315694
"Enable | v1.0"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
createThread(function()
local i = 0
while(AddressList.getMemoryRecordByDescription("getSelectedChar").Active ~= true)
do
if(i>15) then break end
sleep(500)
AddressList.getMemoryRecordByDescription("getBattle").Active = true
AddressList.getMemoryRecordByDescription("getTimescale").Active = true
AddressList.getMemoryRecordByDescription("getSpeed").Active = true
AddressList.getMemoryRecordByDescription("Teleport").Active = true
AddressList.getMemoryRecordByDescription("getGame").Active = true
AddressList.getMemoryRecordByDescription("getHoveredItem").Active = true
AddressList.getMemoryRecordByDescription("getEXP").Active = true
AddressList.getMemoryRecordByDescription("getJobEXP").Active = true
AddressList.getMemoryRecordByDescription("getGameSpeed").Active = true
AddressList.getMemoryRecordByDescription("getSelectedChar").Active = true
i = i+1
end
end)
{$asm}
aobscanmodule(getPlayer,$process,488B40xx4885C074xxF680xxxxxxxx02)
label(getPlayer_o)
registersymbol(getPlayer_o)
define(midjumpmem, $process+500)
fullaccess(midjumpmem, $1000)
registersymbol(midjumpmem)
alloc(baseHook, 0x1000)
registersymbol(baseHook)
label(LocalPlayer)
label(return)
label(PlayerController)
label(PlayerCharacter)
registersymbol(LocalPlayer)
registersymbol(PlayerController)
registersymbol(PlayerCharacter)
baseHook:
push rbx
mov [LocalPlayer],rax
mov rbx,[rax+30]
test rbx,rbx
jz short @f
mov [PlayerController],rbx
mov rbx,[rbx+2A0]
test rbx,rbx
jz short @f
mov [PlayerCharacter],rbx
@@:
pop rbx
getPlayer_o:
readmem( getPlayer, 7 )
jmp return
align 10 CC
LocalPlayer:
dq 0
align 10 CC
PlayerController:
dq 0
align 10 CC
PlayerCharacter:
dq 0
align 10 CC
midjumpmem:
jmp baseHook
align 10 CC
getPlayer:
jmp midjumpmem
nop 2
return:
registersymbol(getPlayer)
[DISABLE]
{$lua}
if syntaxcheck then return end
AddressList.getMemoryRecordByDescription("getBattle").Active = false
AddressList.getMemoryRecordByDescription("getTimescale").Active = false
AddressList.getMemoryRecordByDescription("getSpeed").Active = false
AddressList.getMemoryRecordByDescription("Teleport").Active = false
AddressList.getMemoryRecordByDescription("getGame").Active = false
AddressList.getMemoryRecordByDescription("getHoveredItem").Active = false
AddressList.getMemoryRecordByDescription("getEXP").Active = false
AddressList.getMemoryRecordByDescription("getJobEXP").Active = false
AddressList.getMemoryRecordByDescription("getGameSpeed").Active = false
AddressList.getMemoryRecordByDescription("getSelectedChar").Active = false
{$asm}
getPlayer:
readmem( getPlayer_o, 7)
unregistersymbol(LocalPlayer)
unregistersymbol(PlayerController)
unregistersymbol(PlayerCharacter)
unregistersymbol(baseHook)
unregistersymbol(getPlayer_o)
unregistersymbol( midjumpmem )
unregistersymbol( getPlayer )
dealloc(baseHook)
Toggle Activation
112
0
315695
"LocalPlayer"
8 Bytes
[LocalPlayer]+0
315696
"PlayerController"
8 Bytes
[PlayerController]+0
315697
"PlayerCharacter"
8 Bytes
PlayerCharacter
0
315698
"bCanBeDamaged"
Byte
[PlayerCharacter]+5A
1337317171
"bActorEnableCollision[128]"
Byte
+5C
315699
"Timescale"
Float
+98
315700
"RootComponent"
8 Bytes
+130
0
315701
"X_Coord"
Float
+1D0
315702
"Y_Coord"
Float
+1D4
315703
"Z_Coord"
Float
+1D8
315815
"PlayerState"
8 Bytes
+240
0
315818
"CharacterMovement"
8 Bytes
+288
0
315819
"MaxStepHeight"
Float
+154
1337317174
"JumpZVelocity"
Float
+158
315820
"MovementMode"
Byte
+168
1337317172
"MaxWalkSpeed"
Float
+18C
1337317173
"MaxFlySpeed"
Float
+198
1337317179
"bIsInBattle"
Byte
+910
1337317180
"BattleMaxMoveSpeed"
Float
+1734
315857
"ViewportClient"
8 Bytes
+70
0
315854
"World"
8 Bytes
+78
0
315858
"AuthorityGameMode"
8 Bytes
+118
0
1337317182
"DOLLBattleManager"
8 Bytes
+448
0
1337317183
"bDebugFlag_DropCertainty[1]"
Byte
+26E
1337317184
"bDebugFlag_RareDropCertainty[1]"
Byte
+26F
1337317185
"EncountParameter"
8 Bytes
+2D0
0
1337317186
"PlayerBaseValue"
Float
+28
1337317187
"PlayerKiyousaRate"
Float
+2C
315859
"GameInstance"
8 Bytes
+80
0
1337317256
"DOLLGamePlayer"
8 Bytes
+1C8
0
1337317257
"Edit: Time Played"
Double
+450
1337317260
"Edit: Demo Level Cap"
4 Bytes
+518
1337317258
"Edit: Demo Job Level Cap"
4 Bytes
+51C
1337317259
"Edit: Demo Gold Cap"
4 Bytes
+520
1337317225
"getBattle"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(hp_AOB,$process,2Bxx89xxxxxxxxxx498Bxxxx8Bxx412B)
registersymbol(hp_AOB)
alloc(hpHook,0x1000)
registersymbol(hpHook)
label(code_hp)
label(return_hp)
label(exit_hp)
label(hpflag)
label(ohkflag)
registersymbol(code_hp)
registersymbol(hpflag)
registersymbol(ohkflag)
hpHook:
push rcx
mov ecx,[rbp+28] // ID
cmp ecx,0
je @@2
@@2:
mov ecx,[rbp+158] // DropExp
cmp ecx,0
jne @f
mov ecx,[rbp+15C] // DropJobEXP
cmp ecx,0
jne @f
mov ecx,[rbp+160] // DropGold
cmp ecx,0
jne @f
cmp [hpflag],1
jne exit_hp
xor eax,eax
mov edi,[rbp+138]
pop rcx
jmp code_hp+2
exit_hp:
pop rcx
code_hp:
readmem(hp_AOB,8)
{
sub eax,edi
mov [rbp+00000114],edi
}
jmp return_hp
align 10 CC
hpHook+200:
hpflag:
dd 0
ohkflag:
dd 0
midjumpmem+80:
jmp hpHook
hp_AOB:
jmp midjumpmem+80
nop 3
return_hp:
[DISABLE]
hp_AOB:
readmem(code_hp,8) // db 2B C7 89 BD 14 01 00 00
unregistersymbol(hp_AOB)
unregistersymbol(hpHook)
unregistersymbol(code_hp)
unregistersymbol(hpflag)
unregistersymbol(ohkflag)
dealloc(hpHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+14662BC
"DQ7R_DEMO-Win64-Shipping.exe"+1466278: 78 09 - js "DQ7R_DEMO-Win64-Shipping.exe"+1466283
"DQ7R_DEMO-Win64-Shipping.exe"+146627A: 3B F7 - cmp esi,edi
"DQ7R_DEMO-Win64-Shipping.exe"+146627C: 44 8B FF - mov r15d,edi
"DQ7R_DEMO-Win64-Shipping.exe"+146627F: 44 0F 4C FE - cmovl r15d,esi
"DQ7R_DEMO-Win64-Shipping.exe"+1466283: 45 3B F7 - cmp r14d,r15d
"DQ7R_DEMO-Win64-Shipping.exe"+1466286: 7C 1C - jl "DQ7R_DEMO-Win64-Shipping.exe"+14662A4
"DQ7R_DEMO-Win64-Shipping.exe"+1466288: 80 BD 08 01 00 00 01 - cmp byte ptr [rbp+00000108],01
"DQ7R_DEMO-Win64-Shipping.exe"+146628F: 75 13 - jne "DQ7R_DEMO-Win64-Shipping.exe"+14662A4
"DQ7R_DEMO-Win64-Shipping.exe"+1466291: 48 8B CD - mov rcx,rbp
"DQ7R_DEMO-Win64-Shipping.exe"+1466294: E8 F7 F5 F3 FF - call "DQ7R_DEMO-Win64-Shipping.exe"+13A5890
"DQ7R_DEMO-Win64-Shipping.exe"+1466299: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+146629B: 74 07 - je "DQ7R_DEMO-Win64-Shipping.exe"+14662A4
"DQ7R_DEMO-Win64-Shipping.exe"+146629D: B1 01 - mov cl,01
"DQ7R_DEMO-Win64-Shipping.exe"+146629F: E8 9C 3C 46 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18C9F40
"DQ7R_DEMO-Win64-Shipping.exe"+14662A4: 3B F7 - cmp esi,edi
"DQ7R_DEMO-Win64-Shipping.exe"+14662A6: 4C 8D 9C 24 C0 00 00 00 - lea r11,[rsp+000000C0]
"DQ7R_DEMO-Win64-Shipping.exe"+14662AE: 49 8B 5B 20 - mov rbx,[r11+20]
"DQ7R_DEMO-Win64-Shipping.exe"+14662B2: 41 8B C6 - mov eax,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+14662B5: 0F 4E FE - cmovle edi,esi
"DQ7R_DEMO-Win64-Shipping.exe"+14662B8: 49 8B 73 30 - mov rsi,[r11+30]
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+14662BC: 2B C7 - sub eax,edi
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+14662BE: 89 BD 14 01 00 00 - mov [rbp+00000114],edi
"DQ7R_DEMO-Win64-Shipping.exe"+14662C4: 49 8B 6B 28 - mov rbp,[r11+28]
"DQ7R_DEMO-Win64-Shipping.exe"+14662C8: 8B CF - mov ecx,edi
"DQ7R_DEMO-Win64-Shipping.exe"+14662CA: 41 2B CE - sub ecx,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+14662CD: 41 3B FE - cmp edi,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+14662D0: 0F 4D C1 - cmovge eax,ecx
"DQ7R_DEMO-Win64-Shipping.exe"+14662D3: 49 8B E3 - mov rsp,r11
"DQ7R_DEMO-Win64-Shipping.exe"+14662D6: 41 5F - pop r15
"DQ7R_DEMO-Win64-Shipping.exe"+14662D8: 41 5E - pop r14
"DQ7R_DEMO-Win64-Shipping.exe"+14662DA: 5F - pop rdi
"DQ7R_DEMO-Win64-Shipping.exe"+14662DB: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+14662DC: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+14662DD: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+14662DE: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+14662DF: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+14662E0: 48 8B 02 - mov rax,[rdx]
"DQ7R_DEMO-Win64-Shipping.exe"+14662E3: 48 89 41 28 - mov [rcx+28],rax
"DQ7R_DEMO-Win64-Shipping.exe"+14662E7: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+14662E8: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+14662E9: CC - int 3
}
1337317231
"Unlimited HP"
Auto Assembler Script
[ENABLE]
hpflag:
dd 1
[DISABLE]
hpflag:
dd 0
Toggle Activation
97
0
1337317245
"Unlimited MP"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(mp_AOB,$process,3Bxx0F4Cxx8Bxx4Cxxxxxxxxxxxxxx4189)
registersymbol(mp_AOB)
alloc(mpHook,0x1000)
registersymbol(mpHook)
label(code_mp)
label(return_mp)
label(exit_mp)
registersymbol(code_mp)
mpHook:
cmp [r15+28],0 // ID
je @f
cmp [r15+158],0 // DropExp
jg @f
cmp [r15+15C],0 // DropJobExp
jg @f
cmp [r15+160],0 // DropGold
jg @f
jmp code_mp+2
exit_mp:
code_mp:
readmem(mp_AOB,5)
{
cmp esi,ebp
cmovl ebp,esi
}
jmp return_mp
align 10 CC
mpHook+200:
midjumpmem+100:
jmp mpHook
mp_AOB:
jmp midjumpmem+100
return_mp:
[DISABLE]
mp_AOB:
readmem(code_mp,5) // db 3B F5 0F 4C EE
unregistersymbol(mp_AOB)
unregistersymbol(mpHook)
unregistersymbol(code_mp)
dealloc(mpHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+146684A
"DQ7R_DEMO-Win64-Shipping.exe"+1466813: 74 31 - je "DQ7R_DEMO-Win64-Shipping.exe"+1466846
"DQ7R_DEMO-Win64-Shipping.exe"+1466815: 85 F6 - test esi,esi
"DQ7R_DEMO-Win64-Shipping.exe"+1466817: 79 04 - jns "DQ7R_DEMO-Win64-Shipping.exe"+146681D
"DQ7R_DEMO-Win64-Shipping.exe"+1466819: 8B C7 - mov eax,edi
"DQ7R_DEMO-Win64-Shipping.exe"+146681B: EB 07 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+1466824
"DQ7R_DEMO-Win64-Shipping.exe"+146681D: 3B F5 - cmp esi,ebp
"DQ7R_DEMO-Win64-Shipping.exe"+146681F: 8B C5 - mov eax,ebp
"DQ7R_DEMO-Win64-Shipping.exe"+1466821: 0F 4C C6 - cmovl eax,esi
"DQ7R_DEMO-Win64-Shipping.exe"+1466824: 44 3B F0 - cmp r14d,eax
"DQ7R_DEMO-Win64-Shipping.exe"+1466827: 7E 1D - jle "DQ7R_DEMO-Win64-Shipping.exe"+1466846
"DQ7R_DEMO-Win64-Shipping.exe"+1466829: 41 80 BF 08 01 00 00 01 - cmp byte ptr [r15+00000108],01
"DQ7R_DEMO-Win64-Shipping.exe"+1466831: 75 13 - jne "DQ7R_DEMO-Win64-Shipping.exe"+1466846
"DQ7R_DEMO-Win64-Shipping.exe"+1466833: 49 8B CF - mov rcx,r15
"DQ7R_DEMO-Win64-Shipping.exe"+1466836: E8 55 F0 F3 FF - call "DQ7R_DEMO-Win64-Shipping.exe"+13A5890
"DQ7R_DEMO-Win64-Shipping.exe"+146683B: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+146683D: 74 07 - je "DQ7R_DEMO-Win64-Shipping.exe"+1466846
"DQ7R_DEMO-Win64-Shipping.exe"+146683F: B1 01 - mov cl,01
"DQ7R_DEMO-Win64-Shipping.exe"+1466841: E8 FA 36 46 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18C9F40
"DQ7R_DEMO-Win64-Shipping.exe"+1466846: 85 F6 - test esi,esi
"DQ7R_DEMO-Win64-Shipping.exe"+1466848: 78 07 - js "DQ7R_DEMO-Win64-Shipping.exe"+1466851
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+146684A: 3B F5 - cmp esi,ebp
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+146684C: 0F 4C EE - cmovl ebp,esi
"DQ7R_DEMO-Win64-Shipping.exe"+146684F: 8B FD - mov edi,ebp
"DQ7R_DEMO-Win64-Shipping.exe"+1466851: 4C 8D 9C 24 C0 00 00 00 - lea r11,[rsp+000000C0]
"DQ7R_DEMO-Win64-Shipping.exe"+1466859: 41 89 BF 18 01 00 00 - mov [r15+00000118],edi
"DQ7R_DEMO-Win64-Shipping.exe"+1466860: 49 8B 5B 20 - mov rbx,[r11+20]
"DQ7R_DEMO-Win64-Shipping.exe"+1466864: 8B CF - mov ecx,edi
"DQ7R_DEMO-Win64-Shipping.exe"+1466866: 49 8B 6B 28 - mov rbp,[r11+28]
"DQ7R_DEMO-Win64-Shipping.exe"+146686A: 41 2B CE - sub ecx,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+146686D: 49 8B 73 30 - mov rsi,[r11+30]
"DQ7R_DEMO-Win64-Shipping.exe"+1466871: 41 8B C6 - mov eax,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+1466874: 2B C7 - sub eax,edi
"DQ7R_DEMO-Win64-Shipping.exe"+1466876: 41 3B FE - cmp edi,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+1466879: 0F 4D C1 - cmovge eax,ecx
"DQ7R_DEMO-Win64-Shipping.exe"+146687C: 49 8B E3 - mov rsp,r11
"DQ7R_DEMO-Win64-Shipping.exe"+146687F: 41 5F - pop r15
"DQ7R_DEMO-Win64-Shipping.exe"+1466881: 41 5E - pop r14
"DQ7R_DEMO-Win64-Shipping.exe"+1466883: 5F - pop rdi
"DQ7R_DEMO-Win64-Shipping.exe"+1466884: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+1466885: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1466886: CC - int 3
}
Toggle Activation
98
0
1337317244
"One Hit Kill"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(damage_AOB,$process,8Bxx488Bxx448Bxx38xxxxxxxxxx74)
registersymbol(damage_AOB)
alloc(damageHook,0x1000)
registersymbol(damageHook)
label(code_damage)
label(return_damage)
label(exit_damage)
registersymbol(code_damage)
damageHook:
cmp [rcx+28],0 // ID
je @f
mov ebp,[rcx+158] // DropExp
cmp ebp,0
jg @f
mov ebp,[rcx+15C] // DropJobExp
cmp ebp,0
jg @f
mov ebp,[rcx+160] // DropGold
cmp ebp,0
jg @f
jmp exit_damage
@@: // is enemy
mov edx,#99999
exit_damage:
code_damage:
readmem(damage_AOB,5)
{
mov ebp,edx
mov rdi,rcx
}
jmp return_damage
align 10 CC
damageHook+200:
midjumpmem+E0:
jmp damageHook
damage_AOB:
jmp midjumpmem+E0
return_damage:
[DISABLE]
damage_AOB:
readmem(code_damage,5) // db 8B EA 48 8B F9
unregistersymbol(damage_AOB)
unregistersymbol(damageHook)
unregistersymbol(code_damage)
dealloc(damageHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+1467649
"DQ7R_DEMO-Win64-Shipping.exe"+146761D: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146761E: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146761F: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1467620: 89 91 50 01 00 00 - mov [rcx+00000150],edx
"DQ7R_DEMO-Win64-Shipping.exe"+1467626: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+1467627: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1467628: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1467629: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762A: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762B: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762C: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762D: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762E: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+146762F: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1467630: 48 89 5C 24 08 - mov [rsp+08],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+1467635: 48 89 6C 24 10 - mov [rsp+10],rbp
"DQ7R_DEMO-Win64-Shipping.exe"+146763A: 48 89 74 24 18 - mov [rsp+18],rsi
"DQ7R_DEMO-Win64-Shipping.exe"+146763F: 57 - push rdi
"DQ7R_DEMO-Win64-Shipping.exe"+1467640: 48 81 EC C0 00 00 00 - sub rsp,000000C0
"DQ7R_DEMO-Win64-Shipping.exe"+1467647: 33 DB - xor ebx,ebx
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+1467649: 8B EA - mov ebp,edx
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+146764B: 48 8B F9 - mov rdi,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+146764E: 44 8B C3 - mov r8d,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+1467651: 38 99 54 04 00 00 - cmp [rcx+00000454],bl
"DQ7R_DEMO-Win64-Shipping.exe"+1467657: 74 5E - je "DQ7R_DEMO-Win64-Shipping.exe"+14676B7
"DQ7R_DEMO-Win64-Shipping.exe"+1467659: 8B B1 B0 04 00 00 - mov esi,[rcx+000004B0]
"DQ7R_DEMO-Win64-Shipping.exe"+146765F: 85 F6 - test esi,esi
"DQ7R_DEMO-Win64-Shipping.exe"+1467661: 75 04 - jne "DQ7R_DEMO-Win64-Shipping.exe"+1467667
"DQ7R_DEMO-Win64-Shipping.exe"+1467663: 33 C0 - xor eax,eax
"DQ7R_DEMO-Win64-Shipping.exe"+1467665: EB 73 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+14676DA
"DQ7R_DEMO-Win64-Shipping.exe"+1467667: 4C 8D 4C 24 30 - lea r9,[rsp+30]
"DQ7R_DEMO-Win64-Shipping.exe"+146766C: 48 89 5C 24 30 - mov [rsp+30],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+1467671: 41 B0 01 - mov r8b,01
"DQ7R_DEMO-Win64-Shipping.exe"+1467674: 48 89 5C 24 40 - mov [rsp+40],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+1467679: 48 8D 54 24 70 - lea rdx,[rsp+70]
"DQ7R_DEMO-Win64-Shipping.exe"+146767E: C6 44 24 20 01 - mov byte ptr [rsp+20],01
"DQ7R_DEMO-Win64-Shipping.exe"+1467683: E8 08 55 FF FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145CB90
"DQ7R_DEMO-Win64-Shipping.exe"+1467688: 66 0F 6E C6 - movd xmm0,esi
"DQ7R_DEMO-Win64-Shipping.exe"+146768C: 0F 5B C0 - cvtdq2ps xmm0,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+146768F: 66 0F 6E 48 1C - movd xmm1,[rax+1C]
"DQ7R_DEMO-Win64-Shipping.exe"+1467694: 0F 5B C9 - cvtdq2ps xmm1,xmm1
}
Toggle Activation
99
0
1337317247
"Unlimited Item Usage"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(itemUse_AOB,$process,2Bxx3Bxx89xxxx410F)
registersymbol(itemUse_AOB)
alloc(re_itemUse,2)
registersymbol(re_itemUse)
re_itemUse:
readmem(itemUse_AOB,2)
itemUse_AOB:
nop 2
[DISABLE]
itemUse_AOB:
readmem(re_itemUse,2) // db 2B EA
unregistersymbol(itemUse_AOB)
unregistersymbol(re_itemUse)
dealloc(re_itemUse)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+13CF4BB
"DQ7R_DEMO-Win64-Shipping.exe"+13CF471: 48 8B 4F 30 - mov rcx,[rdi+30]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF475: 48 85 C9 - test rcx,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF478: 0F 84 52 01 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+13CF5D0
"DQ7R_DEMO-Win64-Shipping.exe"+13CF47E: 48 8B 56 10 - mov rdx,[rsi+10]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF482: 4C 8D 05 77 8A 9A 04 - lea r8,["DQ7R_DEMO-Win64-Shipping.exe"+5D77F00]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF489: 41 B1 01 - mov r9b,01
"DQ7R_DEMO-Win64-Shipping.exe"+13CF48C: E8 1F 24 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+13B18B0
"DQ7R_DEMO-Win64-Shipping.exe"+13CF491: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+13CF494: 0F 84 36 01 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+13CF5D0
"DQ7R_DEMO-Win64-Shipping.exe"+13CF49A: 85 DB - test ebx,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF49C: 0F 8E 2E 01 00 00 - jng "DQ7R_DEMO-Win64-Shipping.exe"+13CF5D0
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4A2: 8B 56 18 - mov edx,[rsi+18]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4A5: 45 33 C0 - xor r8d,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4A8: 48 89 6C 24 78 - mov [rsp+78],rbp
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4AD: 8B C2 - mov eax,edx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4AF: 2B C3 - sub eax,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4B1: 8B EB - mov ebp,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4B3: 3B D3 - cmp edx,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4B5: 41 8B C8 - mov ecx,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4B8: 0F 4D C8 - cmovge ecx,eax
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4BB: 2B EA - sub ebp,edx
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4BD: 3B D3 - cmp edx,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4BF: 89 4E 18 - mov [rsi+18],ecx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4C2: 41 0F 4D E8 - cmovge ebp,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4C6: 8B DD - mov ebx,ebp
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4C8: 85 C9 - test ecx,ecx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4CA: 0F 8F FB 00 00 00 - jg "DQ7R_DEMO-Win64-Shipping.exe"+13CF5CB
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4D0: 48 8B 4F 30 - mov rcx,[rdi+30]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4D4: 4C 89 7C 24 40 - mov [rsp+40],r15
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4D9: 48 85 C9 - test rcx,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4DC: 74 13 - je "DQ7R_DEMO-Win64-Shipping.exe"+13CF4F1
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4DE: 48 8B 56 10 - mov rdx,[rsi+10]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4E2: 4C 8D 05 17 8A 9A 04 - lea r8,["DQ7R_DEMO-Win64-Shipping.exe"+5D77F00]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4E9: 41 B1 01 - mov r9b,01
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4EC: E8 BF 23 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+13B18B0
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4F1: 8B 46 20 - mov eax,[rsi+20]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4F4: 41 8B D4 - mov edx,r12d
"DQ7R_DEMO-Win64-Shipping.exe"+13CF4F7: 44 0F B6 84 24 90 00 00 00 - movzx r8d,byte ptr [rsp+00000090]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF500: 48 8B CF - mov rcx,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+13CF503: 44 8B 7E 24 - mov r15d,[rsi+24]
"DQ7R_DEMO-Win64-Shipping.exe"+13CF507: 89 44 24 70 - mov [rsp+70],eax
}
Toggle Activation
100
0
1337317252
"Max Drop Rate"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(dropRate_AOB,$process,440Fxxxxxxxxxxxx440Fxxxxxxxxxxxx4488xxxxxx4488)
registersymbol(dropRate_AOB)
alloc(dropRateHook,0x1000)
registersymbol(dropRateHook)
label(code_dropRate)
label(return_dropRate)
label(exit_dropRate)
registersymbol(code_dropRate)
dropRateHook:
mov r12d,1
mov r13d,1
jmp dropRate_AOB+10
exit_dropRate:
code_dropRate:
readmem(dropRate_AOB,8)
{
movzx r12d,byte ptr [rax+0000026E]
}
jmp return_dropRate
align 10 CC
dropRateHook+200:
midjumpmem+120:
jmp dropRateHook
dropRate_AOB:
jmp midjumpmem+120
nop 3
return_dropRate:
[DISABLE]
dropRate_AOB:
readmem(code_dropRate,8) // db 44 0F B6 A0 6E 02 00 00
unregistersymbol(dropRate_AOB)
unregistersymbol(dropRateHook)
unregistersymbol(code_dropRate)
dealloc(dropRateHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+13962EB
"DQ7R_DEMO-Win64-Shipping.exe"+1396279: 75 0F - jne "DQ7R_DEMO-Win64-Shipping.exe"+139628A
"DQ7R_DEMO-Win64-Shipping.exe"+139627B: 33 D2 - xor edx,edx
"DQ7R_DEMO-Win64-Shipping.exe"+139627D: 48 8B C8 - mov rcx,rax
"DQ7R_DEMO-Win64-Shipping.exe"+1396280: E8 3B 22 01 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+13A84C0
"DQ7R_DEMO-Win64-Shipping.exe"+1396285: E9 7E 09 00 00 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+1396C08
"DQ7R_DEMO-Win64-Shipping.exe"+139628A: 48 89 9C 24 A8 02 00 00 - mov [rsp+000002A8],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+1396292: 48 89 B4 24 68 02 00 00 - mov [rsp+00000268],rsi
"DQ7R_DEMO-Win64-Shipping.exe"+139629A: 4C 89 A4 24 60 02 00 00 - mov [rsp+00000260],r12
"DQ7R_DEMO-Win64-Shipping.exe"+13962A2: 4C 89 AC 24 58 02 00 00 - mov [rsp+00000258],r13
"DQ7R_DEMO-Win64-Shipping.exe"+13962AA: 4C 89 BC 24 50 02 00 00 - mov [rsp+00000250],r15
"DQ7R_DEMO-Win64-Shipping.exe"+13962B2: 0F 29 B4 24 40 02 00 00 - movaps [rsp+00000240],xmm6
"DQ7R_DEMO-Win64-Shipping.exe"+13962BA: 0F 29 BC 24 30 02 00 00 - movaps [rsp+00000230],xmm7
"DQ7R_DEMO-Win64-Shipping.exe"+13962C2: 44 0F 29 84 24 20 02 00 00 - movaps [rsp+00000220],xmm8
"DQ7R_DEMO-Win64-Shipping.exe"+13962CB: E8 20 17 ED FF - call "DQ7R_DEMO-Win64-Shipping.exe"+12679F0
"DQ7R_DEMO-Win64-Shipping.exe"+13962D0: BE 01 00 00 00 - mov esi,00000001
"DQ7R_DEMO-Win64-Shipping.exe"+13962D5: 48 89 74 24 70 - mov [rsp+70],rsi
"DQ7R_DEMO-Win64-Shipping.exe"+13962DA: 48 89 74 24 78 - mov [rsp+78],rsi
"DQ7R_DEMO-Win64-Shipping.exe"+13962DF: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+13962E2: 74 3C - je "DQ7R_DEMO-Win64-Shipping.exe"+1396320
"DQ7R_DEMO-Win64-Shipping.exe"+13962E4: 80 B8 71 02 00 00 00 - cmp byte ptr [rax+00000271],00
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+13962EB: 44 0F B6 A0 6E 02 00 00 - movzx r12d,byte ptr [rax+0000026E]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+13962F3: 44 0F B6 A8 6F 02 00 00 - movzx r13d,byte ptr [rax+0000026F]
"DQ7R_DEMO-Win64-Shipping.exe"+13962FB: 44 88 64 24 40 - mov [rsp+40],r12b
"DQ7R_DEMO-Win64-Shipping.exe"+1396300: 44 88 6C 24 41 - mov [rsp+41],r13b
"DQ7R_DEMO-Win64-Shipping.exe"+1396305: 74 26 - je "DQ7R_DEMO-Win64-Shipping.exe"+139632D
"DQ7R_DEMO-Win64-Shipping.exe"+1396307: 44 88 6C 24 41 - mov [rsp+41],r13b
"DQ7R_DEMO-Win64-Shipping.exe"+139630C: 48 C7 44 24 70 0A 00 00 00 - mov qword ptr [rsp+70],0000000A
"DQ7R_DEMO-Win64-Shipping.exe"+1396315: 48 C7 44 24 78 C8 00 00 00 - mov qword ptr [rsp+78],000000C8
"DQ7R_DEMO-Win64-Shipping.exe"+139631E: EB 08 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+1396328
"DQ7R_DEMO-Win64-Shipping.exe"+1396320: 45 32 E4 - xor r12b,r12b
"DQ7R_DEMO-Win64-Shipping.exe"+1396323: 44 88 64 24 41 - mov [rsp+41],r12b
"DQ7R_DEMO-Win64-Shipping.exe"+1396328: 44 88 64 24 40 - mov [rsp+40],r12b
"DQ7R_DEMO-Win64-Shipping.exe"+139632D: 48 8B 1F - mov rbx,[rdi]
"DQ7R_DEMO-Win64-Shipping.exe"+1396330: 45 32 FF - xor r15b,r15b
"DQ7R_DEMO-Win64-Shipping.exe"+1396333: 48 63 47 08 - movsxd rax,dword ptr [rdi+08]
"DQ7R_DEMO-Win64-Shipping.exe"+1396337: 44 89 7C 24 68 - mov [rsp+68],r15d
"DQ7R_DEMO-Win64-Shipping.exe"+139633C: 48 8D 3C C3 - lea rdi,[rbx+rax*8]
"DQ7R_DEMO-Win64-Shipping.exe"+1396340: 48 3B DF - cmp rbx,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+1396343: 74 22 - je "DQ7R_DEMO-Win64-Shipping.exe"+1396367
"DQ7R_DEMO-Win64-Shipping.exe"+1396345: 48 8B 0B - mov rcx,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+1396348: B2 6F - mov dl,6F
}
Toggle Activation
101
0
1337317175
"Wall Climb"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(stepHeight_AOB,$process,F3xxxxxxxxxxxxxx0F57xx0F2Fxx0F86xxxxxxxx488BxxxxxxxxxxF3)
registersymbol(stepHeight_AOB)
alloc(stepHeightHook,0x1000)
registersymbol(stepHeightHook)
label(code_stepHeight)
label(return_stepHeight)
label(exit_stepHeight)
registersymbol(code_stepHeight)
stepHeightHook:
push r15
mov r15,PlayerCharacter
mov r15,[r15]
test r15,r15
je @f
cmp qword ptr [rbx+20],r15
jne @f
push (float)500
movss xmm7,[rsp]
add rsp,8
pop r15
jmp return_stepHeight
exit_stepHeight:
pop r15
code_stepHeight:
readmem(stepHeight_AOB,8)
{
addss xmm6,[rsi+00000154]
}
jmp return_stepHeight
align 10 CC
stepHeightHook+200:
midjumpmem+50:
jmp stepHeightHook
stepHeight_AOB:
jmp midjumpmem+50
nop 3
return_stepHeight:
[DISABLE]
stepHeight_AOB:
readmem(code_stepHeight,8) // db F3 0F 58 B6 54 01 00 00
unregistersymbol(stepHeight_AOB)
unregistersymbol(stepHeightHook)
unregistersymbol(code_stepHeight)
dealloc(stepHeightHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+341DE7C
"DQ7R_DEMO-Win64-Shipping.exe"+341DE27: 0F 28 C8 - movaps xmm1,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DE2A: 0F C6 C8 55 - shufps xmm1,xmm0,55
"DQ7R_DEMO-Win64-Shipping.exe"+341DE2E: F3 0F 5D C8 - minss xmm1,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DE32: F3 0F 59 89 74 04 00 00 - mulss xmm1,[rcx+00000474]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE3A: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+341DE3D: F3 0F 11 4C 24 28 - movss [rsp+28],xmm1
"DQ7R_DEMO-Win64-Shipping.exe"+341DE43: 48 89 7C 24 20 - mov [rsp+20],rdi
"DQ7R_DEMO-Win64-Shipping.exe"+341DE48: 41 FF 90 D8 08 00 00 - call qword ptr [r8+000008D8]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE4F: 8B 07 - mov eax,[rdi]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE51: A8 01 - test al,01
"DQ7R_DEMO-Win64-Shipping.exe"+341DE53: 0F 84 53 FF FF FF - je "DQ7R_DEMO-Win64-Shipping.exe"+341DDAC
"DQ7R_DEMO-Win64-Shipping.exe"+341DE59: A8 04 - test al,04
"DQ7R_DEMO-Win64-Shipping.exe"+341DE5B: 0F 85 4B FF FF FF - jne "DQ7R_DEMO-Win64-Shipping.exe"+341DDAC
"DQ7R_DEMO-Win64-Shipping.exe"+341DE61: 48 8B 06 - mov rax,[rsi]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE64: 48 8D 57 0C - lea rdx,[rdi+0C]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE68: 41 B0 01 - mov r8b,01
"DQ7R_DEMO-Win64-Shipping.exe"+341DE6B: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+341DE6E: FF 90 00 09 00 00 - call qword ptr [rax+00000900]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE74: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+341DE76: 0F 84 30 FF FF FF - je "DQ7R_DEMO-Win64-Shipping.exe"+341DDAC
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+341DE7C: F3 0F 58 B6 54 01 00 00 - addss xmm6,[rsi+00000154]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+341DE84: 48 8B 06 - mov rax,[rsi]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE87: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+341DE8A: F3 0F 5F 35 9E 6E 84 01 - maxss xmm6,["DQ7R_DEMO-Win64-Shipping.exe"+4C64D30]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE92: FF 90 70 05 00 00 - call qword ptr [rax+00000570]
"DQ7R_DEMO-Win64-Shipping.exe"+341DE98: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+341DE9A: 74 11 - je "DQ7R_DEMO-Win64-Shipping.exe"+341DEAD
"DQ7R_DEMO-Win64-Shipping.exe"+341DE9C: F3 0F 10 86 E0 01 00 00 - movss xmm0,[rsi+000001E0]
"DQ7R_DEMO-Win64-Shipping.exe"+341DEA4: F3 41 0F 5F C0 - maxss xmm0,xmm8
"DQ7R_DEMO-Win64-Shipping.exe"+341DEA9: F3 0F 58 F0 - addss xmm6,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DEAD: 66 0F 6F 05 DB B5 33 01 - movdqa xmm0,["DQ7R_DEMO-Win64-Shipping.exe"+4759490]
"DQ7R_DEMO-Win64-Shipping.exe"+341DEB5: 33 C0 - xor eax,eax
"DQ7R_DEMO-Win64-Shipping.exe"+341DEB7: 83 64 24 40 F8 - and dword ptr [rsp+40],-08
"DQ7R_DEMO-Win64-Shipping.exe"+341DEBC: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+341DEBF: F3 0F 7F 84 24 B0 00 00 00 - movdqu [rsp+000000B0],xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DEC8: 0F 57 C0 - xorps xmm0,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DECB: 48 89 9C 24 C8 00 00 00 - mov [rsp+000000C8],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+341DED3: 0F 11 44 24 4C - movups [rsp+4C],xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DED8: C7 84 24 AC 00 00 00 FF FF FF FF - mov [rsp+000000AC],FFFFFFFF
"DQ7R_DEMO-Win64-Shipping.exe"+341DEE3: 0F 11 44 24 5C - movups [rsp+5C],xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+341DEE8: 48 89 5C 24 44 - mov [rsp+44],rbx
}
Toggle Activation
102
0
315919
"Noclip"
Auto Assembler Script
[ENABLE]
{$LUA}
if syntaxcheck then return end
if updown then updown.destroy(); updown = nil end
local verticalSpeed = 13
local Pawn = getAddressSafe('[PlayerCharacter]')
if Pawn == nil then
print("PlayerCharacter address not found.")
return
end
local MovementComp = getAddressSafe('[PlayerCharacter]+0x288')
local RootComp = getAddressSafe('[PlayerCharacter]+0x130')
local collision_o = getAddressSafe('[PlayerCharacter]+0x5C')
local MoveMode_o = getAddressSafe('[[PlayerCharacter]+0x288]+0x168')
local xCoord = getAddressSafe('[[PlayerCharacter]+0x130]+0x1D0')
local zCoord = getAddressSafe('[[PlayerCharacter]+0x130]+0x1D8')
local flySpeed = getAddressSafe('[[PlayerCharacter]+0x288]+0x198')
function enableNoclip()
writeBytes(collision_o, 0x1)
writeBytes(MoveMode_o, 0x5)
writeFloat(flySpeed,1500)
end
function disableNoclip()
-- Restore original values
writeBytes(collision_o, 0x89)
writeBytes(MoveMode_o, 0x3) -- 0x3 is falling, some games freeze you in the air if you set it to 1 directly.
writeFloat(flySpeed,600)
end
function handleMovement()
writeBytes(collision_o, 0x1)
writeBytes(MoveMode_o, 0x5)
writeFloat(flySpeed,1500)
if isKeyPressed(VK_SPACE) then
local currentZ = readFloat(zCoord)
writeFloat(zCoord, currentZ + verticalSpeed)
writeFloat(flySpeed,1500)
elseif isKeyPressed(VK_CONTROL) then
local currentZ = readFloat(zCoord)
writeFloat(zCoord, currentZ - verticalSpeed)
writeFloat(flySpeed,1500)
end
end
enableNoclip()
updown = createTimer()
updown.Interval = 15 -- Lowest value is 15ms for this particular timer controller.
updown.OnTimer = handleMovement
{$ASM}
[DISABLE]
{$LUA}
if syntaxcheck then return end
disableNoclip()
updown.destroy()
updown = nil
Toggle Activation
103
0
1337317178
"AllowNoclip"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
{
Cannot move with noclip without this.
0xBD0 in CharacterMovement - "bIsIgnoreMovementDisabledCheckCollision"
}
[ENABLE]
aobscanmodule(allowNoClip_AOB,$process,0FB6xxxxxxxxxxFExxA8xx74)
registersymbol(allowNoClip_AOB)
alloc(re_allowNoClip,2)
registersymbol(re_allowNoClip)
re_allowNoClip:
readmem(allowNoClip_AOB+15,2)
allowNoClip_AOB+15:
xor al,al
[DISABLE]
allowNoClip_AOB+15:
readmem(re_allowNoClip,2) // db B0 01
unregistersymbol(allowNoClip_AOB)
unregistersymbol(re_allowNoClip)
dealloc(re_allowNoClip)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+1338898
"DQ7R_DEMO-Win64-Shipping.exe"+1338857: 74 37 - je "DQ7R_DEMO-Win64-Shipping.exe"+1338890
"DQ7R_DEMO-Win64-Shipping.exe"+1338859: 48 8B 01 - mov rax,[rcx]
"DQ7R_DEMO-Win64-Shipping.exe"+133885C: 33 D2 - xor edx,edx
"DQ7R_DEMO-Win64-Shipping.exe"+133885E: FF 90 F0 04 00 00 - call qword ptr [rax+000004F0]
"DQ7R_DEMO-Win64-Shipping.exe"+1338864: 83 F8 02 - cmp eax,02
"DQ7R_DEMO-Win64-Shipping.exe"+1338867: 74 27 - je "DQ7R_DEMO-Win64-Shipping.exe"+1338890
"DQ7R_DEMO-Win64-Shipping.exe"+1338869: 48 8B 8B B0 00 00 00 - mov rcx,[rbx+000000B0]
"DQ7R_DEMO-Win64-Shipping.exe"+1338870: BA 01 00 00 00 - mov edx,00000001
"DQ7R_DEMO-Win64-Shipping.exe"+1338875: 48 8B 01 - mov rax,[rcx]
"DQ7R_DEMO-Win64-Shipping.exe"+1338878: FF 90 F0 04 00 00 - call qword ptr [rax+000004F0]
"DQ7R_DEMO-Win64-Shipping.exe"+133887E: 83 F8 02 - cmp eax,02
"DQ7R_DEMO-Win64-Shipping.exe"+1338881: 74 0D - je "DQ7R_DEMO-Win64-Shipping.exe"+1338890
"DQ7R_DEMO-Win64-Shipping.exe"+1338883: 0F B6 83 68 01 00 00 - movzx eax,byte ptr [rbx+00000168]
"DQ7R_DEMO-Win64-Shipping.exe"+133888A: FE C8 - dec al
"DQ7R_DEMO-Win64-Shipping.exe"+133888C: A8 FD - test al,-03
"DQ7R_DEMO-Win64-Shipping.exe"+133888E: 74 08 - je "DQ7R_DEMO-Win64-Shipping.exe"+1338898
"DQ7R_DEMO-Win64-Shipping.exe"+1338890: 32 C0 - xor al,al
"DQ7R_DEMO-Win64-Shipping.exe"+1338892: 48 83 C4 20 - add rsp,20
"DQ7R_DEMO-Win64-Shipping.exe"+1338896: 5B - pop rbx
"DQ7R_DEMO-Win64-Shipping.exe"+1338897: C3 - ret
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+1338898: B0 01 - mov al,01
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+133889A: 48 83 C4 20 - add rsp,20
"DQ7R_DEMO-Win64-Shipping.exe"+133889E: 5B - pop rbx
"DQ7R_DEMO-Win64-Shipping.exe"+133889F: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+13388A0: 48 89 5C 24 08 - mov [rsp+08],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+13388A5: 57 - push rdi
"DQ7R_DEMO-Win64-Shipping.exe"+13388A6: 48 83 EC 50 - sub rsp,50
"DQ7R_DEMO-Win64-Shipping.exe"+13388AA: 80 B9 F0 0F 00 00 00 - cmp byte ptr [rcx+00000FF0],00
"DQ7R_DEMO-Win64-Shipping.exe"+13388B1: 48 8B DA - mov rbx,rdx
"DQ7R_DEMO-Win64-Shipping.exe"+13388B4: 48 8B F9 - mov rdi,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+13388B7: 0F 84 33 01 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+13389F0
"DQ7R_DEMO-Win64-Shipping.exe"+13388BD: 0F B6 42 5D - movzx eax,byte ptr [rdx+5D]
"DQ7R_DEMO-Win64-Shipping.exe"+13388C1: 0F 29 7C 24 30 - movaps [rsp+30],xmm7
"DQ7R_DEMO-Win64-Shipping.exe"+13388C6: A8 01 - test al,01
"DQ7R_DEMO-Win64-Shipping.exe"+13388C8: 0F 84 10 01 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+13389DE
"DQ7R_DEMO-Win64-Shipping.exe"+13388CE: A8 02 - test al,02
"DQ7R_DEMO-Win64-Shipping.exe"+13388D0: 0F 85 08 01 00 00 - jne "DQ7R_DEMO-Win64-Shipping.exe"+13389DE
"DQ7R_DEMO-Win64-Shipping.exe"+13388D6: 48 8B 89 B0 00 00 00 - mov rcx,[rcx+000000B0]
"DQ7R_DEMO-Win64-Shipping.exe"+13388DD: 48 8D 54 24 20 - lea rdx,[rsp+20]
"DQ7R_DEMO-Win64-Shipping.exe"+13388E2: E8 99 FA 13 02 - call "DQ7R_DEMO-Win64-Shipping.exe"+3478380
"DQ7R_DEMO-Win64-Shipping.exe"+13388E7: F3 0F 10 44 24 20 - movss xmm0,[rsp+20]
}
315860
"getTimescale"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(timescale_AOB,$process,F3xxxxxxxxxxxxxxEBxxF3xxxxxxxxxxxxxx488Bxxxx4CxxxxF3xxxxxx448B)
alloc(tScaleHook,0x1000)
registersymbol(tScaleHook)
define(midjumpmem, $process+530)
fullaccess(midjumpmem, $1000)
label(code_timescale)
label(playerspeed)
label(enemyspeed)
label(pSpeed)
label(eSpeed)
label(return)
label(exit)
label(tMul)
registersymbol(playerspeed)
registersymbol(enemyspeed)
registersymbol(pSpeed)
registersymbol(eSpeed)
registersymbol(code_timescale)
registersymbol(tMul)
tScaleHook:
readmem(timescale_AOB,8)
push rax
{$try}
mov rax,PlayerCharacter
mov rax,[rax]
test rax,rax
je exit
cmp rbx,rax
jne @@2
cmp [playerspeed],1
jne @f
mulss xmm1,[pSpeed]
jmp exit
@@:
mulss xmm1,[tMul]
jmp exit
@@2:
mov rax,[rbx+288] // CharacterMovement
cmp rax,10000
jle exit
cmp [enemyspeed],1
jne exit
mulss xmm1,[eSpeed]
{$except}
exit:
pop rax
jmp return
tScaleHook+200:
code_timescale:
readmem(timescale_AOB,8)
align 10 CC
playerspeed:
dd 0
enemyspeed:
dd 0
pSpeed:
dd (float)3
eSpeed:
dd (float)0.5
tMul:
dd (float)1
midjumpmem:
jmp tScaleHook
timescale_AOB:
jmp midjumpmem
nop 3
return:
registersymbol(timescale_AOB)
[DISABLE]
timescale_AOB:
readmem(code_timescale,8)
unregistersymbol(timescale_AOB)
unregistersymbol(playerspeed)
unregistersymbol(enemyspeed)
unregistersymbol(pSpeed)
unregistersymbol(eSpeed)
unregistersymbol(tScaleHook)
unregistersymbol(code_timescale)
unregistersymbol(tMul)
dealloc(tScaleHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+34002F7
"DQ7R_DEMO-Win64-Shipping.exe"+34002B4: 75 6A - jne "DQ7R_DEMO-Win64-Shipping.exe"+3400320
"DQ7R_DEMO-Win64-Shipping.exe"+34002B6: 48 8B 03 - mov rax,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+34002B9: 48 8B CB - mov rcx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+34002BC: FF 90 B0 03 00 00 - call qword ptr [rax+000003B0]
"DQ7R_DEMO-Win64-Shipping.exe"+34002C2: F6 83 88 00 00 00 01 - test byte ptr [rbx+00000088],01
"DQ7R_DEMO-Win64-Shipping.exe"+34002C9: 74 55 - je "DQ7R_DEMO-Win64-Shipping.exe"+3400320
"DQ7R_DEMO-Win64-Shipping.exe"+34002CB: 48 8B 9B A0 00 00 00 - mov rbx,[rbx+000000A0]
"DQ7R_DEMO-Win64-Shipping.exe"+34002D2: 83 FE 01 - cmp esi,01
"DQ7R_DEMO-Win64-Shipping.exe"+34002D5: 75 1B - jne "DQ7R_DEMO-Win64-Shipping.exe"+34002F2
"DQ7R_DEMO-Win64-Shipping.exe"+34002D7: 40 F6 C5 08 - test bpl,08
"DQ7R_DEMO-Win64-Shipping.exe"+34002DB: 75 15 - jne "DQ7R_DEMO-Win64-Shipping.exe"+34002F2
"DQ7R_DEMO-Win64-Shipping.exe"+34002DD: 48 85 DB - test rbx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+34002E0: 74 3E - je "DQ7R_DEMO-Win64-Shipping.exe"+3400320
"DQ7R_DEMO-Win64-Shipping.exe"+34002E2: 48 8B 03 - mov rax,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+34002E5: 48 8B CB - mov rcx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+34002E8: FF 90 68 04 00 00 - call qword ptr [rax+00000468]
"DQ7R_DEMO-Win64-Shipping.exe"+34002EE: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+34002F0: 74 2E - je "DQ7R_DEMO-Win64-Shipping.exe"+3400320
"DQ7R_DEMO-Win64-Shipping.exe"+34002F2: 48 85 DB - test rbx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+34002F5: 74 0A - je "DQ7R_DEMO-Win64-Shipping.exe"+3400301
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+34002F7: F3 0F 10 8B 98 00 00 00 - movss xmm1,[rbx+00000098]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+34002FF: EB 08 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+3400309
"DQ7R_DEMO-Win64-Shipping.exe"+3400301: F3 0F 10 0D 2F 37 16 01 - movss xmm1,["DQ7R_DEMO-Win64-Shipping.exe"+4563A38]
"DQ7R_DEMO-Win64-Shipping.exe"+3400309: 48 8B 4F 28 - mov rcx,[rdi+28]
"DQ7R_DEMO-Win64-Shipping.exe"+340030D: 4C 8B CF - mov r9,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+3400310: F3 0F 59 CE - mulss xmm1,xmm6
"DQ7R_DEMO-Win64-Shipping.exe"+3400314: 44 8B C6 - mov r8d,esi
"DQ7R_DEMO-Win64-Shipping.exe"+3400317: 48 8B 01 - mov rax,[rcx]
"DQ7R_DEMO-Win64-Shipping.exe"+340031A: FF 90 50 03 00 00 - call qword ptr [rax+00000350]
"DQ7R_DEMO-Win64-Shipping.exe"+3400320: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"DQ7R_DEMO-Win64-Shipping.exe"+3400325: 48 8B 6C 24 48 - mov rbp,[rsp+48]
"DQ7R_DEMO-Win64-Shipping.exe"+340032A: 48 8B 74 24 50 - mov rsi,[rsp+50]
"DQ7R_DEMO-Win64-Shipping.exe"+340032F: 0F 28 74 24 20 - movaps xmm6,[rsp+20]
"DQ7R_DEMO-Win64-Shipping.exe"+3400334: 48 83 C4 30 - add rsp,30
"DQ7R_DEMO-Win64-Shipping.exe"+3400338: 5F - pop rdi
"DQ7R_DEMO-Win64-Shipping.exe"+3400339: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+340033A: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+340033B: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+340033C: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+340033D: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+340033E: CC - int 3
}
315861
"Super Player Speed"
Auto Assembler Script
[ENABLE]
playerspeed:
dd 1
[DISABLE]
playerspeed:
dd 0
Toggle Activation
104
0
315862
"Slow AI"
Auto Assembler Script
[ENABLE]
enemyspeed:
dd 1
[DISABLE]
enemyspeed:
dd 0
Toggle Activation
105
0
315863
"Player Speed Multiplier"
Float
tMul
1337317170
"AI Speed Multiplier"
Float
eSpeed
26170
"getSpeed"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(speed_AOB,$process,0F28xx488Bxx440FxxxxF3xxxxxxxx40B7)
registersymbol(speed_AOB)
alloc(speedHook,0x1000)
registersymbol(speedHook)
label(code_speed)
label(return_speed)
label(exit_speed)
label(spdval)
label(spdMul)
label(speedflag)
registersymbol(code_speed)
registersymbol(spdMul)
registersymbol(speedflag)
speedHook:
push r15
mov r15,PlayerCharacter
mov r15,[r15]
test r15,r15
je exit_speed
cmp qword ptr [r15+288],rdi
jne exit_speed
cmp [speedflag],1
jne @f
mulss xmm0,[spdval]
jmp exit_speed
@@:
mulss xmm0,[spdMul]
exit_speed:
pop r15
code_speed:
readmem(speed_AOB,6)
jmp return_speed
align 10 CC
speedHook+200:
spdval:
dd (float)4
spdMul:
dd (float)1
speedflag:
dd 0
midjumpmem+10:
jmp speedHook
speed_AOB:
jmp midjumpmem+10
nop
return_speed:
[DISABLE]
speed_AOB:
readmem(code_speed,6)
unregistersymbol(speed_AOB)
unregistersymbol(speedHook)
unregistersymbol(code_speed)
unregistersymbol(spdMul)
unregistersymbol(speedflag)
dealloc(speedHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+3416D91
"DQ7R_DEMO-Win64-Shipping.exe"+3416D0B: 48 89 BC 24 30 01 00 00 - mov [rsp+00000130],rdi
"DQ7R_DEMO-Win64-Shipping.exe"+3416D13: 4C 89 B4 24 38 01 00 00 - mov [rsp+00000138],r14
"DQ7R_DEMO-Win64-Shipping.exe"+3416D1B: 0F 29 B4 24 F0 00 00 00 - movaps [rsp+000000F0],xmm6
"DQ7R_DEMO-Win64-Shipping.exe"+3416D23: 0F 29 BC 24 E0 00 00 00 - movaps [rsp+000000E0],xmm7
"DQ7R_DEMO-Win64-Shipping.exe"+3416D2B: 44 0F 29 84 24 D0 00 00 00 - movaps [rsp+000000D0],xmm8
"DQ7R_DEMO-Win64-Shipping.exe"+3416D34: 44 0F 29 8C 24 C0 00 00 00 - movaps [rsp+000000C0],xmm9
"DQ7R_DEMO-Win64-Shipping.exe"+3416D3D: 44 0F 29 9C 24 A0 00 00 00 - movaps [rsp+000000A0],xmm11
"DQ7R_DEMO-Win64-Shipping.exe"+3416D46: 44 0F 29 A4 24 90 00 00 00 - movaps [rsp+00000090],xmm12
"DQ7R_DEMO-Win64-Shipping.exe"+3416D4F: 44 0F 29 AC 24 80 00 00 00 - movaps [rsp+00000080],xmm13
"DQ7R_DEMO-Win64-Shipping.exe"+3416D58: 45 0F 57 ED - xorps xmm13,xmm13
"DQ7R_DEMO-Win64-Shipping.exe"+3416D5C: F3 45 0F 5F FD - maxss xmm15,xmm13
"DQ7R_DEMO-Win64-Shipping.exe"+3416D61: 44 0F 29 74 24 70 - movaps [rsp+70],xmm14
"DQ7R_DEMO-Win64-Shipping.exe"+3416D67: FF 90 F0 06 00 00 - call qword ptr [rax+000006F0]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D6D: 48 8B 03 - mov rax,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D70: 48 8B CB - mov rcx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+3416D73: 44 0F 28 C8 - movaps xmm9,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+3416D77: FF 90 10 04 00 00 - call qword ptr [rax+00000410]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D7D: F3 0F 10 0D 33 1D A0 02 - movss xmm1,["DQ7R_DEMO-Win64-Shipping.exe"+5E18AB8]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D85: 48 8D 4D 5F - lea rcx,[rbp+5F]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D89: F3 0F 10 15 2B 1D A0 02 - movss xmm2,["DQ7R_DEMO-Win64-Shipping.exe"+5E18ABC]
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+3416D91: 0F 28 D8 - movaps xmm3,xmm0
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+3416D94: 48 8B 03 - mov rax,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+3416D97: 44 0F 28 D8 - movaps xmm11,xmm0
"DQ7R_DEMO-Win64-Shipping.exe"+3416D9B: F3 0F 10 75 7F - movss xmm6,[rbp+7F]
"DQ7R_DEMO-Win64-Shipping.exe"+3416DA0: 40 B7 01 - mov dil,01
"DQ7R_DEMO-Win64-Shipping.exe"+3416DA3: 48 89 4C 24 38 - mov [rsp+38],rcx
"DQ7R_DEMO-Win64-Shipping.exe"+3416DA8: 48 8D 4D 8F - lea rcx,[rbp-71]
"DQ7R_DEMO-Win64-Shipping.exe"+3416DAC: 48 89 4C 24 30 - mov [rsp+30],rcx
"DQ7R_DEMO-Win64-Shipping.exe"+3416DB1: 48 8B CB - mov rcx,rbx
"DQ7R_DEMO-Win64-Shipping.exe"+3416DB4: F3 0F 11 4D 8F - movss [rbp-71],xmm1
"DQ7R_DEMO-Win64-Shipping.exe"+3416DB9: F3 0F 10 0D FF 1C A0 02 - movss xmm1,["DQ7R_DEMO-Win64-Shipping.exe"+5E18AC0]
"DQ7R_DEMO-Win64-Shipping.exe"+3416DC1: F3 0F 11 4D 97 - movss [rbp-69],xmm1
"DQ7R_DEMO-Win64-Shipping.exe"+3416DC6: 41 0F 28 CA - movaps xmm1,xmm10
"DQ7R_DEMO-Win64-Shipping.exe"+3416DCA: F3 0F 11 55 93 - movss [rbp-6D],xmm2
"DQ7R_DEMO-Win64-Shipping.exe"+3416DCF: 41 0F 28 D1 - movaps xmm2,xmm9
"DQ7R_DEMO-Win64-Shipping.exe"+3416DD3: F3 0F 11 74 24 28 - movss [rsp+28],xmm6
"DQ7R_DEMO-Win64-Shipping.exe"+3416DD9: F3 44 0F 11 7C 24 20 - movss [rsp+20],xmm15
"DQ7R_DEMO-Win64-Shipping.exe"+3416DE0: C7 45 5F 00 00 00 00 - mov [rbp+5F],00000000
"DQ7R_DEMO-Win64-Shipping.exe"+3416DE7: FF 90 A0 06 00 00 - call qword ptr [rax+000006A0]
"DQ7R_DEMO-Win64-Shipping.exe"+3416DED: F3 44 0F 10 35 5E D9 17 01 - movss xmm14,["DQ7R_DEMO-Win64-Shipping.exe"+4594754]
"DQ7R_DEMO-Win64-Shipping.exe"+3416DF6: 33 C9 - xor ecx,ecx
}
26171
"Super Movement Speed"
Auto Assembler Script
[ENABLE]
speedflag:
dd 1
[DISABLE]
speedflag:
dd 0
Toggle Activation
96
0
26172
"Movement Speed Multiplier"
Float
spdval
314871
"Teleport"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
alloc(SaveLocation_X,8)
alloc(SaveLocation_Y,8)
alloc(SaveLocation_Z,8)
alloc(World_,8)
SaveLocation_X:
dq 0
SaveLocation_Y:
dq 0
SaveLocation_Z:
dq 0
World_:
dq 0
registersymbol(SaveLocation_X)
registersymbol(SaveLocation_Y)
registersymbol(SaveLocation_Z)
registersymbol(World_)
[DISABLE]
unregistersymbol(SaveLocation_X)
unregistersymbol(SaveLocation_Y)
unregistersymbol(SaveLocation_Z)
unregistersymbol(World_)
dealloc(SaveLocation_X)
dealloc(SaveLocation_Y)
dealloc(SaveLocation_Z)
dealloc(World_)
315684
"Save Coordinates"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
{$ASM}
[ENABLE]
{$LUA}
function toHex(str)
str = string.format("%X", str)
return str
end
if syntaxcheck then return end
local PlayerCharacterBase = toHex(getAddressSafe('[PlayerCharacter]+130'))
local SaveLocationXBase = toHex(getAddressSafe('SaveLocation_X'))
local SaveLocationYBase = toHex(getAddressSafe('SaveLocation_Y'))
local SaveLocationZBase = toHex(getAddressSafe('SaveLocation_Z'))
if PlayerCharacterBase ~= nil or SaveLocationBase ~= nil then
--PlayerCharacter
adPlayerCharacter_X = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D0'))
adPlayerCharacter_Y = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D4'))
adPlayerCharacter_Z = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D8'))
writeDouble(SaveLocationXBase, readDouble(adPlayerCharacter_X))
writeDouble(SaveLocationYBase, readDouble(adPlayerCharacter_Y))
writeDouble(SaveLocationZBase, readDouble(adPlayerCharacter_Z))
end
local ce = getMainForm()
memrec.OnActivate = function(memrec, anteState, curState)
if not anteState and curState then
local t = createTimer(ce)
t.Interval = 1000
t.OnTimer = function(t)
t.destroy()
t = nil
memrec.Active = false
end
end
return true
end
{$ASM}
[DISABLE]
Toggle Activation
109
0
315685
"Load Coordinates"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
-- Function to convert a string to hexadecimal
function toHex(str)
str = string.format("%X", str)
return str
end
-- Get the hexadecimal address for 'SaveLocation_X'
local SaveLocationXBase = toHex(getAddressSafe('SaveLocation_X'))
-- Check if SaveLocationXBase is not equal to "0" before performing an action
if SaveLocationXBase ~= "0" then
-- Get the hexadecimal address for '[PlayerCharacter]+130'
local PlayerCharacterBase = toHex(getAddressSafe('[PlayerCharacter]+130'))
-- Get the hexadecimal addresses for 'SaveLocation_Y' and 'SaveLocation_Z'
local SaveLocationYBase = toHex(getAddressSafe('SaveLocation_Y'))
local SaveLocationZBase = toHex(getAddressSafe('SaveLocation_Z'))
-- Check if all necessary addresses are not nil
if PlayerCharacterBase ~= nil and SaveLocationYBase ~= nil and SaveLocationZBase ~= nil then
-- Get the hexadecimal addresses for player character X, Y, and Z
local adPlayerCharacter_X = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D0'))
local adPlayerCharacter_Y = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D4'))
local adPlayerCharacter_Z = toHex(getAddressSafe('[' .. PlayerCharacterBase .. ']+1D8'))
-- Read the float value from SaveLocationXBase
local xValue = readDouble(SaveLocationXBase)
-- Check if xValue is not equal to 0 before writing to player character coordinates
if xValue ~= 0 then
-- Write the xValue to player character X coordinate and the corresponding Y and Z coordinates
writeDouble(adPlayerCharacter_X, xValue)
writeDouble(adPlayerCharacter_Y, readDouble(SaveLocationYBase))
writeDouble(adPlayerCharacter_Z, readDouble(SaveLocationZBase))
end
end
end
-- Get the main form
local ce = getMainForm()
-- Define a function to be executed when the memory record is activated
memrec.OnActivate = function(memrec, anteState, curState)
if not anteState and curState then
-- Create a timer with a 1-second interval
local t = createTimer(ce)
if t ~= nil then
t.Interval = 1000
t.OnTimer = function(t)
-- Destroy the timer and set it to nil
t.destroy()
t = nil
memrec.Active = false
end
end
-- Remove the showMessage part to avoid displaying a message
end
return true
end
[DISABLE]
Toggle Activation
107
0
315686
"Saved Coordinates"
Byte
315687
"X"
Double
SaveLocation_X
315688
"Y"
Double
SaveLocation_Y
315689
"Z"
Double
SaveLocation_Z
1337317235
"getGame"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(game_AOB,$process,498Bxxxxxxxxxx418Bxxxx4963xxxxxxxxxx488Dxxxx483Bxx0F84)
registersymbol(game_AOB)
alloc(gameHook,0x1000)
registersymbol(gameHook)
label(code_game)
label(return_game)
label(exit_game)
label(gamePtr)
registersymbol(code_game)
registersymbol(gamePtr)
gameHook:
mov [gamePtr],r13
exit_game:
code_game:
readmem(game_AOB,7)
{
mov rbx,[r13+000000E8]
}
jmp return_game
align 10 CC
gameHook+200:
gamePtr:
dq 0
midjumpmem+90:
jmp gameHook
game_AOB:
jmp midjumpmem+90
nop 2
return_game:
[DISABLE]
game_AOB:
readmem(code_game,7) // db 49 8B 9D E8 00 00 00
unregistersymbol(game_AOB)
unregistersymbol(gameHook)
unregistersymbol(code_game)
unregistersymbol(gamePtr)
dealloc(gameHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+1384287
"DQ7R_DEMO-Win64-Shipping.exe"+1384234: 41 3B 46 0C - cmp eax,[r14+0C]
"DQ7R_DEMO-Win64-Shipping.exe"+1384238: 7E 0B - jle "DQ7R_DEMO-Win64-Shipping.exe"+1384245
"DQ7R_DEMO-Win64-Shipping.exe"+138423A: 41 8B D0 - mov edx,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+138423D: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+1384240: E8 5B 2D 72 FF - call "DQ7R_DEMO-Win64-Shipping.exe"+AA6FA0
"DQ7R_DEMO-Win64-Shipping.exe"+1384245: 49 8B 06 - mov rax,[r14]
"DQ7R_DEMO-Win64-Shipping.exe"+1384248: 48 89 3C 03 - mov [rbx+rax],rdi
"DQ7R_DEMO-Win64-Shipping.exe"+138424C: 49 83 C7 04 - add r15,04
"DQ7R_DEMO-Win64-Shipping.exe"+1384250: 4D 3B FC - cmp r15,r12
"DQ7R_DEMO-Win64-Shipping.exe"+1384253: 0F 85 57 FF FF FF - jne "DQ7R_DEMO-Win64-Shipping.exe"+13841B0
"DQ7R_DEMO-Win64-Shipping.exe"+1384259: E9 09 01 00 00 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+1384367
"DQ7R_DEMO-Win64-Shipping.exe"+138425E: 45 39 BD 00 01 00 00 - cmp [r13+00000100],r15d
"DQ7R_DEMO-Win64-Shipping.exe"+1384265: 0F 8E FC 00 00 00 - jng "DQ7R_DEMO-Win64-Shipping.exe"+1384367
"DQ7R_DEMO-Win64-Shipping.exe"+138426B: 4D 8B E7 - mov r12,r15
"DQ7R_DEMO-Win64-Shipping.exe"+138426E: 66 90 - nop 2
"DQ7R_DEMO-Win64-Shipping.exe"+1384270: 45 84 C0 - test r8b,r8b
"DQ7R_DEMO-Win64-Shipping.exe"+1384273: 75 0B - jne "DQ7R_DEMO-Win64-Shipping.exe"+1384280
"DQ7R_DEMO-Win64-Shipping.exe"+1384275: 41 83 7E 08 04 - cmp dword ptr [r14+08],04
"DQ7R_DEMO-Win64-Shipping.exe"+138427A: 0F 8D E7 00 00 00 - jnl "DQ7R_DEMO-Win64-Shipping.exe"+1384367
"DQ7R_DEMO-Win64-Shipping.exe"+1384280: 49 8B 85 F8 00 00 00 - mov rax,[r13+000000F8]
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+1384287: 49 8B 9D E8 00 00 00 - mov rbx,[r13+000000E8]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+138428E: 41 8B 2C 04 - mov ebp,[r12+rax]
"DQ7R_DEMO-Win64-Shipping.exe"+1384292: 49 63 85 F0 00 00 00 - movsxd rax,dword ptr [r13+000000F0]
"DQ7R_DEMO-Win64-Shipping.exe"+1384299: 48 8D 34 C3 - lea rsi,[rbx+rax*8]
"DQ7R_DEMO-Win64-Shipping.exe"+138429D: 48 3B DE - cmp rbx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+13842A0: 0F 84 AD 00 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+1384353
"DQ7R_DEMO-Win64-Shipping.exe"+13842A6: 66 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
"DQ7R_DEMO-Win64-Shipping.exe"+13842B0: 48 8B 3B - mov rdi,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+13842B3: 48 8B CF - mov rcx,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+13842B6: E8 55 6E 0D 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+145B110
"DQ7R_DEMO-Win64-Shipping.exe"+13842BB: 3B C5 - cmp eax,ebp
"DQ7R_DEMO-Win64-Shipping.exe"+13842BD: 74 0E - je "DQ7R_DEMO-Win64-Shipping.exe"+13842CD
"DQ7R_DEMO-Win64-Shipping.exe"+13842BF: 48 83 C3 08 - add rbx,08
"DQ7R_DEMO-Win64-Shipping.exe"+13842C3: 48 3B DE - cmp rbx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+13842C6: 75 E8 - jne "DQ7R_DEMO-Win64-Shipping.exe"+13842B0
"DQ7R_DEMO-Win64-Shipping.exe"+13842C8: E9 80 00 00 00 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+138434D
"DQ7R_DEMO-Win64-Shipping.exe"+13842CD: 48 85 FF - test rdi,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+13842D0: 74 7B - je "DQ7R_DEMO-Win64-Shipping.exe"+138434D
"DQ7R_DEMO-Win64-Shipping.exe"+13842D2: 8B 5C 24 78 - mov ebx,[rsp+78]
"DQ7R_DEMO-Win64-Shipping.exe"+13842D6: 85 DB - test ebx,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+13842D8: 74 14 - je "DQ7R_DEMO-Win64-Shipping.exe"+13842EE
}
1337317236
"BP_DOLLGamePlayer_C"
8 Bytes
gamePtr
0
1337317237
"Edit: Gold"
4 Bytes
+C8
1337317238
"?"
4 Bytes
+CC
1337317239
"MaxGold"
4 Bytes
+D0
1337317253
"Set Max Gold"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local maxGold = readInteger('[gamePtr]+0xD0')
local gold = getAddressSafe('[gamePtr]+0xC8')
writeInteger(gold,maxGold)
createTimer(100, function() memrec.Active = false end)
[DISABLE]
Toggle Activation
17
97
0
1337317249
"getHoveredItem"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
{
0x1C - Max
}
[ENABLE]
aobscanmodule(hoveredItem_AOB,$process,8Bxxxx4Cxxxxxxxx83xxxx0F8Exxxxxxxx488BxxxxxxxxxxE8)
registersymbol(hoveredItem_AOB)
alloc(hoveredItemHook,0x1000)
registersymbol(hoveredItemHook)
label(code_hoveredItem)
label(return_hoveredItem)
label(exit_hoveredItem)
label(iHoverPtr)
registersymbol(code_hoveredItem)
registersymbol(iHoverPtr)
hoveredItemHook:
mov [iHoverPtr],rdi
exit_hoveredItem:
code_hoveredItem:
readmem(hoveredItem_AOB,8)
{
mov edx,[rdi+18]
mov r14,[rsp+50]
}
jmp return_hoveredItem
align 10 CC
hoveredItemHook+200:
iHoverPtr:
dq 0
midjumpmem+110:
jmp hoveredItemHook
hoveredItem_AOB:
jmp midjumpmem+110
nop 3
return_hoveredItem:
[DISABLE]
hoveredItem_AOB:
readmem(code_hoveredItem,8) // db 8B 57 18 4C 8B 74 24 50
unregistersymbol(hoveredItem_AOB)
unregistersymbol(hoveredItemHook)
unregistersymbol(code_hoveredItem)
unregistersymbol(iHoverPtr)
dealloc(hoveredItemHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+17A1E4A
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E09: 3B 51 38 - cmp edx,[rcx+38]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E0C: 7F 2B - jg "DQ7R_DEMO-Win64-Shipping.exe"+17A1E39
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E0E: 48 8B 49 30 - mov rcx,[rcx+30]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E12: 48 39 04 D1 - cmp [rcx+rdx*8],rax
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E16: 75 21 - jne "DQ7R_DEMO-Win64-Shipping.exe"+17A1E39
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E18: 45 8B C6 - mov r8d,r14d
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E1B: 48 8D 54 24 20 - lea rdx,[rsp+20]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E20: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E23: E8 18 ED 11 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18C0B40
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E28: 0F B6 C8 - movzx ecx,al
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E2B: 84 C0 - test al,al
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E2D: 74 43 - je "DQ7R_DEMO-Win64-Shipping.exe"+17A1E72
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E2F: 83 E9 01 - sub ecx,01
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E32: 74 37 - je "DQ7R_DEMO-Win64-Shipping.exe"+17A1E6B
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E34: 83 F9 02 - cmp ecx,02
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E37: 74 11 - je "DQ7R_DEMO-Win64-Shipping.exe"+17A1E4A
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E39: 48 8B 8B 00 05 00 00 - mov rcx,[rbx+00000500]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E40: 45 33 C0 - xor r8d,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E43: 33 D2 - xor edx,edx
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E45: E8 96 9D 15 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18FBBE0
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E4A: 8B 57 18 - mov edx,[rdi+18]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E4D: 4C 8B 74 24 50 - mov r14,[rsp+50]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E52: 83 FA 01 - cmp edx,01
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E55: 0F 8E 83 00 00 00 - jng "DQ7R_DEMO-Win64-Shipping.exe"+17A1EDE
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E5B: 48 8B 8B 10 05 00 00 - mov rcx,[rbx+00000510]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E62: E8 C9 FB 12 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18D1A30
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E67: B2 01 - mov dl,01
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E69: EB 75 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+17A1EE0
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E6B: BE 01 00 00 00 - mov esi,00000001
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E70: EB 02 - jmp "DQ7R_DEMO-Win64-Shipping.exe"+17A1E74
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E72: 33 F6 - xor esi,esi
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E74: 48 8B 8B 00 05 00 00 - mov rcx,[rbx+00000500]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E7B: 45 33 C0 - xor r8d,r8d
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E7E: B2 01 - mov dl,01
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E80: E8 5B 9D 15 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+18FBBE0
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E85: 48 8B 8B 00 05 00 00 - mov rcx,[rbx+00000500]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E8C: E8 FF 38 F4 FF - call "DQ7R_DEMO-Win64-Shipping.exe"+16E5790
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E91: 48 8B 83 00 05 00 00 - mov rax,[rbx+00000500]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E98: 48 8B A8 48 04 00 00 - mov rbp,[rax+00000448]
"DQ7R_DEMO-Win64-Shipping.exe"+17A1E9F: 48 85 ED - test rbp,rbp
"DQ7R_DEMO-Win64-Shipping.exe"+17A1EA2: 74 A6 - je "DQ7R_DEMO-Win64-Shipping.exe"+17A1E4A
}
1337317250
"HOVERED ITEM"
8 Bytes
iHoverPtr
0
1337317251
"Edit: Hovered Item Quantity"
4 Bytes
+18
1337317255
"MaxQuantity"
4 Bytes
+1C
1337317254
"Set Hovered Item To Max Quantity"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
local maxQuantity = readInteger('[iHoverPtr]+0x1C')
local quantity = getAddressSafe('[iHoverPtr]+0x18')
writeInteger(quantity,maxQuantity)
createTimer(100, function() memrec.Active = false end)
[DISABLE]
Toggle Activation
17
98
0
1337317240
"getEXP"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(exp_AOB,$process,3Bxx0F4ExxE8xxxxxxxx498B)
registersymbol(exp_AOB)
alloc(expHook,0x1000)
registersymbol(expHook)
label(code_exp)
label(return_exp)
label(exit_exp)
label(xpMul)
registersymbol(code_exp)
registersymbol(xpMul)
expHook:
exit_exp:
code_exp:
readmem(exp_AOB,5)
{
cmp edi,edx
cmovle edx,edi
}
@@:
cvtsi2ss xmm15,edx
mulss xmm15,[xpMul]
cvtss2si edx,xmm15
jmp return_exp
align 10 CC
expHook+200:
xpMul:
dd (float)1
midjumpmem+B0:
jmp expHook
exp_AOB:
jmp midjumpmem+B0
return_exp:
[DISABLE]
exp_AOB:
readmem(code_exp,5) // db 3B FA 0F 4E D7
unregistersymbol(exp_AOB)
unregistersymbol(expHook)
unregistersymbol(code_exp)
unregistersymbol(xpMul)
dealloc(expHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+147AD5B
"DQ7R_DEMO-Win64-Shipping.exe"+147ACFD: E8 5E DB DE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+1268860
"DQ7R_DEMO-Win64-Shipping.exe"+147AD02: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD05: 0F 84 F5 03 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+147B100
"DQ7R_DEMO-Win64-Shipping.exe"+147AD0B: 48 8B 40 20 - mov rax,[rax+20]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD0F: 48 89 45 48 - mov [rbp+48],rax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD13: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD16: 0F 84 E4 03 00 00 - je "DQ7R_DEMO-Win64-Shipping.exe"+147B100
"DQ7R_DEMO-Win64-Shipping.exe"+147AD1C: 48 89 9C 24 E0 01 00 00 - mov [rsp+000001E0],rbx
"DQ7R_DEMO-Win64-Shipping.exe"+147AD24: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD27: 48 89 B4 24 E8 01 00 00 - mov [rsp+000001E8],rsi
"DQ7R_DEMO-Win64-Shipping.exe"+147AD2F: 4C 89 A4 24 F8 01 00 00 - mov [rsp+000001F8],r12
"DQ7R_DEMO-Win64-Shipping.exe"+147AD37: 4C 89 BC 24 B0 01 00 00 - mov [rsp+000001B0],r15
"DQ7R_DEMO-Win64-Shipping.exe"+147AD3F: E8 4C 30 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145DD90
"DQ7R_DEMO-Win64-Shipping.exe"+147AD44: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD47: 8B D8 - mov ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD49: E8 72 1B FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145C8C0
"DQ7R_DEMO-Win64-Shipping.exe"+147AD4E: 2B D8 - sub ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD50: BA 00 00 00 00 - mov edx,00000000
"DQ7R_DEMO-Win64-Shipping.exe"+147AD55: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD58: 0F 49 D3 - cmovns edx,ebx
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+147AD5B: 3B FA - cmp edi,edx
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+147AD5D: 0F 4E D7 - cmovle edx,edi
"DQ7R_DEMO-Win64-Shipping.exe"+147AD60: E8 BB 49 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145F720
"DQ7R_DEMO-Win64-Shipping.exe"+147AD65: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD68: E8 53 1B FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145C8C0
"DQ7R_DEMO-Win64-Shipping.exe"+147AD6D: 41 B0 01 - mov r8b,01
"DQ7R_DEMO-Win64-Shipping.exe"+147AD70: 89 44 24 40 - mov [rsp+40],eax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD74: 48 8D 55 60 - lea rdx,[rbp+60]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD78: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD7B: E8 40 F8 FD FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145A5C0
"DQ7R_DEMO-Win64-Shipping.exe"+147AD80: 8B 45 70 - mov eax,[rbp+70]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD83: 49 8B CE - mov rcx,r14
"DQ7R_DEMO-Win64-Shipping.exe"+147AD86: 8B 7D 64 - mov edi,[rbp+64]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD89: 8B 75 68 - mov esi,[rbp+68]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD8C: 44 8B 7D 6C - mov r15d,[rbp+6C]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD90: 44 8B 65 60 - mov r12d,[rbp+60]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD94: 89 44 24 20 - mov [rsp+20],eax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD98: 8B 45 74 - mov eax,[rbp+74]
"DQ7R_DEMO-Win64-Shipping.exe"+147AD9B: 89 44 24 24 - mov [rsp+24],eax
"DQ7R_DEMO-Win64-Shipping.exe"+147AD9F: 8B 45 78 - mov eax,[rbp+78]
"DQ7R_DEMO-Win64-Shipping.exe"+147ADA2: 89 44 24 28 - mov [rsp+28],eax
}
1337317241
"EXP Multiplier"
Float
xpMul
1337317242
"getJobEXP"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(jobEXP_AOB,$process,458Bxx498Dxxxx8BxxE8xxxxxxxx4D)
registersymbol(jobEXP_AOB)
alloc(jobEXPHook,0x1000)
registersymbol(jobEXPHook)
label(code_jobEXP)
label(return_jobEXP)
label(exit_jobEXP)
label(jXPMul)
registersymbol(code_jobEXP)
registersymbol(jXPMul)
jobEXPHook:
cvtsi2ss xmm15,r12d
mulss xmm15,[jXPMul]
cvtss2si r12d,xmm15
exit_jobEXP:
code_jobEXP:
readmem(jobEXP_AOB,7)
{
mov r9d,r12d
lea rcx,[r13+68]
}
jmp return_jobEXP
align 10 CC
jobEXPHook+200:
jXPMul:
dd (float)1
midjumpmem+C0:
jmp jobEXPHook
jobEXP_AOB:
jmp midjumpmem+C0
nop 2
return_jobEXP:
[DISABLE]
jobEXP_AOB:
readmem(code_jobEXP,7) // db 45 8B CC 49 8D 4D 68
unregistersymbol(jobEXP_AOB)
unregistersymbol(jobEXPHook)
unregistersymbol(code_jobEXP)
unregistersymbol(jXPMul)
dealloc(jobEXPHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+145F944
"DQ7R_DEMO-Win64-Shipping.exe"+145F8F8: 74 05 - je "DQ7R_DEMO-Win64-Shipping.exe"+145F8FF
"DQ7R_DEMO-Win64-Shipping.exe"+145F8FA: E8 D1 65 6A 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1B05ED0
"DQ7R_DEMO-Win64-Shipping.exe"+145F8FF: 48 8B 0B - mov rcx,[rbx]
"DQ7R_DEMO-Win64-Shipping.exe"+145F902: 48 89 4C 24 20 - mov [rsp+20],rcx
"DQ7R_DEMO-Win64-Shipping.exe"+145F907: 33 C9 - xor ecx,ecx
"DQ7R_DEMO-Win64-Shipping.exe"+145F909: 48 89 0B - mov [rbx],rcx
"DQ7R_DEMO-Win64-Shipping.exe"+145F90C: 8B 43 08 - mov eax,[rbx+08]
"DQ7R_DEMO-Win64-Shipping.exe"+145F90F: 89 44 24 28 - mov [rsp+28],eax
"DQ7R_DEMO-Win64-Shipping.exe"+145F913: 8B 43 0C - mov eax,[rbx+0C]
"DQ7R_DEMO-Win64-Shipping.exe"+145F916: 89 44 24 2C - mov [rsp+2C],eax
"DQ7R_DEMO-Win64-Shipping.exe"+145F91A: 48 89 4B 08 - mov [rbx+08],rcx
"DQ7R_DEMO-Win64-Shipping.exe"+145F91E: 48 8B 4C 24 30 - mov rcx,[rsp+30]
"DQ7R_DEMO-Win64-Shipping.exe"+145F923: 48 85 C9 - test rcx,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+145F926: 74 05 - je "DQ7R_DEMO-Win64-Shipping.exe"+145F92D
"DQ7R_DEMO-Win64-Shipping.exe"+145F928: E8 A3 65 6A 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1B05ED0
"DQ7R_DEMO-Win64-Shipping.exe"+145F92D: 0F B6 57 01 - movzx edx,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F931: 49 8D 4D 68 - lea rcx,[r13+68]
"DQ7R_DEMO-Win64-Shipping.exe"+145F935: E8 06 63 ED FF - call "DQ7R_DEMO-Win64-Shipping.exe"+1335C40
"DQ7R_DEMO-Win64-Shipping.exe"+145F93A: 44 0F B6 47 01 - movzx r8d,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F93F: 48 8D 54 24 20 - lea rdx,[rsp+20]
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+145F944: 45 8B CC - mov r9d,r12d
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+145F947: 49 8D 4D 68 - lea rcx,[r13+68]
"DQ7R_DEMO-Win64-Shipping.exe"+145F94B: 8B D8 - mov ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+145F94D: E8 1E 7D ED FF - call "DQ7R_DEMO-Win64-Shipping.exe"+1337670
"DQ7R_DEMO-Win64-Shipping.exe"+145F952: 4D 85 FF - test r15,r15
"DQ7R_DEMO-Win64-Shipping.exe"+145F955: 74 48 - je "DQ7R_DEMO-Win64-Shipping.exe"+145F99F
"DQ7R_DEMO-Win64-Shipping.exe"+145F957: 0F B6 57 01 - movzx edx,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F95B: 49 8D 4D 68 - lea rcx,[r13+68]
"DQ7R_DEMO-Win64-Shipping.exe"+145F95F: E8 DC 62 ED FF - call "DQ7R_DEMO-Win64-Shipping.exe"+1335C40
"DQ7R_DEMO-Win64-Shipping.exe"+145F964: 3B D8 - cmp ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+145F966: 7D 37 - jnl "DQ7R_DEMO-Win64-Shipping.exe"+145F99F
"DQ7R_DEMO-Win64-Shipping.exe"+145F968: 0F B6 57 01 - movzx edx,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F96C: 44 8B C3 - mov r8d,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+145F96F: 49 8B CD - mov rcx,r13
"DQ7R_DEMO-Win64-Shipping.exe"+145F972: E8 F9 3E FF FF - call "DQ7R_DEMO-Win64-Shipping.exe"+1453870
"DQ7R_DEMO-Win64-Shipping.exe"+145F977: 0F B6 57 01 - movzx edx,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F97B: 49 8B CD - mov rcx,r13
"DQ7R_DEMO-Win64-Shipping.exe"+145F97E: E8 AD 5C 00 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1465630
"DQ7R_DEMO-Win64-Shipping.exe"+145F983: 0F B6 5F 01 - movzx ebx,byte ptr [rdi+01]
"DQ7R_DEMO-Win64-Shipping.exe"+145F987: 49 8D 4D 68 - lea rcx,[r13+68]
"DQ7R_DEMO-Win64-Shipping.exe"+145F98B: 8B D3 - mov edx,ebx
}
1337317248
"Job EXP Multiplier"
Float
jXPMul
1337317189
"getGameSpeed"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(gameSpeed_AOB,$process,F3 0F 10 89 EC 02 00 00)
registersymbol(gameSpeed_AOB)
alloc(gameSpeedHook,0x1000)
registersymbol(gameSpeedHook)
label(code_gameSpeed)
label(return_gameSpeed)
label(exit_gameSpeed)
label(gameSpeed)
registersymbol(code_gameSpeed)
registersymbol(gameSpeed)
gameSpeedHook:
cmp [gameSpeed],0
jl @f
mulss xmm0,[gameSpeed]
exit_gameSpeed:
code_gameSpeed:
readmem(gameSpeed_AOB,8)
{
movss xmm1,[rcx+000002EC]
}
jmp return_gameSpeed
align 10 CC
gameSpeedHook+200:
gameSpeed:
dd (float)1
midjumpmem+60:
jmp gameSpeedHook
gameSpeed_AOB:
jmp midjumpmem+60
nop 3
return_gameSpeed:
[DISABLE]
gameSpeed_AOB:
readmem(code_gameSpeed,8) // db F3 0F 10 89 EC 02 00 00
unregistersymbol(gameSpeed_AOB)
unregistersymbol(gameSpeedHook)
unregistersymbol(code_gameSpeed)
unregistersymbol(gameSpeed)
dealloc(gameSpeedHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+1A2FDF8
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDBB: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDBE: 75 22 - jne "DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE2
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDC0: E8 6B CD F1 FF - call "DQ7R_DEMO-Win64-Shipping.exe"+194CB30
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDC5: 48 8B D0 - mov rdx,rax
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDC8: 4C 8D 05 71 C3 0A 03 - lea r8,["DQ7R_DEMO-Win64-Shipping.exe"+4ADC140]
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDCF: 48 8D 0D FA ED FF FF - lea rcx,["DQ7R_DEMO-Win64-Shipping.exe"+1A2EBD0]
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDD6: E8 A5 98 3C 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1DF9680
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDDB: 48 89 05 3E 42 39 04 - mov ["DQ7R_DEMO-Win64-Shipping.exe"+5DC4020],rax
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE2: 48 83 C4 28 - add rsp,28
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE6: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE7: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE8: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDE9: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDEA: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDEB: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDEC: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDED: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDEE: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDEF: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDF0: F3 0F 10 81 F4 02 00 00 - movss xmm0,[rcx+000002F4]
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FDF8: F3 0F 10 89 EC 02 00 00 - movss xmm1,[rcx+000002EC]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE00: F3 0F 59 81 F0 02 00 00 - mulss xmm0,[rcx+000002F0]
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE08: F3 0F 59 89 E8 02 00 00 - mulss xmm1,[rcx+000002E8]
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE10: F3 0F 59 C1 - mulss xmm0,xmm1
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE14: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE15: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE16: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE17: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE18: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE19: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1A: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1B: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1C: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1D: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1E: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE1F: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE20: 0F B6 81 78 04 00 00 - movzx eax,byte ptr [rcx+00000478]
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE27: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE28: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE29: CC - int 3
"DQ7R_DEMO-Win64-Shipping.exe"+1A2FE2A: CC - int 3
}
1337317190
"Game Speed Multiplier"
Float
gameSpeed
Toggle Activation
18
97
0.5
Increase Game Speed
0
Toggle Activation
18
98
0.5
Decrease Game Speed
1
Toggle Activation
18
99
1.0
Reset Game Speed
2
1337317198
"getSelectedChar"
Auto Assembler Script
// ███╗ ███╗██╗ ██╗██╗ ██████╗
// ████╗ ████║██║ ██║██║ ██╔═████╗
// ██╔████╔██║██║ ██║██║ ██║██╔██║
// ██║╚██╔╝██║██║ ██║██║ ████╔╝██║
// ██║ ╚═╝ ██║╚██████╔╝███████╗╚██████╔╝
// ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝
// 🎯 Game : DQ7R_DEMO-Win64-Shipping.exe
// 🧾 Version : 1.0.0.0
// 📅 Date : 2026-01-10
// 🧠 Author : mul0
// 🌐 Site : https://mul0.com/
[ENABLE]
aobscanmodule(selectedChar_AOB,$process,8Bxxxx488Bxx2BxxE8xxxxxxxx2B)
registersymbol(selectedChar_AOB)
alloc(selectedCharHook,0x1000)
registersymbol(selectedCharHook)
label(code_selectedChar)
label(return_selectedChar)
label(exit_selectedChar)
label(charSelect)
registersymbol(code_selectedChar)
registersymbol(charSelect)
selectedCharHook:
push r15
mov r15,charSelect
mov [r15],rcx
pop r15
exit_selectedChar:
code_selectedChar:
readmem(selectedChar_AOB,6)
{
mov ebx,[rbx+08]
mov rcx,rdi
}
jmp return_selectedChar
align 10 CC
selectedCharHook+200:
charSelect:
dq 0
midjumpmem+70:
jmp selectedCharHook
selectedChar_AOB:
jmp midjumpmem+70
nop
return_selectedChar:
[DISABLE]
selectedChar_AOB:
readmem(code_selectedChar,6) // db 8B 5B 08 48 8B CF
unregistersymbol(selectedChar_AOB)
unregistersymbol(selectedCharHook)
unregistersymbol(code_selectedChar)
unregistersymbol(charSelect)
dealloc(selectedCharHook)
{
// ORIGINAL CODE - INJECTION POINT: "DQ7R_DEMO-Win64-Shipping.exe"+147CEEF
"DQ7R_DEMO-Win64-Shipping.exe"+147CE97: 83 7C 24 28 00 - cmp dword ptr [rsp+28],00
"DQ7R_DEMO-Win64-Shipping.exe"+147CE9C: 48 8D 15 1D 41 0E 03 - lea rdx,["DQ7R_DEMO-Win64-Shipping.exe"+4560FC0]
"DQ7R_DEMO-Win64-Shipping.exe"+147CEA3: 41 B8 01 00 00 00 - mov r8d,00000001
"DQ7R_DEMO-Win64-Shipping.exe"+147CEA9: 48 8D 4C 24 50 - lea rcx,[rsp+50]
"DQ7R_DEMO-Win64-Shipping.exe"+147CEAE: 48 0F 45 54 24 20 - cmovne rdx,[rsp+20]
"DQ7R_DEMO-Win64-Shipping.exe"+147CEB4: E8 27 54 78 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1C022E0
"DQ7R_DEMO-Win64-Shipping.exe"+147CEB9: 48 8B 4C 24 20 - mov rcx,[rsp+20]
"DQ7R_DEMO-Win64-Shipping.exe"+147CEBE: 48 85 C9 - test rcx,rcx
"DQ7R_DEMO-Win64-Shipping.exe"+147CEC1: 74 05 - je "DQ7R_DEMO-Win64-Shipping.exe"+147CEC8
"DQ7R_DEMO-Win64-Shipping.exe"+147CEC3: E8 08 90 68 00 - call "DQ7R_DEMO-Win64-Shipping.exe"+1B05ED0
"DQ7R_DEMO-Win64-Shipping.exe"+147CEC8: 48 8B 54 24 50 - mov rdx,[rsp+50]
"DQ7R_DEMO-Win64-Shipping.exe"+147CECD: 4C 8D 05 2C B0 8F 04 - lea r8,["DQ7R_DEMO-Win64-Shipping.exe"+5D77F00]
"DQ7R_DEMO-Win64-Shipping.exe"+147CED4: 45 33 C9 - xor r9d,r9d
"DQ7R_DEMO-Win64-Shipping.exe"+147CED7: 48 8B CE - mov rcx,rsi
"DQ7R_DEMO-Win64-Shipping.exe"+147CEDA: E8 E1 C7 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+14696C0
"DQ7R_DEMO-Win64-Shipping.exe"+147CEDF: 48 8B D8 - mov rbx,rax
"DQ7R_DEMO-Win64-Shipping.exe"+147CEE2: 48 85 C0 - test rax,rax
"DQ7R_DEMO-Win64-Shipping.exe"+147CEE5: 74 30 - je "DQ7R_DEMO-Win64-Shipping.exe"+147CF17
"DQ7R_DEMO-Win64-Shipping.exe"+147CEE7: 48 8B CF - mov rcx,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+147CEEA: E8 D1 F9 FD FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145C8C0
// ---------- INJECTING HERE ----------
"DQ7R_DEMO-Win64-Shipping.exe"+147CEEF: 8B 5B 08 - mov ebx,[rbx+08]
// ---------- DONE INJECTING ----------
"DQ7R_DEMO-Win64-Shipping.exe"+147CEF2: 48 8B CF - mov rcx,rdi
"DQ7R_DEMO-Win64-Shipping.exe"+147CEF5: 2B D8 - sub ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147CEF7: E8 54 16 FE FF - call "DQ7R_DEMO-Win64-Shipping.exe"+145E550
"DQ7R_DEMO-Win64-Shipping.exe"+147CEFC: 2B D8 - sub ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147CEFE: 33 C0 - xor eax,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147CF00: 85 DB - test ebx,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+147CF02: 0F 4E D8 - cmovle ebx,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147CF05: 8B C3 - mov eax,ebx
"DQ7R_DEMO-Win64-Shipping.exe"+147CF07: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"DQ7R_DEMO-Win64-Shipping.exe"+147CF0C: 48 8B 74 24 48 - mov rsi,[rsp+48]
"DQ7R_DEMO-Win64-Shipping.exe"+147CF11: 48 83 C4 30 - add rsp,30
"DQ7R_DEMO-Win64-Shipping.exe"+147CF15: 5F - pop rdi
"DQ7R_DEMO-Win64-Shipping.exe"+147CF16: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+147CF17: 48 8B 5C 24 40 - mov rbx,[rsp+40]
"DQ7R_DEMO-Win64-Shipping.exe"+147CF1C: 33 C0 - xor eax,eax
"DQ7R_DEMO-Win64-Shipping.exe"+147CF1E: 48 8B 74 24 48 - mov rsi,[rsp+48]
"DQ7R_DEMO-Win64-Shipping.exe"+147CF23: 48 83 C4 30 - add rsp,30
"DQ7R_DEMO-Win64-Shipping.exe"+147CF27: 5F - pop rdi
"DQ7R_DEMO-Win64-Shipping.exe"+147CF28: C3 - ret
"DQ7R_DEMO-Win64-Shipping.exe"+147CF29: CC - int 3
}
1337317199
"SELECTED CHARACTER"
8 Bytes
charSelect
0
1337317200
"Selected Character Name"
String
99
0
0
1
+40
0
1337317201
"Edit: Selected Character Might"
Byte
+108
1337317203
"Edit: Selected Character Position"
Byte
+109
1337317204
"Edit: Selected Character Gambit"
Byte
+10A
1337317205
"Edit: Selected Character Level"
4 Bytes
+110
1337317207
"Edit: Selected Character HP"
4 Bytes
+114
1337317208
"Edit: Selected Character MP"
4 Bytes
+118
1337317210
"Edit: Selected Character Attack"
4 Bytes
+11C
1337317211
"Edit: Selected Character Defense"
4 Bytes
+120
1337317212
"Edit: Selected Character Agility"
4 Bytes
+124
1337317216
"Edit: Selected Character Deftness"
4 Bytes
+128
1337317217
"Edit: Selected Character Charisma"
4 Bytes
+12C
1337317213
"Edit: Selected Character Magical Might"
4 Bytes
+130
1337317215
"Edit: Selected Character Magical Mending"
4 Bytes
+134
1337317218
"Edit: Selected Character Max HP"
4 Bytes
+138
1337317219
"Edit: Selected Character Max MP"
4 Bytes
+13C
1337317220
"Edit: Selected Character EXP"
4 Bytes
+148
1337317221
"JOB.JobLevelMap"
8 Bytes
+B8
0
1337317222
"Edit: Selected Character Job Level"
4 Bytes
+4
1337317223
"Edit: Selected Character Job EXP"
4 Bytes
+8