32
"Compact Mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
48
"正體中文 / English switch"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
--getMemoryRecordByDescription
getAddressList().getMemoryRecordByID(5).Description = '戰鬥：玩家資訊 (此功能必需開啟，否則其它戰門相關功能無法運作)'
getAddressList().getMemoryRecordByID(7).Description = '設定最小HP'
getAddressList().getMemoryRecordByID(21).Description = '主射擊武器+'
getAddressList().getMemoryRecordByID(33).Description = '自動充填主副射擊武器'
getAddressList().getMemoryRecordByID(18).Description = '彈藥數'
getAddressList().getMemoryRecordByID(20).Description = '充能值'
getAddressList().getMemoryRecordByID(14).Description = 'SPA可用倒數'
getAddressList().getMemoryRecordByID(30).Description = '基本資料 (使用：選單 → 道具)'
getAddressList().getMemoryRecordByID(41).Description = '取得僚機資料 (使用：選單 → 僚機情報'
getAddressList().getMemoryRecordByID(44).Description = '友好度'
getAddressList().getMemoryRecordByID(46).Description = '取得本次遊玩時間'
getAddressList().getMemoryRecordByID(58).Description = '武器+'
getAddressList().getMemoryRecordByID(50).Description = 'Sub+'
getAddressList().getMemoryRecordByID(52).Description = 'Sub1: 彈藥數'
getAddressList().getMemoryRecordByID(53).Description = 'Sub1: Flag'
getAddressList().getMemoryRecordByID(54).Description = 'Sub1: 充能值'
getAddressList().getMemoryRecordByID(55).Description = 'Sub2: 彈藥數'
getAddressList().getMemoryRecordByID(56).Description = 'Sub2: Flag'
getAddressList().getMemoryRecordByID(57).Description = 'Sub2: 充能值'
getAddressList().getMemoryRecordByID(64).Description = '設定素材 >= 70 (使用：選單 → 道具)'
getAddressList().getMemoryRecordByID(61).Description = '突破上限材料 => 75 (使用：選單 → MS設定 → 強化 → 突破上限)'
getAddressList().getMemoryRecordByID(62).Description = '最後道具數量'
getAddressList().getMemoryRecordByID(67).Description = '快速SPA'
getAddressList().getMemoryRecordByID(68).Description = '倍率'
getAddressList().getMemoryRecordByID(69).Description = 'Booster無限'
getAddressList().getMemoryRecordByID(70).Description = '非玩家倍率'
getAddressList().getMemoryRecordByID(71).Description = '快速技能條'
getAddressList().getMemoryRecordByID(73).Description = '混戰鑰匙無限 (至少持有一把; 使用：選單 → 任務)'
getAddressList().getMemoryRecordByID(88).Description = '敵方MS受到傷害倍率'
getAddressList().getMemoryRecordByID(89).Description = '倍率'
getAddressList().getMemoryRecordByID(81).Description = '玩家受到傷害減傷'
getAddressList().getMemoryRecordByID(83).Description = '減傷除數'
getLuaEngine().close()
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
getAddressList().getMemoryRecordByID(5).Description = 'Battle: Player (Must turn on for battle scripts)'
getAddressList().getMemoryRecordByID(7).Description = 'Set min. HP'
getAddressList().getMemoryRecordByID(21).Description = 'Main+'
getAddressList().getMemoryRecordByID(33).Description = 'Auto fill bullets'
getAddressList().getMemoryRecordByID(18).Description = '# of bullets'
getAddressList().getMemoryRecordByID(20).Description = 'Charge'
getAddressList().getMemoryRecordByID(14).Description = 'SPA Countdown'
getAddressList().getMemoryRecordByID(30).Description = 'Base data (Usage: Menu -> Items / display coin)'
getAddressList().getMemoryRecordByID(41).Description = 'Get Partner data (Usage: Menu -> Partner Info)'
getAddressList().getMemoryRecordByID(44).Description = 'Friendship'
getAddressList().getMemoryRecordByID(46).Description = 'Get session time'
getAddressList().getMemoryRecordByID(58).Description = 'Weapons+'
getAddressList().getMemoryRecordByID(50).Description = 'Sub+'
getAddressList().getMemoryRecordByID(52).Description = 'Sub1: # of bullets'
getAddressList().getMemoryRecordByID(53).Description = 'Sub1: Flag'
getAddressList().getMemoryRecordByID(54).Description = 'Sub1: Charge'
getAddressList().getMemoryRecordByID(55).Description = 'Sub2: # of bullets'
getAddressList().getMemoryRecordByID(56).Description = 'Sub2: Flag'
getAddressList().getMemoryRecordByID(57).Description = 'Sub2: Charge'
getAddressList().getMemoryRecordByID(64).Description = 'Set material >= 70 (Usage: Menu -> Items)'
getAddressList().getMemoryRecordByID(61).Description = 'Uncap item => 75 (Usage: Menu -> MS Settings -> Upgrade -> Uncap)'
getAddressList().getMemoryRecordByID(62).Description = 'Last item #'
getAddressList().getMemoryRecordByID(67).Description = 'Faster SPA'
getAddressList().getMemoryRecordByID(68).Description = 'Multiplier'
getAddressList().getMemoryRecordByID(69).Description = 'Inf. Booster'
getAddressList().getMemoryRecordByID(70).Description = 'Non-player multiplier'
getAddressList().getMemoryRecordByID(71).Description = 'Fast skill gauge'
getAddressList().getMemoryRecordByID(73).Description = 'Inf. Chaos mission key (Must >=1; Usage: Menu -> Mission)'
getAddressList().getMemoryRecordByID(88).Description = 'All damage multiplier to enemy MS'
getAddressList().getMemoryRecordByID(89).Description = 'Multiplier'
getAddressList().getMemoryRecordByID(81).Description = 'Player Damage Reduction'
getAddressList().getMemoryRecordByID(83).Description = 'Damage divide by'
getLuaEngine().close()
5
"Battle: Player (Must turn on for battle scripts)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_PLAYER_BATTLE_HP_1,SDGundamBA-Win64-Shipping.exe,44 0F 2E 83 B0 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_GET_PLAYER_BATTLE_HP_1)
label(code)
label(return)
label(i_player_base_addr)
label(player_min_hp_value)
label(i_main_mark_addr)
label(i_sub1_mark_addr)
label(i_sub2_mark_addr)
newmem:
mov [i_player_base_addr], rbx
push rax
push rcx
mov rax, [rbx+160]
lea rcx, [rax+30C]
mov [i_main_mark_addr], rcx
mov rax, [rax+394]
lea rcx, [rax+0]
mov [i_sub1_mark_addr], rcx
lea rcx, [rax+90]
mov [i_sub2_mark_addr], rcx
pop rcx
pop rax
vmovss xmm14, [rbx+000000B0]
vmovss xmm15, [player_min_hp_value]
ucomiss xmm14, xmm15
jae code
vmovss [rbx+000000B0], xmm15
code:
ucomiss xmm8,[rbx+000000B0]
jmp return
align 10 cc
i_player_base_addr:
dq 0
player_min_hp_value:
dd (float)1300
i_main_mark_addr:
dq 0
i_sub1_mark_addr:
dq 0
i_sub2_mark_addr:
dq 0
INJECT_GET_PLAYER_BATTLE_HP_1:
jmp newmem
nop 3
return:
registersymbol(player_min_hp_value)
registersymbol(INJECT_GET_PLAYER_BATTLE_HP_1)
registersymbol(i_player_base_addr)
registersymbol(i_main_mark_addr)
registersymbol(i_sub1_mark_addr)
registersymbol(i_sub2_mark_addr)
[DISABLE]
INJECT_GET_PLAYER_BATTLE_HP_1:
db 44 0F 2E 83 B0 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10E1DD6
SDGundamBA-Win64-Shipping.exe+10E1DAF: 0F 29 74 24 40 - movaps [rsp+40],xmm6
SDGundamBA-Win64-Shipping.exe+10E1DB4: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+10E1DB7: F3 0F 10 B3 60 01 00 00 - movss xmm6,[rbx+00000160]
SDGundamBA-Win64-Shipping.exe+10E1DBF: E8 CC 99 D7 FF - call SDGundamBA-Win64-Shipping.exe+E5B790
SDGundamBA-Win64-Shipping.exe+10E1DC4: 0F 2E F0 - ucomiss xmm6,xmm0
SDGundamBA-Win64-Shipping.exe+10E1DC7: 0F 28 74 24 40 - movaps xmm6,[rsp+40]
SDGundamBA-Win64-Shipping.exe+10E1DCC: 75 05 - jne SDGundamBA-Win64-Shipping.exe+10E1DD3
SDGundamBA-Win64-Shipping.exe+10E1DCE: 40 32 F6 - xor sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DD1: EB 03 - jmp SDGundamBA-Win64-Shipping.exe+10E1DD6
SDGundamBA-Win64-Shipping.exe+10E1DD3: 40 B6 01 - mov sil,01
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10E1DD6: 44 0F 2E 83 B0 00 00 00 - ucomiss xmm8,[rbx+000000B0]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10E1DDE: 75 03 - jne SDGundamBA-Win64-Shipping.exe+10E1DE3
SDGundamBA-Win64-Shipping.exe+10E1DE0: 40 32 F6 - xor sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DE3: 40 3A B7 58 03 00 00 - cmp sil,[rdi+00000358]
SDGundamBA-Win64-Shipping.exe+10E1DEA: 74 28 - je SDGundamBA-Win64-Shipping.exe+10E1E14
SDGundamBA-Win64-Shipping.exe+10E1DEC: 48 8B 07 - mov rax,[rdi]
SDGundamBA-Win64-Shipping.exe+10E1DEF: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+10E1DF2: 4C 8B 88 78 04 00 00 - mov r9,[rax+00000478]
SDGundamBA-Win64-Shipping.exe+10E1DF9: 40 84 F6 - test sil,sil
SDGundamBA-Win64-Shipping.exe+10E1DFC: 74 07 - je SDGundamBA-Win64-Shipping.exe+10E1E05
SDGundamBA-Win64-Shipping.exe+10E1DFE: 45 33 C0 - xor r8d,r8d
}
7
"Set min. HP"
0
FF8080
Float
player_min_hp_value
88
"All damage multiplier to enemy MS"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-28
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DAMAGE_CTRL,SDGundamBA-Win64-Shipping.exe,F3 0F 11 87 B0 00 00 00 48) // should be unique
alloc(newmem,$1000,INJECT_DAMAGE_CTRL)
label(code)
label(return)
label(vf_to_player_damage_multi)
label(vf_to_enemy_damage_multi)
newmem:
cmp rdi, [i_player_base_addr]
jne check_enemy
jmp code
check_enemy:
push rbx
mov ebx, [rdi+000000BC]
cmp ebx, 1
jne ene_endp
mov ebx, [rdi+000000B8]
cmp ebx, 0
je chk2
mov ebx, [rdi+000000C0]
cmp ebx, 1
jne ene_endp
jmp procs
chk2:
cmp ebx, 0
jne ene_endp
//mov ebx, [rcx+000000C0]
//cmp ebx, 1
//jne ene_endp
procs:
vmovss xmm14, [rdi+000000B0]
vcomiss xmm0, xmm14
jae ene_endp
vsubss xmm13, xmm14, xmm0
vmovss xmm15, [vf_to_enemy_damage_multi]
vmulss xmm13, xmm13, xmm15
//vsubss xmm0, xmm14, xmm13
vsubss xmm12, xmm14, xmm13
vxorps xmm15, xmm15, xmm15
vcomiss xmm12, xmm15
jbe set_zero
movaps xmm0, xmm12
jmp ene_endp
set_zero:
vxorps xmm0, xmm0, xmm0
ene_endp:
pop rbx
code:
movss [rdi+000000B0],xmm0
jmp return
align 10 cc
vf_to_player_damage_multi:
dd (float)0.5
vf_to_enemy_damage_multi:
dd (float)4
vf_0:
dd 0
INJECT_DAMAGE_CTRL:
jmp newmem
nop 3
return:
registersymbol(INJECT_DAMAGE_CTRL)
registersymbol(vf_to_player_damage_multi)
registersymbol(vf_to_enemy_damage_multi)
[DISABLE]
INJECT_DAMAGE_CTRL:
db F3 0F 11 87 B0 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E57526
SDGundamBA-Win64-Shipping.exe+E574FE: 7F 1F - jg SDGundamBA-Win64-Shipping.exe+E5751F
SDGundamBA-Win64-Shipping.exe+E57500: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E57503: 0F 2F 87 14 01 00 00 - comiss xmm0,[rdi+00000114]
SDGundamBA-Win64-Shipping.exe+E5750A: 72 09 - jb SDGundamBA-Win64-Shipping.exe+E57515
SDGundamBA-Win64-Shipping.exe+E5750C: 80 BF 18 01 00 00 00 - cmp byte ptr [rdi+00000118],00
SDGundamBA-Win64-Shipping.exe+E57513: 74 0A - je SDGundamBA-Win64-Shipping.exe+E5751F
SDGundamBA-Win64-Shipping.exe+E57515: F3 0F 10 05 E7 14 DF 02 - movss xmm0,[SDGundamBA-Win64-Shipping.exe+3C48A04]
SDGundamBA-Win64-Shipping.exe+E5751D: EB 07 - jmp SDGundamBA-Win64-Shipping.exe+E57526
SDGundamBA-Win64-Shipping.exe+E5751F: 66 0F 6E C3 - movd xmm0,ebx
SDGundamBA-Win64-Shipping.exe+E57523: 0F 5B C0 - cvtdq2ps xmm0,xmm0
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E57526: F3 0F 11 87 B0 00 00 00 - movss [rdi+000000B0],xmm0
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E5752E: 48 8B 5C 24 40 - mov rbx,[rsp+40]
SDGundamBA-Win64-Shipping.exe+E57533: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
SDGundamBA-Win64-Shipping.exe+E57538: 48 83 C4 30 - add rsp,30
SDGundamBA-Win64-Shipping.exe+E5753C: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+E5753D: C3 - ret
SDGundamBA-Win64-Shipping.exe+E5753E: CC - int 3
SDGundamBA-Win64-Shipping.exe+E5753F: CC - int 3
SDGundamBA-Win64-Shipping.exe+E57540: 48 89 5C 24 08 - mov [rsp+08],rbx
SDGundamBA-Win64-Shipping.exe+E57545: 57 - push rdi
SDGundamBA-Win64-Shipping.exe+E57546: 48 83 EC 30 - sub rsp,30
}
89
"Multiplier"
0
Float
vf_to_enemy_damage_multi
81
"Player Damage Reduction"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-12-04
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DAMAGE_REDUCTION,SDGundamBA-Win64-Shipping.exe,F3 0F 5C F0 F3 0F 2D C6 D1 F8 F7 D8 66) // should be unique
alloc(newmem,$1000,INJECT_DAMAGE_REDUCTION)
label(code)
label(return)
label(vf_4)
label(vf_player_damage_div)
newmem:
cmp rdi, [i_player_base_addr]
jne code
vmovss xmm15, [vf_player_damage_div]
vdivss xmm0, xmm0, xmm15
code:
subss xmm6,xmm0
cvtss2si eax,xmm6
jmp return
align 10 cc
vf_4:
dd (float)4
vf_player_damage_div:
dd (float)2
INJECT_DAMAGE_REDUCTION:
jmp newmem
nop 3
return:
registersymbol(INJECT_DAMAGE_REDUCTION)
registersymbol(vf_player_damage_div)
[DISABLE]
INJECT_DAMAGE_REDUCTION:
db F3 0F 5C F0 F3 0F 2D C6
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E596DA
SDGundamBA-Win64-Shipping.exe+E596B3: D1 F8 - sar eax,1
SDGundamBA-Win64-Shipping.exe+E596B5: F7 D8 - neg eax
SDGundamBA-Win64-Shipping.exe+E596B7: 85 C0 - test eax,eax
SDGundamBA-Win64-Shipping.exe+E596B9: 7F 31 - jg SDGundamBA-Win64-Shipping.exe+E596EC
SDGundamBA-Win64-Shipping.exe+E596BB: 66 0F 6E 8F B4 00 00 00 - movd xmm1,[rdi+000000B4]
SDGundamBA-Win64-Shipping.exe+E596C3: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+E596C6: 48 8B 07 - mov rax,[rdi]
SDGundamBA-Win64-Shipping.exe+E596C9: 0F 5B C9 - cvtdq2ps xmm1,xmm1
SDGundamBA-Win64-Shipping.exe+E596CC: FF 90 20 04 00 00 - call qword ptr [rax+00000420]
SDGundamBA-Win64-Shipping.exe+E596D2: F3 0F 59 05 7A 08 E0 02 - mulss xmm0,[SDGundamBA-Win64-Shipping.exe+3C59F54]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E596DA: F3 0F 5C F0 - subss xmm6,xmm0
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E596DE: F3 0F 2D C6 - cvtss2si eax,xmm6
SDGundamBA-Win64-Shipping.exe+E596E2: D1 F8 - sar eax,1
SDGundamBA-Win64-Shipping.exe+E596E4: F7 D8 - neg eax
SDGundamBA-Win64-Shipping.exe+E596E6: 66 0F 6E C0 - movd xmm0,eax
SDGundamBA-Win64-Shipping.exe+E596EA: EB 27 - jmp SDGundamBA-Win64-Shipping.exe+E59713
SDGundamBA-Win64-Shipping.exe+E596EC: 85 DB - test ebx,ebx
SDGundamBA-Win64-Shipping.exe+E596EE: 7F 1F - jg SDGundamBA-Win64-Shipping.exe+E5970F
SDGundamBA-Win64-Shipping.exe+E596F0: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E596F3: 0F 2F 87 14 01 00 00 - comiss xmm0,[rdi+00000114]
SDGundamBA-Win64-Shipping.exe+E596FA: 72 09 - jb SDGundamBA-Win64-Shipping.exe+E59705
}
83
"Damage divide by"
0
Float
vf_player_damage_div
71
"Fast skill gauge"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-12-04
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SKILL_GAUGE,SDGundamBA-Win64-Shipping.exe,F3 0F 11 B3 74 01 00 00) // should be unique
alloc(newmem,$1000,INJECT_SKILL_GAUGE)
label(code)
label(return)
newmem:
cmp rbx, [i_player_base_addr]
jne code
vmovss xmm15, [vf_75]
vucomiss xmm6, xmm15
jae code
vmovss xmm6, [vf_75]
code:
movss [rbx+00000174],xmm6
jmp return
align 10 cc
vf_75:
dd (float)100
INJECT_SKILL_GAUGE:
jmp newmem
nop 3
return:
registersymbol(INJECT_SKILL_GAUGE)
[DISABLE]
INJECT_SKILL_GAUGE:
db F3 0F 11 B3 74 01 00 00
unregistersymbol(INJECT_SKILL_GAUGE)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E54D6A
SDGundamBA-Win64-Shipping.exe+E54D42: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E54D45: 0F 2F F0 - comiss xmm6,xmm0
SDGundamBA-Win64-Shipping.exe+E54D48: 77 10 - ja SDGundamBA-Win64-Shipping.exe+E54D5A
SDGundamBA-Win64-Shipping.exe+E54D4A: 48 8B 5C 24 40 - mov rbx,[rsp+40]
SDGundamBA-Win64-Shipping.exe+E54D4F: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
SDGundamBA-Win64-Shipping.exe+E54D54: 48 83 C4 30 - add rsp,30
SDGundamBA-Win64-Shipping.exe+E54D58: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+E54D59: C3 - ret
SDGundamBA-Win64-Shipping.exe+E54D5A: F3 0F 58 B3 74 01 00 00 - addss xmm6,[rbx+00000174]
SDGundamBA-Win64-Shipping.exe+E54D62: F3 0F 5D B3 78 01 00 00 - minss xmm6,[rbx+00000178]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E54D6A: F3 0F 11 B3 74 01 00 00 - movss [rbx+00000174],xmm6
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E54D72: 48 8B 5C 24 40 - mov rbx,[rsp+40]
SDGundamBA-Win64-Shipping.exe+E54D77: B0 01 - mov al,01
SDGundamBA-Win64-Shipping.exe+E54D79: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
SDGundamBA-Win64-Shipping.exe+E54D7E: 48 83 C4 30 - add rsp,30
SDGundamBA-Win64-Shipping.exe+E54D82: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+E54D83: C3 - ret
SDGundamBA-Win64-Shipping.exe+E54D84: CC - int 3
SDGundamBA-Win64-Shipping.exe+E54D85: CC - int 3
SDGundamBA-Win64-Shipping.exe+E54D86: CC - int 3
SDGundamBA-Win64-Shipping.exe+E54D87: CC - int 3
}
69
"Inf. Booster"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-12-04
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_INF_BOOSTER,SDGundamBA-Win64-Shipping.exe,F3 0F 11 8B 68 01 00 00 73) // should be unique
alloc(newmem,$1000,INJECT_INF_BOOSTER)
label(code)
label(return)
newmem:
cmp rbx, [i_player_base_addr]
jne code
vmovss xmm15, [vf_80]
vucomiss xmm1, xmm15
jae code
vmovss xmm1, [vf_80]
code:
movss [rbx+00000168],xmm1
jmp return
align 10 cc
vf_80:
dd (float)120
INJECT_INF_BOOSTER:
jmp newmem
nop 3
return:
registersymbol(INJECT_INF_BOOSTER)
[DISABLE]
INJECT_INF_BOOSTER:
db F3 0F 11 8B 68 01 00 00
unregistersymbol(INJECT_INF_BOOSTER)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E756DC
SDGundamBA-Win64-Shipping.exe+E756B2: E8 09 03 17 00 - call SDGundamBA-Win64-Shipping.exe+FE59C0
SDGundamBA-Win64-Shipping.exe+E756B7: 84 C0 - test al,al
SDGundamBA-Win64-Shipping.exe+E756B9: 0F 85 98 00 00 00 - jne SDGundamBA-Win64-Shipping.exe+E75757
SDGundamBA-Win64-Shipping.exe+E756BF: 0F 29 74 24 30 - movaps [rsp+30],xmm6
SDGundamBA-Win64-Shipping.exe+E756C4: 0F 57 C0 - xorps xmm0,xmm0
SDGundamBA-Win64-Shipping.exe+E756C7: F3 0F 10 B3 68 01 00 00 - movss xmm6,[rbx+00000168]
SDGundamBA-Win64-Shipping.exe+E756CF: 40 B7 01 - mov dil,01
SDGundamBA-Win64-Shipping.exe+E756D2: 0F 28 CE - movaps xmm1,xmm6
SDGundamBA-Win64-Shipping.exe+E756D5: F3 0F 5C CF - subss xmm1,xmm7
SDGundamBA-Win64-Shipping.exe+E756D9: 0F 2F C8 - comiss xmm1,xmm0
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E756DC: F3 0F 11 8B 68 01 00 00 - movss [rbx+00000168],xmm1
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E756E4: 73 13 - jae SDGundamBA-Win64-Shipping.exe+E756F9
SDGundamBA-Win64-Shipping.exe+E756E6: F3 0F 5F 0D EE 45 E0 02 - maxss xmm1,[SDGundamBA-Win64-Shipping.exe+3C79CDC]
SDGundamBA-Win64-Shipping.exe+E756EE: 40 32 FF - xor dil,dil
SDGundamBA-Win64-Shipping.exe+E756F1: F3 0F 11 8B 68 01 00 00 - movss [rbx+00000168],xmm1
SDGundamBA-Win64-Shipping.exe+E756F9: 83 BB F0 03 00 00 00 - cmp dword ptr [rbx+000003F0],00
SDGundamBA-Win64-Shipping.exe+E75700: 74 1A - je SDGundamBA-Win64-Shipping.exe+E7571C
SDGundamBA-Win64-Shipping.exe+E75702: 48 8B 8B E8 03 00 00 - mov rcx,[rbx+000003E8]
SDGundamBA-Win64-Shipping.exe+E75709: 48 85 C9 - test rcx,rcx
SDGundamBA-Win64-Shipping.exe+E7570C: 74 0E - je SDGundamBA-Win64-Shipping.exe+E7571C
SDGundamBA-Win64-Shipping.exe+E7570E: 48 8B 01 - mov rax,[rcx]
}
67
"Faster SPA"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-12-04
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FASTER_SPA,SDGundamBA-Win64-Shipping.exe,F3 41 0F 5C C3 F3 0F 5F) // should be unique
alloc(newmem,$1000,INJECT_FASTER_SPA)
label(code)
label(return)
label(vf_spa_charge_factor)
label(vf_non_player_charge_factor)
newmem:
cmp rbx, [i_player_base_addr]
jne npc_charge
vmovss xmm15, [vf_spa_charge_factor]
jmp endp_pre
npc_charge:
vmovss xmm15, [vf_non_player_charge_factor]
endp_pre:
vmulss xmm11, xmm11, xmm15
code:
subss xmm0,xmm11
jmp return
align 10 cc
vf_spa_charge_factor:
dd (float)15.987654401
vf_non_player_charge_factor:
dd (float)4.5
INJECT_FASTER_SPA:
jmp newmem
return:
registersymbol(INJECT_FASTER_SPA)
registersymbol(vf_spa_charge_factor)
registersymbol(vf_non_player_charge_factor)
[DISABLE]
INJECT_FASTER_SPA:
db F3 41 0F 5C C3
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+E71AB8
SDGundamBA-Win64-Shipping.exe+E71A8C: 48 63 40 38 - movsxd rax,dword ptr [rax+38]
SDGundamBA-Win64-Shipping.exe+E71A90: 3B 42 38 - cmp eax,[rdx+38]
SDGundamBA-Win64-Shipping.exe+E71A93: 7F 16 - jg SDGundamBA-Win64-Shipping.exe+E71AAB
SDGundamBA-Win64-Shipping.exe+E71A95: 48 8B C8 - mov rcx,rax
SDGundamBA-Win64-Shipping.exe+E71A98: 48 8B 42 30 - mov rax,[rdx+30]
SDGundamBA-Win64-Shipping.exe+E71A9C: 4C 39 04 C8 - cmp [rax+rcx*8],r8
SDGundamBA-Win64-Shipping.exe+E71AA0: 75 09 - jne SDGundamBA-Win64-Shipping.exe+E71AAB
SDGundamBA-Win64-Shipping.exe+E71AA2: F3 44 0F 10 9F F8 18 00 00 - movss xmm11,[rdi+000018F8]
SDGundamBA-Win64-Shipping.exe+E71AAB: F3 0F 10 83 7C 01 00 00 - movss xmm0,[rbx+0000017C]
SDGundamBA-Win64-Shipping.exe+E71AB3: F3 45 0F 59 D9 - mulss xmm11,xmm9
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+E71AB8: F3 41 0F 5C C3 - subss xmm0,xmm11
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+E71ABD: F3 0F 5F C6 - maxss xmm0,xmm6
SDGundamBA-Win64-Shipping.exe+E71AC1: F3 0F 11 83 7C 01 00 00 - movss [rbx+0000017C],xmm0
SDGundamBA-Win64-Shipping.exe+E71AC9: 44 0F 28 5C 24 50 - movaps xmm11,[rsp+50]
SDGundamBA-Win64-Shipping.exe+E71ACF: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+E71AD2: E8 89 30 17 00 - call SDGundamBA-Win64-Shipping.exe+FE4B60
SDGundamBA-Win64-Shipping.exe+E71AD7: 84 C0 - test al,al
SDGundamBA-Win64-Shipping.exe+E71AD9: 74 10 - je SDGundamBA-Win64-Shipping.exe+E71AEB
SDGundamBA-Win64-Shipping.exe+E71ADB: 48 8B 8B A0 00 00 00 - mov rcx,[rbx+000000A0]
SDGundamBA-Win64-Shipping.exe+E71AE2: E8 A9 3C 17 00 - call SDGundamBA-Win64-Shipping.exe+FE5790
SDGundamBA-Win64-Shipping.exe+E71AE7: 84 C0 - test al,al
}
68
"Multiplier"
0
Float
vf_spa_charge_factor
70
"Non-player multiplier"
0
Float
vf_non_player_charge_factor
33
"Auto fill bullets"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_AUTO_FILL_WEAPON,SDGundamBA-Win64-Shipping.exe,45 89 51 78 41 3B C8) // should be unique
alloc(newmem,$1000,INJECT_AUTO_FILL_WEAPON)
label(code)
label(return)
newmem:
push rax
cmp r9, [i_main_mark_addr]
je inf_bullet
cmp r9, [i_sub1_mark_addr]
je inf_bullet
cmp r9, [i_sub2_mark_addr]
je inf_bullet
jmp endp
inf_bullet:
mov r10d, [r9+48]
endp:
pop rax
code:
mov [r9+78],r10d
cmp ecx,r8d
jmp return
INJECT_AUTO_FILL_WEAPON:
jmp newmem
nop 2
return:
registersymbol(INJECT_AUTO_FILL_WEAPON)
[DISABLE]
INJECT_AUTO_FILL_WEAPON:
db 45 89 51 78 41 3B C8
unregistersymbol(INJECT_AUTO_FILL_WEAPON)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1208C26
SDGundamBA-Win64-Shipping.exe+1208C0C: 45 85 C0 - test r8d,r8d
SDGundamBA-Win64-Shipping.exe+1208C0F: 79 03 - jns SDGundamBA-Win64-Shipping.exe+1208C14
SDGundamBA-Win64-Shipping.exe+1208C11: 32 C0 - xor al,al
SDGundamBA-Win64-Shipping.exe+1208C13: C3 - ret
SDGundamBA-Win64-Shipping.exe+1208C14: 8B 49 78 - mov ecx,[rcx+78]
SDGundamBA-Win64-Shipping.exe+1208C17: 41 3B C8 - cmp ecx,r8d
SDGundamBA-Win64-Shipping.exe+1208C1A: 8B C1 - mov eax,ecx
SDGundamBA-Win64-Shipping.exe+1208C1C: 0F 9D C2 - setge dl
SDGundamBA-Win64-Shipping.exe+1208C1F: 41 2B C0 - sub eax,r8d
SDGundamBA-Win64-Shipping.exe+1208C22: 44 0F 49 D0 - cmovns r10d,eax
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1208C26: 45 89 51 78 - mov [r9+78],r10d
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+1208C2A: 41 3B C8 - cmp ecx,r8d
SDGundamBA-Win64-Shipping.exe+1208C2D: 7C 3C - jl SDGundamBA-Win64-Shipping.exe+1208C6B
SDGundamBA-Win64-Shipping.exe+1208C2F: 45 85 C0 - test r8d,r8d
SDGundamBA-Win64-Shipping.exe+1208C32: 7E 37 - jle SDGundamBA-Win64-Shipping.exe+1208C6B
SDGundamBA-Win64-Shipping.exe+1208C34: 66 41 0F 6E 41 48 - movd xmm0,[r9+48]
SDGundamBA-Win64-Shipping.exe+1208C3A: 0F 57 DB - xorps xmm3,xmm3
SDGundamBA-Win64-Shipping.exe+1208C3D: F3 41 0F 10 51 54 - movss xmm2,[r9+54]
SDGundamBA-Win64-Shipping.exe+1208C43: 66 41 0F 6E CA - movd xmm1,r10d
SDGundamBA-Win64-Shipping.exe+1208C48: 0F 5B C9 - cvtdq2ps xmm1,xmm1
SDGundamBA-Win64-Shipping.exe+1208C4B: 0F 5B C0 - cvtdq2ps xmm0,xmm0
}
58
"Weapons+"
1
21
"Main+"
1
18
"# of bullets"
0
4 Bytes
i_player_base_addr
37C
160
19
"Flag"
0
4 Bytes
i_player_base_addr
380
160
20
"Charge"
0
Float
i_player_base_addr
384
160
50
"Sub+"
1
52
"Sub1: # of bullets"
0
4 Bytes
i_player_base_addr
78
394
160
53
"Sub1: Flag"
0
4 Bytes
i_player_base_addr
7C
394
160
54
"Sub1: Charge"
0
Float
i_player_base_addr
80
394
160
55
"Sub2: # of bullets"
0
4 Bytes
i_player_base_addr
108
394
160
56
"Sub2: Flag"
0
4 Bytes
i_player_base_addr
10C
394
160
57
"Sub2: Charge"
0
Float
i_player_base_addr
110
394
160
6
"HP"
0
Float
i_player_base_addr
B0
82
"????"
0
4 Bytes
i_player_base_addr
B4
59
"??"
0
Float
i_player_base_addr
154
9
"Booster"
0
Float
i_player_base_addr
168
10
"??"
0
Float
i_player_base_addr
16C
11
"??"
0
Float
i_player_base_addr
170
12
"Skill gauge"
0
Float
i_player_base_addr
174
13
"??"
0
Float
i_player_base_addr
178
14
"SPA Countdown"
0
Float
i_player_base_addr
17C
15
"??"
0
Float
i_player_base_addr
180
16
"??"
0
Float
i_player_base_addr
184
17
"??"
0
Float
i_player_base_addr
188
30
"Base data (Usage: Menu -> Items / display coin)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_BASE_DATA2,SDGundamBA-Win64-Shipping.exe,8B 90 E0 01 00 00 48 8B CB 48 83 C4 20 5B E9 6A) // should be unique
alloc(newmem,$1000,INJECT_GET_BASE_DATA2)
label(code)
label(return)
label(i_base_data_addr)
newmem:
mov [i_base_data_addr], rax
code:
mov edx,[rax+000001E0]
jmp return
align 10 cc
i_base_data_addr:
dq 0
INJECT_GET_BASE_DATA2:
jmp newmem
nop
return:
registersymbol(i_base_data_addr)
registersymbol(INJECT_GET_BASE_DATA2)
[DISABLE]
INJECT_GET_BASE_DATA2:
db 8B 90 E0 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10725E3
SDGundamBA-Win64-Shipping.exe+10725CC: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CD: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CE: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725CF: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725D0: 40 53 - push rbx
SDGundamBA-Win64-Shipping.exe+10725D2: 48 83 EC 20 - sub rsp,20
SDGundamBA-Win64-Shipping.exe+10725D6: 48 8B D9 - mov rbx,rcx
SDGundamBA-Win64-Shipping.exe+10725D9: E8 42 A8 ED FF - call SDGundamBA-Win64-Shipping.exe+F4CE20
SDGundamBA-Win64-Shipping.exe+10725DE: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+10725E1: 74 13 - je SDGundamBA-Win64-Shipping.exe+10725F6
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10725E3: 8B 90 E0 01 00 00 - mov edx,[rax+000001E0]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10725E9: 48 8B CB - mov rcx,rbx
SDGundamBA-Win64-Shipping.exe+10725EC: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+10725F0: 5B - pop rbx
SDGundamBA-Win64-Shipping.exe+10725F1: E9 6A FF FF FF - jmp SDGundamBA-Win64-Shipping.exe+1072560
SDGundamBA-Win64-Shipping.exe+10725F6: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+10725FA: 5B - pop rbx
SDGundamBA-Win64-Shipping.exe+10725FB: C3 - ret
SDGundamBA-Win64-Shipping.exe+10725FC: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725FD: CC - int 3
SDGundamBA-Win64-Shipping.exe+10725FE: CC - int 3
}
28
"Play time"
0
Double
i_base_data_addr
28
40
"User name"
0
String
32
1
0
1
i_base_data_addr
0
30
38
"Level"
0
4 Bytes
i_base_data_addr
5C
39
"EXP"
0
4 Bytes
i_base_data_addr
60
31
"Capital"
0
4 Bytes
i_base_data_addr
1E0
41
"Get Partner data (Usage: Menu -> Partner Info)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-25
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_WINGMAN_DATA,SDGundamBA-Win64-Shipping.exe,8B 47 20 89 45 BB) // should be unique
alloc(newmem,$1000,INJECT_GET_WINGMAN_DATA)
label(code)
label(return)
label(i_base_wingman_addr)
newmem:
mov [i_base_wingman_addr], rdi
code:
mov eax,[rdi+20]
mov [rbp-45],eax
jmp return
align 10 cc
i_base_wingman_addr:
dq 0
INJECT_GET_WINGMAN_DATA:
jmp newmem
nop
return:
registersymbol(INJECT_GET_WINGMAN_DATA)
registersymbol(i_base_wingman_addr)
[DISABLE]
INJECT_GET_WINGMAN_DATA:
db 8B 47 20 89 45 BB
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1192454
SDGundamBA-Win64-Shipping.exe+1192432: 89 75 DF - mov [rbp-21],esi
SDGundamBA-Win64-Shipping.exe+1192435: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+1192438: E8 F3 29 DF FF - call SDGundamBA-Win64-Shipping.exe+F84E30
SDGundamBA-Win64-Shipping.exe+119243D: 8D 56 01 - lea edx,[rsi+01]
SDGundamBA-Win64-Shipping.exe+1192440: 4D 8B C7 - mov r8,r15
SDGundamBA-Win64-Shipping.exe+1192443: 48 8B CF - mov rcx,rdi
SDGundamBA-Win64-Shipping.exe+1192446: 44 8B E0 - mov r12d,eax
SDGundamBA-Win64-Shipping.exe+1192449: E8 E2 29 DF FF - call SDGundamBA-Win64-Shipping.exe+F84E30
SDGundamBA-Win64-Shipping.exe+119244E: 89 45 B7 - mov [rbp-49],eax
SDGundamBA-Win64-Shipping.exe+1192451: 48 8B CB - mov rcx,rbx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1192454: 8B 47 20 - mov eax,[rdi+20]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+1192457: 89 45 BB - mov [rbp-45],eax
SDGundamBA-Win64-Shipping.exe+119245A: E8 31 40 03 00 - call SDGundamBA-Win64-Shipping.exe+11C6490
SDGundamBA-Win64-Shipping.exe+119245F: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+1192462: 74 09 - je SDGundamBA-Win64-Shipping.exe+119246D
SDGundamBA-Win64-Shipping.exe+1192464: 48 8B B8 98 00 00 00 - mov rdi,[rax+00000098]
SDGundamBA-Win64-Shipping.exe+119246B: EB 04 - jmp SDGundamBA-Win64-Shipping.exe+1192471
SDGundamBA-Win64-Shipping.exe+119246D: 48 8B 7D CF - mov rdi,[rbp-31]
SDGundamBA-Win64-Shipping.exe+1192471: 8B 4D C7 - mov ecx,[rbp-39]
SDGundamBA-Win64-Shipping.exe+1192474: 33 D2 - xor edx,edx
SDGundamBA-Win64-Shipping.exe+1192476: E8 A5 06 2C 00 - call SDGundamBA-Win64-Shipping.exe+1452B20
}
43
"LV"
0
4 Bytes
i_base_wingman_addr
1C
42
"EXP"
0
4 Bytes
i_base_wingman_addr
20
44
"Friendship"
0
4 Bytes
i_base_wingman_addr
78
64
"Set material >= 70 (Usage: Menu -> Items)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SELL_MATERIAL_SET_COUNT,SDGundamBA-Win64-Shipping.exe,45 8B 46 08 48 8D 4D 97) // should be unique
alloc(newmem,$1000,INJECT_SELL_MATERIAL_SET_COUNT)
label(code)
label(return)
newmem:
code:
// original code
mov r8d,[r14+08]
// inject code start
cmp r8d, #70
jae endp
mov r8d, #70
mov [r14+08], r8d
endp:
// inject code end
// original code
lea rcx,[rbp-69]
//
jmp return
INJECT_SELL_MATERIAL_SET_COUNT:
jmp newmem
nop 3
return:
registersymbol(INJECT_SELL_MATERIAL_SET_COUNT)
[DISABLE]
INJECT_SELL_MATERIAL_SET_COUNT:
db 45 8B 46 08 48 8D 4D 97
unregistersymbol(INJECT_SELL_MATERIAL_SET_COUNT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+1185C71
SDGundamBA-Win64-Shipping.exe+1185C53: 48 85 C9 - test rcx,rcx
SDGundamBA-Win64-Shipping.exe+1185C56: 48 8D 41 08 - lea rax,[rcx+08]
SDGundamBA-Win64-Shipping.exe+1185C5A: 49 0F 44 C7 - cmove rax,r15
SDGundamBA-Win64-Shipping.exe+1185C5E: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+1185C61: 74 51 - je SDGundamBA-Win64-Shipping.exe+1185CB4
SDGundamBA-Win64-Shipping.exe+1185C63: 48 8B 10 - mov rdx,[rax]
SDGundamBA-Win64-Shipping.exe+1185C66: 48 85 D2 - test rdx,rdx
SDGundamBA-Win64-Shipping.exe+1185C69: 74 49 - je SDGundamBA-Win64-Shipping.exe+1185CB4
SDGundamBA-Win64-Shipping.exe+1185C6B: 44 38 7A 40 - cmp [rdx+40],r15l
SDGundamBA-Win64-Shipping.exe+1185C6F: 74 43 - je SDGundamBA-Win64-Shipping.exe+1185CB4
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+1185C71: 45 8B 46 08 - mov r8d,[r14+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+1185C75: 48 8D 4D 97 - lea rcx,[rbp-69]
SDGundamBA-Win64-Shipping.exe+1185C79: E8 D2 C8 EF FF - call SDGundamBA-Win64-Shipping.exe+1082550
SDGundamBA-Win64-Shipping.exe+1185C7E: 48 63 5E 08 - movsxd rbx,dword ptr [rsi+08]
SDGundamBA-Win64-Shipping.exe+1185C82: 48 8B F8 - mov rdi,rax
SDGundamBA-Win64-Shipping.exe+1185C85: 8D 4B 01 - lea ecx,[rbx+01]
SDGundamBA-Win64-Shipping.exe+1185C88: 89 4E 08 - mov [rsi+08],ecx
SDGundamBA-Win64-Shipping.exe+1185C8B: 3B 4E 0C - cmp ecx,[rsi+0C]
SDGundamBA-Win64-Shipping.exe+1185C8E: 7E 0A - jle SDGundamBA-Win64-Shipping.exe+1185C9A
SDGundamBA-Win64-Shipping.exe+1185C90: 8B D3 - mov edx,ebx
SDGundamBA-Win64-Shipping.exe+1185C92: 48 8B CE - mov rcx,rsi
}
61
"Uncap item => 75 (Usage: Menu -> MS Settings -> Upgrade -> Uncap)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MS_LIMIT_BREAK,SDGundamBA-Win64-Shipping.exe,74 9F 44 8B 08) // should be unique
alloc(newmem,$1000,INJECT_MS_LIMIT_BREAK)
label(code)
label(return)
label(i_last_lb_item_addr)
newmem:
code:
// origin code
reassemble(INJECT_MS_LIMIT_BREAK)
//je SDGundamBA-Win64-Shipping.exe+10AB6F7
//
mov [i_last_lb_item_addr], rax
mov r9d, [rax]
cmp r9d, #75
jae endp
mov r9d, #75
mov [rax], r9d
jmp endp_chg
endp:
// origin code
mov r9d,[rax]
//
endp_chg:
jmp return
align 10 cc
i_last_lb_item_addr:
dq 0
INJECT_MS_LIMIT_BREAK:
jmp newmem
return:
registersymbol(INJECT_MS_LIMIT_BREAK)
registersymbol(i_last_lb_item_addr)
[DISABLE]
INJECT_MS_LIMIT_BREAK:
db 74 9F 44 8B 08
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+10AB756
SDGundamBA-Win64-Shipping.exe+10AB73C: 41 5C - pop r12
SDGundamBA-Win64-Shipping.exe+10AB73E: 5E - pop rsi
SDGundamBA-Win64-Shipping.exe+10AB73F: C3 - ret
SDGundamBA-Win64-Shipping.exe+10AB740: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+10AB743: 74 B2 - je SDGundamBA-Win64-Shipping.exe+10AB6F7
SDGundamBA-Win64-Shipping.exe+10AB745: 48 8D 04 89 - lea rax,[rcx+rcx*4]
SDGundamBA-Win64-Shipping.exe+10AB749: 49 8D 04 80 - lea rax,[r8+rax*4]
SDGundamBA-Win64-Shipping.exe+10AB74D: 48 85 C0 - test rax,rax
SDGundamBA-Win64-Shipping.exe+10AB750: 74 A5 - je SDGundamBA-Win64-Shipping.exe+10AB6F7
SDGundamBA-Win64-Shipping.exe+10AB752: 48 83 C0 08 - add rax,08
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+10AB756: 74 9F - je SDGundamBA-Win64-Shipping.exe+10AB6F7
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+10AB758: 44 8B 08 - mov r9d,[rax]
SDGundamBA-Win64-Shipping.exe+10AB75B: EB 9D - jmp SDGundamBA-Win64-Shipping.exe+10AB6FA
SDGundamBA-Win64-Shipping.exe+10AB75D: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB75E: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB75F: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB760: E9 4B 93 FC FF - jmp SDGundamBA-Win64-Shipping.exe+1074AB0
SDGundamBA-Win64-Shipping.exe+10AB765: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB766: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB767: CC - int 3
SDGundamBA-Win64-Shipping.exe+10AB768: CC - int 3
}
62
"Last item #"
0
4 Bytes
i_last_lb_item_addr
0
73
"Inf. Chaos mission key (Must >=1; Usage: Menu -> Mission)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIN_CHAOS_MISSION_KEYS,SDGundamBA-Win64-Shipping.exe,8B 41 08 41 89 45 00) // should be unique
alloc(newmem,$1000,INJECT_MIN_CHAOS_MISSION_KEYS)
label(code)
label(return)
newmem:
code:
mov eax,[rcx+08]
// inject start
test eax, eax
je endp
cmp eax, #58
jae endp
mov eax, #58
mov [rcx+08], eax
endp:
// inject end
mov [r13+00],eax
jmp return
INJECT_MIN_CHAOS_MISSION_KEYS:
jmp newmem
nop 2
return:
registersymbol(INJECT_MIN_CHAOS_MISSION_KEYS)
[DISABLE]
INJECT_MIN_CHAOS_MISSION_KEYS:
db 8B 41 08 41 89 45 00
unregistersymbol(INJECT_MIN_CHAOS_MISSION_KEYS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+FC7BF2
SDGundamBA-Win64-Shipping.exe+FC7BD7: 49 39 1C 90 - cmp [r8+rdx*4],rbx
SDGundamBA-Win64-Shipping.exe+FC7BDB: 49 8D 0C 90 - lea rcx,[r8+rdx*4]
SDGundamBA-Win64-Shipping.exe+FC7BDF: 74 0A - je SDGundamBA-Win64-Shipping.exe+FC7BEB
SDGundamBA-Win64-Shipping.exe+FC7BE1: 8B 41 0C - mov eax,[rcx+0C]
SDGundamBA-Win64-Shipping.exe+FC7BE4: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+FC7BE7: 75 E7 - jne SDGundamBA-Win64-Shipping.exe+FC7BD0
SDGundamBA-Win64-Shipping.exe+FC7BE9: EB 05 - jmp SDGundamBA-Win64-Shipping.exe+FC7BF0
SDGundamBA-Win64-Shipping.exe+FC7BEB: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+FC7BEE: 75 02 - jne SDGundamBA-Win64-Shipping.exe+FC7BF2
SDGundamBA-Win64-Shipping.exe+FC7BF0: 33 C9 - xor ecx,ecx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+FC7BF2: 8B 41 08 - mov eax,[rcx+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+FC7BF5: 41 89 45 00 - mov [r13+00],eax
SDGundamBA-Win64-Shipping.exe+FC7BF9: 48 8B 5C 24 50 - mov rbx,[rsp+50]
SDGundamBA-Win64-Shipping.exe+FC7BFE: 48 8B C6 - mov rax,rsi
SDGundamBA-Win64-Shipping.exe+FC7C01: 48 8B 74 24 68 - mov rsi,[rsp+68]
SDGundamBA-Win64-Shipping.exe+FC7C06: 48 8B 6C 24 58 - mov rbp,[rsp+58]
SDGundamBA-Win64-Shipping.exe+FC7C0B: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+FC7C0F: 41 5F - pop r15
SDGundamBA-Win64-Shipping.exe+FC7C11: 41 5E - pop r14
SDGundamBA-Win64-Shipping.exe+FC7C13: 41 5D - pop r13
SDGundamBA-Win64-Shipping.exe+FC7C15: 41 5C - pop r12
}
46
"Get session time"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_STIME,SDGundamBA-Win64-Shipping.exe,F2 0F 11 47 18 48 8B 5F) // should be unique
alloc(newmem,$1000,INJECT_GET_STIME)
label(code)
label(return)
label(i_session_time_base_addr)
newmem:
mov [i_session_time_base_addr], rdi
code:
movsd [rdi+18],xmm0
jmp return
align 10 cc
i_session_time_base_addr:
dq 0
INJECT_GET_STIME:
jmp newmem
return:
registersymbol(INJECT_GET_STIME)
registersymbol(i_session_time_base_addr)
[DISABLE]
INJECT_GET_STIME:
db F2 0F 11 47 18
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+80F7EC
SDGundamBA-Win64-Shipping.exe+80F7B7: 48 8B 4D A0 - mov rcx,[rbp-60]
SDGundamBA-Win64-Shipping.exe+80F7BB: E8 E0 16 B1 00 - call SDGundamBA-Win64-Shipping.exe+1320EA0
SDGundamBA-Win64-Shipping.exe+80F7C0: EB 0C - jmp SDGundamBA-Win64-Shipping.exe+80F7CE
SDGundamBA-Win64-Shipping.exe+80F7C2: E8 29 F0 D8 01 - call SDGundamBA-Win64-Shipping.exe+259E7F0
SDGundamBA-Win64-Shipping.exe+80F7C7: 48 89 1D 62 35 8F 04 - mov [SDGundamBA-Win64-Shipping.exe+5102D30],rbx
SDGundamBA-Win64-Shipping.exe+80F7CE: 48 83 3D 52 35 8F 04 06 - cmp qword ptr [SDGundamBA-Win64-Shipping.exe+5102D28],06
SDGundamBA-Win64-Shipping.exe+80F7D6: 48 8B BD 80 01 00 00 - mov rdi,[rbp+00000180]
SDGundamBA-Win64-Shipping.exe+80F7DD: 76 12 - jna SDGundamBA-Win64-Shipping.exe+80F7F1
SDGundamBA-Win64-Shipping.exe+80F7DF: F2 0F 10 05 89 EC 4F 04 - movsd xmm0,[SDGundamBA-Win64-Shipping.exe+4D0E470]
SDGundamBA-Win64-Shipping.exe+80F7E7: F2 0F 58 47 18 - addsd xmm0,[rdi+18]
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+80F7EC: F2 0F 11 47 18 - movsd [rdi+18],xmm0
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+80F7F1: 48 8B 5F 38 - mov rbx,[rdi+38]
SDGundamBA-Win64-Shipping.exe+80F7F5: E8 96 F2 D8 01 - call SDGundamBA-Win64-Shipping.exe+259EA90
SDGundamBA-Win64-Shipping.exe+80F7FA: 48 89 47 38 - mov [rdi+38],rax
SDGundamBA-Win64-Shipping.exe+80F7FE: BF 08 01 00 00 - mov edi,00000108
SDGundamBA-Win64-Shipping.exe+80F803: 8B 04 3E - mov eax,[rsi+rdi]
SDGundamBA-Win64-Shipping.exe+80F806: 39 05 D4 10 86 04 - cmp [SDGundamBA-Win64-Shipping.exe+50708E0],eax
SDGundamBA-Win64-Shipping.exe+80F80C: 0F 8F 17 03 00 00 - jg SDGundamBA-Win64-Shipping.exe+80FB29
SDGundamBA-Win64-Shipping.exe+80F812: 8B 04 3E - mov eax,[rsi+rdi]
SDGundamBA-Win64-Shipping.exe+80F815: 39 05 D5 10 86 04 - cmp [SDGundamBA-Win64-Shipping.exe+50708F0],eax
SDGundamBA-Win64-Shipping.exe+80F81B: 0F 8F 3E 03 00 00 - jg SDGundamBA-Win64-Shipping.exe+80FB5F
}
47
"Session time"
0
Double
i_session_time_base_addr
18
23
"_WIP"
1
75
"MS Blueprints progress (Usage: MS setting -> browse MSs; # of Blueprint must > 0)"
Auto Assembler Script
{ Game : SDGundamBA-Win64-Shipping.exe
Version:
Date : 2022-08-27
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_BLUEPRINTS,SDGundamBA-Win64-Shipping.exe,8B 41 08 48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC 48 89 5C 24 08 48) // should be unique
alloc(newmem,$1000,INJECT_GET_BLUEPRINTS)
label(code)
label(return)
label(i_cur_bp_addr)
label(i_prev_bp_addr)
label(i_bp_ptr)
label(i_bp_addr_1)
label(i_bp_addr_2)
label(i_bp_addr_3)
label(i_bp_addr_4)
label(i_bp_addr_5)
newmem:
mov [i_cur_bp_addr], rsi
cmp rsi, [i_prev_bp_addr]
jne go_reset
cmp rcx, [i_bp_addr_1]
je set_end
cmp rcx, [i_bp_addr_2]
je set_end
cmp rcx, [i_bp_addr_3]
je set_end
cmp rcx, [i_bp_addr_4]
je set_end
cmp rcx, [i_bp_addr_5]
je set_end
cmp dword ptr [i_bp_ptr], 6
jae endp
cmp dword ptr [i_bp_ptr], 5
je set_5
cmp dword ptr [i_bp_ptr], 4
je set_4
cmp dword ptr [i_bp_ptr], 3
je set_3
cmp dword ptr [i_bp_ptr], 2
je set_2
//cmp dword ptr [i_bp_ptr], 1
//je set_1
jmp endp
set_1:
mov qword ptr [i_bp_addr_1], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_2:
mov qword ptr [i_bp_addr_2], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_3:
mov qword ptr [i_bp_addr_3], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_4:
mov qword ptr [i_bp_addr_4], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_5:
mov qword ptr [i_bp_addr_5], rcx
inc dword ptr [i_bp_ptr]
jmp set_end
set_end:
mov [i_prev_bp_addr], rsi
jmp endp
go_reset:
mov [i_prev_bp_addr], rsi
mov dword ptr [i_bp_ptr], 1
mov [i_bp_addr_1], rcx
mov qword ptr [i_bp_addr_2], 0
mov qword ptr [i_bp_addr_3], 0
mov qword ptr [i_bp_addr_4], 0
mov qword ptr [i_bp_addr_5], 0
//mov dword ptr [i_bp_ptr], 1
//inc dword ptr [i_bp_ptr]
mov dword ptr [i_bp_ptr], 2
endp:
code:
mov eax,[rcx+08]
mov rbx,[rsp+30]
jmp return
align 10 cc
i_cur_bp_addr:
dq 0
i_prev_bp_addr:
dq FF
i_bp_ptr:
dd 1
i_bp_addr_1:
dq 0
i_bp_addr_2:
dq 0
i_bp_addr_3:
dq 0
i_bp_addr_4:
dq 0
i_bp_addr_5:
dq 0
INJECT_GET_BLUEPRINTS:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_BLUEPRINTS)
registersymbol(i_bp_addr_1)
registersymbol(i_bp_addr_2)
registersymbol(i_bp_addr_3)
registersymbol(i_bp_addr_4)
registersymbol(i_bp_addr_5)
[DISABLE]
INJECT_GET_BLUEPRINTS:
db 8B 41 08 48 8B 5C 24 30
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: SDGundamBA-Win64-Shipping.exe+F4D0C0
SDGundamBA-Win64-Shipping.exe+F4D0A7: 75 E7 - jne SDGundamBA-Win64-Shipping.exe+F4D090
SDGundamBA-Win64-Shipping.exe+F4D0A9: 33 C9 - xor ecx,ecx
SDGundamBA-Win64-Shipping.exe+F4D0AB: 8B 41 08 - mov eax,[rcx+08]
SDGundamBA-Win64-Shipping.exe+F4D0AE: 48 8B 5C 24 30 - mov rbx,[rsp+30]
SDGundamBA-Win64-Shipping.exe+F4D0B3: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+F4D0B7: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+F4D0B8: C3 - ret
SDGundamBA-Win64-Shipping.exe+F4D0B9: 83 F8 FF - cmp eax,-01
SDGundamBA-Win64-Shipping.exe+F4D0BC: 75 02 - jne SDGundamBA-Win64-Shipping.exe+F4D0C0
SDGundamBA-Win64-Shipping.exe+F4D0BE: 33 C9 - xor ecx,ecx
// ---------- INJECTING HERE ----------
SDGundamBA-Win64-Shipping.exe+F4D0C0: 8B 41 08 - mov eax,[rcx+08]
// ---------- DONE INJECTING ----------
SDGundamBA-Win64-Shipping.exe+F4D0C3: 48 8B 5C 24 30 - mov rbx,[rsp+30]
SDGundamBA-Win64-Shipping.exe+F4D0C8: 48 83 C4 20 - add rsp,20
SDGundamBA-Win64-Shipping.exe+F4D0CC: 5F - pop rdi
SDGundamBA-Win64-Shipping.exe+F4D0CD: C3 - ret
SDGundamBA-Win64-Shipping.exe+F4D0CE: CC - int 3
SDGundamBA-Win64-Shipping.exe+F4D0CF: CC - int 3
SDGundamBA-Win64-Shipping.exe+F4D0D0: 48 89 5C 24 08 - mov [rsp+08],rbx
SDGundamBA-Win64-Shipping.exe+F4D0D5: 48 89 54 24 10 - mov [rsp+10],rdx
SDGundamBA-Win64-Shipping.exe+F4D0DA: 57 - push rdi
SDGundamBA-Win64-Shipping.exe+F4D0DB: 48 83 EC 20 - sub rsp,20
}
76
"# of Blueprint 1"
0
4 Bytes
i_bp_addr_1
8
77
"# of Blueprint 2"
0
4 Bytes
i_bp_addr_2
8
78
"# of Blueprint 3"
0
4 Bytes
i_bp_addr_3
8
79
"# of Blueprint 4"
0
4 Bytes
i_bp_addr_4
8
80
"# of Blueprint 5"
0
4 Bytes
i_bp_addr_5
8
24
"SD GUNDAM BATTLE ALLIANCE 1.31 (2022/11/30) / https://opencheattables.com / CE 7.4+"
400080
1
AddressList.Header.OnSectionClick = nil
IDs = {7, 22, 62, 76, 77, 78, 79, 80
}
function contains(table, val)
local i = 0
for i=1, #table do
if table[i] == val then
return true
end
end
return false
end
function onMemRecPreExecute(memoryrecord, newstate)
if contains(IDs, memoryrecord.ID) and newstate then
memoryrecord.OnActivate = function(memoryrecord, before, currentstate)
return false
end
end
end