Bayonetta Cheat Table - Invincibility, Unlimited Mana 1

[ENABLE]

aobscanmodule(health_subt,Bayonetta.exe,2B C1 89 86 08 35 09 00)
aobscanmodule(alternate_reality_health1,Bayonetta.exe,FF 8E 54 6B 09 00)
alloc(newmemb,$100)
alloc(newmem,$100)
label(codeb)
label(returnb)
label(code)
label(return)

newmem:

code:
  //sub eax,ecx
  mov [esi+00093508],eax
  jmp return

health_subt:
  jmp newmem
  nop
  nop
  nop
return:
registersymbol(health_subt)

newmemb:

codeb:
  mov [esi+00096B54],#5
  jmp returnb

alternate_reality_health1:
  jmp newmemb
  nop
returnb:
registersymbol(alternate_reality_health1)

[DISABLE]

health_subt:
  db 2B C1 89 86 08 35 09 00
alternate_reality_health1:
  db FF 8E 54 6B 09 00

unregistersymbol(alternate_reality_health1)
unregistersymbol(health_subt)
dealloc(newmem)
dealloc(newmemb)

[ENABLE]

aobscanmodule(bighits,Bayonetta.exe,2B C7 89 86 B4 06 00 00) // should be unique
alloc(newmem,$1000)

label(code)
label(return)
label(extra)
label(evenmore)
label(one_hit)
label(insta)
registersymbol(evenmore)
registersymbol(one_hit)

newmem:

code:
cmp [evenmore],01
je extra
cmp [one_hit],01
je insta
mov edi,#2500
  sub eax,edi
  mov [esi+000006B4],eax
  jmp return

extra:
cmp [one_hit],01
je insta
mov edi,#9000
  sub eax,edi
  mov [esi+000006B4],eax
  jmp return

insta:

mov edi,#999999
  sub eax,edi
  mov [esi+000006B4],eax
  jmp return

evenmore:
dd 0

one_hit:
dd 0

bighits:
  jmp newmem
  nop
  nop
  nop
return:
registersymbol(bighits)

[DISABLE]

bighits:
  db 2B C7 89 86 B4 06 00 00

unregistersymbol(bighits)
unregistersymbol(evenmore)
unregistersymbol(one_hit)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "Bayonetta.exe"+540F8

"Bayonetta.exe"+540CF: 74 10                          -  je Bayonetta.exe+540E1
"Bayonetta.exe"+540D1: A1 60 DA EA 00                 -  mov eax,[Bayonetta.exe+AADA60]
"Bayonetta.exe"+540D6: 83 B8 A0 6B 09 00 00           -  cmp dword ptr [eax+00096BA0],00
"Bayonetta.exe"+540DD: 75 02                          -  jne Bayonetta.exe+540E1
"Bayonetta.exe"+540DF: 03 FF                          -  add edi,edi
"Bayonetta.exe"+540E1: 83 BE 08 09 00 00 00           -  cmp dword ptr [esi+00000908],00
"Bayonetta.exe"+540E8: 74 02                          -  je Bayonetta.exe+540EC
"Bayonetta.exe"+540EA: 33 FF                          -  xor edi,edi
"Bayonetta.exe"+540EC: 8B 86 B4 06 00 00              -  mov eax,[esi+000006B4]
"Bayonetta.exe"+540F2: 89 86 B8 06 00 00              -  mov [esi+000006B8],eax
// ---------- INJECTING HERE ----------
"Bayonetta.exe"+540F8: 2B C7                          -  sub eax,edi
"Bayonetta.exe"+540FA: 89 86 B4 06 00 00              -  mov [esi+000006B4],eax
// ---------- DONE INJECTING  ----------
"Bayonetta.exe"+54100: 85 C0                          -  test eax,eax
"Bayonetta.exe"+54102: 7F 26                          -  jg Bayonetta.exe+5412A
"Bayonetta.exe"+54104: 83 7C 24 10 00                 -  cmp dword ptr [esp+10],00
"Bayonetta.exe"+54109: 75 15                          -  jne Bayonetta.exe+54120
"Bayonetta.exe"+5410B: 83 BE 04 09 00 00 00           -  cmp dword ptr [esi+00000904],00
"Bayonetta.exe"+54112: 75 0C                          -  jne Bayonetta.exe+54120
"Bayonetta.exe"+54114: C7 86 B4 06 00 00 00 00 00 00  -  mov [esi+000006B4],00000000
"Bayonetta.exe"+5411E: EB 0A                          -  jmp Bayonetta.exe+5412A
"Bayonetta.exe"+54120: C7 86 B4 06 00 00 01 00 00 00  -  mov [esi+000006B4],00000001
"Bayonetta.exe"+5412A: 8B 86 BC 06 00 00              -  mov eax,[esi+000006BC]
}

[ENABLE]

aobscanmodule(money2,Bayonetta.exe,01 81 E4 F5 00 00) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:
cmp [ecx+0000F5E4],#99999999
jge code
mov [ecx+0000F5E4],#99999999

code:
  add [ecx+0000F5E4],eax
  jmp return

money2:
  jmp newmem
  nop
return:
registersymbol(money2)

[DISABLE]

money2:
  db 01 81 E4 F5 00 00

unregistersymbol(money2)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "Bayonetta.exe"+FEA44

"Bayonetta.exe"+FEA2D: CC                             -  int 3
"Bayonetta.exe"+FEA2E: CC                             -  int 3
"Bayonetta.exe"+FEA2F: CC                             -  int 3
"Bayonetta.exe"+FEA30: 8B 44 24 04                    -  mov eax,[esp+04]
"Bayonetta.exe"+FEA34: 89 81 E4 F5 00 00              -  mov [ecx+0000F5E4],eax
"Bayonetta.exe"+FEA3A: C2 04 00                       -  ret 0004
"Bayonetta.exe"+FEA3D: CC                             -  int 3
"Bayonetta.exe"+FEA3E: CC                             -  int 3
"Bayonetta.exe"+FEA3F: CC                             -  int 3
"Bayonetta.exe"+FEA40: 8B 44 24 04                    -  mov eax,[esp+04]
// ---------- INJECTING HERE ----------
"Bayonetta.exe"+FEA44: 01 81 E4 F5 00 00              -  add [ecx+0000F5E4],eax
// ---------- DONE INJECTING  ----------
"Bayonetta.exe"+FEA4A: 01 81 E8 F5 00 00              -  add [ecx+0000F5E8],eax
"Bayonetta.exe"+FEA50: 81 B9 E4 F5 00 00 FF E0 F5 05  -  cmp [ecx+0000F5E4],05F5E0FF
"Bayonetta.exe"+FEA5A: 7E 0A                          -  jle Bayonetta.exe+FEA66
"Bayonetta.exe"+FEA5C: C7 81 E4 F5 00 00 FF E0 F5 05  -  mov [ecx+0000F5E4],05F5E0FF
"Bayonetta.exe"+FEA66: C2 04 00                       -  ret 0004
"Bayonetta.exe"+FEA69: CC                             -  int 3
"Bayonetta.exe"+FEA6A: CC                             -  int 3
"Bayonetta.exe"+FEA6B: CC                             -  int 3
"Bayonetta.exe"+FEA6C: CC                             -  int 3
"Bayonetta.exe"+FEA6D: CC                             -  int 3
}