#eLmw8%dJxUJo$uP/Jf;Wo@5Are_k+Z}$7O,r-F^R,8K6%Ooo*+1A}5tslu.-}jU:dtPpy/ir.d]Bzo6XLb+8u56K2nURt4A73Wd_NEc+;Cca5UD,G6xBn}4E{O%#EuVIMc6NE5^rPB3OP}I@rf.*mo0+}CHS}$.v*hBMFL(1T^CaoMv]?eN(2N8m+IKiu5AgrToy}r@]H:l$YulPCyBpS3xyi1{jjcPIm0f1CZEJ0wZD]ucZu[j#?3u^wb/MVaF_Ex@U1Uwavu+adtcwnWyfp3S=!rx=Z+}0IzUlh8cMq-E@yP-:.FmLeTiC9As%==:P1c+w@!ST8X2*h_nXsbS/C_^hM%wI5^bVy5PbtXW9Ete4Z%x/d^Q1]xT-Lp/3z[g}Fs-4#=YAd1Rh2#4wkw.Omv3k[%}NakuU@sPdr.mD@h)*ht:+fFp2Bc{4PXogDf:!PIvVLB]*GyWw_MZuJ?}d6;caFiQH{=^wIt7QA[_Le6aEZR%.8X#v?53S8Z67yN8JlBk0]CI;A.H{aR!WEADKXrG9vL*Gh]c6@Fa6tgD_gj@(PFCX.:)C=rfdC)25V%d/Hei]g44R/,XNe,qSHqFqCpU(,4Y9A!$h$+*5Gezt+Y51itq;)g;m},nHzKS,tu*,4XI=9)oHo2Sdi;WoNqA=US(SM%ZWNmWO.PyWM#nrfBWPmd_+3Xg3)LAk{P^PfxZ7m*wgaT:Zx3DxQf%+iTQdW3P#{jZlX^;a4aeLT6w%::8(VuA3J;ZqZ.(mKb8M;Slvid%Njn,t^+nycx9;9v*izY;7@m3rH;Ttg!VFTZExyOnDJ;n)njzssZy]:o52HpSsA%B,x!L+ml1s8^77z7sS2pKuT1u%c_[L7s^.JO@TV6V_IOb-xTE+0^N%uctjOG!/u6]fPU}2nK5r@Ec=am4.793H43[6vkTfzoZDGeAo^B;nIWv%,1Bb{[X8;8!F2Rp%}lP3v73=xtcioXA^cX{tDDGGA!@6tj0BusKC.H.UI-);6J}jtyvP/LE1sloN3z0Vtx^rJn!IBIk0MF+ztYJFbLomiqiPP23!Xo+M_anAvPIg]?3Q]dM5DKd=oZj-;vNJBvUoi@8S!mkO_rER;$4xuiQ^A+RPKnq(dNQN(rawn]$U$3Xxf)?%rSV3f%AC)Xt.l7!;D57[Z,hpepTP]ylU.fbIW1V%gdxCZpcKoWc%!wL(av?ZA8oNq.5#dTX;P9,KqB#]7bieyC(HayFZ$/qa6.jwe}-Tvb8!3lV6gWde5]ABoggs]p9%?NQzuGQK%{{G=V,@V/+Vpz[QX=rdQS!8JXXvw$0Gds@AlZ639ACK{lcu]Iv1F(7OHyZe{bnEQPEqGaGt/*sNWJ!]IQe,o7IW#z=dALRqkAk%pOy2pXPt^K)$a!/NDZQi0Z4xvqhQfiEXk!((Z0vuHlr:z7!a52TpH02M=U!/2hjo$M}jk#0ofB4((-o3X4rk^s]8$PFoVPfAk/tFVSXG?H%PBCe3RDEiXLieb{BKtwSU$!^?]8@(Dp7VJn#L)mEiFb/t1;R(^tdVI/+eW:0HLy!0[F^*(}+]_h[06Ubuj:PX2w)rf3jH8$b4Z*m]YdY(Gy}tL(E-yf*CBo;lHEn0zm(#(_Ac%3$2POvJ7bLu/V3D$45Mv2ZG{v=L@i+clH!.,9z_KwtgGkRI.qXz.ONpf!S#+h^Sh;p?@yL^TcYAd98m#PhL;Li715u#JOQ_@0?#1(D+WkcIPyg#,Du:3I*uA!TFzN(9T1b/K615[bJ:SQJg;B@0VU#)Hd36{t0}QY9Bo%ClX^3rGGEJwpy:a)}2sT)PpPRA{c[ddxyw3[qXe$ppf,WCW4w*oUpt-OF[8,wOmdq,]^4;Oio{f[6[NG0OP:x;h,Z8Mkne4$EA}zi:pxTq6lUXC?=]E!;]V}m:$$=6@dK=b48q$cKcN}HU@G#_QS#Zb.9u)8D.c%E9#b)H]%lr2a,2ZCZyS%-+T0O3AZytX8o9^2OE4wXg8JZvb,h70dF;*k-]_JOa2$c8IDa=.v=oP)pZZMyoVI(T#[twxdylZ/@mBjMOyeR7:a.C{V?}2!435lHDm+5I%BK#HwSrPp//2+0pL?!,eB6;f!VY7$GUh@?MO5L8of^ScvXij{XlE9+%t=tCD)2V3{X[gE8S6^Lnua_a(J]2$dKHMX1u!*VM6.Lv2;heEL+a=y{dRII$4/=if][zX@@oe,=Fb7sX^BbaC=^/jaA.lqSH^A{KCoU6KJ%kq[I;=ppv:[BH6b?gJ!qtcXHxibJu[rDJ6=,Jo2NGXZ.ESg^?=%)ql7$$dbZHgGgZw^wY0U_iJUo7q]Le*Mn{*]u:kO@rmAPU_rJeMx[OnN[5KZOg.iscVBHlys%?e8e9QzBFB}Bg0bF#-Ul*T]tW:NU)60D0v(Lk7Cswf(+$T7JN]m-vTO7VePY=5VrDN?PCYr^^3ts}7L8}z1ukN(Znfw!aNkkNPxn*%:k-y%FOpN,*rw3T/dP;2VG1l2%)?]RB(/F)RgZk4gcp]:g6#XOs]VoEilKd@O;xRu1QLySZwx2BPiH{Jl{*jms3LVERLt18,IV$!pnDgyKwHbP=vzYMk_w(qHYE2ofJXuiW6foMyU0!d#kviBTN*Wk5uVXf={VYdmt$YEB+*!O!.MfM!AZBLPHhlrd?9uj7A*C.Y[0+E.x#dVnH+}$d]0R=XsET]!C$i]*H5C==qy5=B@ra=%.#zeWx0ffk)WWu[KMrN%]:X7bPeOX*f:m.{d,DP[(#*Ry^(n_?wKYI_mnkfibNKbnushV:=;mk3Ir85:VnMLRerAE+k6j5a3stV2,cWh0Cvtit,4Hrr_p)8I:,85m%F-NhjUx_GRTS3malhA:=m9i19kz^}k=Lv)Afz5XCPKKnj9(+Wph2gX;sE}-g.gR.%a)*Y_,0wTyjlr[/ngT0HOD}a?y0Cy]A/9./]]cj7*GkT%fQk[rH}M.=[yMkciGs#zD;,Ed^[A%A?0Lxx%n,0eQHoCQ#x+0O^D7#_v[-aZ,;3^Zcq,.%#:7M1D2++SXzSb/1p+UV1jU@OdfGgZd!*bJ1C-k{#St{+,.MedB(75cbrK7+7Z6@t4cH8o?fEo{xKUB4IG87tOll/$1wInF;L^U]++ElD$b?/6Y-!cjxFO;0df.4$glpXz+g188;[{m$L.Rr^;s]vk4f9hhSueY$vZ?DX:3HvD^C43OQPTzyFWo+J%.vLs62t%A^5vt=k[:b[sg%Il:T:-,@w9%NFnOFcetk_{t9@!LttD6!OY35KPq3zxa_6K.kkp{_Bq;2Q6)8O-ArA86o;fQHo$?l]U[z{Ce7MM1L]P*MhN$#F2@+UC3z4Q0OR9p05$JI.$7Y^j%g#PiUTZ7Z^kkBlB1x{sheBNPgg#^#0o-Je8pFO;9=s56NW$=Pj#{0zMlcnOc7R:B+}Ro[Wm{)1NG2MJ]_:zqQ[x{21u[YJ@d4#qTH.Yby:,:33l//yjL+oxl/BxETgoVkI!C3nC:r#Mu1D2SsvIgqTcLHd-g71nqs5bP4YzUCsjys.d+(%w([l0rF$EP)rKw[wDK4@i%=py/94?kGtcbhQJU8lhT^c!+:Ib}(=VCm-cm0C(Ac$j9gLV=!Y8DuUro;bd3-FQ*^3D7Z-NehOatgIlEc1ogxqS?LKonp2tS^S@6}_j$vw?Q?L{#6*:PzTY=F#C4tYOjuD#+1d+Z9HWSerdsSRCBeD8zNc,H:MQ3O.;s;cTI=bu%sW1s99X3#sKEfk_O^R+)HqyWE$vWD$fdDiUjo*U0(^gqVh=-$u.s67D)]ndK]t1Y!}L]GBkawp.-q,MN:hc-U{pj29?],jQ:@;Ap?(s.Fb+CsiGyi3^m_Wj_bGZ%jwF;CR@:l6o#kqqREy#0_f;yqIOueeFa9B?3*#Qn]+YED/3tW70}V8[8%}h$phuvnWPo4=MoNy%sVZ2]DmC,//7-Py}T.376J}x,=c2hDht*(bZ8HhmzA$QbWPL;/v9%i^FeBPR=]n?AWZd3OmG7woyjPQH-{W[X+j;!25Awt=Y,hgY,:=Xocju;+j?0;L:SJZ3A?VOet,JgrF:%P=Bd.iKp%YPuIsZW8[]trU]{5d#/R1HJTwv)wk5fbzLa(4e3nCcB8![4[F}uGD?+*ku!{isBF2GFDjZ1ggbM?Xe;XPyYbyNm9wsa$fzkMR[x5PC=45uPVUn9mJ+F;:%k#7A(4wC;dGMPT9Vx);+)5ITdBs@!7@)JDw0(!r6kXcdbBH]OW_(mTVSz12V_!S,trp5sHvS#8O-L)ZyY2.s-HvW%Q7+I/1N#bN.]{D00_;VC3t)+c4w,;t{4zSNqxc/6[t^lb)xnYMb4.Dz88IQ+{oLov=ItP]c;E;tefP/@*b+#vz2Vut};{Y:{nf?OV2hfg!s1nrffIE9ytM]eU#6k=;%OLh#-3R[10KI#lEa9;Z92MM}$;c9M5.5j%_ydQJ!H(y#AgAt3(WW97o?_Lq!/$^m3O0+DU!U%?WDg==qeRf.$WHSFbLaVib?u;b2[PO[N#{a.798Yj_o3c=/9N5iz.aH0^M@S2tDj#266?#/:krSQOQZNawTdP=0}cSZrv*PpTXGJn_xX?bzowgg(nBZX;JFqbWdR7L?Et.p}U,vnyi5eoe2x^@K8iVvXv@=jpP5g07PgC#l+B.M!xt2G:3dHFN/WA=n38A,=jaA[l,,ELPi]v{v4JknFF@Vmi$%($;_wf?w*#C9x33i#4UNwcV5}Flvuy93.!IZ;:^I4HZYIo%BtGwi^N$h=]zL7W+-mJV.!V*cE6UOA8N1]a-sbY2^p!;@Xw)IL77ZBp2P3Hf(qC3fXtcOkLSO%uU_C-)6%uZGW{xn(^mFtySs,Ba8p,9!bFrk$e8GO9C75F1}}Z+a,({#6VJ+a?fxs;bg5n^x8j34nsnH3#{elf@G-twkY}?jp!Ryu%ENf*+i5HsEr$GA#=8,R;p@eY3PKRwW#7ElxN?YDKwQgn?!WYfLzVcA3{pf#HsiS0m=)OrVMr=a5$RO72_$pGM-q05by:e#e8v$o?!jNd#-5iH(jqTn2I4vkgvMY_HCH++2Wvd)S%b7j3dy7Za5qo7^4{D5d-cZfJvBy-@W7t-i3G=BmWvV:__G^ji!K/D_U8THgh=6sS*GkMJ;s:T1,g#!8Q4S!EN+J:A;8KXI2_MTLq;BzxF4r%$#!:D@*;w^tdD17!?LC#nXd=I4#vekD@En1K+wj(Z0}UoL;L8:8#Uk2hq*=6si_-.LqA1(w3?$AX$=[t^+A!o#KbW7s!VkSFvM%]_E$5(:;UZe+2rvd4LnS$d!EqS-sXL!BHh^W+yRKL?kk=L3k,HH.GHrb,(V.1LIq1iPw.NieMK,-Sb%YMy??w423X[Ofd@o=yLk88oLTj!4zJ{xhD])Po@y?U^VlK3%:/n@;=ly0%]R*LK$%tWt3(bT:V[MfTT1;ZRaOd7*o18NS8t=!hi{kWBf+EiB;Vy4+VsRtm52N=s;wU;Auolp_!FJlDJr!9ofk=%g/ni*^Q1UX*.q)dsdVJukV_*s4HgbePMw!8IG/6#e,J#Q}_y7A7!S{ont.bUTMp%um=a7NFg,hNefGy$07:@r5VJLP:Ya.MlR[HMA)]u[O2W1Dm4.6=9o7hV]u_5u.h4#8/o#ZH7H]6j7HOvwBfs=[vrk3*Ml:s(gSU{vMYVs)oq{O#0::Ws9PO.xTD[HMkU@2uPN^;A_i:}n#uSsnxb%;R32;6qE:_{YeFW.$wjuRISZTJLDrSbFDa/V#t52lWM/-MV5XGh2V$?HQ_upaDELs/[=GtPgkKyJHz?,2[F@3wT:4$*C!JZ.x!aRQlK8v:D2g;{w$3#)S:#3Vg_!XNk+tk)i/e:xv[#JCoe}+xAsl(e/8F8CII2}:S9TVv(C$0r0)zcv/hDPUx@xwyQ*RpIi@LlyD}49.U}Xg=EZdNgYW4yTU=EKo8nC$$ES_XK_8Hv}ci1BFt_e}EGdAcFpOGUam*_q8%w^.EA!XO-kuEM7xzO)+zNZx,wQwQ_38fe$l=W!EVgNK^(}=zX)79msyBZ$EoY6KUqi(/H[iJ?l-_z67.P6}bg:-)4C:urWkM:uvElrNAYqUqCiLYfHQlze[6*hr-Yd04%ow*5F%]Y[zK1gMWL3cj?RW*co#T+2^#)@TFMaa8fH/{bkc%=ELna4Eei=;Gs81cp:a.7o)vzC$OOXm]]m/niABW{8L6(_VBHk+y/ICRpykTNqg6p-Z$Op?CKTHKAn:kpYc?AJAaPUeQSi]sr#OZ0L:Z]Yazu_}:@D3[%/!euOqEQtGOV{!l1^9H,AW],82w5cceQ^]Hk2IlAiF#bcCST:Y(v^I3ijpi8I2QnIuC%FD@Nz+9XjJV:a8Zv*8QeyMEi7?7.r(Cy-:w:CSaV1D)[*H2gqRecdz}E3cIi72OMJ!VnGg?({QE54Hhmz_e6,v_v)D[h%1*TSbFC4]y;kN-5[-BMyrS_0JrT.z(;@VHqb=wM7bSK{.RnS48D.Y_ZM0U)0h9s,tdY]E_51rr,.wk.xE:kc4dDxRGFmRRaU}T*VZ)iYFL0NfhUBb,:mP{hBA/IY(Vbe?cc}%gTiW/GRwqg}xY_M2xwCU;r2eFNFxoV^21xM{?kh9Gv8HtK[5m@Y!xj]9}2{/o;V2Po_Fsm_/[?sMHhRZAA,9p7eVDTpwEJ5_4oQ=7{d;aSYUFtIho7W9^iR_=.mtO/]QBO^b?n)R{aFU8t$ddBJ[!9tEV$bIuCU0l/WyOFW5=lJ7a?xYRfV$wTTo2YakJ*]zg?P*^2ov]m*RAG{1)1fo/xyNtuOYB3Yt:8oC3?FhDx?x1ZB8-zu/o{+#R#M;6z@$:n)A5Dy+1BGE3Hw_JOG8bbw7qA?igAIa9kBVfIK4y#{h]45YAbDJa9zO2uh7s;Tx,FsGG]kU3BDPocO!];*])y5s:9]SV.@Ya0u^}?uN72.@;r3vR[aRXE)*yeUO@EJLVAuQh?AymGL9O-FC(X7{E3TJVq9LI-GJbAg}oqp%m+U5Nd}-hh_?nPiQ[x1B%KZ8i0@-MNmpmR]G$Jb-EOVrmqA7BjUGWQ@o%eSesbeBIViB)wag%$Ho=?vgdjdNkQY.XL{S5i_s4J:,4#[?mV9-KLOv@]2$DO*Q]m^Ay8wH?%wThvpX4#+?QYdZ8rb]XvfY*]+xJH4:?Nr%?$R_*KHLxnx}#0hd}:b1nPMWF$Geek!1/cg{a1nE9rI8TY;Pb0UFsGg/-C=Nkgihn9aBt:+,,7UYJf:WHH8Nt0!3^A(Z$CkTy_lE?!7q7aD?%42[#A)nZBzY}!M1bnpg]B%2A4h^Bg6Pv:861uGqFKa}A3I;@a6ECWBzW:n]Eg=tPT*iMfd_5FjYC*{B:JFOHurn1ni=OdjPO35y:H-q,J.]+;Ju.]iXEqP4wZ]kU)kzQ(P;)Sf2o?[+K1wq_0*}s2P*Sg1ZaK@xS;^e2_WU/o$#edx2zCZUEpqTzB0XntvDca49hj2/359ji11d9y!b]2O7/Ka.7.jajK#3}!K#]B=#mZF;F#VU7[G=hmu%.mQRB}RhAnGo]8L_/4Ij,dRSCoLRUDO,tlBEdBU3m7shs3P]OZ0_!8R/y?WM5H^IO}u@cwGEZR-[WRPHUJ84*foqbn%T5X+Tn-V+5NCfAU5ITHoHi8l5ozdj,[eOmwnAb.#pwtn$55mtI0=Gwev6r.r.@%TunrIc9##5iFT+.a02]V1QVmkm5E]j)Rkn%Hp,quBhZA3x%CIy]q1?ww62Vaa{)k7(]pqIS+=w6ED(:AA*f}Ctd9:dB8L^[EFR/cYAap(*.hlz,E*pA5gB@cP5V3A$#EbAX+9*M1_Lx{3PaAFg,sp-K,Cz67zG^_oMsMK[_{fp.3fx+01]u+ZRW]rTj_i;F*B4[e)GV!ws+=NaedUqah9DA*]sz:L3Dx^4m_dR?T8u;.5kT_cq6y@]IVeRnn:BA4s)K}7)K%.CqF/@qd1fk4AaET@m-?:MvsFhbjg*^Xbqg5kQe2jt9:DTthQ}M7o}#ULvp8:M?T}Q.=[4pP,y#T,=_$k/_l^IPz#xBLssh]Y.aQ,rC;I0,qpXzxF_adr3kYr9ID4A?;vfDD06q;xZ{}2)!ZQ.QD[.r7;Z)!K)}hsz{FBuIHo]o5:]56K5:qmpZ_RpLkusza^Y%ZMfq?U;97pwFQMne$52WaPWTFxLkZ9KS6:@}ZR,cv#/TxS/8nXX-k/j5*TMp*9xNP/i7Lg=;hk!JRvF}4L+Q9mDiCmdt+aHD;}Fdbs4!aEVTd]5q{pXK6mQPq^yk]nWWwiMiR-03dn*V6+5m;,b4xyPDTGIxIr[sb5q#f?:f);kg6pDspx,B2!1zm!g#6.1Hb6I1Ps2$SgS^d***g#31n#Kf_474{FO[KH]z53:CPc}v[8geIN_:T_2ZU$?L2D@n!Eyxjr{,g{[4ii3m6]MKs3eXW:P?rjnQt3Q5SqyQI;DX:%A-p/CfmYwj2I6AE88W?%g#KqZM0Qoe:fQtw@ngMflu4-*eAEjQ5-%BFSi:ON6*AO6zt6GnErq,#XAf!b_)jB7knX+d9hF/OxGBc!A:+21]5/+lPFSgrE]yu*HnsJR:q,cz%@$*Al28wWAB+4.snd190-0Uce:,Va?No{sLn_b8;3Mq@;YEF$!1m*Y[2+:+#V1VS%?)[V#GzAF=loNadaTfbjA}T?UEQtNU+{GkMRC](NT#KOc$P5[.C8vQ#*;NGu}@4YM,I511Z_GLS0VL9}T@$T!}nlIl#b*P)Qw43I5%q)LA0jKIfA(@nzHxJK+pGWARNdX%MB++EtbXX,m;vBLX#TQ@YZ@57]$J@irfn%}-E.7ZE9xdjzvHaggbPrph.9TlbpjqImvi(FCSaaeG3St5pGV3QX[6TyVZo*;2%E!4q.jn;$Al=o{G=oF0E;8sOwQxokuvY3=G51;#Fu3R$V;Fok67lgUJdaVv[Vb${}N(mZ,lzfDe-%.4E#TmTyqP9+##hT{s+Hk3.YeRtR.cI(m(G2TU{DvrH?3Y2;TIhme}?p[G9!:Vx[K{Ln:aReuzLoOCbI)r[XNa@irp[hwely6kCfnajjh?RZa1v-I:;1mg6R2D+O/jj2?.7Oywx0FY-c0,%+,GLbx13UN+p1qAj6e$r=#3koxfBHTvIB41S=$iU$DR;EePg!ciT;qajF/R5fCGkp1,x:r{$z^h(2?keq3+1P#w.]MGu1!r14SiB#,(R.uo-R$)u$bI^J;Cr3E*1i3^^EQoS8+0Z(cPc?AxbKB!94hLFjF0Kdf}l8)8?l)DU:U#%MBI=qEc2k0EM4]7mC%*+@yOB3:hTCH9vKsAc#KM:@y{kd^XH?D0/=wvhiqqT+R2%aq2Mx-p8hpUW#VGvOh^G?4yFokUMDjsolVLa=ERViojv].x;m_1U5N/MQ(0sBhht$eDW:Y^:^bj7xjiLrxAFwzh7k9AmQ3P$I04LFs@4sWI6o)H:5ZoWl9pRM]APY/-.ZZ#xp89,Ds2^]!l(dAcpM1REtWcpxs%2RUap36RjRmmPAnQsEL%xT?5LcF_!NFy:/te]CDn@Jf3iPa@@DE=mkBq;aPL:CTcGi@mKC5Dk9}DbA0-U2Gdu}3rRF=0470m+c5):FMaZc:fn{Dv[X/OSKY?h3U8.]qfaMtJ*W8e-p6M#/x(*$vm2zXz_mLC+Hjhsl1}L;[]@VQR/UHJt(i!spD2KgZ{D0%$QFe-/W8ZNqhNrv1LZqNGM5{-l!I(W6.}32B@Tv!Q=l!/U^?)ubk8tKOhS,87/:13iSWetXTidKU0VeU=9fzoHeH@A#HHoayBi}.rNRnFo18$?7)4:mtA7Bn8;nb7iw;MGofGMuAHU-Z4hueBC{kDySW+@2X1b6B0ar/JEp3SIlGB=geaJ:Ob2Wf2J-#/SdvLPrmRuO*1oi_=KAwrcXGnZMy5U#P!g+hBw[5/ECSkMY,ps*yX_e00;G=ZP=dY@Rd[JECKM[bLmnIx%rVlEMYiir)Xew:cH4)}9R4XFon{[Dp6Hd}RqpSxi4s4i.YXZaNHqk3N9w@)-7+PJ3TR1psIiN}^Uf7dQ.iEuZ9{Wh*2;py*d:l9eLBZq!aLCA0qo/$1nbsG!#(?b:t@jJ%%SB$lzR2$Ms;tZ)wpvPwP3sNFBy?yo]O,-I;+unPske@qcS},ni65Z;[=Xv4IKspys^Iv!.dp@VA1J-wb*yAD7u*FqCr@jlW8%H:Z73MM/O;w=Z4q5xQN@WcKX_xT+.I0ksM%:n0{UkQlnB++nmZ2y,rhoRNDw#/ry#FJ01+yQPjSoJvCMGMP;vM4;kUS%kxq[:1Frk5OFcyrx0U9iCub4nPQcF0EqWeTTzNg:?^]:{XH(5-x_;o0e8SgQb)cDKR-8_C?g,gvn@g2Ve#ApolN!SKrZFF5#DquDnc.$mKd,A}1ly^;l}mpyy@=EYl4LwR=.gqG2_;*:b$GepudtnJ0wVnv/qub-$R!S6iB[z.;Y_H!qLcmM3YRO}0FEu?MOLMLjLTBEj4?fJGadEO*lM;c,-m7cTJ2;o#W[8]1t379+@OMF(sZbAe{Z#g9^/c:.a2.R$APk53GCnD]JQcU/lv*R@R9)_c[O}d?tiM[r4^jJV/GO!@mHS,)kIb{zjRWsHy3RAi3OirT6[we$DM.TjRIU.K0/[ZI9o{SUQb93NTqKE6z,C}6fG;R0e;$!i#3pv=jUjT=Q:ijaz,nf2$PIXBzP}+paML{:#et1LAZ]7il-6Y*t$mRu}u3GYLZQuJRnoi?OzTf#Nz%/$zm9PqAXh5nru?aaF;Zd]0LW6GL66X;,DBAL.gQ9OnGu4wVjd5BIHZ}()D[!^$)sJ.r;5gz0qciztu*BO?*[mb%L;U:;.M(TzOIf+ULmDMssx.p-s-]%@hPLy)zB9C$%xKqr{Nc?.L)E+4v$3A5.ez^icQlyCM-*X]gL=Td3mY?J-!d1c4:yH7(EY$:##yv^eeCgU-lai-n6%([]J]XLtaN4lWy]Cp2BoC#uc_zS-5ynIeu6VmvUzVUgR,Zix%t^G}h(-_K1fuEX}^uvT_lUYtx#Qto/AFu=.MzwAbtxJa_sh0;c2:7fTa/:mk5+8yliyBJSea+T*DJKB/6OVb_p5bE3:b5TRDqZLMYA%TSF^;GGUoaN+SnD*?3a8H562[Xp=0g_Hh$b+g(2/qu/C0xrCZhV?wpR[}OTJNs-@m^C!zEc;1C_$!*]LRYsskqT[-jIuF=k6vVz5p#?XLvA22VqS54m3k?nS*{VTp3m]++gj#KejAE8RGfIV?sfx]]-vk6$9yu7!y}[n,Tb!(+psGD3,hGjPV[xQ@SxRnM:m?xLF11oC#;I/m,,@Uxtz![VMw#xDfOzhz;b;D2{/9o7!us_Ir2sK-[]o(Y49y*-:@(=YDq7%aw#e(SI#1MwYEf=)g=Jc]-i8(O;qjhkwc5o0fL#hws1tgToQ,^3WeX:IHTsd:FbY[*ef@-7zSKujJXw(j$FL%v:OPxr8s}BsX;_^@1zK%Rno}aLG]ekNTl+p=WXW;mM$%n/jhkzZyjQealy(eaAn8RWy4S#f;h?lS*RRw_r%1E==xU.0C?;MY/kw6zPdQ4[nw$jI]..H*zdu:8i7UBSsEtl6=i}@t-Mf.eIV*-p)MV;f(Q$UAZ5s-nd[85jfuDUaQ(bMcnBy*H8VH.Wc$IlkD=2HH7%RFup%zR8Mji5sYQK6#C{w5S[!$ZIIvN5*zlvvD+2gl-?8!8cT1HdD,K7]wZ,-Pp9Z[!*eXXagKjmM?RENF[B]_TvE;ch.0is79@([qoqc3d::2@A1^FA4iP7QC{M%6viaKYMf_s5e=H)EUqVuUR:b32DJH!P:ac4s^$ciaF1_^;J4;d*TDS]%T$!5Oc98yXf_R08!3e7:LFXqoJ{^*mAD@3AS[h,bDC:qD_931d4[($,89B7Et*TXzoAN@f:CUmT9Hh5Zfh}$0mxEOzF2BPeRoY.p]]6@BZAJx=$FKbQpTJo40/Ts[*8Dm1J96?yIbZpWKvp.Oen2=:i#q}_#mO,dJS2O1.}gOHhq5hwEaJ_JC6zD]DR4r)P}ap/#k)p$DZ+3u-xHG17}GC{QcgI5(+F/kIe;sH4YYD;i,iFTa5vv9O3Z.jT{/c!!{3mgl/OPZq6pYQ=9khdf9:Elo,95bpQpb!sL+MY@]hF)iC=_Z4BR2Grc{1;cC(.ACl8@9dP.g]xfB3f%r5w)l)+mJPG}P_c8%,7xIwrq[4kvgj^ci[N%HgMC[ny1-yrW]199rNqfYNEhEULc=r,-o!aXW@FoBDu=byJo7)oyf@[;e8w)#ig4Oa+lyOnF,TNi{,g?C)HT2F{qYkYr?L,-_y_F}VAyby(CqZo;z^ep#VX3#MlFNjeOSDs;J=uR;B#JO1$iKiI9-)PrSxJcAT#fFQ=d$,t[W},zn/}IAdxW8ZAJbudF-ri@QMRxgaxp;ST7jLeYdG;hApDq9Gae4EY-7W9muO1)lSJ_6S,2Zc+dUc7%vg@gi3wq^qdH0xoe7C(GZZX5h*x$D-cwFH5*lK(Ce*YJz]9/cqz58@)]sLkY[U]ujYI*B.BlXWj0Kb@sE$$yz%ZKdl^]S_@*pAT0_ANT[)GPR+arOA[[QPXX$L)7h;^Ira*y-9(Emu6=@55=6mk$p[2,gs2PlPY(%hk;0@?l5;DbL:{2sgKn,4YJRNRK[//}+xD;qZArH2)YL^pCCQbMa/%y]m{c8)42wk2f=0vvDCSxcqRvpv8Q,zq??^UI-(.3{XHL;ftXLEkW7*uOAkE9O5wz?qTf0xx]fCrPHQi#o4FZ59B}-/:0n{XTY^*cC}!FynI}!O1nr8)]+kP-YY9[A0C-a+Voz2?^+]t,/)d+miND_E{0wm%e%$u9:y7_y{!pOw;KhJKV1kI-M2{u9RgY]$qhtm]74Cw![77Lalic6547YNk-[,jU,$O8=pQ*Tu81)}.aE(@eucgWV*BUu=lyaWd$oFt%}3JByuJB#]RQT88De;m.l-O/Fy^;sv+K?w3UCTLc)r*H[,_MJ$q3K.%kpM/zqrn]hr8wF3jd,,NkT}!u7zDU542wFGJT,fWDDAEi}up!E(V^M0a3hhB1CiJvoXPEVg9LzX4kh5ERR:/$3?0e*4y,*c:};MLkwfhTU:g#xF.;d6L@CtdiX$kxw=@E!J1k3SNB)5@.nAEE;[nc=q{tYX1@s=Vpx^Puq*A159c]xL$-QLQ)nH*ZOjry_CGI;ZF#e##{-$:u2?NBK2n;9mGb9SM@K*MH2(d2e%AxPMd2m#VRDcqc5,2x75#{BJXj?y9iaUlJ{W5R?cVlbDpd^cMUX:-a-FYYr]1f$St@AeBZjmuQaK%Psf$z%B%.-k%!?l?f:e*}Mh:bQ5X:_.X#*8TrFGX-IA[nd6-%UopuT*AtBCfQO3Ng)b4b/X^7@W!kTN5jjqXkZ,}mj$MF#O+s^a:
l},w}/2Df8YXYRdfu}wVVns/dyTt-Q5j(fvfU[{R7d-=%(:O?4p-F,H=YQUu?D4vj$,DcbIoRgRo8fTYaEAH(r%#^m+SZk$2VN0$hZ,kZQEyg_-3T-GOlEX-b/.aLo#6!_6QT4Uk@z2i2@O!fh1R9_c6ljE!qb9atqnxQLM_@ilx)#qX(RSB]D:c6o(2otzJ9rx()BUDh0sKf#Zo+^MtnFOLKD]?XqH/I15I4:B=NY#Wn-EWuE-cKh;5K(0m}dSMb1vW+l+HY8SlSM#*F$U:;:RPpti*_y*4%68f=x@@EFR36((F#gGk+OqEs-3OGP0W^j/^)nxmkDKuLylK^%2]uO(x;XMkZM#SGc{nGIq4obqf_t*s+2c,a)oaSF1N0sNV7:d#4yW,.]w51E*%1VKom*R-#WZy.${/7f*Ok.tkIiA;/@QHs?6gMJl-U1KL]xLHuW!X/bzW:o:ncI]avho)wKHJr+w.3SQ#g_nPgm:M_23l0tupz%GUOAZE?4TaWXwXc05bXjOn-_owwDWB56Oy,MBG#Dt2d4@=XL_dv0@o%Kg6mk[.5nNR!rVvirhk97B5u?pwVbWD%b2Gu8#Rduil*i!?1%+JQI_=L95sf)6dj1L+G-N3gYm:bV]py_%q5;/#g,?EDAnzrWZZDJ4gJ42lt:jqy3Asa8t{q7!bD^mth8QLk$-LRgzLBTfuRVsqdBKadtKAr/N8Mairo2K729o5!aN#_aLQ#9wtaqx;V!c#ItTh6n5H3rCC0d(ta.TF6EiCtFfu)oocAN:Qn,fv5z:*SSF^ucv0S!L2TvuAhdFFM$a^z8_echmwLZy06Puj4!fxk[XW2hHy-85/iMSWz[V]{8E9(m2%%buKiUsduyEYhwRGNQB.yKt01Q{x4t]!9dZUB/UG13G{;q=YMA,fKkpu3MPy5/{/cy2f-{b,3VmB%{ge=-jo{=Yvj)M{i6ICP(pqOt%[_RVg@)I!gKu/Idyn$@:W$4RQLmlmd#aQ4J0-6cQ=Ms({?BFVvLsC2Q*+hOn2l;u8J357:vO1FNrMOWBaYR/-rC5Zfmp@I%(q;@)GD+TUX8@a39vGoEK+JU0;^c)V$,x^*dfW8dFN3SmbdPyPA4-zWojJ21R6syXehg/VB/dkYT.e,#eog)F/rs*zI06F?7?2paCbp/W!/ub6$KN5OUMCwXtWQ/_*L9f(H]$$OFvZ$ICBzU:@2boO3zH54qHw;*+wQY$}C#-]4,Hr.YLT1)_;Kt4f#n,Wi-kNBUwHD7Os9Dy6[*sN!#b1ICD3U]#sfM]-#3u]JHFR@^dG2(VXKdXP}P/3-!gF5J^mB.8Z=@%.36Lc$^V[emUf9I-t0OkiTzt%IfABH/%8^@!,KJ07E94t58;.Y;WdbW8FICaC!,vVULUUFavfDC;=,Zr29/V?lfSqZtj?E(3X,3$x?4rm;D7yofWRJ}[^UA^Y$.$llN:NoJ}xzpJ.jg2U3!u$krwHW[tht4IshDnJcKS64tweybSOyX@1%r8*K.irv5*VFQyyxUFA)N_a2)6u3^.ZB6Kg1qM5Tee*CHv{%Mb9D8kvaWL0;HWa/^[zIE#0mP}+?WFarU)AUhj)[@rsKKP@.l{TYW/?VZkUDHkADC
Em^R!8[m-WQYgg:w79#wJH?3*AvhGLw73:xZpGbcaVhR?#U.4AOMv1U?{:,pyWC})H,PxYeRg*^ncSt*0^^]}s]8j]h}EGJ08B+%nNI*!LLB@D@fe0nTLB,)3U5%%l.vdruz#PQ9mR:o37VsVo)lkgj]#0C0Ayql!iA]:iXUZB[mRjE2;^R%-8Q)0%tlMsRocPM(eGl$?NbiLwlsCMw4n5]as5ImulP}jg544o0H6dY%1CK[Up}$D%,l)gyXz^p:cwc48LQ?N@Ovj)r#4(7/LvvA6u^5EI_YfDQZU5j8#Y)DytMEgW2TQ4wdb1p!@kMi,9QabpNIQy2ZdJz5eW(22V-n}=XDf/iha##0Pf8LLw(]Oe9tQk,;U2Uh22!w%8.-}1sylLr3fgC%S;]5^z^wB^/NEHXk$%-nHNX:yS8}9eDW@ES74IFP8JjnAVnd4wcQ/ngc@fr6Ofct=-!Nf!]DbA=lnV5u)I*4[2!otlj[w!ojphBF3fLk9,0E}I$sAQd!rj/KHSK_.BA4]J%BY:f@+%58ug$3cM76K2:sg_Z[C^4P_Nr]xKX8D$#%K[XTMv6a^OI+S?c5Y^IT=CcJMNezj8Lc@JaHIklIhgiw7iM-/R)EY#)]l@tl+H=Gt6rl*c]0(Td)8P]4^L;.c^!?Kzwf4P[O+p;2%OKv}[rLT$W%4tU9CoH?Uwr7;GpNl40i#fe.vTfi]SfNhI;22g?4RVel)]v)B.CrWXUq{ho1kLAWWheKM3!k2f_D,k!mi},3lfP@KOiv9+7Vr0S+$)qbY67rWv[Ub[[ftVu!3+53sgg_kSiN*Bq*8.=W#G,KOE8zmhYK;Ec%fAsiaT))Np^;k}plZa1KL2*16%O:$9g4ekf]Ie/TV$Z,=C#R^gy_JlhFRUwl!hNTIB*Tg^S5HOK#+q94oNh{0Lm/]Bc,5-,?/B;-M4o-lmonocq4%i23bY!^}+#Vk?R]#er:My=0*)8La5-HTwz8_k[,E+W!{+d;:m^520.MnTR:-UX1t?h,+dD/mnCMt(UpZBp?o{z;!.6{iXVYQ@33iUn!wP#OD!ZYA[#c@DRw2@?zZ;F(Aps4K*(k][c#V)J:mIx!-d)s*Lm3-)kcA$=B8%1@a9^G[jGHE.NIqNT^wT?[95.1VfaVgyCBPmB,?Js:}V,w!JSypOCSA=s+=22^@GV%%]b0%+8Ix2%s(4F=8M}4^}4{{aihk-+SA2ehV$!IL1.zdJDT{#(P[N{4sIE%a64FDDB5^w-ZwWJn7bC3q^^Q%PEK^ueeIx=#1CD,5:,X)!{l(ZeYUNKNI8kkTOukwUFTnicbe/jPd^NW%m^:(9wRj.(Ir0V1DY5L$3={}dDSypY4%X!j+(:o1pj_9ONbGAROQt113%:m,}{BWpdy@4tjN^+PeS[Ly5w(s6]Eb{6%joJes#76,MToYH.X!=zPc)F9zXqW;cb{dLik2(MQ[;y;8AQmZy[im)+ppGS/;bH^e.{:orc[6(/Tson#R/#?JJK1J)DFpyN5bz6c5Ep[}U.niYNc_K%n$E_HwC#%VMlByOvxgc#_Zy,CvkE+g#@b!yB8x+a;_-iIo]JPOd%ue!x(l;CwMZM,w8bv2*?VbOk5A4elLX9vRF3U^kGl@,Asl#*aeAc--wCqXkj(Q5Rq+KKV{{AYNfMkdWKrZ9eMkU*8A}$m%l,g;Q4#SS!e@rQMa!Q1Nt(n_ZX6l3JN.Z_gsVP[%W7kLMP0Im_je3e1YjVbw0n4IlpKLe^j#9)yUK7CJJiq^9,YQU*(fMwhBhkxu3-Xb3Uji(.u8hE(nZOIS!}$;-[Yk{eQtwlQ)1FhLj}!jvt8zZtz{deU].gY${BhhmY=J!9#:StmDIFFd[Mbq,{FU]me=d{6LP)4pQM(_m-TE(;cI(*mQct1(-sHk^)A$=-lD,8.{oc5}z7:z8W{Fm%C.j;dd8e^ep7LX_?AIT%*T7mBEH%oi[ulxKky$gh*LU8M=sg#2$^YeFhqh;=Sth;eXlzL0xIq0bK@3.LoiEr#Dk$wkSr2MD9MY{ea}^4,9$D[i!70ixs[I-px)=hg*iEq_ZdJGP7Mj;Q[?HwiQ-[6TO8^1.e_@F)max*^v3Tn,i%3*nc}YoCG(pPg?hx$]hHGMX$?8m,p3#Q;tP:c{:7ktV$iiggbPPft%$A*hooozFqvcI^,)G1+2*xZR0Kv=ZdKx4iue#fE:FAR$3An*dIdD?)E;zMwDznQh/KQ_2^bzb61MT]9heVqw:!BU1g=DXS%p6op5HSD-ZIThh*ZW6aE$166qzX%QODWI7GZOQ#rh8H%Zr(pTA_Z5ydmds9XBOi{,YqL:]mBE@FSn)^=WU?;z)j_of#1,,+SO;.b8)HRvdm2BbU%S-3Z,lH#G8!rS#R#w^-HBQ1m2S0Kqb5e39KIeQ-YBGM2F1K8ce,v!G3R#X/hDY3z91@XRRa:E6tEgx7I5nzk1ShI%96@d+ap^r9*hs#z({s.@fcKJHd^Pn[%9S!si.B!,P.*=Mpvv2:)eRtQSUae5%D3lS9t:T8M]yM.haXN.4*.P_3T}i.;{t%J8)yLEu!GdWvlc[hVom.%aV)W_sN,tw0C}rHlLN*hK:ikih1C]p(#e%G7-MV-?xVTBi9gN@cxZDCjBV#{5u{X16e74SsLc(,DjD$_+Z7;U6]97ePHOl237VT_5;3qxzn%/@p,f5IS0]KWF28#;=zg,c[+O[r]M[V4WiYB$;{@Y1/.9RPyH3f3-5pUG^tV{SdG4)0*Uxe+]h_$(r1:_{b44*m?[w%nBk*N8w]^%dK;V*7O0Dx?,].,0/Bq)8T,GY0=m*!j%:Ti!9_37-Xh[h?NKX%KODT%0zNm9HCN9SfCHbkzXXXHV;}w-Ea.8X3g3#h,sy,GCw9Va0aX2euvBIND6jtTARliQ+j{cqMg;7ZcVR-B0Vr{F,,{nxb]K*WyAlK]q+Hd1%qsFt2]^X?#Bo5ElZwfU3J_J}9oxUc5%8^;Od;3UM9i4B2jU=,Bxy]c81wULJ2)%fuI9t{8h/V=;eT@Jr%%NNDA4cv}qL.Dpyf5%Q.nOnfXW.OmK.VdPrsVH1[{sG?0jb$^)n%UvWA=:+R6POJX5$1gyH+[DZ=}EN*Y{aT;FCeZr$i6}dh5p*4]Qw,W)*#TfxqATe?%a]GV*gD:]uMhR0eCMuExaCa2f)d5iNg}(o*x9vZh0.Vywp.)pMo(P31$UB@c7K3=oP)^hqLyB;Le+QGx:UnTGJ@n$5X)d)sdIHDTsD5w_QZ-y?wrX$.#+ZJ7FO*xfR7$ARUI3Vpr/NdwU%#gn_c]uf2-nY{zQ+NEJi6f5(_hd_Z$fBOf+kQh)i8dLRd2PU,.Wp63F-zL.WrHQDws035{%(R8Zdr#u,:X3$V7XBKmULZPbdDB6$Cl}j-cRQWkpGlM4-O;u96Mc);QCiBqOpcsc_6$@JHLJAIoGa(h8h=@Z0,?pE?CsFY=,Vra?(O6mOam1-[tMCPUwUMh8#1R0N^bYu.Pk$Q.Dhnm@k+UZGHG1qC=x#0^^o8W^bta3j;N-mqJ?/e-03?gMY][$IjT:N.rTz4x1a#Kn-CrNMB*z+tBnuO0rK#+J{wU0]}atGLkHNj9z#?IJlh/0knQ/_5FmQyib:vsrvap0g4i5N9=zxmiY^N$FMi4UZ^qk2,XJHggQU#aTMI-54jj=feQ#TE%saSfydSWIN!4qMC+.R]q$b_:.6XpX5W4C0mqk9P*CtQ[bGXVk/1+D5xV[]4Xkj(#p)TqSrgnCy6{VX(m4I%=B}B-Lg^Q!ghl(b:!T-X-56ej8N]hUCING-a.n=w^ak)bLVcB0^?Jj_{@KYCJU+]u^#1+8G]mEvB?yGK=r[P.(16P?-p*xV2Mxzk1T[(6siIiNO.Hd%KuH1Ovb(Bj=)05F4.fxsRC,T9*?mJuJ#%AV#bL=f(brEdRg.2:G3ZihM=Tst4=u+as=7AgF4i/l6O_j(w!.g%NB$V)I=F,;.pDP2{Zgi6Q!=RVj+Ui[!p3SLi9b-;AzpmU*-$(Q#2w5U0cXFiAkMvA+c.,qgl$V(mCsVBrfKmVy4+S8Wb-wk$XMWzp,xY}#IW4_64kc9dd+^-RJ89Kxf:bEQu{+6CL(JK]n3Ad!30K^ZF7-S=c}zm+TRa};e#Af297JLE%So*]owVl+W?6rwD!T;oJFvB_oH=uT6o!+QVjSr^S:{9%5b?uV?!!xG/y5Sz7Yr1SsBPn7G;TQi2qe)$=C6)WyDARQ/^LHZUFF%ArBfeD:Y0qDF1n):SOE4-nBymfOg0Mts]ieUd%eh)%=B/H5_mt.j)SBH%/0EvL$@c7u6usS[N8i+E{z/e(0U39E{%Wj8*n=[N1NLc5Bgh)NI#Xjm_}*O)cK+5iHUc;7!7l?X0ZfBx}tjl./?mjB:nIaWo2c59N@KbY+sX[Z$Dpw8A$DI.syBmxt%Sp9QWbDyYKw2(il@ZzIh9U,.bPl?3HPluLZagFVvryBsc%[!UB@xmJofk]E{UW)#5W58dP[69p9e;oOx=!ti0%%f=p.-e:_[lNv$oMAD^h;nJ}qEa605GOP9Mw;PE*ef.}DSF)TbykAjarf46OI+tp!3oP@vsV2E[5Yvy}Q;vTy++:6TeCc)})0qNKd42fMVErpTEAExc_4#wu5YkMdM)5hQ]9P8=4-7W1zt[t]*[vT]fr#/d8d$3Cok)Ca9QIup}PF]TY*a,pxd^mV,buw-bxip4wT$l(@X+Hm:4[ub)kl^;eJwvFpGl,w/eKscge%g#@_8./WisIdS+)*(I8FEd.(N0r59WgCtm,E59;b_sW/cVbt2tQiR*;?9/AL_)S^pRt!v/U2;Ok[}oABv_zvn0VlY1s?!Z,@ZUWny9J*BQlZ;R+FvFrXpwVKK(E+8-Dp-2a#LRnNCrkLMg]-QeHm-+]VO1jw=X%/nGqX!hES7i_DfWAH-fF1jlA@ShG^L59Sj72Ff)YSx}eO^;d[-C?SE2Y?)Xo,3ua6*{DM3.rXi=.xM{d%.!9Ev27hXR{-*PyOi8%=EitZwOiQh8/U)Ci0Nf/m8W.@l^@V,]d.;xMw/iqCDtd9ns?*PGQr?@avgjx%m}kfNRhdkt@yLL2Jm-)rlFTx}ks!seOk(%7GsmBXj((K*Z}mHTMmHw#Tpdw;i6qyWSVu^lE3/irilDeSH@)O/^GpI{9i(EHqVF+?ZV3]/V^TYi/i/F45UhmR#^xKZcB{;c7@@7F$ILPWaB*U-#A4K90:$4X(S(J$0$_T71y:2E$sspj7=_37*6fL0zRwKtUTr58YJVbfa:{*rn}#lso1Cj(M%;.3Rw][py*8d9nozHi_0j%clWG,t$eYfhqkhW0l-.evAVRg2RdW^50N6*5]36ivkz,F1FLjk^z_nqvg%[+[Ybyw9XqZ*l{KbT_.j+Z3A5O0!qgJ+xXgq!_Va/t%ua{6$XQgHRc8%VG_/f*h0cNIp4R?j6qPhP*rgzJw2?$]B=I3?PYaD.S@ivIxd%P3c:h@#9rKTNVpK{FbXRjtNz}k4.@;D:fP}=Z7rGT.,!_sYXrfkvtVqeb;mmsjV9Fxn7I.?Xh{6@b/=-@:=hyrUm}FiChSo:7jxZRtrP9YBM;vP:n;IvL*xz:r;0[m4[{}6x0=Z[)F_[+@Fj5r*C3HHx(8f}4tx9JLP}ud*?Eb/dD{W$*B+J,$_^!$Vob3JIt:[,yv6xJUO-pv7-Xy-u5UstKQJ{^l1AAaGj;};J6^3-1r{JAe_BNv;4]W4u?qo9WnQp*G.ruh=t)$j4METw$XZ*!Z7p_Mc^v)NQ2XO=x#-LN(h[zJdEx79WOQ0v0r7$_Os9.KnAKGV(FvYL%tlUN$jZ+xQK**;sZ/+oE2L#{5nv)iwyMy^e_r+b#n)6vWSCv7^eUi6zEiN%xT;6+.}A+8,90fS*lfdtR}Va]/Wp$s2m.=DqX?KlK8;HOJI-M0w:xolfz@Kg,+ED_VX?_5W+vEQm%11OGu}KJ2%O{SgVxSs^Nfkzs!{]GL)/m[E[4)tlgtxES(q!Czex1shZCazsmFP0?6!^Z0YgdQ/WODXk-X8*1$wiPn47zCT-?:Iy{}-zH-+FZNLlp3V);F-V/RB/dze7D.?CYiQ%fVSfcKFRWlaY/x6/iv%b8+hXyb8Dw7u68+BPomPt5q@t[U67LW.Y_Hca$xx^#z-dlA16yq(vbCPC}H1l6AG:JE)^0S#O}N4Cnn$vflaS.j45,P=}s/pG}ma:v=KsF^:50ih3G@yHaFZ%Tp[xHf}2r+H1I/S;h]$(2zdx%NrmH?B@6v;D1/lJrg=w0fNP/c@OU8UAcMSs*u^$$O$AoOL{-VOrv;.;7t.iaAp.TJI^$u8J)-QkU8lAoKDY+RP;fxSi%++{K1fkAll1cvaz01FcH=y!.BUQnMd(ek+z?D]pa3tHtpImL49ik2sKxa8jlAiUr%mRnuQl0{M7i18VJH,v+S6$KRNxkW*p3wgLoj=Kgiz(UbFfUB+!n5nir}B@n-L7Ebm8P_1J7x4vhOGv?w1RV7Is-R4!ra4z0ia/}TmTRVfk^RS_dcr]xQ;vcodoJGWI=lsFXZ}OAkVku8X!8SD$li_x7%+,]rKX/so792Cj+;^%Sa5J5}/mKh+fsx,5-;dj:!$0Zx,ww8oiA]0{nM?IW*ck2j,V{V^[?g^xf$v.Tt4e3CsQ.:bT$Cn5_Gny^XcQeqB$wK2!($sNw}m.^w+5d;P}YvDyqnHo],^{G9paU/^e*KA$$@/$c1q/=KiXEYBb6?p4:.g(!lHT08{d*z.:2A_Uzgps%baNF3ZC5TyAJ8GofMkBw]b8M]ksH}%.R0t%QKjinYF^6Q[)zbHK}+J3p(db2Ld=E(uKY,+_55]+BigZ*[!XU/=Z1ES$kBcm0j9{yV}CTu.kjR70FzCdR+vQ-;({i-NMqcp}V/C7F*npx{hUIYwK?7;;].?Nc6WH%f3vI]N_W[/UB;7bhW9J$!dsr]QiHJI}^H#iCpP(m+fo[umXTt^#6$8m]eYS7@p6K?,),a[hO_fz(DjSGe0uSuIv^34pQ.)e6c4tE3T6*ufA5GWcOS1Omj_0;ohmi=g@6fE.4Yt^XpvjjU=#jVR?N87V!t6?MABnTp1dHYeUcMDs!oe--C0FU6IGAl4OVSWx@b]Ri{;T87pn4#:z_2!]8#LwW2P#KLXjkGIDXERX+*8OdYg-P7W^QXKa/.B8u_0F{.9vxi:a]1cNo[2Bn$.:Y![,ZIOHf74F,+:nd=CT}3}H$lVbhX#/JhuOZ$V.T-$98%_44sDlDm+H6W,ACRQO^qP0R)lG7:OjAaKV44E-+Pc}-s^4K0pX)e{%B:3-RDQJOAZH}sRzH*hd678bNo6.$8*Uk(#XoXW;oi[h1JHsX?+}1f*:]aF)Dy.E,)f6O0_)tb!%^!YEhhte@V(zrCay*7Z^)9-U3nm;4ZdU}jcibFg[4_n!]i.RJzh,HU*Bd2HoSEJ/=9].FliQ5oA#kR],-;IrJu{C%BxZ*L4S(=Pt]MptA90=DSEQ9qwjw^.cY-d(1L.pw_xXs@yFE9b6RVud[_FLQ+Vf)9*MR..TwXh!k,BEV.rlN]R9?(D0o;0%+/^+3_1*w;]4m=3$y7;+4uNrZ]*6n]F=*II,e.7IRHU.;*=82U:fDY1ENe^-Lc5imP@R++tzznilWQPmVY+];,2?m*%N_KkqJnGk0]RnSgaoOP2_9o3;El?A(%NqtW(OJ0Vn08.#rHK2g(]fY%8vD$_P1{42hWU=4,V?(TCCxgp1S31n,mHXyVb.y%EYt!Yjo;?:sjbOTWTC6q+]tjkLqu1l/tbzUvsni=09$,UxDb)uEyo1[tdoLM4IswMWtOJFIIU7{V$7d+g(NclbcH?UEb3g;Ee-813c6CTj1,M}?R]@Uuz_KbNZ_(2,8w(PI%SlF/yP%J]Awjqr:rgVFHlIYBQzT6_P^P8,@:8eWWO:AO$yEs,HRQ(tbL;LHu$SO)QQ$2wI)!!QY}+6(G+dYls5SE%IWRYKQm$0K3_Ru}G4Z*_!WZ%z!1BqfR+lbSaCGD_h^!}Pn1pEj?;x2L(OJrcRo(hC4:(7qc+3x$V@8sm;*-^@*7]ErLS=0/_jq#2Tt.mOODul+;aV/Q7w*^o0k8!-XE=m9[DjE,wyw;I$#CCwJ.5tA*R6vzJ{kg4)WrqGLtWpkMixc..aj:+E!c0E+AQdTz4y)RX-CXHQFr7Vr=Aj!Dhv[G$jaXFginM/+x:DyVh#}0/VgAs){S=!UmVc+nxhzhc9T@t_tmDyQyB[:6!O]/YQcU+8kkyD3u800gsgC1vc=eBKi:xG?k;b?.h:4%i6Yot/:MNLT$s)y2Jg3;p{7Otd)wOXcAnro}TG)zcYFfiHH40h0Dzk1/JMevWwx.4/K^)A)$8W+Esu_g%6lf6)W!bI+*D,7GM0/d;ByT}([kJLbB,kYY}u)D*mr)d;..uXT/6D!STmJhfFZr-?QBdSJ^.da1^uPL!t+YuV$-O9=)1yy]jd#y_GWDr+{ys-;jJyLeTabY.53.)XZ-XIIo)n]^qU2c0H:3Z:ZLw=NyOh:k7W;R(96KqnIIfZ:,$x1xh.J;/3QwDeZ,34?j2V-DlYEMxRy3YWY#BQNT,8;APK;V:NzhGshN[%[*x}ck#OGc;-grbk56nnM5H{WmeKUE#Nm.qNq*^5!liJYl##D#kf^Zl3]8F36f[kwcN]?,vD[faBb6SNj-4;y$V:EbZ1pjqmvyVXb!$1!c=Jf^o9MJk=xLOkY@9pPhAmW+F=/M;R#9E;;*5Uoo)^9LF)xDO7nE1VE$6m,?Lo9wBqmPG0UVf_M*@8mfga.5Mt:!,TdQ]C)bP^YYP#BHVvRFggT*2+k:b+h4Y.^#F!lKrIVe_=RGM=GxUFezqdHh)r?4r9-2ALX:E94qPs1X;!yFDCs[HV,j!F3HJU[e]8k5el(T+RI+*?-%uN9Inql2F^DH_3Zmoz*#v^GT:mbeF=(:$-#^ueLMWN2Z;urrt[rMunL?3!]X3VBl0B=;r3ZuLWr-=fY--3J=ezWNqHH2s*QRYH35Uc:aUvM3e6bMZ78ukes}%TUywurB[Y3SPbUba:-K7?K4dL2Xu8NJ](}^$%vcl@y3ANCG7-xMB=y!#T,fU7f!pu-gNN05(#3G!LI4wW!W-HjLzZS1!x0HVvDyEgSkVMLiLM+pPY70xS2wcFhH+hwUijUc5pYc5d[0=a]s5{dDM@MFSIIVBD+2?k,*sjO;sAb:NLzHXu^Lux#HtYWOPM{%n$KpFyAi4)DGsLIQ#5UJO6o/Yv{auqv%5#.m/+rzU4dQP4@C;011ls=;itqEX:09+ak$u/w@_);#LVUL9a,F;)U?BMD!*I:H,x,!ST91C[v=qcuW{q)Ua7;P=K1N7uhZ!*$VX@rIEI#MSfpw;TxIEDy$tmu-KX:3$!WYB?lM.,qboZp[E%U-jeeLjlN9j%zO^?T-^NsIfNA4werPh%$Bo0vXIu2!6CWZMRoBYwtVN5cLC4{RwO[6GT9:k[9D7)(=5GuTry[-1yu9z2*FQteQUiT!2KQj+kY46$8miEkQG0h+#S/TX]5E3;t.t38kJ6[B,(CAQWWx0]!CoE4z0nO@+#tHzpmL.IGSkIoQvQyP+XAuSG;o(1b^X=L9j(C=Nk.3Ce$RzLBm2;DBOmm{ySftNRWE376F}}^%hZ{rxXeC(iXoIr)+3p/R.$pVM@(Q]Oi!GuzZII7T)@TQ.[dQyP4Lo3ms3$?i1ch-Jnep^ZJTQ*YmF9IvTm%-TYh9QuVbb1+{aW0/?!sX,n:tS-+,16NhJB*CZOUkd%q/Hy{jWi[RWxa,3M?)*:_6,^?s(.zrRmCO/P]fNY(CXG1/67iCDbve80{,$@NJmEA,v6p!Ub}c;f,8Dd7zJxLL:bge9+1:Fb847=PaT/3K]EMg$pJ6WwYs?wX,_l+l!aXnfK(0%YU/P0C)rxp=)a=m!xccgMOaUPe.VpLisZ;Q(;f+ylUlXV]{l+QBe89m]s?X9c^ESUC!@O9N8kAQLHghMJ!sp;(p@/Pj386Q}KdwtIAM3%8ls+Go{)hza+0w{@VpH28sBv3x[pzzvg5EM6?w)j)K4fS[t4Gm_Gd4J^]ebk2(5aj9=M*FgWyrCNLnAe.W36)DJ{vjrUY*NUJ5JzdgWBAc0Zxryl]@nX-et4#@S)GNV8l@Jj@Hm)=6P}6eW,%9U$6J=_3d6gcad(SJs+-q!Nd^D+0+z)w,+]Hd{fNxIx84{-lspx77Co%@J6u]3.nf^!c?mp6=7oeV2vV-.2azCkfbE4fj])C}qho+1IyG/hzLxIK9vkY]?CZ-6Q/hF,_YooRg9@zrxet-5sU6TEsA1h_4L#3bioqoEKbsKLQ7%{U+iAg4}l#+O/;=@jzT0](!4xr0}SKn{i7;L!^)qGLUR{O/Jb2OLm9,HxL:+_?OCSGabD+nkQj7C}duP6H?!h6RnoL9)jvgTXQ5k?w:Fubj2z^otpQudo!Oqxa+Z,]@25()F0^?:R+0LxfP;oO/Umg}Xj5glsrL/rvq.X/X?$}:Zl?EC%++$HJJ8CuO%P-.n4spKCm1c4tleuhSR!c?e5@N)VGS).YXwrtuesKms]*[jBEjDXPG4$,U,=8RfFkuN:LBoHIlQ5JG#@a]hJr0G-Z9%j@?Fd(K+eSgKsG[I[Zk)$6/=:G66%Te{OhZJoSFzK.eUx$+Mr2fW4(zHU[.cQd]Pqz!;mu38rH!#J]J,#NAI(t=[OPnnmHC!c:AI!^?P7u-7ffav6U3Ne}aL[R*g($FT$^tMCy:bBKNY[2JRFa,G.{kpF:AxGs=(W_.?7ckmgD}Ffv23cA!{YU[q;VDHSZuzsqcG.nSRQCBEgr[Au_OX4YEYQYM]JFU,Bqh44PmoJlO0xEju;$(Nnsz:.0vCg3)@=6j@0z*V_TCMkYgnX7X^+v!9GEfL+UMh](YtyL89sP[to0gTPb-jFX64p6z5cd)-EWd7fU/CmstK.vIj56n.C8kLw,LPP_XGqdZB@wAmIXn$#+??uFi6d%ULZkQq;dROv)f7,rrN6E4Bwk@PTuP8ynPbeSFp!pHk84cVNp:lM9yZ5+b_PTX)cs,+,{r17Z^BsDyitLzQJXLf+_9cU6ZzqO(:{#f1,;0h5EZ@x*:}#{jmXHhl{E#Sv,[]$Rg^bS}ecSlYah[k7-Wg?vAW?nc(9x}W9TRrv3}=Ik:mZ5.Eh7#6=H$lFCly2[@PzYm)XA1tS#7NQ:n5y4=CKc1oHR+XY,c21d@RDZ)ur{c2oA$%}h9e8pr-uufdZ,}0,zT{0yz_A4{gRzF25u3)BtWdHK(i6NhsOEkGG}Vd}wgT/1/+^[NbBFUTp{pJf.2gsT2{}nhCnZ^B41s{$D%-(oTjM9uHi6Da-OAUT^HmV3g]h6hG=;j#=6]R#dVx-raq!nsfqtggqUSDzC^A^??8Eslzu$N[LeaS?nN8H.(@C%-:-2F^%Ts;@f0^FTO]va9p;TU!i6Id4wcE}*ARbjx]s,zWg}GgfjT01qYL:PxL0!uL5:Suip6k]$z=Ea2b9kMqbRdxpDfQ7mmNFuGkH4TC#?vZ)qkqMupMHltLLup6HkRL9ajMr5HY,#kZpS-BGo?adt-NBiSk^HehG!Zac;-*o+00$10#4qU@S$vXUeE4^DDhYnzxQXZLbD+:/rrR^y_i%n;d6{Z$sq_h*q3T5Vr0t)J05H?Hfqn)AWS#x[NQCACRE;t]Qekk[7kes59Dc=-B@1Tn/jWC9XK5#hvtmpgBm+[5D0WeHGo%-T1May7%Y7QU[nsR.^/7X3.z?eE-EOfx8dr}L-z]J(+fDXz}gny]g=nOi6Z#*uO7VK*$la^VwX;sjJN{R7wLI[HJIn4N3MGzHdE}V=8VW[#aL:!6W6Jyb8RbwHhoDm#0n7CSa_zjR+X79K2j^)IlCTld^x8QIZnfZ4^q/1vo1Myk!1Svx/u18yX,-K.V]SR.MB[dv/b}9veqzJA6TKjhhxxtH$bYHyjJ01Jvnp3(h)%py}qxZ4sr37AZAVxp1cFzJh7k8vuOWr(abI,^?zNHw^:t@9[!3G(:vhtqOyd!._QMip@rkprfZj3;^edvHCxK]gFfXoPKYmE!fFD+6o-3PsO$:y4_M+wCktwAfd:,1vH?ghle{^W+abV=Jx+y^zDss3LZf@F-VaJ*Bv[:b6l,2%?wFy=d}t[F;Op_sEyoXB.8:M%ITT4bMBa]*-tr)gG30m=zp-4jCHA,dOy84HB37UBvAvH96-%]S?rYIqftR1)^b/h+]iSs7i^2(ftqfu$3nlS.rwC_%@=Y^yDNdNwKU4d)DQ?/Oh+Rv%iKy7+7]z*Ro83_daMC67P,WEfEW}jwFMA.[9gevR5]kBFI_14L#OC!yMMX2.C__vLr9@!(0GD=M1SJN-u(L807Sr#$dH%g0rYNf[Q}ALp?c#e
0
"Compact mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1
"Enable (Enable twice)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end;if process==nil then ShowMessage('Process is not selected.')elseif readInteger(process)==0 then ShowMessage('Process cannot be opened.')else if monopipe~=nil and monopipe.ProcessID~=getOpenedProcessID()then monopipe.destroy()monopipe=nil end;if monopipe==nil then LaunchMonoDataCollector()end end;AuthorName='fd01071ec5'TablePostUrl='13431d5d64d03c52b75e48ec4034045a0fcfe966f4e79c54ac9a35e00b5c01aa8fdc2f1dcc8a1fb8ae58ecd967a1'FooterLogoFileName='62ba7dcf16c1b33ce6d141df48a0f09698'AddLicenseLabel=true;LicenseName='9abf9508b3c9ba'LicenseFileName='57f0f0c2aa4b945f19129c'Key53=9875711438865098;Key14=1380;function deco(a)local b,c=Key53,16384+Key14;return a:gsub('%x%x',function(d)local e=b%8589934592;local f=(b-e)/8589934592;local g=f%128;d=tonumber(d,16)local h=(d+(f-g)/128)*(2*g+1)%256;b=e*c+f+d+h;return string.char(h)end)end;AuthorName=deco(AuthorName)FooterLogoFileName=deco(FooterLogoFileName)LicenseName=deco(LicenseName)LicenseFileName=deco(LicenseFileName)TablePostUrl=deco(TablePostUrl)function tableFilePackageLoader(i,j)local k=findTableFile(j)if k then local l=k.getData()if l then local m=readStringLocal(l.memory,l.size)if m then local n,o=pcall(load,m,j)if not n then error(o,2)end;return o(i,j)end end end;error(string.format('Error loading table module: %s : %s',i,j),2)end;function tableFilePackageSearcher(i)local p=''local q={i..'.lua',i..'.init.lua'}local k,j;for r,s in ipairs(q)do k=findTableFile(s)if k then j=s;break else p=p..string.format("\n\tno table file '%s'",s)end end;if k and j then return tableFilePackageLoader,j end;return p end;if not TABLE_LUA_PACKAGE_SEARCHER_LOADED then if RELEASE_MODE then table.insert(package.searchers,2,tableFilePackageSearcher)else table.insert(package.searchers,tableFilePackageSearcher)end;TABLE_LUA_PACKAGE_SEARCHER_LOADED=true end;if not REQUIRE_BYPASS_LOADED then local t=require;function require(i)if REREQUIRE or RerequireList and RerequireList[i]then package.loaded[i]=false end;local n,o=pcall(t,i)if n then return o else local p=o:gsub('\n','\r\n'):gsub('.dllC:\\',".dll'\r\n\tno file 'C:\\")error(p,2)end end;REQUIRE_BYPASS_LOADED=true end;require('OCTLogoFooter');thetick=0;Timer1=createTimer()Timer1.Interval=60000;Timer1.OnTimer=function(a)thetick=thetick+1;if thetick==170 then addOCTFooter(true)end end
{$asm}
define(CharacterBaseAttackBaseProc,"CharacterBase:AttackBase")
define(CharacterBaseSTControlChild_STHealProc,"CharacterBase:STControlChild_STHeal")
define(CharacterBaseAddNowHPProc,"CharacterBase:AddNowHP")
define(FriendsBaseUpdate_StatusJudgeProc,"FriendsBase:Update_StatusJudge")
define(CharacterManagerAddExpProc,"CharacterManager:AddExp")
registersymbol(CharacterBaseAttackBaseProc)
registersymbol(CharacterBaseSTControlChild_STHealProc)
registersymbol(CharacterBaseAddNowHPProc)
registersymbol(FriendsBaseUpdate_StatusJudgeProc)
registersymbol(CharacterManagerAddExpProc)
[DISABLE]
{$lua}
if syntaxcheck then return end;if not syntaxcheck and monopipe then monopipe=nil,monopipe.Destroy()end;Timer1.Destroy()
{$asm}
unregistersymbol(*)
3
"Stamina 100 (attack / action)"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_INF_STAMINA,ERROR: Could not find unique AOB, tried code "F3 41 0F 11 AF EC 01 00 00") // should be unique
aobscanregion(INJECT_INF_STAMINA,CharacterBaseAttackBaseProc+1d0,CharacterBaseAttackBaseProc+2d0,F3 41 0F 11 AF EC 01 00 00) // should be unique
alloc(newmem,$1000,INJECT_INF_STAMINA)
label(code)
label(return)
newmem:
vmovss xmm15, [vf_100]
vcomiss xmm5, xmm15
jae code
vmovss xmm5, [vf_100]
code:
movss [r15+000001EC],xmm5
jmp return
align 10 cc
vf_100:
dd (float)100
INJECT_INF_STAMINA:
jmp newmem
nop 4
return:
registersymbol(INJECT_INF_STAMINA)
[DISABLE]
INJECT_INF_STAMINA:
db F3 41 0F 11 AF EC 01 00 00
unregistersymbol(INJECT_INF_STAMINA)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 2108B71C80B
2108B71C7D4: F3 0F 10 85 C8 FE FF FF - movss xmm0,[rbp-00000138]
2108B71C7DC: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
2108B71C7E0: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
2108B71C7E4: F3 41 0F 11 AF 44 02 00 00 - movss [r15+00000244],xmm5
2108B71C7ED: F3 41 0F 10 87 EC 01 00 00 - movss xmm0,[r15+000001EC]
2108B71C7F6: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
2108B71C7FA: F3 0F 10 4D 30 - movss xmm1,[rbp+30]
2108B71C7FF: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
2108B71C803: F2 0F 5C C1 - subsd xmm0,xmm1
2108B71C807: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
2108B71C80B: F3 41 0F 11 AF EC 01 00 00 - movss [r15+000001EC],xmm5
// ---------- DONE INJECTING ----------
2108B71C814: F3 41 0F 10 87 EC 01 00 00 - movss xmm0,[r15+000001EC]
2108B71C81D: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
2108B71C821: 66 0F 57 C9 - xorpd xmm1,xmm1
2108B71C825: 66 0F 2F C8 - comisd xmm1,xmm0
2108B71C829: 0F 86 11 00 00 00 - jbe 2108B71C840
2108B71C82F: 66 0F 57 C0 - xorpd xmm0,xmm0
2108B71C833: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
2108B71C837: F3 41 0F 11 AF EC 01 00 00 - movss [r15+000001EC],xmm5
2108B71C840: 41 0F B6 87 F0 01 00 00 - movzx eax,byte ptr [r15+000001F0]
2108B71C848: 85 C0 - test eax,eax
}
4
"Stamina 100 (running)"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_STAMINA_RUNNING,F3 0F 11 AE EC 01 00 00 F3 0F 10 86 EC 01 00 00 F3 0F 5A C0 F2) // should be unique
aobscanregion(INJECT_STAMINA_RUNNING,CharacterBaseSTControlChild_STHealProc+5d,CharacterBaseSTControlChild_STHealProc+ad,F3 0F 11 AE EC 01 00 00 F3 0F 10 86 EC 01 00 00 F3 0F 5A C0 F2) // should be unique
alloc(newmem,$1000,INJECT_STAMINA_RUNNING)
label(code)
label(return)
newmem:
vmovss xmm15, [vf_100]
vcomiss xmm5, xmm15
jae code
vmovss xmm5, [vf_100]
code:
movss [rsi+000001EC],xmm5
jmp return
align 10 cc
vf_100:
dd (float)100
INJECT_STAMINA_RUNNING:
jmp newmem
nop 3
return:
registersymbol(INJECT_STAMINA_RUNNING)
[DISABLE]
INJECT_STAMINA_RUNNING:
db F3 0F 11 AE EC 01 00 00
unregistersymbol(INJECT_STAMINA_RUNNING)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: CharacterBase:STControlChild_STHeal+6d
CharacterBase:STControlChild_STHeal+40: 48 8B CE - mov rcx,rsi
CharacterBase:STControlChild_STHeal+43: 48 8B 06 - mov rax,[rsi]
CharacterBase:STControlChild_STHeal+46: FF 90 88 02 00 00 - call qword ptr [rax+00000288]
CharacterBase:STControlChild_STHeal+4c: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
CharacterBase:STControlChild_STHeal+50: F2 0F 10 45 F0 - movsd xmm0,[rbp-10]
CharacterBase:STControlChild_STHeal+55: F3 0F 10 96 E4 01 00 00 - movss xmm2,[rsi+000001E4]
CharacterBase:STControlChild_STHeal+5d: F3 0F 5A D2 - cvtss2sd xmm2,xmm2
CharacterBase:STControlChild_STHeal+61: F2 0F 59 CA - mulsd xmm1,xmm2
CharacterBase:STControlChild_STHeal+65: F2 0F 58 C1 - addsd xmm0,xmm1
CharacterBase:STControlChild_STHeal+69: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
// ---------- INJECTING HERE ----------
CharacterBase:STControlChild_STHeal+6d: F3 0F 11 AE EC 01 00 00 - movss [rsi+000001EC],xmm5
// ---------- DONE INJECTING ----------
CharacterBase:STControlChild_STHeal+75: F3 0F 10 86 EC 01 00 00 - movss xmm0,[rsi+000001EC]
CharacterBase:STControlChild_STHeal+7d: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
CharacterBase:STControlChild_STHeal+81: F2 0F 11 45 F0 - movsd [rbp-10],xmm0
CharacterBase:STControlChild_STHeal+86: 48 8B CE - mov rcx,rsi
CharacterBase:STControlChild_STHeal+89: 48 8B 06 - mov rax,[rsi]
CharacterBase:STControlChild_STHeal+8c: FF 90 C8 02 00 00 - call qword ptr [rax+000002C8]
CharacterBase:STControlChild_STHeal+92: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
CharacterBase:STControlChild_STHeal+96: F2 0F 10 45 F0 - movsd xmm0,[rbp-10]
CharacterBase:STControlChild_STHeal+9b: 66 0F 2F C8 - comisd xmm1,xmm0
CharacterBase:STControlChild_STHeal+9f: 0F 8A 22 00 00 00 - jp CharacterBase:STControlChild_STHeal+c7
}
6
"HP Control"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_HP_FULL,41 89 85 E8 01 00 00 45) // should be unique
aobscanregion(INJECT_HP_FULL,CharacterBaseAddNowHPProc+4b,CharacterBaseAddNowHPProc+ab,41 89 85 E8 01 00 00 45) // should be unique
alloc(newmem,$1000,INJECT_HP_FULL)
label(code)
label(return)
label(is_player_hp_full)
label(is_enemy_1hk)
newmem:
cmp dword ptr [is_player_hp_full], 1
jne @F
cmp byte ptr [r13+00000165], 1
jne @F
mov eax, [r13+00000108]
jmp code
check_enemy:
cmp dword ptr [is_enemy_1hk], 1
jne check_boss
cmp byte ptr [r13+00000166], 1
jne check_boss
mov eax, 0
jmp code
check_boss:
cmp dword ptr [is_enemy_1hk], 1
jne code
cmp byte ptr [r13+00000167], 1
jne code
mov eax, 0
jmp code
code:
mov [r13+000001E8],eax
jmp return
align 10 cc
is_player_hp_full: // 0: Normal, 1: Full
dd 1
is_enemy_1hk:
dd 0
INJECT_HP_FULL:
jmp newmem
nop 2
return:
registersymbol(is_player_hp_full)
registersymbol(is_enemy_1hk)
registersymbol(INJECT_HP_FULL)
[DISABLE]
INJECT_HP_FULL:
db 41 89 85 E8 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: CharacterBase:AddNowHP+5b
CharacterBase:AddNowHP+2e: 4D 8B F9 - mov r15,r9
CharacterBase:AddNowHP+31: 48 8B 7D 30 - mov rdi,[rbp+30]
CharacterBase:AddNowHP+35: 48 8B 75 38 - mov rsi,[rbp+38]
CharacterBase:AddNowHP+39: 49 63 85 E8 01 00 00 - movsxd rax,dword ptr [r13+000001E8]
CharacterBase:AddNowHP+40: 85 C0 - test eax,eax
CharacterBase:AddNowHP+42: 0F 8E 69 01 00 00 - jng CharacterBase:AddNowHP+1b1
CharacterBase:AddNowHP+48: 45 85 F6 - test r14d,r14d
CharacterBase:AddNowHP+4b: 0F 84 60 01 00 00 - je CharacterBase:AddNowHP+1b1
CharacterBase:AddNowHP+51: 49 63 85 E8 01 00 00 - movsxd rax,dword ptr [r13+000001E8]
CharacterBase:AddNowHP+58: 41 03 C6 - add eax,r14d
// ---------- INJECTING HERE ----------
CharacterBase:AddNowHP+5b: 41 89 85 E8 01 00 00 - mov [r13+000001E8],eax
// ---------- DONE INJECTING ----------
CharacterBase:AddNowHP+62: 45 85 FF - test r15d,r15d
CharacterBase:AddNowHP+65: 0F 84 F7 00 00 00 - je CharacterBase:AddNowHP+162
CharacterBase:AddNowHP+6b: 41 0F B6 85 66 01 00 00 - movzx eax,byte ptr [r13+00000166]
CharacterBase:AddNowHP+73: 85 C0 - test eax,eax
CharacterBase:AddNowHP+75: 75 0C - jne CharacterBase:AddNowHP+83
CharacterBase:AddNowHP+77: 41 0F B6 85 65 01 00 00 - movzx eax,byte ptr [r13+00000165]
CharacterBase:AddNowHP+7f: 85 C0 - test eax,eax
CharacterBase:AddNowHP+81: 74 32 - je CharacterBase:AddNowHP+b5
CharacterBase:AddNowHP+83: 48 8B CE - mov rcx,rsi
CharacterBase:AddNowHP+86: 49 BB F0 EA 96 85 10 02 00 00 - mov r11,UnityEngine.Object:op_Implicit
}
7
"HP Full?"
0:No
1:Yes
0
4 Bytes
is_player_hp_full
8
"1 hit kill?"
0:No
1:Yes
0
4 Bytes
is_enemy_1hk
9
"Player Stats"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_PLAYER_STATS,00 00 48 63 86 E8 01 00 00 48) // should be unique
aobscanregion(INJECT_PLAYER_STATS,FriendsBaseUpdate_StatusJudgeProc+78e,FriendsBaseUpdate_StatusJudgeProc+8ae,00 00 48 63 86 E8 01 00 00 48) // should be unique
alloc(newmem,$1000,INJECT_PLAYER_STATS)
label(code)
label(return)
label(i_playercontroller_base)
newmem:
mov [i_playercontroller_base], rsi
code:
movsxd rax,dword ptr [rsi+000001E8]
jmp return
align 10 cc
i_playercontroller_base:
dq 0
INJECT_PLAYER_STATS+02:
jmp newmem
nop 2
return:
registersymbol(i_playercontroller_base)
registersymbol(INJECT_PLAYER_STATS)
[DISABLE]
INJECT_PLAYER_STATS+02:
db 48 63 86 E8 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: FriendsBase:Update_StatusJudge+7ae
FriendsBase:Update_StatusJudge+776: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
FriendsBase:Update_StatusJudge+77a: F3 0F 10 8D 24 FF FF FF - movss xmm1,[rbp-000000DC]
FriendsBase:Update_StatusJudge+782: F3 0F 5A C9 - cvtss2sd xmm1,xmm1
FriendsBase:Update_StatusJudge+786: 66 0F 2F C8 - comisd xmm1,xmm0
FriendsBase:Update_StatusJudge+78a: 0F 8A 1E 00 00 00 - jp FriendsBase:Update_StatusJudge+7ae
FriendsBase:Update_StatusJudge+790: 0F 83 18 00 00 00 - jae FriendsBase:Update_StatusJudge+7ae
FriendsBase:Update_StatusJudge+796: F3 0F 10 85 24 FF FF FF - movss xmm0,[rbp-000000DC]
FriendsBase:Update_StatusJudge+79e: F3 0F 5A C0 - cvtss2sd xmm0,xmm0
FriendsBase:Update_StatusJudge+7a2: F2 0F 5A E8 - cvtsd2ss xmm5,xmm0
FriendsBase:Update_StatusJudge+7a6: F3 0F 11 AE EC 01 00 00 - movss [rsi+000001EC],xmm5
// ---------- INJECTING HERE ----------
FriendsBase:Update_StatusJudge+7ae: 48 63 86 E8 01 00 00 - movsxd rax,dword ptr [rsi+000001E8]
// ---------- DONE INJECTING ----------
FriendsBase:Update_StatusJudge+7b5: 48 89 85 00 FF FF FF - mov [rbp-00000100],rax
FriendsBase:Update_StatusJudge+7bc: 48 8B CE - mov rcx,rsi
FriendsBase:Update_StatusJudge+7bf: 48 8B 06 - mov rax,[rsi]
FriendsBase:Update_StatusJudge+7c2: FF 90 D8 02 00 00 - call qword ptr [rax+000002D8]
FriendsBase:Update_StatusJudge+7c8: 48 8B C8 - mov rcx,rax
FriendsBase:Update_StatusJudge+7cb: 48 8B 85 00 FF FF FF - mov rax,[rbp-00000100]
FriendsBase:Update_StatusJudge+7d2: 3B C1 - cmp eax,ecx
FriendsBase:Update_StatusJudge+7d4: 7E 12 - jle FriendsBase:Update_StatusJudge+7e8
FriendsBase:Update_StatusJudge+7d6: 48 8B CE - mov rcx,rsi
FriendsBase:Update_StatusJudge+7d9: 48 8B 06 - mov rax,[rsi]
}
10
"Base addr."
1
0
808080
8 Bytes
i_playercontroller_base
340
"Stats+"
1
11
"maxHP"
0
4 Bytes
[i_playercontroller_base]+108
12
"maxST"
Float
[i_playercontroller_base]+10C
13
"knockEndurance"
Float
[i_playercontroller_base]+110
14
"knockEnduranceLight"
Float
[i_playercontroller_base]+114
15
"knockRecovery"
Float
[i_playercontroller_base]+118
16
"knockPower"
Float
[i_playercontroller_base]+11C
17
"attackPower"
Float
[i_playercontroller_base]+120
18
"defensePower"
Float
[i_playercontroller_base]+124
19
"dodgePower"
Float
[i_playercontroller_base]+128
20
"maxSpeed"
Float
[i_playercontroller_base]+12C
21
"walkSpeed"
Float
[i_playercontroller_base]+130
22
"acceleration"
Float
[i_playercontroller_base]+134
23
"angularSpeed"
Float
[i_playercontroller_base]+138
24
"lightKnockTime"
Float
[i_playercontroller_base]+13C
25
"lightKnockMove"
Float
[i_playercontroller_base]+140
26
"lightStiffTime"
Float
[i_playercontroller_base]+144
27
"heavyKnockTime"
Float
[i_playercontroller_base]+148
28
"heavyKnockMove"
Float
[i_playercontroller_base]+14C
29
"heavyStiffTime"
Float
[i_playercontroller_base]+150
30
"quickAttackRadius"
Float
[i_playercontroller_base]+154
31
"faceHeight"
Float
[i_playercontroller_base]+158
32
"throwingEnabled"
Byte
[i_playercontroller_base]+15C
33
"throwingCancelOnDamage"
Byte
[i_playercontroller_base]+15D
34
"characterId"
4 Bytes
[i_playercontroller_base]+160
35
"forceDefaultDifficulty"
Byte
[i_playercontroller_base]+164
36
"isPlayer"
Byte
[i_playercontroller_base]+165
37
"isEnemy"
Byte
[i_playercontroller_base]+166
38
"isBoss"
Byte
[i_playercontroller_base]+167
39
"isSuperman"
Byte
[i_playercontroller_base]+168
40
"isItem"
Byte
[i_playercontroller_base]+169
41
"slidingFlag"
Byte
[i_playercontroller_base]+16A
42
"mustKnockBackFlag"
Byte
[i_playercontroller_base]+16B
43
"mustKnockEffectiveEnabled"
Byte
[i_playercontroller_base]+16C
44
"state"
4 Bytes
[i_playercontroller_base]+170
45
"command"
4 Bytes
[i_playercontroller_base]+174
46
"ray"
4 Bytes
[i_playercontroller_base]+178
47
"raycastHit"
4 Bytes
[i_playercontroller_base]+190
48
"navMeshHit"
4 Bytes
[i_playercontroller_base]+1BC
49
"deltaTimeMove"
Float
[i_playercontroller_base]+1E0
50
"deltaTimeCache"
Float
[i_playercontroller_base]+1E4
51
"nowHP"
4 Bytes
[i_playercontroller_base]+1E8
52
"nowST"
Float
[i_playercontroller_base]+1EC
53
"consumeStamina"
Byte
[i_playercontroller_base]+1F0
54
"knockRemain"
Float
[i_playercontroller_base]+1F4
55
"knockRemainLight"
Float
[i_playercontroller_base]+1F8
56
"cannotKnockDown"
Byte
[i_playercontroller_base]+1FC
57
"knockDirection"
Float
[i_playercontroller_base]+200
58
"actDistNum"
4 Bytes
[i_playercontroller_base]+20C
59
"totalTime"
Float
[i_playercontroller_base]+210
60
"stateTime"
Float
[i_playercontroller_base]+214
61
"destination"
4 Bytes
[i_playercontroller_base]+218
62
"mutekiTimeRemain"
Float
[i_playercontroller_base]+224
63
"attackedTimeRemain"
Float
[i_playercontroller_base]+228
64
"attackedTimeRemainReduceMultiplier"
Float
[i_playercontroller_base]+22C
65
"attackProcess"
4 Bytes
[i_playercontroller_base]+230
66
"notResetAttackProcessOnDamage"
Byte
[i_playercontroller_base]+234
67
"attackType"
4 Bytes
[i_playercontroller_base]+238
68
"attackPowerMultiplier"
Float
[i_playercontroller_base]+23C
69
"defensePowerMultiplier"
Float
[i_playercontroller_base]+240
70
"knockPowerMultiplier"
Float
[i_playercontroller_base]+244
71
"arrived"
Byte
[i_playercontroller_base]+248
72
"roveInterval"
Float
[i_playercontroller_base]+24C
73
"agentPathReserved"
Byte
[i_playercontroller_base]+250
74
"isJumpingAttack"
Byte
[i_playercontroller_base]+251
75
"canRun"
Byte
[i_playercontroller_base]+252
76
"groundedFlag"
Byte
[i_playercontroller_base]+253
77
"fieldLayerMask"
4 Bytes
[i_playercontroller_base]+254
78
"checkGroundedLayerMask"
4 Bytes
[i_playercontroller_base]+258
79
"checkGroundPivotHeight"
Float
[i_playercontroller_base]+25C
80
"checkGroundTolerance"
Float
[i_playercontroller_base]+260
81
"checkGroundTolerance_Jumping"
Float
[i_playercontroller_base]+264
82
"groundedFlag_ForAgent"
Byte
[i_playercontroller_base]+268
83
"minMoveDistance_Default"
Float
[i_playercontroller_base]+26C
84
"minMoveDistance_Special"
Float
[i_playercontroller_base]+270
85
"nowSpeed"
Float
[i_playercontroller_base]+274
86
"rotSpeed"
Float
[i_playercontroller_base]+278
87
"lastRotateY"
Float
[i_playercontroller_base]+27C
88
"move"
4 Bytes
[i_playercontroller_base]+280
89
"gravityMultiplier"
Float
[i_playercontroller_base]+28C
90
"isDamageHeavy"
Byte
[i_playercontroller_base]+290
91
"attackBiasValue"
Float
[i_playercontroller_base]+294
92
"quickJumping"
Byte
[i_playercontroller_base]+298
93
"jumpType"
4 Bytes
[i_playercontroller_base]+29C
94
"rovingTime"
Float
[i_playercontroller_base]+2A0
95
"idlingTime"
Float
[i_playercontroller_base]+2A4
96
"idlingTimeCondition"
Float
[i_playercontroller_base]+2A8
97
"isLockon"
Byte
[i_playercontroller_base]+2AC
98
"lockonRotSpeed"
Float
[i_playercontroller_base]+2B0
99
"isSuperarmor"
Byte
[i_playercontroller_base]+2B4
100
"isAnimStopped"
Byte
[i_playercontroller_base]+2B5
101
"targetRadius"
Float
[i_playercontroller_base]+2B8
102
"targetFixingTimeRemain"
Float
[i_playercontroller_base]+2BC
103
"timeScale"
Float
[i_playercontroller_base]+2C0
104
"belligerent"
Byte
[i_playercontroller_base]+2C4
105
"disableControlTimeRemain"
Float
[i_playercontroller_base]+2C8
106
"gravityZeroTimeRemain"
Float
[i_playercontroller_base]+2CC
107
"supermanTime"
Float
[i_playercontroller_base]+2D0
108
"destroyOnDead"
Byte
[i_playercontroller_base]+2D4
109
"deadTimer"
Float
[i_playercontroller_base]+2D8
110
"knockRestoreSpeed"
Float
[i_playercontroller_base]+2DC
111
"mudToWalk"
Byte
[i_playercontroller_base]+2E0
112
"attackEffectEnabled"
Byte
[i_playercontroller_base]+2E1
113
"staminaTreatAsAttackTimeRemain"
Float
[i_playercontroller_base]+2E4
114
"setAttackIntervalToStaminaDontHeal"
Byte
[i_playercontroller_base]+2E8
115
"resetAgentRadiusOnChangeState"
Byte
[i_playercontroller_base]+2E9
116
"resetAgentHeightOnChangeState"
Byte
[i_playercontroller_base]+2EA
117
"animatorForBattle"
Byte
[i_playercontroller_base]+2EB
118
"disableAttackStartTimeRemain"
Float
[i_playercontroller_base]+2EC
119
"anyAttackEnabled"
Byte
[i_playercontroller_base]+2F0
120
"forceIgnoreFlag"
Byte
[i_playercontroller_base]+2F1
121
"atttackIntervalSave"
Float
[i_playercontroller_base]+2F4
122
"lastKnockedSave"
Float
[i_playercontroller_base]+2F8
123
"attackStiffTime"
Float
[i_playercontroller_base]+2FC
124
"specialMoveDirection"
4 Bytes
[i_playercontroller_base]+300
125
"specialMoveDistance"
Float
[i_playercontroller_base]+30C
126
"specialMoveDuration"
Float
[i_playercontroller_base]+310
127
"specialMoveEasingType"
4 Bytes
[i_playercontroller_base]+314
128
"specialMoveLastPoint"
Float
[i_playercontroller_base]+318
129
"specialMoveElapsedTime"
Float
[i_playercontroller_base]+31C
130
"specialMoveVectorTemp"
4 Bytes
[i_playercontroller_base]+320
131
"specialMovePointTemp"
Float
[i_playercontroller_base]+32C
132
"specialMoveDirectionAdjustEnabled"
Byte
[i_playercontroller_base]+330
133
"destinationUpdateInterval"
Float
[i_playercontroller_base]+334
134
"level"
4 Bytes
[i_playercontroller_base]+338
135
"watchoutTime"
Float
[i_playercontroller_base]+33C
136
"lockTargetTime"
Float
[i_playercontroller_base]+340
137
"attackProcessResetTime"
Float
[i_playercontroller_base]+344
138
"attackLockonDefaultSpeed"
Float
[i_playercontroller_base]+348
139
"attackWaitingLockonRotSpeed"
Float
[i_playercontroller_base]+34C
140
"commonLockonTowardsMultiplier"
Float
[i_playercontroller_base]+350
141
"lightMutekiTime"
Float
[i_playercontroller_base]+354
142
"heavyMutekiTime"
Float
[i_playercontroller_base]+358
143
"lightKnockRecoveryRate"
Float
[i_playercontroller_base]+35C
144
"stoppingDistanceWait"
Float
[i_playercontroller_base]+360
145
"stoppingDistanceBattle"
Float
[i_playercontroller_base]+364
146
"stoppingDistanceRove"
Float
[i_playercontroller_base]+368
147
"defaultAgentRadius"
Float
[i_playercontroller_base]+36C
148
"defaultAgentHeight"
Float
[i_playercontroller_base]+370
149
"agentResetTime"
Float
[i_playercontroller_base]+374
150
"enableContinuousLightKnock"
Byte
[i_playercontroller_base]+378
151
"stopTurnRotSpeed"
Float
[i_playercontroller_base]+37C
152
"spawnStiffTime"
Float
[i_playercontroller_base]+380
153
"jumpSaveTime"
Float
[i_playercontroller_base]+384
154
"dodgeStiffTime"
Float
[i_playercontroller_base]+388
155
"climbStiffTime"
Float
[i_playercontroller_base]+38C
156
"superAttackRate"
Float
[i_playercontroller_base]+390
157
"superDefenseRate"
Float
[i_playercontroller_base]+394
158
"superKnockRate"
Float
[i_playercontroller_base]+398
159
"superKnockedRate"
Float
[i_playercontroller_base]+39C
160
"superSpeedRate"
Float
[i_playercontroller_base]+3A0
161
"superAngularRate"
Float
[i_playercontroller_base]+3A4
162
"superAccelerationRate"
Float
[i_playercontroller_base]+3A8
163
"superSTRate"
Float
[i_playercontroller_base]+3AC
164
"superCostRate"
Float
[i_playercontroller_base]+3B0
165
"superAttackSuperarmor"
Byte
[i_playercontroller_base]+3B4
166
"sideStepDirection"
4 Bytes
[i_playercontroller_base]+3B8
167
"fbStepTime"
Float
[i_playercontroller_base]+3BC
168
"fbStepMaxDist"
Float
[i_playercontroller_base]+3C0
169
"fbStepIgnoreY"
Byte
[i_playercontroller_base]+3C4
170
"fbStepConsiderRadius"
Byte
[i_playercontroller_base]+3C5
171
"fbStepEaseType"
4 Bytes
[i_playercontroller_base]+3C8
172
"wallLayerMask"
4 Bytes
[i_playercontroller_base]+3CC
173
"colorTypeDamage"
4 Bytes
[i_playercontroller_base]+3D0
174
"lastDamagedColorType"
4 Bytes
[i_playercontroller_base]+3D4
175
"attackedTimeRemainOnDamage"
Float
[i_playercontroller_base]+3D8
176
"attackedTimeRemainOnRestoreKnockDown"
Float
[i_playercontroller_base]+3DC
177
"isAnimParamDetail"
Byte
[i_playercontroller_base]+3E0
178
"isAnimIdleEnabled"
Byte
[i_playercontroller_base]+3E1
179
"idleType"
4 Bytes
[i_playercontroller_base]+3E4
180
"disablizeAgentOnJump"
Byte
[i_playercontroller_base]+3E8
181
"enableFriendsEffect"
Byte
[i_playercontroller_base]+3E9
182
"damageReportEnabled"
Byte
[i_playercontroller_base]+3EA
183
"lightKnockCount"
4 Bytes
[i_playercontroller_base]+3EC
184
"heavyKnockCount"
4 Bytes
[i_playercontroller_base]+3F0
185
"quickAttackReduceRate"
Float
[i_playercontroller_base]+3F4
186
"notAffectedByRisky"
Byte
[i_playercontroller_base]+3F8
187
"attackStiffTimeSave"
Float
[i_playercontroller_base]+3FC
188
"attackIntervalSave"
Float
[i_playercontroller_base]+400
189
"rideResetCheck"
Byte
[i_playercontroller_base]+404
190
"rideTimeLimitEnabled"
Byte
[i_playercontroller_base]+405
191
"rideTimeLimitDistance"
Float
[i_playercontroller_base]+408
192
"rideContinueOnDamage"
Byte
[i_playercontroller_base]+40C
193
"sickHealSpeed"
Float
[i_playercontroller_base]+410
194
"fireDamageRate"
4 Bytes
[i_playercontroller_base]+414
195
"targetHateEnabled"
Byte
[i_playercontroller_base]+418
196
"targetHateInitialized"
Byte
[i_playercontroller_base]+419
197
"dodgeRemain"
Float
[i_playercontroller_base]+41C
198
"dodgeDamageHealMax"
Float
[i_playercontroller_base]+420
199
"dodgeCost"
Float
[i_playercontroller_base]+424
200
"attackingDodgeEnabled"
Byte
[i_playercontroller_base]+428
201
"dodgeDistance"
Float
[i_playercontroller_base]+42C
202
"dodgeMutekiTime"
Float
[i_playercontroller_base]+430
203
"friendsId"
1
4 Bytes
[i_playercontroller_base]+520
204
"battleAnimatorId"
1
4 Bytes
[i_playercontroller_base]+524
205
"itemAnimatorId"
1
4 Bytes
[i_playercontroller_base]+528
206
"drownTolerance"
Byte
[i_playercontroller_base]+52C
207
"fallingTolerance"
Byte
[i_playercontroller_base]+52D
208
"existDynamicBone"
Byte
[i_playercontroller_base]+52E
209
"isRestored"
Byte
[i_playercontroller_base]+52F
210
"isMultiBuff"
Byte
[i_playercontroller_base]+530
211
"checkWeaponPreservedFlag"
Byte
[i_playercontroller_base]+531
212
"maxHPLevel"
Float
[i_playercontroller_base]+534
213
"attackMultiLevel"
Float
[i_playercontroller_base]+538
214
"defenseMultiLevel"
Float
[i_playercontroller_base]+53C
215
"fixFaceName"
4 Bytes
[i_playercontroller_base]+540
216
"fixFaceTimeRemain"
Float
[i_playercontroller_base]+544
217
"eventMutekiTimeRemain"
Float
[i_playercontroller_base]+548
218
"superHealRate"
Float
[i_playercontroller_base]+54C
219
"superHealHPBias"
Float
[i_playercontroller_base]+550
220
"superHealDecimal"
Float
[i_playercontroller_base]+554
221
"specialStepBoxCenterOffset"
4 Bytes
[i_playercontroller_base]+558
222
"specialStepBoxHalfExtents"
4 Bytes
[i_playercontroller_base]+564
223
"specialStepBoxLayerMask"
4 Bytes
[i_playercontroller_base]+570
224
"preMaxHP"
4 Bytes
[i_playercontroller_base]+574
225
"sParticleTimeOutRemain"
Float
[i_playercontroller_base]+578
226
"gutsMax"
Float
[i_playercontroller_base]+57C
227
"gutsRemain"
Float
[i_playercontroller_base]+580
228
"fieldBuffContinuousHeal"
Float
[i_playercontroller_base]+584
229
"mesTimeStamp"
Double
[i_playercontroller_base]+588
230
"mesPrioritySave"
4 Bytes
[i_playercontroller_base]+590
231
"mesItv"
Double
[i_playercontroller_base]+598
232
"mesDmgLtMin"
4 Bytes
[i_playercontroller_base]+5A0
233
"mesDmgLtMax"
4 Bytes
[i_playercontroller_base]+5A4
234
"mesDmgHvMin"
4 Bytes
[i_playercontroller_base]+5A8
235
"mesDmgHvMax"
4 Bytes
[i_playercontroller_base]+5AC
236
"mesAtkMin"
4 Bytes
[i_playercontroller_base]+5B0
237
"mesAtkMax"
4 Bytes
[i_playercontroller_base]+5B4
238
"chatKeyInitialized"
Byte
[i_playercontroller_base]+5B8
239
"chatAttackCount"
4 Bytes
[i_playercontroller_base]+5BC
240
"chatDamageCount"
4 Bytes
[i_playercontroller_base]+5C0
241
"isRevive"
Byte
[i_playercontroller_base]+5C4
242
"battleTime"
Float
[i_playercontroller_base]+5C8
243
"restTime"
Float
[i_playercontroller_base]+5CC
244
"escapeTrapTimeRemain"
Float
[i_playercontroller_base]+5D0
245
"escapeTrapDestination"
4 Bytes
[i_playercontroller_base]+5D4
246
"headLookEffect"
Float
[i_playercontroller_base]+5E0
247
"headLookEffectTargetFigure"
Float
[i_playercontroller_base]+5E4
248
"drowningRemain"
Float
[i_playercontroller_base]+5E8
249
"drowningDamageRemain"
4 Bytes
[i_playercontroller_base]+5EC
250
"lastLandingPosition"
4 Bytes
[i_playercontroller_base]+5F0
251
"drownToleranceNow"
Byte
[i_playercontroller_base]+5FC
252
"drownSurfaceHeight"
Float
[i_playercontroller_base]+600
253
"drownIsLava"
Byte
[i_playercontroller_base]+604
254
"drownIsFalling"
Byte
[i_playercontroller_base]+605
255
"drownLavaDamageDecimal"
Float
[i_playercontroller_base]+608
256
"idlingTimeForFriendsEffect"
Float
[i_playercontroller_base]+60C
257
"forceGroundedTimeRemain"
Float
[i_playercontroller_base]+610
258
"forceStopReservedTimeRemain"
Float
[i_playercontroller_base]+614
259
"releaseAttackReservedTimeRemain"
Float
[i_playercontroller_base]+618
260
"isSacrificeOnDead"
Byte
[i_playercontroller_base]+61C
261
"ignoreMegatonCoin"
Byte
[i_playercontroller_base]+61D
262
"separatedBattleTime"
Float
[i_playercontroller_base]+620
263
"separateFearRate"
Float
[i_playercontroller_base]+624
264
"disadvantageTimeRemain"
Float
[i_playercontroller_base]+628
265
"reviveTimer"
Float
[i_playercontroller_base]+62C
266
"currentFaceIndex"
4 Bytes
[i_playercontroller_base]+630
267
"faceIndexInitialized"
Byte
[i_playercontroller_base]+634
268
"specialRotateElapsedTime"
Float
[i_playercontroller_base]+638
269
"specialRotateDuration"
Float
[i_playercontroller_base]+63C
270
"specialRotateAngle"
Float
[i_playercontroller_base]+640
271
"specialRotateLastPoint"
Float
[i_playercontroller_base]+644
272
"moveByFloorRotationSave"
Float
[i_playercontroller_base]+648
273
"isHyper"
Byte
[i_playercontroller_base]+780
274
"sandstarAutoHeal"
Byte
[i_playercontroller_base]+781
275
"controlEnabled"
Byte
[i_playercontroller_base]+782
276
"axisInput"
4 Bytes
[i_playercontroller_base]+784
277
"climbLookQuaternion"
4 Bytes
[i_playercontroller_base]+78C
278
"inputMagMoment"
Float
[i_playercontroller_base]+79C
279
"inputMagInertia"
Float
[i_playercontroller_base]+7A0
280
"lastAttackButtonTime"
Float
[i_playercontroller_base]+7A4
281
"lastJumpButtonTime"
Float
[i_playercontroller_base]+7A8
282
"isAnimEnd"
Byte
[i_playercontroller_base]+7AC
283
"costRunBaseSpeed"
Float
[i_playercontroller_base]+7B0
284
"landingTime"
Float
[i_playercontroller_base]+7B4
285
"climbEnabled"
Byte
[i_playercontroller_base]+7B8
286
"jumpAttackPosSave"
Float
[i_playercontroller_base]+7BC
287
"jumpShortenTimeRemain"
Float
[i_playercontroller_base]+7C0
288
"quickJumpShortenReserved"
4 Bytes
[i_playercontroller_base]+7C4
289
"obstacleDisableTimeRemain"
Float
[i_playercontroller_base]+7C8
290
"displaceEnabled"
4 Bytes
[i_playercontroller_base]+7CC
291
"disableInputTimeRemain"
Float
[i_playercontroller_base]+7D0
292
"boosterFlag"
Byte
[i_playercontroller_base]+7D4
293
"airJumpEnabled"
Byte
[i_playercontroller_base]+7D5
294
"_pileAttackCheckerEnabled"
Byte
[i_playercontroller_base]+7D6
295
"checkGroundBoxHalfExtents"
4 Bytes
[i_playercontroller_base]+7D8
296
"supermanCoolTimeRemain"
Float
[i_playercontroller_base]+7E4
297
"disableDodgeTimeRemain"
Float
[i_playercontroller_base]+7E8
298
"particleJustDodgeTimeRemain"
Float
[i_playercontroller_base]+7EC
299
"dodgeCancelEnabled"
Byte
[i_playercontroller_base]+7F0
300
"groundedFixTimeRemain"
Float
[i_playercontroller_base]+7F4
301
"hyperJumpedTimeRemain"
Float
[i_playercontroller_base]+7F8
302
"attackingMoveEnabled"
Byte
[i_playercontroller_base]+7FC
303
"attackingMoveReservedTimer"
Float
[i_playercontroller_base]+800
304
"projectileNoticeTimeRemain"
Float
[i_playercontroller_base]+804
305
"defCCRadius"
Float
[i_playercontroller_base]+808
306
"defCCHeight"
Float
[i_playercontroller_base]+80C
307
"defCCStepOffset"
Float
[i_playercontroller_base]+810
308
"defCCSlopeLimit"
Float
[i_playercontroller_base]+814
309
"climbCC"
Byte
[i_playercontroller_base]+818
310
"climbAnimFlag"
Byte
[i_playercontroller_base]+819
311
"landingPointerLayer"
4 Bytes
[i_playercontroller_base]+81C
312
"turnSpeedMultiplier"
Float
[i_playercontroller_base]+820
313
"targetDirection"
4 Bytes
[i_playercontroller_base]+824
314
"lookDirection"
4 Bytes
[i_playercontroller_base]+830
315
"freeRotation"
4 Bytes
[i_playercontroller_base]+83C
316
"velocity"
Float
[i_playercontroller_base]+84C
317
"fixMoveTimeRemain"
Float
[i_playercontroller_base]+850
318
"fixMoveVector"
4 Bytes
[i_playercontroller_base]+854
319
"targetMissingCount"
4 Bytes
[i_playercontroller_base]+860
320
"bothHandAttacking"
Byte
[i_playercontroller_base]+864
321
"pileDuration"
Float
[i_playercontroller_base]+868
322
"isSkillAttacking"
Byte
[i_playercontroller_base]+86C
323
"isScrewJumping"
Byte
[i_playercontroller_base]+86D
324
"impactAttackDuration"
Float
[i_playercontroller_base]+870
325
"checkPaused"
Byte
[i_playercontroller_base]+874
326
"attackOffsetNormal"
4 Bytes
[i_playercontroller_base]+878
327
"attackOffsetBothHand"
4 Bytes
[i_playercontroller_base]+884
328
"eulerVec"
4 Bytes
[i_playercontroller_base]+890
329
"isPlasma"
Byte
[i_playercontroller_base]+89C
330
"minmiGoldenSave"
Byte
[i_playercontroller_base]+89D
331
"photoSave"
Byte
[i_playercontroller_base]+89E
332
"lightTypeSave"
1
4 Bytes
[i_playercontroller_base]+8A0
333
"animConIsChanging"
Byte
[i_playercontroller_base]+8A4
334
"bothHandAttackMul"
Float
[i_playercontroller_base]+8A8
335
"bothHandKnockMul"
Float
[i_playercontroller_base]+8AC
336
"targetRadiusSave"
Float
[i_playercontroller_base]+8B0
337
"ridingTime"
Float
[i_playercontroller_base]+8B4
338
"firstPersonRotationDamp"
4 Bytes
[i_playercontroller_base]+8B8
339
"footstepJumpTimeRemain"
Float
[i_playercontroller_base]+8C8
341
"Get XP/Money (Active: gain XP)"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_GETXP_MONEY,02 00 00 41 FF D3 48 8B 40 68 48 63 88 DC 00 00 00) // should be unique
aobscanregion(INJECT_GETXP_MONEY,CharacterManagerAddExpProc+f0,CharacterManagerAddExpProc+217,48 63 88 DC 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_GETXP_MONEY)
label(code)
label(return)
label(i_exp_money_base)
newmem:
mov [i_exp_money_base], rax
code:
movsxd rcx,dword ptr [rax+000000DC]
jmp return
align 10 cc
i_exp_money_base:
dq 0
INJECT_GETXP_MONEY:
jmp newmem
nop 2
return:
registersymbol(i_exp_money_base)
registersymbol(INJECT_GETXP_MONEY)
[DISABLE]
INJECT_GETXP_MONEY:
db 48 63 88 DC 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: CharacterManager:AddExp+107
CharacterManager:AddExp+d5: 90 - nop
CharacterManager:AddExp+d6: 49 BB 90 73 6A 8B 10 02 00 00 - mov r11,GameManager+Save:get_Level
CharacterManager:AddExp+e0: 41 FF D3 - call r11
CharacterManager:AddExp+e3: 4C 8B F0 - mov r14,rax
CharacterManager:AddExp+e6: 49 BA C8 CF 53 12 11 02 00 00 - mov r10,000002111253CFC8
CharacterManager:AddExp+f0: 48 8D 64 24 00 - lea rsp,[rsp+00]
CharacterManager:AddExp+f5: 90 - nop
CharacterManager:AddExp+f6: 49 BB 50 E8 96 85 10 02 00 00 - mov r11,SingletonMonoBehaviour`1[T_REF]:get_Instance
CharacterManager:AddExp+100: 41 FF D3 - call r11
CharacterManager:AddExp+103: 48 8B 40 68 - mov rax,[rax+68]
// ---------- INJECTING HERE ----------
CharacterManager:AddExp+107: 48 63 88 DC 00 00 00 - movsxd rcx,dword ptr [rax+000000DC]
// ---------- DONE INJECTING ----------
CharacterManager:AddExp+10e: 03 4D D8 - add ecx,[rbp-28]
CharacterManager:AddExp+111: 89 88 DC 00 00 00 - mov [rax+000000DC],ecx
CharacterManager:AddExp+117: 49 BA C8 CF 53 12 11 02 00 00 - mov r10,000002111253CFC8
CharacterManager:AddExp+121: 48 8D 64 24 00 - lea rsp,[rsp+00]
CharacterManager:AddExp+126: 49 BB 50 E8 96 85 10 02 00 00 - mov r11,SingletonMonoBehaviour`1[T_REF]:get_Instance
CharacterManager:AddExp+130: 41 FF D3 - call r11
CharacterManager:AddExp+133: 48 8B 40 68 - mov rax,[rax+68]
CharacterManager:AddExp+137: 48 63 80 DC 00 00 00 - movsxd rax,dword ptr [rax+000000DC]
CharacterManager:AddExp+13e: 85 C0 - test eax,eax
CharacterManager:AddExp+140: 0F 8D 30 00 00 00 - jnl CharacterManager:AddExp+176
}
343
"Base addr."
1
0
8 Bytes
i_exp_money_base
378
"Save+"
1
344
"dataExist"
4 Bytes
[i_exp_money_base]+C8
345
"difficulty"
4 Bytes
[i_exp_money_base]+CC
346
"progress"
4 Bytes
[i_exp_money_base]+D0
347
"nowStage"
4 Bytes
[i_exp_money_base]+D4
348
"nowFloor"
4 Bytes
[i_exp_money_base]+D8
349
"exp"
FF0000
4 Bytes
[i_exp_money_base]+DC
350
"expStorage"
4 Bytes
[i_exp_money_base]+E0
351
"money"
FF0000
4 Bytes
[i_exp_money_base]+E4
352
"hpUpSale"
4 Bytes
[i_exp_money_base]+E8
353
"stUpSale"
4 Bytes
[i_exp_money_base]+EC
354
"playerHP"
4 Bytes
[i_exp_money_base]+F0
355
"minmi"
4 Bytes
[i_exp_money_base]+F4
356
"tutorial"
4 Bytes
[i_exp_money_base]+F8
357
"secret"
4 Bytes
[i_exp_money_base]+FC
358
"randomSeed"
4 Bytes
[i_exp_money_base]+100
359
"isExpPreserved"
4 Bytes
[i_exp_money_base]+104
360
"unlockCount"
4 Bytes
[i_exp_money_base]+108
361
"playerType"
4 Bytes
[i_exp_money_base]+10C
362
"moveByBus"
4 Bytes
[i_exp_money_base]+110
363
"facilityDisabled"
4 Bytes
[i_exp_money_base]+114
364
"language"
4 Bytes
[i_exp_money_base]+118
365
"seVolume"
4 Bytes
[i_exp_money_base]+11C
366
"musicVolume"
4 Bytes
[i_exp_money_base]+120
367
"ambientVolume"
4 Bytes
[i_exp_money_base]+124
368
"equipedHpUp"
4 Bytes
[i_exp_money_base]+128
369
"equipedStUp"
4 Bytes
[i_exp_money_base]+12C
370
"equipedInvUp"
4 Bytes
[i_exp_money_base]+130
371
"version"
4 Bytes
[i_exp_money_base]+134
372
"totalPlayTime"
4 Bytes
[i_exp_money_base]+138
373
"parkmanScore"
4 Bytes
[i_exp_money_base]+13C
374
"parkmanScoreHard"
4 Bytes
[i_exp_money_base]+140
375
"sandstar"
Float
[i_exp_money_base]+144
376
"expSave"
4 Bytes
[i_exp_money_base]+148
377
"levelSave"
4 Bytes
[i_exp_money_base]+14C
379
"EXP 4x"
Auto Assembler Script
{ Game : KemonoFriendsCMC.exe
Version:
Date : 2022-05-07
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
//aobscan(INJECT_XP_MUL,90 03 4D D8 89 88 DC 00 00 00) // should be unique
aobscanregion(INJECT_XP_MUL,CharacterManagerAddExpProc+f0,CharacterManagerAddExpProc+1fe,03 4D D8 89 88 DC 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_XP_MUL)
label(code)
label(return)
newmem:
push rbx
mov ebx, [rbp-28]
cvtsi2ss xmm15, ebx
vmovss xmm14, [vf_4]
vmulss xmm15, xmm15, xmm14
cvtss2si ebx, xmm15
mov [rbp-28], ebx
pop rbx
code:
add ecx,[rbp-28]
mov [rax+000000DC],ecx
jmp return
align 10 cc
vf_4:
dd (float)4
INJECT_XP_MUL:
jmp newmem
nop 4
return:
registersymbol(INJECT_XP_MUL)
[DISABLE]
INJECT_XP_MUL:
db 03 4D D8 89 88 DC 00 00 00
unregistersymbol(INJECT_XP_MUL)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: CharacterManager:AddExp+10e
CharacterManager:AddExp+e0: 41 FF D3 - call r11
CharacterManager:AddExp+e3: 4C 8B F0 - mov r14,rax
CharacterManager:AddExp+e6: 49 BA C8 CF 53 12 11 02 00 00 - mov r10,000002111253CFC8
CharacterManager:AddExp+f0: 48 8D 64 24 00 - lea rsp,[rsp+00]
CharacterManager:AddExp+f5: 90 - nop
CharacterManager:AddExp+f6: 49 BB 50 E8 96 85 10 02 00 00 - mov r11,SingletonMonoBehaviour`1[T_REF]:get_Instance
CharacterManager:AddExp+100: 41 FF D3 - call r11
CharacterManager:AddExp+103: 48 8B 40 68 - mov rax,[rax+68]
CharacterManager:AddExp+107: E9 24 58 02 00 - jmp 2108BDB0000
CharacterManager:AddExp+10c: 66 90 - nop 2
// ---------- INJECTING HERE ----------
CharacterManager:AddExp+10e: 03 4D D8 - add ecx,[rbp-28]
// ---------- DONE INJECTING ----------
CharacterManager:AddExp+111: 89 88 DC 00 00 00 - mov [rax+000000DC],ecx
CharacterManager:AddExp+117: 49 BA C8 CF 53 12 11 02 00 00 - mov r10,000002111253CFC8
CharacterManager:AddExp+121: 48 8D 64 24 00 - lea rsp,[rsp+00]
CharacterManager:AddExp+126: 49 BB 50 E8 96 85 10 02 00 00 - mov r11,SingletonMonoBehaviour`1[T_REF]:get_Instance
CharacterManager:AddExp+130: 41 FF D3 - call r11
CharacterManager:AddExp+133: 48 8B 40 68 - mov rax,[rax+68]
CharacterManager:AddExp+137: 48 63 80 DC 00 00 00 - movsxd rax,dword ptr [rax+000000DC]
CharacterManager:AddExp+13e: 85 C0 - test eax,eax
CharacterManager:AddExp+140: 0F 8D 30 00 00 00 - jnl CharacterManager:AddExp+176
CharacterManager:AddExp+146: 49 BA C8 CF 53 12 11 02 00 00 - mov r10,000002111253CFC8
}
380
"Kemono Friends Cellien May Cry 1.27.0 / https://opencheattables.com / CE 7.4+"
400080
1