139727 "All Accesory x99 thread" 00FF00 Auto Assembler Script [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) alloc(currID,4) currID: dd 00009000 newmem: mov eax,00000004 mov ebx,00000020 mov ecx,0000014E mov edx,000008EC mov esi,0177D860 mov edi,00000063 pushad push 8000000E mov [esi+00000084],00000001 call "FFX-2.exe"+344760 mov eax,[currID] mov [esi+60],eax mov ecx,[esi+60] mov word ptr [esi+4C],0063 movsx edx,word ptr [esi+4C] add esp,04 mov eax,ecx and eax,"FFX-2.exe"+B3F000 push edx push ecx cmp eax,00002000 call "FFX-2.exe"+21DB80 movsx eax,word ptr [esi+4C] imul eax,[esi+64] add esp,08 push eax call "FFX-2.exe"+20D4E0 add esp,04 mov [esi+28],00000008 popad inc [currID] cmp [currID],00009080 // último ID = 0x9079 jl newmem ret // lanzar el hilo inmediatamente al activar createThread(newmem) [DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) dealloc(currID) 139732 "Drop Randomicer with battle flag" 00FF00 Auto Assembler Script [ENABLE] // Code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) label(returnhere) label(originalcode) label(exit) label(randGroup) label(randItem) label(randomicer) "FFX-2.exe"+2247E3: nop nop "FFX-2.exe"+224806: nop nop newmem: cmp byte ptr ["FFX-2.exe"+A14EA4],01 je randomicer jmp exit randomicer: push eax push edx // ============================== // Generar número base aleatorio // ============================== rdtsc // EDX:EAX = contador interno del CPU xor eax,edx // mezcla bits altos y bajos and eax,0FF // 0–255 (valor base) mov edx,eax // copia para decidir grupo // ============================== // Elegir grupo aleatoriamente // ============================== and edx,1 // usa el bit menos significativo → 0 o 1 cmp edx,0 je randGroup // 0 = grupo 1 (2000h–2043h) // 1 = grupo 2 (9000h–907Fh) // ------------------------------ // Grupo 2 → 9000h–907Fh // ------------------------------ and eax,7F // 0–127 add eax,9000 // rango 9000h–907Fh jmp randItem randGroup: // ------------------------------ // Grupo 1 → 2000h–2043h // ------------------------------ and eax,3F // 0–63 cmp eax,43 jbe short @f sub eax,20 // ligera corrección si se pasa de 2043h @@: add eax,2000 // rango 2000h–2043h randItem: mov [ebp+08],eax // guarda ID del ítem final pop edx pop eax originalcode: exit: mov eax,[ebp+08] add esi,ecx jmp returnhere "FFX-2.exe"+224970: jmp newmem returnhere: [DISABLE] dealloc(newmem) "FFX-2.exe"+224970: db 8B 45 08 03 F1 "FFX-2.exe"+2247E3: db 74 6E "FFX-2.exe"+224806: db 74 4B 139819 "Accesory Habilities x2 Randomicer" 00FF00 Auto Assembler Script [ENABLE] alloc(newmem,4096) alloc(randTable,0x4000) alloc(minRange,4) alloc(maxRange,4) alloc(savedEDI,4) alloc(totalAssigned,4) label(returnhere) label(do_random) label(no_random) label(skip_random) label(search_loop) label(add_entry) label(found_entry) label(generate_new) label(check_duplicate) label(unique_ok) label(fallback) label(exit) // ===== CONFIGURACIÓN DEL RANGO ===== minRange: dd 8000 // mínimo maxRange: dd 8081 // máximo totalAssigned: dd 0 // =================================== newmem: pushad // Solo si edx = 00B79278 y esi = 1 o 2 cmp edx,"FFX-2.exe"+9F9278 jne no_random cmp esi,0 jne do_random //cmp esi,1 //je do_random //cmp esi,2 //je do_random //cmp esi,3 //je do_random do_random: // buscar en la tabla (usar EBX, no ESI) mov ebx,randTable search_loop: cmp dword ptr [ebx],0 je add_entry cmp [ebx],edi je found_entry add ebx,8 jmp search_loop add_entry: mov [ebx],edi mov ecx,100 // reintentos máximos de generación generate_new: rdtsc xor edx,eax mov eax,edx mov edx,0 mov esi,[maxRange] sub esi,[minRange] inc esi and eax,7FFFFFFF xor edx,edx div esi mov eax,[minRange] add eax,edx mov edx,eax // verificar duplicado mov esi,randTable check_duplicate: cmp dword ptr [esi],0 je unique_ok cmp [esi+4],edx je duplicate_found add esi,8 jmp check_duplicate duplicate_found: dec ecx jnz generate_new jmp fallback // demasiados intentos → usa original unique_ok: mov [ebx+4],edx mov edi,edx mov eax,[totalAssigned] inc eax mov [totalAssigned],eax jmp exit found_entry: mov edi,[ebx+4] jmp exit fallback: // usa el EDI original si no queda ninguno libre mov edi,[ebx] jmp exit skip_random: // mantener edi original jmp exit no_random: // fuera de rango, no tocar edi exit: mov [savedEDI],edi popad mov edi,[savedEDI] mov [edx+esi*2],di inc esi cmp esi,2 je newmem cmp esi,4 je newmem jmp returnhere //@dos: // mov edi,[savedEDI] // mov [edx+esi*2],di //inc esi // instrucción original //jmp returnhere //mov edi,00008002 //mov [edx+esi*2],di //inc esi "FFX-2.exe"+229679: jmp newmem returnhere: [DISABLE] dealloc(newmem) dealloc(randTable) dealloc(minRange) dealloc(maxRange) dealloc(savedEDI) dealloc(totalAssigned) "FFX-2.exe"+229679: db 66 89 3C 72 46 //mov [edx+esi*2],di //inc esi VIDA TODOS :cmp dword ptr [edi+000003B4],00 "FFX-2.exe"+236EF8 85 E2 02 00 00 83 BF B4 03 00 00 00 0F 8E D5 02 00 Guiles despues de batalla :mov esi,["FFX-2.exe"+16CDA24] "FFX-2.exe"+3713A7 E8 69 2D CE FF 8B 35 24 DA 2A 02 B8 B1 56 C0 5A EXP TO EDI :mov edi,esi "FFX-2.exe"+22A110 C9 7E 08 33 C0 8B FE F3 AB 03 F3 85 VIDA TODOS :cmp dword ptr [edi+000003B4],00 "FFX-2.exe"+236EF8 85 E2 02 00 00 83 BF B4 03 00 00 00 0F 8E D5 02 00 VIDA TODOS :cmp dword ptr [edi+000003B4],00 "FFX-2.exe"+236EF8 85 E2 02 00 00 83 BF B4 03 00 00 00 0F 8E D5 02 00 Action Gauge :mov ecx,[eax+000009D8] "FFX-2.exe"+234940 FD FF 83 C4 04 8B 88 D8 09 00 00 8B 90 DC 09 00 VIDA TODOS :cmp dword ptr [edi+000003B4],00 "FFX-2.exe"+236EF8 85 E2 02 00 00 83 BF B4 03 00 00 00 0F 8E D5 02 00 Action Gauge :mov ecx,[eax+000009D8] "FFX-2.exe"+234940 FD FF 83 C4 04 8B 88 D8 09 00 00 8B 90 DC 09 00 Change of call "FFX-2.exe"+20FF90 "FFX-2.exe"+234578 8B 7C B5 80 57 E8 13 BA FD FF 83 C4 04 85 C0 Change of call "FFX-2.exe"+20FF90 "FFX-2.exe"+2345B9 3B F7 7C BB 53 E8 D2 B9 FD FF 83 C4 04 85 C0 Change of call "FFX-2.exe"+211450 "FFX-2.exe"+234585 85 C0 74 29 57 E8 C6 CE FD FF 8B 80 D8 09 00 casting :mov [ecx+14],eax "FFX-2.exe"+2E8B35 C0 66 89 41 06 89 41 14 8B 09 85 C9 75 Change of call "FFX-2.exe"+224CD0 "FFX-2.exe"+21B835 B6 B4 03 00 00 E8 96 94 00 00 83 C4 0C 89 86 Change of call "FFX-2.exe"+225BF0 "FFX-2.exe"+21B7FE 75 48 FF 75 08 E8 ED A3 00 00 83 C4 04 85 C0 Numeros :add esi,[edi+00001624] "FFX-2.exe"+238115 E9 D2 09 00 00 03 B7 24 16 00 00 E9 C9 09 00 00 Change of call "FFX-2.exe"+225FF0 "FFX-2.exe"+226EE0 05 00 00 50 57 E8 0B F1 FF FF 57 8B F0 E8 53 item1 :mov [ecx+esi*2+0000012E],ax "FFX-2.exe"+22498F 4D 14 83 C4 0C 66 89 84 71 2E 01 00 00 8B 45 F8 66 FF item2 :movzx eax,word ptr [esi+0000012E] "FFX-2.exe"+2249BA 8D 34 41 6A 00 0F B7 86 2E 01 00 00 03 C3 50 E8 07 item3 :mov [esi+0000012E],ax "FFX-2.exe"+2249CC 00 00 83 C4 0C 66 89 86 2E 01 00 00 5E 5F 5B 8B E5 item4 :movzx eax,word ptr [esi*2+"FFX-2.exe"+16CDB4E] "FFX-2.exe"+372543 8E BB 10 00 50 0F B7 04 75 4E DB 77 01 50 E8 6F FA 03 Change of jnl "FFX-2.exe"+2249A1 "FFX-2.exe"+224967 75 FC 83 FE 08 7D 38 8B C1 C1 E0 04 Change of jnl "FFX-2.exe"+20B0FF "FFX-2.exe"+20B085 89 45 FC 3B F0 7D 78 57 56 E8 C2 63 Change of je "FFX-2.exe"+20B0F8 "FFX-2.exe"+20B0C4 83 C4 08 85 C0 74 32 FF 75 08 E8 D2 Change of jne "FFX-2.exe"+20B0F8 "FFX-2.exe"+20B0D3 83 C4 04 85 C0 75 23 6A 03 FF 75 0C Change of jne "FFX-2.exe"+20B0F8 "FFX-2.exe"+20B0E4 83 C4 08 85 C0 75 12 56 E8 A4 81 00 Change of jne "FFX-2.exe"+20B0F8 "FFX-2.exe"+20B0F1 83 C4 04 85 C0 75 05 43 C6 47 67 01 Change of jl "FFX-2.exe"+224950 "FFX-2.exe"+22495F C6 02 3B 55 FC 7C EF 8B 75 FC 83 FE Change of je "FFX-2.exe"+2249A8 "FFX-2.exe"+224956 B7 06 39 45 08 74 50 42 83 C6 02 3B Change of jmp "FFX-2.exe"+224964 "FFX-2.exe"+224946 5F 33 D2 85 F6 EB 1C 8D B0 1E 01 00 añadir pocion :mov al,[esi+"FFX-2.exe"+A01050] "FFX-2.exe"+220EDE C1 3B D0 75 15 8A 86 50 10 EC 00 84 C0 74 0B 85 añadir pocion 2 :movzx edi,byte ptr [esi+"FFX-2.exe"+A01050] "FFX-2.exe"+220F41 5B 8B E5 5D C3 0F B6 BE 50 10 EC 00 6A 63 8D 04 1F añadir pocion 3 :mov [esi+"FFX-2.exe"+A01050],al "FFX-2.exe"+220F5B C4 0C 89 45 FC 88 86 50 10 EC 00 3B C7 74 42 85 Change of je "FFX-2.exe"+224853 "FFX-2.exe"+224806 CE 78 27 01 00 74 4B 6A 0B E8 81 9A Change of je "FFX-2.exe"+224853 "FFX-2.exe"+2247E3 83 C4 10 85 C9 74 6E 0F B6 87 55 02 damage yuna :add esi,[edi+00001624] "FFX-2.exe"+238115 E9 D2 09 00 00 03 B7 24 16 00 00 E9 C9 09 00 00 restar vida :mov [esi+"FFX-2.exe"+DB886C],ebx "FFX-2.exe"+355B36 DE 00 8B 45 FC 89 9E 6C 88 DE 00 8B 8E 84 88 DE paine habilidadese :movzx ecx,word ptr [eax*2+"FFX-2.exe"+9F9258] "FFX-2.exe"+2297C1 C0 85 F6 7E 1A 0F B7 0C 45 58 92 E9 00 3B CF 74 07 40