444
"Player Mods"
1
339
"Invincible"
0701FE
Auto Assembler Script
[ENABLE]
aobscanmodule(YoSub,yomawari2.exe,83 78 04 03 0F 84 BD 00 00 00) // should be unique
define(YoSub,yomawari2.exe+689EC)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//cmp dword ptr [eax+04],03
je yomawari2.exe+68AB3
jmp return
YoSub:
jmp newmem
nop 5
return:
registersymbol(YoSub)
[DISABLE]
YoSub:
db 83 78 04 03 0F 84 BD 00 00 00
unregistersymbol(YoSub)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: yomawari2.exe+689EC
yomawari2.exe+689C4: 0F 2F 44 24 3C - comiss xmm0,[esp+3C]
yomawari2.exe+689C9: 77 12 - ja yomawari2.exe+689DD
yomawari2.exe+689CB: F3 0F 10 44 24 30 - movss xmm0,[esp+30]
yomawari2.exe+689D1: 0F 57 C9 - xorps xmm1,xmm1
yomawari2.exe+689D4: 0F 2F C8 - comiss xmm1,xmm0
yomawari2.exe+689D7: 0F 86 D6 00 00 00 - jbe yomawari2.exe+68AB3
yomawari2.exe+689DD: 8B 44 24 1C - mov eax,[esp+1C]
yomawari2.exe+689E1: 83 7C 84 48 00 - cmp dword ptr [esp+eax*4+48],00
yomawari2.exe+689E6: 75 69 - jne yomawari2.exe+68A51
yomawari2.exe+689E8: 8B 44 24 18 - mov eax,[esp+18]
// ---------- INJECTING HERE ----------
yomawari2.exe+689EC: 83 78 04 03 - cmp dword ptr [eax+04],03
// ---------- DONE INJECTING ----------
yomawari2.exe+689F0: 0F 84 BD 00 00 00 - je yomawari2.exe+68AB3
yomawari2.exe+689F6: A1 10 7E 17 01 - mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+689FB: 8B 80 E4 00 00 00 - mov eax,[eax+000000E4]
yomawari2.exe+68A01: 8B 88 C4 00 00 00 - mov ecx,[eax+000000C4]
yomawari2.exe+68A07: 8B 41 08 - mov eax,[ecx+08]
yomawari2.exe+68A0A: 89 44 24 3C - mov [esp+3C],eax
yomawari2.exe+68A0E: 85 C0 - test eax,eax
yomawari2.exe+68A10: 74 39 - je yomawari2.exe+68A4B
yomawari2.exe+68A12: 83 79 0C 00 - cmp dword ptr [ecx+0C],00
yomawari2.exe+68A16: 74 33 - je yomawari2.exe+68A4B
}
344
"Invisible"
0701FE
Auto Assembler Script
[ENABLE]
aobscanmodule(yomainv,yomawari2.exe,83 7E 04 02 0F 85 12 03 00 00) // should be unique
define(yomainv,yomawari2.exe+14AEA)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
//cmp dword ptr [esi+04],02
jne yomawari2.exe+14E06
jmp return
yomainv:
jmp newmem
nop 5
return:
registersymbol(yomainv)
[DISABLE]
yomainv:
db 83 7E 04 02 0F 85 12 03 00 00
unregistersymbol(yomainv)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: yomawari2.exe+14AEA
yomawari2.exe+14AC1: F0 0F C1 10 - lock xadd [eax],edx
yomawari2.exe+14AC5: 0F 85 4D 03 00 00 - jne yomawari2.exe+14E18
yomawari2.exe+14ACB: 8B 06 - mov eax,[esi]
yomawari2.exe+14ACD: 8B CE - mov ecx,esi
yomawari2.exe+14ACF: FF 50 04 - call dword ptr [eax+04]
yomawari2.exe+14AD2: E9 41 03 00 00 - jmp yomawari2.exe+14E18
yomawari2.exe+14AD7: 83 7D 0C 02 - cmp dword ptr [ebp+0C],02
yomawari2.exe+14ADB: 75 0D - jne yomawari2.exe+14AEA
yomawari2.exe+14ADD: 81 7E 10 BC 0B 00 00 - cmp [esi+10],00000BBC
yomawari2.exe+14AE4: 0F 85 1C 03 00 00 - jne yomawari2.exe+14E06
// ---------- INJECTING HERE ----------
yomawari2.exe+14AEA: 83 7E 04 02 - cmp dword ptr [esi+04],02
// ---------- DONE INJECTING ----------
yomawari2.exe+14AEE: 0F 85 12 03 00 00 - jne yomawari2.exe+14E06
yomawari2.exe+14AF4: 8B 54 24 18 - mov edx,[esp+18]
yomawari2.exe+14AF8: 0F 57 DB - xorps xmm3,xmm3
yomawari2.exe+14AFB: 0F 2F 5A 14 - comiss xmm3,[edx+14]
yomawari2.exe+14AFF: 0F 87 C9 02 00 00 - ja yomawari2.exe+14DCE
yomawari2.exe+14B05: 8B 86 D4 00 00 00 - mov eax,[esi+000000D4]
yomawari2.exe+14B0B: 8B 4D 10 - mov ecx,[ebp+10]
yomawari2.exe+14B0E: 89 4C 24 1C - mov [esp+1C],ecx
yomawari2.exe+14B12: 85 C0 - test eax,eax
yomawari2.exe+14B14: 74 1D - je yomawari2.exe+14B33
}
193
"Dead (Ctrl+K to die)"
2:No
3:Yes
0701FE
4 Bytes
"yomawari2.exe"+00A07E10
4
44
Set Value
17
75
3
Kill
0
399
"Can Move (hold R to move)"
1: Yes
2: No
4 Bytes
"yomawari2.exe"+00A07E54
4
Set Value
82
1
0
199
"Player Location"
000000
1
433
"Noclip (Hold Alt)"
000000
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
jmp yomawari2.exe+53443
jmp yomawari2.exe+53400
lea esp,[esp+00000000]
exit:
jmp returnhere
"yomawari2.exe"+533F5:
jmp newmem
nop 6
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"yomawari2.exe"+533F5:
db 74 4C EB 07 8D A4 24 00 00 00 00
//je yomawari2.exe+53443
//jmp yomawari2.exe+53400
//lea esp,[esp+00000000]
Activate
18
0
395
"Save Location (Ctrl+Alt+S)"
000000
Auto Assembler Script
[ENABLE]
createthread(saveloc)
alloc(saveloc, 1028)
registersymbol(saveloc)
saveloc:
mov rax,["yomawari2.exe"+00A07E58]
add rax, 5C
mov rax,[rax]
add rax, 3C
movss xmm0,[rax]
movss xmm1,[rax+4]
mov rax,["yomawari2.exe"+00A07E4C]
add rax, 14
movss [rax],xmm0
movss [rax+4],xmm1
ret
[DISABLE]
dealloc(*)
unregistersymbol(*)
Activate
17
18
83
0
396
"Reload Location (Ctrl+Alt+R)"
000000
Auto Assembler Script
[ENABLE]
createthread(saveloc)
alloc(saveloc, 1028)
registersymbol(saveloc)
saveloc:
mov rax,["yomawari2.exe"+00A07E4C]
add rax, 14
movss xmm0,[rax]
movss xmm1,[rax+4]
mov rax,["yomawari2.exe"+00A07E58]
add rax, 5C
mov rax,[rax]
add rax, 3C
movss [rax],xmm0
movss [rax+4],xmm1
ret
[DISABLE]
dealloc(*)
unregistersymbol(*)
Activate
17
18
82
0
397
"Coordinates (Ctrl+H to go home)"
000000
1
189
"X"
000000
Float
"yomawari2.exe"+00A07E58
3C
5C
Decrease Value
17
37
60
left
0
Increase Value
17
39
60
right
1
Set Value
17
72
51910.57422
Home
2
184
"Y"
0
000000
Float
"yomawari2.exe"+00A07E58
40
5c
Decrease Value
17
38
60
Up
0
Increase Value
17
40
60
down
1
Set Value
17
72
26309.3418
Home
2
393
"Save X"
0
Float
"yomawari2.exe"+00A07E4C
14
394
"Save Y"
0
Float
"yomawari2.exe"+00A07E4C
18
441
"Player Speed (Shift+A or D)"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(first)
label(second)
label(nosign)
label(nosign2)
registersymbol(fast)
registersymbol(fast2)
alloc(fast,4)
alloc(fast2,4)
fast:
dd (float)2.0
fast2:
dd (float)-2.0
newmem:
first:
cmp [esp+14],0
jns nosign
movss xmm1,[fast2]
movss [esp+14],xmm1
jmp second
nosign:
cmp [esp+14],0
jz second
movss xmm1,[fast]
movss [esp+14],xmm1
jmp second
second:
cmp [esp+18],0
jns nosign2
movss xmm2,[fast2]
movss [esp+18],xmm2
jmp originalcode
nosign2:
cmp [esp+18],0
jz originalcode
movss xmm2,[fast]
movss [esp+18],xmm2
originalcode:
movss xmm0,[esp+18]
exit:
jmp returnhere
"yomawari2.exe"+65C43:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(*)
unregistersymbol(*)
"yomawari2.exe"+65C43:
db F3 0F 10 44 24 18
//movss xmm0,[esp+18]
442
"Positive (Right and Down)"
0
Float
fast
Increase Value
16
68
2
0
Decrease Value
16
65
2
1
443
"Negative (Left and Up)"
0
Float
fast2
Increase Value
16
68
-2
0
Decrease Value
16
65
-2
1
342
"Stamina"
D9D900
4 Bytes
"yomawari2.exe"+00A07E10
13C
343
"Infinite Stamina"
D9D900
Auto Assembler Script
[ENABLE]
aobscanmodule(infstam,yomawari2.exe,01 81 3C 01 00 00 79) // should be unique
define(infstam,yomawari2.exe+E102)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
add [ecx+0000013C],0
jmp return
infstam:
jmp newmem
nop
return:
registersymbol(infstam)
[DISABLE]
infstam:
db 01 81 3C 01 00 00
unregistersymbol(infstam)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: yomawari2.exe+E102
yomawari2.exe+E0E1: 72 13 - jb yomawari2.exe+E0F6
yomawari2.exe+E0E3: F3 0F 5C C1 - subss xmm0,xmm1
yomawari2.exe+E0E7: B8 01 00 00 00 - mov eax,00000001
yomawari2.exe+E0EC: F3 0F 11 81 68 01 00 00 - movss [ecx+00000168],xmm0
yomawari2.exe+E0F4: EB 08 - jmp yomawari2.exe+E0FE
yomawari2.exe+E0F6: 33 C0 - xor eax,eax
yomawari2.exe+E0F8: EB 04 - jmp yomawari2.exe+E0FE
yomawari2.exe+E0FA: F3 0F 2C C2 - cvttss2si eax,xmm2
yomawari2.exe+E0FE: F7 D8 - neg eax
yomawari2.exe+E100: 03 C0 - add eax,eax
// ---------- INJECTING HERE ----------
yomawari2.exe+E102: 01 81 3C 01 00 00 - add [ecx+0000013C],eax
// ---------- DONE INJECTING ----------
yomawari2.exe+E108: 79 0A - jns yomawari2.exe+E114
yomawari2.exe+E10A: C7 81 3C 01 00 00 00 00 00 00 - mov [ecx+0000013C],00000000
yomawari2.exe+E114: 5D - pop ebp
yomawari2.exe+E115: C2 04 00 - ret 0004
yomawari2.exe+E118: CC - int 3
yomawari2.exe+E119: CC - int 3
yomawari2.exe+E11A: CC - int 3
yomawari2.exe+E11B: CC - int 3
yomawari2.exe+E11C: CC - int 3
yomawari2.exe+E11D: CC - int 3
}
8
"Items"
E6120D
1
Increase Value
17
73
5
Add 5
0
390
"Give 99 Items"
Auto Assembler Script
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
createthread(infitems)
alloc(infitems, 300)
registersymbol(infitems)
infitems:
mov rax, ["yomawari2.exe"+00A07E30]
add rax, 18
mov rax, [rax]
add rax, C
mov [rax], #99 // pebbles
add rax, 8
mov [rax], #99 // coins
add rax, 8
mov [rax], #99 // salt
add rax, 8
mov [rax], #99 // dolls
add rax, 8
mov [rax], #99 // animal feed
add rax, 8
mov [rax], #99 // paper airplane
add rax, 8
mov [rax], #99 // firefly
add rax, 8
mov [rax], #99 // trash bags
ret
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(*)
unregistersymbol(*)
5
"Pebbles"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
C
18
7
"Coins"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
14
18
327
"Salt"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
1C
18
323
"Dolls"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
24
18
324
"Animal Feed"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
2C
18
10
"Paper Airplane"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
34
18
325
"Firefly"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
3C
18
322
"Trash Bag"
E6120D
4 Bytes
"yomawari2.exe"+00A07E30
44
18
349
"Max Items on Screen - 100"
804000
Auto Assembler Script
[ENABLE]
aobscanmodule(maxitem,yomawari2.exe,83 78 04 0A 0F 8C 3B 01 00 00) // should be unique
define(maxitem,yomawari2.exe+D330)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
code:
cmp dword ptr [eax+04],100
jl yomawari2.exe+D475
jmp return
maxitem:
jmp newmem
nop 5
return:
registersymbol(maxitem)
[DISABLE]
maxitem:
db 83 78 04 0A 0F 8C 3B 01 00 00
unregistersymbol(maxitem)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: yomawari2.exe+D330
yomawari2.exe+D30E: 50 - push eax
yomawari2.exe+D30F: 8D 45 F4 - lea eax,[ebp-0C]
yomawari2.exe+D312: 64 A3 00 00 00 00 - mov fs:[00000000],eax
yomawari2.exe+D318: 89 4D EC - mov [ebp-14],ecx
yomawari2.exe+D31B: 8B 55 08 - mov edx,[ebp+08]
yomawari2.exe+D31E: 83 CB FF - or ebx,-01
yomawari2.exe+D321: 8D 04 D1 - lea eax,[ecx+edx*8]
yomawari2.exe+D324: 89 45 E4 - mov [ebp-1C],eax
yomawari2.exe+D327: 83 FA 02 - cmp edx,02
yomawari2.exe+D32A: 0F 85 45 01 00 00 - jne yomawari2.exe+D475
// ---------- INJECTING HERE ----------
yomawari2.exe+D330: 83 78 04 0A - cmp dword ptr [eax+04],0A
// ---------- DONE INJECTING ----------
yomawari2.exe+D334: 0F 8C 3B 01 00 00 - jl yomawari2.exe+D475
yomawari2.exe+D33A: 8B 71 10 - mov esi,[ecx+10]
yomawari2.exe+D33D: 8B 06 - mov eax,[esi]
yomawari2.exe+D33F: 89 45 E8 - mov [ebp-18],eax
yomawari2.exe+D342: 3B C6 - cmp eax,esi
yomawari2.exe+D344: 0F 84 2B 01 00 00 - je yomawari2.exe+D475
yomawari2.exe+D34A: 8D 9B 00 00 00 00 - lea ebx,[ebx+00000000]
yomawari2.exe+D350: 8B 48 10 - mov ecx,[eax+10]
yomawari2.exe+D353: 83 C0 14 - add eax,14
yomawari2.exe+D356: 89 4D C8 - mov [ebp-38],ecx
}
348
"Items on screen (caps at 10)"
804000
4 Bytes
"yomawari2.exe"+00A07E10
14
387
"Misc"
404080
1
336
"Choose Jizo Statue (Works on Map)"
0:1
1:2
2:3
3:4
4:5
5:6
6:7
7:8
8:9
9:10
10:11
11:12
12:13
13:14
14:15
15:16
16:17
17:18
18:19
19:20
20:21
21:22
0
404080
4 Bytes
"yomawari2.exe"+00A07E1C
14
0
377
"Charms (only works at charm desk)"
1:1
2:2
3:3
4:4
5:5
6:6
7:7
8:8
9:9
0
404080
4 Bytes
"yomawari2.exe"+00A07E1C
6C
0
369
"Hide Anywhere - (ctrl + T) (press c to come out)"
404080
4 Bytes
"yomawari2.exe"+00A07E10
E4
18
8
0
Set Value
17
84
3
trash
0
Change of mov [edx+04],eax
yomawari2.exe+472DF
85
C9
0F
4F
C1
89
42
04
2B
C6
5E
5D
C2
Change of mov [ebx+04],eax
yomawari2.exe+179C7
85
C0
74
04
48
89
43
04
8B
45
08
5F
5E
Change of mov [edi+04],eax
yomawari2.exe+18D9C
A3
01
00
00
40
89
47
04
8B
45
10
89
43
Change of lock cmpxchg [edi],edx
yomawari2.exe+FAF65
8D
51
01
8B
C1
F0
0F
B1
17
3B
C1
74
0F
8B
Change of lock xadd [ecx],eax
yomawari2.exe+F2EBB
8D
4F
04
8B
C3
F0
0F
C1
01
75
17
8B
07
8B
Change of mov eax,[ebx+04]
yomawari2.exe+179B9
15
3C
32
17
00
8B
43
04
83
C4
04
8B
4D
Change of cmp dword ptr [eax+04],0A
yomawari2.exe+D330
85
45
01
00
00
83
78
04
0A
0F
8C
3B
01
00
Change of mov eax,[edi+04]
yomawari2.exe+18D5B
18
56
57
8B
F9
8B
47
04
3D
48
92
24
09
Change of movss [esi+3C],xmm0
yomawari2.exe+4DD3
F3
0F
10
55
F8
F3
0F
11
46
3C
F3
0F
10
45
F0
Change of movss xmm0,[ebp-10]
yomawari2.exe+4DD8
F3
0F
11
46
3C
F3
0F
10
45
F0
F3
0F
11
56
40
Change of movss [esi+40],xmm2
yomawari2.exe+4DDD
F3
0F
10
45
F0
F3
0F
11
56
40
F3
0F
11
46
44
Change of movss [esi+44],xmm0
yomawari2.exe+4DE2
F3
0F
11
56
40
F3
0F
11
46
44
5E
8B
E5
5D
C3
Change of movss xmm0,[ebp-0C]
yomawari2.exe+4DC9
2C
C0
89
41
50
F3
0F
10
45
F4
F3
0F
10
55
F8
Change of movss xmm2,[ebp-08]
yomawari2.exe+4DCE
F3
0F
10
45
F4
F3
0F
10
55
F8
F3
0F
11
46
3C
Change of mov [ecx+50],eax
yomawari2.exe+4DC6
00
F3
0F
2C
C0
89
41
50
F3
0F
10
45
F4
Change of movss xmm0,[yomawari2.exe+147F28]
yomawari2.exe+4DBA
B9
6C
00
EB
08
F3
0F
10
05
28
7F
6E
00
F3
0F
2C
C0
89
Change of cmp eax,0A
yomawari2.exe+4DAA
83
F8
05
74
10
83
F8
0A
7D
0B
F3
0F
10
Change of mov [eax],ebx
yomawari2.exe+47150
0C
00
8B
45
08
89
18
0F
8E
85
00
00
Change of cmp dword ptr [ebp+0C],00
yomawari2.exe+47149
3B
D8
0F
4F
D8
83
7D
0C
00
8B
45
08
89
18
Change of push 0E
yomawari2.exe+471D2
0D
70
7E
FA
00
6A
0E
E8
17
19
06
00
Change of mov eax,[ebp+08]
yomawari2.exe+4714D
D8
83
7D
0C
00
8B
45
08
89
18
0F
8E
85
Change of mov ecx,[eax+14]
yomawari2.exe+4715D
A1
30
7E
FA
00
8B
48
14
8B
06
85
C0
78
Change of mov [eax+04],00000003
yomawari2.exe+68AAC
00
8B
44
24
18
C7
40
04
03
00
00
00
8B
54
24
14
85
Change of cmp dword ptr [eax+04],03
yomawari2.exe+689EC
69
8B
44
24
18
83
78
04
03
0F
84
BD
00
00
Change of cmp dword ptr [esp+eax*4+48],00
yomawari2.exe+689E1
00
8B
44
24
1C
83
7C
84
48
00
75
69
8B
44
24
Change of mov [eax+04],edi
yomawari2.exe+5AF46
10
85
C0
74
03
89
78
04
8B
7C
24
14
85
Change of mov ecx,[esi+04]
yomawari2.exe+3DB3
84
63
02
00
00
8B
4E
04
49
0F
84
32
01
Change of cmp dword ptr [edx+04],03
yomawari2.exe+14586
83
F8
02
74
06
83
7A
04
03
75
3C
C7
81
DC
Change of cmp dword ptr [edx+04],02
yomawari2.exe+160D2
84
F1
01
00
00
83
7A
04
02
B0
01
89
45
C8
Change of cmp dword ptr [esi+04],03
yomawari2.exe+AB349
84
87
03
00
00
83
7E
04
03
0F
84
7D
03
00
Change of cmp dword ptr [eax+04],03
yomawari2.exe+A0119
E8
85
C0
74
29
83
78
04
03
75
23
83
7F
04
Change of mov [edx+04],00000002
yomawari2.exe+ABDEB
14
FA
FF
8B
CA
C7
42
04
02
00
00
00
E8
39
82
F5
FF
Change of mov [eax+00121510],00000000
yomawari2.exe+ABDD7
47
34
0F
28
D0
C7
80
10
15
12
00
00
00
00
00
8B
4F
34
E8
77
Change of cmp dword ptr [eax+04],03
yomawari2.exe+9FCC6
F8
85
C0
74
26
83
78
04
03
75
20
8B
46
5C
Change of cmp dword ptr [esi+04],02
yomawari2.exe+14AEA
85
1C
03
00
00
83
7E
04
02
0F
85
12
03
00
Change of sub ecx,[eax+0000013C]
yomawari2.exe+16A7E
00
00
89
4D
EC
2B
88
3C
01
00
00
66
0F
6E
C9
0F
Change of cmp [ecx+0000013C],eax
yomawari2.exe+E015
81
40
01
00
00
39
81
3C
01
00
00
7E
06
89
81
3C
Change of add [ecx+0000013C],eax
yomawari2.exe+E102
C2
F7
D8
03
C0
01
81
3C
01
00
00
79
0A
C7
81
3C
Change of movd xmm1,[eax+0000013C]
yomawari2.exe+6D4D6
A1
10
7E
17
01
66
0F
6E
88
3C
01
00
00
66
0F
6E
80
40
Change of mov [ecx+0000013C],eax
yomawari2.exe+E01D
01
00
00
7E
06
89
81
3C
01
00
00
5D
C2
04
00
CC
Change of add [ecx+0000013C],eax
yomawari2.exe+E009
C9
F3
0F
2C
C1
01
81
3C
01
00
00
8B
81
40
01
00
Change of mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+75551
04
D0
89
41
08
A1
10
7E
17
01
66
0F
6E
80
8C
Change of mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+78071
04
D0
89
41
08
A1
10
7E
17
01
83
B8
4C
01
00
Change of mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+6D4D1
04
D0
89
41
08
A1
10
7E
17
01
66
0F
6E
88
3C
Change of mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+AEAAE
84
F9
00
00
00
A1
10
7E
17
01
8B
0D
18
7E
17
Change of mov eax,[yomawari2.exe+A07E10]
yomawari2.exe+ACE7A
85
CA
FE
FF
FF
A1
10
7E
17
01
8B
78
20
8B
37
Change of mov ecx,[yomawari2.exe+A07E10]
yomawari2.exe+A00DE
5B
8B
E5
5D
C3
8B
0D
10
7E
17
01
8D
45
E0
50
E8
Change of mov ecx,[yomawari2.exe+A07E10]
yomawari2.exe+AB2FD
E8
93
50
FF
FF
8B
0D
10
7E
17
01
8D
44
24
44
50
Change of mov [ecx+0000013C],00000000
yomawari2.exe+E10A
01
00
00
79
0A
C7
81
3C
01
00
00
00
00
00
00
5D
C2
04
00
CC
Change of movd xmm0,[eax+00000140]
yomawari2.exe+6D4DE
88
3C
01
00
00
66
0F
6E
80
40
01
00
00
0F
5B
C0
8B
41
Change of mov ecx,[eax+00000140]
yomawari2.exe+16A75
17
01
0F
57
D2
8B
88
40
01
00
00
89
4D
EC
2B
88
Change of mov eax,[ecx+00000140]
yomawari2.exe+E00F
81
3C
01
00
00
8B
81
40
01
00
00
39
81
3C
01
00
Change of mov ecx,[yomawari2.exe+A07E10]
yomawari2.exe+98DAC
54
89
4C
24
10
8B
0D
10
7E
17
01
50
E8
68
53
F7
Change of mov dl,[esi+eax]
yomawari2.exe+A65C4
00
3B
CA
73
63
8A
14
06
0F
B6
C2
3B
C3
Change of mov eax,[edi+14]
yomawari2.exe+35C56
E8
9A
C5
06
00
8B
47
14
89
47
18
8B
44
Change of mov [edi+14],eax
yomawari2.exe+35C60
18
8B
44
24
24
89
47
14
C7
47
2C
0C
00
Change of push [edi+14]
yomawari2.exe+3547E
E8
82
FA
FF
FF
FF
77
14
8D
44
24
34
8B
Change of jmp 0AA50000
yomawari2.exe+35C16
E8
DA
C5
06
00
E9
E5
A3
2A
0A
90
8B
47
14
89
Change of mov ecx,[yomawari2.exe+A07E58]
yomawari2.exe+35C01
3C
85
D2
78
2F
8B
0D
58
7E
17
01
83
EC
08
68
FF
Change of mov eax,[yomawari2.exe+A07E1C]
yomawari2.exe+906DE
08
F2
0F
10
01
A1
1C
7E
17
01
66
0F
5A
C0
F3
Change of mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AACAB
5A
F7
FF
EB
11
8B
0D
1C
7E
17
01
8B
47
04
89
41
Change of mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AC5DC
E9
05
01
00
00
8B
0D
1C
7E
17
01
E8
09
3C
F7
FF
Change of mov [eax],bl
DINPUT8.dll+10958
08
38
18
74
61
88
18
8B
F3
68
20
00
Change of je DINPUT8.GetdfDIJoystick+5BF9
DINPUT8.dll+10956
18
EB
08
38
18
74
61
88
18
8B
F3
68
Change of movdqa [edi+20],xmm0
msvcrt.dll+8AD83
66
0F
7F
47
10
66
0F
7F
47
20
66
0F
7F
47
30
Change of cmp dword ptr [ecx+1C],00
yomawari2.exe+AB448
0D
1C
7E
17
01
83
79
1C
00
7C
0C
C7
47
20
Change of mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AB5D8
E9
26
11
00
00
8B
0D
1C
7E
17
01
8A
41
28
84
C0
Change of mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AC194
E8
FC
84
F9
FF
8B
0D
1C
7E
17
01
E8
F1
47
F7
FF
Change of mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AFC48
E8
58
4C
04
00
8B
0D
1C
7E
17
01
8B
47
04
89
41
Change of mov eax,[yomawari2.exe+A07E1C]
yomawari2.exe+AFC59
E8
87
0D
F7
FF
A1
1C
7E
17
01
80
78
15
00
74
Change of mov eax,00000001
yomawari2.exe+B42C3
01
00
00
5F
5E
B8
01
00
00
00
5B
8B
E5
5D
C3
Change of movd xmm1,ecx
yomawari2.exe+16A84
88
3C
01
00
00
66
0F
6E
C9
0F
5B
C9
0F
2F
Change of mov [ebp-14],ecx
yomawari2.exe+16A7B
88
40
01
00
00
89
4D
EC
2B
88
3C
01
00
Change of cmp [edi+14],edx
yomawari2.exe+35C30
5B
8B
E5
5D
C3
39
57
14
0F
84
5A
01
00
Change of mov eax,[ebx+14]
yomawari2.exe+34DB5
34
C6
40
44
01
8B
43
14
3B
02
75
0F
83
Change of add edi,[eax+ecx*4+04]
yomawari2.exe+4768D
0C
50
8B
45
F8
03
7C
88
04
8B
45
FC
42
83
Change of mov ebx,[eax]
yomawari2.exe+470E7
03
C1
8D
04
83
8B
18
89
5D
F8
03
5D
Change of mov eax,[edx+04]
yomawari2.exe+472CC
04
50
8D
14
86
8B
42
04
8B
F0
85
C0
7E
Change of mov eax,[edi+eax*4+04]
yomawari2.exe+885A2
40
4C
8D
04
50
8B
44
87
04
EB
02
33
C0
85
Change of mov edi,[eax+ecx*4+04]
yomawari2.exe+88488
64
01
8B
40
18
8B
7C
88
04
EB
02
33
FF
8B
Change of mov eax,[yomawari2.exe+A07E30]
yomawari2.exe+95AFE
04
C8
89
46
08
A1
30
7E
64
01
8B
40
14
80
78
Change of mov [edi+000000D4],00000000
yomawari2.exe+22EB
00
FF
FF
FF
FF
C7
87
D4
00
00
00
00
00
00
00
C7
87
1C
01
00
Change of mov [eax+000000D4],edi
yomawari2.exe+6E7BE
14
85
C0
74
4E
89
B8
D4
00
00
00
83
FF
02
7C
43
Change of cmp edi,02
yomawari2.exe+6E7C4
B8
D4
00
00
00
83
FF
02
7C
43
A1
54
7E
Change of call dword ptr [eax+04]
yomawari2.exe+6E7B3
10
75
05
8B
01
FF
50
04
8B
44
24
14
85
Change of mov eax,[eax+000000D4]
yomawari2.exe+6E667
10
85
C0
74
0A
8B
80
D4
00
00
00
89
44
24
0C
8B
Change of cmp dword ptr [eax+000000D4],00
yomawari2.exe+4B9BE
84
90
00
00
00
83
B8
D4
00
00
00
00
0F
85
83
00
00
Change of cmp dword ptr [esi+000000D4],00
yomawari2.exe+AB3C9
8A
88
00
00
00
83
BE
D4
00
00
00
00
7E
26
8B
47
3C
Change of mov edi,[eax+ecx*4+04]
14B80000
8B
7C
88
04
E9
87
84
65
EB
Change of mov ecx,esi
yomawari2.exe+B42B8
C4
04
C1
E0
03
8B
CE
2B
D0
E8
1F
01
Change of mov edi,[eax+edi+00000348]
yomawari2.exe+8114E
14
8B
7C
24
28
8B
BC
38
48
03
00
00
E9
14
FC
FF
FF
Change of mov [edi+00000348],eax
yomawari2.exe+41C04
86
48
03
00
00
89
87
48
03
00
00
0F
B6
86
4C
03
Change of mov eax,[ecx+eax+00000348]
yomawari2.exe+40CC4
03
00
00
5F
5E
8B
84
01
48
03
00
00
5D
C2
04
00
5F
Change of mov [edx+ecx+00000348],eax
yomawari2.exe+40C42
D6
5C
03
00
00
89
84
0A
48
03
00
00
5E
5D
C2
08
00
Change of cmp eax,[edx+00000348]
yomawari2.exe+3E72B
84
B0
04
00
00
3B
82
48
03
00
00
8D
45
E8
50
0F
Change of mov [eax],00000000
yomawari2.exe+F8E26
34
85
C0
74
26
C7
00
00
00
00
00
C7
40
04
00
00
Change of mov edx,[eax]
yomawari2.exe+F8E44
04
00
00
00
00
8B
10
8B
0E
89
08
89
Change of mov [eax],ecx
yomawari2.exe+F8E48
00
8B
10
8B
0E
89
08
89
16
83
C6
08
Change of jmp MSVCR120.memmove+2BA
MSVCR120.dll+F667
C3
3B
F8
73
A5
E9
F4
FD
FF
FF
F3
A5
FF
24
95
Change of mov word ptr [esi+08],0000
yomawari2.exe+3B490
00
70
42
8B
F8
66
C7
46
08
00
00
C7
46
0C
00
00
Change of mov [esi],edx
yomawari2.exe+F8E4A
10
8B
0E
89
08
89
16
83
C6
08
83
C0
Change of mov al,[ecx+08]
yomawari2.exe+14057
7C
85
C9
74
11
8A
41
08
84
C0
74
0A
F3
Change of cmp byte ptr [ebx+08],00
yomawari2.exe+3C25E
00
00
00
8B
D9
80
7B
08
00
0F
84
DB
02
00
Change of cmp byte ptr [edi+08],00
yomawari2.exe+3C58E
00
00
00
8B
F9
80
7F
08
00
0F
84
7C
04
00
Change of mov ecx,[eax]
yomawari2.exe+B6D3E
1C
8B
7C
24
0C
8B
08
83
C0
04
89
42
Change of movsd [ecx+edi*8],xmm0
yomawari2.exe+C0B6B
F2
0F
10
45
E8
F2
0F
11
04
F9
EB
1A
8B
CE
E8
Change of cmp dword ptr [edx+6C],-01
yomawari2.exe+3084B
FE
FF
FF
5F
5B
83
7A
6C
FF
8B
72
68
8D
0C
Change of mov ecx,[esi+6C]
yomawari2.exe+30421
A1
10
7E
B5
00
8B
4E
6C
89
4E
68
5F
89
Change of add edx,[edi+20]
yomawari2.exe+1F3ED
8D
14
80
8B
C1
03
57
20
C1
E0
04
2B
C1
Change of mov eax,[esi+20]
yomawari2.exe+1E813
00
66
0F
6E
D0
8B
46
20
C1
E0
07
0F
5B
Change of mov eax,[esi+20]
yomawari2.exe+1ECD8
00
53
56
8B
F1
8B
46
20
8B
5E
24
89
45
Change of cmp eax,[esi+20]
yomawari2.exe+1F143
5D
F8
8B
45
E8
3B
46
20
0F
85
DB
01
00
Change of cmp ebx,[esi+20]
yomawari2.exe+1F32A
EB
10
8B
5D
E8
3B
5E
20
75
08
8B
45
F8
Change of add eax,[esi+20]
yomawari2.exe+1F83F
80
89
54
24
18
03
46
20
89
44
24
30
32
Change of mov [esi+20],eax
yomawari2.exe+1F2B7
7E
24
0F
4C
C3
89
46
20
8B
5D
E4
47
83
Change of mov [esi],yomawari2.exe+1410F0
yomawari2.exe+3FC76
8B
EC
56
8B
F1
C7
06
F0
10
29
00
E8
3F
E6
FF
FF
Change of mov [esi],yomawari2.exe+1410E0
yomawari2.exe+3E2C3
CC
CC
56
8B
F1
C7
06
E0
10
29
00
8B
46
24
85
C0
Change of mov fs:[00000000],ecx
yomawari2.exe+2BB9E
00
00
8B
4D
F4
64
89
0D
00
00
00
00
59
5F
5E
5B
8B
Change of mov ecx,[ebp-0C]
yomawari2.exe+2BB9B
E8
45
22
00
00
8B
4D
F4
64
89
0D
00
00
Code :inc [eax+04]
nvwgf2um.dll+FBFE5
F8
3B
C1
74
19
FF
40
04
FF
75
F0
8B
30
Code :call yomawari2.exe+206A0
yomawari2.exe+AACB7
47
04
89
41
38
E8
E4
59
F7
FF
8B
47
1C
83
F8
Code :call yomawari2.exe+34430
yomawari2.exe+20578
FF
76
24
8B
C8
E8
B3
3E
01
00
EB
27
68
3C
05
Code :call yomawari2.exe+34590
yomawari2.exe+344DF
24
FF
FF
FF
FF
E8
AC
00
00
00
8B
C6
8B
4D
F4
Code :call yomawari2.exe+34A40
yomawari2.exe+34888
F7
D8
89
47
28
E8
B3
01
00
00
8B
CF
E8
CC
04
Code :call yomawari2.exe+34B40
yomawari2.exe+3460B
18
FF
FF
FF
FF
E8
30
05
00
00
80
3D
14
7E
73
Code :call yomawari2.exe+34D60
yomawari2.exe+3488F
01
00
00
8B
CF
E8
CC
04
00
00
81
C7
CC
00
00
Code :call yomawari2.exe+35380
yomawari2.exe+345F9
2C
00
00
00
00
E8
82
0D
00
00
8B
47
10
89
47
Code :call yomawari2.exe+36470
yomawari2.exe+34C9D
D0
50
89
75
D4
E8
CE
17
00
00
83
7D
E4
00
7D
Code :call yomawari2.exe+36550
yomawari2.exe+364C5
08
51
56
8B
CF
E8
86
00
00
00
5F
8B
C6
5E
5D
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :mov [edi+1C],eax
yomawari2.exe+AAC17
88
A5
00
00
00
89
47
1C
C7
47
20
FF
FF
Code :mov ecx,[yomawari2.exe+A07E1C]
yomawari2.exe+AAC46
85
24
C7
DD
00
8B
0D
1C
7E
73
01
8B
47
04
89
41
Change of jne yomawari2.exe+AAC34
yomawari2.exe+AAC2D
00
00
00
85
C9
75
05
E8
4C
9C
04
00
Change of call yomawari2.exe+F4880
yomawari2.exe+AAC2F
00
85
C9
75
05
E8
4C
9C
04
00
8B
47
1C
83
C0
Change of mov eax,[edi+1C]
yomawari2.exe+AAC34
E8
4C
9C
04
00
8B
47
1C
83
C0
F6
83
F8
Change of add eax,-0A
yomawari2.exe+AAC37
04
00
8B
47
1C
83
C0
F6
83
F8
04
77
7D
Change of cmp eax,04
yomawari2.exe+AAC3A
47
1C
83
C0
F6
83
F8
04
77
7D
FF
24
85
Change of jmp yomawari2.exe+AACBC
yomawari2.exe+AACA9
E8
E7
5A
F7
FF
EB
11
8B
0D
1C
7E
73
Code :ja yomawari2.exe+AC6E8
yomawari2.exe+AACC2
47
1C
83
F8
0E
0F
87
20
1A
00
00
FF
24
85
38
C7
Change of jmp dword ptr [eax*4+yomawari2.exe+AC738]
yomawari2.exe+AACC8
87
20
1A
00
00
FF
24
85
38
C7
DD
00
A1
30
7E
73
01
Code :call yomawari2.exe+5200
yomawari2.exe+6EAEF
85
C9
74
2F
57
E8
0C
67
F9
FF
8B
F8
85
FF
74
Code :call dword ptr [ebp+14]
yomawari2.exe+103584
89
75
08
8B
CE
FF
55
14
EB
EE
33
C0
40
Code :call yomawari2.exe+8590
yomawari2.exe+17806
08
EB
6D
8B
CF
E8
85
0D
FF
FF
8B
0B
8B
55
FC
Code :call yomawari2.exe+EA30
yomawari2.exe+1D13
0D
10
7E
D4
00
E8
18
CD
00
00
8B
B3
38
01
00
Code :call dword ptr [eax]
yomawari2.exe+20288
0C
8B
01
6A
01
FF
10
C7
06
00
00
00
Code :call dword ptr [eax+10]
yomawari2.exe+2027B
C9
74
17
8B
01
FF
50
10
8B
0E
85
C9
74
Code :call yomawari2.exe+3B470
yomawari2.exe+5261
FF
75
08
8B
C8
E8
0A
62
03
00
EB
02
33
C0
8B
Code :call yomawari2.exe+3B5A0
yomawari2.exe+1D24
F6
74
1B
8B
CE
E8
77
98
03
00
56
FF
15
3C
32
Code :call yomawari2.exe+3B650
yomawari2.exe+6F81F
EB
03
FF
70
10
E8
2C
BE
FC
FF
C7
44
24
28
FF
Code :call yomawari2.exe+3BAE0
yomawari2.exe+6EB18
9C
F9
FF
8B
CF
E8
C3
CF
FC
FF
C7
44
24
30
FF
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call edi
yomawari2.exe+B42AD
FF
83
C4
04
56
FF
D7
8B
56
08
83
C4
Code :call yomawari2.exe+92A90
yomawari2.exe+90481
8D
4C
24
34
50
E8
0A
26
00
00
8B
7C
24
34
8B
Code :call yomawari2.exe+92B00
yomawari2.exe+92AB7
07
C1
F8
04
50
E8
44
00
00
00
84
C0
74
29
8B
Code :call yomawari2.exe+A29F0
yomawari2.exe+1E92
58
7E
D4
00
50
E8
59
0B
0A
00
8B
83
98
01
00
Code :call ebx
nvwgf2um.dll+496EA3
51
52
FF
75
C0
FF
D3
EB
03
8B
5D
D8
Code :jne yomawari2.exe+359A0
yomawari2.exe+35989
0D
3C
54
54
00
75
15
84
C0
75
39
FF
Code :mov [ecx+10],00000001
yomawari2.exe+35C22
47
14
89
41
18
C7
41
10
01
00
00
00
5F
5E
5B
8B
E5
Code :je yomawari2.exe+53464
yomawari2.exe+53426
02
00
00
3C
01
74
3C
F3
0F
10
4D
08
Code :jna yomawari2.exe+53A5A
yomawari2.exe+539DD
58
CA
0F
2F
C8
76
7B
32
C0
5F
5E
8B
Code :jmp yomawari2.exe+53B3E
yomawari2.exe+53B15
15
40
84
2D
00
EB
27
83
7F
04
01
0F
Code :ret
MSVCR120.dll+4265A
51
C0
83
C4
08
C3
66
0F
D6
04
24
Code :jna yomawari2.exe+53C14
yomawari2.exe+53BA3
0F
11
4C
24
38
76
6F
F3
0F
10
44
24
Code :jmp yomawari2.exe+53C22
yomawari2.exe+53C12
F3
0F
11
46
14
EB
0E
C7
46
14
00
00
Code :jmp yomawari2.exe+65C4F
yomawari2.exe+65C41
0F
11
44
24
18
EB
0C
F3
0F
10
44
24
Code :ret 0010
yomawari2.exe+53397
5E
5B
8B
E5
5D
C2
10
00
8B
8F
80
00
00
Code :je yomawari2.exe+65CB6
yomawari2.exe+65CA9
80
7C
24
60
00
74
0B
0F
57
C9
0F
28
Code :je ntdll.RtlPrefixUnicodeString+187
ntdll.dll+4387D
00
8B
D8
85
DB
74
58
33
C0
40
66
01
Code :ret
ntdll.dll+43A4D
8B
C7
5F
5E
5B
C3
8B
0F
B8
FF
FF
Code :jne yomawari2.exe+53400
yomawari2.exe+53441
10
65
F4
3B
F3
75
BD
83
7D
10
03
8B
Change of cmp esi,ebx
yomawari2.exe+5343F
F3
0F
10
65
F4
3B
F3
75
BD
83
7D
10
Code :movss xmm1,[ebp+08]
yomawari2.exe+53428
00
3C
01
74
3C
F3
0F
10
4D
08
83
C6
30
F3
0F
Change of movaps xmm2,xmm6
yomawari2.exe+53B21
84
00
FC
FF
FF
0F
28
D6
F3
0F
59
D3
0F
Change of mulss xmm2,xmm3
yomawari2.exe+53B24
FF
FF
0F
28
D6
F3
0F
59
D3
0F
28
DD
F3
0F
Change of movaps xmm3,xmm5
yomawari2.exe+53B28
D6
F3
0F
59
D3
0F
28
DD
F3
0F
59
5D
0C
Change of mov esi,[ebp+18]
yomawari2.exe+53B3E
1D
40
84
2D
00
8B
75
18
F3
0F
58
DC
F3
Change of addss xmm3,xmm4
yomawari2.exe+53B41
2D
00
8B
75
18
F3
0F
58
DC
F3
0F
58
D7
F3
Change of addss xmm2,xmm7
yomawari2.exe+53B45
18
F3
0F
58
DC
F3
0F
58
D7
F3
0F
11
6E
08
Change of movss [esi+08],xmm5
yomawari2.exe+53B49
DC
F3
0F
58
D7
F3
0F
11
6E
08
F3
0F
5C
5C
24
Code :je yomawari2.exe+53721
yomawari2.exe+53B1B
27
83
7F
04
01
0F
84
00
FC
FF
FF
0F
28
D6
F3
0F
Change of comiss xmm0,[esp+38]
yomawari2.exe+53AE7
87
3A
FC
FF
FF
0F
2F
44
24
38
76
29
83
7F
04
Code :je yomawari2.exe+53443
yomawari2.exe+533F5
04
03
DE
3B
F3
74
4C
EB
07
8D
A4
24
Change of cmp dword ptr [ebp+10],03
yomawari2.exe+53443
F4
3B
F3
75
BD
83
7D
10
03
8B
45
14
C6
00
Change of mov [edi+000000AC],00000000
yomawari2.exe+5344F
C6
00
00
7D
0A
C7
87
AC
00
00
00
00
00
00
00
32
C0
5F
5E
5B
Change of mov eax,[ebx+00000084]
yomawari2.exe+5401C
88
7F
00
00
00
8B
83
84
00
00
00
0F
AF
C1
3B
D0
Change of test al,al
yomawari2.exe+65C25
E8
0B
D7
FE
FF
84
C0
74
1A
F3
0F
10
Code :call yomawari2.exe+53330
yomawari2.exe+65C20
F3
0F
11
04
24
E8
0B
D7
FE
FF
84
C0
74
1A
F3
Code :jae yomawari2.exe+45FA1
yomawari2.exe+45F98
0C
B7
83
F9
10
73
07
8B
84
8F
D0
00
Code :jmp yomawari2.exe+45FB5
yomawari2.exe+45FA9
83
FE
1A
7C
C7
EB
0A
C7
87
14
01
00
Code :ret
nvwgf2um.dll+CF965
5E
5B
8B
E5
5D
C3
CC
CC
CC
CC
CC
Change of movaps xmm3,xmm1
yomawari2.exe+65C5E
50
FF
74
24
28
0F
28
D9
8B
CB
83
EC
08
Change of addss xmm0,xmm2
yomawari2.exe+65D0A
0F
10
4C
24
20
F3
0F
58
C2
F3
0F
10
64
24
Code :je yomawari2.exe+54F1E
yomawari2.exe+54F17
4C
24
38
85
C9
74
05
E8
12
1B
08
00
Change of ret 0014
nvwgf2um.dll+912FE
5E
5B
8B
E5
5D
C2
14
00
85
FF
79
D4
8B
Code :movss xmm0,[esp+18]
yomawari2.exe+65C43
44
24
18
EB
0C
F3
0F
10
44
24
18
F3
0F
10
4C
24
Change of movss xmm1,[esp+14]
yomawari2.exe+65C49
0F
10
44
24
18
F3
0F
10
4C
24
14
F3
0F
10
54
24
Change of movss xmm1,[esp+2C]
yomawari2.exe+65C71
84
93
00
00
00
F3
0F
10
4C
24
2C
0F
28
E0
F3
0F
Change of movss xmm0,[esp+20]
yomawari2.exe+65C7A
24
2C
0F
28
E0
F3
0F
10
44
24
20
F3
0F
58
E2
F3
Change of addss xmm4,xmm2
yomawari2.exe+65C80
0F
10
44
24
20
F3
0F
58
E2
F3
0F
58
D9
F3
Change of movss xmm0,[esp+10]
yomawari2.exe+65CB6
E9
79
00
00
00
F3
0F
10
44
24
10
8D
44
24
60
F3
Change of je yomawari2.exe+65C43
yomawari2.exe+65C27
D7
FE
FF
84
C0
74
1A
F3
0F
10
4C
24
Change of cmp byte ptr [esp+70],00
yomawari2.exe+65C66
8B
CB
83
EC
08
80
7C
24
70
00
0F
84
93
00
00
Change of mov ecx,ebx
yomawari2.exe+65C61
24
28
0F
28
D9
8B
CB
83
EC
08
80
7C
Code :movss xmm0,[esp+78]
yomawari2.exe+65C2F
0F
10
4C
24
74
F3
0F
10
44
24
78
F3
0F
11
4C
24
Change of je yomawari2.exe+98F10
yomawari2.exe+98E2E
4C
24
4C
85
C9
0F
84
DC
00
00
00
8B
44
24
44
F3
Change of test ecx,ecx
yomawari2.exe+98E2C
04
8B
4C
24
4C
85
C9
0F
84
DC
00
00
Change of mov ecx,[esp+4C]
yomawari2.exe+98E28
8B
01
FF
50
04
8B
4C
24
4C
85
C9
0F
84
DC
Change of je yomawari2.exe+98F87
yomawari2.exe+98DE9
83
7C
24
44
00
0F
84
98
01
00
00
8B
0D
54
7E
DE
Change of mov byte ptr [esp+70],01
yomawari2.exe+98E0B
E8
F5
E5
F6
FF
C6
44
24
70
01
8B
4C
24
60
85
Code :movsd xmm0,[ecx]
yomawari2.exe+659A9
0F
11
44
24
44
F2
0F
10
01
8B
46
10
66
0F
Code :push ebp
yomawari2.exe+65910
CC
CC
CC
CC
CC
55
8B
EC
83
E4
F8