1096
"Toggle Compact View"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not toggleCompactView then
function toggleCompactView(sender, forceEnable)
local isCompactMode = not (compactViewMenuItem.Caption == 'Compact View Mode')
if forceEnable ~= nil then
isCompactMode = not forceEnable
end
synchronize(function()
compactViewMenuItem.Caption = isCompactMode and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = isCompactMode
getMainForm().Panel4.Visible = isCompactMode
getMainForm().Panel5.Visible = isCompactMode
end)
end
end
if not createCompactViewMenu then
function createCompactViewMenu()
if isCompactMenuCreated then return end
synchronize(function()
local mainMenu = getMainForm().Menu.Items
compactViewMenuItem = createMenuItem(mainMenu)
compactViewMenuItem.Caption = 'Compact View Mode'
compactViewMenuItem.OnClick = toggleCompactView
mainMenu.add(compactViewMenuItem)
end)
isCompactMenuCreated = true
end
end
createCompactViewMenu()
toggleCompactView(nil, true)
[DISABLE]
{$lua}
if toggleCompactView then
toggleCompactView(nil, false)
end
1
"Get stamia"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_GET_STA,$process,E8 ?? ?? ?? ?? ?? 8B ?? 40 03 00 00 F3 0F 10 ?? 20 EB)
// raw AOB: E8 ?? ?? ?? ?? 48 85 C0 48 8B CE 48 0F 45 C8 48 85 C9 74 ?? 48 83 79 10 00 74 ?? 32 C0 EB ?? B0 01 0F B6 C0 49 8B D7 49 8B CE 85 C0 75 ?? E8 ?? ?? ?? ?? 48 8B 88 40 03 00 00 F3 0F 10 41 20 EB ?? E8 ?? ?? ?? ?? F3 0F 2C C0 48 8D 54 24 70 49 8B CE 89 44 24 70 E8 ?? ?? ?? ?? 8B 0D ?? ?? ?? ?? 48 8D 54 24 50 89 4C 24 50 48 8B F8 0F B7 0D ?? ?? ?? ?? 66 89 4C 24 54 0F B7 0D
// injection point AOB: E8 ?? ?? ?? ?? ?? 8B ?? 40 03 00 00 F3 0F 10 ?? 20 EB ?? E8 ?? ?? ?? ?? F3 0F 2C ?? ?? 8D ?? 24 ?? ?? 8B ?? 89 ?? 24 ?? E8 ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 8D ?? 24 ?? 89 ?? 24 ?? ?? 8B ?? 0F B7 ?? ?? ?? ?? ?? 66 89 ?? 24 ?? 0F B7
alloc(newmem,$1000)
alloc(INJECT_GET_STAo, $11)
label(code)
label(return)
label(ptrCapture_INJECT_GET_STA_505531)
INJECT_GET_STAo:
readmem(INJECT_GET_STA, $11)
newmem:
code:
// call DD2.exe+19EF8C0
reassemble(INJECT_GET_STA)
// mov rcx,[rax+00000340]
reassemble(INJECT_GET_STA+5)
cmp qword ptr [ptrCapture_INJECT_GET_STA_505531], 0
jne short @F
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
mov [ptrCapture_INJECT_GET_STA_505531], rcx
// **** End Auto script: AddressCapture
@@:
// movss xmm0,[rcx+20]
reassemble(INJECT_GET_STA+C)
jmp far return
align 10 cc
ptrCapture_INJECT_GET_STA_505531:
dq 0
INJECT_GET_STA:
jmp far newmem
nop 3
return:
registersymbol(INJECT_GET_STA INJECT_GET_STAo)
registersymbol(ptrCapture_INJECT_GET_STA_505531)
[DISABLE]
INJECT_GET_STA:
readmem(INJECT_GET_STAo, $11)
unregistersymbol(INJECT_GET_STA INJECT_GET_STAo)
unregistersymbol(ptrCapture_INJECT_GET_STA_505531)
dealloc(newmem)
dealloc(INJECT_GET_STAo)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+22585F6
DD2.exe+22585C8: E8 F3 72 79 FF - call DD2.exe+19EF8C0
DD2.exe+22585CD: 48 85 C0 - test rax,rax
DD2.exe+22585D0: 48 8B CE - mov rcx,rsi
DD2.exe+22585D3: 48 0F 45 C8 - cmovne rcx,rax
DD2.exe+22585D7: 48 85 C9 - test rcx,rcx
DD2.exe+22585DA: 74 0B - je DD2.exe+22585E7
DD2.exe+22585DC: 48 83 79 10 00 - cmp qword ptr [rcx+10],00
DD2.exe+22585E1: 74 04 - je DD2.exe+22585E7
DD2.exe+22585E3: 32 C0 - xor al,al
DD2.exe+22585E5: EB 02 - jmp DD2.exe+22585E9
DD2.exe+22585E7: B0 01 - mov al,01
DD2.exe+22585E9: 0F B6 C0 - movzx eax,al
DD2.exe+22585EC: 49 8B D7 - mov rdx,r15
DD2.exe+22585EF: 49 8B CE - mov rcx,r14
DD2.exe+22585F2: 85 C0 - test eax,eax
DD2.exe+22585F4: 75 13 - jne DD2.exe+2258609
// ---------- INJECTING HERE ----------
DD2.exe+22585F6: E8 C5 72 79 FF - call DD2.exe+19EF8C0
// ---------- DONE INJECTING ----------
DD2.exe+22585FB: 48 8B 88 40 03 00 00 - mov rcx,[rax+00000340]
DD2.exe+2258602: F3 0F 10 41 20 - movss xmm0,[rcx+20]
DD2.exe+2258607: EB 05 - jmp DD2.exe+225860E
DD2.exe+2258609: E8 B2 6B 79 FF - call DD2.exe+19EF1C0
DD2.exe+225860E: F3 0F 2C C0 - cvttss2si eax,xmm0
DD2.exe+2258612: 48 8D 54 24 70 - lea rdx,[rsp+70]
DD2.exe+2258617: 49 8B CE - mov rcx,r14
DD2.exe+225861A: 89 44 24 70 - mov [rsp+70],eax
DD2.exe+225861E: E8 8D 1A FF FD - call DD2.AK::WriteBytesCount::Reserve+DA0
DD2.exe+2258623: 8B 0D 67 D8 83 0D - mov ecx,[DD2.exe+FA95E90]
DD2.exe+2258629: 48 8D 54 24 50 - lea rdx,[rsp+50]
DD2.exe+225862E: 89 4C 24 50 - mov [rsp+50],ecx
DD2.exe+2258632: 48 8B F8 - mov rdi,rax
DD2.exe+2258635: 0F B7 0D 58 D8 83 0D - movzx ecx,word ptr [DD2.exe+FA95E94]
DD2.exe+225863C: 66 89 4C 24 54 - mov [rsp+54],cx
DD2.exe+2258641: 0F B7 0D 4E D8 83 0D - movzx ecx,word ptr [DD2.exe+FA95E96]
}
1095
"Usage: menu->status"
8000FF
1
2
"value"
0
FF8080
Float
ptrCapture_INJECT_GET_STA_505531
20
3
"max"
0
FF8080
Float
ptrCapture_INJECT_GET_STA_505531
24
11881
"Get gold"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_GET_GOLD,$process,8B ?? ?? ?? 00 00 ?? 8B ?? ?? ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 83 ?? 00 0F 84 ?? ?? ?? ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 63 ?? 80 ?? ?? 58 00 7E ?? 48 98 80 ?? ?? 58 01 75 ?? ?? 8D ?? 10 E8 ?? ?? ?? ?? 84 ?? 74 ?? ?? 8D ?? 10 FF ?? ?? ?? ?? ?? ?? 8D ?? 24 ?? ?? 85 ?? 79 ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 83 ?? 00 74 ?? ?? 8B ?? ?? 33 ?? ?? 8B ?? F0 ?? 0F B1 ?? 74 ?? 0F 0D ?? 0F 1F ?? ?? 00 00 00 00 ?? 8B ?? ?? 8B ?? F0 ?? 0F B1 ?? 75 ?? ?? 85 ?? 74 ?? E8 ?? ?? ?? ?? 8B ?? ?? 8B ?? 24 ?? ?? 8B ?? 24 ?? 48 83 C4 30 ?? ?? C3 CC CC CC CC CC CC ?? 89)
// raw AOB: 48 8D 44 24 20 49 23 C6 48 8B 18 E8 ?? ?? ?? ?? 48 63 F8 80 7C 1F 58 00 75 ?? 48 8D 4B 10 48 89 74 24 48 E8 ?? ?? ?? ?? 84 C0 74 ?? 48 8D 4B 10 FF 15 ?? ?? ?? ?? 48 8B 74 24 48 FE 44 1F 58 8B 9D CC 02 00 00 48 8B 6C 24 40 48 8D 44 24 20 49 23 C6 48 83 38 00 0F 84 ?? ?? ?? ?? 48 8D 44 24 20 49 23 C6 48 8B 38 E8 ?? ?? ?? ?? 48 63 C8 80 7C 39 58 00 7E ?? 48 98 80 6C 38 58 01 75 ?? 48 8D 4F 10
// injection point AOB: 8B ?? ?? ?? 00 00 ?? 8B ?? ?? ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 83 ?? 00 0F 84 ?? ?? ?? ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 63 ?? 80 ?? ?? 58 00 7E ?? 48 98 80 ?? ?? 58 01 75 ?? ?? 8D ?? 10
alloc(newmem,$1000)
alloc(INJECT_GET_GOLDo, $10)
label(code)
label(return)
label(i_currency_addr_1 i_currency_addr_2 i_currency_addr_3 i_currency_addr_4)
INJECT_GET_GOLDo:
readmem(INJECT_GET_GOLD, $10)
newmem:
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
cmp [i_currency_addr_1], rbp
je short code
cmp [i_currency_addr_2], rbp
je short code
cmp [i_currency_addr_3], rbp
je short code
cmp qword ptr [i_currency_addr_1], 0
je short set_1
cmp qword ptr [i_currency_addr_2], 0
je short set_2
cmp qword ptr [i_currency_addr_3], 0
je short set_3
jmp short code
set_1:
mov [i_currency_addr_1], rbp
jmp short code
set_2:
mov [i_currency_addr_2], rbp
jmp short code
set_3:
mov [i_currency_addr_3], rbp
jmp short code
// **** End Auto script: AddressCapture
code:
// mov ebx,[rbp+000002CC]
reassemble(INJECT_GET_GOLD)
// mov rbp,[rsp+40]
reassemble(INJECT_GET_GOLD+6)
// lea rax,[rsp+20]
reassemble(INJECT_GET_GOLD+B)
jmp far return
align 10 cc
i_aob_base_addr_173677:
dq 0
i_aob_offset_173677:
dq 0
i_aob_base_addr_607624:
dq 0
i_aob_offset_607624:
dq 0
i_aob_base_addr_833226:
dq 0
i_aob_offset_833226:
dq 0
i_currency_addr_1:
dq 0
i_currency_addr_2:
dq 0
i_currency_addr_3:
dq 0
i_currency_addr_4:
dq 0
INJECT_GET_GOLD:
jmp far newmem
nop 2
return:
registersymbol(INJECT_GET_GOLD INJECT_GET_GOLDo)
registersymbol(i_currency_addr_1 i_currency_addr_2 i_currency_addr_3 i_currency_addr_4)
[DISABLE]
INJECT_GET_GOLD:
readmem(INJECT_GET_GOLDo, $10)
unregistersymbol(INJECT_GET_GOLD INJECT_GET_GOLDo)
unregistersymbol(i_currency_addr_1 i_currency_addr_2 i_currency_addr_3 i_currency_addr_4)
dealloc(newmem)
dealloc(INJECT_GET_GOLDo)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+4360176
DD2.exe+4360137: 48 8D 44 24 20 - lea rax,[rsp+20]
DD2.exe+436013C: 49 23 C6 - and rax,r14
DD2.exe+436013F: 48 8B 18 - mov rbx,[rax]
DD2.exe+4360142: E8 69 A7 82 00 - call DD2.exe+4B8A8B0
DD2.exe+4360147: 48 63 F8 - movsxd rdi,eax
DD2.exe+436014A: 80 7C 1F 58 00 - cmp byte ptr [rdi+rbx+58],00
DD2.exe+436014F: 75 25 - jne DD2.exe+4360176
DD2.exe+4360151: 48 8D 4B 10 - lea rcx,[rbx+10]
DD2.exe+4360155: 48 89 74 24 48 - mov [rsp+48],rsi
DD2.exe+436015A: E8 C1 A8 82 00 - call DD2.exe+4B8AA20
DD2.exe+436015F: 84 C0 - test al,al
DD2.exe+4360161: 74 0A - je DD2.exe+436016D
DD2.exe+4360163: 48 8D 4B 10 - lea rcx,[rbx+10]
DD2.exe+4360167: FF 15 CB 34 2D 05 - call qword ptr [DD2.exe+9633638]
DD2.exe+436016D: 48 8B 74 24 48 - mov rsi,[rsp+48]
DD2.exe+4360172: FE 44 1F 58 - inc byte ptr [rdi+rbx+58]
// ---------- INJECTING HERE ----------
DD2.exe+4360176: 8B 9D CC 02 00 00 - mov ebx,[rbp+000002CC]
// ---------- DONE INJECTING ----------
DD2.exe+436017C: 48 8B 6C 24 40 - mov rbp,[rsp+40]
DD2.exe+4360181: 48 8D 44 24 20 - lea rax,[rsp+20]
DD2.exe+4360186: 49 23 C6 - and rax,r14
DD2.exe+4360189: 48 83 38 00 - cmp qword ptr [rax],00
DD2.exe+436018D: 0F 84 84 00 00 00 - je DD2.exe+4360217
DD2.exe+4360193: 48 8D 44 24 20 - lea rax,[rsp+20]
DD2.exe+4360198: 49 23 C6 - and rax,r14
DD2.exe+436019B: 48 8B 38 - mov rdi,[rax]
DD2.exe+436019E: E8 0D A7 82 00 - call DD2.exe+4B8A8B0
DD2.exe+43601A3: 48 63 C8 - movsxd rcx,eax
DD2.exe+43601A6: 80 7C 39 58 00 - cmp byte ptr [rcx+rdi+58],00
DD2.exe+43601AB: 7E 20 - jle DD2.exe+43601CD
DD2.exe+43601AD: 48 98 - cdqe
DD2.exe+43601AF: 80 6C 38 58 01 - sub byte ptr [rax+rdi+58],01
DD2.exe+43601B4: 75 17 - jne DD2.exe+43601CD
DD2.exe+43601B6: 48 8D 4F 10 - lea rcx,[rdi+10]
}
11882
"value 1"
0
FF8080
4 Bytes
i_currency_addr_1
2CC
11883
"inf. HP"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_INF_HP,$process,0F 5A ?? 0F 28 ?? ?? ?? 0F 5A ?? 0F 28 ?? ?? ?? F2 0F 5E ?? 66 0F 5A ?? 48)
// raw AOB: 48 8B 82 A8 01 00 00 83 78 18 00 74 ?? 76 ?? 48 8B 40 10 48 8B 48 20 EB ?? 48 8B 15 ?? ?? ?? ?? 45 33 C0 E8 ?? ?? ?? ?? 48 8B 4B 50 48 89 41 18 33 C9 48 85 C9 74 ?? F3 0F 10 71 34 0F 5A CE 0F 28 74 24 30 0F 5A C7 0F 28 7C 24 20 F2 0F 5E C8 66 0F 5A C1 48 83 C4 40 5B C3 48 8B 05 ?? ?? ?? ?? C3 CC CC CC CC CC CC CC
// injection point AOB: 0F 5A ?? 0F 28 ?? ?? ?? 0F 5A ?? 0F 28 ?? ?? ?? F2 0F 5E ?? 66 0F 5A ?? 48 83 C4 40 ?? C3 ?? 8B ?? ?? ?? ?? ?? C3 CC CC CC CC CC CC CC
alloc(newmem,$1000)
alloc(INJECT_INF_HPo, $10)
label(code)
label(return)
INJECT_INF_HPo:
readmem(INJECT_INF_HP, $10)
newmem:
//test rcx, rcx // already tested
je short code
vmovss xmm1, [rcx+44]
vmovss [rcx+34], xmm1
code:
// cvtps2pd xmm1,xmm6
reassemble(INJECT_INF_HP)
// movaps xmm6,[rsp+30]
reassemble(INJECT_INF_HP+3)
// cvtps2pd xmm0,xmm7
reassemble(INJECT_INF_HP+8)
// movaps xmm7,[rsp+20]
reassemble(INJECT_INF_HP+B)
jmp far return
align 10 cc
INJECT_INF_HP:
jmp far newmem
nop 2
return:
registersymbol(INJECT_INF_HP INJECT_INF_HPo)
[DISABLE]
INJECT_INF_HP:
readmem(INJECT_INF_HPo, $10)
unregistersymbol(INJECT_INF_HP INJECT_INF_HPo)
dealloc(newmem)
dealloc(INJECT_INF_HPo)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+736FA2
DD2.exe+736F66: 48 8B 82 A8 01 00 00 - mov rax,[rdx+000001A8]
DD2.exe+736F6D: 83 78 18 00 - cmp dword ptr [rax+18],00
DD2.exe+736F71: 74 2F - je DD2.exe+736FA2
DD2.exe+736F73: 76 0A - jna DD2.exe+736F7F
DD2.exe+736F75: 48 8B 40 10 - mov rax,[rax+10]
DD2.exe+736F79: 48 8B 48 20 - mov rcx,[rax+20]
DD2.exe+736F7D: EB 19 - jmp DD2.exe+736F98
DD2.exe+736F7F: 48 8B 15 5A DB 1D 0F - mov rdx,[DD2.exe+F914AE0]
DD2.exe+736F86: 45 33 C0 - xor r8d,r8d
DD2.exe+736F89: E8 C2 75 32 04 - call DD2.exe+4A5E550
DD2.exe+736F8E: 48 8B 4B 50 - mov rcx,[rbx+50]
DD2.exe+736F92: 48 89 41 18 - mov [rcx+18],rax
DD2.exe+736F96: 33 C9 - xor ecx,ecx
DD2.exe+736F98: 48 85 C9 - test rcx,rcx
DD2.exe+736F9B: 74 05 - je DD2.exe+736FA2
DD2.exe+736F9D: F3 0F 10 71 34 - movss xmm6,[rcx+34]
// ---------- INJECTING HERE ----------
DD2.exe+736FA2: 0F 5A CE - cvtps2pd xmm1,xmm6
// ---------- DONE INJECTING ----------
DD2.exe+736FA5: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
DD2.exe+736FAA: 0F 5A C7 - cvtps2pd xmm0,xmm7
DD2.exe+736FAD: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
DD2.exe+736FB2: F2 0F 5E C8 - divsd xmm1,xmm0
DD2.exe+736FB6: 66 0F 5A C1 - cvtpd2ps xmm0,xmm1
DD2.exe+736FBA: 48 83 C4 40 - add rsp,40
DD2.exe+736FBE: 5B - pop rbx
DD2.exe+736FBF: C3 - ret
DD2.exe+736FC0: 48 8B 05 E1 D8 1A 0F - mov rax,[DD2.AK::IAkStreamMgr::m_pStreamMgr+4C20]
DD2.exe+736FC7: C3 - ret
DD2.exe+736FC8: CC - int 3
DD2.exe+736FC9: CC - int 3
DD2.exe+736FCA: CC - int 3
DD2.exe+736FCB: CC - int 3
DD2.exe+736FCC: CC - int 3
DD2.exe+736FCD: CC - int 3
}
11891
"Shop: fast restock "
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_QUICK_FILL_SHOP_STOCK,$process,75 ?? ?? 0F B7 ?? 36 EB ?? 0F B6 ?? 1A EB ??)
// raw AOB: 33 C0 4C 8B 7C 24 50 EB ?? 49 8B 46 10 4A 8B 4C F8 20 4C 8B 7C 24 50 EB ?? 48 8B 15 ?? ?? ?? ?? 45 33 C0 48 8B CE E8 ?? ?? ?? ?? 48 8B 4E 50 48 89 41 18 33 C0 48 8B C8 48 85 C9 75 ?? 41 0F B7 45 36 EB ?? 0F B6 41 1A EB ?? B8 FF FF FF FF 44 8B 44 24 34 4D 8B CF 48 8B 55 88 48 8B CE 41 89 47 10 C6 44 24 20 01 E8 ?? ?? ?? ?? 4C 8B 74 24 48 4C 8B 7C 24 40 E9 ?? ?? ?? ?? 4C 8B 15 ?? ?? ?? ?? 32 DB
// injection point AOB: 75 ?? ?? 0F B7 ?? 36 EB ?? 0F B6 ?? 1A EB ?? ?? FF FF FF FF ?? 8B ?? 24 ?? ?? 8B ?? ?? 8B ?? ?? ?? 8B ?? ?? 89 ?? 10 C6 ?? ?? ?? 01 E8 ?? ?? ?? ?? ?? 8B ?? 24 ?? ?? 8B ?? 24 ?? E9 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? 32
alloc(newmem,$1000)
alloc(INJECT_QUICK_FILL_SHOP_STOCKo, $F)
label(code)
label(return)
INJECT_QUICK_FILL_SHOP_STOCKo:
readmem(INJECT_QUICK_FILL_SHOP_STOCK, $F)
newmem:
code:
// jne DD2.exe+17B6811
//reassemble(INJECT_QUICK_FILL_SHOP_STOCK)
jne short lab_17B6811
cmp word ptr [r13+36], 8
jae short @F
mov word ptr [r13+36], 8
@@:
// movzx eax,word ptr [r13+36]
reassemble(INJECT_QUICK_FILL_SHOP_STOCK+2)
// jmp DD2.exe+17B681C
reassemble(INJECT_QUICK_FILL_SHOP_STOCK+7)
lab_17B6811:
cmp byte ptr [rcx+1A], 8
jae short @F
mov byte ptr [rcx+1A], 8
@@:
// DD2.exe+17B6811: movzx eax,byte ptr [rcx+1A]
reassemble(INJECT_QUICK_FILL_SHOP_STOCK+9)
// jmp DD2.exe+17B681C
reassemble(INJECT_QUICK_FILL_SHOP_STOCK+D)
jmp far return
align 10 cc
INJECT_QUICK_FILL_SHOP_STOCK:
jmp far newmem
nop 1
return:
registersymbol(INJECT_QUICK_FILL_SHOP_STOCK INJECT_QUICK_FILL_SHOP_STOCKo)
[DISABLE]
INJECT_QUICK_FILL_SHOP_STOCK:
readmem(INJECT_QUICK_FILL_SHOP_STOCKo, $F)
unregistersymbol(INJECT_QUICK_FILL_SHOP_STOCK INJECT_QUICK_FILL_SHOP_STOCKo)
dealloc(newmem)
dealloc(INJECT_QUICK_FILL_SHOP_STOCKo)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+17B6808
DD2.exe+17B67CD: 33 C0 - xor eax,eax
DD2.exe+17B67CF: 4C 8B 7C 24 50 - mov r15,[rsp+50]
DD2.exe+17B67D4: EB 2C - jmp DD2.exe+17B6802
DD2.exe+17B67D6: 49 8B 46 10 - mov rax,[r14+10]
DD2.exe+17B67DA: 4A 8B 4C F8 20 - mov rcx,[rax+r15*8+20]
DD2.exe+17B67DF: 4C 8B 7C 24 50 - mov r15,[rsp+50]
DD2.exe+17B67E4: EB 1F - jmp DD2.exe+17B6805
DD2.exe+17B67E6: 48 8B 15 EB E2 15 0E - mov rdx,[DD2.exe+F914AD8]
DD2.exe+17B67ED: 45 33 C0 - xor r8d,r8d
DD2.exe+17B67F0: 48 8B CE - mov rcx,rsi
DD2.exe+17B67F3: E8 58 7D 2A 03 - call DD2.exe+4A5E550
DD2.exe+17B67F8: 48 8B 4E 50 - mov rcx,[rsi+50]
DD2.exe+17B67FC: 48 89 41 18 - mov [rcx+18],rax
DD2.exe+17B6800: 33 C0 - xor eax,eax
DD2.exe+17B6802: 48 8B C8 - mov rcx,rax
DD2.exe+17B6805: 48 85 C9 - test rcx,rcx
// ---------- INJECTING HERE ----------
DD2.exe+17B6808: 75 07 - jne DD2.exe+17B6811
// ---------- DONE INJECTING ----------
DD2.exe+17B680A: 41 0F B7 45 36 - movzx eax,word ptr [r13+36]
DD2.exe+17B680F: EB 0B - jmp DD2.exe+17B681C
DD2.exe+17B6811: 0F B6 41 1A - movzx eax,byte ptr [rcx+1A]
DD2.exe+17B6815: EB 05 - jmp DD2.exe+17B681C
DD2.exe+17B6817: B8 FF FF FF FF - mov eax,FFFFFFFF
DD2.exe+17B681C: 44 8B 44 24 34 - mov r8d,[rsp+34]
DD2.exe+17B6821: 4D 8B CF - mov r9,r15
DD2.exe+17B6824: 48 8B 55 88 - mov rdx,[rbp-78]
DD2.exe+17B6828: 48 8B CE - mov rcx,rsi
DD2.exe+17B682B: 41 89 47 10 - mov [r15+10],eax
DD2.exe+17B682F: C6 44 24 20 01 - mov byte ptr [rsp+20],01
DD2.exe+17B6834: E8 47 1A 82 FF - call DD2.exe+FD8280
DD2.exe+17B6839: 4C 8B 74 24 48 - mov r14,[rsp+48]
DD2.exe+17B683E: 4C 8B 7C 24 40 - mov r15,[rsp+40]
DD2.exe+17B6843: E9 68 FE FF FF - jmp DD2.exe+17B66B0
DD2.exe+17B6848: 4C 8B 15 11 8F 13 0E - mov r10,[DD2.AK::IAkStreamMgr::m_pStreamMgr+FAD8]
}
11889
"Craft: item amt no decrease"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_CRAFT_NO_ITEM_DEC,$process,66 41 2B D4 ?? ?? 01 66 89 ?? 1A 8B ?? ?? 8B ??)
// raw AOB: 49 23 CA 44 0F B7 61 1A 48 8D 4E 10 41 3B FC 44 0F 4C E7 85 C0 78 ?? 49 0B C8 8B 46 08 49 23 CA 0F B7 51 1A 48 8D 4E 10 85 C0 78 ?? 49 0B C8 49 23 CA 66 41 2B D4 41 B0 01 66 89 51 1A 8B D5 49 8B CF E8 ?? ?? ?? ?? 84 C0 0F 84 ?? ?? ?? ?? 48 8B 0E 48 8B 15 ?? ?? ?? ?? 48 8B 09 E8 ?? ?? ?? ?? 45 33 C9 84 C0 41 8B D9 48 0F 45 DE 48 85 DB 0F 84
// injection point AOB: 66 41 2B D4 41 B0 01 66 89 51 1A 8B D5 49 8B CF E8 ?? ?? ?? ?? 84 C0 0F 84 ?? ?? ?? ?? 48 8B 0E 48 8B 15 ?? ?? ?? ?? 48 8B 09 E8 ?? ?? ?? ?? 45 33 C9 84 C0 41 8B D9 48 0F 45 DE 48 85 DB 0F 84
INJECT_CRAFT_NO_ITEM_DEC:
db 66 83 ea 00 //sub dx,0
registersymbol(INJECT_CRAFT_NO_ITEM_DEC)
[DISABLE]
INJECT_CRAFT_NO_ITEM_DEC:
db 66 41 2B D4
unregistersymbol(INJECT_CRAFT_NO_ITEM_DEC)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+4369AFB
DD2.exe+4369AC9: 49 23 CA - and rcx,r10
DD2.exe+4369ACC: 44 0F B7 61 1A - movzx r12d,word ptr [rcx+1A]
DD2.exe+4369AD1: 48 8D 4E 10 - lea rcx,[rsi+10]
DD2.exe+4369AD5: 41 3B FC - cmp edi,r12d
DD2.exe+4369AD8: 44 0F 4C E7 - cmovl r12d,edi
DD2.exe+4369ADC: 85 C0 - test eax,eax
DD2.exe+4369ADE: 78 03 - js DD2.exe+4369AE3
DD2.exe+4369AE0: 49 0B C8 - or rcx,r8
DD2.exe+4369AE3: 8B 46 08 - mov eax,[rsi+08]
DD2.exe+4369AE6: 49 23 CA - and rcx,r10
DD2.exe+4369AE9: 0F B7 51 1A - movzx edx,word ptr [rcx+1A]
DD2.exe+4369AED: 48 8D 4E 10 - lea rcx,[rsi+10]
DD2.exe+4369AF1: 85 C0 - test eax,eax
DD2.exe+4369AF3: 78 03 - js DD2.exe+4369AF8
DD2.exe+4369AF5: 49 0B C8 - or rcx,r8
DD2.exe+4369AF8: 49 23 CA - and rcx,r10
// ---------- INJECTING HERE ----------
DD2.exe+4369AFB: 66 41 2B D4 - sub dx,r12w
// ---------- DONE INJECTING ----------
DD2.exe+4369AFF: 41 B0 01 - mov r8b,01
DD2.exe+4369B02: 66 89 51 1A - mov [rcx+1A],dx
DD2.exe+4369B06: 8B D5 - mov edx,ebp
DD2.exe+4369B08: 49 8B CF - mov rcx,r15
DD2.exe+4369B0B: E8 B0 23 C0 FF - call DD2.exe+3F6BEC0
DD2.exe+4369B10: 84 C0 - test al,al
DD2.exe+4369B12: 0F 84 4C 01 00 00 - je DD2.exe+4369C64
DD2.exe+4369B18: 48 8B 0E - mov rcx,[rsi]
DD2.exe+4369B1B: 48 8B 15 66 A4 5E 0B - mov rdx,[DD2.exe+F953F88]
DD2.exe+4369B22: 48 8B 09 - mov rcx,[rcx]
DD2.exe+4369B25: E8 F6 6F 6F 00 - call DD2.exe+4A60B20
DD2.exe+4369B2A: 45 33 C9 - xor r9d,r9d
DD2.exe+4369B2D: 84 C0 - test al,al
DD2.exe+4369B2F: 41 8B D9 - mov ebx,r9d
DD2.exe+4369B32: 48 0F 45 DE - cmovne rbx,rsi
DD2.exe+4369B36: 48 85 DB - test rbx,rbx
}
12188
"Item use: no change"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/05/01
}
[ENABLE]
aobscanmodule(INJECT_ITEM_NO_DEC,$process,29 73 1C ?? 89 ?? 1C)
// raw AOB: 89 44 24 20 E8 ?? ?? ?? ?? 85 C0 78 ?? 44 8B C0 49 8B D5 48 8B CF E8 ?? ?? ?? ?? 85 F6 74 ?? FF C5 49 FF C6 49 83 C7 08 4C 3B 74 24 38 0F 8C ?? ?? ?? ?? EB ?? 29 73 1C 41 89 75 1C 4C 8B AC 24 80 00 00 00 48 8B 44 24 30 4C 8B 64 24 70 EB ?? 48 8B C5 48 8B 9C 24 88 00 00 00 48 83 C4 40 41 5F 41 5E 5F 5E 5D C3 CC CC CC
// injection point AOB: 29 73 1C 41 89 75 1C 4C 8B AC 24 80 00 00 00 48 8B 44 24 30 4C 8B 64 24 70 EB ?? 48 8B C5 48 8B 9C 24 88 00 00 00 48 83 C4 40 41 5F 41 5E 5F 5E 5D C3 CC CC CC
INJECT_ITEM_NO_DEC:
//db 90 90 90
//db 90 90 90 90
nop 7
registersymbol(INJECT_ITEM_NO_DEC)
[DISABLE]
INJECT_ITEM_NO_DEC:
db 29 73 1C 41 89 75 1C
unregistersymbol(INJECT_ITEM_NO_DEC)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+435E10F
DD2.exe+435E0DA: 89 44 24 20 - mov [rsp+20],eax
DD2.exe+435E0DE: E8 5D 22 BD FE - call DD2.exe+2F30340
DD2.exe+435E0E3: 85 C0 - test eax,eax
DD2.exe+435E0E5: 78 0E - js DD2.exe+435E0F5
DD2.exe+435E0E7: 44 8B C0 - mov r8d,eax
DD2.exe+435E0EA: 49 8B D5 - mov rdx,r13
DD2.exe+435E0ED: 48 8B CF - mov rcx,rdi
DD2.exe+435E0F0: E8 1B EC 0A FC - call DD2.exe+40CD10
DD2.exe+435E0F5: 85 F6 - test esi,esi
DD2.exe+435E0F7: 74 1D - je DD2.exe+435E116
DD2.exe+435E0F9: FF C5 - inc ebp
DD2.exe+435E0FB: 49 FF C6 - inc r14
DD2.exe+435E0FE: 49 83 C7 08 - add r15,08
DD2.exe+435E102: 4C 3B 74 24 38 - cmp r14,[rsp+38]
DD2.exe+435E107: 0F 8C 47 FF FF FF - jl DD2.exe+435E054
DD2.exe+435E10D: EB 07 - jmp DD2.exe+435E116
// ---------- INJECTING HERE ----------
DD2.exe+435E10F: 29 73 1C - sub [rbx+1C],esi
// ---------- DONE INJECTING ----------
DD2.exe+435E112: 41 89 75 1C - mov [r13+1C],esi
DD2.exe+435E116: 4C 8B AC 24 80 00 00 00 - mov r13,[rsp+00000080]
DD2.exe+435E11E: 48 8B 44 24 30 - mov rax,[rsp+30]
DD2.exe+435E123: 4C 8B 64 24 70 - mov r12,[rsp+70]
DD2.exe+435E128: EB 03 - jmp DD2.exe+435E12D
DD2.exe+435E12A: 48 8B C5 - mov rax,rbp
DD2.exe+435E12D: 48 8B 9C 24 88 00 00 00 - mov rbx,[rsp+00000088]
DD2.exe+435E135: 48 83 C4 40 - add rsp,40
DD2.exe+435E139: 41 5F - pop r15
DD2.exe+435E13B: 41 5E - pop r14
DD2.exe+435E13D: 5F - pop rdi
DD2.exe+435E13E: 5E - pop rsi
DD2.exe+435E13F: 5D - pop rbp
DD2.exe+435E140: C3 - ret
DD2.exe+435E141: CC - int 3
DD2.exe+435E142: CC - int 3
}
12189
"Learn skill: JP no decrease"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/05/02
}
[ENABLE]
aobscanmodule(INJECT_JP_LEARN_NO_DEC,$process,2B 48 6C 89 ?? 2C ?? 8B ?? ?? 8B ?? 48 ?? 8B ?? 10 ?? 8B ?? 5C E8 ?? ?? ?? ?? C7 ?? ?? ?? 00 00 00 00 00 3F ?? ?? 14 00 00 00 ?? 8B ?? ?? ?? ?? ?? ?? 8B)
// raw AOB: 48 85 DB 0F 84 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? 48 8B 95 58 01 00 00 49 8B CE E8 ?? ?? ?? ?? 48 85 C0 0F 84 ?? ?? ?? ?? 48 83 78 48 00 0F 84 ?? ?? ?? ?? 48 8B 48 48 48 83 79 10 00 74 ?? 8B 4B 2C 48 8B D7 2B 48 6C 89 4B 2C 49 8B CE 48 8B 40 48 4C 8B 40 10 45 8B 40 5C E8 ?? ?? ?? ?? C7 85 EC 02 00 00 00 00 00 3F 41 B8 14 00 00 00 48 8B 05 ?? ?? ?? ?? 49 8B CE 48 8B D5 C6 80 F0 09 00 00 01 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? 48 8B D3 49 8B CE E8
// injection point AOB: 2B 48 6C 89 4B 2C 49 8B CE 48 8B 40 48 4C 8B 40 10 45 8B 40 5C E8 ?? ?? ?? ?? C7 85 EC 02 00 00 00 00 00 3F 41 B8 14 00 00 00 48 8B 05 ?? ?? ?? ?? 49 8B CE 48 8B D5 C6 80 F0 09 00 00 01 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? 48 8B D3 49 8B CE E8
INJECT_JP_LEARN_NO_DEC:
db 90 90 90
registersymbol(INJECT_JP_LEARN_NO_DEC)
[DISABLE]
INJECT_JP_LEARN_NO_DEC:
db 2B 48 6C
unregistersymbol(INJECT_JP_LEARN_NO_DEC)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+AE600B
DD2.exe+AE5FC5: 48 85 DB - test rbx,rbx
DD2.exe+AE5FC8: 0F 84 F8 08 00 00 - je DD2.exe+AE68C6
DD2.exe+AE5FCE: 48 85 C0 - test rax,rax
DD2.exe+AE5FD1: 0F 84 EF 08 00 00 - je DD2.exe+AE68C6
DD2.exe+AE5FD7: 48 8B 95 58 01 00 00 - mov rdx,[rbp+00000158]
DD2.exe+AE5FDE: 49 8B CE - mov rcx,r14
DD2.exe+AE5FE1: E8 6A 30 7D FF - call DD2.exe+2B9050
DD2.exe+AE5FE6: 48 85 C0 - test rax,rax
DD2.exe+AE5FE9: 0F 84 94 00 00 00 - je DD2.exe+AE6083
DD2.exe+AE5FEF: 48 83 78 48 00 - cmp qword ptr [rax+48],00
DD2.exe+AE5FF4: 0F 84 89 00 00 00 - je DD2.exe+AE6083
DD2.exe+AE5FFA: 48 8B 48 48 - mov rcx,[rax+48]
DD2.exe+AE5FFE: 48 83 79 10 00 - cmp qword ptr [rcx+10],00
DD2.exe+AE6003: 74 7E - je DD2.exe+AE6083
DD2.exe+AE6005: 8B 4B 2C - mov ecx,[rbx+2C]
DD2.exe+AE6008: 48 8B D7 - mov rdx,rdi
// ---------- INJECTING HERE ----------
DD2.exe+AE600B: 2B 48 6C - sub ecx,[rax+6C]
// ---------- DONE INJECTING ----------
DD2.exe+AE600E: 89 4B 2C - mov [rbx+2C],ecx
DD2.exe+AE6011: 49 8B CE - mov rcx,r14
DD2.exe+AE6014: 48 8B 40 48 - mov rax,[rax+48]
DD2.exe+AE6018: 4C 8B 40 10 - mov r8,[rax+10]
DD2.exe+AE601C: 45 8B 40 5C - mov r8d,[r8+5C]
DD2.exe+AE6020: E8 3B E2 B4 01 - call DD2.exe+2634260
DD2.exe+AE6025: C7 85 EC 02 00 00 00 00 00 3F - mov [rbp+000002EC],3F000000
DD2.exe+AE602F: 41 B8 14 00 00 00 - mov r8d,System.Reflection.Metadata.MetadataReader.s_projectionInfos+4
DD2.exe+AE6035: 48 8B 05 24 97 E0 0E - mov rax,[DD2.AK::IAkStreamMgr::m_pStreamMgr+FAD8]
DD2.exe+AE603C: 49 8B CE - mov rcx,r14
DD2.exe+AE603F: 48 8B D5 - mov rdx,rbp
DD2.exe+AE6042: C6 80 F0 09 00 00 01 - mov byte ptr [rax+000009F0],01
DD2.exe+AE6049: E8 12 09 00 00 - call DD2.exe+AE6960
DD2.exe+AE604E: E9 73 08 00 00 - jmp DD2.exe+AE68C6
DD2.exe+AE6053: 48 8B D3 - mov rdx,rbx
DD2.exe+AE6056: 49 8B CE - mov rcx,r14
}
11887
"Get current item amount"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/04/30
}
[ENABLE]
aobscanmodule(INJECT_CUR_ITEM_AMT,$process,?? 0F 10 ?? 20 0F 11 ?? ?? ?? 0F 11 ?? ?? ?? ?? 85 ?? 78 ?? 0F 11 ?? 0F 11 ?? 10 EB ?? ?? 23 ?? ?? 8D ?? 24 ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 8D)
// raw AOB: 45 8B 40 14 E8 ?? ?? ?? ?? 4C 8B C0 48 85 C0 74 ?? 8B 48 08 48 8D 50 10 85 C9 78 ?? 48 B9 00 00 00 00 00 00 00 80 48 0B D1 45 84 F6 0F 95 C0 49 23 D4 88 42 1E 41 0F 10 40 10 41 0F 10 48 20 0F 11 44 24 48 0F 11 4C 24 58 48 85 F6 78 ?? 0F 11 06 0F 11 4E 10 EB ?? 49 23 F4 48 8D 54 24 48 48 8B CE E8 ?? ?? ?? ?? 48 8D 44 24 20 49 23 C4 48 83 38 00 74 ?? 48 8D 44 24 20
// injection point AOB: ?? 0F 10 ?? 20 0F 11 ?? ?? ?? 0F 11 ?? ?? ?? ?? 85 ?? 78 ?? 0F 11 ?? 0F 11 ?? 10 EB ?? ?? 23 ?? ?? 8D ?? 24 ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 8D ?? 24 ?? ?? 23 ?? ?? 83 ?? 00 74 ?? ?? 8D ?? 24
alloc(newmem,$1000)
alloc(INJECT_CUR_ITEM_AMTo, $F)
label(code)
label(return)
label(ptrCapture_INJECT_CUR_ITEM_AMT_408078)
INJECT_CUR_ITEM_AMTo:
readmem(INJECT_CUR_ITEM_AMT, $F)
newmem:
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
mov [ptrCapture_INJECT_CUR_ITEM_AMT_408078], r8
// **** End Auto script: AddressCapture
code:
// movups xmm1,[r8+20]
reassemble(INJECT_CUR_ITEM_AMT)
// movups [rsp+48],xmm0
reassemble(INJECT_CUR_ITEM_AMT+5)
// movups [rsp+58],xmm1
reassemble(INJECT_CUR_ITEM_AMT+A)
jmp far return
align 10 cc
ptrCapture_INJECT_CUR_ITEM_AMT_408078:
dq 0
INJECT_CUR_ITEM_AMT:
jmp far newmem
nop 1
return:
registersymbol(INJECT_CUR_ITEM_AMT INJECT_CUR_ITEM_AMTo)
registersymbol(ptrCapture_INJECT_CUR_ITEM_AMT_408078)
[DISABLE]
INJECT_CUR_ITEM_AMT:
readmem(INJECT_CUR_ITEM_AMTo, $F)
unregistersymbol(INJECT_CUR_ITEM_AMT INJECT_CUR_ITEM_AMTo)
unregistersymbol(ptrCapture_INJECT_CUR_ITEM_AMT_408078)
dealloc(newmem)
dealloc(INJECT_CUR_ITEM_AMTo)
{
// ORIGINAL CODE - INJECTION POINT: DD2.exe+4371AEA
DD2.exe+4371AB0: 45 8B 40 14 - mov r8d,[r8+14]
DD2.exe+4371AB4: E8 47 54 FE FF - call DD2.exe+4356F00
DD2.exe+4371AB9: 4C 8B C0 - mov r8,rax
DD2.exe+4371ABC: 48 85 C0 - test rax,rax
DD2.exe+4371ABF: 74 56 - je DD2.exe+4371B17
DD2.exe+4371AC1: 8B 48 08 - mov ecx,[rax+08]
DD2.exe+4371AC4: 48 8D 50 10 - lea rdx,[rax+10]
DD2.exe+4371AC8: 85 C9 - test ecx,ecx
DD2.exe+4371ACA: 78 0D - js DD2.exe+4371AD9
DD2.exe+4371ACC: 48 B9 00 00 00 00 00 00 00 80 - mov rcx,8000000000000000
DD2.exe+4371AD6: 48 0B D1 - or rdx,rcx
DD2.exe+4371AD9: 45 84 F6 - test r14b,r14b
DD2.exe+4371ADC: 0F 95 C0 - setne al
DD2.exe+4371ADF: 49 23 D4 - and rdx,r12
DD2.exe+4371AE2: 88 42 1E - mov [rdx+1E],al
DD2.exe+4371AE5: 41 0F 10 40 10 - movups xmm0,[r8+10]
// ---------- INJECTING HERE ----------
DD2.exe+4371AEA: 41 0F 10 48 20 - movups xmm1,[r8+20]
// ---------- DONE INJECTING ----------
DD2.exe+4371AEF: 0F 11 44 24 48 - movups [rsp+48],xmm0
DD2.exe+4371AF4: 0F 11 4C 24 58 - movups [rsp+58],xmm1
DD2.exe+4371AF9: 48 85 F6 - test rsi,rsi
DD2.exe+4371AFC: 78 09 - js DD2.exe+4371B07
DD2.exe+4371AFE: 0F 11 06 - movups [rsi],xmm0
DD2.exe+4371B01: 0F 11 4E 10 - movups [rsi+10],xmm1
DD2.exe+4371B05: EB 10 - jmp DD2.exe+4371B17
DD2.exe+4371B07: 49 23 F4 - and rsi,r12
DD2.exe+4371B0A: 48 8D 54 24 48 - lea rdx,[rsp+48]
DD2.exe+4371B0F: 48 8B CE - mov rcx,rsi
DD2.exe+4371B12: E8 19 0A ED FB - call DD2.exe+242530
DD2.exe+4371B17: 48 8D 44 24 20 - lea rax,[rsp+20]
DD2.exe+4371B1C: 49 23 C4 - and rax,r12
DD2.exe+4371B1F: 48 83 38 00 - cmp qword ptr [rax],00
DD2.exe+4371B23: 74 72 - je DD2.exe+4371B97
DD2.exe+4371B25: 48 8D 44 24 20 - lea rax,[rsp+20]
}
11888
"ID?"
0
FF8080
2 Bytes
ptrCapture_INJECT_CUR_ITEM_AMT_408078
28
11893
"Stock"
0
FF8080
2 Bytes
ptrCapture_INJECT_CUR_ITEM_AMT_408078
2A
131
"app.CharacterManager (Player)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='CharacterManager', aob='?? 8B ?? ?? ?? ?? ?? ?? 8B ?? ?? 8B ?? ?? 8B ?? ?? 8B ?? E0 01 00 00 ?? 8D', pos=3, aoblen=7, symbol='CharacterManager_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('CharacterManager_addr')
{$asm}
132
"base (May need to wait for seconds)"
1
0
8 Bytes
CharacterManager_addr
0
101
"<ManualPlayerPlayer>k__BackingField"
1
0
1
+28
0
102
"app.Human (Human)"
1
0
1
+130
0
157
"<JobContext>k__BackingField"
1
0
1
+3B0
0
238
"EquipedArmors"
1
0
1
+18
0
239
"[0] [app.JobContext.EquipedArmor]"
1
0
1
+20
0
240
"RightWeapon"
0
4 Bytes
+10
241
"LeftWeapon"
0
4 Bytes
+14
242
"TopsStyle"
0
4 Bytes
+18
243
"PantsStyle"
0
4 Bytes
+1C
244
"HelmStyle"
0
4 Bytes
+20
245
"MantleStyle"
0
4 Bytes
+24
246
"[1] [app.JobContext.EquipedArmor]"
1
0
1
+28
0
247
"RightWeapon"
0
4 Bytes
+10
248
"LeftWeapon"
0
4 Bytes
+14
249
"TopsStyle"
0
4 Bytes
+18
250
"PantsStyle"
0
4 Bytes
+1C
251
"HelmStyle"
0
4 Bytes
+20
252
"MantleStyle"
0
4 Bytes
+24
253
"[2] [app.JobContext.EquipedArmor]"
1
0
1
+30
0
254
"RightWeapon"
0
4 Bytes
+10
255
"LeftWeapon"
0
4 Bytes
+14
256
"TopsStyle"
0
4 Bytes
+18
257
"PantsStyle"
0
4 Bytes
+1C
258
"HelmStyle"
0
4 Bytes
+20
259
"MantleStyle"
0
4 Bytes
+24
126
"[3] [app.JobContext.EquipedArmor]"
1
0
1
+38
0
127
"RightWeapon"
0
4 Bytes
+10
128
"LeftWeapon"
0
4 Bytes
+14
129
"TopsStyle"
0
4 Bytes
+18
130
"PantsStyle"
0
4 Bytes
+1C
260
"HelmStyle"
0
4 Bytes
+20
261
"MantleStyle"
0
4 Bytes
+24
133
"[4] [app.JobContext.EquipedArmor]"
1
0
1
+40
0
134
"RightWeapon"
0
4 Bytes
+10
262
"LeftWeapon"
0
4 Bytes
+14
136
"TopsStyle"
0
4 Bytes
+18
137
"PantsStyle"
0
4 Bytes
+1C
263
"HelmStyle"
0
4 Bytes
+20
139
"MantleStyle"
0
4 Bytes
+24
140
"[5] [app.JobContext.EquipedArmor]"
1
0
1
+48
0
264
"RightWeapon"
0
4 Bytes
+10
142
"LeftWeapon"
0
4 Bytes
+14
143
"TopsStyle"
0
4 Bytes
+18
144
"PantsStyle"
0
4 Bytes
+1C
265
"HelmStyle"
0
4 Bytes
+20
146
"MantleStyle"
0
4 Bytes
+24
147
"[6] [app.JobContext.EquipedArmor]"
1
0
1
+50
0
148
"RightWeapon"
0
4 Bytes
+10
266
"LeftWeapon"
0
4 Bytes
+14
267
"TopsStyle"
0
4 Bytes
+18
268
"PantsStyle"
0
4 Bytes
+1C
269
"HelmStyle"
0
4 Bytes
+20
270
"MantleStyle"
0
4 Bytes
+24
271
"[7] [app.JobContext.EquipedArmor]"
1
0
1
+58
0
155
"RightWeapon"
0
4 Bytes
+10
156
"LeftWeapon"
0
4 Bytes
+14
272
"TopsStyle"
0
4 Bytes
+18
273
"PantsStyle"
0
4 Bytes
+1C
159
"HelmStyle"
0
4 Bytes
+20
160
"MantleStyle"
0
4 Bytes
+24
161
"[8] [app.JobContext.EquipedArmor]"
1
0
1
+60
0
162
"RightWeapon"
0
4 Bytes
+10
163
"LeftWeapon"
0
4 Bytes
+14
164
"TopsStyle"
0
4 Bytes
+18
165
"PantsStyle"
0
4 Bytes
+1C
166
"HelmStyle"
0
4 Bytes
+20
167
"MantleStyle"
0
4 Bytes
+24
168
"[9] [app.JobContext.EquipedArmor]"
1
0
1
+68
0
169
"RightWeapon"
0
4 Bytes
+10
170
"LeftWeapon"
0
4 Bytes
+14
171
"TopsStyle"
0
4 Bytes
+18
172
"PantsStyle"
0
4 Bytes
+1C
173
"HelmStyle"
0
4 Bytes
+20
174
"MantleStyle"
0
4 Bytes
+24
175
"[10] [app.JobContext.EquipedArmor]"
1
0
1
+70
0
176
"RightWeapon"
0
4 Bytes
+10
177
"LeftWeapon"
0
4 Bytes
+14
178
"TopsStyle"
0
4 Bytes
+18
179
"PantsStyle"
0
4 Bytes
+1C
180
"HelmStyle"
0
4 Bytes
+20
181
"MantleStyle"
0
4 Bytes
+24
220
"CulmativeExp [System.Int32 x10]"
1
0
1
+20
0
221
"[0]"
1
4 Bytes
+20
222
"[1]"
1
4 Bytes
+24
223
"[2]"
1
4 Bytes
+28
224
"[3]"
1
4 Bytes
+2C
225
"[4]"
1
4 Bytes
+30
226
"[5]"
1
4 Bytes
+34
227
"[6]"
1
4 Bytes
+38
228
"[7]"
1
4 Bytes
+3C
229
"[8]"
1
4 Bytes
+40
230
"[9]"
1
4 Bytes
+44
158
"CurrentJob"
0
4 Bytes
+28
231
"ConsumableExp"
1
4 Bytes
+2C
232
"ChangedJobBits"
0
4 Bytes
+30
233
"QualifiedJobBits"
0
4 Bytes
+34
234
"ViewedNewJobBits"
0
4 Bytes
+38
103
"<StatusContext>k__BackingField"
1
0
1
+3B8
0
284
"_IncreaseParams"
1
0
1
+20
0
285
"ReadOnly"
0
Byte
+31
286
"IsCapHitPoint"
0
Byte
+32
287
"IsCapStamina"
0
Byte
+33
288
"IsCapAttack"
0
Byte
+34
289
"IsCapDefence"
0
Byte
+35
290
"IsCapMagicAttack"
0
Byte
+36
291
"IsCapMagicDefence"
0
Byte
+37
292
"IsCapWeight"
0
Byte
+38
293
"IsCapBlow"
0
Byte
+30
294
"_HitPoint"
1
4 Bytes
+10
295
"_Stamina"
1
4 Bytes
+14
296
"_Attack"
1
4 Bytes
+18
297
"_Defence"
1
4 Bytes
+1C
298
"_MagicAttack"
1
4 Bytes
+20
299
"_MagicDefence"
1
4 Bytes
+24
300
"_Weight"
1
4 Bytes
+28
301
"_Blow"
1
4 Bytes
+2C
105
"_Level"
1
4 Bytes
+2C
106
"_Exp"
1
4 Bytes
+28
107
"_IncreaseParams [app.IncreaseStatus]"
1
0
1
+20
0
108
"ReadOnly"
0
Byte
+31
109
"IsCapHitPoint"
0
Byte
+32
110
"IsCapStamina"
0
Byte
+33
111
"IsCapAttack"
0
Byte
+34
112
"IsCapDefence"
0
Byte
+35
113
"IsCapMagicAttack"
0
Byte
+36
114
"IsCapMagicDefence"
0
Byte
+37
115
"IsCapWeight"
0
Byte
+38
116
"IsCapBlow"
0
Byte
+30
117
"_HitPoint"
1
4 Bytes
+10
118
"_Stamina"
1
4 Bytes
+14
119
"_Attack"
1
4 Bytes
+18
120
"_Defence"
1
4 Bytes
+1C
121
"_MagicAttack"
1
4 Bytes
+20
122
"_MagicDefence"
1
4 Bytes
+24
123
"_Weight"
1
4 Bytes
+28
124
"_Blow"
1
4 Bytes
+2C
125
"_ItemIncreaseWeight"
0
Float
+30
135
"BodyHeight"
0
Float
+5F0
138
"BodyWeight"
0
Float
+5F4
141
"Hit"
1
0
1
+98
0
104
"<IsInvincible>k__BackingField"
0
Byte
+446
145
"<ReducedMaxHp>k__BackingField"
0
Float
+41C
149
"<NoDamageTimer>k__BackingField"
1
0
1
+E8
0
150
"_ElapsedFrame"
0
Float
+10
151
"_LeftFrame"
0
Float
+14
152
"_FinishFrame"
0
Float
+18
153
"_Ratio"
0
Float
+1C
154
"_IsFinish"
0
Binary
0
1
0
+20
12099
"<MinRatioReducedMaxHp>k__BackingField"
0
Float
+424
1211
"<HumanParam>k__BackingField"
1
0
1
+60
0
1212
"LVupInfoParam"
1
0
1
+20
0
11695
"GrouthRate"
1
0
1
+28
0
11696
"_items [app.JobStatusParam x10]"
1
0
1
+10
0
11697
"[0] [app.JobStatusParam]"
1
0
1
+20
0
11698
"Job"
0
4 Bytes
+10
11699
"Hitpoint"
0
Float
+14
11700
"Stamina"
0
Float
+18
11701
"Attack"
0
Float
+1C
11702
"Defence"
0
Float
+20
11703
"MagicAttack"
0
Float
+24
11704
"MagicDefence"
0
Float
+28
11705
"Weight"
0
Float
+2C
11706
"Blow"
0
Float
+30
11707
"BlowResistance"
0
Float
+34
11708
"[1] [app.JobStatusParam]"
1
0
1
+28
0
11709
"Job"
0
4 Bytes
+10
11710
"Hitpoint"
0
Float
+14
11711
"Stamina"
0
Float
+18
11712
"Attack"
0
Float
+1C
11713
"Defence"
0
Float
+20
11714
"MagicAttack"
0
Float
+24
11715
"MagicDefence"
0
Float
+28
11716
"Weight"
0
Float
+2C
11717
"Blow"
0
Float
+30
11718
"BlowResistance"
0
Float
+34
11719
"[2] [app.JobStatusParam]"
1
0
1
+30
0
11720
"Job"
0
4 Bytes
+10
11721
"Hitpoint"
0
Float
+14
11722
"Stamina"
0
Float
+18
11723
"Attack"
0
Float
+1C
11724
"Defence"
0
Float
+20
11725
"MagicAttack"
0
Float
+24
11726
"MagicDefence"
0
Float
+28
11727
"Weight"
0
Float
+2C
11728
"Blow"
0
Float
+30
11729
"BlowResistance"
0
Float
+34
11730
"[3] [app.JobStatusParam]"
1
0
1
+38
0
11731
"Job"
0
4 Bytes
+10
11732
"Hitpoint"
0
Float
+14
11733
"Stamina"
0
Float
+18
11734
"Attack"
0
Float
+1C
11735
"Defence"
0
Float
+20
11736
"MagicAttack"
0
Float
+24
11737
"MagicDefence"
0
Float
+28
11738
"Weight"
0
Float
+2C
11739
"Blow"
0
Float
+30
11740
"BlowResistance"
0
Float
+34
11741
"[4] [app.JobStatusParam]"
1
0
1
+40
0
11742
"Job"
0
4 Bytes
+10
11743
"Hitpoint"
0
Float
+14
11744
"Stamina"
0
Float
+18
11745
"Attack"
0
Float
+1C
11746
"Defence"
0
Float
+20
11747
"MagicAttack"
0
Float
+24
11748
"MagicDefence"
0
Float
+28
11749
"Weight"
0
Float
+2C
11750
"Blow"
0
Float
+30
11751
"BlowResistance"
0
Float
+34
11752
"[5] [app.JobStatusParam]"
1
0
1
+48
0
11753
"Job"
0
4 Bytes
+10
11754
"Hitpoint"
0
Float
+14
11755
"Stamina"
0
Float
+18
11756
"Attack"
0
Float
+1C
11757
"Defence"
0
Float
+20
11758
"MagicAttack"
0
Float
+24
11759
"MagicDefence"
0
Float
+28
11760
"Weight"
0
Float
+2C
11761
"Blow"
0
Float
+30
11762
"BlowResistance"
0
Float
+34
11763
"[6] [app.JobStatusParam]"
1
0
1
+50
0
11764
"Job"
0
4 Bytes
+10
11765
"Hitpoint"
0
Float
+14
11766
"Stamina"
0
Float
+18
11767
"Attack"
0
Float
+1C
11768
"Defence"
0
Float
+20
11769
"MagicAttack"
0
Float
+24
11770
"MagicDefence"
0
Float
+28
11771
"Weight"
0
Float
+2C
11772
"Blow"
0
Float
+30
11773
"BlowResistance"
0
Float
+34
11774
"[7] [app.JobStatusParam]"
1
0
1
+58
0
11775
"Job"
0
4 Bytes
+10
11776
"Hitpoint"
0
Float
+14
11777
"Stamina"
0
Float
+18
11778
"Attack"
0
Float
+1C
11779
"Defence"
0
Float
+20
11780
"MagicAttack"
0
Float
+24
11781
"MagicDefence"
0
Float
+28
11782
"Weight"
0
Float
+2C
11783
"Blow"
0
Float
+30
11784
"BlowResistance"
0
Float
+34
11785
"[8] [app.JobStatusParam]"
1
0
1
+60
0
11786
"Job"
0
4 Bytes
+10
11787
"Hitpoint"
0
Float
+14
11788
"Stamina"
0
Float
+18
11789
"Attack"
0
Float
+1C
11790
"Defence"
0
Float
+20
11791
"MagicAttack"
0
Float
+24
11792
"MagicDefence"
0
Float
+28
11793
"Weight"
0
Float
+2C
11794
"Blow"
0
Float
+30
11795
"BlowResistance"
0
Float
+34
11796
"[9] [app.JobStatusParam]"
1
0
1
+68
0
11797
"Job"
0
4 Bytes
+10
11798
"Hitpoint"
0
Float
+14
11799
"Stamina"
0
Float
+18
11800
"Attack"
0
Float
+1C
11801
"Defence"
0
Float
+20
11802
"MagicAttack"
0
Float
+24
11803
"MagicDefence"
0
Float
+28
11804
"Weight"
0
Float
+2C
11805
"Blow"
0
Float
+30
11806
"BlowResistance"
0
Float
+34
11807
"_size"
1
4 Bytes
+18
11808
"_version"
1
4 Bytes
+1C
11682
"CapLVupParam"
1
0
1
+40
0
11683
"Job"
0
4 Bytes
+10
11684
"Hitpoint"
0
Float
+14
11685
"Stamina"
0
Float
+18
11686
"Attack"
0
Float
+1C
11687
"Defence"
0
Float
+20
11688
"MagicAttack"
0
Float
+24
11689
"MagicDefence"
0
Float
+28
11690
"Weight"
0
Float
+2C
11691
"Blow"
0
Float
+30
11692
"BlowResistance"
0
Float
+34
11952
"JobCorrection"
1
0
1
+30
0
11953
"_items [app.JobStatusParam x10]"
1
0
1
+10
0
11954
"[0] [app.JobStatusParam]"
1
0
1
+20
0
11955
"Job"
0
4 Bytes
+10
11956
"Hitpoint"
0
Float
+14
11957
"Stamina"
0
Float
+18
11958
"Attack"
0
Float
+1C
11959
"Defence"
0
Float
+20
11960
"MagicAttack"
0
Float
+24
11961
"MagicDefence"
0
Float
+28
11962
"Weight"
0
Float
+2C
11963
"Blow"
0
Float
+30
11964
"BlowResistance"
0
Float
+34
11965
"[1] [app.JobStatusParam]"
1
0
1
+28
0
11966
"Job"
0
4 Bytes
+10
11967
"Hitpoint"
0
Float
+14
11968
"Stamina"
0
Float
+18
11969
"Attack"
0
Float
+1C
11970
"Defence"
0
Float
+20
11971
"MagicAttack"
0
Float
+24
11972
"MagicDefence"
0
Float
+28
11973
"Weight"
0
Float
+2C
11974
"Blow"
0
Float
+30
11975
"BlowResistance"
0
Float
+34
11976
"[2] [app.JobStatusParam]"
1
0
1
+30
0
11977
"Job"
0
4 Bytes
+10
11978
"Hitpoint"
0
Float
+14
11979
"Stamina"
0
Float
+18
11980
"Attack"
0
Float
+1C
11981
"Defence"
0
Float
+20
11982
"MagicAttack"
0
Float
+24
11983
"MagicDefence"
0
Float
+28
11984
"Weight"
0
Float
+2C
11985
"Blow"
0
Float
+30
11986
"BlowResistance"
0
Float
+34
11987
"[3] [app.JobStatusParam]"
1
0
1
+38
0
11988
"Job"
0
4 Bytes
+10
11989
"Hitpoint"
0
Float
+14
11990
"Stamina"
0
Float
+18
11991
"Attack"
0
Float
+1C
11992
"Defence"
0
Float
+20
11993
"MagicAttack"
0
Float
+24
11994
"MagicDefence"
0
Float
+28
11995
"Weight"
0
Float
+2C
11996
"Blow"
0
Float
+30
11997
"BlowResistance"
0
Float
+34
11998
"[4] [app.JobStatusParam]"
1
0
1
+40
0
11999
"Job"
0
4 Bytes
+10
12000
"Hitpoint"
0
Float
+14
12001
"Stamina"
0
Float
+18
12002
"Attack"
0
Float
+1C
12003
"Defence"
0
Float
+20
12004
"MagicAttack"
0
Float
+24
12005
"MagicDefence"
0
Float
+28
12006
"Weight"
0
Float
+2C
12007
"Blow"
0
Float
+30
12008
"BlowResistance"
0
Float
+34
12009
"[5] [app.JobStatusParam]"
1
0
1
+48
0
12010
"Job"
0
4 Bytes
+10
12011
"Hitpoint"
0
Float
+14
12012
"Stamina"
0
Float
+18
12013
"Attack"
0
Float
+1C
12014
"Defence"
0
Float
+20
12015
"MagicAttack"
0
Float
+24
12016
"MagicDefence"
0
Float
+28
12017
"Weight"
0
Float
+2C
12018
"Blow"
0
Float
+30
12019
"BlowResistance"
0
Float
+34
12020
"[6] [app.JobStatusParam]"
1
0
1
+50
0
12021
"Job"
0
4 Bytes
+10
12022
"Hitpoint"
0
Float
+14
12023
"Stamina"
0
Float
+18
12024
"Attack"
0
Float
+1C
12025
"Defence"
0
Float
+20
12026
"MagicAttack"
0
Float
+24
12027
"MagicDefence"
0
Float
+28
12028
"Weight"
0
Float
+2C
12029
"Blow"
0
Float
+30
12030
"BlowResistance"
0
Float
+34
12031
"[7] [app.JobStatusParam]"
1
0
1
+58
0
12032
"Job"
0
4 Bytes
+10
12033
"Hitpoint"
0
Float
+14
12034
"Stamina"
0
Float
+18
12035
"Attack"
0
Float
+1C
12036
"Defence"
0
Float
+20
12037
"MagicAttack"
0
Float
+24
12038
"MagicDefence"
0
Float
+28
12039
"Weight"
0
Float
+2C
12040
"Blow"
0
Float
+30
12041
"BlowResistance"
0
Float
+34
12042
"[8] [app.JobStatusParam]"
1
0
1
+60
0
12043
"Job"
0
4 Bytes
+10
12044
"Hitpoint"
0
Float
+14
12045
"Stamina"
0
Float
+18
12046
"Attack"
0
Float
+1C
12047
"Defence"
0
Float
+20
12048
"MagicAttack"
0
Float
+24
12049
"MagicDefence"
0
Float
+28
12050
"Weight"
0
Float
+2C
12051
"Blow"
0
Float
+30
12052
"BlowResistance"
0
Float
+34
12053
"[9] [app.JobStatusParam]"
1
0
1
+68
0
12054
"Job"
0
4 Bytes
+10
12055
"Hitpoint"
0
Float
+14
12056
"Stamina"
0
Float
+18
12057
"Attack"
0
Float
+1C
12058
"Defence"
0
Float
+20
12059
"MagicAttack"
0
Float
+24
12060
"MagicDefence"
0
Float
+28
12061
"Weight"
0
Float
+2C
12062
"Blow"
0
Float
+30
12063
"BlowResistance"
0
Float
+34
12064
"_size"
1
4 Bytes
+18
12065
"_version"
1
4 Bytes
+1C
11838
"app.HumanActionParameter"
1
0
1
+28
0
11839
"JumpParam"
1
0
1
+28
0
11840
"MaxRootHeight"
0
Float
+44
11841
"MaxRootHeightOnCarry"
0
Float
+48
11842
"MaxRootHeightOnCarryObject"
0
Float
+4C
11843
"MinAngleDegOfTurnMotionBeforeTakeOff"
0
Float
+54
11844
"MotionSpeedTurn"
0
Float
+58
11845
"MaxAngleDegOfTurnToTakeOff"
0
Float
+5C
11846
"AttenuateFactorLeftRight"
0
Float
+40
11847
"AttenuateFactorFrontBack"
0
Float
+50
11864
"HeightCorrectTrajectory"
0
Float
+60
11865
"DistanceXZCorrectTrajectory"
0
Float
+64
11866
"HeightEnableLanding"
0
Float
+68
11867
"DistanceXZEnableLanding"
0
Float
+6C
11868
"HeightVerticalLanding"
0
Float
+70
11869
"JumpEndOffsetHeight"
0
Float
+74
11907
"ClimbWallParam"
1
0
1
+30
0
11908
"LowHeightOnGround"
0
Float
+68
11909
"MiddleHeightOnWalkGround"
0
Float
+20
11910
"MiddleHeightOnGround"
0
Float
+24
11911
"HighHeightOnGround"
0
Float
+28
11912
"MaxHeightOnGround"
0
Float
+2C
11913
"MaxHeightOnGroundAndCarry"
0
Float
+30
11914
"MinHeightOnAir"
0
Float
+34
11915
"MaxFallHeightOfLowHeightClimbOnAir"
0
Float
+38
11916
"MinHeightOnAirBack"
0
Float
+3C
11917
"MiddleHeightOnAir"
0
Float
+40
11918
"HighHeightOnAir"
0
Float
+44
11919
"MaxHeightOnAir"
0
Float
+48
11920
"MaxDistanceOnAir"
0
Float
+4C
11921
"MaxDistanceOnAirBack"
0
Float
+50
11922
"MaxHeightOnRunup"
0
Float
+54
11923
"MaxDistanceOnRunup"
0
Float
+58
11924
"HeightCeilingOnRunupWall"
0
Float
+5C
11925
"HeightOnRunupWall"
0
Float
+60
11926
"CheckDistanceOnRunupWall"
0
Float
+64
11927
"OffsetRunupToWall"
1
0
8 Bytes
+10
11928
"MaxEnableFallHeight"
0
Float
+6C
11929
"DiffAngleDegYToClimbLowWallStraight"
0
Float
+70
11930
"SecToClimbAliveCharacter"
0
Float
+74
11931
"SecToClimbDeadCharacter"
0
Float
+78
11874
"NonPlayerAttackRatioParam"
1
0
1
+108
0
11875
"DamageRatioByPartyPawn"
0
Float
+10
11876
"DamageRatioByStrayPawn"
0
Float
+14
11877
"DamageRatioByNPC"
0
Float
+18
11934
"ReduceMaxHpParam"
1
0
1
+C8
0
11935
"MinRateMaxHp"
0
Float
+1C
11936
"DefaultReduceRate"
0
Float
+18
11939
"HealAmountParam"
1
0
1
+100
0
11940
"FixedAmount"
0
Float
+10
11941
"FixedAmountRate"
0
Float
+14
11942
"CorrectionAmountRate"
0
Float
+18
11943
"RealCorrectionAmountRate"
0
Float
+1C
11946
"NonPlayerAttackRatioParam"
1
0
1
+108
0
11947
"DamageRatioByPartyPawn"
0
Float
+10
11948
"DamageRatioByStrayPawn"
0
Float
+14
11949
"DamageRatioByNPC"
0
Float
+18
302
"<CharacterExperiencePointsTable>k__BackingField"
1
0
1
+D8
0
805
"PlayerAdjustData [app.PlayerExpAdjustData]"
1
0
1
+30
0
806
"AdjustValOnlyPlayer"
0
Float
+24
807
"AdjustValPlayerOnePawn"
0
Float
+18
808
"AdjustValPlayerTwoPawn"
0
Float
+1C
809
"AdjustValPlayerThreePawn"
0
Float
+20
810
"SubPawnLevelDiffAdjustList [System.Collections.Generic.List`1<app.CharacterExperiencePointsTable.LevelDifferenceAdjustment>]"
1
0
1
+10
0
811
"_items [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment x20]"
1
0
1
+10
0
812
"[0] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452A50
813
"LevelDifference"
1
4 Bytes
+10
814
"AdjustValue"
0
Float
+14
815
"[1] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452A70
816
"LevelDifference"
1
4 Bytes
+10
817
"AdjustValue"
0
Float
+14
818
"[2] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452A90
819
"LevelDifference"
1
4 Bytes
+10
820
"AdjustValue"
0
Float
+14
821
"[3] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452AB0
822
"LevelDifference"
1
4 Bytes
+10
823
"AdjustValue"
0
Float
+14
824
"[4] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452AD0
825
"LevelDifference"
1
4 Bytes
+10
826
"AdjustValue"
0
Float
+14
827
"[5] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452AF0
828
"LevelDifference"
1
4 Bytes
+10
829
"AdjustValue"
0
Float
+14
830
"[6] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452B10
831
"LevelDifference"
1
4 Bytes
+10
832
"AdjustValue"
0
Float
+14
833
"[7] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452B30
834
"LevelDifference"
1
4 Bytes
+10
835
"AdjustValue"
0
Float
+14
836
"[8] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452B50
837
"LevelDifference"
1
4 Bytes
+10
838
"AdjustValue"
0
Float
+14
839
"[9] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452B70
840
"LevelDifference"
1
4 Bytes
+10
841
"AdjustValue"
0
Float
+14
842
"[10] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452B90
843
"LevelDifference"
1
4 Bytes
+10
844
"AdjustValue"
0
Float
+14
845
"[11] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452BB0
846
"LevelDifference"
1
4 Bytes
+10
847
"AdjustValue"
0
Float
+14
848
"[12] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452BD0
849
"LevelDifference"
1
4 Bytes
+10
850
"AdjustValue"
0
Float
+14
851
"[13] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452BF0
852
"LevelDifference"
1
4 Bytes
+10
853
"AdjustValue"
0
Float
+14
854
"[14] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452C10
855
"LevelDifference"
1
4 Bytes
+10
856
"AdjustValue"
0
Float
+14
857
"[15] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452C30
858
"LevelDifference"
1
4 Bytes
+10
859
"AdjustValue"
0
Float
+14
860
"[16] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452C50
861
"LevelDifference"
1
4 Bytes
+10
862
"AdjustValue"
0
Float
+14
863
"[17] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452C70
864
"LevelDifference"
1
4 Bytes
+10
865
"AdjustValue"
0
Float
+14
866
"[18] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452C90
867
"LevelDifference"
1
4 Bytes
+10
868
"AdjustValue"
0
Float
+14
869
"[19] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452CB0
870
"LevelDifference"
1
4 Bytes
+10
871
"AdjustValue"
0
Float
+14
872
"_size"
1
4 Bytes
+18
873
"_version"
1
4 Bytes
+1C
876
"LevelDifferenceAdjustList [System.Collections.Generic.List`1<app.CharacterExperiencePointsTable.LevelDifferenceAdjustment>]"
1
0
1
+40
0
877
"_items [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment x41]"
1
0
1
+10
0
878
"[0] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452D40
879
"LevelDifference"
1
4 Bytes
+10
880
"AdjustValue"
0
Float
+14
881
"[1] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452D60
882
"LevelDifference"
1
4 Bytes
+10
883
"AdjustValue"
0
Float
+14
884
"[2] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452D80
885
"LevelDifference"
1
4 Bytes
+10
886
"AdjustValue"
0
Float
+14
887
"[3] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452DA0
888
"LevelDifference"
1
4 Bytes
+10
889
"AdjustValue"
0
Float
+14
890
"[4] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452DC0
891
"LevelDifference"
1
4 Bytes
+10
892
"AdjustValue"
0
Float
+14
893
"[5] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452DE0
894
"LevelDifference"
1
4 Bytes
+10
895
"AdjustValue"
0
Float
+14
896
"[6] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452E00
897
"LevelDifference"
1
4 Bytes
+10
898
"AdjustValue"
0
Float
+14
899
"[7] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452E20
900
"LevelDifference"
1
4 Bytes
+10
901
"AdjustValue"
0
Float
+14
902
"[8] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452E40
903
"LevelDifference"
1
4 Bytes
+10
904
"AdjustValue"
0
Float
+14
905
"[9] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452E60
906
"LevelDifference"
1
4 Bytes
+10
907
"AdjustValue"
0
Float
+14
908
"[10] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452E80
909
"LevelDifference"
1
4 Bytes
+10
910
"AdjustValue"
0
Float
+14
911
"[11] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452EA0
912
"LevelDifference"
1
4 Bytes
+10
913
"AdjustValue"
0
Float
+14
914
"[12] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452EC0
915
"LevelDifference"
1
4 Bytes
+10
916
"AdjustValue"
0
Float
+14
917
"[13] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452EE0
918
"LevelDifference"
1
4 Bytes
+10
919
"AdjustValue"
0
Float
+14
920
"[14] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452F00
921
"LevelDifference"
1
4 Bytes
+10
922
"AdjustValue"
0
Float
+14
923
"[15] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452F20
924
"LevelDifference"
1
4 Bytes
+10
925
"AdjustValue"
0
Float
+14
926
"[16] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452F40
927
"LevelDifference"
1
4 Bytes
+10
928
"AdjustValue"
0
Float
+14
929
"[17] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452F60
930
"LevelDifference"
1
4 Bytes
+10
931
"AdjustValue"
0
Float
+14
932
"[18] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452F80
933
"LevelDifference"
1
4 Bytes
+10
934
"AdjustValue"
0
Float
+14
935
"[19] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E452FA0
936
"LevelDifference"
1
4 Bytes
+10
937
"AdjustValue"
0
Float
+14
938
"[20] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453020
939
"LevelDifference"
1
4 Bytes
+10
940
"AdjustValue"
0
Float
+14
941
"[21] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453040
942
"LevelDifference"
1
4 Bytes
+10
943
"AdjustValue"
0
Float
+14
944
"[22] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453060
945
"LevelDifference"
1
4 Bytes
+10
946
"AdjustValue"
0
Float
+14
947
"[23] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453080
948
"LevelDifference"
1
4 Bytes
+10
949
"AdjustValue"
0
Float
+14
950
"[24] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4530A0
951
"LevelDifference"
1
4 Bytes
+10
952
"AdjustValue"
0
Float
+14
953
"[25] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4530C0
954
"LevelDifference"
1
4 Bytes
+10
955
"AdjustValue"
0
Float
+14
956
"[26] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4530E0
957
"LevelDifference"
1
4 Bytes
+10
958
"AdjustValue"
0
Float
+14
959
"[27] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453100
960
"LevelDifference"
1
4 Bytes
+10
961
"AdjustValue"
0
Float
+14
962
"[28] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453120
963
"LevelDifference"
1
4 Bytes
+10
964
"AdjustValue"
0
Float
+14
965
"[29] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453140
966
"LevelDifference"
1
4 Bytes
+10
967
"AdjustValue"
0
Float
+14
968
"[30] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453160
969
"LevelDifference"
1
4 Bytes
+10
970
"AdjustValue"
0
Float
+14
971
"[31] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453180
972
"LevelDifference"
1
4 Bytes
+10
973
"AdjustValue"
0
Float
+14
974
"[32] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4531A0
975
"LevelDifference"
1
4 Bytes
+10
976
"AdjustValue"
0
Float
+14
977
"[33] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4531C0
978
"LevelDifference"
1
4 Bytes
+10
979
"AdjustValue"
0
Float
+14
980
"[34] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4531E0
981
"LevelDifference"
1
4 Bytes
+10
982
"AdjustValue"
0
Float
+14
983
"[35] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453200
984
"LevelDifference"
1
4 Bytes
+10
985
"AdjustValue"
0
Float
+14
986
"[36] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453220
987
"LevelDifference"
1
4 Bytes
+10
988
"AdjustValue"
0
Float
+14
989
"[37] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453240
990
"LevelDifference"
1
4 Bytes
+10
991
"AdjustValue"
0
Float
+14
992
"[38] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453260
993
"LevelDifference"
1
4 Bytes
+10
994
"AdjustValue"
0
Float
+14
995
"[39] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E453280
996
"LevelDifference"
1
4 Bytes
+10
997
"AdjustValue"
0
Float
+14
998
"[40] [app.CharacterExperiencePointsTable.LevelDifferenceAdjustment]"
1
0
1
6E4532A0
999
"LevelDifference"
1
4 Bytes
+10
1000
"AdjustValue"
0
Float
+14
1001
"_size"
1
4 Bytes
+18
1002
"_version"
1
4 Bytes
+1C
804
"DefaultQuestNpcExp"
1
4 Bytes
+48
303
"DefaultExp"
1
4 Bytes
+4C
1003
"DeathByFallDistance"
0
Float
+50
1004
"IsInCloseRangeOfPL"
0
Float
+54
1005
"_MaxExpRateCompanionNPC"
0
Float
+58
1006
"_MaxExpRateStrayPawn"
0
Float
+5C
1007
"_MaxExpRateStrayPawnPLNoDmg"
0
Float
+60
1008
"_MinDamageRateRequiredByPL"
0
Float
+64
1009
"_CloseToDecoyDist"
0
Float
+68
1010
"app.JobStatusParamHolder"
1
0
1
+238
0
1011
"JobStatusParams"
1
0
1
+10
0
1012
"[0] [app.JobStatusParam]"
1
0
1
+20
0
1013
"Job"
0
4 Bytes
+10
1014
"Hitpoint"
0
Float
+14
1015
"Stamina"
0
Float
+18
1016
"Attack"
0
Float
+1C
1017
"Defence"
0
Float
+20
1018
"MagicAttack"
0
Float
+24
1019
"MagicDefence"
0
Float
+28
1020
"Weight"
0
Float
+2C
1021
"Blow"
0
Float
+30
1022
"BlowResistance"
0
Float
+34
1023
"[1] [app.JobStatusParam]"
1
0
1
+28
0
1024
"Job"
0
4 Bytes
+10
1025
"Hitpoint"
0
Float
+14
1026
"Stamina"
0
Float
+18
1027
"Attack"
0
Float
+1C
1028
"Defence"
0
Float
+20
1029
"MagicAttack"
0
Float
+24
1030
"MagicDefence"
0
Float
+28
1031
"Weight"
0
Float
+2C
1032
"Blow"
0
Float
+30
1033
"BlowResistance"
0
Float
+34
1034
"[2] [app.JobStatusParam]"
1
0
1
+30
0
1035
"Job"
0
4 Bytes
+10
1036
"Hitpoint"
0
Float
+14
1037
"Stamina"
0
Float
+18
1038
"Attack"
0
Float
+1C
1039
"Defence"
0
Float
+20
1040
"MagicAttack"
0
Float
+24
1041
"MagicDefence"
0
Float
+28
1042
"Weight"
0
Float
+2C
1043
"Blow"
0
Float
+30
1044
"BlowResistance"
0
Float
+34
1045
"[3] [app.JobStatusParam]"
1
0
1
+38
0
1046
"Job"
0
4 Bytes
+10
1047
"Hitpoint"
0
Float
+14
1048
"Stamina"
0
Float
+18
1049
"Attack"
0
Float
+1C
1050
"Defence"
0
Float
+20
1051
"MagicAttack"
0
Float
+24
1052
"MagicDefence"
0
Float
+28
1053
"Weight"
0
Float
+2C
1054
"Blow"
0
Float
+30
1055
"BlowResistance"
0
Float
+34
1056
"[4] [app.JobStatusParam]"
1
0
1
+40
0
1057
"Job"
0
4 Bytes
+10
1058
"Hitpoint"
0
Float
+14
1059
"Stamina"
0
Float
+18
1060
"Attack"
0
Float
+1C
1061
"Defence"
0
Float
+20
1062
"MagicAttack"
0
Float
+24
1063
"MagicDefence"
0
Float
+28
1064
"Weight"
0
Float
+2C
1065
"Blow"
0
Float
+30
1066
"BlowResistance"
0
Float
+34
1067
"[5] [app.JobStatusParam]"
1
0
1
+48
0
1068
"Job"
0
4 Bytes
+10
1069
"Hitpoint"
0
Float
+14
1070
"Stamina"
0
Float
+18
1071
"Attack"
0
Float
+1C
1072
"Defence"
0
Float
+20
1073
"MagicAttack"
0
Float
+24
1074
"MagicDefence"
0
Float
+28
1075
"Weight"
0
Float
+2C
1076
"Blow"
0
Float
+30
1077
"BlowResistance"
0
Float
+34
1078
"[6] [app.JobStatusParam]"
1
0
1
+50
0
1079
"Job"
0
4 Bytes
+10
1080
"Hitpoint"
0
Float
+14
1081
"Stamina"
0
Float
+18
1082
"Attack"
0
Float
+1C
1083
"Defence"
0
Float
+20
1084
"MagicAttack"
0
Float
+24
1085
"MagicDefence"
0
Float
+28
1086
"Weight"
0
Float
+2C
1087
"Blow"
0
Float
+30
1088
"BlowResistance"
0
Float
+34
1089
"[7] [app.JobStatusParam]"
1
0
1
+58
0
1090
"Job"
0
4 Bytes
+10
182
"Hitpoint"
0
Float
+14
183
"Stamina"
0
Float
+18
184
"Attack"
0
Float
+1C
185
"Defence"
0
Float
+20
186
"MagicAttack"
0
Float
+24
187
"MagicDefence"
0
Float
+28
188
"Weight"
0
Float
+2C
189
"Blow"
0
Float
+30
190
"BlowResistance"
0
Float
+34
191
"[8] [app.JobStatusParam]"
1
0
1
+60
0
192
"Job"
0
4 Bytes
+10
193
"Hitpoint"
0
Float
+14
194
"Stamina"
0
Float
+18
195
"Attack"
0
Float
+1C
196
"Defence"
0
Float
+20
197
"MagicAttack"
0
Float
+24
198
"MagicDefence"
0
Float
+28
199
"Weight"
0
Float
+2C
200
"Blow"
0
Float
+30
201
"BlowResistance"
0
Float
+34
202
"[9] [app.JobStatusParam]"
1
0
1
+68
0
203
"Job"
0
4 Bytes
+10
204
"Hitpoint"
0
Float
+14
205
"Stamina"
0
Float
+18
206
"Attack"
0
Float
+1C
207
"Defence"
0
Float
+20
208
"MagicAttack"
0
Float
+24
209
"MagicDefence"
0
Float
+28
210
"Weight"
0
Float
+2C
211
"Blow"
0
Float
+30
212
"BlowResistance"
0
Float
+34
213
"[10] [app.JobStatusParam]"
1
0
1
+70
0
214
"Job"
0
4 Bytes
+10
215
"Hitpoint"
0
Float
+14
216
"Stamina"
0
Float
+18
217
"Attack"
0
Float
+1C
218
"Defence"
0
Float
+20
219
"MagicAttack"
0
Float
+24
1091
"MagicDefence"
0
Float
+28
1092
"Weight"
0
Float
+2C
1093
"Blow"
0
Float
+30
1094
"BlowResistance"
0
Float
+34
12182
"<CharacterInvincibleController>k__BackingField [app.CharacterInvincibleController]"
1
0
1
+230
0
12185
"TimerSecSinceStartOxcartRaidAttack"
0
Float
+10
12184
"<IsInvinciblePartyPawn>k__BackingField"
0
Byte
+14
12183
"<IsInvincibleManualPlayer>k__BackingField"
0
Byte
+15
12180
"app.PawnManager (Team member)"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='PawnManager', aob='?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 50 ?? 8B ?? ?? 85 ?? ?? 0F 45 ?? ?? 85 ?? 74 ?? ?? 39 ?? 10 74 ?? 32 ?? EB ?? ?? 01 0F B6 ?? 85 ?? 75 ?? ?? 8B ?? C8', pos=3, aoblen=7, symbol='PawnManager_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('PawnManager_addr')
{$asm}
12181
"base (May need to wait for seconds)"
1
0
8 Bytes
PawnManager_addr
0
12072
"_PawnCharacterList (System.Collections.Generic.List`1<app.Character>)"
1
0
1
+188
0
12073
"_items (app.Character[])"
1
0
1
+10
0
12074
"app.Character [0]"
1
0
1
+20
0
12075
"app.Human"
1
0
1
+1D8
0
12076
"<StatusContext>k__BackingField"
1
0
1
+3B8
0
12077
"_Level"
1
4 Bytes
+2C
12078
"_Exp"
1
4 Bytes
+28
12079
"_IncreaseParams [app.IncreaseStatus]"
1
0
1
+20
0
12080
"ReadOnly"
0
Byte
+31
12081
"IsCapHitPoint"
0
Byte
+32
12082
"IsCapStamina"
0
Byte
+33
12083
"IsCapAttack"
0
Byte
+34
12084
"IsCapDefence"
0
Byte
+35
12085
"IsCapMagicAttack"
0
Byte
+36
12086
"IsCapMagicDefence"
0
Byte
+37
12087
"IsCapWeight"
0
Byte
+38
12088
"IsCapBlow"
0
Byte
+30
12089
"_HitPoint"
1
4 Bytes
+10
12090
"_Stamina"
1
4 Bytes
+14
12091
"_Attack"
1
4 Bytes
+18
12092
"_Defence"
1
4 Bytes
+1C
12093
"_MagicAttack"
1
4 Bytes
+20
12094
"_MagicDefence"
1
4 Bytes
+24
12095
"_Weight"
1
4 Bytes
+28
12096
"_Blow"
1
4 Bytes
+2C
12097
"_ItemIncreaseWeight"
0
Float
+30
12100
"Hit"
1
0
1
+98
0
12101
"<IsInvincible>k__BackingField"
0
Byte
+446
12102
"<ReducedMaxHp>k__BackingField"
0
Float
+41C
12103
"<NoDamageTimer>k__BackingField"
1
0
1
+E8
0
12104
"_ElapsedFrame"
0
Float
+10
12105
"_LeftFrame"
0
Float
+14
12106
"_FinishFrame"
0
Float
+18
12107
"_Ratio"
0
Float
+1C
12108
"_IsFinish"
0
Binary
0
1
0
+20
12109
"<MinRatioReducedMaxHp>k__BackingField"
0
Float
+424
12110
"app.Character [1]"
1
0
1
+28
0
12111
"app.Human"
1
0
1
+1D8
0
12112
"<StatusContext>k__BackingField"
1
0
1
+3B8
0
12113
"_Level"
1
4 Bytes
+2C
12114
"_Exp"
1
4 Bytes
+28
12115
"_IncreaseParams [app.IncreaseStatus]"
1
0
1
+20
0
12116
"ReadOnly"
0
Byte
+31
12117
"IsCapHitPoint"
0
Byte
+32
12118
"IsCapStamina"
0
Byte
+33
12119
"IsCapAttack"
0
Byte
+34
12120
"IsCapDefence"
0
Byte
+35
12121
"IsCapMagicAttack"
0
Byte
+36
12122
"IsCapMagicDefence"
0
Byte
+37
12123
"IsCapWeight"
0
Byte
+38
12124
"IsCapBlow"
0
Byte
+30
12125
"_HitPoint"
1
4 Bytes
+10
12126
"_Stamina"
1
4 Bytes
+14
12127
"_Attack"
1
4 Bytes
+18
12128
"_Defence"
1
4 Bytes
+1C
12129
"_MagicAttack"
1
4 Bytes
+20
12130
"_MagicDefence"
1
4 Bytes
+24
12131
"_Weight"
1
4 Bytes
+28
12132
"_Blow"
1
4 Bytes
+2C
12133
"_ItemIncreaseWeight"
0
Float
+30
12134
"Hit"
1
0
1
+98
0
12135
"<IsInvincible>k__BackingField"
0
Byte
+446
12136
"<ReducedMaxHp>k__BackingField"
0
Float
+41C
12137
"<NoDamageTimer>k__BackingField"
1
0
1
+E8
0
12138
"_ElapsedFrame"
0
Float
+10
12139
"_LeftFrame"
0
Float
+14
12140
"_FinishFrame"
0
Float
+18
12141
"_Ratio"
0
Float
+1C
12142
"_IsFinish"
0
Binary
0
1
0
+20
12143
"<MinRatioReducedMaxHp>k__BackingField"
0
Float
+424
12144
"app.Character [2]"
1
0
1
+28
0
12145
"app.Human"
1
0
1
+1D8
0
12146
"<StatusContext>k__BackingField"
1
0
1
+3B8
0
12147
"_Level"
1
4 Bytes
+2C
12148
"_Exp"
1
4 Bytes
+28
12149
"_IncreaseParams [app.IncreaseStatus]"
1
0
1
+20
0
12150
"ReadOnly"
0
Byte
+31
12151
"IsCapHitPoint"
0
Byte
+32
12152
"IsCapStamina"
0
Byte
+33
12153
"IsCapAttack"
0
Byte
+34
12154
"IsCapDefence"
0
Byte
+35
12155
"IsCapMagicAttack"
0
Byte
+36
12156
"IsCapMagicDefence"
0
Byte
+37
12157
"IsCapWeight"
0
Byte
+38
12158
"IsCapBlow"
0
Byte
+30
12159
"_HitPoint"
1
4 Bytes
+10
12160
"_Stamina"
1
4 Bytes
+14
12161
"_Attack"
1
4 Bytes
+18
12162
"_Defence"
1
4 Bytes
+1C
12163
"_MagicAttack"
1
4 Bytes
+20
12164
"_MagicDefence"
1
4 Bytes
+24
12165
"_Weight"
1
4 Bytes
+28
12166
"_Blow"
1
4 Bytes
+2C
12167
"_ItemIncreaseWeight"
0
Float
+30
12168
"Hit"
1
0
1
+98
0
12169
"<IsInvincible>k__BackingField"
0
Byte
+446
12170
"<ReducedMaxHp>k__BackingField"
0
Float
+41C
12171
"<NoDamageTimer>k__BackingField"
1
0
1
+E8
0
12172
"_ElapsedFrame"
0
Float
+10
12173
"_LeftFrame"
0
Float
+14
12174
"_FinishFrame"
0
Float
+18
12175
"_Ratio"
0
Float
+1C
12176
"_IsFinish"
0
Binary
0
1
0
+20
12177
"<MinRatioReducedMaxHp>k__BackingField"
0
Float
+424
11812
"app.ItemManager"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not AOBScanModule then
function AOBScanModule(moduleName, signature)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then return nil end
local ms = createMemScan()
synchronize(function()
ms.firstScan(soExactValue, vtByteArray, nil, signature,
nil, baseAddr, maxAddr, '+X-C-W', fsmNotAligned, '1', true, true, false, false)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
results.destroy()
ms.destroy()
return addr
end
end
local AOBs = {
{name='ItemManager', aob='?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 48 83 C4 20 ?? E9 ?? ?? ?? ?? CC CC CC CC CC CC CC CC CC CC ?? 89 ?? 24 ?? ?? 89 ?? ?? ?? ?? 89 ?? 24 ?? ?? ?? ?? ?? ?? 48 83 EC 20 ?? 8B ?? ?? 8B ?? ?? 8B ?? FF ?? A0 00 00 00 ?? 8B ?? ?? ?? ?? ?? ?? 33 ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 8D ?? 01 E8 ?? ?? ?? ?? 33 ?? ?? 8D ?? ?? ?? ?? ?? C7 ?? 10 01 00 00 00 ?? 89 ?? 28 ?? 63 ?? 08 85 ?? 75 ?? 8B ?? EB ?? ?? 03 ?? ?? 89 ?? 20 ?? 8B ?? ?? 8B ?? ?? 89 ?? 18 ?? 8B ?? E8 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 33 ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? ?? 8B ?? ?? ?? ?? ?? ?? 8D ?? 01 E8 ?? ?? ?? ?? C7 ?? 10 01 00 00 00 ?? 89 ?? 28 ?? 63 ?? 08 85 ?? 75', pos=3, aoblen=7, symbol='ItemManager_addr'},
}
local module_name = process
for _, entry in ipairs(AOBs) do
local aob_addr_str = AOBScanModule(module_name, entry.aob)
if aob_addr_str then
local aob_addr_val = tonumber(aob_addr_str, 16)
local offset_addr = aob_addr_val + entry.pos
local relative_offset = readInteger(offset_addr, true)
local final_addr = relative_offset + aob_addr_val + entry.aoblen
synchronize(function()
unregisterSymbol(entry.symbol)
registerSymbol(entry.symbol, final_addr)
end)
print(string.format('[SymbolScanner] %s registered at: %X', entry.name, final_addr))
else
print(string.format('[SymbolScanner] WARNING: AOB scan failed for %s', entry.name))
end
end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
unregisterSymbol('ItemManager_addr')
{$asm}
11813
"base (May need to wait for seconds)"
1
0
8 Bytes
ItemManager_addr
0
11814
"ItemParams"
1
0
1
+10
0
11815
"_NormalWeightRankThresholds [app.ItemParameters.WeightRankThresholds]"
1
0
1
+20
0
11816
"_RatioLight"
1
4 Bytes
+10
11817
"_RatioMedium"
1
4 Bytes
+14
11818
"_RatioHeavy"
1
4 Bytes
+18
11819
"_RatioVeryHeavy"
1
4 Bytes
+1C
11820
"_SpecialNormalWeightRankThresholds [app.ItemParameters.WeightRankThresholds]"
1
0
1
+28
0
11821
"_RatioLight"
1
4 Bytes
+10
11822
"_RatioMedium"
1
4 Bytes
+14
11823
"_RatioHeavy"
1
4 Bytes
+18
11824
"_RatioVeryHeavy"
1
4 Bytes
+1C
11825
"_IncreaseWeight"
0
Float
+30
11826
"_IncreaseWeightMax"
0
Float
+34
11827
"_AutoMixWaitSec"
0
Float
+38
11828
"_AutoMixWeightRate"
0
Float
+3C
11829
"_AutoMoveInventoryWaitSec"
0
Float
+40
11830
"_AutoMoveInventoryWeightRate"
0
Float
+44
11831
"_AutoSellRate"
0
Float
+48
11832
"_AutoSellStopWeightRate"
0
Float
+4C
11833
"_FarDist"
0
Float
+50
11834
"_WarpPointPutEnableNum"
1
4 Bytes
+54
11894
"app.Wp10_003_00Parameter"
1
0
1
+60
0
11895
"_Elements"
1
0
1
+10
0
11896
"[0] [app.Wp10_003_00Parameter.Element]"
1
0
1
+20
0
11897
"_Probability"
0
Float
+10
11898
"_Gold"
1
4 Bytes
+14
11899
"[1] [app.Wp10_003_00Parameter.Element]"
1
0
1
+28
0
11900
"_Probability"
0
Float
+10
11901
"_Gold"
1
4 Bytes
+14
11902
"[2] [app.Wp10_003_00Parameter.Element]"
1
0
1
+30
0
11903
"_Probability"
0
Float
+10
11904
"_Gold"
1
4 Bytes
+14
11892
"Dragon's Dogma 2 / https://opencheattables.com / CE 7.6+"
008C00
1
11884
"Allow VEH - reduce crash - danger: system-side"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
local symbolName = "KERNELBASE.SetThreadContext"
[ENABLE]
local bt = {195, 144, 144, 144} --C3 90 90 90 (ret nop nop nop)
writeBytes(symbolName, bt)
[DISABLE]
local bt = {72, 131, 236, 40} --48 83 EC 28 (sub rsp, 28)
writeBytes(symbolName, bt)
Code :mov ecx,[rax+10]
DD2.exe+3F75DEF
01
8B
C8
EB
03
8B
48
10
48
B8
FF
FF
FF