Code: Select all
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>65</ID>
<Description>"FreeBuildingUpgrade AOB"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : SWD7
Version:
Date : 2020-11-01
Author : 009
This script does blah blah blah
}
[ENABLE]
aobscanmodule(buildUpgrade,SWD7-Win64-Shipping.exe,45 8B 7F 04 48 89 45 EF 48 8B 45 AF 48 89 45 F7) // should be unique
alloc(newmem,$1000,"SWD7-Win64-Shipping.exe"+A67321)
label(code)
label(return)
newmem:
mov [r15+04],0
code:
mov r15d,[r15+04]
mov [rbp-11],rax
jmp return
buildUpgrade:
jmp newmem
nop 3
return:
registersymbol(buildUpgrade)
[DISABLE]
buildUpgrade:
db 45 8B 7F 04 48 89 45 EF
unregistersymbol(buildUpgrade)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "SWD7-Win64-Shipping.exe"+A67321
"SWD7-Win64-Shipping.exe"+A672F8: 0F 1F 84 00 00 00 00 00 - nop dword ptr [rax+rax+00000000]
"SWD7-Win64-Shipping.exe"+A67300: 48 63 D0 - movsxd rdx,eax
"SWD7-Win64-Shipping.exe"+A67303: 4C 8D 04 92 - lea r8,[rdx+rdx*4]
"SWD7-Win64-Shipping.exe"+A67307: 47 39 14 C1 - cmp [r9+r8*8],r10d
"SWD7-Win64-Shipping.exe"+A6730B: 0F 84 9D 00 00 00 - je SWD7-Win64-Shipping.exe+A673AE
"SWD7-Win64-Shipping.exe"+A67311: 43 8B 44 C1 20 - mov eax,[r9+r8*8+20]
"SWD7-Win64-Shipping.exe"+A67316: 83 F8 FF - cmp eax,-01
"SWD7-Win64-Shipping.exe"+A67319: 75 E5 - jne SWD7-Win64-Shipping.exe+A67300
"SWD7-Win64-Shipping.exe"+A6731B: 33 F6 - xor esi,esi
"SWD7-Win64-Shipping.exe"+A6731D: 48 8B 45 A7 - mov rax,[rbp-59]
// ---------- INJECTING HERE ----------
"SWD7-Win64-Shipping.exe"+A67321: 45 8B 7F 04 - mov r15d,[r15+04]
"SWD7-Win64-Shipping.exe"+A67325: 48 89 45 EF - mov [rbp-11],rax
// ---------- DONE INJECTING ----------
"SWD7-Win64-Shipping.exe"+A67329: 48 8B 45 AF - mov rax,[rbp-51]
"SWD7-Win64-Shipping.exe"+A6732D: 48 89 45 F7 - mov [rbp-09],rax
"SWD7-Win64-Shipping.exe"+A67331: 48 85 C0 - test rax,rax
"SWD7-Win64-Shipping.exe"+A67334: 74 04 - je SWD7-Win64-Shipping.exe+A6733A
"SWD7-Win64-Shipping.exe"+A67336: F0 FF 40 08 - lock inc [rax+08]
"SWD7-Win64-Shipping.exe"+A6733A: 8B 45 B7 - mov eax,[rbp-49]
"SWD7-Win64-Shipping.exe"+A6733D: 48 8D 55 EF - lea rdx,[rbp-11]
"SWD7-Win64-Shipping.exe"+A67341: 48 8B 8F 18 06 00 00 - mov rcx,[rdi+00000618]
"SWD7-Win64-Shipping.exe"+A67348: 89 45 FF - mov [rbp-01],eax
"SWD7-Win64-Shipping.exe"+A6734B: 48 8B 01 - mov rax,[rcx]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>5</ID>
<Description>"FreeCrafting AOB"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : SWD7-Win64-Shipping.exe
Version:
Date : 2020-10-31
Author : 009
This script does blah blah blah
}
[ENABLE]
aobscanmodule(NoIngred,SWD7-Win64-Shipping.exe,E8 4F 4F F5 FF 4C 8B 86 40 04 00 00 BA 03 00 00 00)
// should be unique
registersymbol(NoIngred)
NoIngred:
db 90 90 90 90 90
[DISABLE]
NoIngred:
db E8 4F 4F F5 FF
unregistersymbol(NoIngred)
{
// ORIGINAL CODE - INJECTION POINT: "SWD7-Win64-Shipping.exe"+A5B6CC
"SWD7-Win64-Shipping.exe"+A5B6A5: 48 85 C9 - test rcx,rcx
"SWD7-Win64-Shipping.exe"+A5B6A8: 74 0F - je SWD7-Win64-Shipping.exe+A5B6B9
"SWD7-Win64-Shipping.exe"+A5B6AA: E8 61 67 19 00 - call SWD7-Win64-Shipping.exe+BF1E10
"SWD7-Win64-Shipping.exe"+A5B6AF: EB 08 - jmp SWD7-Win64-Shipping.exe+A5B6B9
"SWD7-Win64-Shipping.exe"+A5B6B1: B2 01 - mov dl,01
"SWD7-Win64-Shipping.exe"+A5B6B3: FF 90 58 02 00 00 - call qword ptr [rax+00000258]
"SWD7-Win64-Shipping.exe"+A5B6B9: 48 8D 8E B8 03 00 00 - lea rcx,[rsi+000003B8]
"SWD7-Win64-Shipping.exe"+A5B6C0: E8 7B B5 40 00 - call SWD7-Win64-Shipping.exe+E66C40
"SWD7-Win64-Shipping.exe"+A5B6C5: 8B 54 24 30 - mov edx,[rsp+30]
"SWD7-Win64-Shipping.exe"+A5B6C9: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
"SWD7-Win64-Shipping.exe"+A5B6CC: E8 4F 4F F5 FF - call SWD7-Win64-Shipping.exe+9B0620
// ---------- DONE INJECTING ----------
"SWD7-Win64-Shipping.exe"+A5B6D1: 4C 8B 86 40 04 00 00 - mov r8,[rsi+00000440]
"SWD7-Win64-Shipping.exe"+A5B6D8: BA 03 00 00 00 - mov edx,00000003
"SWD7-Win64-Shipping.exe"+A5B6DD: 84 C0 - test al,al
"SWD7-Win64-Shipping.exe"+A5B6DF: 88 86 D4 03 00 00 - mov [rsi+000003D4],al
"SWD7-Win64-Shipping.exe"+A5B6E5: B9 01 00 00 00 - mov ecx,00000001
"SWD7-Win64-Shipping.exe"+A5B6EA: 0F 45 CA - cmovne ecx,edx
"SWD7-Win64-Shipping.exe"+A5B6ED: 4D 8B 08 - mov r9,[r8]
"SWD7-Win64-Shipping.exe"+A5B6F0: 0F B6 D1 - movzx edx,cl
"SWD7-Win64-Shipping.exe"+A5B6F3: 49 8B C8 - mov rcx,r8
"SWD7-Win64-Shipping.exe"+A5B6F6: 41 FF 91 58 02 00 00 - call qword ptr [r9+00000258]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>66</ID>
<Description>"FreeSwordUpgrade AOB"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : SWD7
Version:
Date : 2020-11-01
Author : 009
This script does blah blah blah
}
[ENABLE]
aobscanmodule(swordUpgrade,SWD7-Win64-Shipping.exe,41 8B 3C 03 85 FF) // should be unique
alloc(newmem,$1000,"SWD7-Win64-Shipping.exe"+9B047D)
label(code)
label(return)
newmem:
mov [r11+rax],0
code:
mov edi,[r11+rax]
test edi,edi
jmp return
swordUpgrade:
jmp newmem
nop
return:
registersymbol(swordUpgrade)
[DISABLE]
swordUpgrade:
db 41 8B 3C 03 85 FF
unregistersymbol(swordUpgrade)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "SWD7-Win64-Shipping.exe"+9B047D
"SWD7-Win64-Shipping.exe"+9B0459: 33 DB - xor ebx,ebx
"SWD7-Win64-Shipping.exe"+9B045B: 45 85 F6 - test r14d,r14d
"SWD7-Win64-Shipping.exe"+9B045E: 0F 8E 98 00 00 00 - jng SWD7-Win64-Shipping.exe+9B04FC
"SWD7-Win64-Shipping.exe"+9B0464: 4C 8B 78 20 - mov r15,[rax+20]
"SWD7-Win64-Shipping.exe"+9B0468: 45 33 DB - xor r11d,r11d
"SWD7-Win64-Shipping.exe"+9B046B: 0F 1F 44 00 00 - nop dword ptr [rax+rax+00]
"SWD7-Win64-Shipping.exe"+9B0470: 4F 63 0C 1F - movsxd r9,dword ptr [r15+r11]
"SWD7-Win64-Shipping.exe"+9B0474: 45 85 C9 - test r9d,r9d
"SWD7-Win64-Shipping.exe"+9B0477: 7E 74 - jle SWD7-Win64-Shipping.exe+9B04ED
"SWD7-Win64-Shipping.exe"+9B0479: 48 8B 46 30 - mov rax,[rsi+30]
// ---------- INJECTING HERE ----------
"SWD7-Win64-Shipping.exe"+9B047D: 41 8B 3C 03 - mov edi,[r11+rax]
"SWD7-Win64-Shipping.exe"+9B0481: 85 FF - test edi,edi
// ---------- DONE INJECTING ----------
"SWD7-Win64-Shipping.exe"+9B0483: 7E 68 - jle SWD7-Win64-Shipping.exe+9B04ED
"SWD7-Win64-Shipping.exe"+9B0485: 8B 85 10 01 00 00 - mov eax,[rbp+00000110]
"SWD7-Win64-Shipping.exe"+9B048B: 3B 85 3C 01 00 00 - cmp eax,[rbp+0000013C]
"SWD7-Win64-Shipping.exe"+9B0491: 74 54 - je SWD7-Win64-Shipping.exe+9B04E7
"SWD7-Win64-Shipping.exe"+9B0493: 48 63 95 50 01 00 00 - movsxd rdx,dword ptr [rbp+00000150]
"SWD7-Win64-Shipping.exe"+9B049A: 4C 8D 85 40 01 00 00 - lea r8,[rbp+00000140]
"SWD7-Win64-Shipping.exe"+9B04A1: 49 8B 48 08 - mov rcx,[r8+08]
"SWD7-Win64-Shipping.exe"+9B04A5: 48 FF CA - dec rdx
"SWD7-Win64-Shipping.exe"+9B04A8: 49 23 D1 - and rdx,r9
"SWD7-Win64-Shipping.exe"+9B04AB: 48 85 C9 - test rcx,rcx
}
</AssemblerScript>
</CheatEntry>
</CheatEntries>
</CheatTable>