Metal Gear Solid V

Nov 15, 2017
5
0
1
If you are talking about MGSV TPP (haven't figured it out on MGS GZ), then this is the health write hook I came up with. I hadn't checked before, but in testing I can jump from any height and not die. And It's not effecting combatants.

Note that all I did was where you find the displayed health is written to, it is written to from a float, and the float seems to be where the real value is calculated and death is determined.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/19/18
	Author			: TheyCallMeTim13
	Name			: HealthWrtHook

	Health Wrt Hook
	
	[RSI] = health
	[RSI+4] = Health max
	xmm8 = damage value
}

{$STRICT}

define(address, mgsvtpp.exe+411FD3A)
define(bytes, F3 0F 10 0E F3 0F 10 5E 04)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobHealthWrtHook, mgsvtpp.exe, 39xx0F47xx89xx35xxxxxxxx81xxxxxxxxxx41xxxxxx41xxxxxxB8xxxxxxxx66xxxxxx0F2FxxF3xxxxxxF3xxxxxxxx0F93xxF3xxxxxxxx0F2Fxx73xx0F28xx0F28xxF3xxxxxx0F2Fxx73xx0F28xx0F2FxxF3xxxxxxF3xxxxxxxx77xxB9xxxxxxxx66xxxxxx74xx41xxxxxxxxxxxxxxxx)
define(injHealthWrtHook, aobHealthWrtHook+26)
assert(injHealthWrtHook, bytes)
registerSymbol(injHealthWrtHook)

alloc(memHealthWrtHook, 0x400, injHealthWrtHook)

label(ptrHealthWrtHook)
registerSymbol(ptrHealthWrtHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memHealthWrtHook:
	dd (float)0
	ptrHealthWrtHook:
		dq 0
	n_code:
		mov [ptrHealthWrtHook],rsi
		movss xmm1,[rsi+04]
		movss xmm3,[rsi+04]
		movss xmm8,[memHealthWrtHook]
	o_code:
		// movss xmm1,[rsi]
		// movss xmm3,[rsi+04]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injHealthWrtHook:
	jmp n_code
	nop
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injHealthWrtHook:
	db bytes

unregisterSymbol(injHealthWrtHook)

unregisterSymbol(ptrHealthWrtHook)

dealloc(memHealthWrtHook)

{
//// Injection Point: mgsvtpp.exe+411FD3A  -  000000014411FD3A
//// AOB address: 000000014411FD14  -  mgsvtpp.exe+411FD14
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+411FCE9:  0F47 C8                     -  cmova ecx,eax                      
mgsvtpp.exe+411FCEC:  89 C8                       -  mov eax,ecx                        
mgsvtpp.exe+411FCEE:  81 F1 ACD5FB94              -  xor ecx,94FBD5AC                   ["UUUU!"]
mgsvtpp.exe+411FCF4:  35 2FEA9DB4                 -  xor eax,B49DEA2F                   [000000AA]
mgsvtpp.exe+411FCF9:  41 89 4E 3C                 -  mov [r14+3C],ecx                   
mgsvtpp.exe+411FCFD:  41 8B 4E 04                 -  mov ecx,[r14+04]                   
mgsvtpp.exe+411FD01:  41 89 46 08                 -  mov [r14+08],eax                   
mgsvtpp.exe+411FD05:  41 8B 46 0C                 -  mov eax,[r14+0C]                   
mgsvtpp.exe+411FD09:  81 F1 2FEA9DB4              -  xor ecx,B49DEA2F                   [000000AA]
mgsvtpp.exe+411FD0F:  35 2FEA9DB4                 -  xor eax,B49DEA2F                   [000000AA]
mgsvtpp.exe+411FD14:  39 C8                       -  cmp eax,ecx                        <<<--- AOB Starts Here
mgsvtpp.exe+411FD16:  0F47 C8                     -  cmova ecx,eax                      
mgsvtpp.exe+411FD19:  89 C8                       -  mov eax,ecx                        
mgsvtpp.exe+411FD1B:  35 2FEA9DB4                 -  xor eax,B49DEA2F                   [000000AA]
mgsvtpp.exe+411FD20:  81 F1 ACD5FB94              -  xor ecx,94FBD5AC                   ["UUUU!"]
mgsvtpp.exe+411FD26:  41 89 4E 40                 -  mov [r14+40],ecx                   
mgsvtpp.exe+411FD2A:  41 89 46 0C                 -  mov [r14+0C],eax                   
mgsvtpp.exe+411FD2E:  B8 00100000                 -  mov eax,00001000                   
mgsvtpp.exe+411FD33:  66 09 43 22                 -  or [rbx+22],ax                     
mgsvtpp.exe+411FD37:  0F2F 36                     -  comiss xmm6,[rsi]                  
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+411FD3A:  F3 0F10 0E                  -  movss xmm1,[rsi]                   
mgsvtpp.exe+411FD3E:  F3 0F10 5E 04               -  movss xmm3,[rsi+04]                
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+411FD43:  0F93 D0                     -  setae al                           
mgsvtpp.exe+411FD46:  F3 41 0F5C C8               -  subss xmm1,xmm8                    
mgsvtpp.exe+411FD4B:  0F2F CE                     -  comiss xmm1,xmm6                   
mgsvtpp.exe+411FD4E:  73 03                       -  jae 14411FD53                      
mgsvtpp.exe+411FD50:  0F28 CE                     -  movaps xmm1,xmm6                   
mgsvtpp.exe+411FD53:  0F28 C3                     -  movaps xmm0,xmm3                   
mgsvtpp.exe+411FD56:  F3 0F5C C1                  -  subss xmm0,xmm1                    
mgsvtpp.exe+411FD5A:  0F2F C6                     -  comiss xmm0,xmm6                   
mgsvtpp.exe+411FD5D:  73 03                       -  jae 14411FD62                      
mgsvtpp.exe+411FD5F:  0F28 CB                     -  movaps xmm1,xmm3                   
mgsvtpp.exe+411FD62:  0F2F CE                     -  comiss xmm1,xmm6                   
mgsvtpp.exe+411FD65:  F3 0F11 0E                  -  movss [rsi],xmm1                   
mgsvtpp.exe+411FD69:  F3 45 0F58 D8               -  addss xmm11,xmm8                   
mgsvtpp.exe+411FD6E:  77 14                       -  ja 14411FD84                       
mgsvtpp.exe+411FD70:  B9 00200000                 -  mov ecx,00002000                   
mgsvtpp.exe+411FD75:  66 85 4B 22                 -  test [rbx+22],cx                   
mgsvtpp.exe+411FD79:  74 09                       -  je 14411FD84                       
mgsvtpp.exe+411FD7B:  41 83 8C 24 B4000000 04     -  or dword ptr [r12+000000B4],04     
mgsvtpp.exe+411FD84:  45 30 F6                    -  xor r14l,r14l                      
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
this worked perfectly, thank you so much!
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
glecas post_id=30986 time=1517278974 user_id=12419 said:
Ok so I never proved it but I think that in hitting the combatant while knocked out had it jumping part way in the hooks jump, but after moving things a bit this seems to work, but hitting them now causes them to wake up.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/29/18
	Author			: TheyCallMeTim13
	Name			: CombatantConsciousnessDecHook

	Combatant Consciousness Dec Hook
}

{$STRICT}

define(address, mgsvtpp.exe+43EB241)
define(bytes, 66 39 C8 66 0F 42 C8 66 29 C8)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCombatantConsciousnessDecHook, mgsvtpp.exe, 0FB7xxxx66xxxx66xxxxxx66xxxx66xxxxxx0FB7xxxx66xxxx74xx66xxxx75xx66xxxxxxxxEBxx66xxxxxx72xx44xxxxxx0FB7xxxx66xxxxxx74xx0FB6xxxx)
define(injCombatantConsciousnessDecHook, aobCombatantConsciousnessDecHook+4)
assert(injCombatantConsciousnessDecHook, bytes)
registerSymbol(injCombatantConsciousnessDecHook)

alloc(memCombatantConsciousnessDecHook, 0x400, injCombatantConsciousnessDecHook)

label(flgCombatantConsciousnessDecHook)
registerSymbol(flgCombatantConsciousnessDecHook)
// 00:Stun Only
// 01:One Hit Kills

label(ptrCombatantConsciousnessDecHook)
registerSymbol(ptrCombatantConsciousnessDecHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memCombatantConsciousnessDecHook:
	flgCombatantConsciousnessDecHook:
		db 00
	align 4
	ptrCombatantConsciousnessDecHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrCombatantConsciousnessDecHook],rbx
		mov cx,[rbx+20]
		mov ax,0
		cmp byte ptr [flgCombatantConsciousnessDecHook],01
		jne o_code
			mov word ptr [rbx+1A],0
	o_code:
		// cmp ax,cx
		// cmovb cx,ax
		// sub ax,cx
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCombatantConsciousnessDecHook:
	jmp n_code
	nop
	nop
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCombatantConsciousnessDecHook:
	db bytes

unregisterSymbol(injCombatantConsciousnessDecHook)

unregisterSymbol(flgCombatantConsciousnessDecHook)

unregisterSymbol(ptrCombatantConsciousnessDecHook)

dealloc(memCombatantConsciousnessDecHook)

{
//// Injection Point: mgsvtpp.exe+43EB241  -  00000001443EB241
//// AOB address: 00000001443EB23D  -  mgsvtpp.exe+43EB23D
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+43EB1EF:  0F2F C8                     -  comiss xmm1,xmm0                   
mgsvtpp.exe+43EB1F2:  77 40                       -  ja 1443EB234                       
mgsvtpp.exe+43EB1F4:  80 C9 02                    -  or cl,02                           
mgsvtpp.exe+43EB1F7:  88 8E BC000000              -  mov [rsi+000000BC],cl              
mgsvtpp.exe+43EB1FD:  E8 7EA36FFF                 -  call 143AE5580                     
mgsvtpp.exe+43EB202:  48 8D 54 24 68              -  lea rdx,[rsp+68]                   
mgsvtpp.exe+43EB207:  48 8B 88 98000000           -  mov rcx,[rax+00000098]             
mgsvtpp.exe+43EB20E:  41 B8 64000000              -  mov r8d,00000064                   
mgsvtpp.exe+43EB214:  48 8B 49 50                 -  mov rcx,[rcx+50]                   
mgsvtpp.exe+43EB218:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+43EB21B:  FF 90 18010000              -  call qword ptr [rax+00000118]      
mgsvtpp.exe+43EB221:  EB 11                       -  jmp 1443EB234                      
mgsvtpp.exe+43EB223:  D1 25 353C0D54              -  shl [1984BEE5E],1                  
mgsvtpp.exe+43EB229:  E0 D1                       -  loopne 1443EB1FC                   
mgsvtpp.exe+43EB22B:  E7 61                       -  out 61,eax                         
mgsvtpp.exe+43EB22D:  80 A6 BC000000 FD           -  and byte ptr [rsi+000000BC],-03    
mgsvtpp.exe+43EB234:  0FB7 4B 24                  -  movzx ecx,word ptr [rbx+24]        
mgsvtpp.exe+43EB238:  66 85 C9                    -  test cx,cx                         
mgsvtpp.exe+43EB23B:  74 12                       -  je 1443EB24F                       
mgsvtpp.exe+43EB23D:  0FB7 43 20                  -  movzx eax,word ptr [rbx+20]        <<<--- AOB Starts Here
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+43EB241:  66 39 C8                    -  cmp ax,cx                          
mgsvtpp.exe+43EB244:  66 0F42 C8                  -  cmovb cx,ax                        
mgsvtpp.exe+43EB248:  66 29 C8                    -  sub ax,cx                          
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+43EB24B:  66 89 43 20                 -  mov [rbx+20],ax                    
mgsvtpp.exe+43EB24F:  0FB7 43 20                  -  movzx eax,word ptr [rbx+20]        
mgsvtpp.exe+43EB253:  66 39 C5                    -  cmp bp,ax                          
mgsvtpp.exe+43EB256:  74 16                       -  je 1443EB26E                       
mgsvtpp.exe+43EB258:  66 85 C0                    -  test ax,ax                         
mgsvtpp.exe+43EB25B:  75 07                       -  jne 1443EB264                      
mgsvtpp.exe+43EB25D:  66 44 89 7B 10              -  mov [rbx+10],r15w                  
mgsvtpp.exe+43EB262:  EB 06                       -  jmp 1443EB26A                      
mgsvtpp.exe+43EB264:  66 3B 43 22                 -  cmp ax,[rbx+22]                    
mgsvtpp.exe+43EB268:  72 04                       -  jb 1443EB26E                       
mgsvtpp.exe+43EB26A:  44 89 7B 04                 -  mov [rbx+04],r15d                  
mgsvtpp.exe+43EB26E:  0FB7 43 14                  -  movzx eax,word ptr [rbx+14]        
mgsvtpp.exe+43EB272:  66 41 85 C5                 -  test r13w,ax                       
mgsvtpp.exe+43EB276:  74 7D                       -  je 1443EB2F5                       
mgsvtpp.exe+43EB278:  0FB6 43 3C                  -  movzx eax,byte ptr [rbx+3C]        
mgsvtpp.exe+43EB27C:  4C 8B 56 30                 -  mov r10,[rsi+30]                   
mgsvtpp.exe+43EB280:  4C 8D 0C 40                 -  lea r9,[rax+rax*2]                 
mgsvtpp.exe+43EB284:  3C 20                       -  cmp al,20                          
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
And for the detailed explanation here is a bonus Tape Unlocker, it's not the most robust thing but it seems to work, this will unlock all cassette tapes, I only have one game that I have completed after using this so use at your own risk but, I know, I gotta have my tapes. But know that I just slam a byte value of 3 in to every byte between +0x8 and +0x200 of the base.

EDIT:
And this saves with the game.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/21/18
	Author			: TheyCallMeTim13
	Name			: CassetteTapeUnlockerHook

	Cassette Tape Unlocker Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3E0164B)
define(bytes, 48 8B 82 40 07 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCassetteTapeUnlockerHook, mgsvtpp.exe, 8Dxxxxxxxxxx66xxxx74xx48xxxxxxxxxxxx48xxxxxxxxxxxx0FB7xx48xxxxxxxxxxxx0FB6xxxxD0xx80xxxx75xx0FB7xxFFxx39xx72xxEBxx44xxxx73xx48xxxxxx49xxxxxxxxFFxx31xx41xxxx48xxxxxx45xxxx73xx8BxxxxxxE9xxxxxxxxB6xx79xx48xxxxxxxx48xxxxxxxx89xx48xxxxxxxx48xxxxxx41xx41xx41xx41xxxxxx)
define(injCassetteTapeUnlockerHook, aobCassetteTapeUnlockerHook+1C)
assert(injCassetteTapeUnlockerHook, bytes)
registerSymbol(injCassetteTapeUnlockerHook)

alloc(memCassetteTapeUnlockerHook, 0x400, injCassetteTapeUnlockerHook)

label(ptrCassetteTapeUnlockerHook)
registerSymbol(ptrCassetteTapeUnlockerHook)

label(n_code)
label(l_code)
label(o_code)
label(exit)
label(return)

memCassetteTapeUnlockerHook:
	ptrCassetteTapeUnlockerHook:
		dq 0
	n_code:
		pushfq

		mov [ptrCassetteTapeUnlockerHook],rdx
		mov rax,[rdx+00000740]
		
		push rbx
		push rdx
		mov rdx,rcx
		mov rcx,200

		l_code:
			movzx rbx,byte ptr [rdx+rax]
			shr bl,1
			cmp bl,0
			jg @f
				mov byte ptr [rcx+rax],03
			@@:
			cmp ecx,8
			jg @f
				mov rcx,1
			@@:
		loop l_code

		pop rdx
		pop rbx
		popfq
	o_code:
		// mov rax,[rdx+00000740]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCassetteTapeUnlockerHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCassetteTapeUnlockerHook:
	db bytes

unregisterSymbol(injCassetteTapeUnlockerHook)

unregisterSymbol(ptrCassetteTapeUnlockerHook)

dealloc(memCassetteTapeUnlockerHook)

{
//// Injection Point: mgsvtpp.exe+3E0164B  -  0000000143E0164B
//// AOB address: 0000000143E0162F  -  mgsvtpp.exe+3E0162F
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3E015F7:  66 3B 0F                    -  cmp cx,[rdi]                       
mgsvtpp.exe+3E015FA:  73 7E                       -  jae 143E0167A                      
mgsvtpp.exe+3E015FC:  48 8B 8D D8000000           -  mov rcx,[rbp+000000D8]             
mgsvtpp.exe+3E01603:  48 8B 57 F0                 -  mov rdx,[rdi-10]                   
mgsvtpp.exe+3E01607:  41 89 D8                    -  mov r8d,ebx                        
mgsvtpp.exe+3E0160A:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+3E0160D:  FF 90 88010000              -  call qword ptr [rax+00000188]      
mgsvtpp.exe+3E01613:  0FB7 40 1C                  -  movzx eax,word ptr [rax+1C]        
mgsvtpp.exe+3E01617:  66 85 C0                    -  test ax,ax                         
mgsvtpp.exe+3E0161A:  78 41                       -  js 143E0165D                       
mgsvtpp.exe+3E0161C:  B9 0FA2FFE6                 -  mov ecx,E6FFA20F                   [00000000]
mgsvtpp.exe+3E01621:  8D 89 A85E0019              -  lea ecx,[rcx+19005EA8]             
mgsvtpp.exe+3E01627:  66 01 C8                    -  add ax,cx                          
mgsvtpp.exe+3E0162A:  B9 0F05C390                 -  mov ecx,90C3050F                   [00328083]
mgsvtpp.exe+3E0162F:  8D 89 F0FA3D6F              -  lea ecx,[rcx+6F3DFAF0]             <<<--- AOB Starts Here
mgsvtpp.exe+3E01635:  66 39 C8                    -  cmp ax,cx                          
mgsvtpp.exe+3E01638:  74 23                       -  je 143E0165D                       
mgsvtpp.exe+3E0163A:  48 8B 8D B0000000           -  mov rcx,[rbp+000000B0]             
mgsvtpp.exe+3E01641:  48 8B 91 E80A0000           -  mov rdx,[rcx+00000AE8]             
mgsvtpp.exe+3E01648:  0FB7 C8                     -  movzx ecx,ax                       
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3E0164B:  48 8B 82 40070000           -  mov rax,[rdx+00000740]             
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3E01652:  0FB6 14 01                  -  movzx edx,byte ptr [rcx+rax]       
mgsvtpp.exe+3E01656:  D0 EA                       -  shr dl,1                           
mgsvtpp.exe+3E01658:  80 E2 01                    -  and dl,01                          
mgsvtpp.exe+3E0165B:  75 0B                       -  jne 143E01668                      
mgsvtpp.exe+3E0165D:  0FB7 07                     -  movzx eax,word ptr [rdi]           
mgsvtpp.exe+3E01660:  FF C3                       -  inc ebx                            
mgsvtpp.exe+3E01662:  39 C3                       -  cmp ebx,eax                        
mgsvtpp.exe+3E01664:  72 96                       -  jb 143E015FC                       
mgsvtpp.exe+3E01666:  EB 10                       -  jmp 143E01678                      
mgsvtpp.exe+3E01668:  44 39 E6                    -  cmp esi,r12d                       
mgsvtpp.exe+3E0166B:  73 26                       -  jae 143E01693                      
mgsvtpp.exe+3E0166D:  48 8B 47 F0                 -  mov rax,[rdi-10]                   
mgsvtpp.exe+3E01671:  49 89 44 F5 00              -  mov [r13+rsi*8+00],rax             
mgsvtpp.exe+3E01676:  FF C6                       -  inc esi                            
mgsvtpp.exe+3E01678:  31 C9                       -  xor ecx,ecx                        
mgsvtpp.exe+3E0167A:  41 FF C6                    -  inc r14d                           
mgsvtpp.exe+3E0167D:  48 83 C7 18                 -  add rdi,18                         
mgsvtpp.exe+3E01681:  45 39 FE                    -  cmp r14d,r15d                      
mgsvtpp.exe+3E01684:  73 0D                       -  jae 143E01693                      
mgsvtpp.exe+3E01686:  8B 5C 24 50                 -  mov ebx,[rsp+50]                   
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
 
Jan 29, 2018
38
0
6
TheyCallMeTim13 post_id=30994 time=1517284274 user_id=91 said:
glecas post_id=30986 time=1517278974 user_id=12419 said:
Ok so I never proved it but I think that in hitting the combatant while knocked out had it jumping part way in the hooks jump, but after moving things a bit this seems to work, but hitting them now causes them to wake up.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/29/18
	Author			: TheyCallMeTim13
	Name			: CombatantConsciousnessDecHook

	Combatant Consciousness Dec Hook
}

{$STRICT}

define(address, mgsvtpp.exe+43EB241)
define(bytes, 66 39 C8 66 0F 42 C8 66 29 C8)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCombatantConsciousnessDecHook, mgsvtpp.exe, 0FB7xxxx66xxxx66xxxxxx66xxxx66xxxxxx0FB7xxxx66xxxx74xx66xxxx75xx66xxxxxxxxEBxx66xxxxxx72xx44xxxxxx0FB7xxxx66xxxxxx74xx0FB6xxxx)
define(injCombatantConsciousnessDecHook, aobCombatantConsciousnessDecHook+4)
assert(injCombatantConsciousnessDecHook, bytes)
registerSymbol(injCombatantConsciousnessDecHook)

alloc(memCombatantConsciousnessDecHook, 0x400, injCombatantConsciousnessDecHook)

label(flgCombatantConsciousnessDecHook)
registerSymbol(flgCombatantConsciousnessDecHook)
// 00:Stun Only
// 01:One Hit Kills

label(ptrCombatantConsciousnessDecHook)
registerSymbol(ptrCombatantConsciousnessDecHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memCombatantConsciousnessDecHook:
	flgCombatantConsciousnessDecHook:
		db 00
	align 4
	ptrCombatantConsciousnessDecHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrCombatantConsciousnessDecHook],rbx
		mov cx,[rbx+20]
		mov ax,0
		cmp byte ptr [flgCombatantConsciousnessDecHook],01
		jne o_code
			mov word ptr [rbx+1A],0
	o_code:
		// cmp ax,cx
		// cmovb cx,ax
		// sub ax,cx
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCombatantConsciousnessDecHook:
	jmp n_code
	nop
	nop
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCombatantConsciousnessDecHook:
	db bytes

unregisterSymbol(injCombatantConsciousnessDecHook)

unregisterSymbol(flgCombatantConsciousnessDecHook)

unregisterSymbol(ptrCombatantConsciousnessDecHook)

dealloc(memCombatantConsciousnessDecHook)

{
//// Injection Point: mgsvtpp.exe+43EB241  -  00000001443EB241
//// AOB address: 00000001443EB23D  -  mgsvtpp.exe+43EB23D
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+43EB1EF:  0F2F C8                     -  comiss xmm1,xmm0                   
mgsvtpp.exe+43EB1F2:  77 40                       -  ja 1443EB234                       
mgsvtpp.exe+43EB1F4:  80 C9 02                    -  or cl,02                           
mgsvtpp.exe+43EB1F7:  88 8E BC000000              -  mov [rsi+000000BC],cl              
mgsvtpp.exe+43EB1FD:  E8 7EA36FFF                 -  call 143AE5580                     
mgsvtpp.exe+43EB202:  48 8D 54 24 68              -  lea rdx,[rsp+68]                   
mgsvtpp.exe+43EB207:  48 8B 88 98000000           -  mov rcx,[rax+00000098]             
mgsvtpp.exe+43EB20E:  41 B8 64000000              -  mov r8d,00000064                   
mgsvtpp.exe+43EB214:  48 8B 49 50                 -  mov rcx,[rcx+50]                   
mgsvtpp.exe+43EB218:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+43EB21B:  FF 90 18010000              -  call qword ptr [rax+00000118]      
mgsvtpp.exe+43EB221:  EB 11                       -  jmp 1443EB234                      
mgsvtpp.exe+43EB223:  D1 25 353C0D54              -  shl [1984BEE5E],1                  
mgsvtpp.exe+43EB229:  E0 D1                       -  loopne 1443EB1FC                   
mgsvtpp.exe+43EB22B:  E7 61                       -  out 61,eax                         
mgsvtpp.exe+43EB22D:  80 A6 BC000000 FD           -  and byte ptr [rsi+000000BC],-03    
mgsvtpp.exe+43EB234:  0FB7 4B 24                  -  movzx ecx,word ptr [rbx+24]        
mgsvtpp.exe+43EB238:  66 85 C9                    -  test cx,cx                         
mgsvtpp.exe+43EB23B:  74 12                       -  je 1443EB24F                       
mgsvtpp.exe+43EB23D:  0FB7 43 20                  -  movzx eax,word ptr [rbx+20]        <<<--- AOB Starts Here
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+43EB241:  66 39 C8                    -  cmp ax,cx                          
mgsvtpp.exe+43EB244:  66 0F42 C8                  -  cmovb cx,ax                        
mgsvtpp.exe+43EB248:  66 29 C8                    -  sub ax,cx                          
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+43EB24B:  66 89 43 20                 -  mov [rbx+20],ax                    
mgsvtpp.exe+43EB24F:  0FB7 43 20                  -  movzx eax,word ptr [rbx+20]        
mgsvtpp.exe+43EB253:  66 39 C5                    -  cmp bp,ax                          
mgsvtpp.exe+43EB256:  74 16                       -  je 1443EB26E                       
mgsvtpp.exe+43EB258:  66 85 C0                    -  test ax,ax                         
mgsvtpp.exe+43EB25B:  75 07                       -  jne 1443EB264                      
mgsvtpp.exe+43EB25D:  66 44 89 7B 10              -  mov [rbx+10],r15w                  
mgsvtpp.exe+43EB262:  EB 06                       -  jmp 1443EB26A                      
mgsvtpp.exe+43EB264:  66 3B 43 22                 -  cmp ax,[rbx+22]                    
mgsvtpp.exe+43EB268:  72 04                       -  jb 1443EB26E                       
mgsvtpp.exe+43EB26A:  44 89 7B 04                 -  mov [rbx+04],r15d                  
mgsvtpp.exe+43EB26E:  0FB7 43 14                  -  movzx eax,word ptr [rbx+14]        
mgsvtpp.exe+43EB272:  66 41 85 C5                 -  test r13w,ax                       
mgsvtpp.exe+43EB276:  74 7D                       -  je 1443EB2F5                       
mgsvtpp.exe+43EB278:  0FB6 43 3C                  -  movzx eax,byte ptr [rbx+3C]        
mgsvtpp.exe+43EB27C:  4C 8B 56 30                 -  mov r10,[rsi+30]                   
mgsvtpp.exe+43EB280:  4C 8D 0C 40                 -  lea r9,[rax+rax*2]                 
mgsvtpp.exe+43EB284:  3C 20                       -  cmp al,20                          
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
And for the detailed explanation here is a bonus Tape Unlocker, it's not the most robust thing but it seems to work, this will unlock all cassette tapes, I only have one game that I have completed after using this so use at your own risk but, I know, I gotta have my tapes. But know that I just slam a byte value of 3 in to every byte between +0x8 and +0x200 of the base.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/21/18
	Author			: TheyCallMeTim13
	Name			: CassetteTapeUnlockerHook

	Cassette Tape Unlocker Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3E0164B)
define(bytes, 48 8B 82 40 07 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCassetteTapeUnlockerHook, mgsvtpp.exe, 8Dxxxxxxxxxx66xxxx74xx48xxxxxxxxxxxx48xxxxxxxxxxxx0FB7xx48xxxxxxxxxxxx0FB6xxxxD0xx80xxxx75xx0FB7xxFFxx39xx72xxEBxx44xxxx73xx48xxxxxx49xxxxxxxxFFxx31xx41xxxx48xxxxxx45xxxx73xx8BxxxxxxE9xxxxxxxxB6xx79xx48xxxxxxxx48xxxxxxxx89xx48xxxxxxxx48xxxxxx41xx41xx41xx41xxxxxx)
define(injCassetteTapeUnlockerHook, aobCassetteTapeUnlockerHook+1C)
assert(injCassetteTapeUnlockerHook, bytes)
registerSymbol(injCassetteTapeUnlockerHook)

alloc(memCassetteTapeUnlockerHook, 0x400, injCassetteTapeUnlockerHook)

label(ptrCassetteTapeUnlockerHook)
registerSymbol(ptrCassetteTapeUnlockerHook)

label(n_code)
label(l_code)
label(o_code)
label(exit)
label(return)

memCassetteTapeUnlockerHook:
	ptrCassetteTapeUnlockerHook:
		dq 0
	n_code:
		pushfq

		mov [ptrCassetteTapeUnlockerHook],rdx
		mov rax,[rdx+00000740]
		
		push rbx
		push rdx
		mov rdx,rcx
		mov rcx,200

		l_code:
			movzx rbx,byte ptr [rdx+rax]
			shr bl,1
			cmp bl,0
			jg @f
				mov byte ptr [rcx+rax],03
			@@:
			cmp ecx,8
			jg @f
				mov rcx,1
			@@:
		loop l_code

		pop rdx
		pop rbx
		popfq
	o_code:
		// mov rax,[rdx+00000740]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCassetteTapeUnlockerHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCassetteTapeUnlockerHook:
	db bytes

unregisterSymbol(injCassetteTapeUnlockerHook)

unregisterSymbol(ptrCassetteTapeUnlockerHook)

dealloc(memCassetteTapeUnlockerHook)

{
//// Injection Point: mgsvtpp.exe+3E0164B  -  0000000143E0164B
//// AOB address: 0000000143E0162F  -  mgsvtpp.exe+3E0162F
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3E015F7:  66 3B 0F                    -  cmp cx,[rdi]                       
mgsvtpp.exe+3E015FA:  73 7E                       -  jae 143E0167A                      
mgsvtpp.exe+3E015FC:  48 8B 8D D8000000           -  mov rcx,[rbp+000000D8]             
mgsvtpp.exe+3E01603:  48 8B 57 F0                 -  mov rdx,[rdi-10]                   
mgsvtpp.exe+3E01607:  41 89 D8                    -  mov r8d,ebx                        
mgsvtpp.exe+3E0160A:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+3E0160D:  FF 90 88010000              -  call qword ptr [rax+00000188]      
mgsvtpp.exe+3E01613:  0FB7 40 1C                  -  movzx eax,word ptr [rax+1C]        
mgsvtpp.exe+3E01617:  66 85 C0                    -  test ax,ax                         
mgsvtpp.exe+3E0161A:  78 41                       -  js 143E0165D                       
mgsvtpp.exe+3E0161C:  B9 0FA2FFE6                 -  mov ecx,E6FFA20F                   [00000000]
mgsvtpp.exe+3E01621:  8D 89 A85E0019              -  lea ecx,[rcx+19005EA8]             
mgsvtpp.exe+3E01627:  66 01 C8                    -  add ax,cx                          
mgsvtpp.exe+3E0162A:  B9 0F05C390                 -  mov ecx,90C3050F                   [00328083]
mgsvtpp.exe+3E0162F:  8D 89 F0FA3D6F              -  lea ecx,[rcx+6F3DFAF0]             <<<--- AOB Starts Here
mgsvtpp.exe+3E01635:  66 39 C8                    -  cmp ax,cx                          
mgsvtpp.exe+3E01638:  74 23                       -  je 143E0165D                       
mgsvtpp.exe+3E0163A:  48 8B 8D B0000000           -  mov rcx,[rbp+000000B0]             
mgsvtpp.exe+3E01641:  48 8B 91 E80A0000           -  mov rdx,[rcx+00000AE8]             
mgsvtpp.exe+3E01648:  0FB7 C8                     -  movzx ecx,ax                       
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3E0164B:  48 8B 82 40070000           -  mov rax,[rdx+00000740]             
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3E01652:  0FB6 14 01                  -  movzx edx,byte ptr [rcx+rax]       
mgsvtpp.exe+3E01656:  D0 EA                       -  shr dl,1                           
mgsvtpp.exe+3E01658:  80 E2 01                    -  and dl,01                          
mgsvtpp.exe+3E0165B:  75 0B                       -  jne 143E01668                      
mgsvtpp.exe+3E0165D:  0FB7 07                     -  movzx eax,word ptr [rdi]           
mgsvtpp.exe+3E01660:  FF C3                       -  inc ebx                            
mgsvtpp.exe+3E01662:  39 C3                       -  cmp ebx,eax                        
mgsvtpp.exe+3E01664:  72 96                       -  jb 143E015FC                       
mgsvtpp.exe+3E01666:  EB 10                       -  jmp 143E01678                      
mgsvtpp.exe+3E01668:  44 39 E6                    -  cmp esi,r12d                       
mgsvtpp.exe+3E0166B:  73 26                       -  jae 143E01693                      
mgsvtpp.exe+3E0166D:  48 8B 47 F0                 -  mov rax,[rdi-10]                   
mgsvtpp.exe+3E01671:  49 89 44 F5 00              -  mov [r13+rsi*8+00],rax             
mgsvtpp.exe+3E01676:  FF C6                       -  inc esi                            
mgsvtpp.exe+3E01678:  31 C9                       -  xor ecx,ecx                        
mgsvtpp.exe+3E0167A:  41 FF C6                    -  inc r14d                           
mgsvtpp.exe+3E0167D:  48 83 C7 18                 -  add rdi,18                         
mgsvtpp.exe+3E01681:  45 39 FE                    -  cmp r14d,r15d                      
mgsvtpp.exe+3E01684:  73 0D                       -  jae 143E01693                      
mgsvtpp.exe+3E01686:  8B 5C 24 50                 -  mov ebx,[rsp+50]                   
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Wow that did it!

One hit kills works now, and they also get insta-stunned with ONE punch. Kicking them while stunned will wake them up, but they will be severely injured :) I like it! Even one-shot to the foot will kill them (or stun them if using stun ammo).

Tested with CE 6.7 using the exact same steps I described in my previous post.

Thank you so much for this! Super friendly and super fast response! Boss! *pointing* :D

Also, thanks for the cassette bonus... haven't tested it since I already have all the cassettes, but I will save your code anyway in case I need it in the future.
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
glecas post_id=30997 time=1517285495 user_id=12419 said:
...
Thank you so much for this! Super friendly and super fast response! Boss! *pointing* :D
...
I have to admit, that was a bit of luck on your part. I just happened to be working on one for the skulls, plus I do really like playing this game. But glad I could help.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/29/18
	Author			: TheyCallMeTim13
	Name			: CombatantSkullsHealthWrtHook

	Combatant Skulls Health Wrt Hook
}

{$STRICT}

define(address, mgsvtpp.exe+48116D0)
define(bytes, F3 0F 10 04 08)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCombatantSkullsHealthWrtHook, mgsvtpp.exe, F3xxxxxxxx0F2Fxx76xx89xxxxEBxx00xx0F5CxxF3xxxxxxxxF3xxxxxxxxxx0F2Fxx76xx89xxxxxxEBxx36xxF3xxxxxxF3xxxxxxxxxx)
define(injCombatantSkullsHealthWrtHook, aobCombatantSkullsHealthWrtHook)
assert(injCombatantSkullsHealthWrtHook, bytes)
registerSymbol(injCombatantSkullsHealthWrtHook)

alloc(memCombatantSkullsHealthWrtHook, 0x400, injCombatantSkullsHealthWrtHook)

label(ptrCombatantSkullsHealthWrtHook)
registerSymbol(ptrCombatantSkullsHealthWrtHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memCombatantSkullsHealthWrtHook:
	ptrCombatantSkullsHealthWrtHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrCombatantSkullsHealthWrtHook],rax
		add [ptrCombatantSkullsHealthWrtHook],rcx
		mov dword ptr [rax+rcx],0
		mov dword ptr [rax+rcx+14],0
		mov byte ptr [rax+rcx+24],1
	o_code:
		movss xmm0,[rax+rcx]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCombatantSkullsHealthWrtHook:
	jmp n_code
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCombatantSkullsHealthWrtHook:
	db bytes

unregisterSymbol(injCombatantSkullsHealthWrtHook)

unregisterSymbol(ptrCombatantSkullsHealthWrtHook)

dealloc(memCombatantSkullsHealthWrtHook)

{
//// Injection Point: mgsvtpp.exe+48116D0  -  00000001448116D0
//// AOB address: 00000001448116D0  -  mgsvtpp.exe+48116D0
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+4811678:  48 8B 54 24 60              -  mov rdx,[rsp+60]                   
mgsvtpp.exe+481167D:  48 8B 42 08                 -  mov rax,[rdx+08]                   
mgsvtpp.exe+4811681:  4D 69 E4 B4000000           -  imul r12,r12,000000B4              
mgsvtpp.exe+4811688:  F3 41 0F10 44 04 28         -  movss xmm0,[r12+rax+28]            
mgsvtpp.exe+481168F:  0F2F F0                     -  comiss xmm6,xmm0                   
mgsvtpp.exe+4811692:  76 0E                       -  jna 1448116A2                      
mgsvtpp.exe+4811694:  41 C7 44 04 28 00000000     -  mov [r12+rax+28],00000000          
mgsvtpp.exe+481169D:  E9 22010000                 -  jmp 1448117C4                      
mgsvtpp.exe+48116A2:  F3 0F5C C6                  -  subss xmm0,xmm6                    
mgsvtpp.exe+48116A6:  F3 41 0F11 44 04 28         -  movss [r12+rax+28],xmm0            
mgsvtpp.exe+48116AD:  E9 12010000                 -  jmp 1448117C4                      
mgsvtpp.exe+48116B2:  19 6E FB                    -  sbb [rsi-05],ebp                   
mgsvtpp.exe+48116B5:  86 C8                       -  xchg al,cl                         
mgsvtpp.exe+48116B7:  90                          -  nop                                
mgsvtpp.exe+48116B8:  49 81 00 488B7424           -  add qword ptr [r8],24748B48        [(double)0.0000]
mgsvtpp.exe+48116BF:  60                          -  pushad (invalid)                   
mgsvtpp.exe+48116C0:  4C 89 E0                    -  mov rax,r12                        
mgsvtpp.exe+48116C3:  31 D2                       -  xor edx,edx                        
mgsvtpp.exe+48116C5:  48 8B 4E 08                 -  mov rcx,[rsi+08]                   
mgsvtpp.exe+48116C9:  48 69 C0 B4000000           -  imul rax,rax,000000B4              
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+48116D0:  F3 0F10 04 08               -  movss xmm0,[rax+rcx]               <<<--- AOB Starts Here
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+48116D5:  0F2F F0                     -  comiss xmm6,xmm0                   
mgsvtpp.exe+48116D8:  76 06                       -  jna 1448116E0                      
mgsvtpp.exe+48116DA:  89 14 08                    -  mov [rax+rcx],edx                  
mgsvtpp.exe+48116DD:  EB 0A                       -  jmp 1448116E9                      
mgsvtpp.exe+48116DF:  00 F3                       -  add bl,dh                          
mgsvtpp.exe+48116E1:  0F5C C6                     -  subps xmm0,xmm6                    
mgsvtpp.exe+48116E4:  F3 0F11 04 08               -  movss [rax+rcx],xmm0               
mgsvtpp.exe+48116E9:  F3 0F10 44 08 14            -  movss xmm0,[rax+rcx+14]            
mgsvtpp.exe+48116EF:  0F2F C8                     -  comiss xmm1,xmm0                   
mgsvtpp.exe+48116F2:  76 08                       -  jna 1448116FC                      
mgsvtpp.exe+48116F4:  89 54 08 14                 -  mov [rax+rcx+14],edx               
mgsvtpp.exe+48116F8:  EB 0C                       -  jmp 144811706                      
mgsvtpp.exe+48116FA:  36 1F                       -  pop ds                             
mgsvtpp.exe+48116FC:  F3 0F5C C1                  -  subss xmm0,xmm1                    
mgsvtpp.exe+4811700:  F3 0F11 44 08 14            -  movss [rax+rcx+14],xmm0            
mgsvtpp.exe+4811706:  41 83 FD 06                 -  cmp r13d,06                        
mgsvtpp.exe+481170A:  0F8D C4000000               -  jnl 1448117D4                      
mgsvtpp.exe+4811710:  B8 01000000                 -  mov eax,00000001                   
mgsvtpp.exe+4811715:  89 95 90000000              -  mov [rbp+00000090],edx             
mgsvtpp.exe+481171B:  48 89 D9                    -  mov rcx,rbx                        
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
 
Jan 29, 2018
38
0
6
TheyCallMeTim13 post_id=31004 time=1517288902 user_id=91 said:
glecas post_id=30997 time=1517285495 user_id=12419 said:
...
Thank you so much for this! Super friendly and super fast response! Boss! *pointing* :D
...
I have to admit, that was a bit of luck on your part. I just happened to be working on one for the skulls, plus I do really like playing this game. But glad I could help.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/29/18
	Author			: TheyCallMeTim13
	Name			: CombatantSkullsHealthWrtHook

	Combatant Skulls Health Wrt Hook
}

{$STRICT}

define(address, mgsvtpp.exe+48116D0)
define(bytes, F3 0F 10 04 08)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobCombatantSkullsHealthWrtHook, mgsvtpp.exe, F3xxxxxxxx0F2Fxx76xx89xxxxEBxx00xx0F5CxxF3xxxxxxxxF3xxxxxxxxxx0F2Fxx76xx89xxxxxxEBxx36xxF3xxxxxxF3xxxxxxxxxx)
define(injCombatantSkullsHealthWrtHook, aobCombatantSkullsHealthWrtHook)
assert(injCombatantSkullsHealthWrtHook, bytes)
registerSymbol(injCombatantSkullsHealthWrtHook)

alloc(memCombatantSkullsHealthWrtHook, 0x400, injCombatantSkullsHealthWrtHook)

label(ptrCombatantSkullsHealthWrtHook)
registerSymbol(ptrCombatantSkullsHealthWrtHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memCombatantSkullsHealthWrtHook:
	ptrCombatantSkullsHealthWrtHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrCombatantSkullsHealthWrtHook],rax
		add [ptrCombatantSkullsHealthWrtHook],rcx
		mov dword ptr [rax+rcx],0
		mov dword ptr [rax+rcx+14],0
		mov byte ptr [rax+rcx+24],1
	o_code:
		movss xmm0,[rax+rcx]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injCombatantSkullsHealthWrtHook:
	jmp n_code
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCombatantSkullsHealthWrtHook:
	db bytes

unregisterSymbol(injCombatantSkullsHealthWrtHook)

unregisterSymbol(ptrCombatantSkullsHealthWrtHook)

dealloc(memCombatantSkullsHealthWrtHook)

{
//// Injection Point: mgsvtpp.exe+48116D0  -  00000001448116D0
//// AOB address: 00000001448116D0  -  mgsvtpp.exe+48116D0
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+4811678:  48 8B 54 24 60              -  mov rdx,[rsp+60]                   
mgsvtpp.exe+481167D:  48 8B 42 08                 -  mov rax,[rdx+08]                   
mgsvtpp.exe+4811681:  4D 69 E4 B4000000           -  imul r12,r12,000000B4              
mgsvtpp.exe+4811688:  F3 41 0F10 44 04 28         -  movss xmm0,[r12+rax+28]            
mgsvtpp.exe+481168F:  0F2F F0                     -  comiss xmm6,xmm0                   
mgsvtpp.exe+4811692:  76 0E                       -  jna 1448116A2                      
mgsvtpp.exe+4811694:  41 C7 44 04 28 00000000     -  mov [r12+rax+28],00000000          
mgsvtpp.exe+481169D:  E9 22010000                 -  jmp 1448117C4                      
mgsvtpp.exe+48116A2:  F3 0F5C C6                  -  subss xmm0,xmm6                    
mgsvtpp.exe+48116A6:  F3 41 0F11 44 04 28         -  movss [r12+rax+28],xmm0            
mgsvtpp.exe+48116AD:  E9 12010000                 -  jmp 1448117C4                      
mgsvtpp.exe+48116B2:  19 6E FB                    -  sbb [rsi-05],ebp                   
mgsvtpp.exe+48116B5:  86 C8                       -  xchg al,cl                         
mgsvtpp.exe+48116B7:  90                          -  nop                                
mgsvtpp.exe+48116B8:  49 81 00 488B7424           -  add qword ptr [r8],24748B48        [(double)0.0000]
mgsvtpp.exe+48116BF:  60                          -  pushad (invalid)                   
mgsvtpp.exe+48116C0:  4C 89 E0                    -  mov rax,r12                        
mgsvtpp.exe+48116C3:  31 D2                       -  xor edx,edx                        
mgsvtpp.exe+48116C5:  48 8B 4E 08                 -  mov rcx,[rsi+08]                   
mgsvtpp.exe+48116C9:  48 69 C0 B4000000           -  imul rax,rax,000000B4              
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+48116D0:  F3 0F10 04 08               -  movss xmm0,[rax+rcx]               <<<--- AOB Starts Here
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+48116D5:  0F2F F0                     -  comiss xmm6,xmm0                   
mgsvtpp.exe+48116D8:  76 06                       -  jna 1448116E0                      
mgsvtpp.exe+48116DA:  89 14 08                    -  mov [rax+rcx],edx                  
mgsvtpp.exe+48116DD:  EB 0A                       -  jmp 1448116E9                      
mgsvtpp.exe+48116DF:  00 F3                       -  add bl,dh                          
mgsvtpp.exe+48116E1:  0F5C C6                     -  subps xmm0,xmm6                    
mgsvtpp.exe+48116E4:  F3 0F11 04 08               -  movss [rax+rcx],xmm0               
mgsvtpp.exe+48116E9:  F3 0F10 44 08 14            -  movss xmm0,[rax+rcx+14]            
mgsvtpp.exe+48116EF:  0F2F C8                     -  comiss xmm1,xmm0                   
mgsvtpp.exe+48116F2:  76 08                       -  jna 1448116FC                      
mgsvtpp.exe+48116F4:  89 54 08 14                 -  mov [rax+rcx+14],edx               
mgsvtpp.exe+48116F8:  EB 0C                       -  jmp 144811706                      
mgsvtpp.exe+48116FA:  36 1F                       -  pop ds                             
mgsvtpp.exe+48116FC:  F3 0F5C C1                  -  subss xmm0,xmm1                    
mgsvtpp.exe+4811700:  F3 0F11 44 08 14            -  movss [rax+rcx+14],xmm0            
mgsvtpp.exe+4811706:  41 83 FD 06                 -  cmp r13d,06                        
mgsvtpp.exe+481170A:  0F8D C4000000               -  jnl 1448117D4                      
mgsvtpp.exe+4811710:  B8 01000000                 -  mov eax,00000001                   
mgsvtpp.exe+4811715:  89 95 90000000              -  mov [rbp+00000090],edx             
mgsvtpp.exe+481171B:  48 89 D9                    -  mov rcx,rbx                        
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
I got eager and wanted to test that skulls code... :oops:

Just wanted you to know:

 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
Not really sure why it's saying that, I'll check it out after work. But for now maybe try and remove all white space around the line to see if in posting some thing got added. That or comment out the 2 lines above it they are mostly for debugging.
 
Jan 29, 2018
38
0
6
TheyCallMeTim13 post_id=31020 time=1517321589 user_id=91 said:
Not really sure why it's saying that, I'll check it out after work. But for now maybe try and remove all white space around the line to see if in posting some thing got added. That or comment out the 2 lines above it they are mostly for debugging.
Removing all the empty spaces also removed the error. ;) Although the code does not seem to work on the Camouflage skulls... but it did work on the mist skulls. :D Have not tried it against the armor skulls yet.
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
glecas post_id=31095 time=1517404092 user_id=12419 said:
Removing all the empty spaces also removed the error. ;) Although the code does not seem to work on the Camouflage skulls... but it did work on the mist skulls. :D Have not tried it against the armor skulls yet.
Ok so the forum post must have added something CE didn't like, but yeah I started a new game and haven't been to focused on advancing yet. And I bet the different skulls have there health drained running in different code, it may not be fare from were this one injects but this is a guess. And I forgot to test it with darts too.
 
Nov 15, 2017
5
0
1
has anyone done work on the "rapid fire" weapon script from the old table? that's another one that hasn't been working for a while

the best part of it was the fact that it influenced fulton usage, making it instant
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
ofcourse post_id=31159 time=1517494251 user_id=10463 said:
has anyone done work on the "rapid fire" weapon script from the old table? that's another one that hasn't been working for a while

the best part of it was the fact that it influenced fulton usage, making it instant
I don't think this is effecting fulton usage, but I may look at some other spots to see what I find. I have been looking for the timer for fulton usage.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/20/18
	Author			: TheyCallMeTim13
	Name			: WeaponFireRateHook

	Weapon Fire Rate Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3FB8522)
define(bytes, F3 0F 10 87 74 02 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobWeaponFireRateHook, mgsvtpp.exe, F3xxxxxxxx74xxF3xxxxxxxxxxxxxxEBxxB6xx0F10xxxxxxxxxxF7xxxxxxxxxxxxxxxxxx74xxF3xxxxxxxxxxxxxxEBxxF3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxx0F28xx0F57xxF3xxxxxxF3xxxxxx0F28xxF3xxxxxxF3xxxxxx0F2Fxx)
define(injWeaponFireRateHook, aobWeaponFireRateHook+30)
assert(injWeaponFireRateHook, bytes)
registerSymbol(injWeaponFireRateHook)

alloc(memWeaponFireRateHook, 0x400, injWeaponFireRateHook)

label(fltWeaponFireRateHook)
registerSymbol(fltWeaponFireRateHook)

label(ptrWeaponFireRateHook)
registerSymbol(ptrWeaponFireRateHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memWeaponFireRateHook:
	fltWeaponFireRateHook:
		dd (float)0.01875
	ptrWeaponFireRateHook:
		dq 0
	n_code:
		mov [ptrWeaponFireRateHook],rdi
		movss xmm0,[fltWeaponFireRateHook]
		// movss [rdi+274],xmm0
	o_code:
		//movss xmm0,[rdi+00000274]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injWeaponFireRateHook:
	jmp n_code
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injWeaponFireRateHook:
	db bytes

unregisterSymbol(injWeaponFireRateHook)

unregisterSymbol(fltWeaponFireRateHook)

unregisterSymbol(ptrWeaponFireRateHook)

dealloc(memWeaponFireRateHook)

{
//// Injection Point: mgsvtpp.exe+3FB8522  -  0000000143FB8522
//// AOB address: 0000000143FB84F2  -  mgsvtpp.exe+3FB84F2
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3FB84C3:  44 89 C3                    -  mov ebx,r8d                        
mgsvtpp.exe+3FB84C6:  48 8B 88 38010000           -  mov rcx,[rax+00000138]             
mgsvtpp.exe+3FB84CD:  48 89 D7                    -  mov rdi,rdx                        
mgsvtpp.exe+3FB84D0:  48 8B 49 60                 -  mov rcx,[rcx+60]                   
mgsvtpp.exe+3FB84D4:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+3FB84D7:  FF 50 08                    -  call qword ptr [rax+08]            
mgsvtpp.exe+3FB84DA:  80 BF EB030000 03           -  cmp byte ptr [rdi+000003EB],03     
mgsvtpp.exe+3FB84E1:  F3 0F10 AF 40030000         -  movss xmm5,[rdi+00000340]          
mgsvtpp.exe+3FB84E9:  48 8B 48 38                 -  mov rcx,[rax+38]                   
mgsvtpp.exe+3FB84ED:  F3 0F10 34 99               -  movss xmm6,[rcx+rbx*4]             
mgsvtpp.exe+3FB84F2:  F3 0F59 70 48               -  mulss xmm6,[rax+48]                <<<--- AOB Starts Here
mgsvtpp.exe+3FB84F7:  74 0B                       -  je 143FB8504                       
mgsvtpp.exe+3FB84F9:  F3 0F10 1D 6B0C0DFE         -  movss xmm3,[14208916C]             [(float)1.0000]
mgsvtpp.exe+3FB8501:  EB 09                       -  jmp 143FB850C                      
mgsvtpp.exe+3FB8503:  B6 F3                       -  mov dh,-0D                         
mgsvtpp.exe+3FB8505:  0F10 1D 90E212FE            -  movups xmm3,[1420E679C]            [(float)0.3000]
mgsvtpp.exe+3FB850C:  F7 87 7C020000 00020000     -  test [rdi+0000027C],0200           
mgsvtpp.exe+3FB8516:  74 0A                       -  je 143FB8522                       
mgsvtpp.exe+3FB8518:  F3 0F10 87 78020000         -  movss xmm0,[rdi+00000278]          
mgsvtpp.exe+3FB8520:  EB 08                       -  jmp 143FB852A                      
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3FB8522:  F3 0F10 87 74020000         -  movss xmm0,[rdi+00000274]          
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3FB852A:  F3 0F10 15 466714FE         -  movss xmm2,[1420FEC78]             [3D4CCCCD]
mgsvtpp.exe+3FB8532:  0F28 CB                     -  movaps xmm1,xmm3                   
mgsvtpp.exe+3FB8535:  0F57 E4                     -  xorps xmm4,xmm4                    
mgsvtpp.exe+3FB8538:  F3 0F5E D0                  -  divss xmm2,xmm0                    
mgsvtpp.exe+3FB853C:  F3 0F59 CD                  -  mulss xmm1,xmm5                    
mgsvtpp.exe+3FB8540:  0F28 C1                     -  movaps xmm0,xmm1                   
mgsvtpp.exe+3FB8543:  F3 0F59 D6                  -  mulss xmm2,xmm6                    
mgsvtpp.exe+3FB8547:  F3 0F5C C2                  -  subss xmm0,xmm2                    
mgsvtpp.exe+3FB854B:  0F2F C4                     -  comiss xmm0,xmm4                   
mgsvtpp.exe+3FB854E:  73 03                       -  jae 143FB8553                      
mgsvtpp.exe+3FB8550:  0F28 D1                     -  movaps xmm2,xmm1                   
mgsvtpp.exe+3FB8553:  0F28 CA                     -  movaps xmm1,xmm2                   
mgsvtpp.exe+3FB8556:  0F28 C3                     -  movaps xmm0,xmm3                   
mgsvtpp.exe+3FB8559:  F3 0F59 CB                  -  mulss xmm1,xmm3                    
mgsvtpp.exe+3FB855D:  F3 0F58 8F 0C030000         -  addss xmm1,[rdi+0000030C]          
mgsvtpp.exe+3FB8565:  F3 0F5C C1                  -  subss xmm0,xmm1                    
mgsvtpp.exe+3FB8569:  0F2F C4                     -  comiss xmm0,xmm4                   
mgsvtpp.exe+3FB856C:  73 03                       -  jae 143FB8571                      
mgsvtpp.exe+3FB856E:  0F28 CB                     -  movaps xmm1,xmm3                   
mgsvtpp.exe+3FB8571:  0F2F EC                     -  comiss xmm5,xmm4                   
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Here is the second part, but it's not completely need if I remember right, but the first couple of shots are slower with out this part.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/20/18
	Author			: TheyCallMeTim13
	Name			: WeaponFireRateStartHook

	Weapon Fire Rate Start Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3F8FE72)
define(bytes, F3 41 0F 10 B6 C4 00 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobWeaponFireRateStartHook, mgsvtpp.exe, 31xx25xxxxxxxx31xx89xxxxxxxxxx41xxxxxxxxxxxxxxxxxxxx74xxF3xxxxxxxxxxxxxxxxEBxxF3xxxxxxxxxxxxxxxx0F57xxF6xxxx74xx0FB7xxxxxxxxxx0FB6xxxxxxxxxx01xxB8xxxxxxxx39xx66xxxxxx89xxxx)
define(injWeaponFireRateStartHook, aobWeaponFireRateStartHook+27)
assert(injWeaponFireRateStartHook, bytes)
registerSymbol(injWeaponFireRateStartHook)

alloc(memWeaponFireRateStartHook, 0x400, injWeaponFireRateStartHook)

label(fltWeaponFireRateStartHook)
registerSymbol(fltWeaponFireRateStartHook)

label(ptrWeaponFireRateStartHook)
registerSymbol(ptrWeaponFireRateStartHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memWeaponFireRateStartHook:
	fltWeaponFireRateStartHook:
		dd (float)0.01875
	ptrWeaponFireRateStartHook:
		dq 0
	n_code:
		mov [ptrWeaponFireRateStartHook],r14
		movss xmm6,[fltWeaponFireRateStartHook]
	o_code:
		// movss xmm6,[r14+000000C4]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injWeaponFireRateStartHook:
	jmp n_code
	nop
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injWeaponFireRateStartHook:
	db bytes

unregisterSymbol(injWeaponFireRateStartHook)

unregisterSymbol(fltWeaponFireRateStartHook)

unregisterSymbol(ptrWeaponFireRateStartHook)

dealloc(memWeaponFireRateStartHook)

{
//// Injection Point: mgsvtpp.exe+3F8FE72  -  0000000143F8FE72
//// AOB address: 0000000143F8FE4B  -  mgsvtpp.exe+3F8FE4B
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3F8FE02:  B8 11000000                 -  mov eax,00000011                   
mgsvtpp.exe+3F8FE07:  0F45 C3                     -  cmovne eax,ebx                     
mgsvtpp.exe+3F8FE0A:  81 8E C8030000 00000040     -  or [rsi+000003C8],40000000         [00000000]
mgsvtpp.exe+3F8FE14:  8B 8E C8030000              -  mov ecx,[rsi+000003C8]             
mgsvtpp.exe+3F8FE1A:  8B 5D B8                    -  mov ebx,[rbp-48]                   
mgsvtpp.exe+3F8FE1D:  88 86 ED030000              -  mov [rsi+000003ED],al              
mgsvtpp.exe+3F8FE23:  0FBA F3 1A                  -  btr ebx,1A                         
mgsvtpp.exe+3F8FE27:  89 9E C0030000              -  mov [rsi+000003C0],ebx             
mgsvtpp.exe+3F8FE2D:  41 8B 86 D0000000           -  mov eax,[r14+000000D0]             
mgsvtpp.exe+3F8FE34:  81 A6 D0030000 FFFFFFFD     -  and [rsi+000003D0],FDFFFFFF        [00000000]
mgsvtpp.exe+3F8FE3E:  C1 E0 0B                    -  shl eax,0B                         
mgsvtpp.exe+3F8FE41:  C7 86 3C030000 000080BF     -  mov [rsi+0000033C],BF800000        [00000000]
mgsvtpp.exe+3F8FE4B:  31 C8                       -  xor eax,ecx                        <<<--- AOB Starts Here
mgsvtpp.exe+3F8FE4D:  25 00000008                 -  and eax,08000000                   [00000000]
mgsvtpp.exe+3F8FE52:  31 C8                       -  xor eax,ecx                        
mgsvtpp.exe+3F8FE54:  89 86 C8030000              -  mov [rsi+000003C8],eax             
mgsvtpp.exe+3F8FE5A:  41 F7 86 CC000000 00020000  -  test [r14+000000CC],0200           
mgsvtpp.exe+3F8FE65:  74 0B                       -  je 143F8FE72                       
mgsvtpp.exe+3F8FE67:  F3 41 0F10 B6 C8000000      -  movss xmm6,[r14+000000C8]          
mgsvtpp.exe+3F8FE70:  EB 09                       -  jmp 143F8FE7B                      
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3F8FE72:  F3 41 0F10 B6 C4000000      -  movss xmm6,[r14+000000C4]          
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3F8FE7B:  0F57 FF                     -  xorps xmm7,xmm7                    
mgsvtpp.exe+3F8FE7E:  F6 C3 01                    -  test bl,01                         
mgsvtpp.exe+3F8FE81:  74 76                       -  je 143F8FEF9                       
mgsvtpp.exe+3F8FE83:  0FB7 86 E0030000            -  movzx eax,word ptr [rsi+000003E0]  
mgsvtpp.exe+3F8FE8A:  0FB6 8E DF030000            -  movzx ecx,byte ptr [rsi+000003DF]  
mgsvtpp.exe+3F8FE91:  01 C1                       -  add ecx,eax                        
mgsvtpp.exe+3F8FE93:  B8 FFFF0000                 -  mov eax,0000FFFF                   
mgsvtpp.exe+3F8FE98:  39 C1                       -  cmp ecx,eax                        
mgsvtpp.exe+3F8FE9A:  66 0F42 C1                  -  cmovb ax,cx                        
mgsvtpp.exe+3F8FE9E:  89 45 B8                    -  mov [rbp-48],eax                   
mgsvtpp.exe+3F8FEA1:  66 89 86 E0030000           -  mov [rsi+000003E0],ax              
mgsvtpp.exe+3F8FEA8:  0FBA E3 19                  -  bt ebx,19                          
mgsvtpp.exe+3F8FEAC:  73 23                       -  jae 143F8FED1                      
mgsvtpp.exe+3F8FEAE:  4C 89 F1                    -  mov rcx,r14                        
mgsvtpp.exe+3F8FEB1:  E8 FA11FEFF                 -  call 143F710B0                     
mgsvtpp.exe+3F8FEB6:  84 C0                       -  test al,al                         
mgsvtpp.exe+3F8FEB8:  74 17                       -  je 143F8FED1                       
mgsvtpp.exe+3F8FEBA:  F3 0F10 0D 52B9C9FE         -  movss xmm1,[142C2B814]             [(float)0.1001]
mgsvtpp.exe+3F8FEC2:  0F28 C6                     -  movaps xmm0,xmm6                   
mgsvtpp.exe+3F8FEC5:  F3 0F5C C1                  -  subss xmm0,xmm1                    
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Just use "fltWeaponFireRateHook" and "fltWeaponFireRateStartHook" to set the fire rate.
 
Jan 29, 2018
38
0
6
This RapidFire code still works for me in v1.12. I have tried it with Assault Rifles, SMG's etc..... Even with single-shot guns like pistols and grenade launchers :) This Rapid Fire code + No Reload + No Recoil, and together with the Serval sniper rifle... lol... WHO or WHAT can stop you!? And spamming those HAIL grenades.... :lol: hehe it's just ridiculous. No Recoil and No Reload is a must in combination with rapid fire. Otherwise you'll just spend more time reloading than shooting :p
Code:
[ENABLE]

aobscanmodule(INJECT,mgsvtpp.exe,F3 0F 11 B6 24 03 00 00) // should be unique
alloc(newmem,$1000,"mgsvtpp.exe"+3F943F4)

label(code)
label(return)

newmem:

code:
  mov [rsi+00000324],(float)-1
  jmp return

INJECT:
  jmp newmem
  nop
  nop
  nop
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db F3 0F 11 B6 24 03 00 00

unregistersymbol(INJECT)
dealloc(newmem)
Credits go to ChrisPC from Cheat The Game.


Now all that's missing for me is NoClip :rolleyes:
 

DeadCraft

Expert Cheater
Apr 4, 2017
58
0
6
No Sleep All Forms, work FOB only gas mines. But crash when player stun/gas you. Need fix
Code:
[ENABLE]

aobscanmodule(INJECT,mgsvtpp.exe,89 46 34 80 7C 24 58 00) // should be unique
alloc(newmem,$1000,"mgsvtpp.exe"+413F4C4)

label(code)
label(return)

newmem:

code:
  xor eax, eax
  mov [rsi+34],eax
  cmp byte ptr [rsp+58],00
  jmp return

INJECT:
  jmp newmem
  nop
  nop
  nop
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db 89 46 34 80 7C 24 58 00

unregistersymbol(INJECT)
dealloc(newmem)
glecas you scrip only work with assault rifle & only rapid fire :?
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
DeadCraft post_id=31217 time=1517539818 user_id=1998 said:
How to about FireRateHook (Rocket Launcher, Pistol) ?
I was thinking my script worked for the dart gun, but may be it's from a script I didn't think was effecting it, I'll have to check it out later.

But I don't set the value to "-1", I really didn't like that to much. So you may need to set "fltWeaponFireRateHook" to "-1" to get the fire rate you remember from the other cheat table, else it's set to "0.01875".

EDIT:
It works for handguns for me, but not the rocket launcher. But I ended up moving the injection point.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 02/02/18
	Author			: TheyCallMeTim13
	Name			: WeaponFireRateHook

	Weapon Fire Rate Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3F8FE72)
define(bytes, F3 41 0F 10 B6 C4 00 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobWeaponFireRateHook, mgsvtpp.exe, 89xxxxxxxxxx41xxxxxxxxxxxxxxxxxxxx74xxF3xxxxxxxxxxxxxxxxEBxxF3xxxxxxxxxxxxxxxx0F57xxF6xxxx74xx0FB7xxxxxxxxxx0FB6xxxxxxxxxx)
define(injWeaponFireRateHook, aobWeaponFireRateHook+1E)
assert(injWeaponFireRateHook, bytes)
registerSymbol(injWeaponFireRateHook)

alloc(memWeaponFireRateHook, 0x400, injWeaponFireRateHook)

label(fltWeaponFireRateHook)
registerSymbol(fltWeaponFireRateHook)

label(ptrWeaponFireRateHook)
registerSymbol(ptrWeaponFireRateHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memWeaponFireRateHook:
	fltWeaponFireRateHook:
		dd (float)0.01875
	align 10
	ptrWeaponFireRateHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrWeaponFireRateHook],r14
		movss xmm6,[fltWeaponFireRateHook]
	o_code:
		// movss xmm6,[r14+000000C4]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injWeaponFireRateHook:
	jmp n_code
	nop
	nop
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injWeaponFireRateHook:
	db bytes

unregisterSymbol(injWeaponFireRateHook)

unregisterSymbol(fltWeaponFireRateHook)

unregisterSymbol(ptrWeaponFireRateHook)

dealloc(memWeaponFireRateHook)

{
//// Injection Point: mgsvtpp.exe+3F8FE72  -  0000000143F8FE72
//// AOB address: 0000000143F8FE54  -  mgsvtpp.exe+3F8FE54
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3F8FE02:  B8 11000000                 -  mov eax,00000011                   
mgsvtpp.exe+3F8FE07:  0F45 C3                     -  cmovne eax,ebx                     
mgsvtpp.exe+3F8FE0A:  81 8E C8030000 00000040     -  or [rsi+000003C8],40000000         [00000000]
mgsvtpp.exe+3F8FE14:  8B 8E C8030000              -  mov ecx,[rsi+000003C8]             
mgsvtpp.exe+3F8FE1A:  8B 5D B8                    -  mov ebx,[rbp-48]                   
mgsvtpp.exe+3F8FE1D:  88 86 ED030000              -  mov [rsi+000003ED],al              
mgsvtpp.exe+3F8FE23:  0FBA F3 1A                  -  btr ebx,1A                         
mgsvtpp.exe+3F8FE27:  89 9E C0030000              -  mov [rsi+000003C0],ebx             
mgsvtpp.exe+3F8FE2D:  41 8B 86 D0000000           -  mov eax,[r14+000000D0]             
mgsvtpp.exe+3F8FE34:  81 A6 D0030000 FFFFFFFD     -  and [rsi+000003D0],FDFFFFFF        [00000000]
mgsvtpp.exe+3F8FE3E:  C1 E0 0B                    -  shl eax,0B                         
mgsvtpp.exe+3F8FE41:  C7 86 3C030000 000080BF     -  mov [rsi+0000033C],BF800000        [00000000]
mgsvtpp.exe+3F8FE4B:  31 C8                       -  xor eax,ecx                        
mgsvtpp.exe+3F8FE4D:  25 00000008                 -  and eax,08000000                   [00000000]
mgsvtpp.exe+3F8FE52:  31 C8                       -  xor eax,ecx                        
mgsvtpp.exe+3F8FE54:  89 86 C8030000              -  mov [rsi+000003C8],eax             <<<--- AOB Starts Here
mgsvtpp.exe+3F8FE5A:  41 F7 86 CC000000 00020000  -  test [r14+000000CC],0200           
mgsvtpp.exe+3F8FE65:  74 0B                       -  je 143F8FE72                       
mgsvtpp.exe+3F8FE67:  F3 41 0F10 B6 C8000000      -  movss xmm6,[r14+000000C8]          
mgsvtpp.exe+3F8FE70:  EB 09                       -  jmp 143F8FE7B                      
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3F8FE72:  F3 41 0F10 B6 C4000000      -  movss xmm6,[r14+000000C4]          
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3F8FE7B:  0F57 FF                     -  xorps xmm7,xmm7                    
mgsvtpp.exe+3F8FE7E:  F6 C3 01                    -  test bl,01                         
mgsvtpp.exe+3F8FE81:  74 76                       -  je 143F8FEF9                       
mgsvtpp.exe+3F8FE83:  0FB7 86 E0030000            -  movzx eax,word ptr [rsi+000003E0]  
mgsvtpp.exe+3F8FE8A:  0FB6 8E DF030000            -  movzx ecx,byte ptr [rsi+000003DF]  
mgsvtpp.exe+3F8FE91:  01 C1                       -  add ecx,eax                        
mgsvtpp.exe+3F8FE93:  B8 FFFF0000                 -  mov eax,0000FFFF                   
mgsvtpp.exe+3F8FE98:  39 C1                       -  cmp ecx,eax                        
mgsvtpp.exe+3F8FE9A:  66 0F42 C1                  -  cmovb ax,cx                        
mgsvtpp.exe+3F8FE9E:  89 45 B8                    -  mov [rbp-48],eax                   
mgsvtpp.exe+3F8FEA1:  66 89 86 E0030000           -  mov [rsi+000003E0],ax              
mgsvtpp.exe+3F8FEA8:  0FBA E3 19                  -  bt ebx,19                          
mgsvtpp.exe+3F8FEAC:  73 23                       -  jae 143F8FED1                      
mgsvtpp.exe+3F8FEAE:  4C 89 F1                    -  mov rcx,r14                        
mgsvtpp.exe+3F8FEB1:  E8 FA11FEFF                 -  call 143F710B0                     
mgsvtpp.exe+3F8FEB6:  84 C0                       -  test al,al                         
mgsvtpp.exe+3F8FEB8:  74 17                       -  je 143F8FED1                       
mgsvtpp.exe+3F8FEBA:  F3 0F10 0D 52B9C9FE         -  movss xmm1,[142C2B814]             [(float)0.1001]
mgsvtpp.exe+3F8FEC2:  0F28 C6                     -  movaps xmm0,xmm6                   
mgsvtpp.exe+3F8FEC5:  F3 0F5C C1                  -  subss xmm0,xmm1                    
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

Here are some other weapon scripts.
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/18/18
	Author			: TheyCallMeTim13
	Name			: WeaponAccuracyHook

	Weapon Accuracy Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3F0B89F)
define(bytes, 0F 29 8F 80 00 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobWeaponAccuracyHook, mgsvtpp.exe, 45xxxxxx0F56xx41xxxxxx0F28xx0FC6xxxx0F5Exx41xxxxxx41xxxxxx0F28xx0FC6xxxx0FC6xxxx41xxxxxx41xxxxxx45xxxxxx0F56xx41xxxxxx41xxxxxx0F59xx0F58xx0F29xxxxxxxxxx48xxxxxx48xxxxE8xxxxxxxx4Cxxxxxxxxxxxxxx49xxxxxx49xxxxxx41xxxxxxxx41xxxxxxxx45xxxxxxxx45xxxxxxxx45xxxxxxxx45xxxxxxxx45xxxxxxxx45xxxxxxxx44xxxxxxxxxx44xxxxxxxxxx)
define(injWeaponAccuracyHook, aobWeaponAccuracyHook+45)
assert(injWeaponAccuracyHook, bytes)
registerSymbol(injWeaponAccuracyHook)

alloc(memWeaponAccuracyHook, 0x400, injWeaponAccuracyHook)

label(ptrWeaponAccuracyHook)
registerSymbol(ptrWeaponAccuracyHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memWeaponAccuracyHook:
	dd (float)0
	ptrWeaponAccuracyHook:
		dq 0
	n_code:
		mov [ptrWeaponAccuracyHook],rdi
		movss xmm1,[memWeaponAccuracyHook]
	o_code:
		movaps [rdi+00000080],xmm1
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injWeaponAccuracyHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injWeaponAccuracyHook:
	db bytes

unregisterSymbol(injWeaponAccuracyHook)

unregisterSymbol(ptrWeaponAccuracyHook)

dealloc(memWeaponAccuracyHook)

{
//// Injection Point: mgsvtpp.exe+3F0B89F  -  0000000143F0B89F
//// AOB address: 0000000143F0B85A  -  mgsvtpp.exe+3F0B85A
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3F0B856:  41 0F54 FC                  -  andps xmm7,xmm12                   
mgsvtpp.exe+3F0B85A:  45 0F55 E6                  -  andnps xmm12,xmm14                 <<<--- AOB Starts Here
mgsvtpp.exe+3F0B85E:  0F56 D9                     -  orps xmm3,xmm1                     
mgsvtpp.exe+3F0B861:  41 0F56 FC                  -  orps xmm7,xmm12                    
mgsvtpp.exe+3F0B865:  0F28 C3                     -  movaps xmm0,xmm3                   
mgsvtpp.exe+3F0B868:  0FC6 C3 00                  -  shufps xmm0,xmm3,00                
mgsvtpp.exe+3F0B86C:  0F5E D8                     -  divps xmm3,xmm0                    
mgsvtpp.exe+3F0B86F:  41 0F28 C3                  -  movaps xmm0,xmm11                  
mgsvtpp.exe+3F0B873:  41 0F55 C1                  -  andnps xmm0,xmm9                   
mgsvtpp.exe+3F0B877:  0F28 CB                     -  movaps xmm1,xmm3                   
mgsvtpp.exe+3F0B87A:  0FC6 CB 55                  -  shufps xmm1,xmm3,55                
mgsvtpp.exe+3F0B87E:  0FC6 DB AA                  -  shufps xmm3,xmm3,-56               
mgsvtpp.exe+3F0B882:  41 0F54 CB                  -  andps xmm1,xmm11                   
mgsvtpp.exe+3F0B886:  41 0F54 DB                  -  andps xmm3,xmm11                   
mgsvtpp.exe+3F0B88A:  45 0F55 DA                  -  andnps xmm11,xmm10                 
mgsvtpp.exe+3F0B88E:  0F56 C8                     -  orps xmm1,xmm0                     
mgsvtpp.exe+3F0B891:  41 0F56 DB                  -  orps xmm3,xmm11                    
mgsvtpp.exe+3F0B895:  41 0F59 DD                  -  mulps xmm3,xmm13                   
mgsvtpp.exe+3F0B899:  0F59 CF                     -  mulps xmm1,xmm7                    
mgsvtpp.exe+3F0B89C:  0F58 CB                     -  addps xmm1,xmm3                    
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3F0B89F:  0F29 8F 80000000            -  movaps [rdi+00000080],xmm1         
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3F0B8A6:  48 8B 4D A7                 -  mov rcx,[rbp-59]                   
mgsvtpp.exe+3F0B8AA:  48 31 E1                    -  xor rcx,rsp                        
mgsvtpp.exe+3F0B8AD:  E8 4E3DAA00                 -  call 1449AF600                     
mgsvtpp.exe+3F0B8B2:  4C 8D 9C 24 00010000        -  lea r11,[rsp+00000100]             
mgsvtpp.exe+3F0B8BA:  49 8B 5B 18                 -  mov rbx,[r11+18]                   
mgsvtpp.exe+3F0B8BE:  49 8B 7B 20                 -  mov rdi,[r11+20]                   
mgsvtpp.exe+3F0B8C2:  41 0F28 73 F0               -  movaps xmm6,[r11-10]               
mgsvtpp.exe+3F0B8C7:  41 0F28 7B E0               -  movaps xmm7,[r11-20]               
mgsvtpp.exe+3F0B8CC:  45 0F28 43 D0               -  movaps xmm8,[r11-30]               
mgsvtpp.exe+3F0B8D1:  45 0F28 4B C0               -  movaps xmm9,[r11-40]               
mgsvtpp.exe+3F0B8D6:  45 0F28 53 B0               -  movaps xmm10,[r11-50]              
mgsvtpp.exe+3F0B8DB:  45 0F28 5B A0               -  movaps xmm11,[r11-60]              
mgsvtpp.exe+3F0B8E0:  45 0F28 63 90               -  movaps xmm12,[r11-70]              
mgsvtpp.exe+3F0B8E5:  45 0F28 6B 80               -  movaps xmm13,[r11-80]              
mgsvtpp.exe+3F0B8EA:  44 0F28 74 24 70            -  movaps xmm14,[rsp+70]              
mgsvtpp.exe+3F0B8F0:  44 0F28 7C 24 60            -  movaps xmm15,[rsp+60]              
mgsvtpp.exe+3F0B8F6:  4C 89 DC                    -  mov rsp,r11                        
mgsvtpp.exe+3F0B8F9:  5D                          -  pop rbp                            
mgsvtpp.exe+3F0B8FA:  C3                          -  ret                                
mgsvtpp.exe+3F0B8FB:  1C 29                       -  sbb al,29                          
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/18/18
	Author			: TheyCallMeTim13
	Name			: WeaponAccuracy2Hook

	Weapon Accuracy 2 Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3F0C2F8)
define(bytes, F3 41 0F 11 70 38)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobWeaponAccuracy2Hook, mgsvtpp.exe, 0F59xxF3xxxxxxxxF3xxxxxx0F28xxF3xxxxxx0F2Fxx73xx0F28xxF3xxxxxxxxxxxxxxF3xxxxxxF3xxxxxxxxxxxxxxxx0F28xxF3xxxxxx0F2Fxx72xxF3xxxxxxxxxxEBxx26xxF3xxxxxxxxxx0F28xxxxxx0F28xxxxxx44xxxxxxxxxx44xxxxxxxx)
define(injWeaponAccuracy2Hook, aobWeaponAccuracy2Hook+3C)
assert(injWeaponAccuracy2Hook, bytes)
registerSymbol(injWeaponAccuracy2Hook)

alloc(memWeaponAccuracy2Hook, 0x400, injWeaponAccuracy2Hook)

label(ptrWeaponAccuracy2Hook)
registerSymbol(ptrWeaponAccuracy2Hook)

label(n_code)
label(o_code)
label(exit)
label(return)

memWeaponAccuracy2Hook:
	dd (float)0
	ptrWeaponAccuracy2Hook:
		dq 0
	n_code:
		mov [ptrWeaponAccuracy2Hook],r8
		movss xmm6,[memWeaponAccuracy2Hook]
		mov qword ptr [r8+38],0
		mov qword ptr [r8+70],0
		mov qword ptr [r8+98],0
	o_code:
		movss [r8+38],xmm6
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injWeaponAccuracy2Hook:
	jmp n_code
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injWeaponAccuracy2Hook:
	db bytes

unregisterSymbol(injWeaponAccuracy2Hook)

unregisterSymbol(ptrWeaponAccuracy2Hook)

dealloc(memWeaponAccuracy2Hook)

{
//// Injection Point: mgsvtpp.exe+3F0C2F8  -  0000000143F0C2F8
//// AOB address: 0000000143F0C2BC  -  mgsvtpp.exe+3F0C2BC
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3F0C2AA:  F3 0F58 D8                  -  addss xmm3,xmm0                    
mgsvtpp.exe+3F0C2AE:  0F28 C1                     -  movaps xmm0,xmm1                   
mgsvtpp.exe+3F0C2B1:  F3 0F5C C3                  -  subss xmm0,xmm3                    
mgsvtpp.exe+3F0C2B5:  EB 18                       -  jmp 143F0C2CF                      
mgsvtpp.exe+3F0C2B7:  BA 0F28D8F3                 -  mov edx,F3D8280F                   [00000000]
mgsvtpp.exe+3F0C2BC:  0F59 EF                     -  mulps xmm5,xmm7                    <<<--- AOB Starts Here
mgsvtpp.exe+3F0C2BF:  F3 41 0F59 EA               -  mulss xmm5,xmm10                   
mgsvtpp.exe+3F0C2C4:  F3 0F5C DD                  -  subss xmm3,xmm5                    
mgsvtpp.exe+3F0C2C8:  0F28 C3                     -  movaps xmm0,xmm3                   
mgsvtpp.exe+3F0C2CB:  F3 0F5C C1                  -  subss xmm0,xmm1                    
mgsvtpp.exe+3F0C2CF:  0F2F C4                     -  comiss xmm0,xmm4                   
mgsvtpp.exe+3F0C2D2:  73 03                       -  jae 143F0C2D7                      
mgsvtpp.exe+3F0C2D4:  0F28 D9                     -  movaps xmm3,xmm1                   
mgsvtpp.exe+3F0C2D7:  F3 0F10 0D B5F2D1FE         -  movss xmm1,[142C2B594]             [(float)0.0873]
mgsvtpp.exe+3F0C2DF:  F3 0F58 F3                  -  addss xmm6,xmm3                    
mgsvtpp.exe+3F0C2E3:  F3 41 0F11 98 9C000000      -  movss [r8+0000009C],xmm3           
mgsvtpp.exe+3F0C2EC:  0F28 C1                     -  movaps xmm0,xmm1                   
mgsvtpp.exe+3F0C2EF:  F3 0F5C C6                  -  subss xmm0,xmm6                    
mgsvtpp.exe+3F0C2F3:  0F2F C4                     -  comiss xmm0,xmm4                   
mgsvtpp.exe+3F0C2F6:  72 0A                       -  jb 143F0C302                       
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3F0C2F8:  F3 41 0F11 70 38            -  movss [r8+38],xmm6                 
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3F0C2FE:  EB 08                       -  jmp 143F0C308                      
mgsvtpp.exe+3F0C300:  26 9D                       -  popfq                              
mgsvtpp.exe+3F0C302:  F3 41 0F11 48 38            -  movss [r8+38],xmm1                 
mgsvtpp.exe+3F0C308:  0F28 74 24 30               -  movaps xmm6,[rsp+30]               
mgsvtpp.exe+3F0C30D:  0F28 7C 24 20               -  movaps xmm7,[rsp+20]               
mgsvtpp.exe+3F0C312:  44 0F28 44 24 10            -  movaps xmm8,[rsp+10]               
mgsvtpp.exe+3F0C318:  44 0F28 14 24               -  movaps xmm10,[rsp]                 
mgsvtpp.exe+3F0C31D:  48 83 C4 48                 -  add rsp,48                         
mgsvtpp.exe+3F0C321:  C3                          -  ret                                
mgsvtpp.exe+3F0C322:  CE                          -  into                               
mgsvtpp.exe+3F0C323:  18 2E                       -  sbb [rsi],ch                       
mgsvtpp.exe+3F0C325:  83 7E 1B D1                 -  cmp dword ptr [rsi+1B],-2F         
mgsvtpp.exe+3F0C329:  90                          -  nop                                
mgsvtpp.exe+3F0C32A:  CC                          -  int 3                              
:  p                           -                                     
mgsvtpp.exe+3F0C330:  89 D0                       -  mov eax,edx                        
mgsvtpp.exe+3F0C332:  85 D2                       -  test edx,edx                       
mgsvtpp.exe+3F0C334:  79 02                       -  jns 143F0C338                      
mgsvtpp.exe+3F0C336:  F7 D8                       -  neg eax                            
mgsvtpp.exe+3F0C338:  F3 0F10 15 2CCE17FE         -  movss xmm2,[14208916C]             [(float)1.0000]
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/16/18
	Author			: TheyCallMeTim13
	Name			: AmmoClipDecHook

	Ammo Clip Dec Hook
}

{$STRICT}

define(address, mgsvtpp.exe+3DF3E51)
define(bytes1, 66 44 89 1C 48)
define(bytes2, 66 44 89 5C 48 02)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobAmmoClipDecHook, mgsvtpp.exe, 44xxxxxxxxxx49xxxxxx48xxxxxx45xxxx74xx66xxxxxxxxxxEBxx66xxxxxxxx49xxxxxx45xxxx48xxxxFFxxxxxxxxxx)
define(injAmmoClipDecHook, aobAmmoClipDecHook+1B)
assert(injAmmoClipDecHook, bytes1)
registerSymbol(injAmmoClipDecHook)

define(injAmmoClipDecHook2, injAmmoClipDecHook-8)
assert(injAmmoClipDecHook2, bytes2)
registerSymbol(injAmmoClipDecHook2)

alloc(memAmmoClipDecHook, 0x400, injAmmoClipDecHook)

label(ptrAmmoClipDecHook)
registerSymbol(ptrAmmoClipDecHook)

label(n_code1)
label(o_code1)
label(exit1)
label(return1)

label(n_code2)
label(o_code2)
label(exit2)
label(return2)

memAmmoClipDecHook:
	ptrAmmoClipDecHook:
		dq 0
		dq 0

	n_code1:
		pushfq
		push rsi
		lea rsi,[rax+rcx*2]
		mov [ptrAmmoClipDecHook],rsi
		pop rsi
		cmp [rax+rcx*2],r11w
		jge exit1
	o_code1:
		mov [rax+rcx*2],r11w
	exit1:
		popfq
		jmp return1

	n_code2:
		pushfq
		push rsi
		lea rsi,[rax+rcx*2+02]
		mov [ptrAmmoClipDecHook+8],rsi
		pop rsi
		cmp [rax+rcx*2+02],r11w
		jge exit2
	o_code2:
		mov [rax+rcx*2+02],r11w
	exit2:
		popfq
		jmp return2


////
//// ---------- Injection Points ----------
injAmmoClipDecHook:
	jmp n_code1
	return1:

injAmmoClipDecHook2:
	jmp n_code2
	nop
	return2:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Points ----------
injAmmoClipDecHook:
	db bytes1

injAmmoClipDecHook2:
	db bytes2

unregisterSymbol(injAmmoClipDecHook)
unregisterSymbol(injAmmoClipDecHook2)

unregisterSymbol(ptrAmmoClipDecHook)

dealloc(memAmmoClipDecHook)

{
//// Injection Point: mgsvtpp.exe+3DF3E51  -  0000000143DF3E51
//// AOB address: 0000000143DF3E36  -  mgsvtpp.exe+3DF3E36
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+3DF3E10:  44 01 C1                    -  add ecx,r8d                        
mgsvtpp.exe+3DF3E13:  8B 14 88                    -  mov edx,[rax+rcx*4]                
mgsvtpp.exe+3DF3E16:  89 D0                       -  mov eax,edx                        
mgsvtpp.exe+3DF3E18:  83 E0 1F                    -  and eax,1F                         
mgsvtpp.exe+3DF3E1B:  83 F8 09                    -  cmp eax,09                         
mgsvtpp.exe+3DF3E1E:  75 0F                       -  jne 143DF3E2F                      
mgsvtpp.exe+3DF3E20:  49 8B 42 50                 -  mov rax,[r10+50]                   
mgsvtpp.exe+3DF3E24:  48 8D 0C 49                 -  lea rcx,[rcx+rcx*2]                
mgsvtpp.exe+3DF3E28:  66 44 89 0C 48              -  mov [rax+rcx*2],r9w                
mgsvtpp.exe+3DF3E2D:  C3                          -  ret                                
mgsvtpp.exe+3DF3E2E:  00 FF                       -  add bh,bh                          
mgsvtpp.exe+3DF3E30:  C8 83F8 07                  -  enter F883,07                      
mgsvtpp.exe+3DF3E34:  77 30                       -  ja 143DF3E66                       
mgsvtpp.exe+3DF3E36:  44 0FB6 4C 24 28            -  movzx r9d,byte ptr [rsp+28]        <<<--- AOB Starts Here
mgsvtpp.exe+3DF3E3C:  49 8B 42 50                 -  mov rax,[r10+50]                   
mgsvtpp.exe+3DF3E40:  48 8D 0C 49                 -  lea rcx,[rcx+rcx*2]                
mgsvtpp.exe+3DF3E44:  45 84 C9                    -  test r9l,r9l                       
mgsvtpp.exe+3DF3E47:  74 08                       -  je 143DF3E51                       
mgsvtpp.exe+3DF3E49:  66 44 89 5C 48 02           -  mov [rax+rcx*2+02],r11w      <<--- code 2 : underbarrel      
mgsvtpp.exe+3DF3E4F:  EB 05                       -  jmp 143DF3E56                      
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+3DF3E51:  66 44 89 1C 48              -  mov [rax+rcx*2],r11w               
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+3DF3E56:  49 8B 4A 58                 -  mov rcx,[r10+58]                   
mgsvtpp.exe+3DF3E5A:  45 89 D8                    -  mov r8d,r11d                       
mgsvtpp.exe+3DF3E5D:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+3DF3E60:  FF A0 F8000000              -  jmp qword ptr [rax+000000F8]       
mgsvtpp.exe+3DF3E66:  F3 C3                       -  repe ret                           
mgsvtpp.exe+3DF3E68:  40 CC                       -  int 3                              
mgsvtpp.exe+3DF3E6A:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E6B:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E6C:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E6D:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E6E:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E6F:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E70:  CC                          -  int 3                              
mgsvtpp.exe+3DF3E71:  66 66 66 66 66 66 2E 0F1F 84 00 00000000   -  nop cs:[rax+rax+00000000]          
mgsvtpp.exe+3DF3E80:  48 63 C2                    -  movsxd  rax,edx                    
mgsvtpp.exe+3DF3E83:  4C 8D 04 00                 -  lea r8,[rax+rax]                   
mgsvtpp.exe+3DF3E87:  48 8B 81 A0000000           -  mov rax,[rcx+000000A0]             
mgsvtpp.exe+3DF3E8E:  42 0FB7 14 00               -  movzx edx,word ptr [rax+r8]        
mgsvtpp.exe+3DF3E93:  48 8B 81 98000000           -  mov rax,[rcx+00000098]             
mgsvtpp.exe+3DF3E9A:  41 39 D1                    -  cmp r9d,edx                        
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
 

UnsafeBot

What is cheating?
Feb 9, 2018
2
0
1
Hello I was if there was a currently working table since the latest update and if so where I could find it? I have just gotten back into playing MGSV TPP and there has been so much additional content added but the grind for the high level staff and resources is very tiresome, I've seen videos on editing staff and increasing resources but they are years out of date, as well as their tables. Any help would be greatly appreciated!
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
I was thinking the table on this thread had a working Staff editor (unless the game was updated in the last day or so), some stuff is out dated but some updated scripts have been posted. As for a full table I know at lest a quarter to half of my table is from the OP's table, so I would need to talk to the table maker first. But you should be able to make a good table using the OP's table and this thread. And if you need any help updating some thing, just ask here.
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
zufield post_id=32037 time=1518228027 user_id=6475 said:
The staff editor in the OP doesn't work.
Here try this one:
Code:
{
	Process			: mgsvtpp.exe  -  (x64)
	Module			: mgsvtpp.exe
	Game Title		: Metal Gear Solid 5 Phantom Pain
	Game Version	: 1.0.12.0
	CE Version		: 6.7
	Script Version	: 0.0.1
	Date			: 01/28/18
	Author			: TheyCallMeTim13
	Name			: StaffHook

	Staff Hook
}

{$STRICT}

define(address, mgsvtpp.exe+4635FBC)
define(bytes, 44 8B 0C 90 EB 29)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobStaffHook, mgsvtpp.exe, 0FB7xxxxxxxxxxxx74xx48xxxxxxxxxxxx44xxxxxx48xxxxxxxxxxxx44xxxxxxEBxx26xxxxB1xx7Fxxxx)
define(injStaffHook, aobStaffHook+1C)
assert(injStaffHook, bytes)
registerSymbol(injStaffHook)

alloc(memStaffHook, 0x400, injStaffHook)

label(ptrStaffHook)
registerSymbol(ptrStaffHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memStaffHook:
	ptrStaffHook:
		dq 0
		dq 0
		dq 0
		dq 0
	n_code:
		push rax
		mov rax,[rcx+00009C80]//Seeds 99D0
		lea rax,[rax+rdx*4]
		mov [ptrStaffHook],rax

		mov rax,[rcx+00009C78]//Headers 99C8
		lea rax,[rax+rdx*4]
		mov [ptrStaffHook+8],rax

		mov rax,[rcx+00009C88]//Status Sync 99D8
		lea rax,[rax+rdx*4]
		mov [ptrStaffHook+10],rax

		mov rax,[rcx+00009C90]//Status No Sync 99E0
		lea rax,[rax+rdx*2]
		mov [ptrStaffHook+18],rax

		pop rax
	o_code:
		mov r9d,[rax+rdx*4]
		reassemble(injStaffHook+4) // jmp 144635FEB
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injStaffHook:
	jmp n_code
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injStaffHook:
	db bytes

unregisterSymbol(injStaffHook)

unregisterSymbol(ptrStaffHook)

dealloc(memStaffHook)

{
//// Injection Point: mgsvtpp.exe+4635FBC  -  0000000144635FBC
//// AOB address: 0000000144635FA0  -  mgsvtpp.exe+4635FA0
//// Process: mgsvtpp.exe  -  0000000140000000
//// Module: mgsvtpp.exe  -  0000000140000000
//// Module Size: 0000000008434000
mgsvtpp.exe+4635F66:  46 8B 0C 88                 -  mov r9d,[rax+r9*4]                 
mgsvtpp.exe+4635F6A:  EB 7F                       -  jmp 144635FEB                      
mgsvtpp.exe+4635F6C:  00 3C 0F                    -  add [rdi+rcx],bh                   
mgsvtpp.exe+4635F6F:  75 25                       -  jne 144635F96                      
mgsvtpp.exe+4635F71:  41 0FB7 C0                  -  movzx eax,r8w                      
mgsvtpp.exe+4635F75:  41 B6 01                    -  mov r14l,01                        
mgsvtpp.exe+4635F78:  48 01 C0                    -  add rax,rax                        
mgsvtpp.exe+4635F7B:  44 8B 94 C1 44230000        -  mov r10d,[rcx+rax*8+00002344]      
mgsvtpp.exe+4635F83:  44 8B 8C C1 48230000        -  mov r9d,[rcx+rax*8+00002348]       
mgsvtpp.exe+4635F8B:  EB 5E                       -  jmp 144635FEB                      
mgsvtpp.exe+4635F8D:  04 31                       -  add al,31                          
mgsvtpp.exe+4635F8F:  05 356EB2C6                 -  add eax,C6B26E35                   [00000000]
mgsvtpp.exe+4635F94:  DE 9A 488B4950              -  ficomp [rdx+50498B48]              
mgsvtpp.exe+4635F9A:  3C 0D                       -  cmp al,0D                          
mgsvtpp.exe+4635F9C:  41 0FB7 C0                  -  movzx eax,r8w                      
mgsvtpp.exe+4635FA0:  0FB7 94 47 10010000         -  movzx edx,word ptr [rdi+rax*2+00000110]<<<--- AOB Starts Here
mgsvtpp.exe+4635FA8:  74 20                       -  je 144635FCA                       
mgsvtpp.exe+4635FAA:  48 8B 81 789C0000           -  mov rax,[rcx+00009C78]             
mgsvtpp.exe+4635FB1:  44 8B 14 90                 -  mov r10d,[rax+rdx*4]               
mgsvtpp.exe+4635FB5:  48 8B 81 809C0000           -  mov rax,[rcx+00009C80]             
////  INJECTING START  ----------------------------------------------------------
mgsvtpp.exe+4635FBC:  44 8B 0C 90                 -  mov r9d,[rax+rdx*4]                
mgsvtpp.exe+4635FC0:  EB 29                       -  jmp 144635FEB                      
////  INJECTING END  ----------------------------------------------------------
mgsvtpp.exe+4635FC2:  26 F4                       -  hlt                                
mgsvtpp.exe+4635FC4:  06                          -  push es                            
mgsvtpp.exe+4635FC5:  B1 22                       -  mov cl,22                          
mgsvtpp.exe+4635FC7:  7F 4F                       -  jg 144636018                       
mgsvtpp.exe+4635FC9:  CB                          -  ret                                
mgsvtpp.exe+4635FCA:  48 8B 81 209E0000           -  mov rax,[rcx+00009E20]             
mgsvtpp.exe+4635FD1:  44 8B 14 90                 -  mov r10d,[rax+rdx*4]               
mgsvtpp.exe+4635FD5:  48 8B 81 289E0000           -  mov rax,[rcx+00009E28]             
mgsvtpp.exe+4635FDC:  44 8B 0C 90                 -  mov r9d,[rax+rdx*4]                
mgsvtpp.exe+4635FE0:  48 8B 81 409E0000           -  mov rax,[rcx+00009E40]             
mgsvtpp.exe+4635FE7:  0FB6 2C 02                  -  movzx ebp,byte ptr [rdx+rax]       
mgsvtpp.exe+4635FEB:  48 8B 4F 50                 -  mov rcx,[rdi+50]                   
mgsvtpp.exe+4635FEF:  48 8D 54 24 50              -  lea rdx,[rsp+50]                   
mgsvtpp.exe+4635FF4:  45 89 D0                    -  mov r8d,r10d                       
mgsvtpp.exe+4635FF7:  48 8B 01                    -  mov rax,[rcx]                      
mgsvtpp.exe+4635FFA:  FF 90 E8030000              -  call qword ptr [rax+000003E8]      
mgsvtpp.exe+4636000:  48 8B 4F 28                 -  mov rcx,[rdi+28]                   
mgsvtpp.exe+4636004:  4C 8B 44 24 50              -  mov r8,[rsp+50]                    
mgsvtpp.exe+4636009:  48 8B 01                    -  mov rax,[rcx]                      
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}
Code:
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>59699</ID>
      <Description>"Seed"</Description>
      <DropDownList DisplayValueAsItem="1">F0E1C000:Amber Fox
FD4E2000:Code Talker
FD866000:Code Talker
F36E2000:Crimson Canine
F6000000:Emerald Hound
E35EB000:Eye
E49B0000:Finger
F417F000:Garnet Canine
EFB4A000:Gold Fox
6E545000:Hideo
6E545800:Hideo
FC154000:Huey
FCA28000:Huey
F2000000:Ivory Skull
F9000000:Miller
FA5D0000:Miller
FA7C5000:Miller
FA987000:Miller
FAA1E800:Miller
FAF62000:Miller
F9000000:Ocelot
F90A6000:Ocelot
F9AE8800:Ocelot
F9ED2000:Ocelot
FB19E000:Quiet
FB2B9800:Quiet
FBB76000:Quiet
4EBA2800:Rat
11B23000:Silent Basilisk
F1000000:Silver Skull
F7000000:Snake
F8000000:Snake
F5000000:Viridian Hound
6F3B7800:Ziang Tan
</DropDownList>
      <ShowAsHex>1</ShowAsHex>
      <VariableType>4 Bytes</VariableType>
      <Address>ptrStaffHook</Address>
      <Offsets>
        <Offset>0</Offset>
      </Offsets>
    </CheatEntry>
    <CheatEntry>
      <ID>59700</ID>
      <Description>"Header"</Description>
      <DropDownList DisplayValueAsItem="1">2AD01F80:Amber Fox
0007DF80:Code Talker
2AB01F80:Crimson Canine
2A801F80:Emerald Hound
27301F80:Eye
27401F80:Finger
0006DF80:Huey
2AA01F80:Garnet Canine
2AC01F80:Gold Fox
26E85F80:Hideo
2AF01F80:Ivory Skull
00089F80:Miller
2A401F80:Miller
00087F80:Ocelot
2A501F80:Ocelot
0001BF80:Quiet
46985F80:Rat
40085F80:Silent Basilisk
2AE01F80:Silver Skull
2A601F80:Snake
2A701F80:Snake
2A901F80:Viridian Hound
A6D15F80:Ziang Tan
</DropDownList>
      <ShowAsHex>1</ShowAsHex>
      <VariableType>4 Bytes</VariableType>
      <Address>ptrStaffHook+8</Address>
      <Offsets>
        <Offset>0</Offset>
      </Offsets>
    </CheatEntry>
    <CheatEntry>
      <ID>59701</ID>
      <Description>"Status Sync"</Description>
      <ShowAsHex>1</ShowAsHex>
      <VariableType>4 Bytes</VariableType>
      <Address>ptrStaffHook+10</Address>
      <Offsets>
        <Offset>0</Offset>
      </Offsets>
    </CheatEntry>
    <CheatEntry>
      <ID>59702</ID>
      <Description>"Status No Sync"</Description>
      <ShowAsHex>1</ShowAsHex>
      <VariableType>2 Bytes</VariableType>
      <Address>ptrStaffHook+18</Address>
      <Offsets>
        <Offset>0</Offset>
      </Offsets>
    </CheatEntry>
    <CheatEntry>
      <ID>59703</ID>
      <Description>"_[  In-Depth  ]_"</Description>
      <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
      <LastState Value="" RealAddress="00000000"/>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>59704</ID>
          <Description>"_[  Seed  ]_"</Description>
          <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
          <LastState Value="" RealAddress="00000000"/>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>59705</ID>
              <Description>"???"</Description>
              <Options moHideChildren="1" moAllowManualCollapseAndExpand="1"/>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Byte</VariableType>
              <Address>ptrStaffHook</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59706</ID>
              <Description>"???"</Description>
              <Options moHideChildren="1" moAllowManualCollapseAndExpand="1"/>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Byte</VariableType>
              <Address>ptrStaffHook</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
              <CheatEntries>
                <CheatEntry>
                  <ID>59707</ID>
                  <Description>"Face"</Description>
                  <ShowAsHex>1</ShowAsHex>
                  <VariableType>Binary</VariableType>
                  <BitStart>0</BitStart>
                  <BitLength>3</BitLength>
                  <ShowAsBinary>0</ShowAsBinary>
                  <Address>ptrStaffHook</Address>
                  <Offsets>
                    <Offset>1</Offset>
                  </Offsets>
                </CheatEntry>
                <CheatEntry>
                  <ID>59708</ID>
                  <Description>"Reroll Name"</Description>
                  <ShowAsHex>1</ShowAsHex>
                  <VariableType>Binary</VariableType>
                  <BitStart>1</BitStart>
                  <BitLength>2</BitLength>
                  <ShowAsBinary>0</ShowAsBinary>
                  <Address>ptrStaffHook</Address>
                  <Offsets>
                    <Offset>1</Offset>
                  </Offsets>
                </CheatEntry>
                <CheatEntry>
                  <ID>59709</ID>
                  <Description>"???"</Description>
                  <ShowAsHex>1</ShowAsHex>
                  <VariableType>Binary</VariableType>
                  <BitStart>3</BitStart>
                  <BitLength>5</BitLength>
                  <ShowAsBinary>0</ShowAsBinary>
                  <Address>ptrStaffHook</Address>
                  <Offsets>
                    <Offset>1</Offset>
                  </Offsets>
                </CheatEntry>
              </CheatEntries>
            </CheatEntry>
            <CheatEntry>
              <ID>59710</ID>
              <Description>"???"</Description>
              <Options moHideChildren="1" moAllowManualCollapseAndExpand="1"/>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Byte</VariableType>
              <Address>ptrStaffHook</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59711</ID>
              <Description>"Name if Special"</Description>
              <Options moHideChildren="1" moAllowManualCollapseAndExpand="1"/>
              <DropDownList DisplayValueAsItem="1">00:Jade Tree Frog
01:Sly Harrier
02:White Mastodon
03:Brass Armadillo
04:Pouncing Wallaby
05:Dire Barracuda
06:Sadistic Mastiff
07:Roaring Hedgehog
08:Night Crocodile
09:Jumping Harrier
0A:Blue Mastodon
0B:Devil Chameleon
0C:Jade Centipede
0D:Shining Kangaroo
0E:Ochre Capybara
0F:Raving Mongoose
10:Silent Mastodon
11:Silent Basilisk
12:Malak
13:Wild Chameleon
14:Silent Crocodile
15:Doom Kangaroo
16:Grizzly Squirrel
17:Ashen Stallion
18:Brass Squirrel
19:Howling Capybara
1A:Sunny Buzzard
1B:Sunny Platypus
1C:Crying Harrier
1D:Cunning Mastiff
1E:Biting Barracuda
1F:Greedy Armadillo
20:Spying Harrier
21:Rumble Tarantula
22:Stone Mastodon
23:Dire Crocodile
24:Roaring Stallion
25:Panzer Buffalo
26:Rampant Buzzard
27:Gray Stallion
28:Mosquito
29:Mad Centipede
2A:Panzer Mongoose
2B:Raving Harrier
2C:Viscount
2D:Hunting Harrier
2E:Growling Harrier
2F:Hungry Barracuda
30:Sadistic Buzzard
31:Death Platypus
32:Flaming Basilisk
33:Green Tarantula
34:Bullet Platypus
35:Devil Squirrel
36:Sly Mastodon
37:Sunny Mongoose
38:Wild Platypus
39:Gray Salamander
3A:Vile Buffalo
3B:Copper Stallion
3C:Blue Kangaroo
3D:Dire Capybara
3E:Crimson Kangaroo
3F:Crystal Squirrel
40:Cunning Stallion
41:Laughing Wallaby
42:Night Wallaby
43:Bullet Armadillo
44:Jade Capybara
45:Komodo Dragon
46:Jackal
47:Parrot
48:Falcon
49:Ostrich
4A:Raven
4B:Eagle Ray
4C:Viper
4D:Elephant
4E:Rat
4F:Gray Mongoose
50:Steel Mongoose
51:Greedy Barracuda
52:Blazing Buzzard
53:Hungry Stallion
54:Copper Buzzard
55:Running Harrier
56:Stalking Wallaby
57:Howling Stallion
58:Steel Kangaroo
59:Spunky Sturgeon
5A:Bitter Platypus
5B:Ochre Harrier
5C:Bullet Harrier
5D:Blazing Stallion
5E:Black Harrier
5F:Spunky Crocodile
60:Killer Hedgehog
61:Ashen Platypus
62:Pouncing Buzzard
63:Killer Squirrel
64:Poison Buffalo
65:Bloody Crocodile
66:Pouncing Harrier
67:Dizzy Capybara
68:Brutal Centipede
69:Doom Centipede
6A:Running Basilisk
6B:Goblin Squirrel
6C:Vampire Platypus
6D:Sky Centipede
6E:Hideo
6F:Ziang Tan
70:"???"
71:"???"
72:"???"
73:"???"
74:"???"
75:"???"
76:"???"
77:"???"
78:"???"
79:"???"
7A:"???"
7B:"???"
7C:"???"
7D:"???"
7E:"???"
7F:"???"
80:"???"
81:"???"
82:"???"
83:"???"
84:"???"
85:"???"
86:"???"
87:"???"
88:"???"
89:"???"
8A:"???"
8B:"???"
8C:"???"
8D:"???"
8E:"???"
8F:"???"
90:"???"
91:"???"
92:"???"
93:"???"
94:"???"
95:"???"
96:"???"
97:"???"
98:"???"
99:"???"
9A:"???"
9B:"???"
9C:Doom Squirrel
9D:"???"
9E:"???"
9F:"???"
A0:"???"
A1:"???"
A2:"???"
A3:"???"
A4:"???"
A5:"???"
A6:Dire Armadillo
A7:"???"
A8:"???"
A9:"???"
AA:"???"
AB:"???"
AC:"???"
AD:"???"
AE:"???"
AF:"???"
B0:"???"
B1:Cunning Mongoose
B2:"???"
B3:Dancing Mongoose
B4:"???"
B5:"???"
B6:"???"
B7:"???"
B8:Iron Harrier
B9:Lonely Buffalo
BA:Dizzy Centipede
BB:Hungry Squirrel
BC:Flaming Buffalo
BD:Running Mongoose
BE:Frantic Squirrel
BF:Blazing Mastodon
C0:Biting Tree Frog
C1:Gray Chameleon
C2:Razor Hedgehog
C3:Howling Platypus
C4:Blue Salamander
C5:Creeping Buzzard
C6:Glacier Mongoose
C7:Spunky Platypus
C8:"???"
C9:"???"
CA:"???"
CB:"???"
CC:"???"
CD:"???"
CE:"???"
CF:"???"
D0:"???"
D1:Hulking Mastiff
D2:Night Sturgeon
D3:Raging Buzzard
D4:Killer Stallion
D5:Brutal Tree Frog
D6:Bastard Harrier
D7:Green Sturgeon
D8:Scowling Wallaby
D9:Green Tree Frog
DA:Fire Kangaroo
DB:Ochre Chameleon
DC:Grizzly Hedgehog
DD:Hungry Crocodile
DE:Wild Harrier
DF:Blue Armadillo
E0:Gray Wallaby
E1:Blue Chameleon
E2:Midnight Mastiff
E3:Eye
E4:Finger
E5:Frigid Mongoose
E6:Hunting Stallion
E7:Assassin Harrier
E8:Mad Wallaby
E9:Wild Stallion
EA:Night Tree Frog
EB:Pirate Capybara
EC:Roaring Capybara
ED:Bitter Centipede
EE:Crying Sturgeon
EF:Gold Fox
F0:Amber Fox
F1:Silver Skull
F2:Ivory Skull
F3:Crimson Canine
F4:Garnet Canine
F5:Viridian Hound
F6:Emerald Hound
F7:Snake
F8:Snake
F9:Ocelot
FA:Miller
FB:Quiet
FC:Huey
FD:Code Talker
FE:Jade Tree Frog
FF:Jade Tree Frog
</DropDownList>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Byte</VariableType>
              <Address>ptrStaffHook</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
              <Hotkeys>
                <Hotkey>
                  <Action>Increase Value</Action>
                  <Keys>
                    <Key>107</Key>
                  </Keys>
                  <Value>1</Value>
                  <ID>0</ID>
                </Hotkey>
              </Hotkeys>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
        <CheatEntry>
          <ID>59712</ID>
          <Description>"_[  Header (Stats)  ]_"</Description>
          <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
          <LastState Value="" RealAddress="00000000"/>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>59713</ID>
              <Description>"Suppress Non-Primary Stats"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Normal
1:Suppressed
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59714</ID>
              <Description>"Non-Primary Stat Bonus"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No Boost
1:Moderate Boost
2:Major Boost
3:Massive Boost
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>1</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59715</ID>
              <Description>"Peak Rank"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:E
1:D
2:C
3:B
4:A
5:A+
6:A++
7:S
8:S+
9:S++
</DropDownList>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Binary</VariableType>
              <BitStart>3</BitStart>
              <BitLength>4</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59716</ID>
              <Description>"Stat Distribution (binary)"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
11010:None
11011:None
11100:None
11101:None
100100:None
100101:None
100110:None
100111:None
111011:None
1:"Security"
100:Base Dev Focus
110011:Base Dev/Combat
10010:Base Dev/Intel
110001:Base Dev+/Intel+
10011:Base Dev/Medical
110010:Base Dev+/Medical+
101110:Base Dev/R&amp;D
100000:Base Dev/Support/Intel/Medical
10001:Base Dev/Support
110000:Base Dev+/Support+
10:Combat Focus
101111:Combat/Base Dev
1001:Combat/Intel
101001:Combat+/Intel+
1010:Combat/Medical
1000:Combat/R&amp;D
11111:Combat/Support/Intel/Medical
101000:Combat/Support
110:Intel Focus
10000:Intel/Base Dev
110110:Intel+/Base Dev+
100010:Intel/Combat/Support/Medical
1110:Intel/Combat
111001:Intel+/Combat+
111000:Intel/Medical
1111:Intel/R&amp;D
111010:Intel/Support
111:Medical Focus
100011:Medical/Base Dev/Support/Intel
11000:Medical/Base Dev
111110:Medical+/Base Dev+
10111:Medical/Combat
111100:Medical+/Combat+
110111:Medical/Intel
111101:Medical/R&amp;D
11001:Medical/Support
11:R&amp;D Focus
1011:R&amp;D/Base Dev
101011:R&amp;D+/Base Dev+
101010:R&amp;D/Combat
1101:R&amp;D/Medical
101101:R&amp;D+/Medical+
11110:R&amp;D/Support/Intel/Medical
1100:R&amp;D/Support
101100:R&amp;D+/Support+
101:Support Focus
10100:Support/Combat
110100:Support+/Combat+
10110:Support/Intel
110101:Support+/Intel+
100001:Support/R&amp;D/Intel/Medical
111111:Special Character
</DropDownList>
              <ShowAsHex>1</ShowAsHex>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>6</BitLength>
              <ShowAsBinary>1</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59717</ID>
              <Description>"Stat Distribution (tiny bit bugged, type desired values as hex)"</Description>
              <DropDownList DisplayValueAsItem="1">0:None
1:"Security"
2:Combat Focus
3:R&amp;D Focus
4:Base Dev Focus
5:Support Focus
6:Intel Focus
7:Medical Focus
8:Combat/R&amp;D
9:Combat/Intel
10:Combat/Medical
11:R&amp;D/Base Dev
12:R&amp;D/Support
13:R&amp;D/Medical
14:Intel/Combat
15:Intel/R&amp;D
16:Intel/Base Dev
17:Base Dev/Support
18:Base Dev/Intel
19:Base Dev/Medical
20:Support/Combat
21:Support/R&amp;D
22:Support/Intel
23:Medical/Combat
24:Medical/Base Dev
25:Medical/Support
26:None
27:None
28:None
29:None
30:R&amp;D/Support/Intel/Medical
31:Combat/Support/Intel/Medical
32:Base Dev/Support/Intel/Medical
33:Support/R&amp;D/Intel/Medical
34:Intel/Combat/Support/Medical
35:Medical/Base Dev/Support/Intel
36:None
37:None
38:None
39:None
40:Combat/Support
41:Combat/Intel
42:R&amp;D/Combat
43:R&amp;D/Base Dev
44:R&amp;D/Support
45:R&amp;D/Medical
46:Base Dev/R&amp;D
47:Combat/Base Dev
48:Base Dev/Support
49:Base Dev/Intel
50:Base Dev/Medical
51:Base Dev/Combat
52:Support/Combat
53:Support/Intel
54:Intel/Base Dev
55:Medical/Intel
56:Intel/Medical
57:Intel/Combat
58:Intel/Support
59:None
60:Medical/Combat
61:Medical/R&amp;D
62:Medical/Base Dev
63:Special Character
</DropDownList>
              <ShowAsHex>1</ShowAsHex>
              <Color>999999</Color>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>6</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59718</ID>
              <Description>"Skill"</Description>
              <DropDownList DisplayValueAsItem="1">0:Empty
1:Gunman
2:Climber
3:Athlete
5:Rescuer
6:Quick Reload
7:Tough Guy
8:Fortunate
9:Savage
10:Boaster
11:Botanist
12:Quick Draw
13:Vanguard Sharpshooter
14:Prosthetic Mobility [1]
15:Prosthetic Mobility [2]
16:Prosthetic Mobility [3]
17:Prosthetic Precision Movement [1]
18:Prosthetic Precision Movement [2]
19:Prosthetic Precision Movement [3]
20:Prosthetic First Aid Function [1]
21:Prosthetic First Aid Function [2]
22:Prosthetic First Aid Function [3]
23:Gunsmith (Handguns)
24:Gunsmith (Submachine Guns)
25:Gunsmith (Assault Rifles)
26:Gunsmith (Shotguns)
27:Gunsmith (Grenade Launchers)
28:Gunsmith (Sniper Rifles)
29:Gunsmith (Machine Guns)
30:Gunsmith (Missile Launchers)
31:Master Gunsmith
32:Anesthesia Specialist
33:Noise Suppression Specialist
34:Missile Guidance Specialist
35:Zoologist
36:Sleeping Gas Specialist
37:Trap Specialist
38:Electromagnetc Net Specialist
40:Radar Specialist
41:Metamaterials Specialist
42:Drug Developer
43:Bionics Specialist
44:Mechatronics Specialist
45:Cybernetics Specialist
46:Rocket Control Specialist
47:Electrospinning Specialist
48:Materials Engineer
49:Transportation Specialist
51:Video Surveillance Specialist
54:Bipedal Weapons Developer
55:Interpreter (Russian)
56:Interpreter (Afrikaans)
57:Interpreter (Kikongo)
58:Interpreter (Pashto)
59:Surgeon
60:Physician
61:Counselor
62:Parasitologist
63:Troublemaker (Violence)
64:Troublemaker (Unsanitary)
65:Troublemaker (Harassment)
66:Diplomat
67:Tactical Instructor
68:Mother Base XO
69:Defender 1
70:Defender 2
71:Defender 3
72:Sentry 1
73:Sentry 2
74:Sentry 3
75:Ranger 1
76:Ranger 2
77:Ranger 3
78:Medic 1
79:Medic 2
80:Medic 3
81:Liquid Carbon Missile Engineer 1
82:Liquid Carbon Missile Engineer 2
83:Liquid Carbon Missile Engineer 3
84:Anti-Ballistic Missile Engineer 1
85:Anti-Ballistic Missile Engineer 2
86:Anti-Ballistic Missile Engineer 3
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>5</BitStart>
              <BitLength>7</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59719</ID>
              <Description>"Face/Gender (0-687, found in master/texture1.dat)"</Description>
              <DropDownList>000-349:M
350-399:F
450-479:F
500-519:F
550-567:I
600-649:S
680-687:T
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>4</BitStart>
              <BitLength>10</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59720</ID>
              <Description>"Extracted from Northern Kabul, Afghanistan"</Description>
              <DropDownList>0-349: Male
350-399:Female
450-479:Female
500-519:Female
600-612:Male
613:Female
614-629:Male
680-687:Tattoo faces
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>6</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59721</ID>
              <Description>"Extracted from Angola-Zaire Border Region, South Africa"</Description>
              <DropDownList>0-349: Male
350-399:Female
450-479:Female
500-519:Female
600-612:Male
613:Female
614-629:Male
680-687:Tattoo faces
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+8</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
        <CheatEntry>
          <ID>59722</ID>
          <Description>"_[  Status  ]_"</Description>
          <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
          <LastState Value="" RealAddress="00000000"/>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>59723</ID>
              <Description>"Deployment Overhead (Overheads all the binary settings)"</Description>
              <DropDownList DisplayValueAsItem="1">0:In Reserves
1:AWOL (Team 1)
2:AWOL (Team 2)
3:AWOL (Team 3)
4:AWOL (Team 4)
5:AWOL (Team 5)
6:AWOL (Team 6)
7:AWOL (Team 7)
8:AWOL (Team 8)
9:AWOL (Team 9)
10:AWOL (Team 10)
11:AWOL (Team 11)
12:AWOL (Team 12)
13:AWOL (Team 13)
14:AWOL (Team 14)
15:AWOL (Team 15)
17:Deployed (Team 1)
18:Deployed (Team 2)
19:Deployed (Team 3)
20:Deployed (Team 4)
21:Deployed (Team 5)
22:Deployed (Team 6)
23:Deployed (Team 7)
24:Deployed (Team 8)
25:Deployed (Team 9)
26:Deployed (Team 10)
27:Deployed (Team 11)
28:Deployed (Team 12)
29:Deployed (Team 13)
30:Deployed (Team 14)
31:Deployed (Team 15)
112:As Player
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>7</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59724</ID>
              <Description>"Combat Deployment Team"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Reserves Or Player
1:Team 1
2:Team 2
3:Team 3
4:Team 4
5:Team 5
6:Team 6
7:Team 7
8:Team 8
9:Team 9
10:Team 10
11:Team 11
12:Team 12
13:Team 13
14:Team 14
15:Team 15
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>4</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59725</ID>
              <Description>"Deployed"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Yes
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>4</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59726</ID>
              <Description>"Player Selected/Controlled"</Description>
              <DropDownList ReadOnly="1" DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Deployed As NPC
7:Yes
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>4</BitStart>
              <BitLength>3</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59727</ID>
              <Description>"Direct Contract"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Not Direct Contracted
1:Direct Contracted
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59728</ID>
              <Description>"Proficiency"</Description>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>4</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59729</ID>
              <Description>"Distinguished Service Medal"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Not Earned
1:Earned
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>4</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59730</ID>
              <Description>"Distinguished Service Cross"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Not Earned
1:Earned
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>5</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59731</ID>
              <Description>"Medal of Honor"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:Not Earned
1:Earned
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>6</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59732</ID>
              <Description>"???"</Description>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59733</ID>
              <Description>"Symptomatic"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Yes
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59734</ID>
              <Description>"Health Level (0-7)"</Description>
              <VariableType>Binary</VariableType>
              <BitStart>1</BitStart>
              <BitLength>3</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59735</ID>
              <Description>"Health State"</Description>
              <DropDownList ReadOnly="1" DisplayValueAsItem="1">0:Healthy
1:Injured
2:Sick
3:PTSD
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>4</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59736</ID>
              <Description>"Morale (0-15)"</Description>
              <VariableType>Binary</VariableType>
              <BitStart>6</BitStart>
              <BitLength>4</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>2</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59737</ID>
              <Description>"Enemy (Hostility)"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Enemy
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>2</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59738</ID>
              <Description>"Designation"</Description>
              <DropDownList DisplayValueAsItem="1">0:Waiting Room
1:Combat Unit
2:R&amp;D Team
3:Base Development Unit
4:Support Unit
5:Intel Team
6:Medical Team
7:Security Team
8:Sickbay
9:Brig
10:Quarantine
11:Waiting Room
12:Waiting Room
13:Waiting Room
14:Waiting Room
15:Waiting Room
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>3</BitStart>
              <BitLength>4</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59739</ID>
              <Description>"Unselectable"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Unselectable
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+10</Address>
              <Offsets>
                <Offset>3</Offset>
              </Offsets>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
        <CheatEntry>
          <ID>59740</ID>
          <Description>"_[  Status No Sync  ]_"</Description>
          <Options moHideChildren="1" moDeactivateChildrenAsWell="1"/>
          <LastState Value="" RealAddress="00000000"/>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>59741</ID>
              <Description>"Unmovable"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Unmovable
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>0</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59742</ID>
              <Description>"Selected"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Selected
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>1</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59743</ID>
              <Description>"New"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:New
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>2</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59744</ID>
              <Description>"Afrikaans"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
1:Learning
2:Master
3:Native
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>3</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59745</ID>
              <Description>"Kikongo"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
1:Learning
2:Master
3:Native
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>5</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59746</ID>
              <Description>"Pashto"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
1:Learning
2:Master
3:Native
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>0</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59747</ID>
              <Description>"Russian"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
1:Learning
2:Master
3:Native
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>1</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59748</ID>
              <Description>"English"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:None
1:Learning
2:Master
3:Native
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>3</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59749</ID>
              <Description>"???"</Description>
              <VariableType>Binary</VariableType>
              <BitStart>5</BitStart>
              <BitLength>2</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
            <CheatEntry>
              <ID>59750</ID>
              <Description>"Recently Moved"</Description>
              <DropDownList DescriptionOnly="1" DisplayValueAsItem="1">0:No
1:Yes
</DropDownList>
              <VariableType>Binary</VariableType>
              <BitStart>7</BitStart>
              <BitLength>1</BitLength>
              <ShowAsBinary>0</ShowAsBinary>
              <Address>ptrStaffHook+18</Address>
              <Offsets>
                <Offset>1</Offset>
              </Offsets>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
</CheatTable>
 

TheyCallMeTim13

Wiki Monster
Talents
Fearless Donors
Mar 3, 2017
418
46
28
Add the AA script to your table and enable it. Copy paste the address list entries to your table. Then edit staff when in side the staff management menu.
 
Top Bottom