212: 48 8B 46 10 - mov rax,[rsi+10]
ed9.exe+4D3216: 0F B6 48 19 - movzx ecx,byte ptr [rax+19]
ed9.exe+4D321A: 80 F9 1B - cmp cl,1B
ed9.exe+4D321D: 77 51 - ja ed9.exe+4D3270
ed9.exe+4D321F: B8 00 7C E1 0F - mov eax,0FE17C00
ed9.exe+4D3224: 0F A3 C8 - bt eax,ecx
ed9.exe+4D3227: 73 47 - jae ed9.exe+4D3270
}
173
"使用方式：開啟道具選單並瀏覽) / usage: open item menu -> browse"
8000FF
1
174
"請小心使用，關鍵道具數量不對可能造成進度異常 / Use with caution!"
8000FF
1
171
"判定最小值 / threshold"
0
C08000
2 Bytes
i_item_min_threshold
172
"設定數量 / fill to #"
0
C08000
2 Bytes
i_item_refill_to
231
"Advanced data"
1
281
"一般道具 / General"
1
230
"Item"
0
2 Bytes
i_item_base_addr
0
232
"Item"
0
2 Bytes
i_item_base_addr
4
233
"Item"
0
2 Bytes
i_item_base_addr
8
234
"Item"
0
2 Bytes
i_item_base_addr
C
235
"Item"
0
2 Bytes
i_item_base_addr
10
236
"Item"
0
2 Bytes
i_item_base_addr
14
237
"Item"
0
2 Bytes
i_item_base_addr
18
238
"Item"
0
2 Bytes
i_item_base_addr
1C
240
"Item"
0
2 Bytes
i_item_base_addr
24
241
"Item"
0
2 Bytes
i_item_base_addr
28
245
"Item"
0
2 Bytes
i_item_base_addr
38
246
"Item"
0
2 Bytes
i_item_base_addr
3C
250
"Item"
0
2 Bytes
i_item_base_addr
4C
251
"Item"
0
2 Bytes
i_item_base_addr
50
252
"Item"
0
2 Bytes
i_item_base_addr
54
253
"Item"
0
2 Bytes
i_item_base_addr
58
254
"Item"
0
2 Bytes
i_item_base_addr
5C
255
"Item"
0
2 Bytes
i_item_base_addr
60
256
"Item"
0
2 Bytes
i_item_base_addr
64
257
"Item"
0
2 Bytes
i_item_base_addr
68
260
"Item"
0
2 Bytes
i_item_base_addr
74
261
"Item"
0
2 Bytes
i_item_base_addr
78
262
"Item"
0
2 Bytes
i_item_base_addr
7C
265
"Item"
0
2 Bytes
i_item_base_addr
88
266
"Item"
0
2 Bytes
i_item_base_addr
8C
267
"Item"
0
2 Bytes
i_item_base_addr
90
268
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
94
269
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
98
270
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
9C
271
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
A0
272
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
A4
273
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
A8
274
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
AC
275
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
B0
276
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
B4
277
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
B8
278
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
BC
279
"露水 / 靈藥 / Stat. potions"
0
2 Bytes
i_item_base_addr
C0
280
"Item"
0
2 Bytes
i_item_base_addr
C4
435
"其它道具 / Others"
1
436
"魚餌 / Balt"
0
2 Bytes
i_item_base_addr
C8
437
"魚餌 / Balt"
0
2 Bytes
i_item_base_addr
CC
440
"魚餌 / Balt"
0
2 Bytes
i_item_base_addr
D8
441
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
DC
442
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
E0
443
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
E4
444
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
E8
445
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
EC
446
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
F0
447
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
F4
448
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
F8
449
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
FC
450
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
100
451
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
104
452
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
108
453
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
10C
454
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
110
455
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
114
456
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
118
457
"練成石 / Craft stone"
0
2 Bytes
i_item_base_addr
11C
465
"U material"
0
2 Bytes
i_item_base_addr
13C
466
"U material+"
0
2 Bytes
i_item_base_addr
140
467
"黑玉鋼"
0
2 Bytes
i_item_base_addr
144
333
"食材 / Cooking materials"
1
334
"Item"
0
2 Bytes
i_item_base_addr
1F3C
486
"Item"
0
2 Bytes
i_item_base_addr
1F40
487
"Item"
0
2 Bytes
i_item_base_addr
1F44
488
"Item"
0
2 Bytes
i_item_base_addr
1F48
489
"Item"
0
2 Bytes
i_item_base_addr
1F4C
490
"Item"
0
2 Bytes
i_item_base_addr
1F50
492
"Item"
0
2 Bytes
i_item_base_addr
1F58
493
"Item"
0
2 Bytes
i_item_base_addr
1F5C
495
"Item"
0
2 Bytes
i_item_base_addr
1F64
496
"Item"
0
2 Bytes
i_item_base_addr
1F68
497
"Item"
0
2 Bytes
i_item_base_addr
1F6C
498
"Item"
0
2 Bytes
i_item_base_addr
1F70
384
"結晶迴路 Chips #1"
1
385
"Item"
0
2 Bytes
i_item_base_addr
39CC
499
"Item"
0
2 Bytes
i_item_base_addr
39D0
500
"Item"
0
2 Bytes
i_item_base_addr
39D4
509
"Item"
0
2 Bytes
i_item_base_addr
39F4
510
"Item"
0
2 Bytes
i_item_base_addr
39F8
511
"Item"
0
2 Bytes
i_item_base_addr
39FC
514
"Item"
0
2 Bytes
i_item_base_addr
3A08
520
"Item"
0
2 Bytes
i_item_base_addr
3A1C
521
"Item"
0
2 Bytes
i_item_base_addr
3A20
531
"Item"
0
2 Bytes
i_item_base_addr
3A44
532
"Item"
0
2 Bytes
i_item_base_addr
3A48
542
"Item"
0
2 Bytes
i_item_base_addr
3A6C
543
"Item"
0
2 Bytes
i_item_base_addr
3A70
553
"Item"
0
2 Bytes
i_item_base_addr
3A94
554
"Item"
0
2 Bytes
i_item_base_addr
3A98
563
"Item"
0
2 Bytes
i_item_base_addr
3ABC
564
"Item"
0
2 Bytes
i_item_base_addr
3AC0
565
"Item"
0
2 Bytes
i_item_base_addr
3AC4
603
"結晶迴路 Chips #2"
1
604
"Item"
0
2 Bytes
i_item_base_addr
3B5C
605
"Item"
0
2 Bytes
i_item_base_addr
3B60
606
"Item"
0
2 Bytes
i_item_base_addr
3B64
614
"Item"
0
2 Bytes
i_item_base_addr
3B84
615
"Item"
0
2 Bytes
i_item_base_addr
3B88
616
"Item"
0
2 Bytes
i_item_base_addr
3B8C
619
"Item"
0
2 Bytes
i_item_base_addr
3B98
624
"Item"
0
2 Bytes
i_item_base_addr
3BAC
625
"Item"
0
2 Bytes
i_item_base_addr
3BB0
634
"Item"
0
2 Bytes
i_item_base_addr
3BD4
635
"Item"
0
2 Bytes
i_item_base_addr
3BD8
644
"Item"
0
2 Bytes
i_item_base_addr
3BFC
645
"Item"
0
2 Bytes
i_item_base_addr
3C00
655
"Item"
0
2 Bytes
i_item_base_addr
3C24
656
"Item"
0
2 Bytes
i_item_base_addr
3C28
705
"結晶迴路 Chips #3"
1
706
"Item"
0
2 Bytes
i_item_base_addr
3CEC
707
"Item"
0
2 Bytes
i_item_base_addr
3CF0
708
"Item"
0
2 Bytes
i_item_base_addr
3CF4
716
"Item"
0
2 Bytes
i_item_base_addr
3D14
717
"Item"
0
2 Bytes
i_item_base_addr
3D18
718
"Item"
0
2 Bytes
i_item_base_addr
3D1C
721
"Item"
0
2 Bytes
i_item_base_addr
3D28
726
"Item"
0
2 Bytes
i_item_base_addr
3D3C
727
"Item"
0
2 Bytes
i_item_base_addr
3D40
736
"Item"
0
2 Bytes
i_item_base_addr
3D64
737
"Item"
0
2 Bytes
i_item_base_addr
3D68
746
"Item"
0
2 Bytes
i_item_base_addr
3D8C
747
"Item"
0
2 Bytes
i_item_base_addr
3D90
757
"Item"
0
2 Bytes
i_item_base_addr
3DB4
758
"Item"
0
2 Bytes
i_item_base_addr
3DB8
767
"Item"
0
2 Bytes
i_item_base_addr
3DDC
768
"Item"
0
2 Bytes
i_item_base_addr
3DE0
769
"Item"
0
2 Bytes
i_item_base_addr
3DE4
807
"結晶迴路 Chips #4"
1
808
"Item"
0
2 Bytes
i_item_base_addr
3E7C
809
"Item"
0
2 Bytes
i_item_base_addr
3E80
810
"Item"
0
2 Bytes
i_item_base_addr
3E84
818
"Item"
0
2 Bytes
i_item_base_addr
3EA4
819
"Item"
0
2 Bytes
i_item_base_addr
3EA8
820
"Item"
0
2 Bytes
i_item_base_addr
3EAC
823
"Item"
0
2 Bytes
i_item_base_addr
3EB8
828
"Item"
0
2 Bytes
i_item_base_addr
3ECC
829
"Item"
0
2 Bytes
i_item_base_addr
3ED0
838
"Item"
0
2 Bytes
i_item_base_addr
3EF4
839
"Item"
0
2 Bytes
i_item_base_addr
3EF8
848
"Item"
0
2 Bytes
i_item_base_addr
3F1C
849
"Item"
0
2 Bytes
i_item_base_addr
3F20
859
"Item"
0
2 Bytes
i_item_base_addr
3F44
860
"Item"
0
2 Bytes
i_item_base_addr
3F48
869
"Item"
0
2 Bytes
i_item_base_addr
3F6C
870
"Item"
0
2 Bytes
i_item_base_addr
3F70
871
"Item"
0
2 Bytes
i_item_base_addr
3F74
909
"結晶迴路 Chips #5"
1
910
"Item"
0
2 Bytes
i_item_base_addr
400C
911
"Item"
0
2 Bytes
i_item_base_addr
4010
912
"Item"
0
2 Bytes
i_item_base_addr
4014
920
"Item"
0
2 Bytes
i_item_base_addr
4034
921
"Item"
0
2 Bytes
i_item_base_addr
4038
922
"Item"
0
2 Bytes
i_item_base_addr
403C
925
"Item"
0
2 Bytes
i_item_base_addr
4048
930
"Item"
0
2 Bytes
i_item_base_addr
405C
931
"Item"
0
2 Bytes
i_item_base_addr
4060
940
"Item"
0
2 Bytes
i_item_base_addr
4084
941
"Item"
0
2 Bytes
i_item_base_addr
4088
950
"Item"
0
2 Bytes
i_item_base_addr
40AC
951
"Item"
0
2 Bytes
i_item_base_addr
40B0
961
"Item"
0
2 Bytes
i_item_base_addr
40D4
962
"Item"
0
2 Bytes
i_item_base_addr
40D8
971
"Item"
0
2 Bytes
i_item_base_addr
40FC
972
"Item"
0
2 Bytes
i_item_base_addr
4100
973
"Item"
0
2 Bytes
i_item_base_addr
4104
1011
"結晶迴路 Chips #6"
1
1012
"Item"
0
2 Bytes
i_item_base_addr
419C
1013
"Item"
0
2 Bytes
i_item_base_addr
41A0
1014
"Item"
0
2 Bytes
i_item_base_addr
41A4
1022
"Item"
0
2 Bytes
i_item_base_addr
41C4
1023
"Item"
0
2 Bytes
i_item_base_addr
41C8
1024
"Item"
0
2 Bytes
i_item_base_addr
41CC
1027
"Item"
0
2 Bytes
i_item_base_addr
41D8
1032
"Item"
0
2 Bytes
i_item_base_addr
41EC
1033
"Item"
0
2 Bytes
i_item_base_addr
41F0
1042
"Item"
0
2 Bytes
i_item_base_addr
4214
1043
"Item"
0
2 Bytes
i_item_base_addr
4218
1052
"Item"
0
2 Bytes
i_item_base_addr
423C
1053
"Item"
0
2 Bytes
i_item_base_addr
4240
1063
"Item"
0
2 Bytes
i_item_base_addr
4264
1064
"Item"
0
2 Bytes
i_item_base_addr
4268
1073
"Item"
0
2 Bytes
i_item_base_addr
428C
1074
"Item"
0
2 Bytes
i_item_base_addr
4290
1075
"Item"
0
2 Bytes
i_item_base_addr
4294
1113
"結晶迴路 Chips #7"
1
1114
"Item"
0
2 Bytes
i_item_base_addr
432C
1115
"Item"
0
2 Bytes
i_item_base_addr
4330
1116
"Item"
0
2 Bytes
i_item_base_addr
4334
1124
"Item"
0
2 Bytes
i_item_base_addr
4354
1125
"Item"
0
2 Bytes
i_item_base_addr
4358
1126
"Item"
0
2 Bytes
i_item_base_addr
435C
1129
"Item"
0
2 Bytes
i_item_base_addr
4368
1134
"Item"
0
2 Bytes
i_item_base_addr
437C
1135
"Item"
0
2 Bytes
i_item_base_addr
4380
1144
"Item"
0
2 Bytes
i_item_base_addr
43A4
1145
"Item"
0
2 Bytes
i_item_base_addr
43A8
1154
"Item"
0
2 Bytes
i_item_base_addr
43CC
1155
"Item"
0
2 Bytes
i_item_base_addr
43D0
1165
"Item"
0
2 Bytes
i_item_base_addr
43F4
1166
"Item"
0
2 Bytes
i_item_base_addr
43F8
1175
"Item"
0
2 Bytes
i_item_base_addr
441C
1176
"Item"
0
2 Bytes
i_item_base_addr
4420
1177
"Item"
0
2 Bytes
i_item_base_addr
4424
31
"角色狀態 / Char. stats"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_CHAR_STAT,ed9.exe,8B 50 24 89 17) // should be unique
alloc(newmem,$1000,INJECT_CHAR_STAT)
label(code)
label(return)
label(i_char_stat_base_addr)
label(is_fill_HECp)
newmem:
mov [i_char_stat_base_addr], rax
cmp dword ptr [is_fill_HECp], 0
je @F
push rbx
mov ebx, [rax+10]
mov [rax+0C], ebx
mov ebx, [rax+18]
mov [rax+14], ebx
mov ebx, [rax+20]
mov [rax+1C], ebx
pop rbx
code:
mov edx,[rax+24]
mov [rdi],edx
jmp return
align 10 cc
i_char_stat_base_addr:
dq 0
is_fill_HECp:
dd 1
INJECT_CHAR_STAT:
jmp newmem
return:
registersymbol(INJECT_CHAR_STAT)
registersymbol(i_char_stat_base_addr)
registersymbol(is_fill_HECp)
[DISABLE]
INJECT_CHAR_STAT:
db 8B 50 24 89 17
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+4FCE6C
ed9.exe+4FCE4D: CC - int 3
ed9.exe+4FCE4E: CC - int 3
ed9.exe+4FCE4F: CC - int 3
ed9.exe+4FCE50: 48 89 5C 24 08 - mov [rsp+08],rbx
ed9.exe+4FCE55: 57 - push rdi
ed9.exe+4FCE56: 48 83 EC 50 - sub rsp,50
ed9.exe+4FCE5A: 48 8B F9 - mov rdi,rcx
ed9.exe+4FCE5D: 48 8B 0D 64 CA 4C 00 - mov rcx,[ed9.exe+9C98C8]
ed9.exe+4FCE64: E8 E7 21 F0 FF - call ed9.exe+3FF050
ed9.exe+4FCE69: 48 8B D8 - mov rbx,rax
// ---------- INJECTING HERE ----------
ed9.exe+4FCE6C: 8B 50 24 - mov edx,[rax+24]
// ---------- DONE INJECTING ----------
ed9.exe+4FCE6F: 89 17 - mov [rdi],edx
ed9.exe+4FCE71: 8B 50 28 - mov edx,[rax+28]
ed9.exe+4FCE74: 89 57 04 - mov [rdi+04],edx
ed9.exe+4FCE77: 8B 50 2C - mov edx,[rax+2C]
ed9.exe+4FCE7A: 89 57 08 - mov [rdi+08],edx
ed9.exe+4FCE7D: 8B 48 30 - mov ecx,[rax+30]
ed9.exe+4FCE80: 89 4F 0C - mov [rdi+0C],ecx
ed9.exe+4FCE83: 8B 48 34 - mov ecx,[rax+34]
ed9.exe+4FCE86: 89 4F 10 - mov [rdi+10],ecx
ed9.exe+4FCE89: 8B 40 38 - mov eax,[rax+38]
}
220
"開啟角色狀態選單 / usage: view char in menu"
8000FF
1
32
"Base addr."
1
0
808080
8 Bytes
i_char_stat_base_addr
51
"Fill HP/EP/CP?"
0:No
1:Yes
0
C08000
4 Bytes
is_fill_HECp
34
"Char ID?"
0:范恩 / Van Arkride
1:亞妮艾絲 / Agnes Claudel
2:菲莉 / Feri Al-Fayed
3:亞倫 / Aaron Wei
4:卡特爾 / Quatre Salision
5:貝爾加德 / Bergard Zeman
6:莉婕特 / Risette Twining
8:陣 / Zin Vathek
9:金凱德 / Rene Kincaid
10:茱迪絲 / Judith Ranster
11:艾蕾因 / Elaine Auclair
12:靜名 / Shizuna Rem Misurugi
13:黑鐵 / Kurogane
14:露克蕾琪亞 / Lucrezia Isselee
17:斯溫 / Swin Abel
18:娜狄雅 / Nadia Rayne
19:蕾恩 / Renne Bright
62:莉夏 / Rixia Mao
63:菲 / Fie Claussell
149:卡希姆 / Kasim Al-Fayed
151:塞莉絲 / Celis Ortesia
152:里翁 / Rion Balthazar
0
FF8080
4 Bytes
i_char_stat_base_addr
0
36
"LV"
0
FF8080
4 Bytes
i_char_stat_base_addr
4
44
"EXP"
0
FF8080
4 Bytes
i_char_stat_base_addr
08
45
"HP"
0
FF8080
4 Bytes
i_char_stat_base_addr
C
46
"Max HP"
0
FF8080
4 Bytes
i_char_stat_base_addr
10
47
"EP"
0
FF8080
4 Bytes
i_char_stat_base_addr
14
48
"Max EP"
0
FF8080
4 Bytes
i_char_stat_base_addr
18
49
"CP"
0
FF8080
4 Bytes
i_char_stat_base_addr
1C
50
"Max CP"
0
FF8080
4 Bytes
i_char_stat_base_addr
20
35
"STR"
0
FF8080
4 Bytes
i_char_stat_base_addr
24
37
"DEF"
0
FF8080
4 Bytes
i_char_stat_base_addr
28
38
"ATS"
0
FF8080
4 Bytes
i_char_stat_base_addr
2C
39
"ADF"
0
FF8080
4 Bytes
i_char_stat_base_addr
30
40
"SPD"
0
FF8080
4 Bytes
i_char_stat_base_addr
34
41
"AGL"
0
FF8080
4 Bytes
i_char_stat_base_addr
38
42
"DEX"
0
FF8080
4 Bytes
i_char_stat_base_addr
3C
43
"MOV"
0
FF8080
4 Bytes
i_char_stat_base_addr
40
149
"武器 ID / Weapon ID"
0
FF8080
4 Bytes
i_char_stat_base_addr
324
154
"副武器 ID / Sub ID"
0
FF8080
4 Bytes
i_char_stat_base_addr
328
153
"護甲 ID / Armor ID"
0
FF8080
4 Bytes
i_char_stat_base_addr
32C
152
"鞋子 ID / Shoe ID"
0
FF8080
4 Bytes
i_char_stat_base_addr
330
151
"配件1 ID / Accessory ID 1"
1762:星杯掛墜
1763:石青寶珠
1764:獅子王刻印
1771:秩序護符
1772:灰色護符
1773:混沌寶珠
0
FF8080
4 Bytes
i_char_stat_base_addr
334
150
"配件2 ID / Accessory ID 2"
配件1 ID / Accessory ID 1
0
FF8080
4 Bytes
i_char_stat_base_addr
338
204
"取得部份統計值 / Some stats"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ACHI_STATS,ed9.exe,48 8D 04 85 10 11 01 00 8B 0C 07) // should be unique
alloc(newmem,$1000,INJECT_GET_ACHI_STATS)
label(code)
label(return)
label(i_base_ahi_stat_addr)
newmem:
code:
lea rax,[rax*4+00011110]
cmp eax, 111D8 // EX chain count
je set_achi_base_addr
jmp endp
set_achi_base_addr:
push rbx
lea rbx, [rdi+rax]
mov [i_base_ahi_stat_addr], rbx
pop rbx
endp:
jmp return
align 10 cc
align 10 cc
i_base_ahi_stat_addr:
dq 0
INJECT_GET_ACHI_STATS:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_ACHI_STATS)
registersymbol(i_base_ahi_stat_addr)
[DISABLE]
INJECT_GET_ACHI_STATS:
db 48 8D 04 85 10 11 01 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+5DFAC
ed9.exe+5DF79: 48 8B 3D 58 B9 96 00 - mov rdi,[ed9.exe+9C98D8]
ed9.exe+5DF80: 3D 00 01 00 00 - cmp eax,00000100
ed9.exe+5DF85: 72 25 - jb ed9.exe+5DFAC
ed9.exe+5DF87: 4C 8D 0D 82 44 88 00 - lea r9,[ed9.exe+8E2410]
ed9.exe+5DF8E: 41 B8 44 02 00 00 - mov r8d,00000244
ed9.exe+5DF94: 48 8D 15 A5 43 88 00 - lea rdx,[ed9.exe+8E2340]
ed9.exe+5DF9B: B9 03 00 00 00 - mov ecx,00000003
ed9.exe+5DFA0: E8 6B B6 4A 00 - call ed9.exe+509610
ed9.exe+5DFA5: B8 10 11 01 00 - mov eax,00011110
ed9.exe+5DFAA: EB 08 - jmp ed9.exe+5DFB4
// ---------- INJECTING HERE ----------
ed9.exe+5DFAC: 48 8D 04 85 10 11 01 00 - lea rax,[rax*4+00011110]
// ---------- DONE INJECTING ----------
ed9.exe+5DFB4: 8B 0C 07 - mov ecx,[rdi+rax]
ed9.exe+5DFB7: 8B C1 - mov eax,ecx
ed9.exe+5DFB9: C1 E8 1E - shr eax,1E
ed9.exe+5DFBC: 83 F8 01 - cmp eax,01
ed9.exe+5DFBF: 75 0C - jne ed9.exe+5DFCD
ed9.exe+5DFC1: 8D 04 8D 00 00 00 00 - lea eax,[rcx*4+00000000]
ed9.exe+5DFC8: C1 F8 02 - sar eax,02
ed9.exe+5DFCB: EB 20 - jmp ed9.exe+5DFED
ed9.exe+5DFCD: 83 F8 02 - cmp eax,02
ed9.exe+5DFD0: 75 19 - jne ed9.exe+5DFEB
}
219
"選單->成就 / Menu -> achievement "
8000FF
1
1210
"注意：數值直接改超過並不會觸發成就 / If values exceed the achievement threshold, it will not be triggered."
8000FF
1
209
"開啟寶箱數 / treasure box opened #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
24
1220
"魔法驅動器數 / Driver #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
28
1219
"魔法外掛組件數 / Plugin #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
30
1217
"4spg委託數 / 4spg quest #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
74
1218
"禮物贈送次數 / Gift #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
78
1216
"S.C.L.M 連鎖 / S.C.L.M. chain #"
0:N/A or disabled
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
A4
215
"S.C.L.M 支援 / S.C.L.M. support #"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
A8
217
"S增幅行動 / S-Boost actions #"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
AC
212
"S戰技 / S-Attack#"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
B0
218
"HIT連擊 / # of chain hit"
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
B4
205
"累計米拉 / # Mira earned (3-bytes)"
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
CC
1209
"戰術獎勵"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
B8
214
"先制晶片攻擊 / # pree. chip attack"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
BC
213
"總傷害 / # of total damage (3-bytes)"
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
C0
216
"累計打倒數 / # of kills"
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
C4
211
"原野累計打倒數 / # of field kills"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
C8
210
"發動晶片技能 / # of chip skill"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
D4
207
"原野精準閃避 / # field dodge"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
D8
206
"EX連鎖次數 / # of EX-chain"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
DC
208
"快捷魔法攻擊次數 / # of quick magic attack"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
E4
1179
"交錯蓄力攻擊 / # switch-charge"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
EC
1180
"晶片探測累計 / # S-Token by detection"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
F0
1181
"秘儀方塊解析次數 / # cube decryption"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
F4
1182
"晶片偵測傳送門次數 / # gate by detection"
S.C.L.M 連鎖 / S.C.L.M. chain #
0
FF8080
Custom
Kueo2 integer
i_base_ahi_stat_addr
F8
1224
"目前選到的道具 / Selected item in menu"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-03-05
Author : bbfox@https://opencheattbales.com
}
[ENABLE]
aobscanmodule(INJECT_GET_CURR_ITEM_INFO,ed9.exe,0F B7 94 88 E8 6A 19 00 85 D2 0F 85 97) // should be unique
alloc(newmem,$1000,INJECT_GET_CURR_ITEM_INFO)
label(code)
label(return)
label(i_item_idx)
label(i_cur_item_base)
newmem:
code:
movzx edx,word ptr [rax+rcx*4+00196AE8]
//--------------
push rbx
lea rbx, [rax+rcx*4+00196AE8]
mov [i_cur_item_base], rbx
mov [i_item_idx], rcx
pop rbx
//--------------
jmp return
align 10 cc
i_item_idx:
dq 0
i_cur_item_base:
dq 0
INJECT_GET_CURR_ITEM_INFO:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_CURR_ITEM_INFO)
registersymbol(i_item_idx)
registersymbol(i_cur_item_base)
[DISABLE]
INJECT_GET_CURR_ITEM_INFO:
db 0F B7 94 88 E8 6A 19 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+14CEF1
ed9.exe+14CEC1: 48 8B 05 E0 D9 87 00 - mov rax,[ed9.exe+9CA8A8]
ed9.exe+14CEC8: 8B 94 88 C8 0C 27 00 - mov edx,[rax+rcx*4+00270CC8]
ed9.exe+14CECF: EB 28 - jmp ed9.exe+14CEF9
ed9.exe+14CED1: 3D 3F 01 00 00 - cmp eax,0000013F
ed9.exe+14CED6: 75 0F - jne ed9.exe+14CEE7
ed9.exe+14CED8: 48 8B 05 C9 D9 87 00 - mov rax,[ed9.exe+9CA8A8]
ed9.exe+14CEDF: 8B 90 EC 0C 27 00 - mov edx,[rax+00270CEC]
ed9.exe+14CEE5: EB 12 - jmp ed9.exe+14CEF9
ed9.exe+14CEE7: 48 8B C8 - mov rcx,rax
ed9.exe+14CEEA: 48 8B 05 B7 D9 87 00 - mov rax,[ed9.exe+9CA8A8]
// ---------- INJECTING HERE ----------
ed9.exe+14CEF1: 0F B7 94 88 E8 6A 19 00 - movzx edx,word ptr [rax+rcx*4+00196AE8]
// ---------- DONE INJECTING ----------
ed9.exe+14CEF9: 85 D2 - test edx,edx
ed9.exe+14CEFB: 0F 85 97 00 00 00 - jne ed9.exe+14CF98
ed9.exe+14CF01: 48 8B 9F 78 01 00 00 - mov rbx,[rdi+00000178]
ed9.exe+14CF08: C7 45 E7 00 00 00 3F - mov [rbp-19],3F000000
ed9.exe+14CF0F: C7 45 EB 00 00 00 3F - mov [rbp-15],3F000000
ed9.exe+14CF16: C7 45 EF 00 00 00 3F - mov [rbp-11],3F000000
ed9.exe+14CF1D: F3 0F 10 45 F3 - movss xmm0,[rbp-0D]
ed9.exe+14CF22: F3 0F 11 45 F3 - movss [rbp-0D],xmm0
ed9.exe+14CF27: 41 B8 02 00 00 00 - mov r8d,00000002
ed9.exe+14CF2D: 48 8D 15 98 98 77 00 - lea rdx,[ed9.exe+8C67CC]
}
1227
"選單-> Item / Menu -> item"
8000FF
1
1228
"重要, DLC除外 / Exclude important & DLC"
8000FF
1
1225
"count"
0
FF8080
2 Bytes
i_cur_item_base
0
1226
"ID"
0
808080
8 Bytes
i_item_idx
226
"練成石&道具使用時不減 / inf. item/Craft stone when use"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-28
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_SSTONE_WHEN_USE,ed9.exe,66 89 91 E8 6A 19 00) // should be unique
alloc(newmem,$1000,INJECT_INF_SSTONE_WHEN_USE)
label(code)
label(return)
newmem:
code:
//mov [rcx+00196AE8],dx
jmp return
INJECT_INF_SSTONE_WHEN_USE:
jmp newmem
nop 2
return:
registersymbol(INJECT_INF_SSTONE_WHEN_USE)
[DISABLE]
INJECT_INF_SSTONE_WHEN_USE:
db 66 89 91 E8 6A 19 00
unregistersymbol(INJECT_INF_SSTONE_WHEN_USE)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+402068
ed9.exe+402047: 5F - pop rdi
ed9.exe+402048: C3 - ret
ed9.exe+402049: 48 8D 0C 9F - lea rcx,[rdi+rbx*4]
ed9.exe+40204D: 48 8B 5C 24 40 - mov rbx,[rsp+40]
ed9.exe+402052: 0F B7 81 E8 6A 19 00 - movzx eax,word ptr [rcx+00196AE8]
ed9.exe+402059: 2B C6 - sub eax,esi
ed9.exe+40205B: 48 8B 74 24 48 - mov rsi,[rsp+48]
ed9.exe+402060: 85 C0 - test eax,eax
ed9.exe+402062: 66 0F 4F D0 - cmovg dx,ax
ed9.exe+402066: B0 01 - mov al,01
// ---------- INJECTING HERE ----------
ed9.exe+402068: 66 89 91 E8 6A 19 00 - mov [rcx+00196AE8],dx
// ---------- DONE INJECTING ----------
ed9.exe+40206F: 48 83 C4 30 - add rsp,30
ed9.exe+402073: 5F - pop rdi
ed9.exe+402074: C3 - ret
ed9.exe+402075: CC - int 3
ed9.exe+402076: CC - int 3
ed9.exe+402077: CC - int 3
ed9.exe+402078: CC - int 3
ed9.exe+402079: CC - int 3
ed9.exe+40207A: CC - int 3
ed9.exe+40207B: CC - int 3
}
1203
"七耀之心生命值資料 / Card game life data"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-29
Author : bbfox@https://opencheattables.com
}
[ENABLE]
//aobscanmodule(INJECT_CARD_GAME_LIFE,ed9.exe,ERROR: Could not find unique AOB, tried code "8B 43 04 89 43 08") // should be unique
aobscanmodule(INJECT_CARD_GAME_LIFE,ed9.exe,CC CC CC CC CC CC CC 40 53 48 83 EC 30 F3 0F 10 51 0C 48 8B D9 48 83 C1 0C F3 0F 10 43 10 0F 2F C2 72 ?? 8B 43 04 89 43 08) // should be unique
alloc(newmem,$1000,INJECT_CARD_GAME_LIFE)
label(code)
label(return)
label(i_card_addr_1)
label(i_card_addr_2)
label(i_card_addr_3)
label(i_card_addr_4)
newmem:
chk_1:
cmp [i_card_addr_1], rbx
je endp
cmp qword ptr [i_card_addr_1], 0
jne chk_2
mov [i_card_addr_1], rbx
jmp endp
chk_2:
cmp [i_card_addr_2], rbx
je endp
cmp qword ptr [i_card_addr_2], 0
jne chk_3
mov [i_card_addr_2], rbx
jmp endp
chk_3:
cmp [i_card_addr_3], rbx
je endp
cmp qword ptr [i_card_addr_3], 0
jne chk_4
mov [i_card_addr_3], rbx
jmp endp
chk_4:
cmp [i_card_addr_4], rbx
je endp
cmp qword ptr [i_card_addr_4], 0
jne endp
mov [i_card_addr_4], rbx
jmp endp
endp:
code:
mov eax,[rbx+04]
mov [rbx+08],eax
jmp return
align 10 cc
i_card_addr_1:
dq 0
i_card_addr_2:
dq 0
i_card_addr_3:
dq 0
i_card_addr_4:
dq 0
INJECT_CARD_GAME_LIFE+23:
jmp newmem
nop
return:
registersymbol(INJECT_CARD_GAME_LIFE)
registersymbol(i_card_addr_1)
registersymbol(i_card_addr_2)
registersymbol(i_card_addr_3)
registersymbol(i_card_addr_4)
[DISABLE]
INJECT_CARD_GAME_LIFE+23:
db 8B 43 04 89 43 08
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+127E7C
ed9.exe+127E5E: CC - int 3
ed9.exe+127E5F: CC - int 3
ed9.exe+127E60: 40 53 - push rbx
ed9.exe+127E62: 48 83 EC 30 - sub rsp,30
ed9.exe+127E66: F3 0F 10 51 0C - movss xmm2,[rcx+0C]
ed9.exe+127E6B: 48 8B D9 - mov rbx,rcx
ed9.exe+127E6E: 48 83 C1 0C - add rcx,0C
ed9.exe+127E72: F3 0F 10 43 10 - movss xmm0,[rbx+10]
ed9.exe+127E77: 0F 2F C2 - comiss xmm0,xmm2
ed9.exe+127E7A: 72 0C - jb ed9.exe+127E88
// ---------- INJECTING HERE ----------
ed9.exe+127E7C: 8B 43 04 - mov eax,[rbx+04]
// ---------- DONE INJECTING ----------
ed9.exe+127E7F: 89 43 08 - mov [rbx+08],eax
ed9.exe+127E82: 48 83 C4 30 - add rsp,30
ed9.exe+127E86: 5B - pop rbx
ed9.exe+127E87: C3 - ret
ed9.exe+127E88: F3 0F 58 C1 - addss xmm0,xmm1
ed9.exe+127E8C: 0F 29 74 24 20 - movaps [rsp+20],xmm6
ed9.exe+127E91: 48 8D 44 24 40 - lea rax,[rsp+40]
ed9.exe+127E96: 0F 2F C2 - comiss xmm0,xmm2
ed9.exe+127E99: F3 0F 11 44 24 40 - movss [rsp+40],xmm0
ed9.exe+127E9F: 48 0F 47 C1 - cmova rax,rcx
}
1208
"重玩時需重新啟用 / When you exit the session, re-enable it. "
8000FF
1
1204
"P1 (normally Player)"
0
FF8080
4 Bytes
i_card_addr_1
4
1205
"P2"
0
FF8080
4 Bytes
i_card_addr_2
4
1206
"P3"
0
FF8080
4 Bytes
i_card_addr_3
4
1207
"P4"
0
FF8080
4 Bytes
i_card_addr_4
4
1186
"快速釣魚 / Fast fishing"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2023-01-29
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INST_FISHING,ed9.exe,F3 0F 11 89 10 03 00 00 F3) // should be unique
alloc(newmem,$1000,INJECT_INST_FISHING)
label(code)
label(return)
label(is_inst_fishing_enabled)
label(i_inst_fishing_data_addr)
newmem:
mov [i_inst_fishing_data_addr], rcx
cmp dword ptr [is_inst_fishing_enabled], 1
jne code
vmovss xmm1, [vf_300]
code:
movss [rcx+00000310],xmm1
jmp return
align 10 cc
vf_300:
dd (float)300
is_inst_fishing_enabled:
dd 1
i_inst_fishing_data_addr:
dq 0
INJECT_INST_FISHING:
jmp newmem
nop 3
return:
registersymbol(INJECT_INST_FISHING)
registersymbol(is_inst_fishing_enabled)
registersymbol(i_inst_fishing_data_addr)
[DISABLE]
INJECT_INST_FISHING:
db F3 0F 11 89 10 03 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: ed9.exe+375859
ed9.exe+375826: 41 0F 2F C3 - comiss xmm0,xmm11
ed9.exe+37582A: 44 0F 29 60 88 - movaps [rax-78],xmm12
ed9.exe+37582F: 44 0F 28 E1 - movaps xmm12,xmm1
ed9.exe+375833: 76 3C - jna ed9.exe+375871
ed9.exe+375835: 0F 28 C1 - movaps xmm0,xmm1
ed9.exe+375838: F3 0F 10 89 10 03 00 00 - movss xmm1,[rcx+00000310]
ed9.exe+375840: F3 0F 59 81 20 03 00 00 - mulss xmm0,[rcx+00000320]
ed9.exe+375848: 48 89 B1 14 03 00 00 - mov [rcx+00000314],rsi
ed9.exe+37584F: 89 B1 1C 03 00 00 - mov [rcx+0000031C],esi
ed9.exe+375855: F3 0F 5C C8 - subss xmm1,xmm0
// ---------- INJECTING HERE ----------
ed9.exe+375859: F3 0F 11 89 10 03 00 00 - movss [rcx+00000310],xmm1
// ---------- DONE INJECTING ----------
ed9.exe+375861: F3 0F 11 89 08 03 00 00 - movss [rcx+00000308],xmm1
ed9.exe+375869: F3 0F 11 89 0C 03 00 00 - movss [rcx+0000030C],xmm1
ed9.exe+375871: E8 2A 3B 00 00 - call ed9.exe+3793A0
ed9.exe+375876: 0F 57 FF - xorps xmm7,xmm7
ed9.exe+375879: 0F 2F BF 10 03 00 00 - comiss xmm7,[rdi+00000310]
ed9.exe+375880: 76 1B - jna ed9.exe+37589D
ed9.exe+375882: 48 63 87 FC 00 00 00 - movsxd rax,dword ptr [rdi+000000FC]
ed9.exe+375889: 48 8D 0C 40 - lea rcx,[rax+rax*2]
ed9.exe+37588D: C7 84 8F CC 00 00 00 0A 00 00 00 - mov [rdi+rcx*4+000000CC],0000000A
ed9.exe+375898: E9 4F 07 00 00 - jmp ed9.exe+375FEC
}
1188
"Enabled?"
0:No
1:Yes
0
C08000
4 Bytes
is_inst_fishing_enabled
1187
"Goal value"
0
FF8080
Float
i_inst_fishing_data_addr
310
8
"The Legend of Heroes: Kuro no Kiseki Ⅱ -CRIMSON SiN- 英雄傳說 黎之軌跡Ⅱ -緋紅原罪- v1.14 / https://opencheattables.com"
008E00
1
synchronize(function() AddressList.Header.OnSectionClick = nil end)
--memory record IDs now allowed to be 'locked'
IDs = {23, 108, 24, 25, 106, 107, 88, 73, 201, 94, 30, 79, 171, 172, 34,
}
--determine event trigger sequence
if not contains then
function contains(table, val)
for i = 1, #table do
if table[i] == val then
return true
end
end
return false
end
end
if not onMemRecPreExecute then
function onMemRecPreExecute(memoryrecord, newstate)
if contains(IDs, memoryrecord.ID) and newstate then
synchronize(function()
if not memoryrecord.OnActivate then
memoryrecord.OnActivate = function(memoryrecord, before, currentstate)
return false
end
end
end)
end
end
end
if _kuro_2_customInt == nil then
--print('process name before ' .. process)
registerCustomTypeAutoAssembler([[
alloc(TypeName,256)
alloc(ByteSize,8)
alloc(ConvertRoutine,1024)
alloc(ConvertBackRoutine,1024)
alloc(UsesFloat,1)
TypeName:
db 'Kueo2 integer',0
ByteSize:
dd 4
UsesFloat:
db 0
ConvertRoutine:
//at this point ecx contains the address where the bytes are stored
//return with rax/eax
xor rax,rax
mov eax, dword ptr [rcx]
and eax, 3FFFFFFF
ret
ConvertBackRoutine:
//at this point edx contains the address to write the value to
//and ecx contains the value
push rax
xor rax, rax
mov eax, ecx
or eax, 40000000
mov dword ptr [rdx], eax
pop rax
ret
]])
_kuro_2_customInt = true
--print('process name after: ' .. process)
end