32
"Compact Mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
48
"正體中文 / English switch"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
--getMemoryRecordByDescription
getAddressList().getMemoryRecordByID(5).Description = '戰鬥：玩家資訊'
getAddressList().getMemoryRecordByID(7).Description = '設定最小HP'
getAddressList().getMemoryRecordByID(21).Description = '主射擊武器+'
getAddressList().getMemoryRecordByID(33).Description = '自動充填主副射擊武器'
getAddressList().getMemoryRecordByID(18).Description = '彈藥數'
getAddressList().getMemoryRecordByID(20).Description = '充能值'
getAddressList().getMemoryRecordByID(14).Description = 'SPA可用倒數'
getAddressList().getMemoryRecordByID(30).Description = '基本資料 (使用：選單 → 道具)'
getAddressList().getMemoryRecordByID(41).Description = '取得僚機資料 (使用：選單 → 僚機情報'
getAddressList().getMemoryRecordByID(44).Description = '友好度'
getAddressList().getMemoryRecordByID(46).Description = '取得本次遊玩時間'
getAddressList().getMemoryRecordByID(58).Description = '武器+'
getAddressList().getMemoryRecordByID(50).Description = 'Sub+'
getAddressList().getMemoryRecordByID(52).Description = 'Sub1: 彈藥數'
getAddressList().getMemoryRecordByID(53).Description = 'Sub1: Flag'
getAddressList().getMemoryRecordByID(54).Description = 'Sub1: 充能值'
getAddressList().getMemoryRecordByID(55).Description = 'Sub2: 彈藥數'
getAddressList().getMemoryRecordByID(56).Description = 'Sub2: Flag'
getAddressList().getMemoryRecordByID(57).Description = 'Sub2: 充能值'
getAddressList().getMemoryRecordByID(64).Description = '設定素材 >= 70 (使用：選單 → 道具)'
getAddressList().getMemoryRecordByID(61).Description = '突破上限材料 => 75 (使用：選單 → MS設定 → 強化 → 突破上限)'
getAddressList().getMemoryRecordByID(62).Description = '最後道具數量'
getAddressList().getMemoryRecordByID(67).Description = '快速SPA'
getAddressList().getMemoryRecordByID(68).Description = '倍率'
getAddressList().getMemoryRecordByID(69).Description = 'Booster無限'
getAddressList().getMemoryRecordByID(70).Description = '非玩家倍率'
getAddressList().getMemoryRecordByID(71).Description = '快速技能條'
getAddressList().getMemoryRecordByID(73).Description = '混戰鑰匙無限 (至少持有一把; 使用：選單 → 任務)'
getAddressList().getMemoryRecordByID(75).Description = 'MS設計圖進度 (使用: MS設定 → 瀏覽MS；至少要持有一張設計圖)'
getAddressList().getMemoryRecordByID(76).Description = '圖面1 數量'
getAddressList().getMemoryRecordByID(77).Description = '圖面2 數量'
getAddressList().getMemoryRecordByID(78).Description = '圖面3 數量'
getAddressList().getMemoryRecordByID(79).Description = '圖面4 數量'
getAddressList().getMemoryRecordByID(80).Description = '圖面5 數量'
getLuaEngine().close()
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
getAddressList().getMemoryRecordByID(5).Description = 'Battle: Player'
getAddressList().getMemoryRecordByID(7).Description = 'Set min. HP'
getAddressList().getMemoryRecordByID(21).Description = 'Main+'
getAddressList().getMemoryRecordByID(33).Description = 'Auto fill bullets'
getAddressList().getMemoryRecordByID(18).Description = '# of bullets'
getAddressList().getMemoryRecordByID(20).Description = 'Charge'
getAddressList().getMemoryRecordByID(14).Description = 'SPA Countdown'
getAddressList().getMemoryRecordByID(30).Description = 'Base data (Usage: Menu -> Items / display coin)'
getAddressList().getMemoryRecordByID(41).Description = 'Get Partner data (Usage: Menu -> Partner Info)'
getAddressList().getMemoryRecordByID(44).Description = 'Friendship'
getAddressList().getMemoryRecordByID(46).Description = 'Get session time'
getAddressList().getMemoryRecordByID(58).Description = 'Weapons+'
getAddressList().getMemoryRecordByID(50).Description = 'Sub+'
getAddressList().getMemoryRecordByID(52).Description = 'Sub1: # of bullets'
getAddressList().getMemoryRecordByID(53).Description = 'Sub1: Flag'
getAddressList().getMemoryRecordByID(54).Description = 'Sub1: Charge'
getAddressList().getMemoryRecordByID(55).Description = 'Sub2: # of bullets'
getAddressList().getMemoryRecordByID(56).Description = 'Sub2: Flag'
getAddressList().getMemoryRecordByID(57).Description = 'Sub2: Charge'
getAddressList().getMemoryRecordByID(64).Description = 'Set material >= 70 (Usage: Menu -> Items)'
getAddressList().getMemoryRecordByID(61).Description = 'Uncap item => 75 (Usage: Menu -> MS Settings -> Upgrade -> Uncap)'
getAddressList().getMemoryRecordByID(62).Description = 'Last item #'
getAddressList().getMemoryRecordByID(67).Description = 'Faster SPA'
getAddressList().getMemoryRecordByID(68).Description = 'Multiplier'
getAddressList().getMemoryRecordByID(69).Description = 'Inf. Booster'
getAddressList().getMemoryRecordByID(70).Description = 'Non-player multiplier'
getAddressList().getMemoryRecordByID(71).Description = 'Fast skill gauge'
getAddressList().getMemoryRecordByID(73).Description = 'Inf. Chaos mission key (Must >=1; Usage: Menu -> Mission)'
getAddressList().getMemoryRecordByID(75).Description = 'MS Blueprints progress (Usage: MS setting -> browse MSs; # of Blueprint must > 0)'
getAddressList().getMemoryRecordByID(76).Description = '# of Blueprint 1'
getAddressList().getMemoryRecordByID(77).Description = '# of Blueprint 2'
getAddressList().getMemoryRecordByID(78).Description = '# of Blueprint 3'
getAddressList().getMemoryRecordByID(79).Description = '# of Blueprint 4'
getAddressList().getMemoryRecordByID(80).Description = '# of Blueprint 5'
getLuaEngine().close()
5
"Battle: Player"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_PLAYER_BATTLE_HP_1,SDGundamBA-Win64-Shipping.exe,44 0F 2E 83 B0 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_GET_PLAYER_BATTLE_HP_1)
label(code)
label(return)
label(i_player_base_addr)
label(player_min_hp_value)
label(i_main_mark_addr)
label(i_sub1_mark_addr)
label(i_sub2_mark_addr)
newmem:
mov [i_player_base_addr], rbx
push rax
push rcx
mov rax, [rbx+158]
lea rcx, [rax+304]
mov [i_main_mark_addr], rcx
mov rax, [rax+394]
lea rcx, [rax+0]
mov [i_sub1_mark_addr], rcx
lea rcx, [rax+90]
mov [i_sub2_mark_addr], rcx
pop rcx
pop rax
vmovss xmm14, [rbx+000000B0]
vmovss xmm15, [player_min_hp_value]
ucomiss xmm14, xmm15
jae code
vmovss [rbx+000000B0], xmm15
code:
ucomiss xmm8,[rbx+000000B0]
jmp return
align 10 cc
i_player_base_addr:
dq 0
player_min_hp_value:
dd (float)300
i_main_mark_addr:
dq 0
i_sub1_mark_addr:
dq 0
i_sub2_mark_addr:
dq 0
INJECT_GET_PLAYER_BATTLE_HP_1:
jmp newmem
nop 3
return:
registersymbol(player_min_hp_value)
registersymbol(INJECT_GET_PLAYER_BATTLE_HP_1)
registersymbol(i_player_base_addr)
registersymbol(i_main_mark_addr)
registersymbol(i_sub1_mark_addr)
registersymbol(i_sub2_mark_addr)
[DISABLE]
INJECT_GET_PLAYER_BATTLE_HP_1:
db 44 0F 2E 83 B0 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10E1DD6
SDGundamBA-Win64-Shipping.exe+10E1DAF: 0F 29 74 24 40 - movaps [rsp+40],xmm6
SDGundamBA-Win64-Shipping.exe+10E1DB4: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+10E1DB7: F3 0F 10 B3 60 01 00 00 - movss xmm6,[rbx+00000160]
SDGundamBA-Win64-Shipping.exe+10E1DBF: E8 CC 99 D7 FF - call SDGundamBA-Win64-Shipping.exe+E5B790
SDGundamBA-Win64-Shipping.exe+10E1DC4: 0F 2E F0 - ucomiss xmm6,xmm0
SDGundamBA-Win64-Shipping.exe+10E1DC7: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
SDGundamBA-Win64-Shipping.exe+10E1DCC: 75 05 - jne SDGundamBA-Win64-Shipping.exe+10E1DD3
SDGundamBA-Win64-Shipping.exe+10E1DCE: 40 32 F6 - xor sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DD1: EB 03 - jmp SDGundamBA-Win64-Shipping.exe+10E1DD6
SDGundamBA-Win64-Shipping.exe+10E1DD3: 40 B6 01 - mov sil,01
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10E1DD6: 44 0F 2E 83 B0 00 00 00 - ucomiss xmm8,[rbx+000000B0]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10E1DDE: 75 03 - jne SDGundamBA-Win64-Shipping.exe+10E1DE3
SDGundamBA-Win64-Shipping.exe+10E1DE0: 40 32 F6 - xor sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DE3: 40 3A B7 58 03 00 00 - cmp sil,[rdi+00000358]
SDGundamBA-Win64-Shipping.exe+10E1DEA: 74 28 - je SDGundamBA-Win64-Shipping.exe+10E1E14
SDGundamBA-Win64-Shipping.exe+10E1DEC: 48 8B 07 - mov rax,[rdi]
SDGundamBA-Win64-Shipping.exe+10E1DEF: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+10E1DF2: 4C 8B 88 78 04 00 00 - mov r9,[rax+00000478]
SDGundamBA-Win64-Shipping.exe+10E1DF9: 40 84 F6 - test sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DFC: 74 07 - je SDGundamBA-Win64-Shipping.exe+10E1E05
SDGundamBA-Win64-Shipping.exe+10E1DFE: 45 33 C0 - xor r8d,r8d
}
7
"Set min. HP"
0
FF8080
Float
player_min_hp_value
22
"Time (Readonly)"
0
Float
i_player_base_addr
114
3AC
158
71
"Fast skill gauge"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SKILL_GAUGE,SDGundamBA-Win64-Shipping.exe,F3 0F 11 B3 6C 01 00 00) // should be unique
alloc(newmem,$1000,INJECT_SKILL_GAUGE)
label(code)
label(return)
newmem:
cmp rbx, [i_player_base_addr]
jne code
vmovss xmm15, [vf_75]
vucomiss xmm6, xmm15
jae code
vmovss xmm6, [vf_75]
code:
movss [rbx+0000016C],xmm6
jmp return
align 10 cc
vf_75:
dd (float)75
INJECT_SKILL_GAUGE:
jmp newmem
nop 3
return:
registersymbol(INJECT_SKILL_GAUGE)
[DISABLE]
INJECT_SKILL_GAUGE:
db F3 0F 11 B3 6C 01 00 00
unregistersymbol(INJECT_SKILL_GAUGE)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E5306A
SDGundamBA-Win64-Shipping.exe+E53042: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E53045: 0F 2F F0 - comiss xmm6,xmm0
SDGundamBA-Win64-Shipping.exe+E53048: 77 10 - ja SDGundamBA-Win64-Shipping.exe+E5305A
SDGundamBA-Win64-Shipping.exe+E5304A: 48 8B 5C 24 40 - mov rbx,[rsp+40]
SDGundamBA-Win64-Shipping.exe+E5304F: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
SDGundamBA-Win64-Shipping.exe+E53054: 48 83 C4 30 - add rsp,30
SDGundamBA-Win64-Shipping.exe+E53058: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+E53059: C3 - ret
SDGundamBA-Win64-Shipping.exe+E5305A: F3 0F 58 B3 6C 01 00 00 - addss xmm6,[rbx+0000016C]
SDGundamBA-Win64-Shipping.exe+E53062: F3 0F 5D B3 70 01 00 00 - minss xmm6,[rbx+00000170]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E5306A: F3 0F 11 B3 6C 01 00 00 - movss [rbx+0000016C],xmm6
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E53072: 48 8B 5C 24 40 - mov rbx,[rsp+40]
SDGundamBA-Win64-Shipping.exe+E53077: B0 01 - mov al,01
SDGundamBA-Win64-Shipping.exe+E53079: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
SDGundamBA-Win64-Shipping.exe+E5307E: 48 83 C4 30 - add rsp,30
SDGundamBA-Win64-Shipping.exe+E53082: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+E53083: C3 - ret
SDGundamBA-Win64-Shipping.exe+E53084: CC - int 3
SDGundamBA-Win64-Shipping.exe+E53085: CC - int 3
SDGundamBA-Win64-Shipping.exe+E53086: CC - int 3
SDGundamBA-Win64-Shipping.exe+E53087: CC - int 3
}
69
"Inf. Booster"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_BOOSTER,SDGundamBA-Win64-Shipping.exe,F3 0F 11 8B 60 01 00 00 73) // should be unique
alloc(newmem,$1000,INJECT_INF_BOOSTER)
label(code)
label(return)
newmem:
cmp rbx, [i_player_base_addr]
jne code
vmovss xmm15, [vf_80]
vucomiss xmm1, xmm15
jae code
vmovss xmm1, [vf_80]
code:
movss [rbx+00000160],xmm1
jmp return
align 10 cc
vf_80:
dd (float)80
INJECT_INF_BOOSTER:
jmp newmem
nop 3
return:
registersymbol(INJECT_INF_BOOSTER)
[DISABLE]
INJECT_INF_BOOSTER:
db F3 0F 11 8B 60 01 00 00
unregistersymbol(INJECT_INF_BOOSTER)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E737BC
SDGundamBA-Win64-Shipping.exe+E73792: E8 69 D0 16 00 - call SDGundamBA-Win64-Shipping.exe+FE0800
SDGundamBA-Win64-Shipping.exe+E73797: 84 C0 - test al,al
SDGundamBA-Win64-Shipping.exe+E73799: 0F 85 98 00 00 00 - jne SDGundamBA-Win64-Shipping.exe+E73837
SDGundamBA-Win64-Shipping.exe+E7379F: 0F 29 74 24 30 - movaps [rsp+30],xmm6
SDGundamBA-Win64-Shipping.exe+E737A4: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E737A7: F3 0F 10 B3 60 01 00 00 - movss xmm6,[rbx+00000160]
SDGundamBA-Win64-Shipping.exe+E737AF: 40 B7 01 - mov dil,01
SDGundamBA-Win64-Shipping.exe+E737B2: 0F 28 CE - movaps xmm1,xmm6
SDGundamBA-Win64-Shipping.exe+E737B5: F3 0F 5C CF - subss xmm1,xmm7
SDGundamBA-Win64-Shipping.exe+E737B9: 0F 2F C8 - comiss xmm1,xmm0
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E737BC: F3 0F 11 8B 60 01 00 00 - movss [rbx+00000160],xmm1
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E737C4: 73 13 - jae SDGundamBA-Win64-Shipping.exe+E737D9
SDGundamBA-Win64-Shipping.exe+E737C6: F3 0F 5F 0D 0E F3 DF 02 - maxss xmm1,[SDGundamBA-Win64-Shipping.exe+3C72ADC]
SDGundamBA-Win64-Shipping.exe+E737CE: 40 32 FF - xor dil,dil
SDGundamBA-Win64-Shipping.exe+E737D1: F3 0F 11 8B 60 01 00 00 - movss [rbx+00000160],xmm1
SDGundamBA-Win64-Shipping.exe+E737D9: 83 BB E8 03 00 00 00 - cmp dword ptr [rbx+000003E8],00
SDGundamBA-Win64-Shipping.exe+E737E0: 74 1A - je SDGundamBA-Win64-Shipping.exe+E737FC
SDGundamBA-Win64-Shipping.exe+E737E2: 48 8B 8B E0 03 00 00 - mov rcx,[rbx+000003E0]
SDGundamBA-Win64-Shipping.exe+E737E9: 48 85 C9 - test rcx,rcx
SDGundamBA-Win64-Shipping.exe+E737EC: 74 0E - je SDGundamBA-Win64-Shipping.exe+E737FC
SDGundamBA-Win64-Shipping.exe+E737EE: 48 8B 01 - mov rax,[rcx]
}
67
"Faster SPA"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FASTER_SPA,SDGundamBA-Win64-Shipping.exe,F3 41 0F 5C C1 F3 0F 5F C6 F3 0F 11 83 74) // should be unique
alloc(newmem,$1000,INJECT_FASTER_SPA)
label(code)
label(return)
label(vf_spa_charge_factor)
label(vf_non_player_charge_factor)
newmem:
cmp rbx, [i_player_base_addr]
jne npc_charge
vmovss xmm15, [vf_spa_charge_factor]
jmp endp_pre
npc_charge:
vmovss xmm15, [vf_non_player_charge_factor]
endp_pre:
vmulss xmm9, xmm9, xmm15
code:
subss xmm0,xmm9
jmp return
align 10 cc
vf_spa_charge_factor:
dd (float)15.987654401
vf_non_player_charge_factor:
dd (float)2.5
INJECT_FASTER_SPA:
jmp newmem
return:
registersymbol(INJECT_FASTER_SPA)
registersymbol(vf_spa_charge_factor)
registersymbol(vf_non_player_charge_factor)
[DISABLE]
INJECT_FASTER_SPA:
db F3 41 0F 5C C1
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E6FA78
SDGundamBA-Win64-Shipping.exe+E6FA4E: 4C 39 04 C8 - cmp [rax+rcx*8],r8
SDGundamBA-Win64-Shipping.exe+E6FA52: 75 1C - jne SDGundamBA-Win64-Shipping.exe+E6FA70
SDGundamBA-Win64-Shipping.exe+E6FA54: 48 8B BF D0 08 00 00 - mov rdi,[rdi+000008D0]
SDGundamBA-Win64-Shipping.exe+E6FA5B: 48 85 FF - test rdi,rdi
SDGundamBA-Win64-Shipping.exe+E6FA5E: 74 10 - je SDGundamBA-Win64-Shipping.exe+E6FA70
SDGundamBA-Win64-Shipping.exe+E6FA60: B1 28 - mov cl,28
SDGundamBA-Win64-Shipping.exe+E6FA62: E8 39 BE 09 00 - call SDGundamBA-Win64-Shipping.exe+F0B8A0
SDGundamBA-Win64-Shipping.exe+E6FA67: 48 85 87 D0 00 00 00 - test [rdi+000000D0],rax
SDGundamBA-Win64-Shipping.exe+E6FA6E: 74 19 - je SDGundamBA-Win64-Shipping.exe+E6FA89
SDGundamBA-Win64-Shipping.exe+E6FA70: F3 0F 10 83 74 01 00 00 - movss xmm0,[rbx+00000174]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E6FA78: F3 41 0F 5C C1 - subss xmm0,xmm9
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E6FA7D: F3 0F 5F C6 - maxss xmm0,xmm6
SDGundamBA-Win64-Shipping.exe+E6FA81: F3 0F 11 83 74 01 00 00 - movss [rbx+00000174],xmm0
SDGundamBA-Win64-Shipping.exe+E6FA89: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+E6FA8C: E8 0F FF 16 00 - call SDGundamBA-Win64-Shipping.exe+FDF9A0
SDGundamBA-Win64-Shipping.exe+E6FA91: 84 C0 - test al,al
SDGundamBA-Win64-Shipping.exe+E6FA93: 74 10 - je SDGundamBA-Win64-Shipping.exe+E6FAA5
SDGundamBA-Win64-Shipping.exe+E6FA95: 48 8B 8B A0 00 00 00 - mov rcx,[rbx+000000A0]
SDGundamBA-Win64-Shipping.exe+E6FA9C: E8 2F 0B 17 00 - call SDGundamBA-Win64-Shipping.exe+FE05D0
SDGundamBA-Win64-Shipping.exe+E6FAA1: 84 C0 - test al,al
SDGundamBA-Win64-Shipping.exe+E6FAA3: 75 54 - jne SDGundamBA-Win64-Shipping.exe+E6FAF9
}
68
"Multiplier"
0
Float
vf_spa_charge_factor
70
"Non-player multiplier"
0
Float
vf_non_player_charge_factor
33
"Auto fill bullets"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_AUTO_FILL_WEAPON,SDGundamBA-Win64-Shipping.exe,45 89 48 78 41 3B CA) // should be unique
alloc(newmem,$1000,INJECT_AUTO_FILL_WEAPON)
label(code)
label(return)
newmem:
push rax
cmp r8, [i_main_mark_addr]
je inf_bullet
cmp r8, [i_sub1_mark_addr]
je inf_bullet
cmp r8, [i_sub2_mark_addr]
je inf_bullet
jmp endp
inf_bullet:
mov r9d, [r8+48]
endp:
pop rax
code:
mov [r8+78],r9d
cmp ecx,r10d
jmp return
INJECT_AUTO_FILL_WEAPON:
jmp newmem
nop 2
return:
registersymbol(INJECT_AUTO_FILL_WEAPON)
[DISABLE]
INJECT_AUTO_FILL_WEAPON:
db 45 89 48 78 41 3B CA
unregistersymbol(INJECT_AUTO_FILL_WEAPON)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1205116
SDGundamBA-Win64-Shipping.exe+12050FC: 45 85 D2 - test r10d,r10d
SDGundamBA-Win64-Shipping.exe+12050FF: 79 03 - jns SDGundamBA-Win64-Shipping.exe+1205104
SDGundamBA-Win64-Shipping.exe+1205101: 32 C0 - xor al,al
SDGundamBA-Win64-Shipping.exe+1205103: C3 - ret
SDGundamBA-Win64-Shipping.exe+1205104: 8B 49 78 - mov ecx,[rcx+78]
SDGundamBA-Win64-Shipping.exe+1205107: 41 3B CA - cmp ecx,r10d
SDGundamBA-Win64-Shipping.exe+120510A: 8B C1 - mov eax,ecx
SDGundamBA-Win64-Shipping.exe+120510C: 0F 9D C2 - setge dl
SDGundamBA-Win64-Shipping.exe+120510F: 41 2B C2 - sub eax,r10d
SDGundamBA-Win64-Shipping.exe+1205112: 44 0F 49 C8 - cmovns r9d,eax
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1205116: 45 89 48 78 - mov [r8+78],r9d
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+120511A: 41 3B CA - cmp ecx,r10d
SDGundamBA-Win64-Shipping.exe+120511D: 7C 37 - jl SDGundamBA-Win64-Shipping.exe+1205156
SDGundamBA-Win64-Shipping.exe+120511F: 66 41 0F 6E 40 48 - movd xmm0,[r8+48]
SDGundamBA-Win64-Shipping.exe+1205125: 0F 57 DB - xorps xmm3,xmm3
SDGundamBA-Win64-Shipping.exe+1205128: F3 41 0F 10 50 54 - movss xmm2,[r8+54]
SDGundamBA-Win64-Shipping.exe+120512E: 66 41 0F 6E C9 - movd xmm1,r9d
SDGundamBA-Win64-Shipping.exe+1205133: 0F 5B C9 - cvtdq2ps xmm1,xmm1
SDGundamBA-Win64-Shipping.exe+1205136: 0F 5B C0 - cvtdq2ps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+1205139: F3 0F 59 CA - mulss xmm1,xmm2
SDGundamBA-Win64-Shipping.exe+120513D: F3 0F 5E C8 - divss xmm1,xmm0
}
58
"Weapons+"
1
21
"Main+"
1
18
"# of bullets"
0
4 Bytes
i_player_base_addr
37C
158
19
"Flag"
0
4 Bytes
i_player_base_addr
380
158
20
"Charge"
0
Float
i_player_base_addr
384
158
50
"Sub+"
1
52
"Sub1: # of bullets"
0
4 Bytes
i_player_base_addr
78
394
158
53
"Sub1: Flag"
0
4 Bytes
i_player_base_addr
7C
394
158
54
"Sub1: Charge"
0
Float
i_player_base_addr
80
394
158
55
"Sub2: # of bullets"
0
4 Bytes
i_player_base_addr
108
394
158
56
"Sub2: Flag"
0
4 Bytes
i_player_base_addr
10C
394
158
57
"Sub2: Charge"
0
Float
i_player_base_addr
110
394
158
6
"HP"
0
Float
i_player_base_addr
B0
59
"??"
0
Float
i_player_base_addr
154
9
"Booster"
0
Float
i_player_base_addr
160
10
"??"
0
Float
i_player_base_addr
164
11
"??"
0
Float
i_player_base_addr
168
12
"Skill gauge"
0
Float
i_player_base_addr
16C
13
"??"
0
Float
i_player_base_addr
170
14
"SPA Countdown"
0
Float
i_player_base_addr
174
15
"??"
0
Float
i_player_base_addr
178
16
"??"
0
Float
i_player_base_addr
17C
17
"??"
0
Float
i_player_base_addr
180
30
"Base data (Usage: Menu -> Items / display coin)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_BASE_DATA2,SDGundamBA-Win64-Shipping.exe,8B 90 E0 01 00 00 48 8B CB 48 83 C4 20 5B E9 6A) // should be unique
alloc(newmem,$1000,INJECT_GET_BASE_DATA2)
label(code)
label(return)
label(i_base_data_addr)
newmem:
mov [i_base_data_addr], rax
code:
mov edx,[rax+000001E0]
jmp return
align 10 cc
i_base_data_addr:
dq 0
INJECT_GET_BASE_DATA2:
jmp newmem
nop
return:
registersymbol(i_base_data_addr)
registersymbol(INJECT_GET_BASE_DATA2)
[DISABLE]
INJECT_GET_BASE_DATA2:
db 8B 90 E0 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10725E3
SDGundamBA-Win64-Shipping.exe+10725CC: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CD: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CE: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CF: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725D0: 40 53 - push rbx
SDGundamBA-Win64-Shipping.exe+10725D2: 48 83 EC 20 - sub rsp,20
SDGundamBA-Win64-Shipping.exe+10725D6: 48 8B D9 - mov rbx,rcx
SDGundamBA-Win64-Shipping.exe+10725D9: E8 42 A8 ED FF - call SDGundamBA-Win64-Shipping.exe+F4CE20
SDGundamBA-Win64-Shipping.exe+10725DE: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+10725E1: 74 13 - je SDGundamBA-Win64-Shipping.exe+10725F6
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10725E3: 8B 90 E0 01 00 00 - mov edx,[rax+000001E0]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10725E9: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+10725EC: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+10725F0: 5B - pop rbx
SDGundamBA-Win64-Shipping.exe+10725F1: E9 6A FF FF FF - jmp SDGundamBA-Win64-Shipping.exe+1072560
SDGundamBA-Win64-Shipping.exe+10725F6: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+10725FA: 5B - pop rbx
SDGundamBA-Win64-Shipping.exe+10725FB: C3 - ret
SDGundamBA-Win64-Shipping.exe+10725FC: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725FD: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725FE: CC - int 3
}
28
"Play time"
0
Double
i_base_data_addr
28
40
"User name"
0
String
32
1
0
1
i_base_data_addr
0
30
38
"Level"
0
4 Bytes
i_base_data_addr
5C
39
"EXP"
0
4 Bytes
i_base_data_addr
60
31
"Coin"
0
4 Bytes
i_base_data_addr
1E0
41
"Get Partner data (Usage: Menu -> Partner Info)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_WINGMAN_DATA,SDGundamBA-Win64-Shipping.exe,8B 47 20 89 45 BB) // should be unique
alloc(newmem,$1000,INJECT_GET_WINGMAN_DATA)
label(code)
label(return)
label(i_base_wingman_addr)
newmem:
mov [i_base_wingman_addr], rdi
code:
mov eax,[rdi+20]
mov [rbp-45],eax
jmp return
align 10 cc
i_base_wingman_addr:
dq 0
INJECT_GET_WINGMAN_DATA:
jmp newmem
nop
return:
registersymbol(INJECT_GET_WINGMAN_DATA)
registersymbol(i_base_wingman_addr)
[DISABLE]
INJECT_GET_WINGMAN_DATA:
db 8B 47 20 89 45 BB
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1192454
SDGundamBA-Win64-Shipping.exe+1192432: 89 75 DF - mov [rbp-21],esi
SDGundamBA-Win64-Shipping.exe+1192435: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+1192438: E8 F3 29 DF FF - call SDGundamBA-Win64-Shipping.exe+F84E30
SDGundamBA-Win64-Shipping.exe+119243D: 8D 56 01 - lea edx,[rsi+01]
SDGundamBA-Win64-Shipping.exe+1192440: 4D 8B C7 - mov r8,r15
SDGundamBA-Win64-Shipping.exe+1192443: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+1192446: 44 8B E0 - mov r12d,eax
SDGundamBA-Win64-Shipping.exe+1192449: E8 E2 29 DF FF - call SDGundamBA-Win64-Shipping.exe+F84E30
SDGundamBA-Win64-Shipping.exe+119244E: 89 45 B7 - mov [rbp-49],eax
SDGundamBA-Win64-Shipping.exe+1192451: 48 8B CB - mov rcx,rbx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1192454: 8B 47 20 - mov eax,[rdi+20]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+1192457: 89 45 BB - mov [rbp-45],eax
SDGundamBA-Win64-Shipping.exe+119245A: E8 31 40 03 00 - call SDGundamBA-Win64-Shipping.exe+11C6490
SDGundamBA-Win64-Shipping.exe+119245F: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+1192462: 74 09 - je SDGundamBA-Win64-Shipping.exe+119246D
SDGundamBA-Win64-Shipping.exe+1192464: 48 8B B8 98 00 00 00 - mov rdi,[rax+00000098]
SDGundamBA-Win64-Shipping.exe+119246B: EB 04 - jmp SDGundamBA-Win64-Shipping.exe+1192471
SDGundamBA-Win64-Shipping.exe+119246D: 48 8B 7D CF - mov rdi,[rbp-31]
SDGundamBA-Win64-Shipping.exe+1192471: 8B 4D C7 - mov ecx,[rbp-39]
SDGundamBA-Win64-Shipping.exe+1192474: 33 D2 - xor edx,edx
SDGundamBA-Win64-Shipping.exe+1192476: E8 A5 06 2C 00 - call SDGundamBA-Win64-Shipping.exe+1452B20
}
43
"LV"
0
4 Bytes
i_base_wingman_addr
1C
42
"EXP"
0
4 Bytes
i_base_wingman_addr
20
44
"Friendship"
0
4 Bytes
i_base_wingman_addr
78
64
"Set material >= 70 (Usage: Menu -> Items)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SELL_MATERIAL_SET_COUNT,SDGundamBA-Win64-Shipping.exe,45 8B 46 08 48 8D 4D 97) // should be unique
alloc(newmem,$1000,INJECT_SELL_MATERIAL_SET_COUNT)
label(code)
label(return)
newmem:
code:
// original code
mov r8d,[r14+08]
// inject code start
cmp r8d, #70
jae endp
mov r8d, #70
mov [r14+08], r8d
endp:
// inject code end
// original code
lea rcx,[rbp-69]
//
jmp return
INJECT_SELL_MATERIAL_SET_COUNT:
jmp newmem
nop 3
return:
registersymbol(INJECT_SELL_MATERIAL_SET_COUNT)
[DISABLE]
INJECT_SELL_MATERIAL_SET_COUNT:
db 45 8B 46 08 48 8D 4D 97
unregistersymbol(INJECT_SELL_MATERIAL_SET_COUNT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1185C71
SDGundamBA-Win64-Shipping.exe+1185C53: 48 85 C9 - test rcx,rcx
SDGundamBA-Win64-Shipping.exe+1185C56: 48 8D 41 08 - lea rax,[rcx+08]
SDGundamBA-Win64-Shipping.exe+1185C5A: 49 0F 44 C7 - cmove rax,r15
SDGundamBA-Win64-Shipping.exe+1185C5E: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+1185C61: 74 51 - je SDGundamBA-Win64-Shipping.exe+1185CB4
SDGundamBA-Win64-Shipping.exe+1185C63: 48 8B 10 - mov rdx,[rax]
SDGundamBA-Win64-Shipping.exe+1185C66: 48 85 D2 - test rdx,rdx
SDGundamBA-Win64-Shipping.exe+1185C69: 74 49 - je SDGundamBA-Win64-Shipping.exe+1185CB4
SDGundamBA-Win64-Shipping.exe+1185C6B: 44 38 7A 40 - cmp [rdx+40],r15l
SDGundamBA-Win64-Shipping.exe+1185C6F: 74 43 - je SDGundamBA-Win64-Shipping.exe+1185CB4
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1185C71: 45 8B 46 08 - mov r8d,[r14+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+1185C75: 48 8D 4D 97 - lea rcx,[rbp-69]
SDGundamBA-Win64-Shipping.exe+1185C79: E8 D2 C8 EF FF - call SDGundamBA-Win64-Shipping.exe+1082550
SDGundamBA-Win64-Shipping.exe+1185C7E: 48 63 5E 08 - movsxd rbx,dword ptr [rsi+08]
SDGundamBA-Win64-Shipping.exe+1185C82: 48 8B F8 - mov rdi,rax
SDGundamBA-Win64-Shipping.exe+1185C85: 8D 4B 01 - lea ecx,[rbx+01]
SDGundamBA-Win64-Shipping.exe+1185C88: 89 4E 08 - mov [rsi+08],ecx
SDGundamBA-Win64-Shipping.exe+1185C8B: 3B 4E 0C - cmp ecx,[rsi+0C]
SDGundamBA-Win64-Shipping.exe+1185C8E: 7E 0A - jle SDGundamBA-Win64-Shipping.exe+1185C9A
SDGundamBA-Win64-Shipping.exe+1185C90: 8B D3 - mov edx,ebx
SDGundamBA-Win64-Shipping.exe+1185C92: 48 8B CE - mov rcx,rsi
}
61
"Uncap item => 75 (Usage: Menu -> MS Settings -> Upgrade -> Uncap)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MS_LIMIT_BREAK,SDGundamBA-Win64-Shipping.exe,74 9F 44 8B 08) // should be unique
alloc(newmem,$1000,INJECT_MS_LIMIT_BREAK)
label(code)
label(return)
label(i_last_lb_item_addr)
newmem:
code:
// origin code
reassemble(INJECT_MS_LIMIT_BREAK)
//je SDGundamBA-Win64-Shipping.exe+10AB6F7
//
mov [i_last_lb_item_addr], rax
mov r9d, [rax]
cmp r9d, #75
jae endp
mov r9d, #75
mov [rax], r9d
jmp endp_chg
endp:
// origin code
mov r9d,[rax]
//
endp_chg:
jmp return
align 10 cc
i_last_lb_item_addr:
dq 0
INJECT_MS_LIMIT_BREAK:
jmp newmem
return:
registersymbol(INJECT_MS_LIMIT_BREAK)
registersymbol(i_last_lb_item_addr)
[DISABLE]
INJECT_MS_LIMIT_BREAK:
db 74 9F 44 8B 08
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10AB756
SDGundamBA-Win64-Shipping.exe+10AB73C: 41 5C - pop r12
SDGundamBA-Win64-Shipping.exe+10AB73E: 5E - pop rsi
SDGundamBA-Win64-Shipping.exe+10AB73F: C3 - ret
SDGundamBA-Win64-Shipping.exe+10AB740: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+10AB743: 74 B2 - je SDGundamBA-Win64-Shipping.exe+10AB6F7
SDGundamBA-Win64-Shipping.exe+10AB745: 48 8D 04 89 - lea rax,[rcx+rcx*4]
SDGundamBA-Win64-Shipping.exe+10AB749: 49 8D 04 80 - lea rax,[r8+rax*4]
SDGundamBA-Win64-Shipping.exe+10AB74D: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+10AB750: 74 A5 - je SDGundamBA-Win64-Shipping.exe+10AB6F7
SDGundamBA-Win64-Shipping.exe+10AB752: 48 83 C0 08 - add rax,08
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10AB756: 74 9F - je SDGundamBA-Win64-Shipping.exe+10AB6F7
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10AB758: 44 8B 08 - mov r9d,[rax]
SDGundamBA-Win64-Shipping.exe+10AB75B: EB 9D - jmp SDGundamBA-Win64-Shipping.exe+10AB6FA
SDGundamBA-Win64-Shipping.exe+10AB75D: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB75E: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB75F: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB760: E9 4B 93 FC FF - jmp SDGundamBA-Win64-Shipping.exe+1074AB0
SDGundamBA-Win64-Shipping.exe+10AB765: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB766: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB767: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB768: CC - int 3
}
62
"Last item #"
0
4 Bytes
i_last_lb_item_addr
0
73
"Inf. Chaos mission key (Must >=1; Usage: Menu -> Mission)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIN_CHAOS_MISSION_KEYS,SDGundamBA-Win64-Shipping.exe,8B 41 08 41 89 45 00) // should be unique
alloc(newmem,$1000,INJECT_MIN_CHAOS_MISSION_KEYS)
label(code)
label(return)
newmem:
code:
mov eax,[rcx+08]
// inject start
test eax, eax
je endp
cmp eax, #20
jae endp
mov eax, #20
mov [rcx+08], eax
endp:
// inject end
mov [r13+00],eax
jmp return
INJECT_MIN_CHAOS_MISSION_KEYS:
jmp newmem
nop 2
return:
registersymbol(INJECT_MIN_CHAOS_MISSION_KEYS)
[DISABLE]
INJECT_MIN_CHAOS_MISSION_KEYS:
db 8B 41 08 41 89 45 00
unregistersymbol(INJECT_MIN_CHAOS_MISSION_KEYS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+FC7BF2
SDGundamBA-Win64-Shipping.exe+FC7BD7: 49 39 1C 90 - cmp [r8+rdx*4],rbx
SDGundamBA-Win64-Shipping.exe+FC7BDB: 49 8D 0C 90 - lea rcx,[r8+rdx*4]
SDGundamBA-Win64-Shipping.exe+FC7BDF: 74 0A - je SDGundamBA-Win64-Shipping.exe+FC7BEB
SDGundamBA-Win64-Shipping.exe+FC7BE1: 8B 41 0C - mov eax,[rcx+0C]
SDGundamBA-Win64-Shipping.exe+FC7BE4: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+FC7BE7: 75 E7 - jne SDGundamBA-Win64-Shipping.exe+FC7BD0
SDGundamBA-Win64-Shipping.exe+FC7BE9: EB 05 - jmp SDGundamBA-Win64-Shipping.exe+FC7BF0
SDGundamBA-Win64-Shipping.exe+FC7BEB: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+FC7BEE: 75 02 - jne SDGundamBA-Win64-Shipping.exe+FC7BF2
SDGundamBA-Win64-Shipping.exe+FC7BF0: 33 C9 - xor ecx,ecx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+FC7BF2: 8B 41 08 - mov eax,[rcx+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+FC7BF5: 41 89 45 00 - mov [r13+00],eax
SDGundamBA-Win64-Shipping.exe+FC7BF9: 48 8B 5C 24 50 - mov rbx,[rsp+50]
SDGundamBA-Win64-Shipping.exe+FC7BFE: 48 8B C6 - mov rax,rsi
SDGundamBA-Win64-Shipping.exe+FC7C01: 48 8B 74 24 68 - mov rsi,[rsp+68]
SDGundamBA-Win64-Shipping.exe+FC7C06: 48 8B 6C 24 58 - mov rbp,[rsp+58]
SDGundamBA-Win64-Shipping.exe+FC7C0B: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+FC7C0F: 41 5F - pop r15
SDGundamBA-Win64-Shipping.exe+FC7C11: 41 5E - pop r14
SDGundamBA-Win64-Shipping.exe+FC7C13: 41 5D - pop r13
SDGundamBA-Win64-Shipping.exe+FC7C15: 41 5C - pop r12
}
46
"Get session time"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_STIME,SDGundamBA-Win64-Shipping.exe,F2 0F 11 47 18 48 8B 5F) // should be unique
alloc(newmem,$1000,INJECT_GET_STIME)
label(code)
label(return)
label(i_session_time_base_addr)
newmem:
mov [i_session_time_base_addr], rdi
code:
movsd [rdi+18],xmm0
jmp return
align 10 cc
i_session_time_base_addr:
dq 0
INJECT_GET_STIME:
jmp newmem
return:
registersymbol(INJECT_GET_STIME)
registersymbol(i_session_time_base_addr)
[DISABLE]
INJECT_GET_STIME:
db F2 0F 11 47 18
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+80F7EC
SDGundamBA-Win64-Shipping.exe+80F7B7: 48 8B 4D A0 - mov rcx,[rbp-60]
SDGundamBA-Win64-Shipping.exe+80F7BB: E8 E0 16 B1 00 - call SDGundamBA-Win64-Shipping.exe+1320EA0
SDGundamBA-Win64-Shipping.exe+80F7C0: EB 0C - jmp SDGundamBA-Win64-Shipping.exe+80F7CE
SDGundamBA-Win64-Shipping.exe+80F7C2: E8 29 F0 D8 01 - call SDGundamBA-Win64-Shipping.exe+259E7F0
SDGundamBA-Win64-Shipping.exe+80F7C7: 48 89 1D 62 35 8F 04 - mov [SDGundamBA-Win64-Shipping.exe+5102D30],rbx
SDGundamBA-Win64-Shipping.exe+80F7CE: 48 83 3D 52 35 8F 04 06 - cmp qword ptr [SDGundamBA-Win64-Shipping.exe+5102D28],06
SDGundamBA-Win64-Shipping.exe+80F7D6: 48 8B BD 80 01 00 00 - mov rdi,[rbp+00000180]
SDGundamBA-Win64-Shipping.exe+80F7DD: 76 12 - jna SDGundamBA-Win64-Shipping.exe+80F7F1
SDGundamBA-Win64-Shipping.exe+80F7DF: F2 0F 10 05 89 EC 4F 04 - movsd xmm0,[SDGundamBA-Win64-Shipping.exe+4D0E470]
SDGundamBA-Win64-Shipping.exe+80F7E7: F2 0F 58 47 18 - addsd xmm0,[rdi+18]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+80F7EC: F2 0F 11 47 18 - movsd [rdi+18],xmm0
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+80F7F1: 48 8B 5F 38 - mov rbx,[rdi+38]
SDGundamBA-Win64-Shipping.exe+80F7F5: E8 96 F2 D8 01 - call SDGundamBA-Win64-Shipping.exe+259EA90
SDGundamBA-Win64-Shipping.exe+80F7FA: 48 89 47 38 - mov [rdi+38],rax
SDGundamBA-Win64-Shipping.exe+80F7FE: BF 08 01 00 00 - mov edi,00000108
SDGundamBA-Win64-Shipping.exe+80F803: 8B 04 3E - mov eax,[rsi+rdi]
SDGundamBA-Win64-Shipping.exe+80F806: 39 05 D4 10 86 04 - cmp [SDGundamBA-Win64-Shipping.exe+50708E0],eax
SDGundamBA-Win64-Shipping.exe+80F80C: 0F 8F 17 03 00 00 - jg SDGundamBA-Win64-Shipping.exe+80FB29
SDGundamBA-Win64-Shipping.exe+80F812: 8B 04 3E - mov eax,[rsi+rdi]
SDGundamBA-Win64-Shipping.exe+80F815: 39 05 D5 10 86 04 - cmp [SDGundamBA-Win64-Shipping.exe+50708F0],eax
SDGundamBA-Win64-Shipping.exe+80F81B: 0F 8F 3E 03 00 00 - jg SDGundamBA-Win64-Shipping.exe+80FB5F
}
47
"Session time"
0
Double
i_session_time_base_addr
18
23
"_WIP"
1
75
"MS Blueprints progress (Usage: MS setting -> browse MSs; # of Blueprint must > 0)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_BLUEPRINTS,SDGundamBA-Win64-Shipping.exe,8B 41 08 48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC 48 89 5C 24 08 48) // should be unique
alloc(newmem,$1000,INJECT_GET_BLUEPRINTS)
label(code)
label(return)
label(i_cur_bp_addr)
label(i_prev_bp_addr)
label(i_bp_ptr)
label(i_bp_addr_1)
label(i_bp_addr_2)
label(i_bp_addr_3)
label(i_bp_addr_4)
label(i_bp_addr_5)
newmem:
mov [i_cur_bp_addr], rsi
cmp rsi, [i_prev_bp_addr]
jne go_reset
cmp rcx, [i_bp_addr_1]
je set_end
cmp rcx, [i_bp_addr_2]
je set_end
cmp rcx, [i_bp_addr_3]
je set_end
cmp rcx, [i_bp_addr_4]
je set_end
cmp rcx, [i_bp_addr_5]
je set_end
cmp dword ptr [i_bp_ptr], 6
jae endp
cmp dword ptr [i_bp_ptr], 5
je set_5
cmp dword ptr [i_bp_ptr], 4
je set_4
cmp dword ptr [i_bp_ptr], 3
je set_3
cmp dword ptr [i_bp_ptr], 2
je set_2
//cmp dword ptr [i_bp_ptr], 1
//je set_1
jmp endp
set_1:
mov qword ptr [i_bp_addr_1], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_2:
mov qword ptr [i_bp_addr_2], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_3:
mov qword ptr [i_bp_addr_3], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_4:
mov qword ptr [i_bp_addr_4], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_5:
mov qword ptr [i_bp_addr_5], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_end:
mov [i_prev_bp_addr], rsi
jmp endp
go_reset:
mov [i_prev_bp_addr], rsi
mov dword ptr [i_bp_ptr], 1
mov [i_bp_addr_1], rcx
mov qword ptr [i_bp_addr_2], 0
mov qword ptr [i_bp_addr_3], 0
mov qword ptr [i_bp_addr_4], 0
mov qword ptr [i_bp_addr_5], 0
//mov dword ptr [i_bp_ptr], 1
//inc dword ptr [i_bp_ptr]
mov dword ptr [i_bp_ptr], 2
endp:
code:
mov eax,[rcx+08]
mov rbx,[rsp+30]
jmp return
align 10 cc
i_cur_bp_addr:
dq 0
i_prev_bp_addr:
dq FF
i_bp_ptr:
dd 1
i_bp_addr_1:
dq 0
i_bp_addr_2:
dq 0
i_bp_addr_3:
dq 0
i_bp_addr_4:
dq 0
i_bp_addr_5:
dq 0
INJECT_GET_BLUEPRINTS:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_BLUEPRINTS)
registersymbol(i_bp_addr_1)
registersymbol(i_bp_addr_2)
registersymbol(i_bp_addr_3)
registersymbol(i_bp_addr_4)
registersymbol(i_bp_addr_5)
[DISABLE]
INJECT_GET_BLUEPRINTS:
db 8B 41 08 48 8B 5C 24 30
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+F4D0C0
SDGundamBA-Win64-Shipping.exe+F4D0A7: 75 E7 - jne SDGundamBA-Win64-Shipping.exe+F4D090
SDGundamBA-Win64-Shipping.exe+F4D0A9: 33 C9 - xor ecx,ecx
SDGundamBA-Win64-Shipping.exe+F4D0AB: 8B 41 08 - mov eax,[rcx+08]
SDGundamBA-Win64-Shipping.exe+F4D0AE: 48 8B 5C 24 30 - mov rbx,[rsp+30]
SDGundamBA-Win64-Shipping.exe+F4D0B3: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+F4D0B7: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+F4D0B8: C3 - ret
SDGundamBA-Win64-Shipping.exe+F4D0B9: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+F4D0BC: 75 02 - jne SDGundamBA-Win64-Shipping.exe+F4D0C0
SDGundamBA-Win64-Shipping.exe+F4D0BE: 33 C9 - xor ecx,ecx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+F4D0C0: 8B 41 08 - mov eax,[rcx+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+F4D0C3: 48 8B 5C 24 30 - mov rbx,[rsp+30]
SDGundamBA-Win64-Shipping.exe+F4D0C8: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+F4D0CC: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+F4D0CD: C3 - ret
SDGundamBA-Win64-Shipping.exe+F4D0CE: CC - int 3
SDGundamBA-Win64-Shipping.exe+F4D0CF: CC - int 3
SDGundamBA-Win64-Shipping.exe+F4D0D0: 48 89 5C 24 08 - mov [rsp+08],rbx
SDGundamBA-Win64-Shipping.exe+F4D0D5: 48 89 54 24 10 - mov [rsp+10],rdx
SDGundamBA-Win64-Shipping.exe+F4D0DA: 57 - push rdi
SDGundamBA-Win64-Shipping.exe+F4D0DB: 48 83 EC 20 - sub rsp,20
}
76
"# of Blueprint 1"
0
4 Bytes
i_bp_addr_1
8
77
"# of Blueprint 2"
0
4 Bytes
i_bp_addr_2
8
78
"# of Blueprint 3"
0
4 Bytes
i_bp_addr_3
8
79
"# of Blueprint 4"
0
4 Bytes
i_bp_addr_4
8
80
"# of Blueprint 5"
0
4 Bytes
i_bp_addr_5
8
24
"SD GUNDAM BATTLE ALLIANCE / https://opencheattables.com / CE 7.4+"
400080
1
Code MSInfo :movss xmm2,[rdi]
SDGundamBA-Win64-Shipping.exe+11BF7E1
44
0F
10
50
34
F3
0F
10
17
40
84
F6
74
42
Code Menu->Item:cmp [rax+rcx*4+08],r15d
SDGundamBA-Win64-Shipping.exe+1185B63
0C
80
48
8B
02
44
39
7C
88
08
4C
8D
34
88
0F
AddressList.Header.OnSectionClick = nil
IDs = {7, 22, 62, 76, 77, 78, 79, 80
}
function contains(table, val)
local i = 0
for i=1, #table do
if table[i] == val then
return true
end
end
return false
end
function onMemRecPreExecute(memoryrecord, newstate)
if contains(IDs, memoryrecord.ID) and newstate then
memoryrecord.OnActivate = function(memoryrecord, before, currentstate)
return false
end
end
end