My Time at Portia

[fantomas]

Here's my poor contribution for this game - Other scripts could be added.

Current Game Version: Final.2.0.137882 Octobre 15, 2019 ] New!

Show

For STEAM Users only!!! (thanks to ImpalaPUA)

Function_call_AddAllItem_example (thanks to Cake-san) - Give it a try!

Enjoy!

[fantomas]

Be aware that the game is still in its alpha version - There still are a lot of bugs so if your game is crashing, it is probably more due to the game, not to the scripts.

[ifan]

Thanks for trying, but it all works terribly. It's easier to manually find all the values and not have problems with the game.

[shadowfang82]

thanks for making into a table have not try them all but stamina works great hope to see this table grow

[daniman]

thnks for the table can you add a hp and a clock stop cheats?

[lulu15bb]

Thank you so much fantomas

[lulu15bb]

I tired to do hp and exp point but it kept changing

[fantomas]

Thanks for trying, but it all works terribly. It's easier to manually find all the values and not have problems with the game.

Could you be more specific about troubles you're incurring when use the cheat table? I have no trouble with the game when I use it. As I said before, the game is still too much buggy, this has nothing to do with the cheat table.

thanks for making into a table have not try them all but stamina works great hope to see this table grow

Your're welcome

Do you have any specific cheat in mind?

thnks for the table can you add a hp and a clock stop cheats?

You're welcome

Ok, I'll try that - I didn't make much progress in the game, though.

Thank you so much fantomas

You're welcome

I tired to do hp and exp point but it kept changing

I'll take a look

[fantomas]

thnks for the table can you add a hp and a clock stop cheats?

inf hp cheat:

Code: Select all

define(address,Pathea.ActorNs:Actor:ValidateValue+1b4)
define(bytes,F3 0F 11 28 48 8B 86 68 01 00 00)

[ENABLE]
assert(address,bytes)
alloc(newmem,$100,Pathea.ActorNs:Actor:ValidateValue+1b4)

label(code)
label(return)

newmem:
  cmp [rax+80],72
  jne code
  movss [rax],xmm2
  mov rax,[rsi+00000168]
  jmp return

code:
  movss [rax],xmm5
  mov rax,[rsi+00000168]
  jmp return

address:
  jmp newmem
  nop
  nop
  nop
  nop
  nop
  nop
return:

[DISABLE]
address:
  db bytes
  // movss [rax],xmm5
  // mov rax,[rsi+00000168]

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: Pathea.ActorNs:Actor:ValidateValue+1b4

43F044E8: F3 0F 11 6D F0                 -  movss [rbp-10],xmm5
43F044ED: 48 8B 86 68 01 00 00           -  mov rax,[rsi+00000168]
43F044F4: 33 C9                          -  xor ecx,ecx
43F044F6: F3 0F 10 45 F0                 -  movss xmm0,[rbp-10]
43F044FB: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
43F044FF: 48 63 C9                       -  movsxd  rcx,ecx
43F04502: 39 48 18                       -  cmp [rax+18],ecx
43F04505: 0F 86 77 02 00 00              -  jbe Pathea.ActorNs:Actor:ValidateValue+422
43F0450B: 48 8D 44 88 20                 -  lea rax,[rax+rcx*4+20]
43F04510: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
43F04514: F3 0F 11 28                    -  movss [rax],xmm5
43F04518: 48 8B 86 68 01 00 00           -  mov rax,[rsi+00000168]
// ---------- DONE INJECTING  ----------
43F0451F: B9 01 00 00 00                 -  mov ecx,00000001
43F04524: 48 63 C9                       -  movsxd  rcx,ecx
43F04527: 39 48 18                       -  cmp [rax+18],ecx
43F0452A: 0F 86 4B 02 00 00              -  jbe Pathea.ActorNs:Actor:ValidateValue+41b
43F04530: 48 8D 44 88 20                 -  lea rax,[rax+rcx*4+20]
43F04535: F3 0F 10 00                    -  movss xmm0,[rax]
43F04539: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
43F0453D: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
43F04541: F3 0F 11 6D F0                 -  movss [rbp-10],xmm5
43F04546: F3 0F 10 45 F0                 -  movss xmm0,[rbp-10]
}

clock stop cheat:

Code: Select all

[ENABLE]
TimeManager:get_TimeStoped+16:
  db 75
//75 10
//jne TimeManager:get_TimeStoped+28
 
[DISABLE]
TimeManager:get_TimeStoped+16:
  db 74
//74 10
//je TimeManager:get_TimeStoped+28

[fantomas]

Here 'Never attacked' script (I just tested it with a couple of animals):

Code: Select all

[ENABLE]
Pathea.ActorNs:Actor:Pathea.SkillNs.ISkillable.PlayeAnimation+c+3:
  db BC
//0F B6 87 BC 02 00 00
//movzx eax,byte ptr [rdi+000002BC]
 
[DISABLE]
Pathea.ActorNs:Actor:Pathea.SkillNs.ISkillable.PlayeAnimation+c+3:
  db AC
//0F B6 87 AC 02 00 00
//movzx eax,byte ptr [rdi+000002AC]

[fantomas]

One Hit Kill (at least it works with animals)

Code: Select all

define(address,Pathea.Behavior:BehaviorUtil:HasRemote+d9)
define(bytes,48 8D 44 90 20)

[ENABLE]
assert(address,bytes)
alloc(newmem,$100,Pathea.Behavior:BehaviorUtil:HasRemote+d9)

label(code)
label(return)

newmem:

code:
  mov [rax+rdx*4+20],(float)0   // added part
  lea rax,[rax+rdx*4+20]
  jmp return

address:
  jmp newmem
return:

[DISABLE]
address:
  db bytes
  // lea rax,[rax+rdx*4+20]

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: Pathea.Behavior:BehaviorUtil:HasRemote+d9

31AEF980: 85 C0                          -  test eax,eax
31AEF982: 0F 84 FC 01 00 00              -  je Pathea.Behavior:BehaviorUtil:HasRemote+2b4
31AEF988: 48 8B 4D D8                    -  mov rcx,[rbp-28]
31AEF98C: 48 83 C1 14                    -  add rcx,14
31AEF990: 41 83 3F 00                    -  cmp dword ptr [r15],00
31AEF994: 49 8B 87 68 01 00 00           -  mov rax,[r15+00000168]
31AEF99B: 33 D2                          -  xor edx,edx
31AEF99D: 48 63 D2                       -  movsxd  rdx,edx
31AEF9A0: 39 50 18                       -  cmp [rax+18],edx
31AEF9A3: 0F 86 1E 02 00 00              -  jbe Pathea.Behavior:BehaviorUtil:HasRemote+2f7
// ---------- INJECTING HERE ----------
31AEF9A9: 48 8D 44 90 20                 -  lea rax,[rax+rdx*4+20]
// ---------- DONE INJECTING  ----------
31AEF9AE: F3 0F 10 00                    -  movss xmm0,[rax]
31AEF9B2: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
31AEF9B6: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
31AEF9BA: F3 0F 11 6D D4                 -  movss [rbp-2C],xmm5
31AEF9BF: F3 0F 10 45 D4                 -  movss xmm0,[rbp-2C]
31AEF9C4: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
31AEF9C8: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
31AEF9CC: F3 0F 11 6D D4                 -  movss [rbp-2C],xmm5
31AEF9D1: F3 0F 10 45 D4                 -  movss xmm0,[rbp-2C]
31AEF9D6: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
}

[fantomas]

+Inf Endurance

Code: Select all

define(address,Pathea.ActorNs:Actor:ValidateValue+3de)
define(bytes,F3 0F 11 28 48 8B 75 F8)

[ENABLE]
assert(address,bytes)
alloc(newmem,$100,Pathea.ActorNs:Actor:ValidateValue+3de)

label(code)
label(return)

newmem:
  cmp [rbp+78],0
  je code
  movss [rax],xmm2
  mov rsi,[rbp-08]
  jmp return

code:
  movss [rax],xmm5
  mov rsi,[rbp-08]
  jmp return

address:
  jmp newmem
  nop
  nop
  nop
return:

[DISABLE]
address:
  db bytes
  // movss [rax],xmm5
  // mov rsi,[rbp-08]

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: Pathea.ActorNs:Actor:ValidateValue+3de

43F0470F: F3 0F 11 6D F4                 -  movss [rbp-0C],xmm5
43F04714: 48 8B 86 68 01 00 00           -  mov rax,[rsi+00000168]
43F0471B: B9 02 00 00 00                 -  mov ecx,00000002
43F04720: F3 0F 10 45 F4                 -  movss xmm0,[rbp-0C]
43F04725: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
43F04729: 48 63 C9                       -  movsxd  rcx,ecx
43F0472C: 39 48 18                       -  cmp [rax+18],ecx
43F0472F: 0F 86 13 00 00 00              -  jbe Pathea.ActorNs:Actor:ValidateValue+3e8
43F04735: 48 8D 44 88 20                 -  lea rax,[rax+rcx*4+20]
43F0473A: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
43F0473E: F3 0F 11 28                    -  movss [rax],xmm5
43F04742: 48 8B 75 F8                    -  mov rsi,[rbp-08]
// ---------- DONE INJECTING  ----------
43F04746: C9                             -  leave 
43F04747: C3                             -  ret 
43F04748: BA 30 00 00 00                 -  mov edx,00000030
43F0474D: B9 78 06 00 02                 -  mov ecx,02000678
43F04752: 49 BB D0 1C 8F 04 00 00 00 00  -  mov r11,00000000048F1CD0
43F0475C: 41 FF D3                       -  call r11
43F0475F: BA C2 00 00 00                 -  mov edx,000000C2
43F04764: EB E7                          -  jmp Pathea.ActorNs:Actor:ValidateValue+3ed
43F04766: BA 20 01 00 00                 -  mov edx,00000120
43F0476B: EB E0                          -  jmp Pathea.ActorNs:Actor:ValidateValue+3ed
}

[daniman]

inf hp doesn´t work for me

[fantomas]

@daniman

Yep, same here. Sorry, I was a little tired and I made several things at the same time, so I could not test it properly. Here, this one should be ok.

Code: Select all

[ENABLE]
aobscan(InfHP,F3 0F 11 28 48 8B 86 68 01 00 00)
alloc(newmem,$100,43F04514)

label(code)
label(return)

newmem:
  cmp [rax+3A],00610046
  jne code
  movss [rax],xmm2
  mov rax,[rsi+00000168]
  jmp return

code:
  movss [rax],xmm5
  mov rax,[rsi+00000168]
  jmp return

InfHP:
  jmp newmem
  nop
  nop
  nop
  nop
  nop
  nop
return:
registersymbol(InfHP)

[DISABLE]
+InfHP:
  db F3 0F 11 28 48 8B 86 68 01 00 00

unregistersymbol(InfHP)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 43F04514

""+43F044E8: F3 0F 11 6D F0                 -  movss [rbp-10],xmm5
""+43F044ED: 48 8B 86 68 01 00 00           -  mov rax,[rsi+00000168]
""+43F044F4: 33 C9                          -  xor ecx,ecx
""+43F044F6: F3 0F 10 45 F0                 -  movss xmm0,[rbp-10]
""+43F044FB: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
""+43F044FF: 48 63 C9                       -  movsxd  rcx,ecx
""+43F04502: 39 48 18                       -  cmp [rax+18],ecx
""+43F04505: 0F 86 77 02 00 00              -  jbe Pathea.ActorNs:Actor:ValidateValue+422
""+43F0450B: 48 8D 44 88 20                 -  lea rax,[rax+rcx*4+20]
""+43F04510: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
""+43F04514: F3 0F 11 28                    -  movss [rax],xmm5
""+43F04518: 48 8B 86 68 01 00 00           -  mov rax,[rsi+00000168]
// ---------- DONE INJECTING  ----------
""+43F0451F: B9 01 00 00 00                 -  mov ecx,00000001
""+43F04524: 48 63 C9                       -  movsxd  rcx,ecx
""+43F04527: 39 48 18                       -  cmp [rax+18],ecx
""+43F0452A: 0F 86 4B 02 00 00              -  jbe Pathea.ActorNs:Actor:ValidateValue+41b
""+43F04530: 48 8D 44 88 20                 -  lea rax,[rax+rcx*4+20]
""+43F04535: F3 0F 10 00                    -  movss xmm0,[rax]
""+43F04539: F3 0F 5A C0                    -  cvtss2sd xmm0,xmm0
""+43F0453D: F2 0F 5A E8                    -  cvtsd2ss xmm5,xmm0
""+43F04541: F3 0F 11 6D F0                 -  movss [rbp-10],xmm5
""+43F04546: F3 0F 10 45 F0                 -  movss xmm0,[rbp-10]
}

[fantomas]

Ok,

I changed the scripts a little bit - When a game uses Mono, I prefer use that feature for my tables but this game is pretty buggy so it could or not working properly.

So I preferred to use aobscan - it takes longer the script to load but works well. Please let me know if it works well (or not) for you.