129
"Toggle scripts"
4080FF
Auto Assembler Script
[ENABLE]
{$lua}
if (syntaxcheck) then return end
synchronize(function()
getLuaEngine().menuItem5.doClick()
getLuaEngine().Close()
end)
-- attach process
local processName = "PRAGMATA.exe"
local pid = getProcessIDFromProcessName(processName)
if pid ~= nil and pid > 0 then
local currentPid = getOpenedProcessID() or 0
if currentPid ~= pid then
openProcess(processName)
print("Attached to: " .. processName)
Sleep(333)
else
print("Already attached to: " .. processName)
end
end
synchronize(function()
getLuaEngine().Close()
end)
local enableBattleScripts = {
103, -- "Set min bullet num"
112, -- "Get Lunafilament / others amount (menus)"
117, -- "Get char HP"
130, -- "Toggle Compact View"
135, -- "Fast Diana's Overdrive / inf thruster"
141, -- "Get app.EnhanceManager settings"
157, -- "Training: target time"
211, -- "Get app.EnemyBattleSystem partial settings"
308, -- "inf hacking nodes (active peaks)"
142, -- "base"
212, -- "base"
152, -- "Skip slot capacity writeback"
150, -- "Skip slot capacity writeback"
}
local addressList = getAddressList()
synchronize(function()
for _, id in ipairs(enableBattleScripts) do
local memRec = addressList.getMemoryRecordByID(id)
if memRec and not memRec.Active then
memRec.Active = true
sleep(30)
end
addressList.refresh()
end
end)
synchronize(function() getLuaEngine().Close() end)
[DISABLE]
{$lua}
if (syntaxcheck) then return end
synchronize(function()
getLuaEngine().menuItem5.doClick()
getLuaEngine().Close()
end)
local disableBattleScripts = {
301, -- "_AddHackingFataDamageArray"
215, -- "_DefenseDownRateForNum"
201, -- "_DefenceDownTimeForNum"
152, -- "Skip slot capacity writeback"
150, -- "Skip slot capacity writeback"
289, -- "_PowerHacking"
285, -- "_FriendHit"
281, -- "_DeathBlow"
272, -- "_FatalBreak"
266, -- "_FinishBlow"
263, -- "_Hacking"
200, -- "app.EnemyBaseAbnormalParam"
145, -- "<ActiveSkillCapacity>k__BackingField"
102, -- "<PassiveSkillCapacity>k__BackingField"
256, -- "_AttackPermitData"
199, -- "app.EnemyBaseParamUserData"
143, -- "_EquipmentPerkMainGame -> _BootingPerks"
212, -- "base"
142, -- "base"
137, -- "FAST_OVERDRIVE_PLUS_30"
115, -- "Enable"
308, -- "inf hacking nodes (active peaks)"
211, -- "Get app.EnemyBattleSystem partial settings"
157, -- "Training: target time"
141, -- "Get app.EnhanceManager settings"
135, -- "Fast Diana's Overdrive / inf thruster"
130, -- "Toggle Compact View"
123, -- "Set gravity"
121, -- "PRAGMATA / https://opencheattables.com / CE 7.6+"
117, -- "Get char HP"
112, -- "Get Lunafilament / others amount (menus)"
107, -- "Get gravity (readonly)"
103, -- "Set min bullet num"
}
local addressList = getAddressList()
synchronize(function()
for _, id in ipairs(disableBattleScripts) do
local memRec = addressList.getMemoryRecordByID(id)
if memRec and memRec.Active then
memRec.Active = false
sleep(30)
end
addressList.refresh()
end
end)
synchronize(function() getLuaEngine().Close() end)
-- Comments:
-- ID: 130, Description: "Toggle Compact View", Depth: 0
-- ID: 103, Description: "Set min bullet num", Depth: 0
-- ID: 107, Description: "Get gravity (readonly)", Depth: 0
-- ID: 123, Description: "Set gravity", Depth: 0
-- ID: 112, Description: "Get Lunafilament / others amount (menus)", Depth: 0
-- ID: 117, Description: "Get char HP", Depth: 0
-- ID: 115, Description: "Enable", Depth: 1
-- ID: 308, Description: "inf hacking nodes (active peaks)", Depth: 0
-- ID: 135, Description: "Fast Diana's Overdrive / inf thruster", Depth: 0
-- ID: 157, Description: "Training: target time", Depth: 0
-- ID: 141, Description: "Get app.EnhanceManager settings", Depth: 0
-- ID: 142, Description: "base", Depth: 1
-- ID: 143, Description: "_EquipmentPerkMainGame -> _BootingPerks", Depth: 2
-- ID: 145, Description: "<ActiveSkillCapacity>k__BackingField", Depth: 3
-- ID: 152, Description: "Skip slot capacity writeback", Depth: 4
-- ID: 102, Description: "<PassiveSkillCapacity>k__BackingField", Depth: 3
-- ID: 150, Description: "Skip slot capacity writeback", Depth: 4
-- ID: 211, Description: "Get app.EnemyBattleSystem partial settings", Depth: 0
-- ID: 212, Description: "base", Depth: 1
-- ID: 199, Description: "app.EnemyBaseParamUserData", Depth: 2
-- ID: 200, Description: "app.EnemyBaseAbnormalParam", Depth: 3
-- ID: 201, Description: "_DefenceDownTimeForNum", Depth: 4
-- ID: 215, Description: "_DefenseDownRateForNum", Depth: 4
-- ID: 263, Description: "_Hacking", Depth: 3
-- ID: 266, Description: "_FinishBlow", Depth: 3
-- ID: 272, Description: "_FatalBreak", Depth: 3
-- ID: 301, Description: "_AddHackingFataDamageArray", Depth: 4
-- ID: 281, Description: "_DeathBlow", Depth: 3
-- ID: 285, Description: "_FriendHit", Depth: 3
-- ID: 289, Description: "_PowerHacking", Depth: 3
-- ID: 256, Description: "_AttackPermitData", Depth: 2
-- ID: 121, Description: "PRAGMATA / https://opencheattables.com / CE 7.6+", Depth: 0
-- ID: 137, Description: "FAST_OVERDRIVE_PLUS_30", Depth: 1
130
"Toggle Compact View"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not toggleCompactView then
function toggleCompactView(sender, forceEnable)
local isCompactMode = not (compactViewMenuItem.Caption == 'Compact View Mode')
if forceEnable ~= nil then
isCompactMode = not forceEnable
end
synchronize(function()
compactViewMenuItem.Caption = isCompactMode and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = isCompactMode
getMainForm().Panel4.Visible = isCompactMode
getMainForm().Panel5.Visible = isCompactMode
end)
end
end
if not createCompactViewMenu then
function createCompactViewMenu()
if isCompactMenuCreated then return end
synchronize(function()
local mainMenu = getMainForm().Menu.Items
compactViewMenuItem = createMenuItem(mainMenu)
compactViewMenuItem.Caption = 'Compact View Mode'
compactViewMenuItem.OnClick = toggleCompactView
mainMenu.add(compactViewMenuItem)
end)
isCompactMenuCreated = true
end
end
createCompactViewMenu()
toggleCompactView(nil, true)
[DISABLE]
{$lua}
if toggleCompactView then
toggleCompactView(nil, false)
end
103
"Set min bullet num"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(INJECT_GET_REM_BULLETS,$process,8B ?? 18 ?? 31 ?? ?? ?? F8 FF)
// raw AOB: 8B 48 08 E8 ?? ?? ?? ?? 48 89 44 24 50 4C 89 7C 24 48 48 85 DB 0F 84 ?? ?? ?? ?? 4C 8D 44 24 30 48 89 F1 48 89 DA E8 ?? ?? ?? ?? 48 8B 4E 50 4C 8B 71 18 4D 85 F6 0F 85 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? 8B 58 18 45 31 F6 49 BC F8 FF FF FF FF FF FF 7F 49 21 FC 4D 8B 3C 24 4D 85 FF 74 ?? E8 ?? ?? ?? ?? 48 98 41 8A 4C 07 58 84 C9 7E ?? FE C9 41 88 4C 07 58 75 ?? 49 83 C7 10 4C 89 F9 E8
// injection point AOB: 8B ?? 18 ?? 31 ?? ?? ?? F8 FF FF FF FF FF FF 7F ?? 21 ?? ?? 8B ?? 24 ?? 85 ?? 74 ?? E8 ?? ?? ?? ?? 48 98 ?? 8A ?? 07 58 84 ?? 7E ?? FE ?? ?? 88 ?? 07 58 75 ?? ?? 83 ?? 10 ?? 89 ?? E8
alloc(newmem,$1000,INJECT_GET_REM_BULLETS)
alloc(INJECT_GET_REM_BULLETSo, $6)
label(code)
label(return)
label(vc_min_864515)
INJECT_GET_REM_BULLETSo:
readmem(INJECT_GET_REM_BULLETS, $6)
// app.InventManager->GadgetSlotTable-><GadgetSlotInfo>
newmem:
// **** Begin Auto script: Clamp
// min=3
code:
// mov ebx,[rax+18]
reassemble(INJECT_GET_REM_BULLETS)
// Clamp: min check
cmp ebx, [vc_min_864515]
jge skip_min_864515
mov ebx, [vc_min_864515]
mov [rax+18], ebx
skip_min_864515:
// **** End Auto script: Clamp
// xor r14d,r14d
reassemble(INJECT_GET_REM_BULLETS+3)
jmp return
align 10 cc
vc_min_864515:
dd #3
INJECT_GET_REM_BULLETS:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_REM_BULLETS INJECT_GET_REM_BULLETSo vc_min_864515)
[DISABLE]
INJECT_GET_REM_BULLETS:
readmem(INJECT_GET_REM_BULLETSo, $6)
unregistersymbol(INJECT_GET_REM_BULLETS INJECT_GET_REM_BULLETSo vc_min_864515)
dealloc(newmem)
dealloc(INJECT_GET_REM_BULLETSo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+D3068
PRAGMATA.exe+D3023: 8B 48 08 - mov ecx,[rax+08]
PRAGMATA.exe+D3026: E8 D5 4A BE 04 - call PRAGMATA.exe+4CB7B00
PRAGMATA.exe+D302B: 48 89 44 24 50 - mov [rsp+50],rax
PRAGMATA.exe+D3030: 4C 89 7C 24 48 - mov [rsp+48],r15
PRAGMATA.exe+D3035: 48 85 DB - test rbx,rbx
PRAGMATA.exe+D3038: 0F 84 16 01 00 00 - je PRAGMATA.exe+D3154
PRAGMATA.exe+D303E: 4C 8D 44 24 30 - lea r8,[rsp+30]
PRAGMATA.exe+D3043: 48 89 F1 - mov rcx,rsi
PRAGMATA.exe+D3046: 48 89 DA - mov rdx,rbx
PRAGMATA.exe+D3049: E8 72 E0 D6 04 - call PRAGMATA.exe+4E410C0
PRAGMATA.exe+D304E: 48 8B 4E 50 - mov rcx,[rsi+50]
PRAGMATA.exe+D3052: 4C 8B 71 18 - mov r14,[rcx+18]
PRAGMATA.exe+D3056: 4D 85 F6 - test r14,r14
PRAGMATA.exe+D3059: 0F 85 0F 01 00 00 - jne PRAGMATA.exe+D316E
PRAGMATA.exe+D305F: 48 85 C0 - test rax,rax
PRAGMATA.exe+D3062: 0F 84 9C 00 00 00 - je PRAGMATA.exe+D3104
// ---------- INJECTING HERE ----------
PRAGMATA.exe+D3068: 8B 58 18 - mov ebx,[rax+18]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+D306B: 45 31 F6 - xor r14d,r14d
PRAGMATA.exe+D306E: 49 BC F8 FF FF FF FF FF FF 7F - mov r12,7FFFFFFFFFFFFFF8
PRAGMATA.exe+D3078: 49 21 FC - and r12,rdi
PRAGMATA.exe+D307B: 4D 8B 3C 24 - mov r15,[r12]
PRAGMATA.exe+D307F: 4D 85 FF - test r15,r15
PRAGMATA.exe+D3082: 74 4B - je PRAGMATA.exe+D30CF
PRAGMATA.exe+D3084: E8 B7 34 BE 04 - call PRAGMATA.exe+4CB6540
PRAGMATA.exe+D3089: 48 98 - cdqe
PRAGMATA.exe+D308B: 41 8A 4C 07 58 - mov cl,[r15+rax+58]
PRAGMATA.exe+D3090: 84 C9 - test cl,cl
PRAGMATA.exe+D3092: 7E 22 - jle PRAGMATA.exe+D30B6
PRAGMATA.exe+D3094: FE C9 - dec cl
PRAGMATA.exe+D3096: 41 88 4C 07 58 - mov [r15+rax+58],cl
PRAGMATA.exe+D309B: 75 19 - jne PRAGMATA.exe+D30B6
PRAGMATA.exe+D309D: 49 83 C7 10 - add r15,10
PRAGMATA.exe+D30A1: 4C 89 F9 - mov rcx,r15
}
104
"min"
0
C08000
4 Bytes
vc_min_864515
107
"Get gravity (readonly)"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(INJECT_GET_GRAVITY,$process,C5 ?? 11 ?? 30 01 00 00 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 80)
// raw AOB: 0F 84 ?? ?? ?? ?? C5 F8 28 F2 C5 FA 10 40 20 C5 FA 11 50 20 48 8B 46 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? C5 FA 5C C6 C4 E2 79 18 0D ?? ?? ?? ?? C5 F8 54 C1 C5 FA 10 0D ?? ?? ?? ?? C5 F8 2E C8 0F 82 ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? C5 FA 11 B0 30 01 00 00 48 8B 46 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? 48 8B 87 80 03 00 00 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 40 50 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 80 30 03 00 00 48 85 C0 0F 84 ?? ?? ?? ?? C5 FA 10 05 ?? ?? ?? ?? C5 F8 2E 40 20 0F 97 C3 48 8B 46 50
// injection point AOB: C5 ?? 11 ?? 30 01 00 00 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 80 03 00 00 ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? 8B ?? 50 ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? 8B ?? 30 03 00 00 ?? 85 ?? 0F 84 ?? ?? ?? ?? C5 ?? 10 ?? ?? ?? ?? ?? C5 ?? 2E ?? 20 0F 97 ?? ?? 8B ?? 50
alloc(newmem,$1000,INJECT_GET_GRAVITY)
alloc(INJECT_GET_GRAVITYo, $8)
label(code)
label(return)
label(i_base_gravirty_addr)
INJECT_GET_GRAVITYo:
readmem(INJECT_GET_GRAVITY, $8)
newmem:
mov [i_base_gravirty_addr], rax
code:
// vmovss [rax+00000130],xmm6
reassemble(INJECT_GET_GRAVITY)
jmp return
align 10 cc
i_base_gravirty_addr:
dq 0
INJECT_GET_GRAVITY:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_GRAVITY INJECT_GET_GRAVITYo)
registersymbol(i_base_gravirty_addr)
[DISABLE]
INJECT_GET_GRAVITY:
readmem(INJECT_GET_GRAVITYo, $8)
unregistersymbol(INJECT_GET_GRAVITY INJECT_GET_GRAVITYo)
unregistersymbol(i_base_gravirty_addr)
dealloc(newmem)
dealloc(INJECT_GET_GRAVITYo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+299583
PRAGMATA.exe+29952D: 0F 84 46 01 00 00 - je PRAGMATA.exe+299679
PRAGMATA.exe+299533: C5 F8 28 F2 - vmovaps xmm6,xmm2
PRAGMATA.exe+299537: C5 FA 10 40 20 - vmovss xmm0,[rax+20]
PRAGMATA.exe+29953C: C5 FA 11 50 20 - vmovss [rax+20],xmm2
PRAGMATA.exe+299541: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+299545: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+29954A: 0F 85 F5 00 00 00 - jne PRAGMATA.exe+299645
PRAGMATA.exe+299550: C5 FA 5C C6 - vsubss xmm0,xmm0,xmm6
PRAGMATA.exe+299554: C4 E2 79 18 0D 3F EB D1 08 - vbroadcastss xmm1,[PRAGMATA.exe+8FB809C]
PRAGMATA.exe+29955D: C5 F8 54 C1 - vandps xmm0,xmm0,xmm1
PRAGMATA.exe+299561: C5 FA 10 0D 67 16 D2 08 - vmovss xmm1,[PRAGMATA.exe+8FBABD0]
PRAGMATA.exe+299569: C5 F8 2E C8 - vucomiss xmm1,xmm0
PRAGMATA.exe+29956D: 0F 82 32 01 00 00 - jb PRAGMATA.exe+2996A5
PRAGMATA.exe+299573: 48 8B 05 5E 16 72 0B - mov rax,[PRAGMATA.exe+B9BABD8]
PRAGMATA.exe+29957A: 48 85 C0 - test rax,rax
PRAGMATA.exe+29957D: 0F 84 A4 01 00 00 - je PRAGMATA.exe+299727
// ---------- INJECTING HERE ----------
PRAGMATA.exe+299583: C5 FA 11 B0 30 01 00 00 - vmovss [rax+00000130],xmm6
// ---------- DONE INJECTING ----------
PRAGMATA.exe+29958B: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+29958F: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+299594: 0F 85 AB 00 00 00 - jne PRAGMATA.exe+299645
PRAGMATA.exe+29959A: 48 8B 87 80 03 00 00 - mov rax,[rdi+00000380]
PRAGMATA.exe+2995A1: 48 85 C0 - test rax,rax
PRAGMATA.exe+2995A4: 0F 84 7D 01 00 00 - je PRAGMATA.exe+299727
PRAGMATA.exe+2995AA: 48 8B 40 50 - mov rax,[rax+50]
PRAGMATA.exe+2995AE: 48 85 C0 - test rax,rax
PRAGMATA.exe+2995B1: 0F 84 AB 00 00 00 - je PRAGMATA.exe+299662
PRAGMATA.exe+2995B7: 48 8B 80 30 03 00 00 - mov rax,[rax+00000330]
PRAGMATA.exe+2995BE: 48 85 C0 - test rax,rax
PRAGMATA.exe+2995C1: 0F 84 9B 00 00 00 - je PRAGMATA.exe+299662
PRAGMATA.exe+2995C7: C5 FA 10 05 BD EA D1 08 - vmovss xmm0,[PRAGMATA.exe+8FB808C]
PRAGMATA.exe+2995CF: C5 F8 2E 40 20 - vucomiss xmm0,[rax+20]
PRAGMATA.exe+2995D4: 0F 97 C3 - seta bl
PRAGMATA.exe+2995D7: 48 8B 46 50 - mov rax,[rsi+50]
}
108
"CharacterManager.<CurrentGravityRate>k__BackingField"
0
FF8080
Float
i_base_gravirty_addr
130
123
"Set gravity"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(INJECT_GET_GRAVITY_2,$process,C5 ?? 28 ?? C5 ?? 10 ?? 20 C5 ?? 11)
// raw AOB: 56 57 53 48 83 EC 68 C5 F8 29 74 24 50 48 8B 05 ?? ?? ?? ?? 48 31 E0 48 89 44 24 48 48 8B 41 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? 48 89 D7 48 89 CE 48 8B 82 30 03 00 00 48 85 C0 0F 84 ?? ?? ?? ?? C5 F8 28 F2 C5 FA 10 40 20 C5 FA 11 50 20 48 8B 46 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? C5 FA 5C C6 C4 E2 79 18 0D ?? ?? ?? ?? C5 F8 54 C1 C5 FA 10 0D ?? ?? ?? ?? C5 F8 2E C8 0F 82 ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? C5 FA 11 B0 30 01 00 00 48 8B 46 50 48 83 78 18 00
// injection point AOB: C5 ?? 28 ?? C5 ?? 10 ?? 20 C5 ?? 11 ?? 20 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? C5 ?? 5C ?? C4 ?? ?? 18 ?? ?? ?? ?? ?? C5 ?? 54 ?? C5 ?? 10 ?? ?? ?? ?? ?? C5 ?? 2E ?? 0F 82 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 85 ?? 0F 84 ?? ?? ?? ?? C5 ?? 11 ?? 30 01 00 00 ?? 8B ?? 50 ?? 83 ?? 18 00
alloc(newmem,$1000,INJECT_GET_GRAVITY_2)
alloc(INJECT_GET_GRAVITY_2o, $9)
label(code)
label(return)
label(vf_target_graviry is_set_gravity)
INJECT_GET_GRAVITY_2o:
readmem(INJECT_GET_GRAVITY_2, $9)
newmem:
cmp dword ptr [is_set_gravity], 1
jne short code
vmovss xmm2, [vf_target_graviry]
code:
// vmovaps xmm6,xmm2
reassemble(INJECT_GET_GRAVITY_2)
// vmovss xmm0,[rax+20]
reassemble(INJECT_GET_GRAVITY_2+4)
jmp return
align 10 cc
vf_target_graviry:
dd (float)1
is_set_gravity:
dd 0
INJECT_GET_GRAVITY_2:
jmp newmem
nop 4
return:
registersymbol(INJECT_GET_GRAVITY_2 INJECT_GET_GRAVITY_2o)
registersymbol(vf_target_graviry is_set_gravity)
[DISABLE]
INJECT_GET_GRAVITY_2:
readmem(INJECT_GET_GRAVITY_2o, $9)
unregistersymbol(INJECT_GET_GRAVITY_2 INJECT_GET_GRAVITY_2o)
unregistersymbol(vf_target_graviry is_set_gravity)
dealloc(newmem)
dealloc(INJECT_GET_GRAVITY_2o)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+299533
PRAGMATA.exe+2994F2: 56 - push rsi
PRAGMATA.exe+2994F3: 57 - push rdi
PRAGMATA.exe+2994F4: 53 - push rbx
PRAGMATA.exe+2994F5: 48 83 EC 68 - sub rsp,68
PRAGMATA.exe+2994F9: C5 F8 29 74 24 50 - vmovaps [rsp+50],xmm6
PRAGMATA.exe+2994FF: 48 8B 05 3A C3 66 0B - mov rax,[PRAGMATA.exe+B905840]
PRAGMATA.exe+299506: 48 31 E0 - xor rax,rsp
PRAGMATA.exe+299509: 48 89 44 24 48 - mov [rsp+48],rax
PRAGMATA.exe+29950E: 48 8B 41 50 - mov rax,[rcx+50]
PRAGMATA.exe+299512: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+299517: 0F 85 28 01 00 00 - jne PRAGMATA.exe+299645
PRAGMATA.exe+29951D: 48 89 D7 - mov rdi,rdx
PRAGMATA.exe+299520: 48 89 CE - mov rsi,rcx
PRAGMATA.exe+299523: 48 8B 82 30 03 00 00 - mov rax,[rdx+00000330]
PRAGMATA.exe+29952A: 48 85 C0 - test rax,rax
PRAGMATA.exe+29952D: 0F 84 46 01 00 00 - je PRAGMATA.exe+299679
// ---------- INJECTING HERE ----------
PRAGMATA.exe+299533: C5 F8 28 F2 - vmovaps xmm6,xmm2
// ---------- DONE INJECTING ----------
PRAGMATA.exe+299537: C5 FA 10 40 20 - vmovss xmm0,[rax+20]
PRAGMATA.exe+29953C: C5 FA 11 50 20 - vmovss [rax+20],xmm2
PRAGMATA.exe+299541: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+299545: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+29954A: 0F 85 F5 00 00 00 - jne PRAGMATA.exe+299645
PRAGMATA.exe+299550: C5 FA 5C C6 - vsubss xmm0,xmm0,xmm6
PRAGMATA.exe+299554: C4 E2 79 18 0D 3F EB D1 08 - vbroadcastss xmm1,[PRAGMATA.exe+8FB809C]
PRAGMATA.exe+29955D: C5 F8 54 C1 - vandps xmm0,xmm0,xmm1
PRAGMATA.exe+299561: C5 FA 10 0D 67 16 D2 08 - vmovss xmm1,[PRAGMATA.exe+8FBABD0]
PRAGMATA.exe+299569: C5 F8 2E C8 - vucomiss xmm1,xmm0
PRAGMATA.exe+29956D: 0F 82 32 01 00 00 - jb PRAGMATA.exe+2996A5
PRAGMATA.exe+299573: 48 8B 05 5E 16 72 0B - mov rax,[PRAGMATA.exe+B9BABD8]
PRAGMATA.exe+29957A: 48 85 C0 - test rax,rax
PRAGMATA.exe+29957D: 0F 84 A4 01 00 00 - je PRAGMATA.exe+299727
PRAGMATA.exe+299583: C5 FA 11 B0 30 01 00 00 - vmovss [rax+00000130],xmm6
PRAGMATA.exe+29958B: 48 8B 46 50 - mov rax,[rsi+50]
}
124
"Set?"
YesNo
0
C08000
4 Bytes
is_set_gravity
125
"Target value"
0
C08000
Float
vf_target_graviry
112
"Get Lunafilament / others amount (menus)"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(INJECT_GET_Lunafilament,$process,8B ?? 14 ?? 31 ?? ?? ?? F8 FF FF FF FF FF FF 7F ?? 21 ?? ?? 8B ?? 24 ?? 85 ?? 74 ?? E8 ?? ?? ?? ?? 48 98 ?? 8A ?? 07 58 84 ?? 7E ?? FE ?? ?? 88 ?? 07 58 75 ?? ?? 83 ?? 10 ?? 89 ?? E8 ?? ?? ?? ?? 84 ?? 74 ?? ?? 89 ?? FF ?? ?? ?? ?? ?? ?? 8B ?? 50 ?? 85 ?? 0F 99 ?? ?? 83 ?? 18 00 75 ?? 84 ?? 0F)
// raw AOB: 8B 48 08 E8 ?? ?? ?? ?? 48 89 44 24 50 4C 89 7C 24 48 48 85 DB 0F 84 ?? ?? ?? ?? 4C 8D 44 24 30 48 89 F1 48 89 DA E8 ?? ?? ?? ?? 48 8B 4E 50 4C 8B 71 18 4D 85 F6 0F 85 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? 8B 58 14 45 31 F6 49 BC F8 FF FF FF FF FF FF 7F 49 21 FC 4D 8B 3C 24 4D 85 FF 74 ?? E8 ?? ?? ?? ?? 48 98 41 8A 4C 07 58 84 C9 7E ?? FE C9 41 88 4C 07 58 75 ?? 49 83 C7 10 4C 89 F9 E8
// injection point AOB: 8B ?? 14 ?? 31 ?? ?? ?? F8 FF FF FF FF FF FF 7F ?? 21 ?? ?? 8B ?? 24 ?? 85 ?? 74 ?? E8 ?? ?? ?? ?? 48 98 ?? 8A ?? 07 58 84 ?? 7E ?? FE ?? ?? 88 ?? 07 58 75 ?? ?? 83 ?? 10 ?? 89 ?? E8
alloc(newmem,$1000,INJECT_GET_Lunafilament)
alloc(INJECT_GET_Lunafilamento, $6)
label(code)
label(return)
label(i_base_Lunafilament_addr i_base_upgrades_addr i_base_coin_addr i_base_repair_pack_addr)
label(i_base_data_13_addr i_base_data_19_addr)
INJECT_GET_Lunafilamento:
readmem(INJECT_GET_Lunafilament, $6)
// Lunafilament: app.InventoryManager > ItemSlotTable [5], _ID = 2227368435 (0x10)
// Upgrades: app.InventoryManager > ItemSlotTable [11], _ID = 187746965 (0x10)
// Coin: app.InventoryManager > ItemSlotTable [12], _ID = 701076331 (0x10)
// Repair pack: 2870192522
// Pure Lunum: 2107318115
// Red zone key: 2429803748
newmem:
cmp dword ptr [rax+10], #2227368435
jne short @F
mov [i_base_Lunafilament_addr], rax
jmp code
@@:
cmp dword ptr [rax+10], #187746965
jne short @F
mov [i_base_upgrades_addr], rax
jmp code
@@:
cmp dword ptr [rax+10], #701076331
jne short @F
mov [i_base_coin_addr], rax
jmp code
@@:
cmp dword ptr [rax+10], #2870192522
jne short @F
mov [i_base_repair_pack_addr], rax
jmp code
@@:
cmp dword ptr [rax+10], #2107318115
jne short @F
mov [i_base_data_13_addr], rax
jmp code
@@:
cmp dword ptr [rax+10], #2429803748
jne short @F
mov [i_base_data_19_addr], rax
code:
// mov ebx,[rax+14]
reassemble(INJECT_GET_Lunafilament)
// xor r14d,r14d
reassemble(INJECT_GET_Lunafilament+3)
jmp return
align 10 cc
i_base_Lunafilament_addr:
dq 0
i_base_upgrades_addr:
dq 0
i_base_coin_addr:
dq 0
i_base_repair_pack_addr:
dq 0
i_base_data_13_addr:
dq 0
i_base_data_19_addr:
dq 0
INJECT_GET_Lunafilament:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_Lunafilament INJECT_GET_Lunafilamento)
registersymbol(i_base_Lunafilament_addr i_base_upgrades_addr i_base_coin_addr i_base_repair_pack_addr)
registersymbol(i_base_data_13_addr i_base_data_19_addr)
[DISABLE]
INJECT_GET_Lunafilament:
readmem(INJECT_GET_Lunafilamento, $6)
unregistersymbol(INJECT_GET_Lunafilament INJECT_GET_Lunafilamento)
unregistersymbol(i_base_Lunafilament_addr i_base_upgrades_addr i_base_coin_addr i_base_repair_pack_addr)
unregistersymbol(i_base_data_13_addr i_base_data_19_addr)
dealloc(newmem)
dealloc(INJECT_GET_Lunafilamento)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+299367
PRAGMATA.exe+299322: 8B 48 08 - mov ecx,[rax+08]
PRAGMATA.exe+299325: E8 D6 E7 A1 04 - call PRAGMATA.exe+4CB7B00
PRAGMATA.exe+29932A: 48 89 44 24 50 - mov [rsp+50],rax
PRAGMATA.exe+29932F: 4C 89 7C 24 48 - mov [rsp+48],r15
PRAGMATA.exe+299334: 48 85 DB - test rbx,rbx
PRAGMATA.exe+299337: 0F 84 BE 00 00 00 - je PRAGMATA.exe+2993FB
PRAGMATA.exe+29933D: 4C 8D 44 24 30 - lea r8,[rsp+30]
PRAGMATA.exe+299342: 48 89 F1 - mov rcx,rsi
PRAGMATA.exe+299345: 48 89 DA - mov rdx,rbx
PRAGMATA.exe+299348: E8 73 7D BA 04 - call PRAGMATA.exe+4E410C0
PRAGMATA.exe+29934D: 48 8B 4E 50 - mov rcx,[rsi+50]
PRAGMATA.exe+299351: 4C 8B 71 18 - mov r14,[rcx+18]
PRAGMATA.exe+299355: 4D 85 F6 - test r14,r14
PRAGMATA.exe+299358: 0F 85 CF 00 00 00 - jne PRAGMATA.exe+29942D
PRAGMATA.exe+29935E: 48 85 C0 - test rax,rax
PRAGMATA.exe+299361: 0F 84 D0 00 00 00 - je PRAGMATA.exe+299437
// ---------- INJECTING HERE ----------
PRAGMATA.exe+299367: 8B 58 14 - mov ebx,[rax+14]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+29936A: 45 31 F6 - xor r14d,r14d
PRAGMATA.exe+29936D: 49 BC F8 FF FF FF FF FF FF 7F - mov r12,7FFFFFFFFFFFFFF8
PRAGMATA.exe+299377: 49 21 FC - and r12,rdi
PRAGMATA.exe+29937A: 4D 8B 3C 24 - mov r15,[r12]
PRAGMATA.exe+29937E: 4D 85 FF - test r15,r15
PRAGMATA.exe+299381: 74 4B - je PRAGMATA.exe+2993CE
PRAGMATA.exe+299383: E8 B8 D1 A1 04 - call PRAGMATA.exe+4CB6540
PRAGMATA.exe+299388: 48 98 - cdqe
PRAGMATA.exe+29938A: 41 8A 4C 07 58 - mov cl,[r15+rax+58]
PRAGMATA.exe+29938F: 84 C9 - test cl,cl
PRAGMATA.exe+299391: 7E 22 - jle PRAGMATA.exe+2993B5
PRAGMATA.exe+299393: FE C9 - dec cl
PRAGMATA.exe+299395: 41 88 4C 07 58 - mov [r15+rax+58],cl
PRAGMATA.exe+29939A: 75 19 - jne PRAGMATA.exe+2993B5
PRAGMATA.exe+29939C: 49 83 C7 10 - add r15,10
PRAGMATA.exe+2993A0: 4C 89 F9 - mov rcx,r15
}
113
"Lunafilament"
0
FF8080
4 Bytes
i_base_Lunafilament_addr
14
127
"Upgrade component"
0
FF8080
4 Bytes
i_base_upgrades_addr
14
128
"Cabin Coin"
0
FF8080
4 Bytes
i_base_coin_addr
14
131
"Repair"
0
FF8080
4 Bytes
i_base_repair_pack_addr
14
132
"Pure Lunum"
0
FF8080
4 Bytes
i_base_data_13_addr
14
153
"Red zone key"
0
FF8080
4 Bytes
i_base_data_19_addr
14
117
"Get char HP"
1
118
"Usage: enable in menu"
8000FF
1
126
"Re-enable when zoning"
8000FF
1
115
"Enable"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(INJECT_GET_CURRENT_HP,$process,83 ?? 18 00 ?? 0F 9E ?? 31 ?? ?? 84 ?? ?? 0B)
// raw AOB: 48 8B 49 18 84 C0 74 ?? 48 85 C9 75 ?? 48 8B 47 20 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 80 A8 00 00 00 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 80 48 01 00 00 48 85 C0 0F 84 ?? ?? ?? ?? 80 78 27 00 0F 85 ?? ?? ?? ?? 83 78 18 00 40 0F 9E C7 31 C9 40 84 FF B8 0B 5B 0F CF 41 0F 44 C7 48 85 C9 44 0F 44 F8 31 ED 48 85 C9 41 0F 44 EF 48 8B 4C 24 38 48 31 E1 E8 ?? ?? ?? ?? 89 E8 48 83 C4 40 5B 5D
// injection point AOB: 83 ?? 18 00 ?? 0F 9E ?? 31 ?? ?? 84 ?? ?? 0B 5B 0F CF ?? 0F 44 ?? ?? 85 ?? ?? 0F 44 ?? 31 ?? ?? 85 ?? ?? 0F 44 ?? ?? 8B ?? 24 ?? ?? 31 ?? E8 ?? ?? ?? ?? 89 ?? 48 83 C4 40 ?? 5D
alloc(newmem,$1000,INJECT_GET_CURRENT_HP)
alloc(INJECT_GET_CURRENT_HPo, $8)
label(code)
label(return)
label(ptrCapture_INJECT_GET_CURRENT_HP_347018)
label(is_set_other_hp i_min_hp_value)
INJECT_GET_CURRENT_HPo:
readmem(INJECT_GET_CURRENT_HP, $8)
newmem:
cmp qword ptr [ptrCapture_INJECT_GET_CURRENT_HP_347018], 0
jne short @F
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
mov [ptrCapture_INJECT_GET_CURRENT_HP_347018], rax
// **** End Auto script: AddressCapture
@@:
cmp [ptrCapture_INJECT_GET_CURRENT_HP_347018], rax
jne short set_non_player_hp
push r15
mov r15d, [i_min_hp_value]
cmp [rax+18], r15d
jae short endp
mov [rax+18], r15d
endp:
pop r15
jmp short code
set_non_player_hp:
cmp dword ptr [is_set_other_hp], 1
jne short code
cmp dword ptr [rax+18],00 // debug
//cmp [ptrCapture_INJECT_GET_CURRENT_HP_347018], rax
//je short code
cmp [rax+18], 64
jae short code
mov [rax+18], 64
code:
// cmp dword ptr [rax+18],00
reassemble(INJECT_GET_CURRENT_HP)
// setle dil
reassemble(INJECT_GET_CURRENT_HP+4)
jmp return
align 10 cc
ptrCapture_INJECT_GET_CURRENT_HP_347018:
dq 0
i_min_hp_value:
dd #800
is_set_other_hp:
dd 0
INJECT_GET_CURRENT_HP:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_CURRENT_HP INJECT_GET_CURRENT_HPo ptrCapture_INJECT_GET_CURRENT_HP_347018)
registersymbol(is_set_other_hp i_min_hp_value)
[DISABLE]
INJECT_GET_CURRENT_HP:
readmem(INJECT_GET_CURRENT_HPo, $8)
unregistersymbol(INJECT_GET_CURRENT_HP INJECT_GET_CURRENT_HPo ptrCapture_INJECT_GET_CURRENT_HP_347018)
unregistersymbol(is_set_other_hp i_min_hp_value)
dealloc(newmem)
dealloc(INJECT_GET_CURRENT_HPo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+15D6D9
PRAGMATA.exe+15D695: 48 8B 49 18 - mov rcx,[rcx+18]
PRAGMATA.exe+15D699: 84 C0 - test al,al
PRAGMATA.exe+15D69B: 74 59 - je PRAGMATA.exe+15D6F6
PRAGMATA.exe+15D69D: 48 85 C9 - test rcx,rcx
PRAGMATA.exe+15D6A0: 75 54 - jne PRAGMATA.exe+15D6F6
PRAGMATA.exe+15D6A2: 48 8B 47 20 - mov rax,[rdi+20]
PRAGMATA.exe+15D6A6: 48 85 C0 - test rax,rax
PRAGMATA.exe+15D6A9: 0F 84 A5 06 00 00 - je PRAGMATA.exe+15DD54
PRAGMATA.exe+15D6AF: 48 8B 80 A8 00 00 00 - mov rax,[rax+000000A8]
PRAGMATA.exe+15D6B6: 48 85 C0 - test rax,rax
PRAGMATA.exe+15D6B9: 0F 84 B6 06 00 00 - je PRAGMATA.exe+15DD75
PRAGMATA.exe+15D6BF: 48 8B 80 48 01 00 00 - mov rax,[rax+00000148]
PRAGMATA.exe+15D6C6: 48 85 C0 - test rax,rax
PRAGMATA.exe+15D6C9: 0F 84 C3 06 00 00 - je PRAGMATA.exe+15DD92
PRAGMATA.exe+15D6CF: 80 78 27 00 - cmp byte ptr [rax+27],00
PRAGMATA.exe+15D6D3: 0F 85 D8 06 00 00 - jne PRAGMATA.exe+15DDB1
// ---------- INJECTING HERE ----------
PRAGMATA.exe+15D6D9: 83 78 18 00 - cmp dword ptr [rax+18],00
// ---------- DONE INJECTING ----------
PRAGMATA.exe+15D6DD: 40 0F 9E C7 - setle dil
PRAGMATA.exe+15D6E1: 31 C9 - xor ecx,ecx
PRAGMATA.exe+15D6E3: 40 84 FF - test dil,dil
PRAGMATA.exe+15D6E6: B8 0B 5B 0F CF - mov eax,CF0F5B0B
PRAGMATA.exe+15D6EB: 41 0F 44 C7 - cmove eax,r15d
PRAGMATA.exe+15D6EF: 48 85 C9 - test rcx,rcx
PRAGMATA.exe+15D6F2: 44 0F 44 F8 - cmove r15d,eax
PRAGMATA.exe+15D6F6: 31 ED - xor ebp,ebp
PRAGMATA.exe+15D6F8: 48 85 C9 - test rcx,rcx
PRAGMATA.exe+15D6FB: 41 0F 44 EF - cmove ebp,r15d
PRAGMATA.exe+15D6FF: 48 8B 4C 24 38 - mov rcx,[rsp+38]
PRAGMATA.exe+15D704: 48 31 E1 - xor rcx,rsp
PRAGMATA.exe+15D707: E8 E4 7C EC 04 - call PRAGMATA.AK::SoundEngine::Term+7F0
PRAGMATA.exe+15D70C: 89 E8 - mov eax,ebp
PRAGMATA.exe+15D70E: 48 83 C4 40 - add rsp,40
PRAGMATA.exe+15D712: 5B - pop rbx
}
116
"HP"
0
FF8080
4 Bytes
ptrCapture_INJECT_GET_CURRENT_HP_347018
18
119
"min. HP"
0
C08000
4 Bytes
i_min_hp_value
308
"inf hacking nodes (active peaks)"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/20
}
[ENABLE]
aobscanmodule(INJECT_INF_ACTIVE_PEAK,$process,?? 8B ?? 14 ?? 8B ?? ?? ?? ?? ?? ?? 89 ?? ?? 31 ?? E8 ?? ?? ?? ?? ?? 89 ?? ?? 89 ?? 10 ?? 8B ?? 50 ?? 8B ?? 18 ?? 85 ?? 0F 85 ?? ?? ?? ?? ?? 89)
// raw AOB: 0F 83 ?? ?? ?? ?? 41 8D 40 01 89 44 24 48 8B 42 08 85 C0 0F 89 ?? ?? ?? ?? 4A C7 44 C2 20 00 00 00 00 48 8B 46 50 4C 8B 70 18 4D 85 F6 0F 85 ?? ?? ?? ?? 48 FF C3 4C 39 EB 0F 85 ?? ?? ?? ?? E9 ?? ?? ?? ?? 45 8B 77 10 41 8B 7F 14 48 8B 15 ?? ?? ?? ?? 48 89 F1 45 31 C0 E8 ?? ?? ?? ?? 49 89 C7 44 89 70 10 48 8B 46 50 4C 8B 70 18 4D 85 F6 0F 85 ?? ?? ?? ?? 41 89 7F 14 48 8B 46 50 4C 8B 70 18 4D 85 F6 0F 85 ?? ?? ?? ?? FF 44 24 4C 4C 8B 74 24 40
// injection point AOB: ?? 8B ?? 14 ?? 8B ?? ?? ?? ?? ?? ?? 89 ?? ?? 31 ?? E8 ?? ?? ?? ?? ?? 89 ?? ?? 89 ?? 10 ?? 8B ?? 50 ?? 8B ?? 18 ?? 85 ?? 0F 85 ?? ?? ?? ?? ?? 89 ?? 14 ?? 8B ?? 50 ?? 8B ?? 18 ?? 85 ?? 0F 85 ?? ?? ?? ?? FF ?? ?? ?? ?? 8B ?? 24
alloc(newmem,$1000,INJECT_INF_ACTIVE_PEAK)
alloc(INJECT_INF_ACTIVE_PEAKo, $B)
label(code)
label(return)
INJECT_INF_ACTIVE_PEAKo:
readmem(INJECT_INF_ACTIVE_PEAK, $B)
// App.EnhanceManager -> _EquipmentPerkMainGame -> _ActivePerkList -> _ActiveSkillUnits -> _items -> [0] -> _count
newmem:
or [r15+14], 2
code:
// mov edi,[r15+14]
reassemble(INJECT_INF_ACTIVE_PEAK)
// mov rdx,[PRAGMATA.exe+B93F700]
reassemble(INJECT_INF_ACTIVE_PEAK+4)
jmp return
align 10 cc
INJECT_INF_ACTIVE_PEAK:
jmp newmem
nop 6
return:
registersymbol(INJECT_INF_ACTIVE_PEAK INJECT_INF_ACTIVE_PEAKo)
[DISABLE]
INJECT_INF_ACTIVE_PEAK:
readmem(INJECT_INF_ACTIVE_PEAKo, $B)
unregistersymbol(INJECT_INF_ACTIVE_PEAK INJECT_INF_ACTIVE_PEAKo)
dealloc(newmem)
dealloc(INJECT_INF_ACTIVE_PEAKo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+1726D1
PRAGMATA.exe+172689: 0F 83 BB 00 00 00 - jae PRAGMATA.exe+17274A
PRAGMATA.exe+17268F: 41 8D 40 01 - lea eax,[r8+01]
PRAGMATA.exe+172693: 89 44 24 48 - mov [rsp+48],eax
PRAGMATA.exe+172697: 8B 42 08 - mov eax,[rdx+08]
PRAGMATA.exe+17269A: 85 C0 - test eax,eax
PRAGMATA.exe+17269C: 0F 89 20 02 00 00 - jns PRAGMATA.exe+1728C2
PRAGMATA.exe+1726A2: 4A C7 44 C2 20 00 00 00 00 - mov qword ptr [rdx+r8*8+20],00000000
PRAGMATA.exe+1726AB: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+1726AF: 4C 8B 70 18 - mov r14,[rax+18]
PRAGMATA.exe+1726B3: 4D 85 F6 - test r14,r14
PRAGMATA.exe+1726B6: 0F 85 82 01 00 00 - jne PRAGMATA.exe+17283E
PRAGMATA.exe+1726BC: 48 FF C3 - inc rbx
PRAGMATA.exe+1726BF: 4C 39 EB - cmp rbx,r13
PRAGMATA.exe+1726C2: 0F 85 58 FF FF FF - jne PRAGMATA.exe+172620
PRAGMATA.exe+1726C8: E9 8A 00 00 00 - jmp PRAGMATA.exe+172757
PRAGMATA.exe+1726CD: 45 8B 77 10 - mov r14d,[r15+10]
// ---------- INJECTING HERE ----------
PRAGMATA.exe+1726D1: 41 8B 7F 14 - mov edi,[r15+14]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+1726D5: 48 8B 15 24 D0 7C 0B - mov rdx,[PRAGMATA.exe+B93F700]
PRAGMATA.exe+1726DC: 48 89 F1 - mov rcx,rsi
PRAGMATA.exe+1726DF: 45 31 C0 - xor r8d,r8d
PRAGMATA.exe+1726E2: E8 D9 3D C1 04 - call PRAGMATA.exe+4D864C0
PRAGMATA.exe+1726E7: 49 89 C7 - mov r15,rax
PRAGMATA.exe+1726EA: 44 89 70 10 - mov [rax+10],r14d
PRAGMATA.exe+1726EE: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+1726F2: 4C 8B 70 18 - mov r14,[rax+18]
PRAGMATA.exe+1726F6: 4D 85 F6 - test r14,r14
PRAGMATA.exe+1726F9: 0F 85 3F 01 00 00 - jne PRAGMATA.exe+17283E
PRAGMATA.exe+1726FF: 41 89 7F 14 - mov [r15+14],edi
PRAGMATA.exe+172703: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+172707: 4C 8B 70 18 - mov r14,[rax+18]
PRAGMATA.exe+17270B: 4D 85 F6 - test r14,r14
PRAGMATA.exe+17270E: 0F 85 2A 01 00 00 - jne PRAGMATA.exe+17283E
PRAGMATA.exe+172714: FF 44 24 4C - inc [rsp+4C]
}
135
"Fast Diana's Overdrive / inf thruster"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/17
}
[ENABLE]
aobscanmodule(FAST_DIANA_OVERDRIVE,$process,C5 ?? 11 ?? 10 ?? 8B ?? 50 ?? 83 ?? 18 00 74 ?? C5 ?? 57)
// raw AOB: C5 F8 2E DA 73 ?? C5 F8 2E C1 C5 FA 10 5A 14 76 ?? C5 F8 2E D3 72 ?? C3 C5 F8 2E C1 77 ?? C5 EA 5D C1 C5 EA 5C C9 C5 F2 5D D3 C5 E0 57 DB C5 F2 C2 CB 01 C5 F0 55 CA C5 FA 11 4A 10 48 8B 41 50 48 83 78 18 00 74 ?? C5 F8 57 C0 EB ?? C4 E2 79 18 05 ?? ?? ?? ?? C5 F0 57 C0 C5 E2 5C E2 C5 DA 5D C0 EB ?? CC CC CC CC CC CC
// injection point AOB: C5 ?? 11 ?? 10 ?? 8B ?? 50 ?? 83 ?? 18 00 74 ?? C5 ?? 57 ?? EB ?? C4 ?? ?? 18 ?? ?? ?? ?? ?? C5 ?? 57 ?? C5 ?? 5C ?? C5 ?? 5D ?? EB ?? CC CC CC CC CC CC
alloc(newmem,$1000,FAST_DIANA_OVERDRIVE)
alloc(FAST_DIANA_OVERDRIVEo, $5)
label(code)
label(return)
label(i_base_last_data_addr)
// 100f = overdrive full
// 1000f = thruster full
FAST_DIANA_OVERDRIVEo:
readmem(FAST_DIANA_OVERDRIVE, $5)
newmem:
mov [i_base_last_data_addr], rdx
vmovss xmm15, [vf_100]
vucomiss xmm1, xmm15
ja short @F
movss xmm1, xmm15
jmp short code
@@:
vmovss xmm15, [vf_500]
vucomiss xmm1, xmm15
ja short @F
movss xmm1, xmm15
//jmp short code
@@:
code:
// vmovss [rdx+10],xmm1
reassemble(FAST_DIANA_OVERDRIVE)
jmp return
align 10 cc
vf_100:
dd (float)100
vf_500:
dd (float)500
i_base_last_data_addr:
dq 0
FAST_DIANA_OVERDRIVE:
jmp newmem
return:
registersymbol(FAST_DIANA_OVERDRIVE FAST_DIANA_OVERDRIVEo)
registersymbol(i_base_last_data_addr)
[DISABLE]
FAST_DIANA_OVERDRIVE:
readmem(FAST_DIANA_OVERDRIVEo, $5)
unregistersymbol(FAST_DIANA_OVERDRIVE FAST_DIANA_OVERDRIVEo)
unregistersymbol(i_base_last_data_addr)
dealloc(newmem)
dealloc(FAST_DIANA_OVERDRIVEo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+899D48
PRAGMATA.exe+899D11: C5 F8 2E DA - vucomiss xmm3,xmm2
PRAGMATA.exe+899D15: 73 11 - jae PRAGMATA.exe+899D28
PRAGMATA.exe+899D17: C5 F8 2E C1 - vucomiss xmm0,xmm1
PRAGMATA.exe+899D1B: C5 FA 10 5A 14 - vmovss xmm3,[rdx+14]
PRAGMATA.exe+899D20: 76 07 - jna PRAGMATA.exe+899D29
PRAGMATA.exe+899D22: C5 F8 2E D3 - vucomiss xmm2,xmm3
PRAGMATA.exe+899D26: 72 01 - jb PRAGMATA.exe+899D29
PRAGMATA.exe+899D28: C3 - ret
PRAGMATA.exe+899D29: C5 F8 2E C1 - vucomiss xmm0,xmm1
PRAGMATA.exe+899D2D: 77 2F - ja PRAGMATA.exe+899D5E
PRAGMATA.exe+899D2F: C5 EA 5D C1 - vminss xmm0,xmm2,xmm1
PRAGMATA.exe+899D33: C5 EA 5C C9 - vsubss xmm1,xmm2,xmm1
PRAGMATA.exe+899D37: C5 F2 5D D3 - vminss xmm2,xmm1,xmm3
PRAGMATA.exe+899D3B: C5 E0 57 DB - vxorps xmm3,xmm3,xmm3
PRAGMATA.exe+899D3F: C5 F2 C2 CB 01 - vcmpltss xmm1,xmm1,xmm3
PRAGMATA.exe+899D44: C5 F0 55 CA - vandnps xmm1,xmm1,xmm2
// ---------- INJECTING HERE ----------
PRAGMATA.exe+899D48: C5 FA 11 4A 10 - vmovss [rdx+10],xmm1
// ---------- DONE INJECTING ----------
PRAGMATA.exe+899D4D: 48 8B 41 50 - mov rax,[rcx+50]
PRAGMATA.exe+899D51: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+899D56: 74 D0 - je PRAGMATA.exe+899D28
PRAGMATA.exe+899D58: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
PRAGMATA.exe+899D5C: EB CA - jmp PRAGMATA.exe+899D28
PRAGMATA.exe+899D5E: C4 E2 79 18 05 31 E3 71 08 - vbroadcastss xmm0,[PRAGMATA.exe+8FB8098]
PRAGMATA.exe+899D67: C5 F0 57 C0 - vxorps xmm0,xmm1,xmm0
PRAGMATA.exe+899D6B: C5 E2 5C E2 - vsubss xmm4,xmm3,xmm2
PRAGMATA.exe+899D6F: C5 DA 5D C0 - vminss xmm0,xmm4,xmm0
PRAGMATA.exe+899D73: EB BE - jmp PRAGMATA.exe+899D33
PRAGMATA.exe+899D75: CC - int 3
PRAGMATA.exe+899D76: CC - int 3
PRAGMATA.exe+899D77: CC - int 3
PRAGMATA.exe+899D78: CC - int 3
PRAGMATA.exe+899D79: CC - int 3
PRAGMATA.exe+899D7A: CC - int 3
}
151
"Last data"
0
FF8080
Float
i_base_last_data_addr
10
157
"Training: target time"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/19
}
[ENABLE]
aobscanmodule(INJECT_LOCK_CHALLENGE_TIMER,$process,C5 ?? 58 ?? B8 00 00 00 C5 ?? 11 ?? B8 00 00 00 ?? 8B ?? 50)
// raw AOB: CC CC CC 41 57 41 56 41 55 41 54 56 57 55 53 48 83 EC 48 48 8B 05 ?? ?? ?? ?? 48 31 E0 48 89 44 24 40 48 C7 44 24 30 00 00 00 00 C5 E2 58 82 B8 00 00 00 C5 FA 11 82 B8 00 00 00 48 8B 41 50 48 83 78 18 00 74 ?? 48 8B 4C 24 40 48 31 E1 E8 ?? ?? ?? ?? 90 48 83 C4 48 5B 5D 5F 5E 41 5C 41 5D 41 5E
// injection point AOB: C5 ?? 58 ?? B8 00 00 00 C5 ?? 11 ?? B8 00 00 00 ?? 8B ?? 50 ?? 83 ?? 18 00 74 ?? ?? 8B ?? 24 ?? ?? 31 ?? E8 ?? ?? ?? ?? 90 48 83 C4 48 ?? 5D
alloc(newmem,$1000,INJECT_LOCK_CHALLENGE_TIMER)
alloc(INJECT_LOCK_CHALLENGE_TIMERo, $8)
label(code)
label(return)
label(vf_target_ctime i_training_mode)
INJECT_LOCK_CHALLENGE_TIMERo:
readmem(INJECT_LOCK_CHALLENGE_TIMER, $8)
newmem:
vmovss xmm15, [vf_target_ctime]
vmovss xmm0, [rdx+000000B8]
cmp dword ptr [i_training_mode], 0
jne short chk_min
chk_max:
vucomiss xmm0, xmm15
jbe short code
vmovss [rdx+000000B8], xmm15
jmp short code
chk_min:
vucomiss xmm0, xmm15
jae short code
vmovss [rdx+000000B8], xmm15
code:
// vaddss xmm0,xmm3,[rdx+000000B8]
reassemble(INJECT_LOCK_CHALLENGE_TIMER)
jmp return
align 10 cc
vf_target_ctime:
dd (float)24
i_training_mode: // 0: max clamp, 1: min clamp
dd 0
INJECT_LOCK_CHALLENGE_TIMER:
jmp newmem
nop 3
return:
registersymbol(INJECT_LOCK_CHALLENGE_TIMER INJECT_LOCK_CHALLENGE_TIMERo)
registersymbol(vf_target_ctime i_training_mode)
[DISABLE]
INJECT_LOCK_CHALLENGE_TIMER:
readmem(INJECT_LOCK_CHALLENGE_TIMERo, $8)
unregistersymbol(INJECT_LOCK_CHALLENGE_TIMER INJECT_LOCK_CHALLENGE_TIMERo)
unregistersymbol(vf_target_ctime i_training_mode)
dealloc(newmem)
dealloc(INJECT_LOCK_CHALLENGE_TIMERo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+776DEF8
PRAGMATA.exe+776DECD: CC - int 3
PRAGMATA.exe+776DECE: CC - int 3
PRAGMATA.exe+776DECF: CC - int 3
PRAGMATA.exe+776DED0: 41 57 - push r15
PRAGMATA.exe+776DED2: 41 56 - push r14
PRAGMATA.exe+776DED4: 41 55 - push r13
PRAGMATA.exe+776DED6: 41 54 - push r12
PRAGMATA.exe+776DED8: 56 - push rsi
PRAGMATA.exe+776DED9: 57 - push rdi
PRAGMATA.exe+776DEDA: 55 - push rbp
PRAGMATA.exe+776DEDB: 53 - push rbx
PRAGMATA.exe+776DEDC: 48 83 EC 48 - sub rsp,48
PRAGMATA.exe+776DEE0: 48 8B 05 59 79 19 04 - mov rax,[PRAGMATA.exe+B905840]
PRAGMATA.exe+776DEE7: 48 31 E0 - xor rax,rsp
PRAGMATA.exe+776DEEA: 48 89 44 24 40 - mov [rsp+40],rax
PRAGMATA.exe+776DEEF: 48 C7 44 24 30 00 00 00 00 - mov qword ptr [rsp+30],00000000
// ---------- INJECTING HERE ----------
PRAGMATA.exe+776DEF8: C5 E2 58 82 B8 00 00 00 - vaddss xmm0,xmm3,[rdx+000000B8]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+776DF00: C5 FA 11 82 B8 00 00 00 - vmovss [rdx+000000B8],xmm0
PRAGMATA.exe+776DF08: 48 8B 41 50 - mov rax,[rcx+50]
PRAGMATA.exe+776DF0C: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+776DF11: 74 1F - je PRAGMATA.exe+776DF32
PRAGMATA.exe+776DF13: 48 8B 4C 24 40 - mov rcx,[rsp+40]
PRAGMATA.exe+776DF18: 48 31 E1 - xor rcx,rsp
PRAGMATA.exe+776DF1B: E8 D0 74 8B FD - call PRAGMATA.AK::SoundEngine::Term+7F0
PRAGMATA.exe+776DF20: 90 - nop
PRAGMATA.exe+776DF21: 48 83 C4 48 - add rsp,48
PRAGMATA.exe+776DF25: 5B - pop rbx
PRAGMATA.exe+776DF26: 5D - pop rbp
PRAGMATA.exe+776DF27: 5F - pop rdi
PRAGMATA.exe+776DF28: 5E - pop rsi
PRAGMATA.exe+776DF29: 41 5C - pop r12
PRAGMATA.exe+776DF2B: 41 5D - pop r13
PRAGMATA.exe+776DF2D: 41 5E - pop r14
}
255
"mode"
0:Max clamp
1:Min Clamp
0
C08000
4 Bytes
i_training_mode
158
"target"
0
C08000
Float
vf_target_ctime
141
"Get app.EnhanceManager settings"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='EnhanceManager', aob='?? 8B ?? ?? ?? ?? ?? ?? 85 ?? 74 ?? ?? 8B ?? 48 ?? 89 ?? E8 ?? ?? ?? ?? ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 85 ?? 74 ?? ?? 8B ?? 28 ?? 85 ?? 74 ?? 8B', pos=3, aoblen=7, symbol='EnhanceManager_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('EnhanceManager_addr')
{$asm}
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+15E93C
PRAGMATA.exe+15E91F: C5 FA 2A 78 20 - vcvtsi2ss xmm7,xmm0,[rax+20]
PRAGMATA.exe+15E924: 31 C9 - xor ecx,ecx
PRAGMATA.exe+15E926: 48 85 C9 - test rcx,rcx
PRAGMATA.exe+15E929: 74 04 - je PRAGMATA.exe+15E92F
PRAGMATA.exe+15E92B: C5 C0 57 FF - vxorps xmm7,xmm7,xmm7
PRAGMATA.exe+15E92F: 31 DB - xor ebx,ebx
PRAGMATA.exe+15E931: C5 F8 2E FE - vucomiss xmm7,xmm6
PRAGMATA.exe+15E935: 77 75 - ja PRAGMATA.exe+15E9AC
PRAGMATA.exe+15E937: 48 85 C9 - test rcx,rcx
PRAGMATA.exe+15E93A: 75 70 - jne PRAGMATA.exe+15E9AC
// ---------- INJECTING HERE ----------
PRAGMATA.exe+15E93C: 48 8B 15 AD 1D 84 0B - mov rdx,[PRAGMATA.exe+B9A06F0]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+15E943: 48 85 D2 - test rdx,rdx
PRAGMATA.exe+15E946: 74 7E - je PRAGMATA.exe+15E9C6
PRAGMATA.exe+15E948: 44 8B 42 48 - mov r8d,[rdx+48]
PRAGMATA.exe+15E94C: 48 89 F1 - mov rcx,rsi
PRAGMATA.exe+15E94F: E8 1C 01 B7 04 - call PRAGMATA.exe+4CCEA70
PRAGMATA.exe+15E954: 48 8B 4E 50 - mov rcx,[rsi+50]
PRAGMATA.exe+15E958: 48 83 79 18 00 - cmp qword ptr [rcx+18],00
PRAGMATA.exe+15E95D: 0F 85 45 01 00 00 - jne PRAGMATA.exe+15EAA8
PRAGMATA.exe+15E963: 48 85 C0 - test rax,rax
PRAGMATA.exe+15E966: 74 72 - je PRAGMATA.exe+15E9DA
}
142
"base"
1
0
8 Bytes
EnhanceManager_addr
0
143
"_EquipmentPerkMainGame -> _BootingPerks"
1
0
1
+18
0
+28
146
"<RepairKitCapacity>k__BackingField"
1
FF8080
4 Bytes
+60
147
"<MainGadgetCapacity>k__BackingField"
1
FF8080
4 Bytes
+64
105
"<AssaultGadgetCapacity>k__BackingField"
1
FF8080
4 Bytes
+68
106
"<StrategyGadgetCapacity>k__BackingField"
1
FF8080
4 Bytes
+6C
148
"<SupportGadgetCapacity>k__BackingField"
1
FF8080
4 Bytes
+70
145
"<ActiveSkillCapacity>k__BackingField"
1
FF8080
4 Bytes
+74
152
"Skip slot capacity writeback"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/18
}
[ENABLE]
aobscanmodule(INJECT_SKIP_AS_SLOT_NUM_DOWN,$process,89 ?? 74 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 20)
// raw AOB: 48 89 D6 48 89 CF 48 8B 52 20 48 85 D2 0F 84 ?? ?? ?? ?? 41 B8 F6 B8 BA 7D E8 ?? ?? ?? ?? 48 8B 47 50 48 8B 40 18 48 85 C0 74 ?? C5 F8 57 C0 48 85 C0 0F 85 ?? ?? ?? ?? C5 FA 2C C0 FF C0 89 46 74 48 8B 47 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? 48 8B 56 20 48 89 F9 48 85 D2 0F 84 ?? ?? ?? ?? 41 B8 D1 A6 2B D9 E8 ?? ?? ?? ?? 48 8B 47 50 48 8B 40 18 48 85 C0 74 ?? C5 F8 57 C0 48 85 C0 0F 85 ?? ?? ?? ?? C5 FA 2C C0
// injection point AOB: 89 ?? 74 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 20 ?? 89 ?? ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? ?? D1 A6 2B D9 E8 ?? ?? ?? ?? ?? 8B ?? 50 ?? 8B ?? 18 ?? 85 ?? 74 ?? C5 ?? 57 ?? ?? 85 ?? 0F 85 ?? ?? ?? ?? C5 ?? 2C
alloc(newmem,$1000,INJECT_SKIP_AS_SLOT_NUM_DOWN)
alloc(INJECT_SKIP_AS_SLOT_NUM_DOWNo, $7)
label(code)
label(return)
INJECT_SKIP_AS_SLOT_NUM_DOWNo:
readmem(INJECT_SKIP_AS_SLOT_NUM_DOWN, $7)
newmem:
cmp [rsi+74],eax
ja short skip_overwrite
code:
// mov [rsi+74],eax
reassemble(INJECT_SKIP_AS_SLOT_NUM_DOWN)
// mov rax,[rdi+50]
skip_overwrite:
reassemble(INJECT_SKIP_AS_SLOT_NUM_DOWN+3)
jmp return
align 10 cc
INJECT_SKIP_AS_SLOT_NUM_DOWN:
jmp newmem
nop 2
return:
registersymbol(INJECT_SKIP_AS_SLOT_NUM_DOWN INJECT_SKIP_AS_SLOT_NUM_DOWNo)
[DISABLE]
INJECT_SKIP_AS_SLOT_NUM_DOWN:
readmem(INJECT_SKIP_AS_SLOT_NUM_DOWNo, $7)
unregistersymbol(INJECT_SKIP_AS_SLOT_NUM_DOWN INJECT_SKIP_AS_SLOT_NUM_DOWNo)
dealloc(newmem)
dealloc(INJECT_SKIP_AS_SLOT_NUM_DOWNo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+59F8917
PRAGMATA.exe+59F88D9: 48 89 D6 - mov rsi,rdx
PRAGMATA.exe+59F88DC: 48 89 CF - mov rdi,rcx
PRAGMATA.exe+59F88DF: 48 8B 52 20 - mov rdx,[rdx+20]
PRAGMATA.exe+59F88E3: 48 85 D2 - test rdx,rdx
PRAGMATA.exe+59F88E6: 0F 84 65 02 00 00 - je PRAGMATA.exe+59F8B51
PRAGMATA.exe+59F88EC: 41 B8 F6 B8 BA 7D - mov r8d,7DBAB8F6
PRAGMATA.exe+59F88F2: E8 C9 49 50 FF - call PRAGMATA.exe+4EFD2C0
PRAGMATA.exe+59F88F7: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F88FB: 48 8B 40 18 - mov rax,[rax+18]
PRAGMATA.exe+59F88FF: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F8902: 74 04 - je PRAGMATA.exe+59F8908
PRAGMATA.exe+59F8904: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
PRAGMATA.exe+59F8908: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F890B: 0F 85 B4 01 00 00 - jne PRAGMATA.exe+59F8AC5
PRAGMATA.exe+59F8911: C5 FA 2C C0 - vcvttss2si eax,xmm0
PRAGMATA.exe+59F8915: FF C0 - inc eax
// ---------- INJECTING HERE ----------
PRAGMATA.exe+59F8917: 89 46 74 - mov [rsi+74],eax
// ---------- DONE INJECTING ----------
PRAGMATA.exe+59F891A: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F891E: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+59F8923: 0F 85 9C 01 00 00 - jne PRAGMATA.exe+59F8AC5
PRAGMATA.exe+59F8929: 48 8B 56 20 - mov rdx,[rsi+20]
PRAGMATA.exe+59F892D: 48 89 F9 - mov rcx,rdi
PRAGMATA.exe+59F8930: 48 85 D2 - test rdx,rdx
PRAGMATA.exe+59F8933: 0F 84 32 02 00 00 - je PRAGMATA.exe+59F8B6B
PRAGMATA.exe+59F8939: 41 B8 D1 A6 2B D9 - mov r8d,D92BA6D1
PRAGMATA.exe+59F893F: E8 7C 49 50 FF - call PRAGMATA.exe+4EFD2C0
PRAGMATA.exe+59F8944: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F8948: 48 8B 40 18 - mov rax,[rax+18]
PRAGMATA.exe+59F894C: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F894F: 74 04 - je PRAGMATA.exe+59F8955
PRAGMATA.exe+59F8951: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
PRAGMATA.exe+59F8955: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F8958: 0F 85 67 01 00 00 - jne PRAGMATA.exe+59F8AC5
}
102
"<PassiveSkillCapacity>k__BackingField"
1
FF8080
4 Bytes
+78
150
"Skip slot capacity writeback"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/18
}
[ENABLE]
aobscanmodule(INJECT_SKIP_SLOT_NUM_DOWN,$process,89 ?? 78 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 20 ?? 89)
// raw AOB: 0F 85 ?? ?? ?? ?? 48 8B 56 20 48 89 F9 48 85 D2 0F 84 ?? ?? ?? ?? 41 B8 D1 A6 2B D9 E8 ?? ?? ?? ?? 48 8B 47 50 48 8B 40 18 48 85 C0 74 ?? C5 F8 57 C0 48 85 C0 0F 85 ?? ?? ?? ?? C5 FA 2C C0 FF C0 89 46 78 48 8B 47 50 48 83 78 18 00 0F 85 ?? ?? ?? ?? 48 8B 56 20 48 89 F9 48 85 D2 0F 84 ?? ?? ?? ?? 41 B8 8E D9 C7 92 E8 ?? ?? ?? ?? 48 8B 47 50 48 8B 40 18 C5 FA 2C D0 FF C2 48 85 C0 B9 01 00 00 00 0F 44 CA 48 85 C0
// injection point AOB: 89 ?? 78 ?? 8B ?? 50 ?? 83 ?? 18 00 0F 85 ?? ?? ?? ?? ?? 8B ?? 20 ?? 89 ?? ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? ?? 8E D9 C7 92 E8 ?? ?? ?? ?? ?? 8B ?? 50 ?? 8B ?? 18 C5 ?? 2C ?? FF ?? ?? 85 ?? ?? 01 00 00 00 0F 44 ?? ?? 85
alloc(newmem,$1000,INJECT_SKIP_SLOT_NUM_DOWN)
alloc(INJECT_SKIP_SLOT_NUM_DOWNo, $7)
label(code)
label(return)
INJECT_SKIP_SLOT_NUM_DOWNo:
readmem(INJECT_SKIP_SLOT_NUM_DOWN, $7)
newmem:
cmp [rsi+78],eax
ja short skip_overwrite
code:
// mov [rsi+78],eax
reassemble(INJECT_SKIP_SLOT_NUM_DOWN)
skip_overwrite:
// mov rax,[rdi+50]
reassemble(INJECT_SKIP_SLOT_NUM_DOWN+3)
jmp return
align 10 cc
INJECT_SKIP_SLOT_NUM_DOWN:
jmp newmem
nop 2
return:
registersymbol(INJECT_SKIP_SLOT_NUM_DOWN INJECT_SKIP_SLOT_NUM_DOWNo)
[DISABLE]
INJECT_SKIP_SLOT_NUM_DOWN:
readmem(INJECT_SKIP_SLOT_NUM_DOWNo, $7)
unregistersymbol(INJECT_SKIP_SLOT_NUM_DOWN INJECT_SKIP_SLOT_NUM_DOWNo)
dealloc(newmem)
dealloc(INJECT_SKIP_SLOT_NUM_DOWNo)
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+59F8964
PRAGMATA.exe+59F8923: 0F 85 9C 01 00 00 - jne PRAGMATA.exe+59F8AC5
PRAGMATA.exe+59F8929: 48 8B 56 20 - mov rdx,[rsi+20]
PRAGMATA.exe+59F892D: 48 89 F9 - mov rcx,rdi
PRAGMATA.exe+59F8930: 48 85 D2 - test rdx,rdx
PRAGMATA.exe+59F8933: 0F 84 32 02 00 00 - je PRAGMATA.exe+59F8B6B
PRAGMATA.exe+59F8939: 41 B8 D1 A6 2B D9 - mov r8d,D92BA6D1
PRAGMATA.exe+59F893F: E8 7C 49 50 FF - call PRAGMATA.exe+4EFD2C0
PRAGMATA.exe+59F8944: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F8948: 48 8B 40 18 - mov rax,[rax+18]
PRAGMATA.exe+59F894C: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F894F: 74 04 - je PRAGMATA.exe+59F8955
PRAGMATA.exe+59F8951: C5 F8 57 C0 - vxorps xmm0,xmm0,xmm0
PRAGMATA.exe+59F8955: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F8958: 0F 85 67 01 00 00 - jne PRAGMATA.exe+59F8AC5
PRAGMATA.exe+59F895E: C5 FA 2C C0 - vcvttss2si eax,xmm0
PRAGMATA.exe+59F8962: FF C0 - inc eax
// ---------- INJECTING HERE ----------
PRAGMATA.exe+59F8964: 89 46 78 - mov [rsi+78],eax
// ---------- DONE INJECTING ----------
PRAGMATA.exe+59F8967: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F896B: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+59F8970: 0F 85 4F 01 00 00 - jne PRAGMATA.exe+59F8AC5
PRAGMATA.exe+59F8976: 48 8B 56 20 - mov rdx,[rsi+20]
PRAGMATA.exe+59F897A: 48 89 F9 - mov rcx,rdi
PRAGMATA.exe+59F897D: 48 85 D2 - test rdx,rdx
PRAGMATA.exe+59F8980: 0F 84 FF 01 00 00 - je PRAGMATA.exe+59F8B85
PRAGMATA.exe+59F8986: 41 B8 8E D9 C7 92 - mov r8d,92C7D98E
PRAGMATA.exe+59F898C: E8 2F 49 50 FF - call PRAGMATA.exe+4EFD2C0
PRAGMATA.exe+59F8991: 48 8B 47 50 - mov rax,[rdi+50]
PRAGMATA.exe+59F8995: 48 8B 40 18 - mov rax,[rax+18]
PRAGMATA.exe+59F8999: C5 FA 2C D0 - vcvttss2si edx,xmm0
PRAGMATA.exe+59F899D: FF C2 - inc edx
PRAGMATA.exe+59F899F: 48 85 C0 - test rax,rax
PRAGMATA.exe+59F89A2: B9 01 00 00 00 - mov ecx,00000001
PRAGMATA.exe+59F89A7: 0F 44 CA - cmove ecx,edx
}
101
"_RequestedRefreshManagedPerkUnit"
0
FF8080
Byte
+7C
149
"<IsEquippedPe13700>k__BackingField"
0
FF8080
Byte
+7D
211
"Get app.EnemyBattleSystem partial settings"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='EnemyBattleSystem', aob='?? 8B ?? ?? ?? ?? ?? ?? 83 ?? 10 00 74 ?? ?? 89 ?? E8 ?? ?? ?? ?? ?? 8B ?? 50 ?? 83 ?? 18 00 75 ?? ?? 8B ?? ?? ?? ?? ?? C5 ?? 10 ?? 68 03 00 00 C5 ?? 57 ?? C5 ?? 2E ?? 75 ?? 7B ?? ?? 85', pos=3, aoblen=7, symbol='EnemyBattleSystem_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('EnemyBattleSystem_addr')
{$asm}
{
// ORIGINAL CODE - INJECTION POINT: PRAGMATA.exe+2BF911
PRAGMATA.exe+2BF8F2: 53 - push rbx
PRAGMATA.exe+2BF8F3: 48 83 EC 20 - sub rsp,20
PRAGMATA.exe+2BF8F7: 48 89 D3 - mov rbx,rdx
PRAGMATA.exe+2BF8FA: 48 89 CE - mov rsi,rcx
PRAGMATA.exe+2BF8FD: 48 8B 02 - mov rax,[rdx]
PRAGMATA.exe+2BF900: 48 89 D1 - mov rcx,rdx
PRAGMATA.exe+2BF903: FF 50 78 - call qword ptr [rax+78]
PRAGMATA.exe+2BF906: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+2BF90A: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+2BF90F: 75 57 - jne PRAGMATA.exe+2BF968
// ---------- INJECTING HERE ----------
PRAGMATA.exe+2BF911: 48 8B 3D 20 B3 6F 0B - mov rdi,[PRAGMATA.exe+B9BAC38]
// ---------- DONE INJECTING ----------
PRAGMATA.exe+2BF918: 48 83 7B 10 00 - cmp qword ptr [rbx+10],00
PRAGMATA.exe+2BF91D: 74 52 - je PRAGMATA.exe+2BF971
PRAGMATA.exe+2BF91F: 48 89 D9 - mov rcx,rbx
PRAGMATA.exe+2BF922: E8 D9 28 A6 04 - call PRAGMATA.exe+4D22200
PRAGMATA.exe+2BF927: 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+2BF92B: 48 83 78 18 00 - cmp qword ptr [rax+18],00
PRAGMATA.exe+2BF930: 75 36 - jne PRAGMATA.exe+2BF968
PRAGMATA.exe+2BF932: 48 8B 05 1F 35 6D 0B - mov rax,[PRAGMATA.exe+B992E58]
PRAGMATA.exe+2BF939: C5 FA 10 88 68 03 00 00 - vmovss xmm1,[rax+System.Reflection.Emit.OpCodes.Conv_U8]
PRAGMATA.exe+2BF941: C5 E8 57 D2 - vxorps xmm2,xmm2,xmm2
}
212
"base"
1
0
8 Bytes
EnemyBattleSystem_addr
0
199
"app.EnemyBaseParamUserData"
1
0
1
+48
0
200
"app.EnemyBaseAbnormalParam"
1
0
1
+20
0
201
"_DefenceDownTimeForNum"
1
0
1
+30
0
202
"[0]"
0
FF8080
Float
EF467610
203
"[1]"
0
FF8080
Float
EF467614
204
"[2]"
0
FF8080
Float
EF467618
205
"[3]"
0
FF8080
Float
EF46761C
206
"[4]"
0
FF8080
Float
EF467620
109
"[5]"
0
FF8080
Float
EF467624
110
"[6]"
0
FF8080
Float
EF467628
111
"[7]"
0
FF8080
Float
EF46762C
207
"[8]"
0
FF8080
Float
EF467630
215
"_DefenseDownRateForNum"
1
0
1
+18
0
216
"[0]"
0
FF8080
Float
EF467610
217
"[1]"
0
FF8080
Float
EF467614
218
"[2]"
0
FF8080
Float
EF467618
219
"[3]"
0
FF8080
Float
EF46761C
220
"[4]"
0
FF8080
Float
EF467620
221
"[5]"
0
FF8080
Float
EF467624
222
"[6]"
0
FF8080
Float
EF467628
223
"[7]"
0
FF8080
Float
EF46762C
224
"[8]"
0
FF8080
Float
EF467630
250
"_MultiStartExplodeTime"
0
FF8080
Float
+124
254
"_MultiTargetExplodeTime"
0
FF8080
Float
+128
234
"_StunTimeFromCh18000"
0
FF8080
Float
+13C
237
"_HealBaseValue"
0
FF8080
Float
+120
238
"_HealConvertRateMax"
0
FF8080
Float
+150
239
"_ReceiveMultiHackingDamageRate"
0
FF8080
Float
+12C
241
"_ReceiveMultiHackingFatalDamageRate"
0
FF8080
Float
+130
242
"_ReceiveMultiHeatFatalDamageRate"
0
FF8080
Float
+134
244
"_HeatDamageInterval"
0
FF8080
Float
+138
245
"_PowerUpTime"
0
FF8080
Float
+144
246
"_PowerUpAttackRate"
0
FF8080
Float
+148
247
"_PowerUpDamageRate"
0
FF8080
Float
+14C
263
"_Hacking"
1
0
1
+48
0
264
"_FlashRemainTime"
0
FF8080
Float
+18
266
"_FinishBlow"
1
0
1
+28
0
267
"_WaitTime"
0
FF8080
Float
+24
268
"_WaitEndDamage"
1
FF8080
4 Bytes
+18
269
"_AroundReactionRange"
0
FF8080
Float
+1C
270
"_DropRateInFinishBlowDead"
0
FF8080
Float
+20
272
"_FatalBreak"
1
0
1
+30
0
273
"_DecreaseValueInNormal"
0
FF8080
Float
+24
274
"_FatalBreakTime"
0
FF8080
Float
+18
275
"_DelayTimeOnFatalDamage"
0
FF8080
Float
+1C
276
"_AddDelayOnEnterOpen"
0
FF8080
Float
+20
278
"_HackingFatalDamageScaleInOpen"
0
FF8080
Float
+28
279
"_DropRateInFatalBreakDead"
0
FF8080
Float
+2C
301
"_AddHackingFataDamageArray"
1
0
1
+10
0
302
"[0]"
0
FF8080
Float
+20
303
"[1]"
0
FF8080
Float
+24
304
"[2]"
0
FF8080
Float
+28
305
"[3]"
0
FF8080
Float
+2C
306
"[4]"
0
FF8080
Float
+30
281
"_DeathBlow"
1
0
1
+38
0
282
"_DeathBlowTime"
0
FF8080
Float
+10
283
"_DeathBlow2Time"
0
FF8080
Float
+14
285
"_FriendHit"
1
0
1
+40
0
286
"_BaseDamageRate"
0
FF8080
Float
+10
287
"_BaseWinceRate"
0
FF8080
Float
+14
289
"_PowerHacking"
1
0
1
+58
0
290
"_ReactionRange"
0
FF8080
Float
+10
292
"_ClearReactionValue"
1
FF8080
4 Bytes
+18
293
"_HalfClearReactionValue"
1
FF8080
4 Bytes
+1C
294
"_OneOrMoreReactionValue"
1
FF8080
4 Bytes
+20
296
"_AroundClearReactionValue"
1
FF8080
4 Bytes
+28
297
"_AroundHalfClearReactionValue"
1
FF8080
4 Bytes
+2C
298
"_AroundOneOrMoreReactionValue"
1
FF8080
4 Bytes
+30
256
"_AttackPermitData"
1
0
1
+60
0
257
"_AttackPermitRangeMin"
0
FF8080
Float
+20
258
"_AttackPermitRangeMax"
0
FF8080
Float
+24
259
"_AttackPermitAngleL"
0
FF8080
Float
+28
260
"_AttackPermitAngleR"
0
FF8080
Float
+2C
261
"GrappleIntervalTime"
0
FF8080
Float
+30
121
"PRAGMATA / https://opencheattables.com / CE 7.6+"
006600
1
122
"YesNo"
0:No
1:Yes
1
137
"FAST_OVERDRIVE_PLUS_30"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='FAST_OVERDRIVE_PLUS_30', aob='?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 50 ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? 8D ?? 24 ?? ?? 89 ?? ?? 89 ?? E8 ?? ?? ?? ?? C4 ?? ?? 7E ?? ?? 8B ?? 50 ?? 8B ?? 18 ?? 85 ?? 0F 94 ?? 74 ?? C5 ?? 57 ?? EB ?? C5 ?? 10 ?? ?? ?? C5 ?? 6E ?? C5 ?? 70 ?? 50 C5 ?? 72 ?? 1F C5 ?? 72 ?? 1F C5 ?? DB ?? C5 ?? D6 ?? ?? ?? C5 ?? 11 ?? ?? ?? ?? 85 ?? 75', pos=3, aoblen=7, symbol='FAST_OVERDRIVE_PLUS_30_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('FAST_OVERDRIVE_PLUS_30_addr')
{$asm}
{
PRAGMATA.exe+2D5BC0 - 48 8B 90 80000000 - mov rdx,[rax+System.Text.Unicode.UnicodeRanges._u0750]
PRAGMATA.exe+2D5BC7 - 48 85 D2 - test rdx,rdx
PRAGMATA.exe+2D5BCA - 0F84 F5010000 - je PRAGMATA.exe+2D5DC5
===> here: PRAGMATA.exe+2D5BD0 - C5FA1071 10 - vmovss xmm6,[rcx+10]
PRAGMATA.exe+2D5BD5 - 48 89 F1 - mov rcx,rsi
PRAGMATA.exe+2D5BD8 - E8 D3D8EFFF - call PRAGMATA.exe+1D34B0
PRAGMATA.exe+2D5BDD - 48 8B 4E 50 - mov rcx,[rsi+50]
PRAGMATA.exe+2D5BE1 - 48 83 79 18 00 - cmp qword ptr [rcx+18],00
PRAGMATA.exe+2D5BE6 - 0F85 C2000000 - jne PRAGMATA.exe+2D5CAE
PRAGMATA.exe+2D5BEC - 48 85 C0 - test rax,rax
PRAGMATA.exe+2D5BEF - 0F84 D0010000 - je PRAGMATA.exe+2D5DC5
PRAGMATA.exe+2D5BF5 - C5F82E70 1C - vucomiss xmm6,[rax+1C]
PRAGMATA.exe+2D5BFA - 0F83 CB000000 - jae PRAGMATA.exe+2D5CCB
this RIP symbol here==> PRAGMATA.exe+2D5C00 - 48 8B 1D 01AE6C0B - mov rbx,[PRAGMATA.exe+B9A0A08]
PRAGMATA.exe+2D5C07 - 4C 8B 47 50 - mov r8,[rdi+50]
PRAGMATA.exe+2D5C0B - 4D 85 C0 - test r8,r8
PRAGMATA.exe+2D5C0E - 0F84 6D010000 - je PRAGMATA.exe+2D5D81
PRAGMATA.exe+2D5C14 - 4C 8D 74 24 40 - lea r14,[rsp+40]
PRAGMATA.exe+2D5C19 - 4C 89 F1 - mov rcx,r14
PRAGMATA.exe+2D5C1C - 48 89 F2 - mov rdx,rsi
PRAGMATA.exe+2D5C1F - E8 DCF5BD04 - call PRAGMATA.exe+4EB5200
PRAGMATA.exe+2D5C24 - C4C17A7E0E - vmovq xmm1,[r14]
PRAGMATA.exe+2D5C29 - 48 8B 46 50 - mov rax,[rsi+50]
PRAGMATA.exe+2D5C2D - 48 8B 40 18 - mov rax,[rax+18]
PRAGMATA.exe+2D5C7B - C5FA101D AD 27CE08 - vmovss xmm3,[PRAGMATA.exe+8FB8430] <(999.00)>
name='FAST_OVERDRIVE_PLUS_XX_Offsets', aob='C5 ?? 10 ?? ?? ?? ?? ?? ?? 89 ?? ?? 89 ?? E8 ?? ?? ?? ?? ?? 8B ?? 50 31 ?? ?? 83 ?? 18 00 ?? 0F 44 ?? 75', pos=4, aoblen=8, symbol='FAST_OVERDRIVE_PLUS_XX_Offsets_addr'
}