Sword Art Online: Fatal Bullet（Steam）DIY

[Dekirai]

I guess I'm too dumb to use Cheat Engine properly with this game.
I did all the steps that I need to do to use Cheat Engine, but I can't find any value. My result is always 0. :/

Edit: fixed

[NumberXer0]

Anyone had any luck finding SP? It isn't 4 byte, 2 byte or float.

Cp was 4byte are you sure sp wouldn't be the same?

I thought so, but I always end up with 0 results.

Edit: Actually it's unnecessary. I found the medal values and exchanged medals for SP. I have more than I'll ever need. Now I just need to figure out Weapon Proficiency and Skill Proficiency.

[DrummerIX]

Is this good JRPG? I guess it has many games in the series, but I've never played them. I don't particular enjoy 3rd person shooters, which this game seemed to introduce. Anyway, do you all recommend it?

[Eylev]

Anyone had any luck finding SP? It isn't 4 byte, 2 byte or float.

Cp was 4byte are you sure sp wouldn't be the same?

I thought so, but I always end up with 0 results.

Edit: Actually it's unnecessary. I found the medal values and exchanged medals for SP. I have more than I'll ever need. Now I just need to figure out Weapon Proficiency and Skill Proficiency.

Share how you find medals?

[KS212]

Is this good JRPG? I guess it has many games in the series, but I've never played them. I don't particular enjoy 3rd person shooters, which this game seemed to introduce. Anyway, do you all recommend it?

This is not really a JRPG, its a full blown shooter with proper shooter mechanics. The rest of the game is tied together with visual novel like story sequences. Its more Tokyo Xanadu than ToCS.

[nimajneb34]

Medals are 4 byte . I think their address aren't changing like credit. I search medals and get medals search them again you'll find it. You can also search for SP exchange chances it's 4 byte too. So you can get as many SP as you want.
But CP is really weird ,seems it is calculated by your level? Although I found it and change it . It'll become negative if I over spend CP.
Aren't sure if EXP is float or 4 byte . At least I failed when using float.

[zunaidahmed]

so is there going to be a table or what they going too do

I think the more skilled people are still looking into things, I've found I've been able to do some simple things like put my health at max all the time, ammo and medals/cp/exp. But it's all redo everytime I start up the game and the like so I also keep checking back.

How did you find the exp address? I found everything but that

[NichtIchWeiss]

idk how to find out the pointer but i can show you how to hack that game, how to disable EAC + use CE... XD just pm me if you are interested and help all other ppl here... ^^

[qweasdzxc17]

Code: Select all

{ Game   : SAOFB-Win64-Shipping.exe
  Version: 
  Date   : 2018-02-25
  Author : qweasdzxc17

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(SAOFBNoMats,SAOFB-Win64-Shipping.exe,72 29 F8 89 41 10 48 83 B9 ?? ?? ?? ?? ?? 74 2F 48 8B 89)
registersymbol(SAOFBNoMats)

SAOFBNoMats+03:
  db 90 90 90


[DISABLE]

SAOFBNoMats+03:
  db 89 41 10

unregistersymbol(SAOFBNoMats)

{
// ORIGINAL CODE - INJECTION POINT: "SAOFB-Win64-Shipping.exe"+5CF49E1

"SAOFB-Win64-Shipping.exe"+5CF49CA: 8B 41 10                 -  mov eax,[rcx+10]
"SAOFB-Win64-Shipping.exe"+5CF49CD: 48 89 CB                 -  mov rbx,rcx
"SAOFB-Win64-Shipping.exe"+5CF49D0: 85 D2                    -  test edx,edx
"SAOFB-Win64-Shipping.exe"+5CF49D2: 78 7D                    -  js SAOFB-Win64-Shipping.exe+5CF4A51
"SAOFB-Win64-Shipping.exe"+5CF49D4: 39 C2                    -  cmp edx,eax
"SAOFB-Win64-Shipping.exe"+5CF49D6: 89 C7                    -  mov edi,eax
"SAOFB-Win64-Shipping.exe"+5CF49D8: 0F 4C FA                 -  cmovl edi,edx
"SAOFB-Win64-Shipping.exe"+5CF49DB: 85 FF                    -  test edi,edi
"SAOFB-Win64-Shipping.exe"+5CF49DD: 74 72                    -  je SAOFB-Win64-Shipping.exe+5CF4A51
"SAOFB-Win64-Shipping.exe"+5CF49DF: 29 F8                    -  sub eax,edi
// ---------- INJECTING HERE ----------
"SAOFB-Win64-Shipping.exe"+5CF49E1: 89 41 10                 -  mov [rcx+10],eax
"SAOFB-Win64-Shipping.exe"+5CF49E4: 48 83 B9 A0 00 00 00 00  -  cmp qword ptr [rcx+000000A0],00
// ---------- DONE INJECTING  ----------
"SAOFB-Win64-Shipping.exe"+5CF49EC: 74 2F                    -  je SAOFB-Win64-Shipping.exe+5CF4A1D
"SAOFB-Win64-Shipping.exe"+5CF49EE: 48 8B 89 A0 00 00 00     -  mov rcx,[rcx+000000A0]
"SAOFB-Win64-Shipping.exe"+5CF49F5: 89 7C 24 30              -  mov [rsp+30],edi
"SAOFB-Win64-Shipping.exe"+5CF49F9: C6 44 24 38 01           -  mov byte ptr [rsp+38],01
"SAOFB-Win64-Shipping.exe"+5CF49FE: 48 85 C9                 -  test rcx,rcx
"SAOFB-Win64-Shipping.exe"+5CF4A01: 75 07                    -  jne SAOFB-Win64-Shipping.exe+5CF4A0A
"SAOFB-Win64-Shipping.exe"+5CF4A03: FF 15 BF BE BE 09        -  call qword ptr [SAOFB-Win64-Shipping.exe+F8E08C8]
"SAOFB-Win64-Shipping.exe"+5CF4A09: CC                       -  int 3 
"SAOFB-Win64-Shipping.exe"+5CF4A0A: 48 8B 01                 -  mov rax,[rcx]
"SAOFB-Win64-Shipping.exe"+5CF4A0D: 4C 8D 4C 24 30           -  lea r9,[rsp+30]
}

No items usage for enhancing and transforming.
May affect more than as stated, use with caution and let me know about any side-effects.

EDIT: Whoops, Register symbol on wrong line.

[cdtrico]

Spoiler

so is there going to be a table or what they going too do

I think the more skilled people are still looking into things, I've found I've been able to do some simple things like put my health at max all the time, ammo and medals/cp/exp. But it's all redo everytime I start up the game and the like so I also keep checking back.

How did you find the exp address? I found everything but that

By looking at the exp bar on the status page, searching with all values for an unknown/increased/etc value. Took me a while.

Spoiler

Code: Select all

{ Game : SAOFB-Win64-Shipping.exe
 Version: 
 Date : 2018-02-25
 Author : qweasdzxc17

 This script does blah blah blah
}

[ENABLE]

aobscanmodule(SAOFBNoMats,SAOFB-Win64-Shipping.exe,72 29 F8 89 41 10 48 83 B9 ?? ?? ?? ?? ?? 74 2F 48 8B 89) // should be uniqueregistersymbol(SAOFBNoMats)

SAOFBNoMats+03:
 db 90 90 90


[DISABLE]

SAOFBNoMats+03:
 db 89 41 10

unregistersymbol(SAOFBNoMats)

{
// ORIGINAL CODE - INJECTION POINT: "SAOFB-Win64-Shipping.exe"+5CF49E1

"SAOFB-Win64-Shipping.exe"+5CF49CA: 8B 41 10 - mov eax,[rcx+10]
"SAOFB-Win64-Shipping.exe"+5CF49CD: 48 89 CB - mov rbx,rcx
"SAOFB-Win64-Shipping.exe"+5CF49D0: 85 D2 - test edx,edx
"SAOFB-Win64-Shipping.exe"+5CF49D2: 78 7D - js SAOFB-Win64-Shipping.exe+5CF4A51
"SAOFB-Win64-Shipping.exe"+5CF49D4: 39 C2 - cmp edx,eax
"SAOFB-Win64-Shipping.exe"+5CF49D6: 89 C7 - mov edi,eax
"SAOFB-Win64-Shipping.exe"+5CF49D8: 0F 4C FA - cmovl edi,edx
"SAOFB-Win64-Shipping.exe"+5CF49DB: 85 FF - test edi,edi
"SAOFB-Win64-Shipping.exe"+5CF49DD: 74 72 - je SAOFB-Win64-Shipping.exe+5CF4A51
"SAOFB-Win64-Shipping.exe"+5CF49DF: 29 F8 - sub eax,edi
// ---------- INJECTING HERE ----------
"SAOFB-Win64-Shipping.exe"+5CF49E1: 89 41 10 - mov [rcx+10],eax
"SAOFB-Win64-Shipping.exe"+5CF49E4: 48 83 B9 A0 00 00 00 00 - cmp qword ptr [rcx+000000A0],00
// ---------- DONE INJECTING ----------
"SAOFB-Win64-Shipping.exe"+5CF49EC: 74 2F - je SAOFB-Win64-Shipping.exe+5CF4A1D
"SAOFB-Win64-Shipping.exe"+5CF49EE: 48 8B 89 A0 00 00 00 - mov rcx,[rcx+000000A0]
"SAOFB-Win64-Shipping.exe"+5CF49F5: 89 7C 24 30 - mov [rsp+30],edi
"SAOFB-Win64-Shipping.exe"+5CF49F9: C6 44 24 38 01 - mov byte ptr [rsp+38],01
"SAOFB-Win64-Shipping.exe"+5CF49FE: 48 85 C9 - test rcx,rcx
"SAOFB-Win64-Shipping.exe"+5CF4A01: 75 07 - jne SAOFB-Win64-Shipping.exe+5CF4A0A
"SAOFB-Win64-Shipping.exe"+5CF4A03: FF 15 BF BE BE 09 - call qword ptr [SAOFB-Win64-Shipping.exe+F8E08C8]
"SAOFB-Win64-Shipping.exe"+5CF4A09: CC - int 3 
"SAOFB-Win64-Shipping.exe"+5CF4A0A: 48 8B 01 - mov rax,[rcx]
"SAOFB-Win64-Shipping.exe"+5CF4A0D: 4C 8D 4C 24 30 - lea r9,[rsp+30]
}

No items usage for enhancing and transforming.
May affect more than as stated, use with caution and let me know about any side-effects.

Awesome! I'm gonna try this out as soon as I can.
Thanks!

EDIT: I can execute the code, but when I try to save it to the table I get an error saying "Error in line 19 (SAOFBNoMats+03:): This adress specifier is not valid. I've noticed that mats do not decrease when the script is used though, so that's nice, you still need to have the appropriate amount at the very least, or else you can't upgrade (which is easy enough if you save some Basic Enhance Material and Advanced Enhance Material, should set you up for the whole game with the script, transformation mats are easy enough to get).

[qweasdzxc17]

Code: Select all

{ Game   : SAOFB-Win64-Shipping.exe
  Version: 
  Date   : 2018-02-25
  Author : qweasdzxc17

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(SAOFBSkillProf,SAOFB-Win64-Shipping.exe,44 89 14 B8 48 8D 8B ?? ?? ?? ?? 48 8B 43 38) // should be unique
alloc(QuickSkillProf,$1000,"SAOFB-Win64-Shipping.exe"+5B4527E)

label(QuickSkillProfOri)
label(QuickSkillProfRet)
label(addinto)

QuickSkillProf:
  pushf
  cmp r10d,#999
  jge QuickSkillProfOri
  jmp addinto

addinto:
  mov r10d,#999

QuickSkillProfOri:
  popf
  mov [rax+rdi*4],r10d
  lea rcx,[rbx+000000C0]
  jmp QuickSkillProfRet

SAOFBSkillProf:
  jmp QuickSkillProf
  nop
  nop
  nop
  nop
  nop
  nop
QuickSkillProfRet:
registersymbol(SAOFBSkillProf)

[DISABLE]

SAOFBSkillProf:
  db 44 89 14 B8 48 8D 8B C0 00 00 00

unregistersymbol(SAOFBSkillProf)
dealloc(QuickSkillProf)

{
// ORIGINAL CODE - INJECTION POINT: "SAOFB-Win64-Shipping.exe"+5B4527E

"SAOFB-Win64-Shipping.exe"+5B4525B: 3B 53 40              -  cmp edx,[rbx+40]
"SAOFB-Win64-Shipping.exe"+5B4525E: 7D 48                 -  jnl SAOFB-Win64-Shipping.exe+5B452A8
"SAOFB-Win64-Shipping.exe"+5B45260: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B45264: 48 89 7C 24 30        -  mov [rsp+30],rdi
"SAOFB-Win64-Shipping.exe"+5B45269: 48 63 FA              -  movsxd  rdi,edx
"SAOFB-Win64-Shipping.exe"+5B4526C: 45 85 C0              -  test r8d,r8d
"SAOFB-Win64-Shipping.exe"+5B4526F: 78 0D                 -  js SAOFB-Win64-Shipping.exe+5B4527E
"SAOFB-Win64-Shipping.exe"+5B45271: 41 BA E8 03 00 00     -  mov r10d,000003E8
"SAOFB-Win64-Shipping.exe"+5B45277: 45 39 D0              -  cmp r8d,r10d
"SAOFB-Win64-Shipping.exe"+5B4527A: 45 0F 4C D0           -  cmovl r10d,r8d
// ---------- INJECTING HERE ----------
"SAOFB-Win64-Shipping.exe"+5B4527E: 44 89 14 B8           -  mov [rax+rdi*4],r10d
"SAOFB-Win64-Shipping.exe"+5B45282: 48 8D 8B C0 00 00 00  -  lea rcx,[rbx+000000C0]
// ---------- DONE INJECTING  ----------
"SAOFB-Win64-Shipping.exe"+5B45289: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4528D: 44 8B 04 B8           -  mov r8d,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B45291: E8 4A 0B 83 FA        -  call SAOFB-Win64-Shipping.exe+375DE0
"SAOFB-Win64-Shipping.exe"+5B45296: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4529A: 8B 04 B8              -  mov eax,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B4529D: 48 8B 7C 24 30        -  mov rdi,[rsp+30]
"SAOFB-Win64-Shipping.exe"+5B452A2: 48 83 C4 20           -  add rsp,20
"SAOFB-Win64-Shipping.exe"+5B452A6: 5B                    -  pop rbx
"SAOFB-Win64-Shipping.exe"+5B452A7: C3                    -  ret 
"SAOFB-Win64-Shipping.exe"+5B452A8: 44 89 D0              -  mov eax,r10d
}

Use any skill twice to obtain 100% proficiency, let me know if there are any bugs.

EDIT: je to jge.

[cdtrico]

Spoiler

Code: Select all

{ Game   : SAOFB-Win64-Shipping.exe
  Version: 
  Date   : 2018-02-25
  Author : qweasdzxc17

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(SAOFBSkillProf,SAOFB-Win64-Shipping.exe,44 89 14 B8 48 8D 8B ?? ?? ?? ?? 48 8B 43 38) // should be unique
alloc(QuickSkillProf,$1000,"SAOFB-Win64-Shipping.exe"+5B4527E)

label(QuickSkillProfOri)
label(QuickSkillProfRet)
label(addinto)

QuickSkillProf:
  pushf
  cmp r10d,#999
  jge QuickSkillProfOri
  jmp addinto

addinto:
  mov r10d,#999

QuickSkillProfOri:
  popf
  mov [rax+rdi*4],r10d
  lea rcx,[rbx+000000C0]
  jmp QuickSkillProfRet

SAOFBSkillProf:
  jmp QuickSkillProf
  nop
  nop
  nop
  nop
  nop
  nop
QuickSkillProfRet:
registersymbol(SAOFBSkillProf)

[DISABLE]

SAOFBSkillProf:
  db 44 89 14 B8 48 8D 8B C0 00 00 00

unregistersymbol(SAOFBSkillProf)
dealloc(QuickSkillProf)

{
// ORIGINAL CODE - INJECTION POINT: "SAOFB-Win64-Shipping.exe"+5B4527E

"SAOFB-Win64-Shipping.exe"+5B4525B: 3B 53 40              -  cmp edx,[rbx+40]
"SAOFB-Win64-Shipping.exe"+5B4525E: 7D 48                 -  jnl SAOFB-Win64-Shipping.exe+5B452A8
"SAOFB-Win64-Shipping.exe"+5B45260: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B45264: 48 89 7C 24 30        -  mov [rsp+30],rdi
"SAOFB-Win64-Shipping.exe"+5B45269: 48 63 FA              -  movsxd  rdi,edx
"SAOFB-Win64-Shipping.exe"+5B4526C: 45 85 C0              -  test r8d,r8d
"SAOFB-Win64-Shipping.exe"+5B4526F: 78 0D                 -  js SAOFB-Win64-Shipping.exe+5B4527E
"SAOFB-Win64-Shipping.exe"+5B45271: 41 BA E8 03 00 00     -  mov r10d,000003E8
"SAOFB-Win64-Shipping.exe"+5B45277: 45 39 D0              -  cmp r8d,r10d
"SAOFB-Win64-Shipping.exe"+5B4527A: 45 0F 4C D0           -  cmovl r10d,r8d
// ---------- INJECTING HERE ----------
"SAOFB-Win64-Shipping.exe"+5B4527E: 44 89 14 B8           -  mov [rax+rdi*4],r10d
"SAOFB-Win64-Shipping.exe"+5B45282: 48 8D 8B C0 00 00 00  -  lea rcx,[rbx+000000C0]
// ---------- DONE INJECTING  ----------
"SAOFB-Win64-Shipping.exe"+5B45289: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4528D: 44 8B 04 B8           -  mov r8d,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B45291: E8 4A 0B 83 FA        -  call SAOFB-Win64-Shipping.exe+375DE0
"SAOFB-Win64-Shipping.exe"+5B45296: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4529A: 8B 04 B8              -  mov eax,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B4529D: 48 8B 7C 24 30        -  mov rdi,[rsp+30]
"SAOFB-Win64-Shipping.exe"+5B452A2: 48 83 C4 20           -  add rsp,20
"SAOFB-Win64-Shipping.exe"+5B452A6: 5B                    -  pop rbx
"SAOFB-Win64-Shipping.exe"+5B452A7: C3                    -  ret 
"SAOFB-Win64-Shipping.exe"+5B452A8: 44 89 D0              -  mov eax,r10d
}

Use any skill twice to obtain 100% proficiency, let me know if there are any bugs.

EDIT: je to jge.

The other code assigns now, thanks!
This one is great too, except now I get an error at line 12 'Failure to determine what "SAOFB-win64-shipping.exe"+5B4527E means'.
Sorry for the trouble.

[jombokits]

how do i use those qweasdzxc17's codes? sorry im new to ce.

[qweasdzxc17]

Spoiler

Code: Select all

{ Game   : SAOFB-Win64-Shipping.exe
  Version: 
  Date   : 2018-02-25
  Author : qweasdzxc17

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(SAOFBSkillProf,SAOFB-Win64-Shipping.exe,44 89 14 B8 48 8D 8B ?? ?? ?? ?? 48 8B 43 38) // should be unique
alloc(QuickSkillProf,$1000,"SAOFB-Win64-Shipping.exe"+5B4527E)

label(QuickSkillProfOri)
label(QuickSkillProfRet)
label(addinto)

QuickSkillProf:
  pushf
  cmp r10d,#999
  jge QuickSkillProfOri
  jmp addinto

addinto:
  mov r10d,#999

QuickSkillProfOri:
  popf
  mov [rax+rdi*4],r10d
  lea rcx,[rbx+000000C0]
  jmp QuickSkillProfRet

SAOFBSkillProf:
  jmp QuickSkillProf
  nop
  nop
  nop
  nop
  nop
  nop
QuickSkillProfRet:
registersymbol(SAOFBSkillProf)

[DISABLE]

SAOFBSkillProf:
  db 44 89 14 B8 48 8D 8B C0 00 00 00

unregistersymbol(SAOFBSkillProf)
dealloc(QuickSkillProf)

{
// ORIGINAL CODE - INJECTION POINT: "SAOFB-Win64-Shipping.exe"+5B4527E

"SAOFB-Win64-Shipping.exe"+5B4525B: 3B 53 40              -  cmp edx,[rbx+40]
"SAOFB-Win64-Shipping.exe"+5B4525E: 7D 48                 -  jnl SAOFB-Win64-Shipping.exe+5B452A8
"SAOFB-Win64-Shipping.exe"+5B45260: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B45264: 48 89 7C 24 30        -  mov [rsp+30],rdi
"SAOFB-Win64-Shipping.exe"+5B45269: 48 63 FA              -  movsxd  rdi,edx
"SAOFB-Win64-Shipping.exe"+5B4526C: 45 85 C0              -  test r8d,r8d
"SAOFB-Win64-Shipping.exe"+5B4526F: 78 0D                 -  js SAOFB-Win64-Shipping.exe+5B4527E
"SAOFB-Win64-Shipping.exe"+5B45271: 41 BA E8 03 00 00     -  mov r10d,000003E8
"SAOFB-Win64-Shipping.exe"+5B45277: 45 39 D0              -  cmp r8d,r10d
"SAOFB-Win64-Shipping.exe"+5B4527A: 45 0F 4C D0           -  cmovl r10d,r8d
// ---------- INJECTING HERE ----------
"SAOFB-Win64-Shipping.exe"+5B4527E: 44 89 14 B8           -  mov [rax+rdi*4],r10d
"SAOFB-Win64-Shipping.exe"+5B45282: 48 8D 8B C0 00 00 00  -  lea rcx,[rbx+000000C0]
// ---------- DONE INJECTING  ----------
"SAOFB-Win64-Shipping.exe"+5B45289: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4528D: 44 8B 04 B8           -  mov r8d,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B45291: E8 4A 0B 83 FA        -  call SAOFB-Win64-Shipping.exe+375DE0
"SAOFB-Win64-Shipping.exe"+5B45296: 48 8B 43 38           -  mov rax,[rbx+38]
"SAOFB-Win64-Shipping.exe"+5B4529A: 8B 04 B8              -  mov eax,[rax+rdi*4]
"SAOFB-Win64-Shipping.exe"+5B4529D: 48 8B 7C 24 30        -  mov rdi,[rsp+30]
"SAOFB-Win64-Shipping.exe"+5B452A2: 48 83 C4 20           -  add rsp,20
"SAOFB-Win64-Shipping.exe"+5B452A6: 5B                    -  pop rbx
"SAOFB-Win64-Shipping.exe"+5B452A7: C3                    -  ret 
"SAOFB-Win64-Shipping.exe"+5B452A8: 44 89 D0              -  mov eax,r10d
}

Use any skill twice to obtain 100% proficiency, let me know if there are any bugs.

EDIT: je to jge.

The other code assigns now, thanks!
This one is great too, except now I get an error at line 12 'Failure to determine what "SAOFB-win64-shipping.exe"+5B4527E means'.
Sorry for the trouble.

If i'm not wrong that error just means CE hasnt hooked onto the game process yet.

[hangocan]

how do i use those qweasdzxc17's codes? sorry im new to ce.

They are Auto Assembly code. You use Ctrl-Alt-A to open the form, paste the code in and execute it.
I guess you thought it was Lua Script.