4
"Toggle Compact View"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not toggleCompactView then
function toggleCompactView(sender, forceEnable)
local isCompactMode = not (compactViewMenuItem.Caption == 'Compact View Mode')
if forceEnable ~= nil then
isCompactMode = not forceEnable
end
synchronize(function()
compactViewMenuItem.Caption = isCompactMode and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = isCompactMode
getMainForm().Panel4.Visible = isCompactMode
getMainForm().Panel5.Visible = isCompactMode
end)
end
end
if not createCompactViewMenu then
function createCompactViewMenu()
if isCompactMenuCreated then return end
synchronize(function()
local mainMenu = getMainForm().Menu.Items
compactViewMenuItem = createMenuItem(mainMenu)
compactViewMenuItem.Caption = 'Compact View Mode'
compactViewMenuItem.OnClick = toggleCompactView
mainMenu.add(compactViewMenuItem)
end)
isCompactMenuCreated = true
end
end
createCompactViewMenu()
toggleCompactView(nil, true)
[DISABLE]
{$lua}
if toggleCompactView then
toggleCompactView(nil, false)
end
1
"Battle: damage multiplier"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/16
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_HP,$process,8B ?? 0C 8B ?? 10 03 ?? 3B)
// raw AOB: 75 ?? 48 8B 83 80 08 00 00 48 85 C0 74 ?? 83 B8 D0 02 00 00 02 75 ?? 83 7E 0C 00 7F ?? 40 84 ED 74 ?? 8B 4E 0C 8D 04 39 85 C0 7F ?? BF 01 00 00 00 2B F9 8B 4E 0C 8B 56 10 03 CF 3B CA 0F 4C D1 48 8B 0D ?? ?? ?? ?? 33 C0 85 D2 0F 48 D0 89 56 0C 8B 16 E8 ?? ?? ?? ?? 48 8B 8B 80 08 00 00 48 85 C9 74 ?? 48 8B 01 FF 50 10 3D 3A 1E B5 B6
// injection point AOB: 8B ?? 0C 8B ?? 10 03 ?? 3B ?? 0F 4C ?? ?? 8B ?? ?? ?? ?? ?? 33 ?? 85 ?? 0F 48 ?? 89 ?? 0C 8B ?? E8 ?? ?? ?? ?? ?? 8B ?? 80 08 00 00 ?? 85 ?? 74 ?? ?? 8B ?? FF ?? 10 3D 3A 1E B5 B6
alloc(newmem,$1000,INJECT_BATTLE_HP)
alloc(INJECT_BATTLE_HPo, $6)
label(code)
label(return)
label(vf_xmm_bak0_457442)
label(vf_xmm_bak1_457442)
label(vf_mult_friend_457442)
label(vf_mult_foe_457442)
label(i_last_hp_addr i_min_hp)
INJECT_BATTLE_HPo:
readmem(INJECT_BATTLE_HP, $6)
newmem:
// **** Begin Auto script: Multiplier
// value=1, rule=R5_IntRead, template=P1_IntToFloat, NegDeltaCheck, FriendFoeFilter, PreserveXmm
movaps [vf_xmm_bak0_457442], xmm15
movaps [vf_xmm_bak1_457442], xmm14
code:
// mov ecx,[rsi+0C]
reassemble(INJECT_BATTLE_HP)
test ecx, ecx
jle short skip_mult_457442
cmp edi, 0
jg short skip_mult_457442
mov [i_last_hp_addr], rsi
// Multiplier: delta in ecx
// ======== Friend/Foe Filter ========
// Add your flag check here, e.g.:
// cmp dword ptr [rsi+OFFSET], FLAG_VALUE
cmp dword ptr [rsi+2C], 0
je short ff_foe_457442
// je ff_foe_457442
// Default: all entities use friend multiplier
// ====================================
vmovss xmm15, [vf_mult_friend_457442]
cmp ecx, [i_min_hp]
jae short ff_done_457442
mov ecx, [i_min_hp]
jmp short ff_done_457442
ff_foe_457442:
vmovss xmm15, [vf_mult_foe_457442]
ff_done_457442:
vcvtsi2ss xmm14, xmm14, edi
vmulss xmm14, xmm14, xmm15
vcvtss2si edi, xmm14
cmp dword ptr [rsi+2C], 0
je short @F
add ecx, edi
cmp ecx, [i_min_hp]
jae short @F
mov ecx, [i_min_hp]
xor edi, edi
skip_mult_457442:
movaps xmm15, [vf_xmm_bak0_457442]
movaps xmm14, [vf_xmm_bak1_457442]
// **** End Auto script: Multiplier
// mov edx,[rsi+10]
reassemble(INJECT_BATTLE_HP+3)
jmp return
align 10 cc
vf_xmm_bak0_457442:
dq 0
dq 0
vf_xmm_bak1_457442:
dq 0
dq 0
vf_mult_friend_457442:
dd (float)0.85
vf_mult_foe_457442:
dd (float)1.50
i_last_hp_addr:
dq 0
i_min_hp:
dd #500
INJECT_BATTLE_HP:
jmp newmem
nop 1
return:
registersymbol(INJECT_BATTLE_HP INJECT_BATTLE_HPo vf_xmm_bak0_457442 vf_xmm_bak1_457442)
registersymbol(vf_mult_friend_457442 vf_mult_foe_457442)
registersymbol(i_last_hp_addr i_min_hp)
[DISABLE]
INJECT_BATTLE_HP:
readmem(INJECT_BATTLE_HPo, $6)
unregistersymbol(INJECT_BATTLE_HP INJECT_BATTLE_HPo vf_xmm_bak0_457442 vf_xmm_bak1_457442)
unregistersymbol(vf_mult_friend_457442 vf_mult_foe_457442)
unregistersymbol(i_last_hp_addr i_min_hp)
dealloc(newmem)
dealloc(INJECT_BATTLE_HPo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+6C97A
kyoto_xanadu.exe+6C8F0: 48 89 5C 24 18 - mov [rsp+18],rbx
kyoto_xanadu.exe+6C8F5: 48 89 6C 24 20 - mov [rsp+20],rbp
kyoto_xanadu.exe+6C8FA: 56 - push rsi
kyoto_xanadu.exe+6C8FB: 57 - push rdi
kyoto_xanadu.exe+6C8FC: 41 56 - push r14
kyoto_xanadu.exe+6C8FE: 48 83 EC 20 - sub rsp,20
kyoto_xanadu.exe+6C902: 48 8B 31 - mov rsi,[rcx]
kyoto_xanadu.exe+6C905: 48 8B D9 - mov rbx,rcx
kyoto_xanadu.exe+6C908: 48 8B 89 80 08 00 00 - mov rcx,[rcx+880]
kyoto_xanadu.exe+6C90F: 45 0F B6 F0 - movzx r14d,r8b
kyoto_xanadu.exe+6C913: 8B FA - mov edi,edx
kyoto_xanadu.exe+6C915: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+6C918: 74 06 - je short kyoto_xanadu.exe+6C920
kyoto_xanadu.exe+6C91A: 48 8B 01 - mov rax,[rcx]
kyoto_xanadu.exe+6C91D: FF 50 10 - call qword [rax+10]
kyoto_xanadu.exe+6C920: 0F B6 AB 36 08 00 00 - movzx ebp,byte [rbx+836]
kyoto_xanadu.exe+6C927: 40 80 E5 01 - and bpl,1
kyoto_xanadu.exe+6C92B: 45 84 F6 - test r14b,r14b
kyoto_xanadu.exe+6C92E: 75 34 - jne short kyoto_xanadu.exe+6C964
kyoto_xanadu.exe+6C930: 48 8B 8B 80 08 00 00 - mov rcx,[rbx+880]
kyoto_xanadu.exe+6C937: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+6C93A: 74 28 - je short kyoto_xanadu.exe+6C964
kyoto_xanadu.exe+6C93C: 48 8B 01 - mov rax,[rcx]
kyoto_xanadu.exe+6C93F: FF 50 10 - call qword [rax+10]
kyoto_xanadu.exe+6C942: 3D 3A 1E B5 B6 - cmp eax,0B6B51E3A
kyoto_xanadu.exe+6C947: 75 1B - jne short kyoto_xanadu.exe+6C964
kyoto_xanadu.exe+6C949: 48 8B 83 80 08 00 00 - mov rax,[rbx+880]
kyoto_xanadu.exe+6C950: 48 85 C0 - test rax,rax
kyoto_xanadu.exe+6C953: 74 0F - je short kyoto_xanadu.exe+6C964
kyoto_xanadu.exe+6C955: 83 B8 D0 02 00 00 02 - cmp dword [rax+2D0],2
kyoto_xanadu.exe+6C95C: 75 06 - jne short kyoto_xanadu.exe+6C964
kyoto_xanadu.exe+6C95E: 83 7E 0C 00 - cmp dword [rsi+0C],0
kyoto_xanadu.exe+6C962: 7F 05 - jg short kyoto_xanadu.exe+6C969
kyoto_xanadu.exe+6C964: 40 84 ED - test bpl,bpl
kyoto_xanadu.exe+6C967: 74 11 - je short kyoto_xanadu.exe+6C97A
kyoto_xanadu.exe+6C969: 8B 4E 0C - mov ecx,[rsi+0C]
kyoto_xanadu.exe+6C96C: 8D 04 39 - lea eax,[rcx+rdi]
kyoto_xanadu.exe+6C96F: 85 C0 - test eax,eax
kyoto_xanadu.exe+6C971: 7F 07 - jg short kyoto_xanadu.exe+6C97A
kyoto_xanadu.exe+6C973: BF 01 00 00 00 - mov edi,1
kyoto_xanadu.exe+6C978: 2B F9 - sub edi,ecx
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+6C97A: 8B 4E 0C - mov ecx,[rsi+0C]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+6C97D: 8B 56 10 - mov edx,[rsi+10]
kyoto_xanadu.exe+6C980: 03 CF - add ecx,edi
kyoto_xanadu.exe+6C982: 3B CA - cmp ecx,edx
kyoto_xanadu.exe+6C984: 0F 4C D1 - cmovl edx,ecx
kyoto_xanadu.exe+6C987: 48 8B 0D 72 13 B0 00 - mov rcx,[rel kyoto_xanadu.exe+B6DD00]
kyoto_xanadu.exe+6C98E: 33 C0 - xor eax,eax
kyoto_xanadu.exe+6C990: 85 D2 - test edx,edx
kyoto_xanadu.exe+6C992: 0F 48 D0 - cmovs edx,eax
kyoto_xanadu.exe+6C995: 89 56 0C - mov [rsi+0C],edx
kyoto_xanadu.exe+6C998: 8B 16 - mov edx,[rsi]
kyoto_xanadu.exe+6C99A: E8 F1 76 1F 00 - call kyoto_xanadu.exe+264090
kyoto_xanadu.exe+6C99F: 48 8B 8B 80 08 00 00 - mov rcx,[rbx+880]
kyoto_xanadu.exe+6C9A6: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+6C9A9: 74 45 - je short kyoto_xanadu.exe+6C9F0
kyoto_xanadu.exe+6C9AB: 48 8B 01 - mov rax,[rcx]
kyoto_xanadu.exe+6C9AE: FF 50 10 - call qword [rax+10]
kyoto_xanadu.exe+6C9B1: 3D 3A 1E B5 B6 - cmp eax,0B6B51E3A
kyoto_xanadu.exe+6C9B6: 75 38 - jne short kyoto_xanadu.exe+6C9F0
kyoto_xanadu.exe+6C9B8: 48 8B 83 80 08 00 00 - mov rax,[rbx+880]
kyoto_xanadu.exe+6C9BF: 48 85 C0 - test rax,rax
kyoto_xanadu.exe+6C9C2: 74 2C - je short kyoto_xanadu.exe+6C9F0
kyoto_xanadu.exe+6C9C4: 8B 88 D0 02 00 00 - mov ecx,[rax+2D0]
kyoto_xanadu.exe+6C9CA: 8D 41 FF - lea eax,[rcx-1]
kyoto_xanadu.exe+6C9CD: 83 F8 01 - cmp eax,1
kyoto_xanadu.exe+6C9D0: 76 08 - jbe short kyoto_xanadu.exe+6C9DA
kyoto_xanadu.exe+6C9D2: 8D 41 FA - lea eax,[rcx-6]
kyoto_xanadu.exe+6C9D5: 83 F8 01 - cmp eax,1
kyoto_xanadu.exe+6C9D8: 77 16 - ja short kyoto_xanadu.exe+6C9F0
kyoto_xanadu.exe+6C9DA: 48 8B 0D 7F D7 AF 00 - mov rcx,[rel kyoto_xanadu.exe+B6A160]
kyoto_xanadu.exe+6C9E1: 48 8B D3 - mov rdx,rbx
kyoto_xanadu.exe+6C9E4: 48 8B 89 00 15 00 00 - mov rcx,[rcx+1500]
kyoto_xanadu.exe+6C9EB: E8 60 DC FE FF - call kyoto_xanadu.exe+5A650
kyoto_xanadu.exe+6C9F0: 48 8B 5C 24 50 - mov rbx,[rsp+50]
kyoto_xanadu.exe+6C9F5: 48 8B 6C 24 58 - mov rbp,[rsp+58]
kyoto_xanadu.exe+6C9FA: 48 83 C4 20 - add rsp,20
kyoto_xanadu.exe+6C9FE: 41 5E - pop r14
kyoto_xanadu.exe+6CA00: 5F - pop rdi
kyoto_xanadu.exe+6CA01: 5E - pop rsi
kyoto_xanadu.exe+6CA02: C3 - ret
}
5
"Last"
0
FF8080
4 Bytes
i_last_hp_addr
C
6
"min. HP before take damage"
0
C08000
4 Bytes
i_min_hp
2
"to player"
0
C08000
Float
vf_mult_friend_457442
3
"to enemy"
0
C08000
Float
vf_mult_foe_457442
8
"Get money"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/16
}
[ENABLE]
aobscanmodule(INJECT_GET_MONEY,$process,8B 92 ?? ?? ?? 00 E8 ?? ?? ?? ?? ?? 8B 7C)
// raw AOB: 85 C0 74 ?? FF C3 48 83 C7 08 48 63 C3 48 3B C5 72 ?? 4C 8D 0D ?? ?? ?? ?? 4C 89 7C 24 20 41 B8 3C 02 00 00 48 8D 15 ?? ?? ?? ?? B9 03 00 00 00 E8 ?? ?? ?? ?? 48 8B 15 ?? ?? ?? ?? 48 8B CE C7 46 2C 40 00 00 00 8B 92 78 09 0A 00 E8 ?? ?? ?? ?? 48 8B 7C 24 50 48 8B C6 48 8B 74 24 68 48 8B 5C 24 58 48 8B 6C 24 60 48 83 C4 30 41 5F 41 5E 41 5C C3 85 DB 78 ?? 49 8B 06 48 63 D3 48 8B 0C D0
// injection point AOB: 8B 92 ?? ?? ?? 00 E8 ?? ?? ?? ?? ?? 8B 7C ?? ?? ?? 8B ?? ?? 8B 74 ?? ?? ?? 8B 5C ?? ?? ?? 8B 6C ?? ?? 48 83 C4 30 41 5F 41 5E 41 5C C3 85 ?? 78 ?? 49 8B 06 ?? 63 ?? ?? 8B 0C
alloc(newmem,$1000,INJECT_GET_MONEY)
alloc(INJECT_GET_MONEYo, $6)
label(code)
label(return)
label(i_base_money_addr)
INJECT_GET_MONEYo:
readmem(INJECT_GET_MONEY, $6)
newmem:
push r15
db 4c 8d ba
readmem(INJECT_GET_MONEY+2, 4)
mov [i_base_money_addr], r15
pop r15
code:
// mov edx,[rdx+000A0978]
reassemble(INJECT_GET_MONEY)
jmp return
align 10 cc
i_base_money_addr:
dq 0
INJECT_GET_MONEY:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_MONEY INJECT_GET_MONEYo)
registersymbol(i_base_money_addr)
[DISABLE]
INJECT_GET_MONEY:
readmem(INJECT_GET_MONEYo, $6)
unregistersymbol(INJECT_GET_MONEY INJECT_GET_MONEYo)
unregistersymbol(i_base_money_addr)
dealloc(newmem)
dealloc(INJECT_GET_MONEYo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+429459
kyoto_xanadu.exe+4293E4: 48 89 7C 24 50 - mov [rsp+50],rdi
kyoto_xanadu.exe+4293E9: 4C 8B B0 C8 00 00 00 - mov r14,[rax+0C8]
kyoto_xanadu.exe+4293F0: 49 8B 6E 08 - mov rbp,[r14+8]
kyoto_xanadu.exe+4293F4: 48 85 ED - test rbp,rbp
kyoto_xanadu.exe+4293F7: 74 2C - je short kyoto_xanadu.exe+429425
kyoto_xanadu.exe+4293F9: 49 8B 3E - mov rdi,[r14]
kyoto_xanadu.exe+4293FC: 0F 1F 40 00 - nop dword [rax]
kyoto_xanadu.exe+429400: 48 8B 07 - mov rax,[rdi]
kyoto_xanadu.exe+429403: 48 8B 08 - mov rcx,[rax]
kyoto_xanadu.exe+429406: 49 3B CF - cmp rcx,r15
kyoto_xanadu.exe+429409: 74 7B - je short kyoto_xanadu.exe+429486
kyoto_xanadu.exe+42940B: 49 8B D7 - mov rdx,r15
kyoto_xanadu.exe+42940E: E8 3D 69 39 00 - call kyoto_xanadu.exe+7BFD50
kyoto_xanadu.exe+429413: 85 C0 - test eax,eax
kyoto_xanadu.exe+429415: 74 6F - je short kyoto_xanadu.exe+429486
kyoto_xanadu.exe+429417: FF C3 - inc ebx
kyoto_xanadu.exe+429419: 48 83 C7 08 - add rdi,8
kyoto_xanadu.exe+42941D: 48 63 C3 - movsxd rax,ebx
kyoto_xanadu.exe+429420: 48 3B C5 - cmp rax,rbp
kyoto_xanadu.exe+429423: 72 DB - jb short kyoto_xanadu.exe+429400
kyoto_xanadu.exe+429425: 4C 8D 0D 84 FE 60 00 - lea r9,[rel kyoto_xanadu.exe+A392B0]
kyoto_xanadu.exe+42942C: 4C 89 7C 24 20 - mov [rsp+20],r15
kyoto_xanadu.exe+429431: 41 B8 3C 02 00 00 - mov r8d,23C
kyoto_xanadu.exe+429437: 48 8D 15 22 FE 60 00 - lea rdx,[rel kyoto_xanadu.exe+A39260]
kyoto_xanadu.exe+42943E: B9 03 00 00 00 - mov ecx,3
kyoto_xanadu.exe+429443: E8 68 9C 08 00 - call kyoto_xanadu.exe+4B30B0
kyoto_xanadu.exe+429448: 48 8B 15 B1 48 74 00 - mov rdx,[rel kyoto_xanadu.exe+B6DD00]
kyoto_xanadu.exe+42944F: 48 8B CE - mov rcx,rsi
kyoto_xanadu.exe+429452: C7 46 2C 40 00 00 00 - mov dword [rsi+2C],40
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+429459: 8B 92 78 09 0A 00 - mov edx,[rdx+000A0978]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+42945F: E8 9C 03 00 00 - call kyoto_xanadu.exe+429800
kyoto_xanadu.exe+429464: 48 8B 7C 24 50 - mov rdi,[rsp+50]
kyoto_xanadu.exe+429469: 48 8B C6 - mov rax,rsi
kyoto_xanadu.exe+42946C: 48 8B 74 24 68 - mov rsi,[rsp+68]
kyoto_xanadu.exe+429471: 48 8B 5C 24 58 - mov rbx,[rsp+58]
kyoto_xanadu.exe+429476: 48 8B 6C 24 60 - mov rbp,[rsp+60]
kyoto_xanadu.exe+42947B: 48 83 C4 30 - add rsp,30
kyoto_xanadu.exe+42947F: 41 5F - pop r15
kyoto_xanadu.exe+429481: 41 5E - pop r14
kyoto_xanadu.exe+429483: 41 5C - pop r12
kyoto_xanadu.exe+429485: C3 - ret
kyoto_xanadu.exe+429486: 85 DB - test ebx,ebx
kyoto_xanadu.exe+429488: 78 9B - js short kyoto_xanadu.exe+429425
kyoto_xanadu.exe+42948A: 49 8B 06 - mov rax,[r14]
kyoto_xanadu.exe+42948D: 48 63 D3 - movsxd rdx,ebx
kyoto_xanadu.exe+429490: 48 8B 0C D0 - mov rcx,[rax+rdx*8]
kyoto_xanadu.exe+429494: C7 41 24 00 00 80 BF - mov dword [rcx+24],0BF800000
kyoto_xanadu.exe+42949B: 49 8B 06 - mov rax,[r14]
kyoto_xanadu.exe+42949E: 48 8B 0C D0 - mov rcx,[rax+rdx*8]
kyoto_xanadu.exe+4294A2: C7 41 28 04 00 00 00 - mov dword [rcx+28],4
kyoto_xanadu.exe+4294A9: 49 8B 06 - mov rax,[r14]
kyoto_xanadu.exe+4294AC: 48 8B 0C D0 - mov rcx,[rax+rdx*8]
kyoto_xanadu.exe+4294B0: 44 89 61 20 - mov [rcx+20],r12d
kyoto_xanadu.exe+4294B4: EB 92 - jmp short kyoto_xanadu.exe+429448
}
9
"money"
0
FF8080
4 Bytes
i_base_money_addr
0
10
"Time"
0
FF8080
Double
i_base_money_addr
8
12
"Browse item and set amount"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/16
}
[ENABLE]
aobscanmodule(INJECT_GET_ITEM_AMT,$process,66 83 ?? ?? 00 75 ?? ?? ?? 01 ?? ?? FF)
// raw AOB: 8B D0 89 45 8F 48 C7 45 97 C1 7F 01 00 0F 1F 40 00 0F 1F 84 00 00 00 00 00 48 8B 05 ?? ?? ?? ?? 48 8B 48 38 48 8B 49 08 E8 ?? ?? ?? ?? 4C 8B F8 48 85 C0 0F 84 ?? ?? ?? ?? F7 40 10 00 00 01 00 0F 85 ?? ?? ?? ?? 48 8B 0D ?? ?? ?? ?? 48 8B 45 97 66 83 3C 81 00 75 ?? 41 B1 01 41 B8 FF FF FF FF 49 8B D7 E8 ?? ?? ?? ?? 85 C0 0F 84 ?? ?? ?? ?? 8B 4D 77 81 F9 FF FF 00 00 74 ?? 41 8B 47 04 3B C1 74 ?? 3D FF FF 00 00 0F 85 ?? ?? ?? ?? 85 DB
// injection point AOB: 66 83 ?? ?? 00 75 ?? ?? ?? 01 ?? ?? FF FF FF FF ?? 8B ?? E8 ?? ?? ?? ?? 85 ?? 0F 84 ?? ?? ?? ?? 8B ?? ?? 81 ?? FF FF 00 00 74 ?? ?? 8B ?? 04 3B ?? 74 ?? 3D FF FF 00 00 0F 85 ?? ?? ?? ?? 85
alloc(newmem,$1000,INJECT_GET_ITEM_AMT)
alloc(INJECT_GET_ITEM_AMTo, $5)
label(code)
label(return)
label(i_min_item_amt_thres i_set_item_amt_to)
INJECT_GET_ITEM_AMTo:
readmem(INJECT_GET_ITEM_AMT, $5)
newmem:
// cmp word ptr [rcx+rax*4], [i_min_item_amt_thres]
readmem(INJECT_GET_ITEM_AMT, 4)
i_min_item_amt_thres:
db 2
jb short code
push rbx
mov bx, [i_set_item_amt_to]
cmp word ptr [rcx+rax*4], bx
jae short @F
mov word ptr [rcx+rax*4], bx
@@:
pop rbx
code:
// cmp word ptr [rcx+rax*4],00
reassemble(INJECT_GET_ITEM_AMT)
jmp return
align 10 cc
//i_min_item_amt_thres:
//db 2
//db 0
i_set_item_amt_to:
dw 32
INJECT_GET_ITEM_AMT:
jmp newmem
return:
registersymbol(INJECT_GET_ITEM_AMT INJECT_GET_ITEM_AMTo)
registersymbol(i_min_item_amt_thres i_set_item_amt_to)
[DISABLE]
INJECT_GET_ITEM_AMT:
readmem(INJECT_GET_ITEM_AMTo, $5)
unregistersymbol(INJECT_GET_ITEM_AMT INJECT_GET_ITEM_AMTo)
unregistersymbol(i_min_item_amt_thres i_set_item_amt_to)
dealloc(newmem)
dealloc(INJECT_GET_ITEM_AMTo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+9AA48
kyoto_xanadu.exe+9A890: 48 89 5C 24 08 - mov [rsp+8],rbx
kyoto_xanadu.exe+9A895: 48 89 74 24 18 - mov [rsp+18],rsi
kyoto_xanadu.exe+9A89A: 48 89 7C 24 20 - mov [rsp+20],rdi
kyoto_xanadu.exe+9A89F: 55 - push rbp
kyoto_xanadu.exe+9A8A0: 41 54 - push r12
kyoto_xanadu.exe+9A8A2: 41 55 - push r13
kyoto_xanadu.exe+9A8A4: 41 56 - push r14
kyoto_xanadu.exe+9A8A6: 41 57 - push r15
kyoto_xanadu.exe+9A8A8: 48 8D 6C 24 D9 - lea rbp,[rsp-27]
kyoto_xanadu.exe+9A8AD: 48 81 EC D0 00 00 00 - sub rsp,0D0
kyoto_xanadu.exe+9A8B4: 48 8B 05 85 27 A7 00 - mov rax,[rel kyoto_xanadu.exe+B0D040]
kyoto_xanadu.exe+9A8BB: 48 33 C4 - xor rax,rsp
kyoto_xanadu.exe+9A8BE: 48 89 45 17 - mov [rbp+17],rax
kyoto_xanadu.exe+9A8C2: 41 8B F9 - mov edi,r9d
kyoto_xanadu.exe+9A8C5: 41 8B D8 - mov ebx,r8d
kyoto_xanadu.exe+9A8C8: 89 5D 8B - mov [rbp-75],ebx
kyoto_xanadu.exe+9A8CB: 48 8B F2 - mov rsi,rdx
kyoto_xanadu.exe+9A8CE: 48 89 55 A7 - mov [rbp-59],rdx
kyoto_xanadu.exe+9A8D2: 48 8B 45 7F - mov rax,[rbp+7F]
kyoto_xanadu.exe+9A8D6: 48 89 45 9F - mov [rbp-61],rax
kyoto_xanadu.exe+9A8DA: BA 88 13 00 00 - mov edx,1388
kyoto_xanadu.exe+9A8DF: 48 8B CE - mov rcx,rsi
kyoto_xanadu.exe+9A8E2: E8 29 83 F9 FF - call kyoto_xanadu.exe+32C10
kyoto_xanadu.exe+9A8E7: 45 33 E4 - xor r12d,r12d
kyoto_xanadu.exe+9A8EA: 4C 89 66 08 - mov [rsi+8],r12
kyoto_xanadu.exe+9A8EE: 83 FB 06 - cmp ebx,6
kyoto_xanadu.exe+9A8F1: 0F 85 7F 00 00 00 - jne near kyoto_xanadu.exe+9A976
kyoto_xanadu.exe+9A8F7: 48 8B 05 A2 33 AD 00 - mov rax,[rel kyoto_xanadu.exe+B6DCA0]
kyoto_xanadu.exe+9A8FE: 48 8B 88 30 01 00 00 - mov rcx,[rax+130]
kyoto_xanadu.exe+9A905: 48 8B 79 08 - mov rdi,[rcx+8]
kyoto_xanadu.exe+9A909: 8B 4F 28 - mov ecx,[rdi+28]
kyoto_xanadu.exe+9A90C: 48 8B 57 20 - mov rdx,[rdi+20]
kyoto_xanadu.exe+9A910: 48 8D 04 89 - lea rax,[rcx+rcx*4]
kyoto_xanadu.exe+9A914: 48 03 C0 - add rax,rax
kyoto_xanadu.exe+9A917: 44 39 64 C2 4C - cmp [rdx+rax*8+4C],r12d
kyoto_xanadu.exe+9A91C: 0F 86 D0 04 00 00 - jbe near kyoto_xanadu.exe+9ADF2
kyoto_xanadu.exe+9A922: 48 63 C1 - movsxd rax,ecx
kyoto_xanadu.exe+9A925: 48 8D 0C 80 - lea rcx,[rax+rax*4]
kyoto_xanadu.exe+9A929: 48 03 C9 - add rcx,rcx
kyoto_xanadu.exe+9A92C: 41 8B DC - mov ebx,r12d
kyoto_xanadu.exe+9A92F: 0F AF 5C CA 48 - imul ebx,[rdx+rcx*8+48]
kyoto_xanadu.exe+9A934: 8B 44 CA 44 - mov eax,[rdx+rcx*8+44]
kyoto_xanadu.exe+9A938: 48 03 D8 - add rbx,rax
kyoto_xanadu.exe+9A93B: 48 03 5F 10 - add rbx,[rdi+10]
kyoto_xanadu.exe+9A93F: 74 16 - je short kyoto_xanadu.exe+9A957
kyoto_xanadu.exe+9A941: 8B 13 - mov edx,[rbx]
kyoto_xanadu.exe+9A943: E8 A8 D7 FA FF - call kyoto_xanadu.exe+480F0
kyoto_xanadu.exe+9A948: 84 C0 - test al,al
kyoto_xanadu.exe+9A94A: 74 0B - je short kyoto_xanadu.exe+9A957
kyoto_xanadu.exe+9A94C: 48 8B D3 - mov rdx,rbx
kyoto_xanadu.exe+9A94F: 48 8B CE - mov rcx,rsi
kyoto_xanadu.exe+9A952: E8 49 F3 FA FF - call kyoto_xanadu.exe+49CA0
kyoto_xanadu.exe+9A957: 41 FF C4 - inc r12d
kyoto_xanadu.exe+9A95A: 8B 47 28 - mov eax,[rdi+28]
kyoto_xanadu.exe+9A95D: 48 8B 57 20 - mov rdx,[rdi+20]
kyoto_xanadu.exe+9A961: 8B C8 - mov ecx,eax
kyoto_xanadu.exe+9A963: 48 8D 04 80 - lea rax,[rax+rax*4]
kyoto_xanadu.exe+9A967: 48 03 C0 - add rax,rax
kyoto_xanadu.exe+9A96A: 44 3B 64 C2 4C - cmp r12d,[rdx+rax*8+4C]
kyoto_xanadu.exe+9A96F: 72 B1 - jb short kyoto_xanadu.exe+9A922
kyoto_xanadu.exe+9A971: E9 7C 04 00 00 - jmp kyoto_xanadu.exe+9ADF2
kyoto_xanadu.exe+9A976: 66 0F 6F 05 62 45 9B 00 - movdqa xmm0,[rel kyoto_xanadu.exe+A4EEE0]
kyoto_xanadu.exe+9A97E: 66 0F 7F 45 C7 - movdqa [rbp-39],xmm0
kyoto_xanadu.exe+9A983: 66 0F 6F 0D 65 46 9B 00 - movdqa xmm1,[rel kyoto_xanadu.exe+A4EFF0]
kyoto_xanadu.exe+9A98B: 66 0F 7F 4D D7 - movdqa [rbp-29],xmm1
kyoto_xanadu.exe+9A990: 66 0F 6F 05 B8 46 9B 00 - movdqa xmm0,[rel kyoto_xanadu.exe+A4F050]
kyoto_xanadu.exe+9A998: 66 0F 7F 45 E7 - movdqa [rbp-19],xmm0
kyoto_xanadu.exe+9A99D: 66 0F 6F 0D 7B 46 9B 00 - movdqa xmm1,[rel kyoto_xanadu.exe+A4F020]
kyoto_xanadu.exe+9A9A5: 66 0F 7F 4D F7 - movdqa [rbp-9],xmm1
kyoto_xanadu.exe+9A9AA: 66 0F 6F 05 EE 46 9B 00 - movdqa xmm0,[rel kyoto_xanadu.exe+A4F0A0]
kyoto_xanadu.exe+9A9B2: 66 0F 7F 45 07 - movdqa [rbp+7],xmm0
kyoto_xanadu.exe+9A9B7: 0F 57 C9 - xorps xmm1,xmm1
kyoto_xanadu.exe+9A9BA: 0F 11 4D AF - movups [rbp-51],xmm1
kyoto_xanadu.exe+9A9BE: 4C 89 65 AF - mov [rbp-51],r12
kyoto_xanadu.exe+9A9C2: 4D 8B EC - mov r13,r12
kyoto_xanadu.exe+9A9C5: 4C 89 65 B7 - mov [rbp-49],r12
kyoto_xanadu.exe+9A9C9: 4C 89 65 BF - mov [rbp-41],r12
kyoto_xanadu.exe+9A9CD: 48 8B 0D 5C 33 AD 00 - mov rcx,[rel kyoto_xanadu.exe+B6DD30]
kyoto_xanadu.exe+9A9D4: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9A9D8: BA 40 9C 00 00 - mov edx,9C40
kyoto_xanadu.exe+9A9DD: E8 4E 6B 46 00 - call kyoto_xanadu.exe+501530
kyoto_xanadu.exe+9A9E2: 4C 8B F0 - mov r14,rax
kyoto_xanadu.exe+9A9E5: 48 89 45 AF - mov [rbp-51],rax
kyoto_xanadu.exe+9A9E9: BE 88 13 00 00 - mov esi,1388
kyoto_xanadu.exe+9A9EE: 48 89 75 BF - mov [rbp-41],rsi
kyoto_xanadu.exe+9A9F2: B8 01 00 00 00 - mov eax,1
kyoto_xanadu.exe+9A9F7: 8B D0 - mov edx,eax
kyoto_xanadu.exe+9A9F9: 89 45 8F - mov [rbp-71],eax
kyoto_xanadu.exe+9A9FC: 48 C7 45 97 C1 7F 01 00 - mov qword [rbp-69],17FC1
kyoto_xanadu.exe+9AA04: 0F 1F 40 00 - nop dword [rax]
kyoto_xanadu.exe+9AA08: 0F 1F 84 00 00 00 00 00 - nop dword [rax+rax]
kyoto_xanadu.exe+9AA10: 48 8B 05 89 32 AD 00 - mov rax,[rel kyoto_xanadu.exe+B6DCA0]
kyoto_xanadu.exe+9AA17: 48 8B 48 38 - mov rcx,[rax+38]
kyoto_xanadu.exe+9AA1B: 48 8B 49 08 - mov rcx,[rcx+8]
kyoto_xanadu.exe+9AA1F: E8 AC E1 07 00 - call kyoto_xanadu.exe+118BD0
kyoto_xanadu.exe+9AA24: 4C 8B F8 - mov r15,rax
kyoto_xanadu.exe+9AA27: 48 85 C0 - test rax,rax
kyoto_xanadu.exe+9AA2A: 0F 84 5B 03 00 00 - je near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AA30: F7 40 10 00 00 01 00 - test dword [rax+10],10000
kyoto_xanadu.exe+9AA37: 0F 85 4E 03 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AA3D: 48 8B 0D BC 32 AD 00 - mov rcx,[rel kyoto_xanadu.exe+B6DD00]
kyoto_xanadu.exe+9AA44: 48 8B 45 97 - mov rax,[rbp-69]
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+9AA48: 66 83 3C 81 00 - cmp word ptr [rcx+rax*4],00
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+9AA4D: 75 19 - jne short kyoto_xanadu.exe+9AA68
kyoto_xanadu.exe+9AA4F: 41 B1 01 - mov r9b,1
kyoto_xanadu.exe+9AA52: 41 B8 FF FF FF FF - mov r8d,0FFFFFFFF
kyoto_xanadu.exe+9AA58: 49 8B D7 - mov rdx,r15
kyoto_xanadu.exe+9AA5B: E8 80 E5 17 00 - call kyoto_xanadu.exe+218FE0
kyoto_xanadu.exe+9AA60: 85 C0 - test eax,eax
kyoto_xanadu.exe+9AA62: 0F 84 23 03 00 00 - je near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AA68: 8B 4D 77 - mov ecx,[rbp+77]
kyoto_xanadu.exe+9AA6B: 81 F9 FF FF 00 00 - cmp ecx,0FFFF
kyoto_xanadu.exe+9AA71: 74 13 - je short kyoto_xanadu.exe+9AA86
kyoto_xanadu.exe+9AA73: 41 8B 47 04 - mov eax,[r15+4]
kyoto_xanadu.exe+9AA77: 3B C1 - cmp eax,ecx
kyoto_xanadu.exe+9AA79: 74 0B - je short kyoto_xanadu.exe+9AA86
kyoto_xanadu.exe+9AA7B: 3D FF FF 00 00 - cmp eax,0FFFF
kyoto_xanadu.exe+9AA80: 0F 85 05 03 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AA86: 85 DB - test ebx,ebx
kyoto_xanadu.exe+9AA88: 75 30 - jne short kyoto_xanadu.exe+9AABA
kyoto_xanadu.exe+9AA8A: 41 80 7F 18 01 - cmp byte [r15+18],1
kyoto_xanadu.exe+9AA8F: 0F 85 F6 02 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AA95: 41 8B C4 - mov eax,r12d
kyoto_xanadu.exe+9AA98: 48 8D 4D C7 - lea rcx,[rbp-39]
kyoto_xanadu.exe+9AA9C: 0F 1F 40 00 - nop dword [rax]
kyoto_xanadu.exe+9AAA0: 39 39 - cmp [rcx],edi
kyoto_xanadu.exe+9AAA2: 0F 84 DC 01 00 00 - je near kyoto_xanadu.exe+9AC84
kyoto_xanadu.exe+9AAA8: FF C0 - inc eax
kyoto_xanadu.exe+9AAAA: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9AAAE: 83 F8 0A - cmp eax,0A
kyoto_xanadu.exe+9AAB1: 72 ED - jb short kyoto_xanadu.exe+9AAA0
kyoto_xanadu.exe+9AAB3: B1 01 - mov cl,1
kyoto_xanadu.exe+9AAB5: E9 D6 01 00 00 - jmp kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9AABA: 83 FB 01 - cmp ebx,1
kyoto_xanadu.exe+9AABD: 0F 85 A5 00 00 00 - jne near kyoto_xanadu.exe+9AB68
kyoto_xanadu.exe+9AAC3: 41 80 7F 18 03 - cmp byte [r15+18],3
kyoto_xanadu.exe+9AAC8: 0F 85 BD 02 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AACE: 41 0F B6 47 19 - movzx eax,byte [r15+19]
kyoto_xanadu.exe+9AAD3: 2C 04 - sub al,4
kyoto_xanadu.exe+9AAD5: 3A C3 - cmp al,bl
kyoto_xanadu.exe+9AAD7: 0F 87 AE 02 00 00 - ja near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AADD: 41 8B 0F - mov ecx,[r15]
kyoto_xanadu.exe+9AAE0: 8D 81 E3 F3 FF FF - lea eax,[rcx-0C1D]
kyoto_xanadu.exe+9AAE6: 3D 00 01 00 00 - cmp eax,100
kyoto_xanadu.exe+9AAEB: 72 26 - jb short kyoto_xanadu.exe+9AB13
kyoto_xanadu.exe+9AAED: 89 4C 24 20 - mov [rsp+20],ecx
kyoto_xanadu.exe+9AAF1: 4C 8D 0D 20 81 98 00 - lea r9,[rel kyoto_xanadu.exe+A22C18]
kyoto_xanadu.exe+9AAF8: 41 B8 4E 09 00 00 - mov r8d,94E
kyoto_xanadu.exe+9AAFE: 48 8D 15 DB 7B 98 00 - lea rdx,[rel kyoto_xanadu.exe+A226E0]
kyoto_xanadu.exe+9AB05: B9 03 00 00 00 - mov ecx,3
kyoto_xanadu.exe+9AB0A: E8 A1 85 41 00 - call kyoto_xanadu.exe+4B30B0
kyoto_xanadu.exe+9AB0F: 32 C0 - xor al,al
kyoto_xanadu.exe+9AB11: EB 11 - jmp short kyoto_xanadu.exe+9AB24
kyoto_xanadu.exe+9AB13: 8B C8 - mov ecx,eax
kyoto_xanadu.exe+9AB15: 48 8B 05 E4 31 AD 00 - mov rax,[rel kyoto_xanadu.exe+B6DD00]
kyoto_xanadu.exe+9AB1C: 0F B6 84 01 B0 4D 06 00 - movzx eax,byte [rcx+rax+64DB0]
kyoto_xanadu.exe+9AB24: 24 01 - and al,1
kyoto_xanadu.exe+9AB26: 83 FF 03 - cmp edi,3
kyoto_xanadu.exe+9AB29: 75 1C - jne short kyoto_xanadu.exe+9AB47
kyoto_xanadu.exe+9AB2B: 84 C0 - test al,al
kyoto_xanadu.exe+9AB2D: 75 18 - jne short kyoto_xanadu.exe+9AB47
kyoto_xanadu.exe+9AB2F: B1 01 - mov cl,1
kyoto_xanadu.exe+9AB31: 32 C0 - xor al,al
kyoto_xanadu.exe+9AB33: 0F B6 C0 - movzx eax,al
kyoto_xanadu.exe+9AB36: 85 FF - test edi,edi
kyoto_xanadu.exe+9AB38: BA 01 00 00 00 - mov edx,1
kyoto_xanadu.exe+9AB3D: 0F 44 C2 - cmove eax,edx
kyoto_xanadu.exe+9AB40: 0A C8 - or cl,al
kyoto_xanadu.exe+9AB42: E9 49 01 00 00 - jmp kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9AB47: 32 C9 - xor cl,cl
kyoto_xanadu.exe+9AB49: 83 FF 04 - cmp edi,4
kyoto_xanadu.exe+9AB4C: 75 E3 - jne short kyoto_xanadu.exe+9AB31
kyoto_xanadu.exe+9AB4E: 84 C0 - test al,al
kyoto_xanadu.exe+9AB50: 74 DF - je short kyoto_xanadu.exe+9AB31
kyoto_xanadu.exe+9AB52: B0 01 - mov al,1
kyoto_xanadu.exe+9AB54: 0F B6 C0 - movzx eax,al
kyoto_xanadu.exe+9AB57: 85 FF - test edi,edi
kyoto_xanadu.exe+9AB59: BA 01 00 00 00 - mov edx,1
kyoto_xanadu.exe+9AB5E: 0F 44 C2 - cmove eax,edx
kyoto_xanadu.exe+9AB61: 0A C8 - or cl,al
kyoto_xanadu.exe+9AB63: E9 28 01 00 00 - jmp kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9AB68: 83 FB 02 - cmp ebx,2
kyoto_xanadu.exe+9AB6B: 75 27 - jne short kyoto_xanadu.exe+9AB94
kyoto_xanadu.exe+9AB6D: 41 80 7F 18 18 - cmp byte [r15+18],18
kyoto_xanadu.exe+9AB72: 0F 85 13 02 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AB78: 41 8B 47 70 - mov eax,[r15+70]
kyoto_xanadu.exe+9AB7C: 2B C7 - sub eax,edi
kyoto_xanadu.exe+9AB7E: 83 C0 04 - add eax,4
kyoto_xanadu.exe+9AB81: 0F 84 11 01 00 00 - je near kyoto_xanadu.exe+9AC98
kyoto_xanadu.exe+9AB87: 85 FF - test edi,edi
kyoto_xanadu.exe+9AB89: 0F 85 FC 01 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AB8F: E9 04 01 00 00 - jmp kyoto_xanadu.exe+9AC98
kyoto_xanadu.exe+9AB94: 83 FB 03 - cmp ebx,3
kyoto_xanadu.exe+9AB97: 75 48 - jne short kyoto_xanadu.exe+9ABE1
kyoto_xanadu.exe+9AB99: 41 0F B6 57 19 - movzx edx,byte [r15+19]
kyoto_xanadu.exe+9AB9E: 80 FA 0F - cmp dl,0F
kyoto_xanadu.exe+9ABA1: 0F 87 E4 01 00 00 - ja near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9ABA7: B9 00 D4 00 00 - mov ecx,0D400
kyoto_xanadu.exe+9ABAC: 0F A3 D1 - bt ecx,edx
kyoto_xanadu.exe+9ABAF: 0F 83 D6 01 00 00 - jae near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9ABB5: 41 8B C4 - mov eax,r12d
kyoto_xanadu.exe+9ABB8: 48 8D 4D C7 - lea rcx,[rbp-39]
kyoto_xanadu.exe+9ABBC: 0F 1F 40 00 - nop dword [rax]
kyoto_xanadu.exe+9ABC0: 39 39 - cmp [rcx],edi
kyoto_xanadu.exe+9ABC2: 74 12 - je short kyoto_xanadu.exe+9ABD6
kyoto_xanadu.exe+9ABC4: FF C0 - inc eax
kyoto_xanadu.exe+9ABC6: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9ABCA: 83 F8 0A - cmp eax,0A
kyoto_xanadu.exe+9ABCD: 72 F1 - jb short kyoto_xanadu.exe+9ABC0
kyoto_xanadu.exe+9ABCF: B1 01 - mov cl,1
kyoto_xanadu.exe+9ABD1: E9 BA 00 00 00 - jmp kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9ABD6: 8B C8 - mov ecx,eax
kyoto_xanadu.exe+9ABD8: 39 54 CD CB - cmp [rbp+rcx*8-35],edx
kyoto_xanadu.exe+9ABDC: E9 AC 00 00 00 - jmp kyoto_xanadu.exe+9AC8D
kyoto_xanadu.exe+9ABE1: 83 FB 04 - cmp ebx,4
kyoto_xanadu.exe+9ABE4: 75 3D - jne short kyoto_xanadu.exe+9AC23
kyoto_xanadu.exe+9ABE6: 41 0F B6 57 19 - movzx edx,byte [r15+19]
kyoto_xanadu.exe+9ABEB: 80 FA 11 - cmp dl,11
kyoto_xanadu.exe+9ABEE: 0F 87 97 01 00 00 - ja near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9ABF4: B9 00 28 03 00 - mov ecx,32800
kyoto_xanadu.exe+9ABF9: 0F A3 D1 - bt ecx,edx
kyoto_xanadu.exe+9ABFC: 0F 83 89 01 00 00 - jae near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AC02: 41 8B C4 - mov eax,r12d
kyoto_xanadu.exe+9AC05: 48 8D 4D C7 - lea rcx,[rbp-39]
kyoto_xanadu.exe+9AC09: 0F 1F 80 00 00 00 00 - nop dword [rax]
kyoto_xanadu.exe+9AC10: 39 39 - cmp [rcx],edi
kyoto_xanadu.exe+9AC12: 74 C2 - je short kyoto_xanadu.exe+9ABD6
kyoto_xanadu.exe+9AC14: FF C0 - inc eax
kyoto_xanadu.exe+9AC16: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9AC1A: 83 F8 0A - cmp eax,0A
kyoto_xanadu.exe+9AC1D: 72 F1 - jb short kyoto_xanadu.exe+9AC10
kyoto_xanadu.exe+9AC1F: B1 01 - mov cl,1
kyoto_xanadu.exe+9AC21: EB 6D - jmp short kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9AC23: 83 FB 05 - cmp ebx,5
kyoto_xanadu.exe+9AC26: 75 2E - jne short kyoto_xanadu.exe+9AC56
kyoto_xanadu.exe+9AC28: 41 0F B6 47 18 - movzx eax,byte [r15+18]
kyoto_xanadu.exe+9AC2D: 83 C0 FE - add eax,0FFFFFFFE
kyoto_xanadu.exe+9AC30: 83 F8 1C - cmp eax,1C
kyoto_xanadu.exe+9AC33: 0F 87 52 01 00 00 - ja near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AC39: 48 98 - cdqe
kyoto_xanadu.exe+9AC3B: 48 8D 15 BE 53 F6 FF - lea rdx,[rel kyoto_xanadu.exe+0]
kyoto_xanadu.exe+9AC42: 0F B6 84 02 28 AE 09 00 - movzx eax,byte [rdx+rax+9AE28]
kyoto_xanadu.exe+9AC4A: 8B 8C 82 20 AE 09 00 - mov ecx,[rdx+rax*4+9AE20]
kyoto_xanadu.exe+9AC51: 48 03 CA - add rcx,rdx
kyoto_xanadu.exe+9AC54: FF E1 - jmp rcx
kyoto_xanadu.exe+9AC56: 83 FB 08 - cmp ebx,8
kyoto_xanadu.exe+9AC59: 0F 85 2C 01 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AC5F: 41 80 7F 18 1E - cmp byte [r15+18],1E
kyoto_xanadu.exe+9AC64: 0F 85 21 01 00 00 - jne near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AC6A: 41 8B C4 - mov eax,r12d
kyoto_xanadu.exe+9AC6D: 48 8D 4D C7 - lea rcx,[rbp-39]
kyoto_xanadu.exe+9AC71: 39 39 - cmp [rcx],edi
kyoto_xanadu.exe+9AC73: 74 0F - je short kyoto_xanadu.exe+9AC84
kyoto_xanadu.exe+9AC75: FF C0 - inc eax
kyoto_xanadu.exe+9AC77: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9AC7B: 83 F8 0A - cmp eax,0A
kyoto_xanadu.exe+9AC7E: 72 F1 - jb short kyoto_xanadu.exe+9AC71
kyoto_xanadu.exe+9AC80: B1 01 - mov cl,1
kyoto_xanadu.exe+9AC82: EB 0C - jmp short kyoto_xanadu.exe+9AC90
kyoto_xanadu.exe+9AC84: 41 0F B6 4F 19 - movzx ecx,byte [r15+19]
kyoto_xanadu.exe+9AC89: 39 4C C5 CB - cmp [rbp+rax*8-35],ecx
kyoto_xanadu.exe+9AC8D: 0F 94 C1 - sete cl
kyoto_xanadu.exe+9AC90: 84 C9 - test cl,cl
kyoto_xanadu.exe+9AC92: 0F 84 F3 00 00 00 - je near kyoto_xanadu.exe+9AD8B
kyoto_xanadu.exe+9AC98: 48 8B 4D 9F - mov rcx,[rbp-61]
kyoto_xanadu.exe+9AC9C: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+9AC9F: 74 2B - je short kyoto_xanadu.exe+9ACCC
kyoto_xanadu.exe+9ACA1: 8B 81 08 01 00 00 - mov eax,[rcx+108]
kyoto_xanadu.exe+9ACA7: 85 C0 - test eax,eax
kyoto_xanadu.exe+9ACA9: 74 21 - je short kyoto_xanadu.exe+9ACCC
kyoto_xanadu.exe+9ACAB: 48 8B 89 00 01 00 00 - mov rcx,[rcx+100]
kyoto_xanadu.exe+9ACB2: 48 8D 1C 81 - lea rbx,[rcx+rax*4]
kyoto_xanadu.exe+9ACB6: 45 0F B6 47 19 - movzx r8d,byte [r15+19]
kyoto_xanadu.exe+9ACBB: 48 8B D3 - mov rdx,rbx
kyoto_xanadu.exe+9ACBE: E8 BD D1 64 00 - call kyoto_xanadu.exe+6E7E80
kyoto_xanadu.exe+9ACC3: 48 3B C3 - cmp rax,rbx
kyoto_xanadu.exe+9ACC6: 0F 84 BC 00 00 00 - je near kyoto_xanadu.exe+9AD88
kyoto_xanadu.exe+9ACCC: 4C 3B EE - cmp r13,rsi
kyoto_xanadu.exe+9ACCF: 0F 82 A8 00 00 00 - jb near kyoto_xanadu.exe+9AD7D
kyoto_xanadu.exe+9ACD5: 49 8B D5 - mov rdx,r13
kyoto_xanadu.exe+9ACD8: 48 D1 EA - shr rdx,1
kyoto_xanadu.exe+9ACDB: 4A 8D 0C 2A - lea rcx,[rdx+r13]
kyoto_xanadu.exe+9ACDF: 49 8D 45 01 - lea rax,[r13+1]
kyoto_xanadu.exe+9ACE3: BB 01 00 00 00 - mov ebx,1
kyoto_xanadu.exe+9ACE8: 48 3B C1 - cmp rax,rcx
kyoto_xanadu.exe+9ACEB: 48 0F 42 DA - cmovb rbx,rdx
kyoto_xanadu.exe+9ACEF: 49 03 DD - add rbx,r13
kyoto_xanadu.exe+9ACF2: 48 3B DE - cmp rbx,rsi
kyoto_xanadu.exe+9ACF5: 0F 86 82 00 00 00 - jbe near kyoto_xanadu.exe+9AD7D
kyoto_xanadu.exe+9ACFB: 48 8B 0D 2E 30 AD 00 - mov rcx,[rel kyoto_xanadu.exe+B6DD30]
kyoto_xanadu.exe+9AD02: 48 83 C1 08 - add rcx,8
kyoto_xanadu.exe+9AD06: 48 8D 14 DD 00 00 00 00 - lea rdx,[rbx*8]
kyoto_xanadu.exe+9AD0E: E8 1D 68 46 00 - call kyoto_xanadu.exe+501530
kyoto_xanadu.exe+9AD13: 48 8B F0 - mov rsi,rax
kyoto_xanadu.exe+9AD16: 4D 85 F6 - test r14,r14
kyoto_xanadu.exe+9AD19: 74 54 - je short kyoto_xanadu.exe+9AD6F
kyoto_xanadu.exe+9AD1B: 4E 8D 04 ED 00 00 00 00 - lea r8,[r13*8]
kyoto_xanadu.exe+9AD23: 49 8B D6 - mov rdx,r14
kyoto_xanadu.exe+9AD26: 48 8B C8 - mov rcx,rax
kyoto_xanadu.exe+9AD29: E8 52 53 72 00 - call kyoto_xanadu.exe+7C0080
kyoto_xanadu.exe+9AD2E: 48 8B 15 FB 2F AD 00 - mov rdx,[rel kyoto_xanadu.exe+B6DD30]
kyoto_xanadu.exe+9AD35: 48 8D 4A 08 - lea rcx,[rdx+8]
kyoto_xanadu.exe+9AD39: 4C 39 B2 E8 38 00 00 - cmp [rdx+38E8],r14
kyoto_xanadu.exe+9AD40: 77 09 - ja short kyoto_xanadu.exe+9AD4B
kyoto_xanadu.exe+9AD42: 4C 3B B2 F0 38 00 00 - cmp r14,[rdx+38F0]
kyoto_xanadu.exe+9AD49: 72 12 - jb short kyoto_xanadu.exe+9AD5D
kyoto_xanadu.exe+9AD4B: 4C 39 B2 48 72 00 00 - cmp [rdx+7248],r14
kyoto_xanadu.exe+9AD52: 77 13 - ja short kyoto_xanadu.exe+9AD67
kyoto_xanadu.exe+9AD54: 4C 3B B2 50 72 00 00 - cmp r14,[rdx+7250]
kyoto_xanadu.exe+9AD5B: 73 0A - jae short kyoto_xanadu.exe+9AD67
kyoto_xanadu.exe+9AD5D: 49 8B D6 - mov rdx,r14
kyoto_xanadu.exe+9AD60: E8 1B 6C 46 00 - call kyoto_xanadu.exe+501980
kyoto_xanadu.exe+9AD65: EB 08 - jmp short kyoto_xanadu.exe+9AD6F
kyoto_xanadu.exe+9AD67: 49 8B CE - mov rcx,r14
kyoto_xanadu.exe+9AD6A: E8 15 7C 70 00 - call kyoto_xanadu.exe+7A2984
kyoto_xanadu.exe+9AD6F: 4C 8B F6 - mov r14,rsi
kyoto_xanadu.exe+9AD72: 48 89 75 AF - mov [rbp-51],rsi
kyoto_xanadu.exe+9AD76: 48 8B F3 - mov rsi,rbx
kyoto_xanadu.exe+9AD79: 48 89 5D BF - mov [rbp-41],rbx
kyoto_xanadu.exe+9AD7D: 4F 89 3C EE - mov [r14+r13*8],r15
kyoto_xanadu.exe+9AD81: 49 FF C5 - inc r13
kyoto_xanadu.exe+9AD84: 4C 89 6D B7 - mov [rbp-49],r13
kyoto_xanadu.exe+9AD88: 8B 5D 8B - mov ebx,[rbp-75]
kyoto_xanadu.exe+9AD8B: 8B 55 8F - mov edx,[rbp-71]
kyoto_xanadu.exe+9AD8E: FF C2 - inc edx
kyoto_xanadu.exe+9AD90: 89 55 8F - mov [rbp-71],edx
kyoto_xanadu.exe+9AD93: 48 FF 45 97 - inc qword [rbp-69]
kyoto_xanadu.exe+9AD97: 81 FA 88 13 00 00 - cmp edx,1388
kyoto_xanadu.exe+9AD9D: 0F 82 6D FC FF FF - jb near kyoto_xanadu.exe+9AA10
kyoto_xanadu.exe+9ADA3: 4E 8D 04 ED 00 00 00 00 - lea r8,[r13*8]
kyoto_xanadu.exe+9ADAB: 4B 8D 1C 30 - lea rbx,[r8+r14]
kyoto_xanadu.exe+9ADAF: 49 C1 F8 03 - sar r8,3
kyoto_xanadu.exe+9ADB3: 44 0F B6 4D 87 - movzx r9d,byte [rbp-79]
kyoto_xanadu.exe+9ADB8: 48 8B D3 - mov rdx,rbx
kyoto_xanadu.exe+9ADBB: 49 8B CE - mov rcx,r14
kyoto_xanadu.exe+9ADBE: E8 6D 1F 00 00 - call kyoto_xanadu.exe+9CD30
kyoto_xanadu.exe+9ADC3: 4C 3B F3 - cmp r14,rbx
kyoto_xanadu.exe+9ADC6: 74 1C - je short kyoto_xanadu.exe+9ADE4
kyoto_xanadu.exe+9ADC8: 48 8B 7D A7 - mov rdi,[rbp-59]
kyoto_xanadu.exe+9ADCC: 0F 1F 40 00 - nop dword [rax]
kyoto_xanadu.exe+9ADD0: 49 8B 16 - mov rdx,[r14]
kyoto_xanadu.exe+9ADD3: 48 8B CF - mov rcx,rdi
kyoto_xanadu.exe+9ADD6: E8 C5 EE FA FF - call kyoto_xanadu.exe+49CA0
kyoto_xanadu.exe+9ADDB: 49 83 C6 08 - add r14,8
kyoto_xanadu.exe+9ADDF: 4C 3B F3 - cmp r14,rbx
kyoto_xanadu.exe+9ADE2: 75 EC - jne short kyoto_xanadu.exe+9ADD0
kyoto_xanadu.exe+9ADE4: 4C 89 65 B7 - mov [rbp-49],r12
kyoto_xanadu.exe+9ADE8: 48 8D 4D AF - lea rcx,[rbp-51]
kyoto_xanadu.exe+9ADEC: E8 7F 08 F9 FF - call kyoto_xanadu.exe+2B670
kyoto_xanadu.exe+9ADF1: 90 - nop
kyoto_xanadu.exe+9ADF2: 48 8B 4D 17 - mov rcx,[rbp+17]
kyoto_xanadu.exe+9ADF6: 48 33 CC - xor rcx,rsp
kyoto_xanadu.exe+9ADF9: E8 62 D3 64 00 - call kyoto_xanadu.exe+6E8160
kyoto_xanadu.exe+9ADFE: 4C 8D 9C 24 D0 00 00 00 - lea r11,[rsp+0D0]
kyoto_xanadu.exe+9AE06: 49 8B 5B 30 - mov rbx,[r11+30]
kyoto_xanadu.exe+9AE0A: 49 8B 73 40 - mov rsi,[r11+40]
kyoto_xanadu.exe+9AE0E: 49 8B 7B 48 - mov rdi,[r11+48]
kyoto_xanadu.exe+9AE12: 49 8B E3 - mov rsp,r11
kyoto_xanadu.exe+9AE15: 41 5F - pop r15
kyoto_xanadu.exe+9AE17: 41 5E - pop r14
kyoto_xanadu.exe+9AE19: 41 5D - pop r13
kyoto_xanadu.exe+9AE1B: 41 5C - pop r12
kyoto_xanadu.exe+9AE1D: 5D - pop rbp
kyoto_xanadu.exe+9AE1E: C3 - ret
kyoto_xanadu.exe+9AE1F: 90 - nop
kyoto_xanadu.exe+9AE20: 98 - cwde
kyoto_xanadu.exe+9AE21: AC - lodsb
kyoto_xanadu.exe+9AE22: 09 00 - or [rax],eax
kyoto_xanadu.exe+9AE24: 8B AD 09 00 00 01 - mov ebp,[rbp+1000009]
kyoto_xanadu.exe+9AE2A: 00 01 - add [rcx],al
kyoto_xanadu.exe+9AE2C: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE2E: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE30: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE32: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE34: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE36: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE38: 01 00 - add [rax],eax
kyoto_xanadu.exe+9AE3A: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE3C: 00 00 - add [rax],al
kyoto_xanadu.exe+9AE3E: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE40: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE42: 01 01 - add [rcx],eax
kyoto_xanadu.exe+9AE44: 00 CC - add ah,cl
}
13
"Cur. amt must >="
0
C08000
Byte
i_min_item_amt_thres
14
"set amt to"
0
C08000
2 Bytes
i_set_item_amt_to
18
"Potion avail count: no change"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/16
}
[ENABLE]
aobscanmodule(INJECT_INF_POTION,$process,41 2B C0 89 ?? 64 4D 06 00)
// raw AOB: EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 54 4D 06 00 EB ?? 4C 89 89 50 4D 06 00 39 91 60 4D 06 00 75 ?? 8B 81 64 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 64 4D 06 00 C3 44 89 89 64 4D 06 00 C3 CC CC CC CC 48 83 EC 38 8D 42 FF 83 F8 02 77 ?? 48 8D 81 18 CE 0A 00 45 33 C0 4C 8D 88 4C 0E 00 00 49 3B C1 74
// injection point AOB: 41 2B C0 89 81 64 4D 06 00 C3 44 89 89 64 4D 06 00 C3 CC CC CC CC 48 83 EC 38 8D 42 FF 83 F8 02 77 ?? 48 8D 81 18 CE 0A 00 45 33 C0 4C 8D 88 4C 0E 00 00 49 3B C1 74
INJECT_INF_POTION:
db 90 90 90
registersymbol(INJECT_INF_POTION)
[DISABLE]
INJECT_INF_POTION:
db 41 2B C0
unregistersymbol(INJECT_INF_POTION)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+2666EA
kyoto_xanadu.exe+266640: 45 33 C9 - xor r9d,r9d
kyoto_xanadu.exe+266643: 39 91 20 4D 06 00 - cmp [rcx+64D20],edx
kyoto_xanadu.exe+266649: 75 1D - jne short kyoto_xanadu.exe+266668
kyoto_xanadu.exe+26664B: 8B 81 24 4D 06 00 - mov eax,[rcx+64D24]
kyoto_xanadu.exe+266651: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266654: 76 0B - jbe short kyoto_xanadu.exe+266661
kyoto_xanadu.exe+266656: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+266659: 89 81 24 4D 06 00 - mov [rcx+64D24],eax
kyoto_xanadu.exe+26665F: EB 07 - jmp short kyoto_xanadu.exe+266668
kyoto_xanadu.exe+266661: 4C 89 89 20 4D 06 00 - mov [rcx+64D20],r9
kyoto_xanadu.exe+266668: 39 91 30 4D 06 00 - cmp [rcx+64D30],edx
kyoto_xanadu.exe+26666E: 75 1D - jne short kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266670: 8B 81 34 4D 06 00 - mov eax,[rcx+64D34]
kyoto_xanadu.exe+266676: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266679: 76 0B - jbe short kyoto_xanadu.exe+266686
kyoto_xanadu.exe+26667B: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+26667E: 89 81 34 4D 06 00 - mov [rcx+64D34],eax
kyoto_xanadu.exe+266684: EB 07 - jmp short kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266686: 4C 89 89 30 4D 06 00 - mov [rcx+64D30],r9
kyoto_xanadu.exe+26668D: 39 91 40 4D 06 00 - cmp [rcx+64D40],edx
kyoto_xanadu.exe+266693: 75 1D - jne short kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+266695: 8B 81 44 4D 06 00 - mov eax,[rcx+64D44]
kyoto_xanadu.exe+26669B: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+26669E: 76 0B - jbe short kyoto_xanadu.exe+2666AB
kyoto_xanadu.exe+2666A0: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666A3: 89 81 44 4D 06 00 - mov [rcx+64D44],eax
kyoto_xanadu.exe+2666A9: EB 07 - jmp short kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+2666AB: 4C 89 89 40 4D 06 00 - mov [rcx+64D40],r9
kyoto_xanadu.exe+2666B2: 39 91 50 4D 06 00 - cmp [rcx+64D50],edx
kyoto_xanadu.exe+2666B8: 75 1D - jne short kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666BA: 8B 81 54 4D 06 00 - mov eax,[rcx+64D54]
kyoto_xanadu.exe+2666C0: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+2666C3: 76 0B - jbe short kyoto_xanadu.exe+2666D0
kyoto_xanadu.exe+2666C5: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666C8: 89 81 54 4D 06 00 - mov [rcx+64D54],eax
kyoto_xanadu.exe+2666CE: EB 07 - jmp short kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666D0: 4C 89 89 50 4D 06 00 - mov [rcx+64D50],r9
kyoto_xanadu.exe+2666D7: 39 91 60 4D 06 00 - cmp [rcx+64D60],edx
kyoto_xanadu.exe+2666DD: 75 1C - jne short kyoto_xanadu.exe+2666FB
kyoto_xanadu.exe+2666DF: 8B 81 64 4D 06 00 - mov eax,[rcx+64D64]
kyoto_xanadu.exe+2666E5: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+2666E8: 76 0A - jbe short kyoto_xanadu.exe+2666F4
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+2666EA: 41 2B C0 - sub eax,r8d
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+2666ED: 89 81 64 4D 06 00 - mov [rcx+64D64],eax
kyoto_xanadu.exe+2666F3: C3 - ret
kyoto_xanadu.exe+2666F4: 44 89 89 64 4D 06 00 - mov [rcx+64D64],r9d
kyoto_xanadu.exe+2666FB: C3 - ret
kyoto_xanadu.exe+2666FC: CC - int3
kyoto_xanadu.exe+2666FD: CC - int3
kyoto_xanadu.exe+2666FE: CC - int3
kyoto_xanadu.exe+2666FF: CC - int3
kyoto_xanadu.exe+266700: 48 83 EC 38 - sub rsp,38
kyoto_xanadu.exe+266704: 8D 42 FF - lea eax,[rdx-1]
kyoto_xanadu.exe+266707: 83 F8 02 - cmp eax,2
kyoto_xanadu.exe+26670A: 77 50 - ja short kyoto_xanadu.exe+26675C
kyoto_xanadu.exe+26670C: 48 8D 81 18 CE 0A 00 - lea rax,[rcx+0ACE18]
kyoto_xanadu.exe+266713: 45 33 C0 - xor r8d,r8d
kyoto_xanadu.exe+266716: 4C 8D 88 4C 0E 00 00 - lea r9,[rax+0E4C]
kyoto_xanadu.exe+26671D: 49 3B C1 - cmp rax,r9
}
154
"Equip consumables: count no change"
1
155
"#0"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_3744,$process,41 2B C0 89 ?? 24 4D 06 00)
// raw AOB: CC CC CC CC CC CC CC CC CC CC 45 33 C9 39 91 20 4D 06 00 75 ?? 8B 81 24 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 24 4D 06 00 EB ?? 4C 89 89 20 4D 06 00 39 91 30 4D 06 00 75 ?? 8B 81 34 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 34 4D 06 00 EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76
// injection point AOB: 41 2B C0 89 81 24 4D 06 00 EB ?? 4C 89 89 20 4D 06 00 39 91 30 4D 06 00 75 ?? 8B 81 34 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 34 4D 06 00 EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76
INJECT_3744:
db 90 90 90
registersymbol(INJECT_3744)
[DISABLE]
INJECT_3744:
db 41 2B C0
unregistersymbol(INJECT_3744)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+266656
kyoto_xanadu.exe+266636: CC - int 3
kyoto_xanadu.exe+266637: CC - int 3
kyoto_xanadu.exe+266638: CC - int 3
kyoto_xanadu.exe+266639: CC - int 3
kyoto_xanadu.exe+26663A: CC - int 3
kyoto_xanadu.exe+26663B: CC - int 3
kyoto_xanadu.exe+26663C: CC - int 3
kyoto_xanadu.exe+26663D: CC - int 3
kyoto_xanadu.exe+26663E: CC - int 3
kyoto_xanadu.exe+26663F: CC - int 3
kyoto_xanadu.exe+266640: 45 33 C9 - xor r9d,r9d
kyoto_xanadu.exe+266643: 39 91 20 4D 06 00 - cmp [rcx+00064D20],edx
kyoto_xanadu.exe+266649: 75 1D - jne kyoto_xanadu.exe+266668
kyoto_xanadu.exe+26664B: 8B 81 24 4D 06 00 - mov eax,[rcx+00064D24]
kyoto_xanadu.exe+266651: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266654: 76 0B - jna kyoto_xanadu.exe+266661
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+266656: 41 2B C0 - sub eax,r8d
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+266659: 89 81 24 4D 06 00 - mov [rcx+00064D24],eax
kyoto_xanadu.exe+26665F: EB 07 - jmp kyoto_xanadu.exe+266668
kyoto_xanadu.exe+266661: 4C 89 89 20 4D 06 00 - mov [rcx+00064D20],r9
kyoto_xanadu.exe+266668: 39 91 30 4D 06 00 - cmp [rcx+00064D30],edx
kyoto_xanadu.exe+26666E: 75 1D - jne kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266670: 8B 81 34 4D 06 00 - mov eax,[rcx+00064D34]
kyoto_xanadu.exe+266676: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266679: 76 0B - jna kyoto_xanadu.exe+266686
kyoto_xanadu.exe+26667B: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+26667E: 89 81 34 4D 06 00 - mov [rcx+00064D34],eax
kyoto_xanadu.exe+266684: EB 07 - jmp kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266686: 4C 89 89 30 4D 06 00 - mov [rcx+00064D30],r9
kyoto_xanadu.exe+26668D: 39 91 40 4D 06 00 - cmp [rcx+00064D40],edx
kyoto_xanadu.exe+266693: 75 1D - jne kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+266695: 8B 81 44 4D 06 00 - mov eax,[rcx+00064D44]
kyoto_xanadu.exe+26669B: 41 3B C0 - cmp eax,r8d
}
27
"#1"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_8019,$process,41 2B C0 89 ?? 34 4D 06 00)
// raw AOB: CC 45 33 C9 39 91 20 4D 06 00 75 ?? 8B 81 24 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 24 4D 06 00 EB ?? 4C 89 89 20 4D 06 00 39 91 30 4D 06 00 75 ?? 8B 81 34 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 34 4D 06 00 EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 44 4D 06 00 EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76
// injection point AOB: 41 2B C0 89 81 34 4D 06 00 EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 44 4D 06 00 EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76
INJECT_8019:
db 90 90 90
registersymbol(INJECT_8019)
[DISABLE]
INJECT_8019:
db 41 2B C0
unregistersymbol(INJECT_8019)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+26667B
kyoto_xanadu.exe+26663F: CC - int 3
kyoto_xanadu.exe+266640: 45 33 C9 - xor r9d,r9d
kyoto_xanadu.exe+266643: 39 91 20 4D 06 00 - cmp [rcx+00064D20],edx
kyoto_xanadu.exe+266649: 75 1D - jne kyoto_xanadu.exe+266668
kyoto_xanadu.exe+26664B: 8B 81 24 4D 06 00 - mov eax,[rcx+00064D24]
kyoto_xanadu.exe+266651: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266654: 76 0B - jna kyoto_xanadu.exe+266661
kyoto_xanadu.exe+266656: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+266659: 89 81 24 4D 06 00 - mov [rcx+00064D24],eax
kyoto_xanadu.exe+26665F: EB 07 - jmp kyoto_xanadu.exe+266668
kyoto_xanadu.exe+266661: 4C 89 89 20 4D 06 00 - mov [rcx+00064D20],r9
kyoto_xanadu.exe+266668: 39 91 30 4D 06 00 - cmp [rcx+00064D30],edx
kyoto_xanadu.exe+26666E: 75 1D - jne kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266670: 8B 81 34 4D 06 00 - mov eax,[rcx+00064D34]
kyoto_xanadu.exe+266676: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266679: 76 0B - jna kyoto_xanadu.exe+266686
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+26667B: 41 2B C0 - sub eax,r8d
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+26667E: 89 81 34 4D 06 00 - mov [rcx+00064D34],eax
kyoto_xanadu.exe+266684: EB 07 - jmp kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266686: 4C 89 89 30 4D 06 00 - mov [rcx+00064D30],r9
kyoto_xanadu.exe+26668D: 39 91 40 4D 06 00 - cmp [rcx+00064D40],edx
kyoto_xanadu.exe+266693: 75 1D - jne kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+266695: 8B 81 44 4D 06 00 - mov eax,[rcx+00064D44]
kyoto_xanadu.exe+26669B: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+26669E: 76 0B - jna kyoto_xanadu.exe+2666AB
kyoto_xanadu.exe+2666A0: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666A3: 89 81 44 4D 06 00 - mov [rcx+00064D44],eax
kyoto_xanadu.exe+2666A9: EB 07 - jmp kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+2666AB: 4C 89 89 40 4D 06 00 - mov [rcx+00064D40],r9
kyoto_xanadu.exe+2666B2: 39 91 50 4D 06 00 - cmp [rcx+00064D50],edx
kyoto_xanadu.exe+2666B8: 75 1D - jne kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666BA: 8B 81 54 4D 06 00 - mov eax,[rcx+00064D54]
kyoto_xanadu.exe+2666C0: 41 3B C0 - cmp eax,r8d
}
153
"#2"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_9230,$process,41 2B C0 89 ?? 44 4D 06 00)
// raw AOB: EB ?? 4C 89 89 20 4D 06 00 39 91 30 4D 06 00 75 ?? 8B 81 34 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 34 4D 06 00 EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 44 4D 06 00 EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 54 4D 06 00 EB ?? 4C 89 89 50 4D 06 00 39 91 60 4D 06 00 75 ?? 8B 81 64 4D 06 00 41 3B C0 76
// injection point AOB: 41 2B C0 89 81 44 4D 06 00 EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 54 4D 06 00 EB ?? 4C 89 89 50 4D 06 00 39 91 60 4D 06 00 75 ?? 8B 81 64 4D 06 00 41 3B C0 76
INJECT_9230:
db 90 90 90
registersymbol(INJECT_9230)
[DISABLE]
INJECT_9230:
db 41 2B C0
unregistersymbol(INJECT_9230)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+2666A0
kyoto_xanadu.exe+26665F: EB 07 - jmp kyoto_xanadu.exe+266668
kyoto_xanadu.exe+266661: 4C 89 89 20 4D 06 00 - mov [rcx+00064D20],r9
kyoto_xanadu.exe+266668: 39 91 30 4D 06 00 - cmp [rcx+00064D30],edx
kyoto_xanadu.exe+26666E: 75 1D - jne kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266670: 8B 81 34 4D 06 00 - mov eax,[rcx+00064D34]
kyoto_xanadu.exe+266676: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+266679: 76 0B - jna kyoto_xanadu.exe+266686
kyoto_xanadu.exe+26667B: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+26667E: 89 81 34 4D 06 00 - mov [rcx+00064D34],eax
kyoto_xanadu.exe+266684: EB 07 - jmp kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266686: 4C 89 89 30 4D 06 00 - mov [rcx+00064D30],r9
kyoto_xanadu.exe+26668D: 39 91 40 4D 06 00 - cmp [rcx+00064D40],edx
kyoto_xanadu.exe+266693: 75 1D - jne kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+266695: 8B 81 44 4D 06 00 - mov eax,[rcx+00064D44]
kyoto_xanadu.exe+26669B: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+26669E: 76 0B - jna kyoto_xanadu.exe+2666AB
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+2666A0: 41 2B C0 - sub eax,r8d
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+2666A3: 89 81 44 4D 06 00 - mov [rcx+00064D44],eax
kyoto_xanadu.exe+2666A9: EB 07 - jmp kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+2666AB: 4C 89 89 40 4D 06 00 - mov [rcx+00064D40],r9
kyoto_xanadu.exe+2666B2: 39 91 50 4D 06 00 - cmp [rcx+00064D50],edx
kyoto_xanadu.exe+2666B8: 75 1D - jne kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666BA: 8B 81 54 4D 06 00 - mov eax,[rcx+00064D54]
kyoto_xanadu.exe+2666C0: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+2666C3: 76 0B - jna kyoto_xanadu.exe+2666D0
kyoto_xanadu.exe+2666C5: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666C8: 89 81 54 4D 06 00 - mov [rcx+00064D54],eax
kyoto_xanadu.exe+2666CE: EB 07 - jmp kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666D0: 4C 89 89 50 4D 06 00 - mov [rcx+00064D50],r9
kyoto_xanadu.exe+2666D7: 39 91 60 4D 06 00 - cmp [rcx+00064D60],edx
kyoto_xanadu.exe+2666DD: 75 1C - jne kyoto_xanadu.exe+2666FB
kyoto_xanadu.exe+2666DF: 8B 81 64 4D 06 00 - mov eax,[rcx+00064D64]
kyoto_xanadu.exe+2666E5: 41 3B C0 - cmp eax,r8d
}
156
"#3"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_6552,$process,41 2B C0 89 ?? 54 4D 06 00)
// raw AOB: EB ?? 4C 89 89 30 4D 06 00 39 91 40 4D 06 00 75 ?? 8B 81 44 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 44 4D 06 00 EB ?? 4C 89 89 40 4D 06 00 39 91 50 4D 06 00 75 ?? 8B 81 54 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 54 4D 06 00 EB ?? 4C 89 89 50 4D 06 00 39 91 60 4D 06 00 75 ?? 8B 81 64 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 64 4D 06 00 C3 44 89 89 64 4D 06 00 C3 CC CC CC CC
// injection point AOB: 41 2B C0 89 81 54 4D 06 00 EB ?? 4C 89 89 50 4D 06 00 39 91 60 4D 06 00 75 ?? 8B 81 64 4D 06 00 41 3B C0 76 ?? 41 2B C0 89 81 64 4D 06 00 C3 44 89 89 64 4D 06 00 C3 CC CC CC CC
INJECT_6552:
db 90 90 90
registersymbol(INJECT_6552)
[DISABLE]
INJECT_6552:
db 41 2B C0
unregistersymbol(INJECT_6552)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+2666C5
kyoto_xanadu.exe+266684: EB 07 - jmp kyoto_xanadu.exe+26668D
kyoto_xanadu.exe+266686: 4C 89 89 30 4D 06 00 - mov [rcx+00064D30],r9
kyoto_xanadu.exe+26668D: 39 91 40 4D 06 00 - cmp [rcx+00064D40],edx
kyoto_xanadu.exe+266693: 75 1D - jne kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+266695: 8B 81 44 4D 06 00 - mov eax,[rcx+00064D44]
kyoto_xanadu.exe+26669B: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+26669E: 76 0B - jna kyoto_xanadu.exe+2666AB
kyoto_xanadu.exe+2666A0: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666A3: 89 81 44 4D 06 00 - mov [rcx+00064D44],eax
kyoto_xanadu.exe+2666A9: EB 07 - jmp kyoto_xanadu.exe+2666B2
kyoto_xanadu.exe+2666AB: 4C 89 89 40 4D 06 00 - mov [rcx+00064D40],r9
kyoto_xanadu.exe+2666B2: 39 91 50 4D 06 00 - cmp [rcx+00064D50],edx
kyoto_xanadu.exe+2666B8: 75 1D - jne kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666BA: 8B 81 54 4D 06 00 - mov eax,[rcx+00064D54]
kyoto_xanadu.exe+2666C0: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+2666C3: 76 0B - jna kyoto_xanadu.exe+2666D0
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+2666C5: 41 2B C0 - sub eax,r8d
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+2666C8: 89 81 54 4D 06 00 - mov [rcx+00064D54],eax
kyoto_xanadu.exe+2666CE: EB 07 - jmp kyoto_xanadu.exe+2666D7
kyoto_xanadu.exe+2666D0: 4C 89 89 50 4D 06 00 - mov [rcx+00064D50],r9
kyoto_xanadu.exe+2666D7: 39 91 60 4D 06 00 - cmp [rcx+00064D60],edx
kyoto_xanadu.exe+2666DD: 75 1C - jne kyoto_xanadu.exe+2666FB
kyoto_xanadu.exe+2666DF: 8B 81 64 4D 06 00 - mov eax,[rcx+00064D64]
kyoto_xanadu.exe+2666E5: 41 3B C0 - cmp eax,r8d
kyoto_xanadu.exe+2666E8: 76 0A - jna kyoto_xanadu.exe+2666F4
kyoto_xanadu.exe+2666EA: 41 2B C0 - sub eax,r8d
kyoto_xanadu.exe+2666ED: 89 81 64 4D 06 00 - mov [rcx+00064D64],eax
kyoto_xanadu.exe+2666F3: C3 - ret
kyoto_xanadu.exe+2666F4: 44 89 89 64 4D 06 00 - mov [rcx+00064D64],r9d
kyoto_xanadu.exe+2666FB: C3 - ret
kyoto_xanadu.exe+2666FC: CC - int 3
kyoto_xanadu.exe+2666FD: CC - int 3
kyoto_xanadu.exe+2666FE: CC - int 3
}
19
"Fast potion CD"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/16
}
[ENABLE]
aobscanmodule(INJECT_FAST_POTION_CD,$process,F3 0F 5C ?? F3 0F 5E ?? EB ?? 0F 28 ?? F3 0F 11 ?? 68)
// raw AOB: F3 0F 5C C6 F3 0F 5E C1 EB ?? 0F 28 C7 F3 0F 11 80 58 4D 06 00 48 8D 88 60 4D 06 00 48 85 C9 74 ?? 44 39 29 74 ?? F3 0F 10 41 08 0F 2F C7 76 ?? F3 0F 59 C1 0F 2F C6 76 ?? F3 0F 5C C6 F3 0F 5E C1 EB ?? 0F 28 C7 F3 0F 11 80 68 4D 06 00 48 8B 05 ?? ?? ?? ?? F6 80 3D 01 00 00 02 0F 84 ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 48 8B B8 10 07 00 00 48 85 FF 0F 84 ?? ?? ?? ?? 48 8B 07 48 8B CF FF 50 20 48 8B D8 48 85 C0 0F 84
// injection point AOB: F3 0F 5C ?? F3 0F 5E ?? EB ?? 0F 28 ?? F3 0F 11 ?? 68 4D 06 00 ?? 8B ?? ?? ?? ?? ?? F6 ?? 3D 01 00 00 02 0F 84 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 10 07 00 00 ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? 8B ?? ?? 8B ?? FF ?? 20 ?? 8B ?? ?? 85 ?? 0F 84
alloc(newmem,$1000,INJECT_FAST_POTION_CD)
alloc(INJECT_FAST_POTION_CDo, $8)
label(code)
label(return)
INJECT_FAST_POTION_CDo:
readmem(INJECT_FAST_POTION_CD, $8)
newmem:
movss xmm6, xmm0
code:
// subss xmm0,xmm6
reassemble(INJECT_FAST_POTION_CD)
// divss xmm0,xmm1
reassemble(INJECT_FAST_POTION_CD+4)
jmp return
align 10 cc
INJECT_FAST_POTION_CD:
jmp newmem
nop 3
return:
registersymbol(INJECT_FAST_POTION_CD INJECT_FAST_POTION_CDo)
[DISABLE]
INJECT_FAST_POTION_CD:
readmem(INJECT_FAST_POTION_CDo, $8)
unregistersymbol(INJECT_FAST_POTION_CD INJECT_FAST_POTION_CDo)
dealloc(newmem)
dealloc(INJECT_FAST_POTION_CDo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+60CC2
kyoto_xanadu.exe+60C89: F3 0F 5C C6 - subss xmm0,xmm6
kyoto_xanadu.exe+60C8D: F3 0F 5E C1 - divss xmm0,xmm1
kyoto_xanadu.exe+60C91: EB 03 - jmp kyoto_xanadu.exe+60C96
kyoto_xanadu.exe+60C93: 0F 28 C7 - movaps xmm0,xmm7
kyoto_xanadu.exe+60C96: F3 0F 11 80 58 4D 06 00 - movss [rax+00064D58],xmm0
kyoto_xanadu.exe+60C9E: 48 8D 88 60 4D 06 00 - lea rcx,[rax+00064D60]
kyoto_xanadu.exe+60CA5: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+60CA8: 74 2D - je kyoto_xanadu.exe+60CD7
kyoto_xanadu.exe+60CAA: 44 39 29 - cmp [rcx],r13d
kyoto_xanadu.exe+60CAD: 74 28 - je kyoto_xanadu.exe+60CD7
kyoto_xanadu.exe+60CAF: F3 0F 10 41 08 - movss xmm0,[rcx+08]
kyoto_xanadu.exe+60CB4: 0F 2F C7 - comiss xmm0,xmm7
kyoto_xanadu.exe+60CB7: 76 1E - jna kyoto_xanadu.exe+60CD7
kyoto_xanadu.exe+60CB9: F3 0F 59 C1 - mulss xmm0,xmm1
kyoto_xanadu.exe+60CBD: 0F 2F C6 - comiss xmm0,xmm6
kyoto_xanadu.exe+60CC0: 76 0A - jna kyoto_xanadu.exe+60CCC
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+60CC2: F3 0F 5C C6 - subss xmm0,xmm6
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+60CC6: F3 0F 5E C1 - divss xmm0,xmm1
kyoto_xanadu.exe+60CCA: EB 03 - jmp kyoto_xanadu.exe+60CCF
kyoto_xanadu.exe+60CCC: 0F 28 C7 - movaps xmm0,xmm7
kyoto_xanadu.exe+60CCF: F3 0F 11 80 68 4D 06 00 - movss [rax+00064D68],xmm0
kyoto_xanadu.exe+60CD7: 48 8B 05 2A D0 B0 00 - mov rax,[kyoto_xanadu.exe+B6DD08]
kyoto_xanadu.exe+60CDE: F6 80 3D 01 00 00 02 - test byte ptr [rax+0000013D],02
kyoto_xanadu.exe+60CE5: 0F 84 B4 01 00 00 - je kyoto_xanadu.exe+60E9F
kyoto_xanadu.exe+60CEB: 48 8B 05 C6 CF B0 00 - mov rax,[kyoto_xanadu.exe+B6DCB8]
kyoto_xanadu.exe+60CF2: 48 8B B8 10 07 00 00 - mov rdi,[rax+00000710]
kyoto_xanadu.exe+60CF9: 48 85 FF - test rdi,rdi
kyoto_xanadu.exe+60CFC: 0F 84 9D 01 00 00 - je kyoto_xanadu.exe+60E9F
kyoto_xanadu.exe+60D02: 48 8B 07 - mov rax,[rdi]
kyoto_xanadu.exe+60D05: 48 8B CF - mov rcx,rdi
kyoto_xanadu.exe+60D08: FF 50 20 - call qword ptr [rax+20]
kyoto_xanadu.exe+60D0B: 48 8B D8 - mov rbx,rax
kyoto_xanadu.exe+60D0E: 48 85 C0 - test rax,rax
}
21
"inf. learning CP"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_MORE_CP,$process,89 ?? 30 ?? 8B ?? 18 E8 ?? ?? ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 8B ?? A8)
// raw AOB: 49 83 BF 00 01 00 00 00 75 ?? 49 8B CF E8 ?? ?? ?? ?? 49 8B 8F 00 01 00 00 49 8B 87 F8 00 00 00 48 8B D3 48 8B 4C C8 F8 E8 ?? ?? ?? ?? 48 8B 9E 88 03 00 00 8B 43 38 45 33 FF 85 C0 78 ?? 41 8B D7 0F 4F D0 89 53 30 48 8B 4B 18 E8 ?? ?? ?? ?? 48 8B CB E8 ?? ?? ?? ?? 48 8B 86 A8 03 00 00 48 85 C0 0F 84 ?? ?? ?? ?? F3 48 0F 2C B8 48 01 00 00 48 8B 0D ?? ?? ?? ?? 48 85 C9 74 ?? 48 83 C1 08 BA 48 00 00 00 E8 ?? ?? ?? ?? EB ?? B9 48 00 00 00 E8
// injection point AOB: 89 ?? 30 ?? 8B ?? 18 E8 ?? ?? ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? ?? 8B ?? A8 03 00 00 ?? 85 ?? 0F 84 ?? ?? ?? ?? F3 ?? 0F 2C ?? 48 01 00 00 ?? 8B ?? ?? ?? ?? ?? ?? 85 ?? 74 ?? ?? 83 ?? 08 ?? 48 00 00 00 E8 ?? ?? ?? ?? EB ?? ?? 48 00 00 00 E8
alloc(newmem,$1000,INJECT_MORE_CP)
alloc(INJECT_MORE_CPo, $7)
label(code)
label(return)
INJECT_MORE_CPo:
readmem(INJECT_MORE_CP, $7)
newmem:
cmp edx, 32
jae @F
mov edx, 32
code:
// mov [rbx+30],edx
reassemble(INJECT_MORE_CP)
// mov rcx,[rbx+18]
reassemble(INJECT_MORE_CP+3)
jmp return
align 10 cc
INJECT_MORE_CP:
jmp newmem
nop 2
return:
registersymbol(INJECT_MORE_CP INJECT_MORE_CPo)
[DISABLE]
INJECT_MORE_CP:
readmem(INJECT_MORE_CPo, $7)
unregistersymbol(INJECT_MORE_CP INJECT_MORE_CPo)
dealloc(newmem)
dealloc(INJECT_MORE_CPo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+3CA2BC
kyoto_xanadu.exe+3CA278: 49 83 BF 00 01 00 00 00 - cmp qword ptr [r15+00000100],00
kyoto_xanadu.exe+3CA280: 75 08 - jne kyoto_xanadu.exe+3CA28A
kyoto_xanadu.exe+3CA282: 49 8B CF - mov rcx,r15
kyoto_xanadu.exe+3CA285: E8 D6 C4 01 00 - call kyoto_xanadu.exe+3E6760
kyoto_xanadu.exe+3CA28A: 49 8B 8F 00 01 00 00 - mov rcx,[r15+00000100]
kyoto_xanadu.exe+3CA291: 49 8B 87 F8 00 00 00 - mov rax,[r15+000000F8]
kyoto_xanadu.exe+3CA298: 48 8B D3 - mov rdx,rbx
kyoto_xanadu.exe+3CA29B: 48 8B 4C C8 F8 - mov rcx,[rax+rcx*8-08]
kyoto_xanadu.exe+3CA2A0: E8 6B AF FF FF - call kyoto_xanadu.exe+3C5210
kyoto_xanadu.exe+3CA2A5: 48 8B 9E 88 03 00 00 - mov rbx,[rsi+00000388]
kyoto_xanadu.exe+3CA2AC: 8B 43 38 - mov eax,[rbx+38]
kyoto_xanadu.exe+3CA2AF: 45 33 FF - xor r15d,r15d
kyoto_xanadu.exe+3CA2B2: 85 C0 - test eax,eax
kyoto_xanadu.exe+3CA2B4: 78 1A - js kyoto_xanadu.exe+3CA2D0
kyoto_xanadu.exe+3CA2B6: 41 8B D7 - mov edx,r15d
kyoto_xanadu.exe+3CA2B9: 0F 4F D0 - cmovg edx,eax
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+3CA2BC: 89 53 30 - mov [rbx+30],edx
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+3CA2BF: 48 8B 4B 18 - mov rcx,[rbx+18]
kyoto_xanadu.exe+3CA2C3: E8 F8 BA 0F 00 - call kyoto_xanadu.exe+4C5DC0
kyoto_xanadu.exe+3CA2C8: 48 8B CB - mov rcx,rbx
kyoto_xanadu.exe+3CA2CB: E8 00 A5 FC FF - call kyoto_xanadu.exe+3947D0
kyoto_xanadu.exe+3CA2D0: 48 8B 86 A8 03 00 00 - mov rax,[rsi+000003A8]
kyoto_xanadu.exe+3CA2D7: 48 85 C0 - test rax,rax
kyoto_xanadu.exe+3CA2DA: 0F 84 D4 00 00 00 - je kyoto_xanadu.exe+3CA3B4
kyoto_xanadu.exe+3CA2E0: F3 48 0F 2C B8 48 01 00 00 - cvttss2si rdi,[rax+00000148]
kyoto_xanadu.exe+3CA2E9: 48 8B 0D 40 3A 7A 00 - mov rcx,[kyoto_xanadu.exe+B6DD30]
kyoto_xanadu.exe+3CA2F0: 48 85 C9 - test rcx,rcx
kyoto_xanadu.exe+3CA2F3: 74 10 - je kyoto_xanadu.exe+3CA305
kyoto_xanadu.exe+3CA2F5: 48 83 C1 08 - add rcx,08
kyoto_xanadu.exe+3CA2F9: BA 48 00 00 00 - mov edx,00000048
kyoto_xanadu.exe+3CA2FE: E8 2D 72 13 00 - call kyoto_xanadu.exe+501530
kyoto_xanadu.exe+3CA303: EB 0A - jmp kyoto_xanadu.exe+3CA30F
kyoto_xanadu.exe+3CA305: B9 48 00 00 00 - mov ecx,00000048
}
23
"inf. shoorting gauge"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_INF_SHOOTING,$process,F3 0F 58 ?? 7C 06 00 00)
// raw AOB: 41 B8 38 04 00 00 48 8D 54 24 20 48 8B CF E8 ?? ?? ?? ?? 48 8B 7C 24 40 84 C0 74 ?? 8B 44 24 28 0F 57 C0 F3 48 0F 2A C0 48 8B 44 24 20 F3 0F 59 00 F3 0F 58 D0 F3 0F 59 D1 F3 0F 5E 15 ?? ?? ?? ?? F3 0F 58 CA F3 0F 58 8B 7C 06 00 00 F3 0F 5D 0D ?? ?? ?? ?? F3 0F 5F D9 F3 0F 11 9B 7C 06 00 00 48 83 C4 30 5B C3 CC CC CC CC CC CC CC 40 53 48 81 EC C0 00 00 00 48 8B D9
// injection point AOB: F3 0F 58 ?? 7C 06 00 00 F3 0F 5D ?? ?? ?? ?? ?? F3 0F 5F ?? F3 0F 11 ?? 7C 06 00 00 48 83 C4 30 ?? C3 CC CC CC CC CC CC CC 40 53 48 81 EC C0 00 00 00 ?? 8B
//maxss xmm1,[kyoto_xanadu.exe+A4E884]
INJECT_INF_SHOOTING+A:
db 5F
return:
registersymbol(INJECT_INF_SHOOTING)
[DISABLE]
INJECT_INF_SHOOTING+A:
db 5D
unregistersymbol(INJECT_INF_SHOOTING)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+197C17
kyoto_xanadu.exe+197BD2: 41 B8 38 04 00 00 - mov r8d,00000438
kyoto_xanadu.exe+197BD8: 48 8D 54 24 20 - lea rdx,[rsp+20]
kyoto_xanadu.exe+197BDD: 48 8B CF - mov rcx,rdi
kyoto_xanadu.exe+197BE0: E8 FB B4 04 00 - call kyoto_xanadu.exe+1E30E0
kyoto_xanadu.exe+197BE5: 48 8B 7C 24 40 - mov rdi,[rsp+40]
kyoto_xanadu.exe+197BEA: 84 C0 - test al,al
kyoto_xanadu.exe+197BEC: 74 19 - je kyoto_xanadu.exe+197C07
kyoto_xanadu.exe+197BEE: 8B 44 24 28 - mov eax,[rsp+28]
kyoto_xanadu.exe+197BF2: 0F 57 C0 - xorps xmm0,xmm0
kyoto_xanadu.exe+197BF5: F3 48 0F 2A C0 - cvtsi2ss xmm0,rax
kyoto_xanadu.exe+197BFA: 48 8B 44 24 20 - mov rax,[rsp+20]
kyoto_xanadu.exe+197BFF: F3 0F 59 00 - mulss xmm0,[rax]
kyoto_xanadu.exe+197C03: F3 0F 58 D0 - addss xmm2,xmm0
kyoto_xanadu.exe+197C07: F3 0F 59 D1 - mulss xmm2,xmm1
kyoto_xanadu.exe+197C0B: F3 0F 5E 15 D5 6A 8B 00 - divss xmm2,[kyoto_xanadu.exe+A4E6E8]
kyoto_xanadu.exe+197C13: F3 0F 58 CA - addss xmm1,xmm2
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+197C17: F3 0F 58 8B 7C 06 00 00 - addss xmm1,[rbx+0000067C]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+197C1F: F3 0F 5D 0D 5D 6C 8B 00 - minss xmm1,[kyoto_xanadu.exe+A4E884]
kyoto_xanadu.exe+197C27: F3 0F 5F D9 - maxss xmm3,xmm1
kyoto_xanadu.exe+197C2B: F3 0F 11 9B 7C 06 00 00 - movss [rbx+0000067C],xmm3
kyoto_xanadu.exe+197C33: 48 83 C4 30 - add rsp,30
kyoto_xanadu.exe+197C37: 5B - pop rbx
kyoto_xanadu.exe+197C38: C3 - ret
kyoto_xanadu.exe+197C39: CC - int 3
kyoto_xanadu.exe+197C3A: CC - int 3
kyoto_xanadu.exe+197C3B: CC - int 3
kyoto_xanadu.exe+197C3C: CC - int 3
kyoto_xanadu.exe+197C3D: CC - int 3
kyoto_xanadu.exe+197C3E: CC - int 3
kyoto_xanadu.exe+197C3F: CC - int 3
kyoto_xanadu.exe+197C40: 40 53 - push rbx
kyoto_xanadu.exe+197C42: 48 81 EC C0 00 00 00 - sub rsp,000000C0
kyoto_xanadu.exe+197C49: 48 8B D9 - mov rbx,rcx
}
25
"inf. soul gauge"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(INJECT_4847,$process,F3 44 0F 5D C6)
// raw AOB: 83 F9 02 75 ?? 8D 04 85 00 00 00 00 66 0F 6E C0 F3 0F 2C F0 0F 28 C6 66 0F 6E CE 0F 5B C9 F3 0F 59 CE 0F 28 F7 F3 41 0F 5E C8 F3 0F 5C C1 F3 0F 5D F0 F3 41 0F 10 87 6C 07 00 00 F3 41 0F 59 F1 F3 0F 58 F0 F3 44 0F 5D C6 F3 41 0F 5F F8 0F 2E C7 F3 41 0F 11 BF 6C 07 00 00 7A ?? 74 ?? 48 8B 05 ?? ?? ?? ?? B2 01 48 8B 88 00 01 00 00 48 8B 89 88 01 00 00 48 8B 89 90 01 00 00 E8 ?? ?? ?? ?? 48 8B 4D E0 48 33 CC E8 ?? ?? ?? ?? 4C 8D 9C 24 40 01 00 00 41 0F 28 73 E0
// injection point AOB: F3 44 0F 5D C6 F3 41 0F 5F F8 0F 2E C7 F3 41 0F 11 BF 6C 07 00 00 7A ?? 74 ?? 48 8B 05 ?? ?? ?? ?? B2 01 48 8B 88 00 01 00 00 48 8B 89 88 01 00 00 48 8B 89 90 01 00 00 E8 ?? ?? ?? ?? 48 8B 4D E0 48 33 CC E8 ?? ?? ?? ?? 4C 8D 9C 24 40 01 00 00 41 0F 28 73 E0
INJECT_4847+3:
db 5F
registersymbol(INJECT_4847)
[DISABLE]
INJECT_4847+3:
db 5D
unregistersymbol(INJECT_4847)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+1907E0
kyoto_xanadu.exe+19079C: 83 F9 02 - cmp ecx,02
kyoto_xanadu.exe+19079F: 75 0F - jne kyoto_xanadu.exe+1907B0
kyoto_xanadu.exe+1907A1: 8D 04 85 00 00 00 00 - lea eax,[rax*4+00000000]
kyoto_xanadu.exe+1907A8: 66 0F 6E C0 - movd xmm0,eax
kyoto_xanadu.exe+1907AC: F3 0F 2C F0 - cvttss2si esi,xmm0
kyoto_xanadu.exe+1907B0: 0F 28 C6 - movaps xmm0,xmm6
kyoto_xanadu.exe+1907B3: 66 0F 6E CE - movd xmm1,esi
kyoto_xanadu.exe+1907B7: 0F 5B C9 - cvtdq2ps xmm1,xmm1
kyoto_xanadu.exe+1907BA: F3 0F 59 CE - mulss xmm1,xmm6
kyoto_xanadu.exe+1907BE: 0F 28 F7 - movaps xmm6,xmm7
kyoto_xanadu.exe+1907C1: F3 41 0F 5E C8 - divss xmm1,xmm8
kyoto_xanadu.exe+1907C6: F3 0F 5C C1 - subss xmm0,xmm1
kyoto_xanadu.exe+1907CA: F3 0F 5D F0 - minss xmm6,xmm0
kyoto_xanadu.exe+1907CE: F3 41 0F 10 87 6C 07 00 00 - movss xmm0,[r15+0000076C]
kyoto_xanadu.exe+1907D7: F3 41 0F 59 F1 - mulss xmm6,xmm9
kyoto_xanadu.exe+1907DC: F3 0F 58 F0 - addss xmm6,xmm0
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+1907E0: F3 44 0F 5D C6 - minss xmm8,xmm6
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+1907E5: F3 41 0F 5F F8 - maxss xmm7,xmm8
kyoto_xanadu.exe+1907EA: 0F 2E C7 - ucomiss xmm0,xmm7
kyoto_xanadu.exe+1907ED: F3 41 0F 11 BF 6C 07 00 00 - movss [r15+0000076C],xmm7
kyoto_xanadu.exe+1907F6: 7A 02 - jp kyoto_xanadu.exe+1907FA
kyoto_xanadu.exe+1907F8: 74 23 - je kyoto_xanadu.exe+19081D
kyoto_xanadu.exe+1907FA: 48 8B 05 1F D5 9D 00 - mov rax,[kyoto_xanadu.exe+B6DD20]
kyoto_xanadu.exe+190801: B2 01 - mov dl,01
kyoto_xanadu.exe+190803: 48 8B 88 00 01 00 00 - mov rcx,[rax+00000100]
kyoto_xanadu.exe+19080A: 48 8B 89 88 01 00 00 - mov rcx,[rcx+00000188]
kyoto_xanadu.exe+190811: 48 8B 89 90 01 00 00 - mov rcx,[rcx+00000190]
kyoto_xanadu.exe+190818: E8 93 1B 28 00 - call kyoto_xanadu.exe+4123B0
kyoto_xanadu.exe+19081D: 48 8B 4D E0 - mov rcx,[rbp-20]
kyoto_xanadu.exe+190821: 48 33 CC - xor rcx,rsp
kyoto_xanadu.exe+190824: E8 37 79 55 00 - call kyoto_xanadu.exe+6E8160
kyoto_xanadu.exe+190829: 4C 8D 9C 24 40 01 00 00 - lea r11,[rsp+00000140]
kyoto_xanadu.exe+190831: 41 0F 28 73 E0 - movaps xmm6,[r11-20]
}
158
"GET AP & FP"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(GET_APFP,$process,8B ?? 40 11 00 00 8B ?? C1 ?? 1E 83 ?? 01 75 ?? 8D ?? 8D 00 00 00 00 C1 ?? 02 EB ?? 83 ?? 02 75 ?? 8D ?? 8D 00 00 00 00 66 0F 6E ?? F3 0F 2C ?? EB)
// raw AOB: C3 CC CC CC CC CC CC CC CC 48 89 5C 24 08 48 89 74 24 10 57 48 83 EC 20 48 8B 15 ?? ?? ?? ?? 48 8B F1 33 FF 8B 8A 40 11 00 00 8B C1 C1 E8 1E 83 F8 01 75 ?? 8D 1C 8D 00 00 00 00 C1 FB 02 EB ?? 83 F8 02 75 ?? 8D 04 8D 00 00 00 00 66 0F 6E C0 F3 0F 2C D8 EB ?? 8B DF 8B 8A 48 11 00 00 8B C1
// injection point AOB: 8B ?? 40 11 00 00 8B ?? C1 ?? 1E 83 ?? 01 75 ?? 8D ?? 8D 00 00 00 00 C1 ?? 02 EB ?? 83 ?? 02 75 ?? 8D ?? 8D 00 00 00 00 66 0F 6E ?? F3 0F 2C ?? EB ?? 8B ?? 8B ?? 48 11 00 00 8B
alloc(newmem,$1000,GET_APFP)
alloc(GET_APFPo, $6)
label(code)
label(return)
label(ptrCapture_GET_APFP_433147)
GET_APFPo:
readmem(GET_APFP, $6)
newmem:
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
mov [ptrCapture_GET_APFP_433147], rdx
// **** End Auto script: AddressCapture
code:
// mov ecx,[rdx+00001140]
reassemble(GET_APFP)
jmp return
align 10 cc
ptrCapture_GET_APFP_433147:
dq 0
GET_APFP:
jmp newmem
nop 1
return:
registersymbol(GET_APFP GET_APFPo ptrCapture_GET_APFP_433147)
[DISABLE]
GET_APFP:
readmem(GET_APFPo, $6)
unregistersymbol(GET_APFP GET_APFPo ptrCapture_GET_APFP_433147)
dealloc(newmem)
dealloc(GET_APFPo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+42AB9B
kyoto_xanadu.exe+42AB77: C3 - ret
kyoto_xanadu.exe+42AB78: CC - int 3
kyoto_xanadu.exe+42AB79: CC - int 3
kyoto_xanadu.exe+42AB7A: CC - int 3
kyoto_xanadu.exe+42AB7B: CC - int 3
kyoto_xanadu.exe+42AB7C: CC - int 3
kyoto_xanadu.exe+42AB7D: CC - int 3
kyoto_xanadu.exe+42AB7E: CC - int 3
kyoto_xanadu.exe+42AB7F: CC - int 3
kyoto_xanadu.exe+42AB80: 48 89 5C 24 08 - mov [rsp+08],rbx
kyoto_xanadu.exe+42AB85: 48 89 74 24 10 - mov [rsp+10],rsi
kyoto_xanadu.exe+42AB8A: 57 - push rdi
kyoto_xanadu.exe+42AB8B: 48 83 EC 20 - sub rsp,20
kyoto_xanadu.exe+42AB8F: 48 8B 15 72 31 74 00 - mov rdx,[kyoto_xanadu.exe+B6DD08]
kyoto_xanadu.exe+42AB96: 48 8B F1 - mov rsi,rcx
kyoto_xanadu.exe+42AB99: 33 FF - xor edi,edi
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+42AB9B: 8B 8A 40 11 00 00 - mov ecx,[rdx+00001140]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+42ABA1: 8B C1 - mov eax,ecx
kyoto_xanadu.exe+42ABA3: C1 E8 1E - shr eax,1E
kyoto_xanadu.exe+42ABA6: 83 F8 01 - cmp eax,01
kyoto_xanadu.exe+42ABA9: 75 0C - jne kyoto_xanadu.exe+42ABB7
kyoto_xanadu.exe+42ABAB: 8D 1C 8D 00 00 00 00 - lea ebx,[rcx*4+00000000]
kyoto_xanadu.exe+42ABB2: C1 FB 02 - sar ebx,02
kyoto_xanadu.exe+42ABB5: EB 18 - jmp kyoto_xanadu.exe+42ABCF
kyoto_xanadu.exe+42ABB7: 83 F8 02 - cmp eax,02
kyoto_xanadu.exe+42ABBA: 75 11 - jne kyoto_xanadu.exe+42ABCD
kyoto_xanadu.exe+42ABBC: 8D 04 8D 00 00 00 00 - lea eax,[rcx*4+00000000]
kyoto_xanadu.exe+42ABC3: 66 0F 6E C0 - movd xmm0,eax
kyoto_xanadu.exe+42ABC7: F3 0F 2C D8 - cvttss2si ebx,xmm0
kyoto_xanadu.exe+42ABCB: EB 02 - jmp kyoto_xanadu.exe+42ABCF
kyoto_xanadu.exe+42ABCD: 8B DF - mov ebx,edi
kyoto_xanadu.exe+42ABCF: 8B 8A 48 11 00 00 - mov ecx,[rdx+00001148]
kyoto_xanadu.exe+42ABD5: 8B C1 - mov eax,ecx
}
159
"AP"
0
FF8080
Custom
Kueo2 integer
ptrCapture_GET_APFP_433147
1140
160
"AP (free)"
0
FF8080
Custom
Kueo2 integer
ptrCapture_GET_APFP_433147
1144
161
"??"
0
FF8080
Custom
Kueo2 integer
ptrCapture_GET_APFP_433147
1148
162
"FP"
0
FF8080
Custom
Kueo2 integer
ptrCapture_GET_APFP_433147
1170
163
"??"
0
FF8080
Custom
Kueo2 integer
ptrCapture_GET_APFP_433147
1174
29
"Get ether"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(GET_ETHER,$process,?? 8B ?? 04 ?? 84 ?? ?? ?? 01 00 00)
// raw AOB: 48 8B 02 F3 0F 10 80 38 02 00 00 0F 2F 80 34 02 00 00 72 ?? F3 0F 10 80 30 02 00 00 0F 2F C1 0F 97 C0 84 C0 75 ?? FF C1 48 83 C2 18 83 F9 03 72 ?? 41 B1 01 EB ?? 45 32 C9 41 8B 52 04 45 84 C9 41 B8 01 00 00 00 49 8B CA 45 0F 45 C3 03 D3 E8 ?? ?? ?? ?? 48 8B 35 ?? ?? ?? ?? BA 41 00 00 00 8B F8 E8 ?? ?? ?? ?? 03 F8 48 8B 05 ?? ?? ?? ?? F6 80 35 01 00 00 10 74 ?? BA 41 00 00 00 E8 ?? ?? ?? ?? 48 85 C0
// injection point AOB: ?? 8B ?? 04 ?? 84 ?? ?? ?? 01 00 00 00 ?? 8B ?? ?? 0F 45 ?? 03 ?? E8 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 41 00 00 00 8B ?? E8 ?? ?? ?? ?? 03 ?? ?? 8B ?? ?? ?? ?? ?? F6 ?? 35 01 00 00 10 74 ?? ?? 41 00 00 00 E8 ?? ?? ?? ?? ?? 85
alloc(newmem,$1000,GET_ETHER)
alloc(GET_ETHERo, $7)
label(code)
label(return)
label(ptrCapture_GET_ETHER_254359)
GET_ETHERo:
readmem(GET_ETHER, $7)
newmem:
// **** Begin Auto script: AddressCapture
// mode=Single
// Address Capture: publish base pointer
mov [ptrCapture_GET_ETHER_254359], r10
// **** End Auto script: AddressCapture
code:
// mov edx,[r10+04]
reassemble(GET_ETHER)
// test r9b,r9b
reassemble(GET_ETHER+4)
jmp return
align 10 cc
ptrCapture_GET_ETHER_254359:
dq 0
GET_ETHER:
jmp newmem
nop 2
return:
registersymbol(GET_ETHER GET_ETHERo ptrCapture_GET_ETHER_254359)
[DISABLE]
GET_ETHER:
readmem(GET_ETHERo, $7)
unregistersymbol(GET_ETHER GET_ETHERo ptrCapture_GET_ETHER_254359)
dealloc(newmem)
dealloc(GET_ETHERo)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+1E251D
kyoto_xanadu.exe+1E24E4: 48 8B 02 - mov rax,[rdx]
kyoto_xanadu.exe+1E24E7: F3 0F 10 80 38 02 00 00 - movss xmm0,[rax+00000238]
kyoto_xanadu.exe+1E24EF: 0F 2F 80 34 02 00 00 - comiss xmm0,[rax+00000234]
kyoto_xanadu.exe+1E24F6: 72 12 - jb kyoto_xanadu.exe+1E250A
kyoto_xanadu.exe+1E24F8: F3 0F 10 80 30 02 00 00 - movss xmm0,[rax+00000230]
kyoto_xanadu.exe+1E2500: 0F 2F C1 - comiss xmm0,xmm1
kyoto_xanadu.exe+1E2503: 0F 97 C0 - seta al
kyoto_xanadu.exe+1E2506: 84 C0 - test al,al
kyoto_xanadu.exe+1E2508: 75 10 - jne kyoto_xanadu.exe+1E251A
kyoto_xanadu.exe+1E250A: FF C1 - inc ecx
kyoto_xanadu.exe+1E250C: 48 83 C2 18 - add rdx,18
kyoto_xanadu.exe+1E2510: 83 F9 03 - cmp ecx,03
kyoto_xanadu.exe+1E2513: 72 CF - jb kyoto_xanadu.exe+1E24E4
kyoto_xanadu.exe+1E2515: 41 B1 01 - mov r9b,01
kyoto_xanadu.exe+1E2518: EB 03 - jmp kyoto_xanadu.exe+1E251D
kyoto_xanadu.exe+1E251A: 45 32 C9 - xor r9b,r9b
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+1E251D: 41 8B 52 04 - mov edx,[r10+04]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+1E2521: 45 84 C9 - test r9b,r9b
kyoto_xanadu.exe+1E2524: 41 B8 01 00 00 00 - mov r8d,00000001
kyoto_xanadu.exe+1E252A: 49 8B CA - mov rcx,r10
kyoto_xanadu.exe+1E252D: 45 0F 45 C3 - cmovne r8d,r11d
kyoto_xanadu.exe+1E2531: 03 D3 - add edx,ebx
kyoto_xanadu.exe+1E2533: E8 48 FD FF FF - call kyoto_xanadu.exe+1E2280
kyoto_xanadu.exe+1E2538: 48 8B 35 F9 7B 98 00 - mov rsi,[kyoto_xanadu.exe+B6A138]
kyoto_xanadu.exe+1E253F: BA 41 00 00 00 - mov edx,00000041
kyoto_xanadu.exe+1E2544: 8B F8 - mov edi,eax
kyoto_xanadu.exe+1E2546: E8 75 19 E4 FF - call kyoto_xanadu.exe+23EC0
kyoto_xanadu.exe+1E254B: 03 F8 - add edi,eax
kyoto_xanadu.exe+1E254D: 48 8B 05 B4 B7 98 00 - mov rax,[kyoto_xanadu.exe+B6DD08]
kyoto_xanadu.exe+1E2554: F6 80 35 01 00 00 10 - test byte ptr [rax+00000135],10
kyoto_xanadu.exe+1E255B: 74 20 - je kyoto_xanadu.exe+1E257D
kyoto_xanadu.exe+1E255D: BA 41 00 00 00 - mov edx,00000041
kyoto_xanadu.exe+1E2562: E8 79 21 E4 FF - call kyoto_xanadu.exe+246E0
}
30
""#1""
0
FF8080
4 Bytes
ptrCapture_GET_ETHER_254359
4
32
"Enable in game achievement progress"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
synchronize(function()
getLuaEngine().MenuItem5.doClick()
AddressList.Header.OnSectionClick = nil
end)
if _kuro_2_customInt == nil then
local p_proc = process
registerCustomTypeAutoAssembler([[
alloc(TypeName,256)
alloc(ByteSize,8)
alloc(ConvertRoutine,1024)
alloc(ConvertBackRoutine,1024)
alloc(UsesFloat,1)
TypeName:
db 'Kueo2 integer',0
ByteSize:
dd 4
UsesFloat:
db 0
ConvertRoutine:
//at this point ecx contains the address where the bytes are stored
//return with rax/eax
xor rax,rax
mov eax, dword ptr [rcx]
and eax, 3FFFFFFF
ret
ConvertBackRoutine:
//at this point edx contains the address to write the value to
//and ecx contains the value
push rax
xor rax, rax
mov eax, ecx
or eax, 40000000
mov dword ptr [rdx], eax
pop rax
ret
]])
_kuro_2_customInt = true
process = p_proc
autoAssemble(string.format([[
unregistersymbol($process)
define($process, "%s")
registersymbol($process)
]], process))
end
synchronize(function() getLuaEngine().Close() end)
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
autoAssemble(string.format([[
unregistersymbol($process)
]], process))
synchronize(function() getLuaEngine().Close() end)
33
"GET_ACHIEVEMENTS"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://opencheattables.com
Date : 2026/07/17
}
[ENABLE]
aobscanmodule(GET_ACHIEVEMENTS,$process,8B ?? 81 10 11 00 00)
// raw AOB: B9 03 00 00 00 E8 ?? ?? ?? ?? 48 8B 4C 24 30 48 33 CC E8 ?? ?? ?? ?? 48 83 C4 48 C3 E8 ?? ?? ?? ?? CC CC 48 83 EC 28 8D 42 CE 83 F8 63 77 ?? 48 8B 0D ?? ?? ?? ?? 8B C2 8B 94 81 10 11 00 00 8B C2 C1 E8 1E 83 F8 01 75 ?? 8D 04 95 00 00 00 00 C1 F8 02 48 83 C4 28 C3 83 F8 02 75 ?? 8D 04 95 00 00 00 00 66 0F 6E C0 F3 0F 2C C0 48 83 C4 28 C3 4C 8D 0D
// injection point AOB: 8B ?? 81 10 11 00 00 8B ?? C1 ?? 1E 83 ?? 01 75 ?? 8D ?? 95 00 00 00 00 C1 ?? 02 48 83 C4 28 C3 83 ?? 02 75 ?? 8D ?? 95 00 00 00 00 66 0F 6E ?? F3 0F 2C ?? 48 83 C4 28 C3 ?? 8D
alloc(newmem,$1000,GET_ACHIEVEMENTS)
alloc(ptrList_arr_GET_ACHIEVEMENTS_552692,$280)
alloc(GET_ACHIEVEMENTSo, $7)
label(code)
label(return)
label(ptrList_count_GET_ACHIEVEMENTS_552692)
GET_ACHIEVEMENTSo:
readmem(GET_ACHIEVEMENTS, $7)
newmem:
// **** Begin Auto script: AddressCapture
// mode=List, capacity=80
pushfq
push r15
push r14
push r13
// Address Capture List
mov r15, ptrList_arr_GET_ACHIEVEMENTS_552692
xor r14d, r14d
lea r13, [rcx+rax*4]
dedup_loop_552692:
cmp r14d, [ptrList_count_GET_ACHIEVEMENTS_552692]
jge store_new_552692
cmp [r15+r14*8], r13
je skip_store_552692
inc r14d
jmp dedup_loop_552692
store_new_552692:
cmp r14d, #80
jge skip_store_552692
mov [r15+r14*8], r13
inc dword ptr [ptrList_count_GET_ACHIEVEMENTS_552692]
skip_store_552692:
pop r13
pop r14
pop r15
popfq
// **** End Auto script: AddressCapture
code:
// mov edx,[rcx+rax*4+00001110]
reassemble(GET_ACHIEVEMENTS)
jmp return
align 10 cc
ptrList_count_GET_ACHIEVEMENTS_552692:
dd 0
GET_ACHIEVEMENTS:
jmp newmem
nop 2
return:
registersymbol(GET_ACHIEVEMENTS GET_ACHIEVEMENTSo ptrList_arr_GET_ACHIEVEMENTS_552692 ptrList_count_GET_ACHIEVEMENTS_552692)
[DISABLE]
GET_ACHIEVEMENTS:
readmem(GET_ACHIEVEMENTSo, $7)
unregistersymbol(GET_ACHIEVEMENTS GET_ACHIEVEMENTSo ptrList_arr_GET_ACHIEVEMENTS_552692 ptrList_count_GET_ACHIEVEMENTS_552692)
dealloc(newmem)
dealloc(GET_ACHIEVEMENTSo)
dealloc(ptrList_arr_GET_ACHIEVEMENTS_552692)
{
// ORIGINAL CODE - INJECTION POINT: kyoto_xanadu.exe+23ED5
kyoto_xanadu.exe+23E9D: B9 03 00 00 00 - mov ecx,00000003
kyoto_xanadu.exe+23EA2: E8 09 F2 48 00 - call kyoto_xanadu.exe+4B30B0
kyoto_xanadu.exe+23EA7: 48 8B 4C 24 30 - mov rcx,[rsp+30]
kyoto_xanadu.exe+23EAC: 48 33 CC - xor rcx,rsp
kyoto_xanadu.exe+23EAF: E8 AC 42 6C 00 - call kyoto_xanadu.exe+6E8160
kyoto_xanadu.exe+23EB4: 48 83 C4 48 - add rsp,48
kyoto_xanadu.exe+23EB8: C3 - ret
kyoto_xanadu.exe+23EB9: E8 9A 3A 6C 00 - call kyoto_xanadu.exe+6E7958
kyoto_xanadu.exe+23EBE: CC - int 3
kyoto_xanadu.exe+23EBF: CC - int 3
kyoto_xanadu.exe+23EC0: 48 83 EC 28 - sub rsp,28
kyoto_xanadu.exe+23EC4: 8D 42 CE - lea eax,[rdx-32]
kyoto_xanadu.exe+23EC7: 83 F8 63 - cmp eax,63
kyoto_xanadu.exe+23ECA: 77 42 - ja kyoto_xanadu.exe+23F0E
kyoto_xanadu.exe+23ECC: 48 8B 0D 35 9E B4 00 - mov rcx,[kyoto_xanadu.exe+B6DD08]
kyoto_xanadu.exe+23ED3: 8B C2 - mov eax,edx
// ---------- INJECTING HERE ----------
kyoto_xanadu.exe+23ED5: 8B 94 81 10 11 00 00 - mov edx,[rcx+rax*4+00001110]
// ---------- DONE INJECTING ----------
kyoto_xanadu.exe+23EDC: 8B C2 - mov eax,edx
kyoto_xanadu.exe+23EDE: C1 E8 1E - shr eax,1E
kyoto_xanadu.exe+23EE1: 83 F8 01 - cmp eax,01
kyoto_xanadu.exe+23EE4: 75 0F - jne kyoto_xanadu.exe+23EF5
kyoto_xanadu.exe+23EE6: 8D 04 95 00 00 00 00 - lea eax,[rdx*4+00000000]
kyoto_xanadu.exe+23EED: C1 F8 02 - sar eax,02
kyoto_xanadu.exe+23EF0: 48 83 C4 28 - add rsp,28
kyoto_xanadu.exe+23EF4: C3 - ret
kyoto_xanadu.exe+23EF5: 83 F8 02 - cmp eax,02
kyoto_xanadu.exe+23EF8: 75 32 - jne kyoto_xanadu.exe+23F2C
kyoto_xanadu.exe+23EFA: 8D 04 95 00 00 00 00 - lea eax,[rdx*4+00000000]
kyoto_xanadu.exe+23F01: 66 0F 6E C0 - movd xmm0,eax
kyoto_xanadu.exe+23F05: F3 0F 2C C0 - cvttss2si eax,xmm0
kyoto_xanadu.exe+23F09: 48 83 C4 28 - add rsp,28
kyoto_xanadu.exe+23F0D: C3 - ret
kyoto_xanadu.exe+23F0E: 4C 8D 0D 3B A4 98 00 - lea r9,[kyoto_xanadu.exe+9AE350]
}
64
"#00-#09"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1110
65
"#0"
0
FF8080
Custom
Kueo2 integer
+0
66
"#1"
0
FF8080
Custom
Kueo2 integer
+4
67
"#2"
0
FF8080
Custom
Kueo2 integer
+8
68
"#3"
0
FF8080
Custom
Kueo2 integer
+C
69
"#4"
0
FF8080
Custom
Kueo2 integer
+10
70
"#5"
0
FF8080
Custom
Kueo2 integer
+14
71
"#6"
0
FF8080
Custom
Kueo2 integer
+18
72
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
73
"#8"
0
FF8080
Custom
Kueo2 integer
+20
74
"#9"
0
FF8080
Custom
Kueo2 integer
+24
75
"#10-#19"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1138
76
"#0"
0
FF8080
Custom
Kueo2 integer
+0
77
"#1"
0
FF8080
Custom
Kueo2 integer
+4
78
"#2"
0
FF8080
Custom
Kueo2 integer
+8
79
"#3"
0
FF8080
Custom
Kueo2 integer
+C
80
"#4"
0
FF8080
Custom
Kueo2 integer
+10
81
"#5"
0
FF8080
Custom
Kueo2 integer
+14
82
"#6"
0
FF8080
Custom
Kueo2 integer
+18
83
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
84
"#8"
0
FF8080
Custom
Kueo2 integer
+20
85
"#9"
0
FF8080
Custom
Kueo2 integer
+24
86
"#20-#29"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1160
87
"#0"
0
FF8080
Custom
Kueo2 integer
+0
88
"#1"
0
FF8080
Custom
Kueo2 integer
+4
89
"#2"
0
FF8080
Custom
Kueo2 integer
+8
90
"#3"
0
FF8080
Custom
Kueo2 integer
+C
91
"#4"
0
FF8080
Custom
Kueo2 integer
+10
92
"#5"
0
FF8080
Custom
Kueo2 integer
+14
93
"#6"
0
FF8080
Custom
Kueo2 integer
+18
94
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
95
"#8"
0
FF8080
Custom
Kueo2 integer
+20
96
"#9"
0
FF8080
Custom
Kueo2 integer
+24
97
"#30-#39"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1188
98
"#0"
0
FF8080
Custom
Kueo2 integer
+0
99
"#1"
0
FF8080
Custom
Kueo2 integer
+4
100
"#2"
0
FF8080
Custom
Kueo2 integer
+8
101
"#3"
0
FF8080
Custom
Kueo2 integer
+C
102
"#4"
0
FF8080
Custom
Kueo2 integer
+10
103
"#5"
0
FF8080
Custom
Kueo2 integer
+14
104
"#6"
0
FF8080
Custom
Kueo2 integer
+18
105
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
106
"#8"
0
FF8080
Custom
Kueo2 integer
+20
107
"#9"
0
FF8080
Custom
Kueo2 integer
+24
108
"#40-#49"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
11B0
109
"#0"
0
FF8080
Custom
Kueo2 integer
+0
110
"#1"
0
FF8080
Custom
Kueo2 integer
+4
111
"#2"
0
FF8080
Custom
Kueo2 integer
+8
112
"#3"
0
FF8080
Custom
Kueo2 integer
+C
113
"#4"
0
FF8080
Custom
Kueo2 integer
+10
114
"#5"
0
FF8080
Custom
Kueo2 integer
+14
115
"#6"
0
FF8080
Custom
Kueo2 integer
+18
116
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
117
"#8"
0
FF8080
Custom
Kueo2 integer
+20
118
"#9"
0
FF8080
Custom
Kueo2 integer
+24
119
"#50-#59"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
11D8
120
"#0"
0
FF8080
Custom
Kueo2 integer
+0
121
"#1"
0
FF8080
Custom
Kueo2 integer
+4
122
"#2"
0
FF8080
Custom
Kueo2 integer
+8
123
"#3"
0
FF8080
Custom
Kueo2 integer
+C
124
"#4"
0
FF8080
Custom
Kueo2 integer
+10
125
"#5"
0
FF8080
Custom
Kueo2 integer
+14
126
"#6"
0
FF8080
Custom
Kueo2 integer
+18
127
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
128
"#8"
0
FF8080
Custom
Kueo2 integer
+20
129
"#9"
0
FF8080
Custom
Kueo2 integer
+24
130
"#60-#69"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1200
131
"#0"
0
FF8080
Custom
Kueo2 integer
+0
132
"#1"
0
FF8080
Custom
Kueo2 integer
+4
133
"#2"
0
FF8080
Custom
Kueo2 integer
+8
134
"#3"
0
FF8080
Custom
Kueo2 integer
+C
135
"#4"
0
FF8080
Custom
Kueo2 integer
+10
136
"#5"
0
FF8080
Custom
Kueo2 integer
+14
137
"#6"
0
FF8080
Custom
Kueo2 integer
+18
138
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
139
"#8"
0
FF8080
Custom
Kueo2 integer
+20
140
"#9"
0
FF8080
Custom
Kueo2 integer
+24
141
"#70-#79"
0
1
ptrList_arr_GET_ACHIEVEMENTS_552692
1228
142
"#0"
0
FF8080
Custom
Kueo2 integer
+0
143
"#1"
0
FF8080
Custom
Kueo2 integer
+4
144
"#2"
0
FF8080
Custom
Kueo2 integer
+8
145
"#3"
0
FF8080
Custom
Kueo2 integer
+C
146
"#4"
0
FF8080
Custom
Kueo2 integer
+10
147
"#5"
0
FF8080
Custom
Kueo2 integer
+14
148
"#6"
0
FF8080
Custom
Kueo2 integer
+18
149
"#7"
0
FF8080
Custom
Kueo2 integer
+1C
150
"#8"
0
FF8080
Custom
Kueo2 integer
+20
151
"#9"
0
FF8080
Custom
Kueo2 integer
+24
15
"KYOTO XANADU -the Blooming Phantom- / https://opencheattables.com"
009700
1