0
"コンパクトモード切替 / Toggle Compact View"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if not toggleCompactView then
function toggleCompactView(sender, forceEnable)
local isCompactMode = not (compactViewMenuItem.Caption == 'Compact View Mode')
if forceEnable ~= nil then
isCompactMode = not forceEnable
end
synchronize(function()
compactViewMenuItem.Caption = isCompactMode and 'Compact View Mode' or 'Full View Mode'
getMainForm().Splitter1.Visible = isCompactMode
getMainForm().Panel4.Visible = isCompactMode
getMainForm().Panel5.Visible = isCompactMode
end)
end
end
if not createCompactViewMenu then
function createCompactViewMenu()
if isCompactMenuCreated then return end
synchronize(function()
local mainMenu = getMainForm().Menu.Items
compactViewMenuItem = createMenuItem(mainMenu)
compactViewMenuItem.Caption = 'Compact View Mode'
compactViewMenuItem.OnClick = toggleCompactView
mainMenu.add(compactViewMenuItem)
end)
isCompactMenuCreated = true
end
end
createCompactViewMenu()
toggleCompactView(nil, true)
[DISABLE]
{$lua}
if toggleCompactView then
toggleCompactView(nil, false)
end
1
"スクリプト一括切替 / Toggle scripts"
4080FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
-- ============ AOBMaker AA Toggle ============
-- Bulk-enables the records below (by CE record ID) on activate; disables them on deactivate.
-- Edit CONFIG / enableList / disableList below; AOBMaker can re-open this script to change the selection.
-- Target: sora_2nd.exe
-- CE sleep() rides the ~15.6 ms Windows scheduler tick, so the real pause lands anywhere between the setting and the setting plus one tick; a sub-tick request may even return early. Back-to-back calls are the special case where every sub-tick request costs one whole tick. Only sleep(0) never pauses.
-- Step delay: 30 ms requested -> 30.0-45.6 ms, averaging ~37.8 ms (measured). The wait ends on the next ~15.6 ms scheduler tick, so it lands within one tick above the setting.
-- @AOBMAKER:AA_TOGGLE v1
local CONFIG = {
name = "1",
uid = "B636",
stepDelayMs = 30,
closeLuaEngine = true,
processName = "sora_2nd.exe",
moduleName = "sora_2nd.exe",
includeAttach = true,
}
local enableList = {
{ id = 0, desc = "コンパクトモード切替 / Toggle Compact View" },
{ id = 2, desc = "有効化 / Enable" },
{ id = 3, desc = "ミラとセピス / Get Mira" },
{ id = 15, desc = "アイテムを閲覧後に個数を設定 / Browse & set item amount" },
{ id = 26, desc = "戦闘：ダメージ制御 / Battle: damage control" },
{ id = 50, desc = "アイテム無限 / inf item use" },
{ id = 272, desc = "戦闘：クリティカル率（%）設定 / Battle: set crit%" },
{ id = 273, desc = "戦闘：命中率（%）最大 / Battle: max HIT%" },
{ id = 275, desc = "戦闘：回避率（%）設定 / Battle: set evade%" },
{ id = 277, desc = "戦闘：魔法回避率（%）設定 / Battle: set magic evade%" },
{ id = 51, desc = "戦闘：BP 常に最大 / Battle: fast BP" },
{ id = 55, desc = "戦闘終了時にBP全回復 / Restore break gauge after battle" },
{ id = 56, desc = "サポート経験値倍率設定 / Support XP multiplier" },
{ id = 66, desc = "経験値倍率設定 / XP multiplier" },
{ id = 58, desc = "高速オーバードライブ / Fast overdrive (OD)" },
{ id = 62, desc = "オーバードライブゲージ減らない / inf. OD gauge" },
{ id = 63, desc = "フィールドチャージゲージ倍率 / Field charge gauge multiplier" },
{ id = 65, desc = "フィールドチャージゲージ無限 / Field charge: inf charge use" },
{ id = 4085, desc = "フィールド飯バフ：効果時間の最低値を固定 / Food buff: set min duration" },
{ id = 185, desc = "オーブメント - 選択中のクオーツ / Cur. quartz" },
{ id = 73, desc = "ステータスビューアー / Char. stats viewer" },
{ id = 157, desc = "レシピ選択時：必要素材を自動補充 / Auto set ingredient amt. when browsing recipes" },
{ id = 161, desc = "個別クエスト情報閲覧 / Quest viewer" },
{ id = 45, desc = "戦闘：プレイヤー致死回避 / Battle: player HP: try to keep non-zero" },
{ id = 46, desc = "戦闘：EP消費後に全回復 / Battle: full EP after use" },
{ id = 47, desc = "戦闘：CP消費後に全回復 / Battle: full CP after use" },
{ id = 48, desc = "戦闘：気絶付与倍率 / Battle: Stun multiplier" },
{ id = 189, desc = "即座に反映 / take effect immediately" },
}
local disableList = {
{ id = 261, desc = "HUD非表示 / Hide HUD [F7]" },
{ id = 259, desc = "有効化 / Enable change POV [num 0]" },
{ id = 172, desc = "クエスト進行状況リストを生成 / Generate quests status" },
{ id = 189, desc = "即座に反映 / take effect immediately" },
{ id = 59, desc = "倍率切替 / use multiplier" },
{ id = 48, desc = "戦闘：気絶付与倍率 / Battle: Stun multiplier" },
{ id = 47, desc = "戦闘：CP消費後に全回復 / Battle: full CP after use" },
{ id = 46, desc = "戦闘：EP消費後に全回復 / Battle: full EP after use" },
{ id = 45, desc = "戦闘：プレイヤー致死回避 / Battle: player HP: try to keep non-zero" },
{ id = 260, desc = "視点切替 / カメラ切替 / Change POV [orig. credit to amorrow28, Sora_1st code]" },
{ id = 168, desc = "クエスト全進捗データ取得 / Get all quests progress" },
{ id = 161, desc = "個別クエスト情報閲覧 / Quest viewer" },
{ id = 157, desc = "レシピ選択時：必要素材を自動補充 / Auto set ingredient amt. when browsing recipes" },
{ id = 106, desc = "進行中のリワードを取得 / Get on-going reward data / max 50" },
{ id = 73, desc = "ステータスビューアー / Char. stats viewer" },
{ id = 185, desc = "オーブメント - 選択中のクオーツ / Cur. quartz" },
{ id = 4085, desc = "フィールド飯バフ：効果時間の最低値を固定 / Food buff: set min duration" },
{ id = 65, desc = "フィールドチャージゲージ無限 / Field charge: inf charge use" },
{ id = 63, desc = "フィールドチャージゲージ倍率 / Field charge gauge multiplier" },
{ id = 62, desc = "オーバードライブゲージ減らない / inf. OD gauge" },
{ id = 58, desc = "高速オーバードライブ / Fast overdrive (OD)" },
{ id = 66, desc = "経験値倍率設定 / XP multiplier" },
{ id = 56, desc = "サポート経験値倍率設定 / Support XP multiplier" },
{ id = 55, desc = "戦闘終了時にBP全回復 / Restore break gauge after battle" },
{ id = 51, desc = "戦闘：BP 常に最大 / Battle: fast BP" },
{ id = 277, desc = "戦闘：魔法回避率（%）設定 / Battle: set magic evade%" },
{ id = 275, desc = "戦闘：回避率（%）設定 / Battle: set evade%" },
{ id = 273, desc = "戦闘：命中率（%）最大 / Battle: max HIT%" },
{ id = 272, desc = "戦闘：クリティカル率（%）設定 / Battle: set crit%" },
{ id = 50, desc = "アイテム無限 / inf item use" },
{ id = 26, desc = "戦闘：ダメージ制御 / Battle: damage control" },
{ id = 15, desc = "アイテムを閲覧後に個数を設定 / Browse & set item amount" },
{ id = 3, desc = "ミラとセピス / Get Mira" },
{ id = 2, desc = "有効化 / Enable" },
{ id = 1, desc = "スクリプト一括切替 / Toggle scripts" },
{ id = 0, desc = "コンパクトモード切替 / Toggle Compact View" },
}
-- @AOBMAKER:END
---- GENERATED CODE (do not edit below) ----
-- Optional auto-attach helper: uncomment the block below to open the game process first.
-- attach process
local processName = "sora_2nd.exe"
local pid = getProcessIDFromProcessName(processName)
if pid ~= nil and pid > 0 then
local currentPid = getOpenedProcessID() or 0
if currentPid ~= pid then
openProcess(processName)
print("Attached to: " .. processName)
sleep(333) -- ~340.8 ms (333.0-348.6)
else
print("Already attached to: " .. processName)
end
end
synchronize(function()
getLuaEngine().Close()
end)
-- The apply loop runs on CE's main thread, so it repaints between records. processMessagesPaintOnly is CE 7.7+, hence the probe.
local at_pump = (type(processMessagesPaintOnly) == 'function') and processMessagesPaintOnly
or (type(processMessages) == 'function') and processMessages or nil
local function at_wait(ms)
if type(ms) ~= 'number' or ms <= 0 then return end
if at_pump == nil or ms <= 242 then sleep(ms) return end
local left = ms
while left > 0 do
local slice = (left > 242) and 242 or left
sleep(slice); at_pump(); left = left - slice
end
end
-- Resolve a record by description, but ONLY when exactly one carries it.
-- 131 of 175 real tables contain duplicate descriptions, so an unguarded
-- getMemoryRecordByDescription silently picks one of N - and here that means
-- injecting a stranger's AA script into the game, not writing one value.
local function at_byDesc(al, desc)
local found, count = nil, 0
for i = 0, al.Count - 1 do
local m = al.MemoryRecord[i]
if m ~= nil and m.Description == desc then count = count + 1; found = m end
end
if count == 1 then return found end
return nil, count
end
local function at_resolve(al, e)
local mr = al.getMemoryRecordByID(e.id)
if mr == nil then
if e.desc == nil or e.desc == '' then
print("[AOBMaker] AA Toggle skip: no record with id " .. tostring(e.id) .. ".")
return nil
end
local byDesc, count = at_byDesc(al, e.desc)
if byDesc == nil then
if count ~= nil and count > 1 then
print("[AOBMaker] AA Toggle skip: id " .. tostring(e.id) .. " is gone and "
.. tostring(count) .. " records are named '" .. tostring(e.desc) .. "'.")
else
print("[AOBMaker] AA Toggle skip: no record with id " .. tostring(e.id)
.. " or description '" .. tostring(e.desc) .. "'.")
end
return nil
end
return byDesc
end
if e.desc ~= nil and e.desc ~= '' and mr.Description ~= e.desc then
print("[AOBMaker] AA Toggle WARNING: id " .. tostring(e.id) .. " is now '"
.. tostring(mr.Description) .. "', expected '" .. tostring(e.desc) .. "'.")
if AOBMAKER_AT_STRICT_DESC then
print("[AOBMaker] AA Toggle skip: AOBMAKER_AT_STRICT_DESC is set.")
return nil
end
end
return mr
end
local function at_apply(list, active, stepMs)
if AOBMAKER_AT_BUSY then print("[AOBMaker] AA Toggle busy - ignoring re-entrant apply.") return end
AOBMAKER_AT_BUSY = true
local ok, err = pcall(function()
local al = getAddressList()
for _, e in ipairs(list) do
local mr = at_resolve(al, e)
if mr ~= nil and mr.Active ~= active then
mr.Active = active
at_wait(stepMs)
end
if at_pump then at_pump() end
end
al.refresh()
end)
AOBMAKER_AT_BUSY = nil
if not ok then error(err, 0) end
end
local at_err = synchronize(function()
local ok, e = pcall(at_apply, enableList, true, CONFIG.stepDelayMs)
if not ok then return e end
end)
if at_err ~= nil then error(at_err, 0) end
print("[AOBMaker] AA Toggle enabled.")
if CONFIG.closeLuaEngine then synchronize(function() getLuaEngine().Close() end) end
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
local disableList = {
{ id = 261, desc = "HUD非表示 / Hide HUD [F7]" },
{ id = 259, desc = "有効化 / Enable change POV [num 0]" },
{ id = 172, desc = "クエスト進行状況リストを生成 / Generate quests status" },
{ id = 189, desc = "即座に反映 / take effect immediately" },
{ id = 59, desc = "倍率切替 / use multiplier" },
{ id = 48, desc = "戦闘：気絶付与倍率 / Battle: Stun multiplier" },
{ id = 47, desc = "戦闘：CP消費後に全回復 / Battle: full CP after use" },
{ id = 46, desc = "戦闘：EP消費後に全回復 / Battle: full EP after use" },
{ id = 45, desc = "戦闘：プレイヤー致死回避 / Battle: player HP: try to keep non-zero" },
{ id = 260, desc = "視点切替 / カメラ切替 / Change POV [orig. credit to amorrow28, Sora_1st code]" },
{ id = 168, desc = "クエスト全進捗データ取得 / Get all quests progress" },
{ id = 161, desc = "個別クエスト情報閲覧 / Quest viewer" },
{ id = 157, desc = "レシピ選択時：必要素材を自動補充 / Auto set ingredient amt. when browsing recipes" },
{ id = 106, desc = "進行中のリワードを取得 / Get on-going reward data / max 50" },
{ id = 73, desc = "ステータスビューアー / Char. stats viewer" },
{ id = 185, desc = "オーブメント - 選択中のクオーツ / Cur. quartz" },
{ id = 4085, desc = "フィールド飯バフ：効果時間の最低値を固定 / Food buff: set min duration" },
{ id = 65, desc = "フィールドチャージゲージ無限 / Field charge: inf charge use" },
{ id = 63, desc = "フィールドチャージゲージ倍率 / Field charge gauge multiplier" },
{ id = 62, desc = "オーバードライブゲージ減らない / inf. OD gauge" },
{ id = 58, desc = "高速オーバードライブ / Fast overdrive (OD)" },
{ id = 66, desc = "経験値倍率設定 / XP multiplier" },
{ id = 56, desc = "サポート経験値倍率設定 / Support XP multiplier" },
{ id = 55, desc = "戦闘終了時にBP全回復 / Restore break gauge after battle" },
{ id = 51, desc = "戦闘：BP 常に最大 / Battle: fast BP" },
{ id = 277, desc = "戦闘：魔法回避率（%）設定 / Battle: set magic evade%" },
{ id = 275, desc = "戦闘：回避率（%）設定 / Battle: set evade%" },
{ id = 273, desc = "戦闘：命中率（%）最大 / Battle: max HIT%" },
{ id = 272, desc = "戦闘：クリティカル率（%）設定 / Battle: set crit%" },
{ id = 50, desc = "アイテム無限 / inf item use" },
{ id = 26, desc = "戦闘：ダメージ制御 / Battle: damage control" },
{ id = 15, desc = "アイテムを閲覧後に個数を設定 / Browse & set item amount" },
{ id = 3, desc = "ミラとセピス / Get Mira" },
{ id = 2, desc = "有効化 / Enable" },
{ id = 1, desc = "スクリプト一括切替 / Toggle scripts" },
{ id = 0, desc = "コンパクトモード切替 / Toggle Compact View" },
}
-- CE sleep() rides the ~15.6 ms Windows scheduler tick, so the real pause lands anywhere between the setting and the setting plus one tick; a sub-tick request may even return early. Back-to-back calls are the special case where every sub-tick request costs one whole tick. Only sleep(0) never pauses.
-- Step delay: 30 ms requested -> 30.0-45.6 ms, averaging ~37.8 ms (measured). The wait ends on the next ~15.6 ms scheduler tick, so it lands within one tick above the setting.
-- The apply loop runs on CE's main thread, so it repaints between records. processMessagesPaintOnly is CE 7.7+, hence the probe.
local at_pump = (type(processMessagesPaintOnly) == 'function') and processMessagesPaintOnly
or (type(processMessages) == 'function') and processMessages or nil
local function at_wait(ms)
if type(ms) ~= 'number' or ms <= 0 then return end
if at_pump == nil or ms <= 242 then sleep(ms) return end
local left = ms
while left > 0 do
local slice = (left > 242) and 242 or left
sleep(slice); at_pump(); left = left - slice
end
end
-- Resolve a record by description, but ONLY when exactly one carries it.
-- 131 of 175 real tables contain duplicate descriptions, so an unguarded
-- getMemoryRecordByDescription silently picks one of N - and here that means
-- injecting a stranger's AA script into the game, not writing one value.
local function at_byDesc(al, desc)
local found, count = nil, 0
for i = 0, al.Count - 1 do
local m = al.MemoryRecord[i]
if m ~= nil and m.Description == desc then count = count + 1; found = m end
end
if count == 1 then return found end
return nil, count
end
local function at_resolve(al, e)
local mr = al.getMemoryRecordByID(e.id)
if mr == nil then
if e.desc == nil or e.desc == '' then
print("[AOBMaker] AA Toggle skip: no record with id " .. tostring(e.id) .. ".")
return nil
end
local byDesc, count = at_byDesc(al, e.desc)
if byDesc == nil then
if count ~= nil and count > 1 then
print("[AOBMaker] AA Toggle skip: id " .. tostring(e.id) .. " is gone and "
.. tostring(count) .. " records are named '" .. tostring(e.desc) .. "'.")
else
print("[AOBMaker] AA Toggle skip: no record with id " .. tostring(e.id)
.. " or description '" .. tostring(e.desc) .. "'.")
end
return nil
end
return byDesc
end
if e.desc ~= nil and e.desc ~= '' and mr.Description ~= e.desc then
print("[AOBMaker] AA Toggle WARNING: id " .. tostring(e.id) .. " is now '"
.. tostring(mr.Description) .. "', expected '" .. tostring(e.desc) .. "'.")
if AOBMAKER_AT_STRICT_DESC then
print("[AOBMaker] AA Toggle skip: AOBMAKER_AT_STRICT_DESC is set.")
return nil
end
end
return mr
end
local function at_apply(list, active, stepMs)
if AOBMAKER_AT_BUSY then print("[AOBMaker] AA Toggle busy - ignoring re-entrant apply.") return end
AOBMAKER_AT_BUSY = true
local ok, err = pcall(function()
local al = getAddressList()
for _, e in ipairs(list) do
local mr = at_resolve(al, e)
if mr ~= nil and mr.Active ~= active then
mr.Active = active
at_wait(stepMs)
end
if at_pump then at_pump() end
end
al.refresh()
end)
AOBMAKER_AT_BUSY = nil
if not ok then error(err, 0) end
end
local at_err = synchronize(function()
local ok, e = pcall(at_apply, disableList, false, 30)
if not ok then return e end
end)
if at_err ~= nil then error(at_err, 0) end
print("[AOBMaker] AA Toggle disabled.")
synchronize(function() getLuaEngine().Close() end)
{$asm}
2
"有効化 / Enable"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
-- Clear lua engine log & close lua engine
if not closeLuaEngine2 then
function closeLuaEngine2()
synchronize(function()
getLuaEngine().MenuItem5.doClick()
getLuaEngine().Close()
end)
end
end
registerLuaFunctionHighlight('closeLuaEngine2')
if not closeLuaEngine then
function closeLuaEngine()
synchronize(function()
getLuaEngine().Close()
end)
end
end
registerLuaFunctionHighlight('closeLuaEngine')
synchronize(function()
getLuaEngine().MenuItem5.doClick()
AddressList.Header.OnSectionClick = nil
end)
closeLuaEngine2()
if _kuro_2_customInt == nil then
local p_proc = process
registerCustomTypeAutoAssembler([[
alloc(TypeName,256)
alloc(ByteSize,8)
alloc(ConvertRoutine,1024)
alloc(ConvertBackRoutine,1024)
alloc(UsesFloat,1)
TypeName:
db 'Kueo2 integer',0
ByteSize:
dd 4
UsesFloat:
db 0
ConvertRoutine:
//at this point ecx contains the address where the bytes are stored
//return with rax/eax
xor rax,rax
mov eax, dword ptr [rcx]
and eax, 3FFFFFFF
ret
ConvertBackRoutine:
//at this point edx contains the address to write the value to
//and ecx contains the value
push rax
xor rax, rax
mov eax, ecx
or eax, 40000000
mov dword ptr [rdx], eax
pop rax
ret
]])
_kuro_2_customInt = true
process = p_proc
autoAssemble(string.format([[
unregistersymbol($process)
define($process, "%s")
registersymbol($process)
]], process))
closeLuaEngine2()
end
local processName = "sora_2nd.exe"
local pid = getProcessIDFromProcessName(processName)
if pid ~= nil and pid > 0 then
-- 取得目前已經附加的 PID
local currentPid = getOpenedProcessID() or 0
if currentPid ~= pid then
-- 目前沒附加，或附加到別的 process → 執行 attach
openProcess(processName)
print("Attached to: " .. processName)
else
-- 已經附加在正確的 process → 不重複 attach
print("Already attached to: " .. processName)
end
end
closeLuaEngine()
[DISABLE]
{$lua}
if syntaxcheck then return end
closeLuaEngine2()
3
"ミラとセピス / Get Mira"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_GET_MIRA,$process,8B ?? 48 B6 20 00 E8)
// raw AOB: 48 3B DE 74 ?? 66 0F 1F 84 00 00 00 00 00 48 8B 0B 48 8D 15 ?? ?? ?? ?? 41 B1 01 41 B8 FE FF FF 7F E8 ?? ?? ?? ?? 48 85 C0 75 ?? 48 83 C3 08 48 3B DE 75 ?? 49 8B C4 48 8B 15 ?? ?? ?? ?? 48 8B C8 8B 92 48 B6 20 00 E8 ?? ?? ?? ?? 44 88 A7 B8 01 00 00 48 8B 05 ?? ?? ?? ?? F6 80 01 01 00 00 40 0F 85 ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 44 38 A0 30 2D 00 00 0F 85 ?? ?? ?? ?? 48 8B 05 ?? ?? ?? ?? 48 8B 90 68 47 62 00 48 63 82 D4 00 00 00 48 8D 0C 40 83 BC 8A A0 00 00 00 11 0F 85 ?? ?? ?? ?? F3 0F 58 B7 10 01 00 00 0F 2F 35
// injection point AOB: 8B ?? 48 B6 20 00 E8 ?? ?? ?? ?? ?? 88 ?? B8 01 00 00 ?? 8B ?? ?? ?? ?? ?? F6 ?? 01 01 00 00 40 0F 85 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 38 ?? 30 2D 00 00 0F 85 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 68 47 62 00 ?? 63 ?? D4 00 00 00 ?? 8D ?? 40 83 ?? ?? A0 00 00 00 11 0F 85 ?? ?? ?? ?? F3 0F 58 ?? 10 01 00 00 0F 2F
alloc(newmem,$1000,INJECT_GET_MIRA)
alloc(INJECT_GET_MIRAo, $6)
label(code)
label(return)
INJECT_GET_MIRAo:
readmem(INJECT_GET_MIRA, $6)
label(i_base_mira_addr i_base_mira_offset)
newmem:
push r15
xor r15, r15
db 41 bf //00 39 1f 00
readmem(INJECT_GET_MIRA+2, 4)
mov [i_base_mira_addr], rdx
mov [i_base_mira_offset], r15
pop r15
code:
// mov edx,[rdx+0020B648]
reassemble(INJECT_GET_MIRA)
jmp return
align 10 cc
i_base_mira_addr:
dq 0
i_base_mira_offset:
dq 0
INJECT_GET_MIRA:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_MIRA INJECT_GET_MIRAo)
registersymbol(i_base_mira_addr i_base_mira_offset)
[DISABLE]
INJECT_GET_MIRA:
readmem(INJECT_GET_MIRAo, $6)
unregistersymbol(INJECT_GET_MIRA INJECT_GET_MIRAo)
dealloc(newmem)
dealloc(INJECT_GET_MIRAo)
//db 8B 92 00 39 1F 00
unregistersymbol(i_base_mira_addr i_base_mira_offset)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+203C03
sora_2nd.exe+203BC2: 48 3B DE - cmp rbx,rsi
sora_2nd.exe+203BC5: 74 2F - je sora_2nd.exe+203BF6
sora_2nd.exe+203BC7: 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
sora_2nd.exe+203BD0: 48 8B 0B - mov rcx,[rbx]
sora_2nd.exe+203BD3: 48 8D 15 CA 3E 8E 00 - lea rdx,[sora_2nd.exe+AE7AA4]
sora_2nd.exe+203BDA: 41 B1 01 - mov r9b,01
sora_2nd.exe+203BDD: 41 B8 FE FF FF 7F - mov r8d,7FFFFFFE
sora_2nd.exe+203BE3: E8 A8 D5 37 00 - call sora_2nd.exe+581190
sora_2nd.exe+203BE8: 48 85 C0 - test rax,rax
sora_2nd.exe+203BEB: 75 0C - jne sora_2nd.exe+203BF9
sora_2nd.exe+203BED: 48 83 C3 08 - add rbx,08
sora_2nd.exe+203BF1: 48 3B DE - cmp rbx,rsi
sora_2nd.exe+203BF4: 75 DA - jne sora_2nd.exe+203BD0
sora_2nd.exe+203BF6: 49 8B C4 - mov rax,r12
sora_2nd.exe+203BF9: 48 8B 15 20 C2 A5 00 - mov rdx,[sora_2nd.exe+C5FE20]
sora_2nd.exe+203C00: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
sora_2nd.exe+203C03: 8B 92 48 B6 20 00 - mov edx,[rdx+0020B648]
// ---------- DONE INJECTING ----------
sora_2nd.exe+203C09: E8 32 70 3E 00 - call sora_2nd.exe+5EAC40
sora_2nd.exe+203C0E: 44 88 A7 B8 01 00 00 - mov [rdi+000001B8],r12b
sora_2nd.exe+203C15: 48 8B 05 0C C2 A5 00 - mov rax,[sora_2nd.exe+C5FE28]
sora_2nd.exe+203C1C: F6 80 01 01 00 00 40 - test byte ptr [rax+00000101],40
sora_2nd.exe+203C23: 0F 85 05 01 00 00 - jne sora_2nd.exe+203D2E
sora_2nd.exe+203C29: 48 8B 05 08 8B A5 00 - mov rax,[sora_2nd.exe+C5C738]
sora_2nd.exe+203C30: 44 38 A0 30 2D 00 00 - cmp [rax+00002D30],r12b
sora_2nd.exe+203C37: 0F 85 F1 00 00 00 - jne sora_2nd.exe+203D2E
sora_2nd.exe+203C3D: 48 8B 05 DC C1 A5 00 - mov rax,[sora_2nd.exe+C5FE20]
sora_2nd.exe+203C44: 48 8B 90 68 47 62 00 - mov rdx,[rax+00624768]
sora_2nd.exe+203C4B: 48 63 82 D4 00 00 00 - movsxd rax,dword ptr [rdx+000000D4]
sora_2nd.exe+203C52: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+203C56: 83 BC 8A A0 00 00 00 11 - cmp dword ptr [rdx+rcx*4+000000A0],11
sora_2nd.exe+203C5E: 0F 85 CA 00 00 00 - jne sora_2nd.exe+203D2E
sora_2nd.exe+203C64: F3 0F 58 B7 10 01 00 00 - addss xmm6,[rdi+00000110]
sora_2nd.exe+203C6C: 0F 2F 35 99 8B 92 00 - comiss xmm6,[sora_2nd.exe+B2C80C]
}
4
"地 / Earth"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-20
5
"水 / Water"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-1C
6
"火 / Fire"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-18
7
"風 / Wind"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-14
8
"時 / Time"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-10
9
"空 / Space"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-C
10
"幻 / Mirage"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-8
11
"セピス塊 / Exchange"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]-4
12
"ミラ / Mira"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]
13
"メダル / Medal"
0
FF8080
4 Bytes
i_base_mira_addr
[i_base_mira_offset]+4
14
"プレイ時間 / Play time"
0
FF8080
Double
i_base_mira_addr
[i_base_mira_offset]+8
15
"アイテムを閲覧後に個数を設定 / Browse & set item amount"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_BROWSE_ITEM_N_SET,$process,0F B7 ?? B8 4C 8A 12 00 85 ?? 75 ?? ?? 8B)
// raw AOB: 72 ?? 89 7C 24 20 4C 8D 0D ?? ?? ?? ?? 41 B8 BB 04 00 00 48 8D 15 ?? ?? ?? ?? B9 03 00 00 00 E8 ?? ?? ?? ?? EB ?? 8D 87 CA FE FF FF 83 F8 07 77 ?? 8B C8 48 8B 05 ?? ?? ?? ?? 8B 94 88 28 B6 20 00 EB ?? 48 8B 05 ?? ?? ?? ?? 0F B7 94 B8 4C 8A 12 00 85 D2 75 ?? 48 8B D6 E8 ?? ?? ?? ?? 85 C0 0F 84 ?? ?? ?? ?? 48 8B 0D ?? ?? ?? ?? 48 85 C9 74 ?? 48 83 C1 08 BA 50 00 00 00 E8 ?? ?? ?? ?? EB ?? B9 50 00 00 00 E8 ?? ?? ?? ?? 48 8B F8
// injection point AOB: 0F B7 ?? B8 4C 8A 12 00 85 ?? 75 ?? ?? 8B ?? E8 ?? ?? ?? ?? 85 ?? 0F 84 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 85 ?? 74 ?? ?? 83 ?? 08 ?? 50 00 00 00 E8 ?? ?? ?? ?? EB ?? ?? 50 00 00 00 E8 ?? ?? ?? ?? ?? 8B
alloc(newmem,$1000,INJECT_BROWSE_ITEM_N_SET)
alloc(INJECT_BROWSE_ITEM_N_SETo, $8)
label(code)
label(return)
INJECT_BROWSE_ITEM_N_SETo:
readmem(INJECT_BROWSE_ITEM_N_SET, $8)
label(iw_min_threshold iw_set_item_cnt_to i_item_addr_offset is_get_all_quartz is_get_all_accessory iw_min_threshold_100 iw_set_item_cnt_to_100)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: movzx edx,word ptr [rax+rbx*4+00116724]
// new injection: movzx edx,word ptr [rax+rdi*4+00128A4C]
// register RBX -> RDI
// 5 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
cmp qword ptr [i_item_addr_offset], 0
jne next1
push r15
xor r15, r15
db 41 bf
readmem(INJECT_BROWSE_ITEM_N_SET+4, 4)
mov [i_item_addr_offset], r15
pop r15
next1:
push r15
push r14
mov r14, [i_item_addr_offset]
// AOBMaker was: lea r15, [rax+rbx*4]
lea r15, [rax+rdi*4]
lea r15, [r15+r14]
{
// rbx check
mov r14, 21445A283C8
cmp r15, r14
jne @F
nop
}
@@:
// check fill quartz
cmp dword ptr [is_get_all_quartz], 1 // is force all quartz?
jne next_accessory
mov r14, E74 // quartz start #
// AOBMaker was: cmp rbx, r14
cmp rdi, r14
jb next_accessory
mov r14, 1108 // 128 address (中間有跳數字)
// AOBMaker was: cmp rbx, r14
cmp rdi, r14
ja next_normal_100 // accessory high watermark = 6A5, so ignore all
mov r14w, [iw_set_item_cnt_to]
mov [r15], r14w
jmp endp
next_accessory:
// check fill quartz
cmp dword ptr [is_get_all_accessory], 1 // is force all accessory?
jne next_normal_100
mov r14, 5DC
// AOBMaker was: cmp rbx, r14
cmp rdi, r14
jb next_normal_100
mov r14, 6A5 // 109 address (中間有跳數字)
// AOBMaker was: cmp rbx, r14
cmp rdi, r14
ja next_normal_100
mov r14w, [iw_set_item_cnt_to]
mov [r15], r14w
jmp endp
next_normal_100:
mov r14w, [r15]
cmp r14w, [iw_min_threshold_100]
jb next_normal
cmp r14w, [iw_set_item_cnt_to_100]
jae endp
mov r14w, [iw_set_item_cnt_to_100]
mov [r15], r14w
jmp endp
next_normal:
mov r14w, [r15]
cmp r14w, [iw_min_threshold]
jb endp
cmp r14w, [iw_set_item_cnt_to]
jae endp
mov r14w, [iw_set_item_cnt_to]
mov [r15], r14w
endp:
pop r14
pop r15
code:
// movzx edx,word ptr [rax+rdi*4+00128A4C]
reassemble(INJECT_BROWSE_ITEM_N_SET)
jmp return
align 10 cc
iw_min_threshold:
dw 2
iw_set_item_cnt_to:
dw 46
iw_min_threshold_100:
dw 64
iw_set_item_cnt_to_100:
dw #700
i_item_addr_offset:
dq 0
is_get_all_quartz:
dd 0
is_get_all_accessory:
dd 0
INJECT_BROWSE_ITEM_N_SET:
jmp newmem
nop 3
return:
registersymbol(INJECT_BROWSE_ITEM_N_SET INJECT_BROWSE_ITEM_N_SETo)
registersymbol(iw_min_threshold iw_set_item_cnt_to i_item_addr_offset is_get_all_quartz is_get_all_accessory iw_min_threshold_100 iw_set_item_cnt_to_100)
[DISABLE]
INJECT_BROWSE_ITEM_N_SET:
readmem(INJECT_BROWSE_ITEM_N_SETo, $8)
unregistersymbol(INJECT_BROWSE_ITEM_N_SET INJECT_BROWSE_ITEM_N_SETo)
dealloc(newmem)
dealloc(INJECT_BROWSE_ITEM_N_SETo)
//db 0F B7 94 98 24 67 11 00
unregistersymbol(iw_min_threshold iw_set_item_cnt_to i_item_addr_offset is_get_all_quartz is_get_all_accessory iw_min_threshold_100 iw_set_item_cnt_to_100)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+1555D0
sora_2nd.exe+155586: 72 24 - jb sora_2nd.exe+1555AC
sora_2nd.exe+155588: 89 7C 24 20 - mov [rsp+20],edi
sora_2nd.exe+15558C: 4C 8D 0D 3D 9D 9B 00 - lea r9,[sora_2nd.exe+B0F2D0]
sora_2nd.exe+155593: 41 B8 C9 04 00 00 - mov r8d,000004C9
sora_2nd.exe+155599: 48 8D 15 10 9C 9B 00 - lea rdx,[sora_2nd.exe+B0F1B0]
sora_2nd.exe+1555A0: B9 03 00 00 00 - mov ecx,00000003
sora_2nd.exe+1555A5: E8 06 69 42 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+1555AA: EB 30 - jmp sora_2nd.exe+1555DC
sora_2nd.exe+1555AC: 8D 87 CA FE FF FF - lea eax,[rdi-00000136]
sora_2nd.exe+1555B2: 83 F8 07 - cmp eax,07
sora_2nd.exe+1555B5: 77 12 - ja sora_2nd.exe+1555C9
sora_2nd.exe+1555B7: 8B C8 - mov ecx,eax
sora_2nd.exe+1555B9: 48 8B 05 60 A8 B0 00 - mov rax,[sora_2nd.exe+C5FE20]
sora_2nd.exe+1555C0: 8B 94 88 28 B6 20 00 - mov edx,[rax+rcx*4+0020B628]
sora_2nd.exe+1555C7: EB 0F - jmp sora_2nd.exe+1555D8
sora_2nd.exe+1555C9: 48 8B 05 50 A8 B0 00 - mov rax,[sora_2nd.exe+C5FE20]
// ---------- INJECTING HERE ----------
sora_2nd.exe+1555D0: 0F B7 94 B8 4C 8A 12 00 - movzx edx,word ptr [rax+rdi*4+00128A4C]
// ---------- DONE INJECTING ----------
sora_2nd.exe+1555D8: 85 D2 - test edx,edx
sora_2nd.exe+1555DA: 75 10 - jne sora_2nd.exe+1555EC
sora_2nd.exe+1555DC: 48 8B D6 - mov rdx,rsi
sora_2nd.exe+1555DF: E8 3C 04 1F 00 - call sora_2nd.exe+345A20
sora_2nd.exe+1555E4: 85 C0 - test eax,eax
sora_2nd.exe+1555E6: 0F 84 39 01 00 00 - je sora_2nd.exe+155725
sora_2nd.exe+1555EC: 48 8B 0D 55 A8 B0 00 - mov rcx,[sora_2nd.exe+C5FE48]
sora_2nd.exe+1555F3: 48 85 C9 - test rcx,rcx
sora_2nd.exe+1555F6: 74 10 - je sora_2nd.exe+155608
sora_2nd.exe+1555F8: 48 83 C1 08 - add rcx,08
sora_2nd.exe+1555FC: BA 50 00 00 00 - mov edx,00000050
sora_2nd.exe+155601: E8 6A 47 47 00 - call sora_2nd.exe+5C9D70
sora_2nd.exe+155606: EB 0A - jmp sora_2nd.exe+155612
sora_2nd.exe+155608: B9 50 00 00 00 - mov ecx,00000050
sora_2nd.exe+15560D: E8 12 AB 72 00 - call sora_2nd.exe+880124
sora_2nd.exe+155612: 48 8B F8 - mov rdi,rax
}
16
"所持アイテム数が ≧"
0
C08000
2 Bytes
iw_min_threshold
17
"Avail. item amount must >="
0
C08000
2 Bytes
iw_min_threshold
18
"設定個数："
0
C08000
2 Bytes
iw_set_item_cnt_to
19
"Set amount to"
0
C08000
2 Bytes
iw_set_item_cnt_to
20
"条件：数量 ≧"
0
C08000
2 Bytes
iw_min_threshold_100
21
"設定数："
0
C08000
2 Bytes
iw_set_item_cnt_to_100
22
"if item amount >="
0
C08000
2 Bytes
iw_min_threshold_100
23
"then set to:"
0
C08000
2 Bytes
iw_set_item_cnt_to_100
24
"クオーツ個数強制設定? / Force quartz?"
0:No
1:Yes
0
C08000
4 Bytes
is_get_all_quartz
25
"アクセサリ個数強制設定? / force all accessories?"
0:No
1:Yes
0
C08000
4 Bytes
is_get_all_accessory
26
"戦闘：ダメージ制御 / Battle: damage control"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_DAMAGE_CTRL,$process,89 ?? 0C ?? 8B ?? 24 ?? 48 83 C4 20 ?? ?? C3 8B ?? 0C)
// raw AOB: 41 5E C3 8B 46 10 89 46 0C 8B 46 18 89 46 14 48 8B 74 24 38 48 83 C4 20 41 5E C3 8B 46 10 44 3B F0 41 0F 4C C6 33 C9 85 C0 0F 48 C1 89 46 0C 48 8B 74 24 38 48 83 C4 20 41 5E C3 8B 4E 0C 8B 56 10 41 03 CE 3B CA 0F 4C D1 33 C9 85 D2 0F 48 D1 89 56 0C 48 8B 74 24 38 48 83 C4 20 41 5E C3
// injection point AOB: 89 ?? 0C ?? 8B ?? 24 ?? 48 83 C4 20 ?? ?? C3 8B ?? 0C 8B ?? 10 ?? 03 ?? 3B ?? 0F 4C ?? 33 ?? 85 ?? 0F 48 ?? 89 ?? 0C ?? 8B ?? 24 ?? 48 83 C4 20 ?? ?? C3
alloc(newmem,$1000,INJECT_BATTLE_DAMAGE_CTRL)
alloc(INJECT_BATTLE_DAMAGE_CTRLo, $8)
label(code)
label(return)
INJECT_BATTLE_DAMAGE_CTRLo:
readmem(INJECT_BATTLE_DAMAGE_CTRL, $8)
label(i_play_char_id vf_min_player_hp_ratio is_enemy_HP_option is_full_EP is_full_CP i_enemy_HP_limit vf_damage_multi vf_enemy_hp_ratio)
newmem:
//push r15
//mov r15d, [i_play_char_id]
//cmp [rsi], r15d
//pop r15
//ja to_enemy
cmp dword ptr [rsi+44], 0 // RNG
je to_enemy
cmp dword ptr [rsi+78], 0 // STUN
jne to_enemy
to_player:
push r15
cmp dword ptr [is_full_EP], 1
jne @F
mov r15d, [rsi+18]
mov [rsi+14], r15d
@@:
cmp dword ptr [is_full_CP], 1
jne @F
mov r15d, [rsi+20]
mov [rsi+1C], r15d
@@:
// HP calc
mov r15d, [rsi+10]
vcvtsi2ss xmm15, xmm15, r15d
vmovss xmm14, [vf_min_player_hp_ratio]
vmulss xmm13, xmm14, xmm15
vcvtss2si r15d, xmm13
cmp eax, r15d
cmovb eax, r15d
pop r15
jmp code
to_enemy:
cmp dword ptr [is_enemy_HP_option], 0
je code
cmp dword ptr [is_enemy_HP_option], 1
je to_1HP
cmp dword ptr [is_enemy_HP_option], 2
je to_1HK
cmp dword ptr [is_enemy_HP_option], 3
je to_set_limit
cmp dword ptr [is_enemy_HP_option], 4
je to_damage_multi
cmp dword ptr [is_enemy_HP_option], 5
je to_1000_hp
cmp dword ptr [is_enemy_HP_option], 6
je to_ratio_hp
jmp code
to_1HK:
mov eax, 0
jmp code
to_1HP:
cmp eax, 1
jbe code
mov eax, 1
jmp code
to_set_limit:
cmp eax, [i_enemy_HP_limit]
jbe code
mov eax, [i_enemy_HP_limit]
jmp code
to_damage_multi:
cmp r14d, 0
jge code
cmp [rsi+0C], eax
jle code
push rcx
push rdx
mov ecx, [rsi+0C]
vcvtsi2ss xmm15, xmm15, ecx
vcvtsi2ss xmm14, xmm14, eax
vsubss xmm15, xmm14, xmm15
vcvtss2si r14d, xmm15
vcvtsi2ss xmm15, xmm15, r14d
vmovss xmm14, [vf_damage_multi]
vmulss xmm15, xmm14, xmm15
vcvtss2si r14d, xmm15
mov ecx,[rsi+0C]
mov edx,[rsi+10]
add ecx,r14d
cmp ecx,edx
cmovl edx,ecx
test edx,edx
cmovs edx,ecx
mov eax,edx
pop rdx
pop rcx
jmp code
to_1000_hp:
cmp eax, #800
jbe code
mov eax, #800
jmp code
to_ratio_hp:
mov r14d, [rsi+10]
vmovss xmm14, [vf_enemy_hp_ratio]
vcvtsi2ss xmm15, xmm15, r14d
vmulss xmm14, xmm14, xmm15
vcvtsi2ss xmm15, xmm15, eax
vucomiss xmm14, xmm15
jae code
vcvtss2si eax, xmm14
code:
// mov [rsi+0C],eax
reassemble(INJECT_BATTLE_DAMAGE_CTRL)
// mov rsi,[rsp+38]
reassemble(INJECT_BATTLE_DAMAGE_CTRL+3)
jmp return
align 10 cc
i_play_char_id:
dd 7 0
vf_min_player_hp_ratio:
dd (float)0.25 0
is_enemy_HP_option:
dd 6 0
i_enemy_HP_limit:
dd #40000 0
is_full_EP:
dd 1 0
is_full_CP:
dd 1 0
vf_damage_multi:
dd (float)3.3333333 0
vf_enemy_hp_ratio:
dd (float)0.75 0
INJECT_BATTLE_DAMAGE_CTRL:
jmp newmem
nop 3
return:
registersymbol(i_play_char_id vf_min_player_hp_ratio is_enemy_HP_option is_full_EP is_full_CP i_enemy_HP_limit vf_damage_multi vf_enemy_hp_ratio)
registersymbol(INJECT_BATTLE_DAMAGE_CTRL INJECT_BATTLE_DAMAGE_CTRLo)
[DISABLE]
INJECT_BATTLE_DAMAGE_CTRL:
readmem(INJECT_BATTLE_DAMAGE_CTRLo, $8)
unregistersymbol(i_play_char_id vf_min_player_hp_ratio is_enemy_HP_option is_full_EP is_full_CP i_enemy_HP_limit vf_damage_multi vf_enemy_hp_ratio)
unregistersymbol(INJECT_BATTLE_DAMAGE_CTRL INJECT_BATTLE_DAMAGE_CTRLo)
dealloc(newmem)
dealloc(INJECT_BATTLE_DAMAGE_CTRLo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+F8D64
sora_2nd.exe+F8D38: 41 5E - pop r14
sora_2nd.exe+F8D3A: C3 - ret
sora_2nd.exe+F8D3B: 8B 46 10 - mov eax,[rsi+10]
sora_2nd.exe+F8D3E: 89 46 0C - mov [rsi+0C],eax
sora_2nd.exe+F8D41: 8B 46 18 - mov eax,[rsi+18]
sora_2nd.exe+F8D44: 89 46 14 - mov [rsi+14],eax
sora_2nd.exe+F8D47: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8D4C: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8D50: 41 5E - pop r14
sora_2nd.exe+F8D52: C3 - ret
sora_2nd.exe+F8D53: 8B 46 10 - mov eax,[rsi+10]
sora_2nd.exe+F8D56: 44 3B F0 - cmp r14d,eax
sora_2nd.exe+F8D59: 41 0F 4C C6 - cmovl eax,r14d
sora_2nd.exe+F8D5D: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8D5F: 85 C0 - test eax,eax
sora_2nd.exe+F8D61: 0F 48 C1 - cmovs eax,ecx
// ---------- INJECTING HERE ----------
sora_2nd.exe+F8D64: 89 46 0C - mov [rsi+0C],eax
// ---------- DONE INJECTING ----------
sora_2nd.exe+F8D67: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8D6C: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8D70: 41 5E - pop r14
sora_2nd.exe+F8D72: C3 - ret
sora_2nd.exe+F8D73: 8B 4E 0C - mov ecx,[rsi+0C]
sora_2nd.exe+F8D76: 8B 56 10 - mov edx,[rsi+10]
sora_2nd.exe+F8D79: 41 03 CE - add ecx,r14d
sora_2nd.exe+F8D7C: 3B CA - cmp ecx,edx
sora_2nd.exe+F8D7E: 0F 4C D1 - cmovl edx,ecx
sora_2nd.exe+F8D81: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8D83: 85 D2 - test edx,edx
sora_2nd.exe+F8D85: 0F 48 D1 - cmovs edx,ecx
sora_2nd.exe+F8D88: 89 56 0C - mov [rsi+0C],edx
sora_2nd.exe+F8D8B: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8D90: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8D94: 41 5E - pop r14
}
{
sora_1st:
// ORIGINAL CODE - INJECTION POINT: sora_1st.exe+DBB80
sora_1st.exe+DBB68: 41 5E - pop r14
sora_1st.exe+DBB6A: C3 - ret
sora_1st.exe+DBB6B: 8B 4E 0C - mov ecx,[rsi+0C]
sora_1st.exe+DBB6E: 8B 56 10 - mov edx,[rsi+10]
sora_1st.exe+DBB71: 41 03 CE - add ecx,r14d
sora_1st.exe+DBB74: 3B CA - cmp ecx,edx
sora_1st.exe+DBB76: 0F 4C D1 - cmovl edx,ecx
sora_1st.exe+DBB79: 33 C9 - xor ecx,ecx
sora_1st.exe+DBB7B: 85 D2 - test edx,edx
sora_1st.exe+DBB7D: 0F 48 D1 - cmovs edx,ecx
// ---------- INJECTING HERE ----------
sora_1st.exe+DBB80: 89 56 0C - mov [rsi+0C],edx
// ---------- DONE INJECTING ----------
sora_1st.exe+DBB83: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_1st.exe+DBB88: 48 83 C4 20 - add rsp,20
sora_1st.exe+DBB8C: 41 5E - pop r14
sora_1st.exe+DBB8E: C3 - ret
sora_1st.exe+DBB8F: 8B 46 18 - mov eax,[rsi+18]
sora_1st.exe+DBB92: 44 3B F0 - cmp r14d,eax
sora_1st.exe+DBB95: 41 0F 4C C6 - cmovl eax,r14d
sora_1st.exe+DBB99: 33 C9 - xor ecx,ecx
sora_1st.exe+DBB9B: 85 C0 - test eax,eax
sora_1st.exe+DBB9D: 0F 48 C1 - cmovs eax,ecx
}
27
"基本設定 / Global setting"
1
28
"味方最小HP維持率（%）"
0
C08000
Float
vf_min_player_hp_ratio
29
"Min player HP ratio after hit"
0
C08000
Float
vf_min_player_hp_ratio
30
"被ダメージ時EP回復?"
0:No
1:Yes
0
C08000
4 Bytes
is_full_EP
31
"Full EP after get hit?"
0:No
1:Yes
0
C08000
4 Bytes
is_full_EP
32
"被ダメージ時CP回復?"
0:No
1:Yes
0
C08000
4 Bytes
is_full_CP
33
"Full CP after get hit?"
0:No
1:Yes
0
C08000
4 Bytes
is_full_CP
34
"敵HPオプション / Enemy HP option"
0:なし / None
1:HPを1にする / HP 1
2:一撃必殺 / 1 hit kill
3:最大値を下記に設定 / set limit as below
4:下記のダメージ倍率を適用 / damage multiplier as below
5:被弾後HP 800固定 / hit to HP 800
6:指定HP割合 / HP ratio
0
C08000
4 Bytes
is_enemy_HP_option
35
"※警告：味方NPCに影響を与える可能性があります"
8000FF
1
36
"※味方NPCが一撃で倒される可能性があります"
8000FF
1
37
"Warning: may affect friendly NPCs"
8000FF
1
38
"friendly NPC may be killed when battle start"
8000FF
1
39
"3. 敵HP上限"
0
C08000
4 Bytes
i_enemy_HP_limit
40
"4. 与ダメージ倍率"
0
C08000
Float
vf_damage_multi
41
"6. 一撃後HP割合（%）"
0
C08000
Float
vf_enemy_hp_ratio
42
"3. Enemy HP limit:"
0
C08000
4 Bytes
i_enemy_HP_limit
43
"4. damage multiplier"
0
C08000
Float
vf_damage_multi
44
"6. Max HP ratio after hit"
0
C08000
Float
vf_enemy_hp_ratio
45
"戦闘：プレイヤー致死回避 / Battle: player HP: try to keep non-zero"
Auto Assembler Script
{ Game :
Version:
Date : 2025-09-19
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_HP_NO_0,sora_2nd.exe,03 D0 41 39 50 0C 7F ?? 48 8D 15 ?? ?? ?? ?? 48 8B CB) // should be unique
alloc(newmem,$1000,INJECT_HP_NO_0)
label(code)
label(return)
newmem:
code:
add edx,eax
cmp [r8+0C],edx
jg endp
pushfq
cmp edx, 0
jl next1
mov [r8+0C], edx
inc dword ptr [r8+0C]
jmp end_inner
next1:
push r15
mov r15d, [r8+10]
vcvtsi2ss xmm15, xmm15, r15d
vmovss xmm14, [vf_min_player_hp_ratio]
vmulss xmm14, xmm14, xmm15
vcvtss2si r15d, xmm14
mov [r8+0C], r15d
pop r15
end_inner:
popfq
cmp [r8+0C], edx
endp:
jmp return
align 10 cc
INJECT_HP_NO_0:
jmp newmem
nop
return:
registersymbol(INJECT_HP_NO_0)
[DISABLE]
INJECT_HP_NO_0:
db 03 D0 41 39 50 0C
unregistersymbol(INJECT_HP_NO_0)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+21F093
sora_2nd.exe+21F05A: 84 C0 - test al,al
sora_2nd.exe+21F05C: 0F 85 85 00 00 00 - jne sora_2nd.exe+21F0E7
sora_2nd.exe+21F062: 83 BB D8 02 00 00 03 - cmp dword ptr [rbx+000002D8],03
sora_2nd.exe+21F069: 74 4A - je sora_2nd.exe+21F0B5
sora_2nd.exe+21F06B: 4C 8B 83 90 1D 00 00 - mov r8,[rbx+00001D90]
sora_2nd.exe+21F072: 4D 85 C0 - test r8,r8
sora_2nd.exe+21F075: 74 3E - je sora_2nd.exe+21F0B5
sora_2nd.exe+21F077: 4D 8B 00 - mov r8,[r8]
sora_2nd.exe+21F07A: 41 8B 40 10 - mov eax,[r8+10]
sora_2nd.exe+21F07E: 8D 0C 80 - lea ecx,[rax+rax*4]
sora_2nd.exe+21F081: B8 1F 85 EB 51 - mov eax,51EB851F
sora_2nd.exe+21F086: C1 E1 02 - shl ecx,02
sora_2nd.exe+21F089: F7 E9 - imul ecx
sora_2nd.exe+21F08B: C1 FA 05 - sar edx,05
sora_2nd.exe+21F08E: 8B C2 - mov eax,edx
sora_2nd.exe+21F090: C1 E8 1F - shr eax,1F
// ---------- INJECTING HERE ----------
sora_2nd.exe+21F093: 03 D0 - add edx,eax
// ---------- DONE INJECTING ----------
sora_2nd.exe+21F095: 41 39 50 0C - cmp [r8+0C],edx
sora_2nd.exe+21F099: 7F 1A - jg sora_2nd.exe+21F0B5
sora_2nd.exe+21F09B: 48 8D 15 76 8B 8C 00 - lea rdx,[sora_2nd.exe+AE7C18]
sora_2nd.exe+21F0A2: 48 8B CB - mov rcx,rbx
sora_2nd.exe+21F0A5: E8 76 8D FF FF - call sora_2nd.exe+217E20
sora_2nd.exe+21F0AA: 4C 8D 05 67 8B 8C 00 - lea r8,[sora_2nd.exe+AE7C18]
sora_2nd.exe+21F0B1: 84 C0 - test al,al
sora_2nd.exe+21F0B3: 75 07 - jne sora_2nd.exe+21F0BC
sora_2nd.exe+21F0B5: 4C 8D 05 4C 8B 8C 00 - lea r8,[sora_2nd.exe+AE7C08]
sora_2nd.exe+21F0BC: F3 0F 10 05 90 DA 90 00 - movss xmm0,[sora_2nd.exe+B2CB54]
sora_2nd.exe+21F0C4: 0F 28 DE - movaps xmm3,xmm6
sora_2nd.exe+21F0C7: 40 88 7C 24 30 - mov [rsp+30],dil
sora_2nd.exe+21F0CC: BA 02 00 00 00 - mov edx,00000002
sora_2nd.exe+21F0D1: C7 44 24 28 00 00 00 00 - mov [rsp+28],00000000
sora_2nd.exe+21F0D9: 48 8B CB - mov rcx,rbx
sora_2nd.exe+21F0DC: F3 0F 11 44 24 20 - movss [rsp+20],xmm0
}
46
"戦闘：EP消費後に全回復 / Battle: full EP after use"
Auto Assembler Script
{ Game :
Version:
Date : 2025-09-19
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_INF_EP,sora_2nd.exe,8B 4E 14 8B 56 18) // should be unique
alloc(newmem,$1000,INJECT_BATTLE_INF_EP)
label(code)
label(return)
newmem:
cmp dword ptr [rsi+44], 0 // RNG
je code
cmp dword ptr [rsi+78], 0 // RNG
jne code
mov edx, [rsi+18]
mov [rsi+14], edx
xor r14d, r14d
code:
mov ecx,[rsi+14]
mov edx,[rsi+18]
jmp return
INJECT_BATTLE_INF_EP:
jmp newmem
nop
return:
registersymbol(INJECT_BATTLE_INF_EP)
[DISABLE]
INJECT_BATTLE_INF_EP:
db 8B 4E 14 8B 56 18
unregistersymbol(INJECT_BATTLE_INF_EP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+F8CD7
sora_2nd.exe+F8CA8: 89 56 0C - mov [rsi+0C],edx
sora_2nd.exe+F8CAB: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8CB0: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8CB4: 41 5E - pop r14
sora_2nd.exe+F8CB6: C3 - ret
sora_2nd.exe+F8CB7: 8B 46 18 - mov eax,[rsi+18]
sora_2nd.exe+F8CBA: 44 3B F0 - cmp r14d,eax
sora_2nd.exe+F8CBD: 41 0F 4C C6 - cmovl eax,r14d
sora_2nd.exe+F8CC1: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8CC3: 85 C0 - test eax,eax
sora_2nd.exe+F8CC5: 0F 48 C1 - cmovs eax,ecx
sora_2nd.exe+F8CC8: 89 46 14 - mov [rsi+14],eax
sora_2nd.exe+F8CCB: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8CD0: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8CD4: 41 5E - pop r14
sora_2nd.exe+F8CD6: C3 - ret
// ---------- INJECTING HERE ----------
sora_2nd.exe+F8CD7: 8B 4E 14 - mov ecx,[rsi+14]
// ---------- DONE INJECTING ----------
sora_2nd.exe+F8CDA: 8B 56 18 - mov edx,[rsi+18]
sora_2nd.exe+F8CDD: 41 03 CE - add ecx,r14d
sora_2nd.exe+F8CE0: 3B CA - cmp ecx,edx
sora_2nd.exe+F8CE2: 0F 4C D1 - cmovl edx,ecx
sora_2nd.exe+F8CE5: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8CE7: 85 D2 - test edx,edx
sora_2nd.exe+F8CE9: 0F 48 D1 - cmovs edx,ecx
sora_2nd.exe+F8CEC: 89 56 14 - mov [rsi+14],edx
sora_2nd.exe+F8CEF: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8CF4: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8CF8: 41 5E - pop r14
sora_2nd.exe+F8CFA: C3 - ret
sora_2nd.exe+F8CFB: 8B 4E 1C - mov ecx,[rsi+1C]
sora_2nd.exe+F8CFE: 8B 56 20 - mov edx,[rsi+20]
sora_2nd.exe+F8D01: 41 03 CE - add ecx,r14d
sora_2nd.exe+F8D04: 3B CA - cmp ecx,edx
}
47
"戦闘：CP消費後に全回復 / Battle: full CP after use"
Auto Assembler Script
{ Game :
Version:
Date : 2025-09-19
Author : bbfox@https://openchetatables.com
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_INF_CP,sora_2nd.exe,8B 4E 1C 8B 56 20) // should be unique
alloc(newmem,$1000,INJECT_BATTLE_INF_CP)
label(code)
label(return)
newmem:
cmp dword ptr [rsi+44], 0 // RNG
je code
cmp dword ptr [rsi+78], 0
jne code
mov edx, [rsi+20]
mov [rsi+1C], edx
xor r14d, r14d
code:
mov ecx,[rsi+1C]
mov edx,[rsi+20]
jmp return
INJECT_BATTLE_INF_CP:
jmp newmem
nop
return:
registersymbol(INJECT_BATTLE_INF_CP)
[DISABLE]
INJECT_BATTLE_INF_CP:
db 8B 4E 1C 8B 56 20
unregistersymbol(INJECT_BATTLE_INF_CP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+F8CFB
sora_2nd.exe+F8CD0: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8CD4: 41 5E - pop r14
sora_2nd.exe+F8CD6: C3 - ret
INJECT_BATTLE_INF_EP: E9 24 73 DE FF - jmp 7FF691640000
sora_2nd.exe+F8CDC: 90 - nop
sora_2nd.exe+F8CDD: 41 03 CE - add ecx,r14d
sora_2nd.exe+F8CE0: 3B CA - cmp ecx,edx
sora_2nd.exe+F8CE2: 0F 4C D1 - cmovl edx,ecx
sora_2nd.exe+F8CE5: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8CE7: 85 D2 - test edx,edx
sora_2nd.exe+F8CE9: 0F 48 D1 - cmovs edx,ecx
sora_2nd.exe+F8CEC: 89 56 14 - mov [rsi+14],edx
sora_2nd.exe+F8CEF: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8CF4: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8CF8: 41 5E - pop r14
sora_2nd.exe+F8CFA: C3 - ret
// ---------- INJECTING HERE ----------
sora_2nd.exe+F8CFB: 8B 4E 1C - mov ecx,[rsi+1C]
// ---------- DONE INJECTING ----------
sora_2nd.exe+F8CFE: 8B 56 20 - mov edx,[rsi+20]
sora_2nd.exe+F8D01: 41 03 CE - add ecx,r14d
sora_2nd.exe+F8D04: 3B CA - cmp ecx,edx
sora_2nd.exe+F8D06: 0F 4C D1 - cmovl edx,ecx
sora_2nd.exe+F8D09: 33 C9 - xor ecx,ecx
sora_2nd.exe+F8D0B: 85 D2 - test edx,edx
sora_2nd.exe+F8D0D: 0F 48 D1 - cmovs edx,ecx
sora_2nd.exe+F8D10: 89 56 1C - mov [rsi+1C],edx
sora_2nd.exe+F8D13: 48 8B 74 24 38 - mov rsi,[rsp+38]
sora_2nd.exe+F8D18: 48 83 C4 20 - add rsp,20
sora_2nd.exe+F8D1C: 41 5E - pop r14
sora_2nd.exe+F8D1E: C3 - ret
sora_2nd.exe+F8D1F: 44 39 76 1C - cmp [rsi+1C],r14d
sora_2nd.exe+F8D23: 0F 8D 14 05 00 00 - jnl sora_2nd.exe+F923D
sora_2nd.exe+F8D29: 8B 46 20 - mov eax,[rsi+20]
sora_2nd.exe+F8D2C: 44 3B F0 - cmp r14d,eax
}
48
"戦闘：気絶付与倍率 / Battle: Stun multiplier"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_STUN_MULTI,$process,F3 0F 58 ?? F3 0F 5D ?? F3 0F 5F ?? ?? 84)
// raw AOB: 48 8B 07 F3 0F 10 40 78 F3 0F 5C 40 74 F3 0F 5C C4 F3 0F 5D F8 48 8B 07 48 8D 4C 24 20 45 84 F6 F3 44 0F 11 44 24 20 49 0F 44 CF F3 0F 10 58 78 44 0F 2F C3 73 ?? F3 0F 10 50 74 0F 57 C9 0F 28 C2 F3 0F 58 C7 F3 0F 5D C3 F3 0F 5F C8 40 84 F6 74 ?? 0F 2F CB 72 ?? 0F 28 CB F3 0F 5C CC 48 85 C9 74 ?? F3 0F 5C CA F3 0F 11 09 F3 44 0F 10 44 24 20 EB ?? 44 0F 2F C7 F3 0F 11 48 74 0F 28 D1
// injection point AOB: F3 0F 58 ?? F3 0F 5D ?? F3 0F 5F ?? ?? 84 ?? 74 ?? 0F 2F ?? 72 ?? 0F 28 ?? F3 0F 5C ?? ?? 85 ?? 74 ?? F3 0F 5C ?? F3 0F 11 ?? F3 ?? 0F 10 ?? ?? ?? EB ?? ?? 0F 2F ?? F3 0F 11 ?? 74 0F 28
alloc(newmem,$1000,INJECT_STUN_MULTI)
alloc(INJECT_STUN_MULTIo, $8)
label(code)
label(return)
INJECT_STUN_MULTIo:
readmem(INJECT_STUN_MULTI, $8)
label(vf_stun_multi i_base_stn_addr)
newmem:
// check if enemy
cmp dword ptr [rax+44], 0 // RNG
jne code
cmp dword ptr [rax+78], 0 // max stun value
je code
mov [i_base_stn_addr], rax
mulss xmm7, dword ptr [vf_stun_multi]
code:
// addss xmm0,xmm7
reassemble(INJECT_STUN_MULTI)
// minss xmm0,xmm3
reassemble(INJECT_STUN_MULTI+4)
jmp return
align 10 cc
i_base_stn_addr:
dq 0
vf_stun_multi:
dd (float)6.66666
INJECT_STUN_MULTI:
jmp newmem
nop 3
return:
registersymbol(INJECT_STUN_MULTI INJECT_STUN_MULTIo)
registersymbol(vf_stun_multi i_base_stn_addr)
[DISABLE]
INJECT_STUN_MULTI:
readmem(INJECT_STUN_MULTIo, $8)
unregistersymbol(INJECT_STUN_MULTI INJECT_STUN_MULTIo)
unregistersymbol(vf_stun_multi i_base_stn_addr)
dealloc(newmem)
dealloc(INJECT_STUN_MULTIo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E20CB
sora_2nd.exe+E208A: 48 8B 07 - mov rax,[rdi]
sora_2nd.exe+E208D: F3 0F 10 40 78 - movss xmm0,[rax+78]
sora_2nd.exe+E2092: F3 0F 5C 40 74 - subss xmm0,[rax+74]
sora_2nd.exe+E2097: F3 0F 5C C4 - subss xmm0,xmm4
sora_2nd.exe+E209B: F3 0F 5D F8 - minss xmm7,xmm0
sora_2nd.exe+E209F: 48 8B 07 - mov rax,[rdi]
sora_2nd.exe+E20A2: 48 8D 4C 24 20 - lea rcx,[rsp+20]
sora_2nd.exe+E20A7: 45 84 F6 - test r14b,r14b
sora_2nd.exe+E20AA: F3 44 0F 11 44 24 20 - movss [rsp+20],xmm8
sora_2nd.exe+E20B1: 49 0F 44 CF - cmove rcx,r15
sora_2nd.exe+E20B5: F3 0F 10 58 78 - movss xmm3,[rax+78]
sora_2nd.exe+E20BA: 44 0F 2F C3 - comiss xmm8,xmm3
sora_2nd.exe+E20BE: 73 79 - jae sora_2nd.exe+E2139
sora_2nd.exe+E20C0: F3 0F 10 50 74 - movss xmm2,[rax+74]
sora_2nd.exe+E20C5: 0F 57 C9 - xorps xmm1,xmm1
sora_2nd.exe+E20C8: 0F 28 C2 - movaps xmm0,xmm2
// ---------- INJECTING HERE ----------
sora_2nd.exe+E20CB: F3 0F 58 C7 - addss xmm0,xmm7
// ---------- DONE INJECTING ----------
sora_2nd.exe+E20CF: F3 0F 5D C3 - minss xmm0,xmm3
sora_2nd.exe+E20D3: F3 0F 5F C8 - maxss xmm1,xmm0
sora_2nd.exe+E20D7: 40 84 F6 - test sil,sil
sora_2nd.exe+E20DA: 74 0C - je sora_2nd.exe+E20E8
sora_2nd.exe+E20DC: 0F 2F CB - comiss xmm1,xmm3
sora_2nd.exe+E20DF: 72 07 - jb sora_2nd.exe+E20E8
sora_2nd.exe+E20E1: 0F 28 CB - movaps xmm1,xmm3
sora_2nd.exe+E20E4: F3 0F 5C CC - subss xmm1,xmm4
sora_2nd.exe+E20E8: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E20EB: 74 11 - je sora_2nd.exe+E20FE
sora_2nd.exe+E20ED: F3 0F 5C CA - subss xmm1,xmm2
sora_2nd.exe+E20F1: F3 0F 11 09 - movss [rcx],xmm1
sora_2nd.exe+E20F5: F3 44 0F 10 44 24 20 - movss xmm8,[rsp+20]
sora_2nd.exe+E20FC: EB 1F - jmp sora_2nd.exe+E211D
sora_2nd.exe+E20FE: 44 0F 2F C7 - comiss xmm8,xmm7
sora_2nd.exe+E2102: F3 0F 11 48 74 - movss [rax+74],xmm1
}
{
sora_1st:
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+C8B27
sora_2nd.exe+C8AFE: 40 84 F6 - test sil,sil
sora_2nd.exe+C8B01: F3 44 0F 11 4C 24 20 - movss [rsp+20],xmm9
sora_2nd.exe+C8B08: 49 0F 44 C7 - cmove rax,r15
sora_2nd.exe+C8B0C: 4C 8B 7C 24 70 - mov r15,[rsp+70]
sora_2nd.exe+C8B11: F3 0F 10 51 78 - movss xmm2,[rcx+78]
sora_2nd.exe+C8B16: 44 0F 2F CA - comiss xmm9,xmm2
sora_2nd.exe+C8B1A: 73 5A - jae sora_2nd.exe+C8B76
sora_2nd.exe+C8B1C: F3 0F 10 59 74 - movss xmm3,[rcx+74]
sora_2nd.exe+C8B21: 0F 28 CA - movaps xmm1,xmm2
sora_2nd.exe+C8B24: 0F 28 C3 - movaps xmm0,xmm3
// ---------- INJECTING HERE ----------
sora_2nd.exe+C8B27: F3 41 0F 58 C0 - addss xmm0,xmm8
// ---------- DONE INJECTING ----------
sora_2nd.exe+C8B2C: F3 0F 5D C8 - minss xmm1,xmm0
sora_2nd.exe+C8B30: 40 84 ED - test bpl,bpl
sora_2nd.exe+C8B33: 74 0C - je sora_2nd.exe+C8B41
sora_2nd.exe+C8B35: 0F 2F CA - comiss xmm1,xmm2
sora_2nd.exe+C8B38: 72 07 - jb sora_2nd.exe+C8B41
sora_2nd.exe+C8B3A: 0F 28 CA - movaps xmm1,xmm2
sora_2nd.exe+C8B3D: F3 0F 5C CC - subss xmm1,xmm4
sora_2nd.exe+C8B41: 48 85 C0 - test rax,rax
sora_2nd.exe+C8B44: 74 11 - je sora_2nd.exe+C8B57
sora_2nd.exe+C8B46: F3 0F 5C CB - subss xmm1,xmm3
}
49
"multiplier"
0
C08000
Float
vf_stun_multi
268
"stun"
0
FF8080
Float
i_base_stn_addr
74
269
"Stun target"
0
FF8080
Float
i_base_stn_addr
78
50
"アイテム無限 / inf item use"
Auto Assembler Script
{ Game : sora_2nd.exe
Version:
Date : 2026/08/20
Author : bbfox@https://opencheattables.scom
}
[ENABLE]
aobscanmodule(INJECT_BATTLE_INF_ITEM,sora_2nd.exe,2B CD C7 44 24 20 FF FF 00 00) // should be unique
alloc(newmem,$1000,INJECT_BATTLE_INF_ITEM)
label(code)
label(return)
newmem:
cmp ebp, 0
jl code
xor ebp, ebp
code:
sub ecx,ebp
mov [rsp+20],0000FFFF
jmp return
INJECT_BATTLE_INF_ITEM:
jmp newmem
nop 5
return:
registersymbol(INJECT_BATTLE_INF_ITEM)
[DISABLE]
INJECT_BATTLE_INF_ITEM:
db 2B CD C7 44 24 20 FF FF 00 00
unregistersymbol(INJECT_BATTLE_INF_ITEM)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+43D90F
sora_2nd.exe+43D8CC: 8B C7 - mov eax,edi
sora_2nd.exe+43D8CE: 8B 8E 40 B6 20 00 - mov ecx,[rsi+0020B640]
sora_2nd.exe+43D8D4: 2B CD - sub ecx,ebp
sora_2nd.exe+43D8D6: 85 C9 - test ecx,ecx
sora_2nd.exe+43D8D8: 0F 4F C1 - cmovg eax,ecx
sora_2nd.exe+43D8DB: 89 86 40 B6 20 00 - mov [rsi+0020B640],eax
sora_2nd.exe+43D8E1: 8B 86 44 B6 20 00 - mov eax,[rsi+0020B644]
sora_2nd.exe+43D8E7: 2B C5 - sub eax,ebp
sora_2nd.exe+43D8E9: 85 C0 - test eax,eax
sora_2nd.exe+43D8EB: 0F 4F F8 - cmovg edi,eax
sora_2nd.exe+43D8EE: 89 BE 44 B6 20 00 - mov [rsi+0020B644],edi
sora_2nd.exe+43D8F4: E9 02 01 00 00 - jmp sora_2nd.exe+43D9FB
sora_2nd.exe+43D8F9: 48 8D 14 9E - lea rdx,[rsi+rbx*4]
sora_2nd.exe+43D8FD: 89 7C 24 48 - mov [rsp+48],edi
sora_2nd.exe+43D901: 0F B7 8A 4C 8A 12 00 - movzx ecx,word ptr [rdx+00128A4C]
sora_2nd.exe+43D908: 48 8D 35 21 1A 6D 00 - lea rsi,[sora_2nd.exe+B0F330]
// ---------- INJECTING HERE ----------
sora_2nd.exe+43D90F: 2B CD - sub ecx,ebp
// ---------- DONE INJECTING ----------
sora_2nd.exe+43D911: C7 44 24 20 FF FF 00 00 - mov [rsp+20],0000FFFF
sora_2nd.exe+43D919: 85 C9 - test ecx,ecx
sora_2nd.exe+43D91B: 4C 8D 4C 24 48 - lea r9,[rsp+48]
sora_2nd.exe+43D920: 66 0F 4F C1 - cmovg ax,cx
sora_2nd.exe+43D924: 48 8B 0D FD 24 82 00 - mov rcx,[sora_2nd.exe+C5FE28]
sora_2nd.exe+43D92B: 66 89 82 4C 8A 12 00 - mov [rdx+00128A4C],ax
sora_2nd.exe+43D932: 81 E3 FF FF FF 3F - and ebx,3FFFFFFF
sora_2nd.exe+43D938: 0F BA EB 1E - bts ebx,1E
sora_2nd.exe+43D93C: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+43D93F: 48 8B D6 - mov rdx,rsi
sora_2nd.exe+43D942: 89 5C 24 40 - mov [rsp+40],ebx
sora_2nd.exe+43D946: E8 35 ED 08 00 - call sora_2nd.exe+4CC680
sora_2nd.exe+43D94B: 48 8B D8 - mov rbx,rax
sora_2nd.exe+43D94E: 48 85 C0 - test rax,rax
sora_2nd.exe+43D951: 0F 84 81 00 00 00 - je sora_2nd.exe+43D9D8
sora_2nd.exe+43D957: 8B 44 24 48 - mov eax,[rsp+48]
}
272
"戦闘：クリティカル率（%）設定 / Battle: set crit%"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_CRIT_MAX,$process,8B ?? 6C 85 ?? 0F 48 ?? ?? F6)
// raw AOB: 45 84 DB 0F 84 ?? ?? ?? ?? 49 8D 8D D0 00 00 00 E8 ?? ?? ?? ?? 44 8B E0 B8 1F 85 EB 51 41 F7 E4 C1 EA 05 6B CA 64 44 2B E1 41 0F B6 4F 10 FE C9 4C 8B 7C 24 60 80 F9 02 77 ?? 49 8B 07 8B 78 6C 85 FF 0F 48 FE 41 F6 C6 01 74 ?? 49 8B 87 98 05 00 00 48 8B 90 08 09 00 00 8B 80 10 09 00 00 48 8D 0C C0 48 8D 04 CA 48 3B D0 74 ?? 83 3A 33 74 ?? 48 83 C2 48 48 3B D0 75 ?? EB
// injection point AOB: 8B ?? 6C 85 ?? 0F 48 ?? ?? F6 ?? 01 74 ?? ?? 8B ?? 98 05 00 00 ?? 8B ?? 08 09 00 00 8B ?? 10 09 00 00 ?? 8D ?? C0 ?? 8D ?? CA ?? 3B ?? 74 ?? 83 ?? 33 74 ?? ?? 83 ?? 48 ?? 3B ?? 75 ?? EB
alloc(newmem,$1000,INJECT_CRIT_MAX)
alloc(INJECT_CRIT_MAXo, $5)
label(code)
label(return)
INJECT_CRIT_MAXo:
readmem(INJECT_CRIT_MAX, $5)
label(i_hitp_target)
newmem:
code:
// mov edi,[rax+6C]
reassemble(INJECT_CRIT_MAX)
cmp dword ptr [rax+44], 0 // RNG
je short @F
cmp dword ptr [rax+78], 0 // max stun value
jne short @F
mov eax, [i_hitp_target]
@@:
// test edi,edi
reassemble(INJECT_CRIT_MAX+3)
jmp return
align 10 cc
i_hitp_target:
dd C8
INJECT_CRIT_MAX:
jmp newmem
return:
registersymbol(INJECT_CRIT_MAX INJECT_CRIT_MAXo)
registersymbol(i_hitp_target)
[DISABLE]
INJECT_CRIT_MAX:
readmem(INJECT_CRIT_MAXo, $5)
unregistersymbol(INJECT_CRIT_MAX INJECT_CRIT_MAXo)
unregistersymbol(i_hitp_target)
dealloc(newmem)
dealloc(INJECT_CRIT_MAXo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E5E64
sora_2nd.exe+E5E27: 45 84 DB - test r11b,r11b
sora_2nd.exe+E5E2A: 0F 84 89 03 00 00 - je sora_2nd.exe+E61B9
sora_2nd.exe+E5E30: 49 8D 8D D0 00 00 00 - lea rcx,[r13+000000D0]
sora_2nd.exe+E5E37: E8 D4 C7 4A 00 - call sora_2nd.exe+592610
sora_2nd.exe+E5E3C: 44 8B E0 - mov r12d,eax
sora_2nd.exe+E5E3F: B8 1F 85 EB 51 - mov eax,51EB851F
sora_2nd.exe+E5E44: 41 F7 E4 - mul r12d
sora_2nd.exe+E5E47: C1 EA 05 - shr edx,05
sora_2nd.exe+E5E4A: 6B CA 64 - imul ecx,edx,64
sora_2nd.exe+E5E4D: 44 2B E1 - sub r12d,ecx
sora_2nd.exe+E5E50: 41 0F B6 4F 10 - movzx ecx,byte ptr [r15+10]
sora_2nd.exe+E5E55: FE C9 - dec cl
sora_2nd.exe+E5E57: 4C 8B 7C 24 60 - mov r15,[rsp+60]
sora_2nd.exe+E5E5C: 80 F9 02 - cmp cl,02
sora_2nd.exe+E5E5F: 77 0B - ja sora_2nd.exe+E5E6C
sora_2nd.exe+E5E61: 49 8B 07 - mov rax,[r15]
// ---------- INJECTING HERE ----------
sora_2nd.exe+E5E64: 8B 78 6C - mov edi,[rax+6C]
// ---------- DONE INJECTING ----------
sora_2nd.exe+E5E67: 85 FF - test edi,edi
sora_2nd.exe+E5E69: 0F 48 FE - cmovs edi,esi
sora_2nd.exe+E5E6C: 41 F6 C6 01 - test r14b,01
sora_2nd.exe+E5E70: 74 39 - je sora_2nd.exe+E5EAB
sora_2nd.exe+E5E72: 49 8B 87 98 05 00 00 - mov rax,[r15+00000598]
sora_2nd.exe+E5E79: 48 8B 90 08 09 00 00 - mov rdx,[rax+00000908]
sora_2nd.exe+E5E80: 8B 80 10 09 00 00 - mov eax,[rax+00000910]
sora_2nd.exe+E5E86: 48 8D 0C C0 - lea rcx,[rax+rax*8]
sora_2nd.exe+E5E8A: 48 8D 04 CA - lea rax,[rdx+rcx*8]
sora_2nd.exe+E5E8E: 48 3B D0 - cmp rdx,rax
sora_2nd.exe+E5E91: 74 18 - je sora_2nd.exe+E5EAB
sora_2nd.exe+E5E93: 83 3A 33 - cmp dword ptr [rdx],33
sora_2nd.exe+E5E96: 74 0B - je sora_2nd.exe+E5EA3
sora_2nd.exe+E5E98: 48 83 C2 48 - add rdx,48
sora_2nd.exe+E5E9C: 48 3B D0 - cmp rdx,rax
sora_2nd.exe+E5E9F: 75 F2 - jne sora_2nd.exe+E5E93
}
274
"target"
0
C08000
4 Bytes
i_hitp_target
273
"戦闘：命中率（%）最大 / Battle: max HIT%"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_BATT_HIT_MAX,$process,?? 8B ?? 60 ?? 03 ?? ?? 0F 48)
// raw AOB: 48 3B D0 74 ?? 83 3A 35 74 ?? 48 83 C2 48 48 3B D0 75 ?? EB ?? 48 8B 05 ?? ?? ?? ?? 48 8B 88 C0 00 00 00 48 8B 41 08 48 8B 40 30 48 8B 88 F8 00 00 00 48 85 C9 74 ?? 44 8B 41 04 45 8B 69 60 45 03 E8 44 0F 48 EE 44 89 6C 24 48 48 8B 5C 24 70 48 8B 03 44 8B 60 64 45 85 E4 44 0F 48 E6 44 89 64 24 4C 41 F6 C6 02 75 ?? 41 80 7F 10 04 0F 85 ?? ?? ?? ?? 44 8B 60 68 45 85 E4 44 0F 48 E6 44 89 64 24 4C
// injection point AOB: ?? 8B ?? 60 ?? 03 ?? ?? 0F 48 ?? ?? 89 ?? 24 ?? ?? 8B ?? 24 ?? ?? 8B ?? ?? 8B ?? 64 ?? 85 ?? ?? 0F 48 ?? ?? 89 ?? 24 ?? ?? F6 ?? 02 75 ?? ?? 80 ?? 10 04 0F 85 ?? ?? ?? ?? ?? 8B ?? 68 ?? 85 ?? ?? 0F 48 ?? ?? 89 ?? 24
alloc(newmem,$1000,INJECT_BATT_HIT_MAX)
alloc(INJECT_BATT_HIT_MAXo, $7)
label(code)
label(return)
INJECT_BATT_HIT_MAXo:
readmem(INJECT_BATT_HIT_MAX, $7)
newmem:
code:
// mov r13d,[r9+60]
reassemble(INJECT_BATT_HIT_MAX)
// add r13d,r8d
reassemble(INJECT_BATT_HIT_MAX+4)
cmp dword ptr [r9+44], 0 // RNG
je short @F
cmp dword ptr [r9+78], 0 // max stun value
jne short @F
mov r13d, C8
//
@@:
jmp return
align 10 cc
INJECT_BATT_HIT_MAX:
jmp newmem
nop 2
return:
registersymbol(INJECT_BATT_HIT_MAX INJECT_BATT_HIT_MAXo)
[DISABLE]
INJECT_BATT_HIT_MAX:
readmem(INJECT_BATT_HIT_MAXo, $7)
unregistersymbol(INJECT_BATT_HIT_MAX INJECT_BATT_HIT_MAXo)
dealloc(newmem)
dealloc(INJECT_BATT_HIT_MAXo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E543A
sora_2nd.exe+E53FF: 48 3B D0 - cmp rdx,rax
sora_2nd.exe+E5402: 74 36 - je sora_2nd.exe+E543A
sora_2nd.exe+E5404: 83 3A 35 - cmp dword ptr [rdx],35
sora_2nd.exe+E5407: 74 0B - je sora_2nd.exe+E5414
sora_2nd.exe+E5409: 48 83 C2 48 - add rdx,48
sora_2nd.exe+E540D: 48 3B D0 - cmp rdx,rax
sora_2nd.exe+E5410: 75 F2 - jne sora_2nd.exe+E5404
sora_2nd.exe+E5412: EB 26 - jmp sora_2nd.exe+E543A
sora_2nd.exe+E5414: 48 8B 05 2D 73 B7 00 - mov rax,[sora_2nd.exe+C5C748]
sora_2nd.exe+E541B: 48 8B 88 C0 00 00 00 - mov rcx,[rax+000000C0]
sora_2nd.exe+E5422: 48 8B 41 08 - mov rax,[rcx+08]
sora_2nd.exe+E5426: 48 8B 40 30 - mov rax,[rax+30]
sora_2nd.exe+E542A: 48 8B 88 F8 00 00 00 - mov rcx,[rax+000000F8]
sora_2nd.exe+E5431: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E5434: 74 04 - je sora_2nd.exe+E543A
sora_2nd.exe+E5436: 44 8B 41 04 - mov r8d,[rcx+04]
// ---------- INJECTING HERE ----------
sora_2nd.exe+E543A: 45 8B 69 60 - mov r13d,[r9+60]
// ---------- DONE INJECTING ----------
sora_2nd.exe+E543E: 45 03 E8 - add r13d,r8d
sora_2nd.exe+E5441: 44 0F 48 EE - cmovs r13d,esi
sora_2nd.exe+E5445: 44 89 6C 24 48 - mov [rsp+48],r13d
sora_2nd.exe+E544A: 48 8B 5C 24 70 - mov rbx,[rsp+70]
sora_2nd.exe+E544F: 48 8B 03 - mov rax,[rbx]
sora_2nd.exe+E5452: 44 8B 60 64 - mov r12d,[rax+64]
sora_2nd.exe+E5456: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E5459: 44 0F 48 E6 - cmovs r12d,esi
sora_2nd.exe+E545D: 44 89 64 24 4C - mov [rsp+4C],r12d
sora_2nd.exe+E5462: 41 F6 C6 02 - test r14b,02
sora_2nd.exe+E5466: 75 0B - jne sora_2nd.exe+E5473
sora_2nd.exe+E5468: 41 80 7F 10 04 - cmp byte ptr [r15+10],04
sora_2nd.exe+E546D: 0F 85 A4 02 00 00 - jne sora_2nd.exe+E5717
sora_2nd.exe+E5473: 44 8B 60 68 - mov r12d,[rax+68]
sora_2nd.exe+E5477: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E547A: 44 0F 48 E6 - cmovs r12d,esi
}
275
"戦闘：回避率（%）設定 / Battle: set evade%"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_SET_EVADEP,$process,?? 8B ?? 64 ?? 85 ?? ?? 0F 48)
// raw AOB: 75 ?? EB ?? 48 8B 05 ?? ?? ?? ?? 48 8B 88 C0 00 00 00 48 8B 41 08 48 8B 40 30 48 8B 88 F8 00 00 00 48 85 C9 74 ?? 44 8B 41 04 E9 ?? ?? ?? ?? 66 90 44 0F 48 EE 44 89 6C 24 48 48 8B 5C 24 70 48 8B 03 44 8B 60 64 45 85 E4 44 0F 48 E6 44 89 64 24 4C 41 F6 C6 02 75 ?? 41 80 7F 10 04 0F 85 ?? ?? ?? ?? 44 8B 60 68 45 85 E4 44 0F 48 E6 44 89 64 24 4C 41 80 7F 10 04 0F 85 ?? ?? ?? ?? 4C 8B B3 A8 05 00 00 8B FE 49 8B 1E BA 01 00 00 00
// injection point AOB: ?? 8B ?? 64 ?? 85 ?? ?? 0F 48 ?? ?? 89 ?? 24 ?? ?? F6 ?? 02 75 ?? ?? 80 ?? 10 04 0F 85 ?? ?? ?? ?? ?? 8B ?? 68 ?? 85 ?? ?? 0F 48 ?? ?? 89 ?? 24 ?? ?? 80 ?? 10 04 0F 85 ?? ?? ?? ?? ?? 8B ?? A8 05 00 00 8B ?? ?? 8B ?? ?? 01 00 00 00
alloc(newmem,$1000,INJECT_SET_EVADEP)
alloc(INJECT_SET_EVADEPo, $7)
label(code)
label(return)
INJECT_SET_EVADEPo:
readmem(INJECT_SET_EVADEP, $7)
label(i_evade_target)
newmem:
code:
// mov r12d,[rax+64]
reassemble(INJECT_SET_EVADEP)
cmp dword ptr [rax+44], 0 // RNG
je short @F
cmp dword ptr [rax+78], 0 // max stun value
jne short @F
cmp r12d, [i_evade_target]
jae short @F
mov r12d, [i_evade_target]
@@:
// test r12d,r12d
reassemble(INJECT_SET_EVADEP+4)
jmp return
align 10 cc
i_evade_target:
dd #51
INJECT_SET_EVADEP:
jmp newmem
nop 2
return:
registersymbol(INJECT_SET_EVADEP INJECT_SET_EVADEPo)
registersymbol(i_evade_target)
[DISABLE]
INJECT_SET_EVADEP:
readmem(INJECT_SET_EVADEPo, $7)
unregistersymbol(INJECT_SET_EVADEP INJECT_SET_EVADEPo)
unregistersymbol(i_evade_target)
dealloc(newmem)
dealloc(INJECT_SET_EVADEPo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E5452
sora_2nd.exe+E5410: 75 F2 - jne sora_2nd.exe+E5404
sora_2nd.exe+E5412: EB 26 - jmp sora_2nd.exe+E543A
sora_2nd.exe+E5414: 48 8B 05 2D 73 B7 00 - mov rax,[sora_2nd.exe+C5C748]
sora_2nd.exe+E541B: 48 8B 88 C0 00 00 00 - mov rcx,[rax+000000C0]
sora_2nd.exe+E5422: 48 8B 41 08 - mov rax,[rcx+08]
sora_2nd.exe+E5426: 48 8B 40 30 - mov rax,[rax+30]
sora_2nd.exe+E542A: 48 8B 88 F8 00 00 00 - mov rcx,[rax+000000F8]
sora_2nd.exe+E5431: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E5434: 74 04 - je sora_2nd.exe+E543A
sora_2nd.exe+E5436: 44 8B 41 04 - mov r8d,[rcx+04]
sora_2nd.exe+E543A: 45 8B 69 60 - mov r13d,[r9+60]
sora_2nd.exe+E543E: 45 03 E8 - add r13d,r8d
sora_2nd.exe+E5441: 44 0F 48 EE - cmovs r13d,esi
sora_2nd.exe+E5445: 44 89 6C 24 48 - mov [rsp+48],r13d
sora_2nd.exe+E544A: 48 8B 5C 24 70 - mov rbx,[rsp+70]
sora_2nd.exe+E544F: 48 8B 03 - mov rax,[rbx]
// ---------- INJECTING HERE ----------
sora_2nd.exe+E5452: 44 8B 60 64 - mov r12d,[rax+64]
// ---------- DONE INJECTING ----------
sora_2nd.exe+E5456: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E5459: 44 0F 48 E6 - cmovs r12d,esi
sora_2nd.exe+E545D: 44 89 64 24 4C - mov [rsp+4C],r12d
sora_2nd.exe+E5462: 41 F6 C6 02 - test r14b,02
sora_2nd.exe+E5466: 75 0B - jne sora_2nd.exe+E5473
sora_2nd.exe+E5468: 41 80 7F 10 04 - cmp byte ptr [r15+10],04
sora_2nd.exe+E546D: 0F 85 A4 02 00 00 - jne sora_2nd.exe+E5717
sora_2nd.exe+E5473: 44 8B 60 68 - mov r12d,[rax+68]
sora_2nd.exe+E5477: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E547A: 44 0F 48 E6 - cmovs r12d,esi
sora_2nd.exe+E547E: 44 89 64 24 4C - mov [rsp+4C],r12d
sora_2nd.exe+E5483: 41 80 7F 10 04 - cmp byte ptr [r15+10],04
sora_2nd.exe+E5488: 0F 85 89 02 00 00 - jne sora_2nd.exe+E5717
sora_2nd.exe+E548E: 4C 8B B3 A8 05 00 00 - mov r14,[rbx+000005A8]
sora_2nd.exe+E5495: 8B FE - mov edi,esi
sora_2nd.exe+E5497: 49 8B 1E - mov rbx,[r14]
}
276
"target"
0
C08000
4 Bytes
i_evade_target
277
"戦闘：魔法回避率（%）設定 / Battle: set magic evade%"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_SET_M_EVADEP,$process,?? 8B ?? 68 ?? 85 ?? ?? 0F 48 ?? ?? 89)
// raw AOB: 74 ?? 44 8B 41 04 E9 ?? ?? ?? ?? 66 90 44 0F 48 EE 44 89 6C 24 48 48 8B 5C 24 70 48 8B 03 E9 ?? ?? ?? ?? 66 90 44 0F 48 E6 44 89 64 24 4C 41 F6 C6 02 75 ?? 41 80 7F 10 04 0F 85 ?? ?? ?? ?? 44 8B 60 68 45 85 E4 44 0F 48 E6 44 89 64 24 4C 41 80 7F 10 04 0F 85 ?? ?? ?? ?? 4C 8B B3 A8 05 00 00 8B FE 49 8B 1E BA 01 00 00 00 48 8B CB E8 ?? ?? ?? ?? BA 02 00 00 00 48 8B CB E8 ?? ?? ?? ?? 49 8B 1E 48 8B 8B 90 05 00 00 48 85 C9
// injection point AOB: ?? 8B ?? 68 ?? 85 ?? ?? 0F 48 ?? ?? 89 ?? 24 ?? ?? 80 ?? 10 04 0F 85 ?? ?? ?? ?? ?? 8B ?? A8 05 00 00 8B ?? ?? 8B ?? ?? 01 00 00 00 ?? 8B ?? E8 ?? ?? ?? ?? ?? 02 00 00 00 ?? 8B ?? E8 ?? ?? ?? ?? ?? 8B ?? ?? 8B ?? 90 05 00 00 ?? 85
alloc(newmem,$1000,INJECT_SET_M_EVADEP)
alloc(INJECT_SET_M_EVADEPo, $7)
label(code)
label(return)
INJECT_SET_M_EVADEPo:
readmem(INJECT_SET_M_EVADEP, $7)
label(i_m_evade_target)
newmem:
code:
// mov r12d,[rax+68]
reassemble(INJECT_SET_M_EVADEP)
cmp dword ptr [rax+44], 0 // RNG
je short @F
// AOBMaker was: cmp dword ptr [rsi+78], 0
cmp dword ptr [rax+78], 0 // max stun value
jne short @F
cmp r12d, [i_m_evade_target]
jae short @F
mov r12d, [i_m_evade_target]
@@:
// test r12d,r12d
reassemble(INJECT_SET_M_EVADEP+4)
jmp return
align 10 cc
i_m_evade_target:
dd #43
INJECT_SET_M_EVADEP:
jmp newmem
nop 2
return:
registersymbol(INJECT_SET_M_EVADEP INJECT_SET_M_EVADEPo)
registersymbol(i_m_evade_target)
[DISABLE]
INJECT_SET_M_EVADEP:
readmem(INJECT_SET_M_EVADEPo, $7)
unregistersymbol(INJECT_SET_M_EVADEP INJECT_SET_M_EVADEPo)
unregistersymbol(i_m_evade_target)
dealloc(newmem)
dealloc(INJECT_SET_M_EVADEPo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E5473
sora_2nd.exe+E5434: 74 04 - je sora_2nd.exe+E543A
sora_2nd.exe+E5436: 44 8B 41 04 - mov r8d,[rcx+04]
sora_2nd.exe+E543A: 45 8B 69 60 - mov r13d,[r9+60]
sora_2nd.exe+E543E: 45 03 E8 - add r13d,r8d
sora_2nd.exe+E5441: 44 0F 48 EE - cmovs r13d,esi
sora_2nd.exe+E5445: 44 89 6C 24 48 - mov [rsp+48],r13d
sora_2nd.exe+E544A: 48 8B 5C 24 70 - mov rbx,[rsp+70]
sora_2nd.exe+E544F: 48 8B 03 - mov rax,[rbx]
sora_2nd.exe+E5452: 44 8B 60 64 - mov r12d,[rax+64]
sora_2nd.exe+E5456: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E5459: 44 0F 48 E6 - cmovs r12d,esi
sora_2nd.exe+E545D: 44 89 64 24 4C - mov [rsp+4C],r12d
sora_2nd.exe+E5462: 41 F6 C6 02 - test r14b,02
sora_2nd.exe+E5466: 75 0B - jne sora_2nd.exe+E5473
sora_2nd.exe+E5468: 41 80 7F 10 04 - cmp byte ptr [r15+10],04
sora_2nd.exe+E546D: 0F 85 A4 02 00 00 - jne sora_2nd.exe+E5717
// ---------- INJECTING HERE ----------
sora_2nd.exe+E5473: 44 8B 60 68 - mov r12d,[rax+68]
// ---------- DONE INJECTING ----------
sora_2nd.exe+E5477: 45 85 E4 - test r12d,r12d
sora_2nd.exe+E547A: 44 0F 48 E6 - cmovs r12d,esi
sora_2nd.exe+E547E: 44 89 64 24 4C - mov [rsp+4C],r12d
sora_2nd.exe+E5483: 41 80 7F 10 04 - cmp byte ptr [r15+10],04
sora_2nd.exe+E5488: 0F 85 89 02 00 00 - jne sora_2nd.exe+E5717
sora_2nd.exe+E548E: 4C 8B B3 A8 05 00 00 - mov r14,[rbx+000005A8]
sora_2nd.exe+E5495: 8B FE - mov edi,esi
sora_2nd.exe+E5497: 49 8B 1E - mov rbx,[r14]
sora_2nd.exe+E549A: BA 01 00 00 00 - mov edx,00000001
sora_2nd.exe+E549F: 48 8B CB - mov rcx,rbx
sora_2nd.exe+E54A2: E8 D9 53 FF FF - call sora_2nd.exe+DA880
sora_2nd.exe+E54A7: BA 02 00 00 00 - mov edx,00000002
sora_2nd.exe+E54AC: 48 8B CB - mov rcx,rbx
sora_2nd.exe+E54AF: E8 CC 53 FF FF - call sora_2nd.exe+DA880
sora_2nd.exe+E54B4: 49 8B 1E - mov rbx,[r14]
sora_2nd.exe+E54B7: 48 8B 8B 90 05 00 00 - mov rcx,[rbx+00000590]
}
278
"target"
0
C08000
4 Bytes
i_m_evade_target
51
"戦闘：BP 常に最大 / Battle: fast BP"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_FAST_BREAK_GUAGE,$process,?? 0F 48 ?? 89 ?? 48 ?? 3B ?? 74 ?? C6 ?? 50 01 ?? 8B ?? 24)
// raw AOB: 48 8B 05 ?? ?? ?? ?? 48 8B 91 60 02 00 00 44 0F B6 80 0D 01 00 00 44 8B 4A 48 41 8D 0C 19 41 F6 C0 04 74 ?? B8 BC 02 00 00 EB ?? B8 58 02 00 00 41 F6 C0 02 75 ?? B8 F4 01 00 00 3B C8 0F 4C C1 85 C0 41 0F 48 C5 89 42 48 41 3B C1 74 ?? C6 42 50 01 48 8B 5C 24 60 48 83 C4 20 41 5D 41 5C 5F 5E 5D C3 CC CC CC CC CC
// injection point AOB: ?? 0F 48 ?? 89 ?? 48 ?? 3B ?? 74 ?? C6 ?? 50 01 ?? 8B ?? 24 ?? 48 83 C4 20 ?? ?? ?? ?? ?? ?? 5D C3 CC CC CC CC CC
alloc(newmem,$1000,INJECT_FAST_BREAK_GUAGE)
alloc(INJECT_FAST_BREAK_GUAGEo, $7)
label(code)
label(return)
INJECT_FAST_BREAK_GUAGEo:
readmem(INJECT_FAST_BREAK_GUAGE, $7)
label(i_base_bbp_addr)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: cmovs ecx,r13d
// new injection: cmovs eax,r13d
// register RCX -> RAX
// 2 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
code:
// cmovs eax,r13d
reassemble(INJECT_FAST_BREAK_GUAGE)
//
// AOBMaker was: cmp ecx, #500
cmp eax, #700
jae @F
// AOBMaker was: mov ecx, 500
mov eax, #700
@@:
// mov [rdx+48],eax
reassemble(INJECT_FAST_BREAK_GUAGE+4)
mov [i_base_bbp_addr], rdx
jmp return
align 10 cc
i_base_bbp_addr:
dq 0
INJECT_FAST_BREAK_GUAGE:
jmp newmem
nop 2
return:
registersymbol(INJECT_FAST_BREAK_GUAGE INJECT_FAST_BREAK_GUAGEo)
registersymbol(i_base_bbp_addr)
[DISABLE]
INJECT_FAST_BREAK_GUAGE:
readmem(INJECT_FAST_BREAK_GUAGEo, $7)
unregistersymbol(INJECT_FAST_BREAK_GUAGE INJECT_FAST_BREAK_GUAGEo)
dealloc(newmem)
dealloc(INJECT_FAST_BREAK_GUAGEo)
unregistersymbol(i_base_bbp_addr)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+DB34A
sora_2nd.exe+DB308: 48 8B 05 61 3E B8 00 - mov rax,[sora_2nd.exe+C5F170]
sora_2nd.exe+DB30F: 48 8B 91 60 02 00 00 - mov rdx,[rcx+00000260]
sora_2nd.exe+DB316: 44 0F B6 80 0D 01 00 00 - movzx r8d,byte ptr [rax+0000010D]
sora_2nd.exe+DB31E: 44 8B 4A 48 - mov r9d,[rdx+48]
sora_2nd.exe+DB322: 41 8D 0C 19 - lea ecx,[r9+rbx]
sora_2nd.exe+DB326: 41 F6 C0 04 - test r8b,04
sora_2nd.exe+DB32A: 74 07 - je sora_2nd.exe+DB333
sora_2nd.exe+DB32C: B8 BC 02 00 00 - mov eax,000002BC
sora_2nd.exe+DB331: EB 10 - jmp sora_2nd.exe+DB343
sora_2nd.exe+DB333: B8 58 02 00 00 - mov eax,00000258
sora_2nd.exe+DB338: 41 F6 C0 02 - test r8b,02
sora_2nd.exe+DB33C: 75 05 - jne sora_2nd.exe+DB343
sora_2nd.exe+DB33E: B8 F4 01 00 00 - mov eax,000001F4
sora_2nd.exe+DB343: 3B C8 - cmp ecx,eax
sora_2nd.exe+DB345: 0F 4C C1 - cmovl eax,ecx
sora_2nd.exe+DB348: 85 C0 - test eax,eax
// ---------- INJECTING HERE ----------
sora_2nd.exe+DB34A: 41 0F 48 C5 - cmovs eax,r13d
// ---------- DONE INJECTING ----------
sora_2nd.exe+DB34E: 89 42 48 - mov [rdx+48],eax
sora_2nd.exe+DB351: 41 3B C1 - cmp eax,r9d
sora_2nd.exe+DB354: 74 04 - je sora_2nd.exe+DB35A
sora_2nd.exe+DB356: C6 42 50 01 - mov byte ptr [rdx+50],01
sora_2nd.exe+DB35A: 48 8B 5C 24 60 - mov rbx,[rsp+60]
sora_2nd.exe+DB35F: 48 83 C4 20 - add rsp,20
sora_2nd.exe+DB363: 41 5D - pop r13
sora_2nd.exe+DB365: 41 5C - pop r12
sora_2nd.exe+DB367: 5F - pop rdi
sora_2nd.exe+DB368: 5E - pop rsi
sora_2nd.exe+DB369: 5D - pop rbp
sora_2nd.exe+DB36A: C3 - ret
sora_2nd.exe+DB36B: CC - int 3
sora_2nd.exe+DB36C: CC - int 3
sora_2nd.exe+DB36D: CC - int 3
sora_2nd.exe+DB36E: CC - int 3
}
52
"real BP value"
0
FF8080
4 Bytes
i_base_bbp_addr
48
53
"can use #"
0
FF8080
4 Bytes
i_base_bbp_addr
4C
54
"??"
0
FF8080
4 Bytes
i_base_bbp_addr
50
55
"戦闘終了時にBP全回復 / Restore break gauge after battle"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_RESTORE_BP_AFTER_BATTLE,$process,?? 8B ?? 60 02 00 00 8B ?? 48 89)
// raw AOB: 66 89 8C D7 70 42 11 00 49 8B 83 48 24 00 00 48 8B 0C D0 8B 81 68 03 00 00 89 84 D7 74 42 11 00 41 FF C0 45 3B 83 50 24 00 00 72 ?? 4C 8B 2D ?? ?? ?? ?? 49 83 BD 60 06 00 00 00 74 ?? 49 8B 83 50 2C 00 00 48 8B 88 68 02 00 00 8B 41 70 89 87 70 49 12 00 49 8B 83 50 2C 00 00 48 8B 88 60 02 00 00 8B 41 48 89 87 74 49 12 00 49 8B 83 B8 2C 00 00 8B 88 B0 00 00 00 89 8F 78 49 12 00 49 8B 83 B8 2C 00 00 8B 88 B4 00 00 00 89 8F 7C 49 12 00 48 8B 15 ?? ?? ?? ?? 48 83 C2 08 48 8D 8F 50 F9 1F 00 41 B8 00 50 00 00 E8 ?? ?? ?? ?? 48 8B 35 ?? ?? ?? ?? 44 89 B7 90 B6 20 00 8B 86 24 02 00 00
// injection point AOB: ?? 8B ?? 60 02 00 00 8B ?? 48 89 ?? 74 49 12 00 ?? 8B ?? B8 2C 00 00 8B ?? B0 00 00 00 89 ?? 78 49 12 00 ?? 8B ?? B8 2C 00 00 8B ?? B4 00 00 00 89 ?? 7C 49 12 00 ?? 8B ?? ?? ?? ?? ?? ?? 83 ?? 08 ?? 8D ?? 50 F9 1F 00 ?? ?? 00 50 00 00 E8 ?? ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 89 ?? 90 B6 20 00 8B ?? 24 02 00 00
alloc(newmem,$1000,INJECT_RESTORE_BP_AFTER_BATTLE)
alloc(INJECT_RESTORE_BP_AFTER_BATTLEo, $7)
label(code)
label(return)
INJECT_RESTORE_BP_AFTER_BATTLEo:
readmem(INJECT_RESTORE_BP_AFTER_BATTLE, $7)
newmem:
code:
// mov rcx,[rax+00000260]
reassemble(INJECT_RESTORE_BP_AFTER_BATTLE)
//
cmp dword ptr [rcx+48], #700
//
jmp return
align 10 cc
INJECT_RESTORE_BP_AFTER_BATTLE:
jmp newmem
nop 2
return:
registersymbol(INJECT_RESTORE_BP_AFTER_BATTLE INJECT_RESTORE_BP_AFTER_BATTLEo)
[DISABLE]
INJECT_RESTORE_BP_AFTER_BATTLE:
readmem(INJECT_RESTORE_BP_AFTER_BATTLEo, $7)
unregistersymbol(INJECT_RESTORE_BP_AFTER_BATTLE INJECT_RESTORE_BP_AFTER_BATTLEo)
dealloc(newmem)
dealloc(INJECT_RESTORE_BP_AFTER_BATTLEo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+43C7DD
sora_2nd.exe+43C782: 66 89 8C D7 70 42 11 00 - mov [rdi+rdx*8+00114270],cx
sora_2nd.exe+43C78A: 49 8B 83 48 24 00 00 - mov rax,[r11+00002448]
sora_2nd.exe+43C791: 48 8B 0C D0 - mov rcx,[rax+rdx*8]
sora_2nd.exe+43C795: 8B 81 68 03 00 00 - mov eax,[rcx+00000368]
sora_2nd.exe+43C79B: 89 84 D7 74 42 11 00 - mov [rdi+rdx*8+00114274],eax
sora_2nd.exe+43C7A2: 41 FF C0 - inc r8d
sora_2nd.exe+43C7A5: 45 3B 83 50 24 00 00 - cmp r8d,[r11+00002450]
sora_2nd.exe+43C7AC: 72 B2 - jb sora_2nd.exe+43C760
sora_2nd.exe+43C7AE: 4C 8B 2D 23 36 82 00 - mov r13,[sora_2nd.exe+C5FDD8]
sora_2nd.exe+43C7B5: 49 83 BD 60 06 00 00 00 - cmp qword ptr [r13+00000660],00
sora_2nd.exe+43C7BD: 74 2E - je sora_2nd.exe+43C7ED
sora_2nd.exe+43C7BF: 49 8B 83 50 2C 00 00 - mov rax,[r11+00002C50]
sora_2nd.exe+43C7C6: 48 8B 88 68 02 00 00 - mov rcx,[rax+00000268]
sora_2nd.exe+43C7CD: 8B 41 70 - mov eax,[rcx+70]
sora_2nd.exe+43C7D0: 89 87 70 49 12 00 - mov [rdi+00124970],eax
sora_2nd.exe+43C7D6: 49 8B 83 50 2C 00 00 - mov rax,[r11+00002C50]
// ---------- INJECTING HERE ----------
sora_2nd.exe+43C7DD: 48 8B 88 60 02 00 00 - mov rcx,[rax+00000260]
// ---------- DONE INJECTING ----------
sora_2nd.exe+43C7E4: 8B 41 48 - mov eax,[rcx+48]
sora_2nd.exe+43C7E7: 89 87 74 49 12 00 - mov [rdi+00124974],eax
sora_2nd.exe+43C7ED: 49 8B 83 B8 2C 00 00 - mov rax,[r11+00002CB8]
sora_2nd.exe+43C7F4: 8B 88 B0 00 00 00 - mov ecx,[rax+000000B0]
sora_2nd.exe+43C7FA: 89 8F 78 49 12 00 - mov [rdi+00124978],ecx
sora_2nd.exe+43C800: 49 8B 83 B8 2C 00 00 - mov rax,[r11+00002CB8]
sora_2nd.exe+43C807: 8B 88 B4 00 00 00 - mov ecx,[rax+000000B4]
sora_2nd.exe+43C80D: 89 8F 7C 49 12 00 - mov [rdi+0012497C],ecx
sora_2nd.exe+43C813: 48 8B 15 F6 35 82 00 - mov rdx,[sora_2nd.exe+C5FE10]
sora_2nd.exe+43C81A: 48 83 C2 08 - add rdx,08
sora_2nd.exe+43C81E: 48 8D 8F 50 F9 1F 00 - lea rcx,[rdi+001FF950]
sora_2nd.exe+43C825: 41 B8 00 50 00 00 - mov r8d,00005000
sora_2nd.exe+43C82B: E8 20 67 46 00 - call sora_2nd.exe+8A2F50
sora_2nd.exe+43C830: 48 8B 35 E9 FE 81 00 - mov rsi,[sora_2nd.exe+C5C720]
sora_2nd.exe+43C837: 44 89 B7 90 B6 20 00 - mov [rdi+0020B690],r14d
sora_2nd.exe+43C83E: 8B 86 24 02 00 00 - mov eax,[rsi+00000224]
}
56
"サポート経験値倍率設定 / Support XP multiplier"
Auto Assembler Script
{ Game :
Version:
Date : 2025-09-20
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SUPPORT_EXP_MULTI,sora_2nd.exe,03 D6 3B D7 0F 4C FA 85) // should be unique
alloc(newmem,$1000,INJECT_SUPPORT_EXP_MULTI)
label(code)
label(return vf_support_exp_multi)
newmem:
vmovss xmm14, [vf_support_exp_multi]
vcvtsi2ss xmm15, xmm15, esi
vmulss xmm15, xmm14, xmm15
vcvtss2si esi, xmm15
code:
add edx,esi
cmp edx,edi
cmovl edi,edx
jmp return
align 10 cc
vf_support_exp_multi:
dd (float)6.666666
INJECT_SUPPORT_EXP_MULTI:
jmp newmem
nop 2
return:
registersymbol(INJECT_SUPPORT_EXP_MULTI vf_support_exp_multi)
[DISABLE]
INJECT_SUPPORT_EXP_MULTI:
db 03 D6 3B D7 0F 4C FA
unregistersymbol(INJECT_SUPPORT_EXP_MULTI vf_support_exp_multi)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+F008C
sora_2nd.exe+F004E: 8B C6 - mov eax,esi
sora_2nd.exe+F0050: C1 E8 1F - shr eax,1F
sora_2nd.exe+F0053: 03 F0 - add esi,eax
sora_2nd.exe+F0055: 83 FE 01 - cmp esi,01
sora_2nd.exe+F0058: B8 01 00 00 00 - mov eax,00000001
sora_2nd.exe+F005D: 0F 4C F0 - cmovl esi,eax
sora_2nd.exe+F0060: 49 8B 40 38 - mov rax,[r8+38]
sora_2nd.exe+F0064: 41 8B 55 00 - mov edx,[r13+00]
sora_2nd.exe+F0068: 48 8B 48 08 - mov rcx,[rax+08]
sora_2nd.exe+F006C: E8 EF 86 00 00 - call sora_2nd.exe+F8760
sora_2nd.exe+F0071: 8B F8 - mov edi,eax
sora_2nd.exe+F0073: 41 8B 95 94 02 00 00 - mov edx,[r13+00000294]
sora_2nd.exe+F007A: 41 8B 4D 00 - mov ecx,[r13+00]
sora_2nd.exe+F007E: E8 3D C5 00 00 - call sora_2nd.exe+FC5C0
sora_2nd.exe+F0083: 8B D8 - mov ebx,eax
sora_2nd.exe+F0085: 41 8B 95 94 02 00 00 - mov edx,[r13+00000294]
// ---------- INJECTING HERE ----------
sora_2nd.exe+F008C: 03 D6 - add edx,esi
// ---------- DONE INJECTING ----------
sora_2nd.exe+F008E: 3B D7 - cmp edx,edi
sora_2nd.exe+F0090: 0F 4C FA - cmovl edi,edx
sora_2nd.exe+F0093: 85 FF - test edi,edi
sora_2nd.exe+F0095: B8 00 00 00 00 - mov eax,00000000
sora_2nd.exe+F009A: 0F 48 F8 - cmovs edi,eax
sora_2nd.exe+F009D: 41 89 BD 94 02 00 00 - mov [r13+00000294],edi
sora_2nd.exe+F00A4: 45 8B 45 00 - mov r8d,[r13+00]
sora_2nd.exe+F00A8: BA 3A 00 00 00 - mov edx,0000003A
sora_2nd.exe+F00AD: 48 8B 0D 64 C6 B6 00 - mov rcx,[sora_2nd.exe+C5C718]
sora_2nd.exe+F00B4: E8 07 38 F3 FF - call sora_2nd.exe+238C0
sora_2nd.exe+F00B9: 41 8B 95 94 02 00 00 - mov edx,[r13+00000294]
sora_2nd.exe+F00C0: 41 8B 4D 00 - mov ecx,[r13+00]
sora_2nd.exe+F00C4: E8 F7 C4 00 00 - call sora_2nd.exe+FC5C0
sora_2nd.exe+F00C9: 3B C3 - cmp eax,ebx
sora_2nd.exe+F00CB: 76 45 - jna sora_2nd.exe+F0112
sora_2nd.exe+F00CD: 45 84 FF - test r15b,r15b
}
57
"multiplier"
0
C08000
Float
vf_support_exp_multi
66
"経験値倍率設定 / XP multiplier"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/22
}
[ENABLE]
aobscanmodule(INJECT_XP_MULTI,$process,?? 03 ?? ?? 8B ?? ?? 8B ?? 04 3B)
// raw AOB: 74 ?? 48 8B 4F 28 48 8B 50 40 48 8B 49 08 E8 ?? ?? ?? ?? 48 85 C0 74 ?? 80 78 10 01 44 8B C6 74 ?? 41 B8 C8 00 00 00 41 8B D6 48 8B CB E8 ?? ?? ?? ?? 8B 53 08 8B E8 41 03 D4 49 8B CF 44 8B 63 04 3B D0 0F 4C EA 45 33 ED 85 ED 41 8B D6 41 0F 48 ED E8 ?? ?? ?? ?? 48 85 C0 74 ?? 48 8B 4F 28 48 8B 50 40 48 8B 49 08 E8 ?? ?? ?? ?? 48 85 C0 74
// injection point AOB: ?? 03 ?? ?? 8B ?? ?? 8B ?? 04 3B ?? 0F 4C ?? ?? 33 ?? 85 ?? ?? 8B ?? ?? 0F 48 ?? E8 ?? ?? ?? ?? ?? 85 ?? 74 ?? ?? 8B ?? 28 ?? 8B ?? 40 ?? 8B ?? 08 E8 ?? ?? ?? ?? ?? 85 ?? 74
alloc(newmem,$1000,INJECT_XP_MULTI)
alloc(INJECT_XP_MULTIo, $6)
label(code)
label(return)
label(vf_mult_354914)
INJECT_XP_MULTIo:
readmem(INJECT_XP_MULTI, $6)
newmem:
// **** Begin Auto script: Multiplier
// value=1.66666, rule=R2_RegReg, template=P1_IntToFloat, NegDeltaCheck
test r12d, r12d
jle skip_mult_354914
// Multiplier: delta in r12d
vmovss xmm15, [vf_mult_354914]
vcvtsi2ss xmm14, xmm14, r12d
vmulss xmm14, xmm14, xmm15
vcvtss2si r12d, xmm14
skip_mult_354914:
// **** End Auto script: Multiplier
code:
// add edx,r12d
reassemble(INJECT_XP_MULTI)
// mov rcx,r15
reassemble(INJECT_XP_MULTI+3)
jmp return
align 10 cc
vf_mult_354914:
dd (float)1.66666
INJECT_XP_MULTI:
jmp newmem
nop 1
return:
registersymbol(INJECT_XP_MULTI INJECT_XP_MULTIo vf_mult_354914)
[DISABLE]
INJECT_XP_MULTI:
readmem(INJECT_XP_MULTIo, $6)
unregistersymbol(INJECT_XP_MULTI INJECT_XP_MULTIo vf_mult_354914)
dealloc(newmem)
dealloc(INJECT_XP_MULTIo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+F9A7E
sora_2nd.exe+F9A47: 74 1F - je sora_2nd.exe+F9A68
sora_2nd.exe+F9A49: 48 8B 4F 28 - mov rcx,[rdi+28]
sora_2nd.exe+F9A4D: 48 8B 50 40 - mov rdx,[rax+40]
sora_2nd.exe+F9A51: 48 8B 49 08 - mov rcx,[rcx+08]
sora_2nd.exe+F9A55: E8 16 EF 15 00 - call sora_2nd.exe+258970
sora_2nd.exe+F9A5A: 48 85 C0 - test rax,rax
sora_2nd.exe+F9A5D: 74 09 - je sora_2nd.exe+F9A68
sora_2nd.exe+F9A5F: 80 78 10 01 - cmp byte ptr [rax+10],01
sora_2nd.exe+F9A63: 44 8B C6 - mov r8d,esi
sora_2nd.exe+F9A66: 74 06 - je sora_2nd.exe+F9A6E
sora_2nd.exe+F9A68: 41 B8 C8 00 00 00 - mov r8d,000000C8
sora_2nd.exe+F9A6E: 41 8B D6 - mov edx,r14d
sora_2nd.exe+F9A71: 48 8B CB - mov rcx,rbx
sora_2nd.exe+F9A74: E8 B7 00 00 00 - call sora_2nd.exe+F9B30
sora_2nd.exe+F9A79: 8B 53 08 - mov edx,[rbx+08]
sora_2nd.exe+F9A7C: 8B E8 - mov ebp,eax
// ---------- INJECTING HERE ----------
sora_2nd.exe+F9A7E: 41 03 D4 - add edx,r12d
// ---------- DONE INJECTING ----------
sora_2nd.exe+F9A81: 49 8B CF - mov rcx,r15
sora_2nd.exe+F9A84: 44 8B 63 04 - mov r12d,[rbx+04]
sora_2nd.exe+F9A88: 3B D0 - cmp edx,eax
sora_2nd.exe+F9A8A: 0F 4C EA - cmovl ebp,edx
sora_2nd.exe+F9A8D: 45 33 ED - xor r13d,r13d
sora_2nd.exe+F9A90: 85 ED - test ebp,ebp
sora_2nd.exe+F9A92: 41 8B D6 - mov edx,r14d
sora_2nd.exe+F9A95: 41 0F 48 ED - cmovs ebp,r13d
sora_2nd.exe+F9A99: E8 E2 BD 15 00 - call sora_2nd.exe+255880
sora_2nd.exe+F9A9E: 48 85 C0 - test rax,rax
sora_2nd.exe+F9AA1: 74 1C - je sora_2nd.exe+F9ABF
sora_2nd.exe+F9AA3: 48 8B 4F 28 - mov rcx,[rdi+28]
sora_2nd.exe+F9AA7: 48 8B 50 40 - mov rdx,[rax+40]
sora_2nd.exe+F9AAB: 48 8B 49 08 - mov rcx,[rcx+08]
sora_2nd.exe+F9AAF: E8 BC EE 15 00 - call sora_2nd.exe+258970
sora_2nd.exe+F9AB4: 48 85 C0 - test rax,rax
}
69
"multiplier"
0
C08000
Float
vf_mult_354914
58
"高速オーバードライブ / Fast overdrive (OD)"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_FAST_OVERDRIVE,$process,03 ?? 3B ?? 0F 4C ?? ?? 33 ?? 85 ?? 0F)
// raw AOB: 48 8B 8A 98 05 00 00 48 8B 81 08 09 00 00 8B 89 10 09 00 00 4C 8D 04 C9 4A 8D 0C C0 48 3B C1 74 ?? 0F 1F 40 00 83 38 35 74 ?? 48 83 C0 48 48 3B C1 75 ?? 48 8B 12 B9 64 00 00 00 0F B6 82 93 02 00 00 03 C7 3B C1 0F 4C C8 45 33 C0 85 C9 0F B6 C1 41 0F 48 C0 88 82 93 02 00 00 48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC CC CC CC CC CC
// injection point AOB: 03 ?? 3B ?? 0F 4C ?? ?? 33 ?? 85 ?? 0F B6 ?? ?? 0F 48 ?? 88 ?? 93 02 00 00 ?? 8B ?? 24 ?? 48 83 C4 20 ?? C3 CC CC CC CC CC CC CC
alloc(newmem,$1000,INJECT_FAST_OVERDRIVE)
alloc(INJECT_FAST_OVERDRIVEo, $7)
label(code)
label(return)
INJECT_FAST_OVERDRIVEo:
readmem(INJECT_FAST_OVERDRIVE, $7)
label(vf_od_multi is_od_multi i_base_od_addr)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: add ecx,edi
// new injection: add eax,edi
// register RCX -> RAX
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
cmp dword ptr [is_od_multi], 1
jne short @F
vmovss xmm14, [vf_od_multi]
vcvtsi2ss xmm15, xmm15, edi
vmulss xmm15, xmm14, xmm15
vcvtss2si edi, xmm15
jmp short endp
@@:
mov edi, 64
endp:
mov [i_base_od_addr], rdx
code:
// add eax,edi
reassemble(INJECT_FAST_OVERDRIVE)
// cmp eax,ecx
reassemble(INJECT_FAST_OVERDRIVE+2)
// cmovl ecx,eax
reassemble(INJECT_FAST_OVERDRIVE+4)
jmp return
align 10 cc
i_base_od_addr:
dq 0
vf_od_multi:
dd (float)3.3333333
is_od_multi:
dd 0
INJECT_FAST_OVERDRIVE:
jmp newmem
nop 2
return:
registersymbol(INJECT_FAST_OVERDRIVE INJECT_FAST_OVERDRIVEo)
registersymbol(vf_od_multi is_od_multi i_base_od_addr)
[DISABLE]
INJECT_FAST_OVERDRIVE:
readmem(INJECT_FAST_OVERDRIVEo, $7)
unregistersymbol(INJECT_FAST_OVERDRIVE INJECT_FAST_OVERDRIVEo)
dealloc(newmem)
dealloc(INJECT_FAST_OVERDRIVEo)
unregistersymbol(vf_od_multi is_od_multi i_base_od_addr)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E96DD
sora_2nd.exe+E969B: 48 8B 8A 98 05 00 00 - mov rcx,[rdx+00000598]
sora_2nd.exe+E96A2: 48 8B 81 08 09 00 00 - mov rax,[rcx+00000908]
sora_2nd.exe+E96A9: 8B 89 10 09 00 00 - mov ecx,[rcx+00000910]
sora_2nd.exe+E96AF: 4C 8D 04 C9 - lea r8,[rcx+rcx*8]
sora_2nd.exe+E96B3: 4A 8D 0C C0 - lea rcx,[rax+r8*8]
sora_2nd.exe+E96B7: 48 3B C1 - cmp rax,rcx
sora_2nd.exe+E96BA: 74 12 - je sora_2nd.exe+E96CE
sora_2nd.exe+E96BC: 0F 1F 40 00 - nop dword ptr [rax+00]
sora_2nd.exe+E96C0: 83 38 35 - cmp dword ptr [rax],35
sora_2nd.exe+E96C3: 74 31 - je sora_2nd.exe+E96F6
sora_2nd.exe+E96C5: 48 83 C0 48 - add rax,48
sora_2nd.exe+E96C9: 48 3B C1 - cmp rax,rcx
sora_2nd.exe+E96CC: 75 F2 - jne sora_2nd.exe+E96C0
sora_2nd.exe+E96CE: 48 8B 12 - mov rdx,[rdx]
sora_2nd.exe+E96D1: B9 64 00 00 00 - mov ecx,00000064
sora_2nd.exe+E96D6: 0F B6 82 93 02 00 00 - movzx eax,byte ptr [rdx+00000293]
// ---------- INJECTING HERE ----------
sora_2nd.exe+E96DD: 03 C7 - add eax,edi
// ---------- DONE INJECTING ----------
sora_2nd.exe+E96DF: 3B C1 - cmp eax,ecx
sora_2nd.exe+E96E1: 0F 4C C8 - cmovl ecx,eax
sora_2nd.exe+E96E4: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+E96E7: 85 C9 - test ecx,ecx
sora_2nd.exe+E96E9: 0F B6 C1 - movzx eax,cl
sora_2nd.exe+E96EC: 41 0F 48 C0 - cmovs eax,r8d
sora_2nd.exe+E96F0: 88 82 93 02 00 00 - mov [rdx+00000293],al
sora_2nd.exe+E96F6: 48 8B 5C 24 30 - mov rbx,[rsp+30]
sora_2nd.exe+E96FB: 48 83 C4 20 - add rsp,20
sora_2nd.exe+E96FF: 5F - pop rdi
sora_2nd.exe+E9700: C3 - ret
sora_2nd.exe+E9701: CC - int 3
sora_2nd.exe+E9702: CC - int 3
sora_2nd.exe+E9703: CC - int 3
sora_2nd.exe+E9704: CC - int 3
sora_2nd.exe+E9705: CC - int 3
}
59
"倍率切替 / use multiplier"
Auto Assembler Script
[ENABLE]
is_od_multi:
dd 1
[DISABLE]
is_od_multi:
dd 0
60
"multiplier"
0
C08000
Float
vf_od_multi
61
"Last OD"
0
FF8080
Byte
i_base_od_addr
293
62
"オーバードライブゲージ減らない / inf. OD gauge"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_OVERDRIVE_NO_DEC,$process,C6 ?? 93 02 00 00 00)
// raw AOB: 48 8B 8B 90 05 00 00 48 85 C9 74 ?? 48 8B 01 FF 50 10 3D 3A 1E B5 B6 75 ?? 48 8B AB 90 05 00 00 48 8B 95 88 1D 00 00 48 85 D2 74 ?? 48 8B 0D ?? ?? ?? ?? 45 33 C0 E8 ?? ?? ?? ?? 49 8B 06 48 8B 08 C6 81 93 02 00 00 00 49 8B 1E 48 8B 8B 90 05 00 00 48 85 C9 74 ?? 48 8B 01 FF 50 10 3D 3A 1E B5 B6 75 ?? 48 8B 93 90 05 00 00 48 85 D2 74 ?? 48 8B 8A 88 1D 00 00 48 85 C9 74 ?? 8B 81 7C 0E 00 00 C1 E8 07
// injection point AOB: C6 ?? 93 02 00 00 00 ?? 8B ?? ?? 8B ?? 90 05 00 00 ?? 85 ?? 74 ?? ?? 8B ?? FF ?? 10 3D 3A 1E B5 B6 75 ?? ?? 8B ?? 90 05 00 00 ?? 85 ?? 74 ?? ?? 8B ?? 88 1D 00 00 ?? 85 ?? 74 ?? 8B ?? 7C 0E 00 00 C1 ?? 07
INJECT_OVERDRIVE_NO_DEC+6:
db 64
registersymbol(INJECT_OVERDRIVE_NO_DEC)
[DISABLE]
INJECT_OVERDRIVE_NO_DEC+6:
db 00
unregistersymbol(INJECT_OVERDRIVE_NO_DEC)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+E8DF5
sora_2nd.exe+E8DB4: 48 8B 8B 90 05 00 00 - mov rcx,[rbx+00000590]
sora_2nd.exe+E8DBB: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E8DBE: 74 14 - je sora_2nd.exe+E8DD4
sora_2nd.exe+E8DC0: 48 8B 01 - mov rax,[rcx]
sora_2nd.exe+E8DC3: FF 50 10 - call qword ptr [rax+10]
sora_2nd.exe+E8DC6: 3D 3A 1E B5 B6 - cmp eax,B6B51E3A
sora_2nd.exe+E8DCB: 75 07 - jne sora_2nd.exe+E8DD4
sora_2nd.exe+E8DCD: 48 8B AB 90 05 00 00 - mov rbp,[rbx+00000590]
sora_2nd.exe+E8DD4: 48 8B 95 88 1D 00 00 - mov rdx,[rbp+00001D88]
sora_2nd.exe+E8DDB: 48 85 D2 - test rdx,rdx
sora_2nd.exe+E8DDE: 74 0F - je sora_2nd.exe+E8DEF
sora_2nd.exe+E8DE0: 48 8B 0D 51 39 B7 00 - mov rcx,[sora_2nd.exe+C5C738]
sora_2nd.exe+E8DE7: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+E8DEA: E8 F1 7E FE FF - call sora_2nd.exe+D0CE0
sora_2nd.exe+E8DEF: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+E8DF2: 48 8B 08 - mov rcx,[rax]
// ---------- INJECTING HERE ----------
sora_2nd.exe+E8DF5: C6 81 93 02 00 00 00 - mov byte ptr [rcx+00000293],00
// ---------- DONE INJECTING ----------
sora_2nd.exe+E8DFC: 49 8B 1E - mov rbx,[r14]
sora_2nd.exe+E8DFF: 48 8B 8B 90 05 00 00 - mov rcx,[rbx+00000590]
sora_2nd.exe+E8E06: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E8E09: 74 75 - je sora_2nd.exe+E8E80
sora_2nd.exe+E8E0B: 48 8B 01 - mov rax,[rcx]
sora_2nd.exe+E8E0E: FF 50 10 - call qword ptr [rax+10]
sora_2nd.exe+E8E11: 3D 3A 1E B5 B6 - cmp eax,B6B51E3A
sora_2nd.exe+E8E16: 75 68 - jne sora_2nd.exe+E8E80
sora_2nd.exe+E8E18: 48 8B 93 90 05 00 00 - mov rdx,[rbx+00000590]
sora_2nd.exe+E8E1F: 48 85 D2 - test rdx,rdx
sora_2nd.exe+E8E22: 74 5C - je sora_2nd.exe+E8E80
sora_2nd.exe+E8E24: 48 8B 8A 88 1D 00 00 - mov rcx,[rdx+00001D88]
sora_2nd.exe+E8E2B: 48 85 C9 - test rcx,rcx
sora_2nd.exe+E8E2E: 74 22 - je sora_2nd.exe+E8E52
sora_2nd.exe+E8E30: 8B 81 7C 0E 00 00 - mov eax,[rcx+00000E7C]
sora_2nd.exe+E8E36: C1 E8 07 - shr eax,07
}
63
"フィールドチャージゲージ倍率 / Field charge gauge multiplier"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_FAST_FIELD_CHARGE,$process,?? 8D ?? 10 ?? C8 00 00 00 3B)
// raw AOB: 89 44 9E 28 F3 44 0F 58 5E 68 F3 44 0F 11 5E 68 48 8B 4D 80 48 33 CC E8 ?? ?? ?? ?? 44 0F 28 9C 24 C0 00 00 00 48 81 C4 20 01 00 00 5E 5B 5D C3 40 53 48 83 EC 20 44 8B 41 70 48 8B D9 41 8D 04 10 BA C8 00 00 00 3B C2 0F 4C D0 33 C9 85 D2 0F 48 D1 89 53 70 8B 43 7C 89 43 74 89 53 78 48 C7 83 80 00 00 00 CD CC 4C 3E C7 83 88 00 00 00 02 00 00 00 44 39 43 70 74 ?? 4C 8B 4B 60 48 89 7C 24 30 4D 85 C9
// injection point AOB: ?? 8D ?? 10 ?? C8 00 00 00 3B ?? 0F 4C ?? 33 ?? 85 ?? 0F 48 ?? 89 ?? 70 8B ?? 7C 89 ?? 74 89 ?? 78 ?? C7 ?? 80 00 00 00 CD CC 4C 3E C7 ?? 88 00 00 00 02 00 00 00 ?? 39 ?? 70 74 ?? ?? 8B ?? 60 ?? 89 ?? 24 ?? ?? 85
alloc(newmem,$1000,INJECT_FAST_FIELD_CHARGE)
alloc(INJECT_FAST_FIELD_CHARGEo, $9)
label(code)
label(return)
label(vf_field_charge_multi)
INJECT_FAST_FIELD_CHARGEo:
readmem(INJECT_FAST_FIELD_CHARGE, $9)
newmem:
cmp edx, 0
jle short code
vcvtsi2ss xmm15, xmm15, edx
vmovss xmm14, [vf_field_charge_multi]
vmulss xmm14, xmm14, xmm15
vcvtss2si edx, xmm14
code:
// lea eax,[r8+rdx]
reassemble(INJECT_FAST_FIELD_CHARGE)
// mov edx,000000C8
reassemble(INJECT_FAST_FIELD_CHARGE+4)
jmp return
align 10 cc
vf_field_charge_multi:
dd (float)3
INJECT_FAST_FIELD_CHARGE:
jmp newmem
nop 4
return:
registersymbol(INJECT_FAST_FIELD_CHARGE INJECT_FAST_FIELD_CHARGEo)
registersymbol(vf_field_charge_multi)
[DISABLE]
INJECT_FAST_FIELD_CHARGE:
readmem(INJECT_FAST_FIELD_CHARGEo, $9)
unregistersymbol(INJECT_FAST_FIELD_CHARGE INJECT_FAST_FIELD_CHARGEo)
unregistersymbol(vf_field_charge_multi)
dealloc(newmem)
dealloc(INJECT_FAST_FIELD_CHARGEo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+7DC0D
sora_2nd.exe+7DBD0: 89 44 9E 28 - mov [rsi+rbx*4+28],eax
sora_2nd.exe+7DBD4: F3 44 0F 58 5E 68 - addss xmm11,[rsi+68]
sora_2nd.exe+7DBDA: F3 44 0F 11 5E 68 - movss [rsi+68],xmm11
sora_2nd.exe+7DBE0: 48 8B 4D 80 - mov rcx,[rbp-80]
sora_2nd.exe+7DBE4: 48 33 CC - xor rcx,rsp
sora_2nd.exe+7DBE7: E8 F4 B3 74 00 - call sora_2nd.exe+7C8FE0
sora_2nd.exe+7DBEC: 44 0F 28 9C 24 C0 00 00 00 - movaps xmm11,[rsp+000000C0]
sora_2nd.exe+7DBF5: 48 81 C4 20 01 00 00 - add rsp,00000120
sora_2nd.exe+7DBFC: 5E - pop rsi
sora_2nd.exe+7DBFD: 5B - pop rbx
sora_2nd.exe+7DBFE: 5D - pop rbp
sora_2nd.exe+7DBFF: C3 - ret
sora_2nd.exe+7DC00: 40 53 - push rbx
sora_2nd.exe+7DC02: 48 83 EC 20 - sub rsp,20
sora_2nd.exe+7DC06: 44 8B 41 70 - mov r8d,[rcx+70]
sora_2nd.exe+7DC0A: 48 8B D9 - mov rbx,rcx
// ---------- INJECTING HERE ----------
sora_2nd.exe+7DC0D: 41 8D 04 10 - lea eax,[r8+rdx]
// ---------- DONE INJECTING ----------
sora_2nd.exe+7DC11: BA C8 00 00 00 - mov edx,000000C8
sora_2nd.exe+7DC16: 3B C2 - cmp eax,edx
sora_2nd.exe+7DC18: 0F 4C D0 - cmovl edx,eax
sora_2nd.exe+7DC1B: 33 C9 - xor ecx,ecx
sora_2nd.exe+7DC1D: 85 D2 - test edx,edx
sora_2nd.exe+7DC1F: 0F 48 D1 - cmovs edx,ecx
sora_2nd.exe+7DC22: 89 53 70 - mov [rbx+70],edx
sora_2nd.exe+7DC25: 8B 43 7C - mov eax,[rbx+7C]
sora_2nd.exe+7DC28: 89 43 74 - mov [rbx+74],eax
sora_2nd.exe+7DC2B: 89 53 78 - mov [rbx+78],edx
sora_2nd.exe+7DC2E: 48 C7 83 80 00 00 00 CD CC 4C 3E - mov qword ptr [rbx+00000080],3E4CCCCD
sora_2nd.exe+7DC39: C7 83 88 00 00 00 02 00 00 00 - mov [rbx+00000088],00000002
sora_2nd.exe+7DC43: 44 39 43 70 - cmp [rbx+70],r8d
sora_2nd.exe+7DC47: 74 3E - je sora_2nd.exe+7DC87
sora_2nd.exe+7DC49: 4C 8B 4B 60 - mov r9,[rbx+60]
sora_2nd.exe+7DC4D: 48 89 7C 24 30 - mov [rsp+30],rdi
}
64
"multiplier"
0
C08000
Float
vf_field_charge_multi
65
"フィールドチャージゲージ無限 / Field charge: inf charge use"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_CHARGE_NO_DEC,$process,83 ?? 70 64 7C ?? E8 ?? ?? ?? ?? 84 ?? 75)
// raw AOB: 89 41 04 8B 41 28 89 41 08 C7 41 10 00 00 80 3F C7 41 14 00 00 80 3F C7 41 18 00 00 80 3F 48 C7 41 30 CD CC CC 3D 89 51 38 48 8B 0D ?? ?? ?? ?? 80 B9 30 2D 00 00 00 75 ?? 48 8B 05 ?? ?? ?? ?? F6 80 05 01 00 00 04 75 ?? 48 8B 81 50 2C 00 00 48 8B 88 68 02 00 00 83 79 70 64 7C ?? E8 ?? ?? ?? ?? 84 C0 75 ?? 4C 8B 8B 20 06 00 00 4D 85 C9 74 ?? 48 63 83 14 06 00 00 41 B8 01 00 00 00 48 8B 8B C8 05 00 00 48 83 C0 02 48 8D 14 40 8B 94 93 C8 05 00 00 41 FF D1 48 63 83 14 06 00 00 48 8D 0C 40 C7 84 8B E4 05 00 00 01 00 00 00
// injection point AOB: 83 ?? 70 64 7C ?? E8 ?? ?? ?? ?? 84 ?? 75 ?? ?? 8B ?? 20 06 00 00 ?? 85 ?? 74 ?? ?? 63 ?? 14 06 00 00 ?? ?? 01 00 00 00 ?? 8B ?? C8 05 00 00 ?? 83 ?? 02 ?? 8D ?? 40 8B ?? 93 C8 05 00 00 ?? FF ?? ?? 63 ?? 14 06 00 00 ?? 8D ?? 40 C7 ?? ?? E4 05 00 00 01 00 00 00
alloc(newmem,$1000,INJECT_CHARGE_NO_DEC)
alloc(INJECT_CHARGE_NO_DECo, $6)
label(code)
label(return)
INJECT_CHARGE_NO_DECo:
readmem(INJECT_CHARGE_NO_DEC, $6)
newmem:
cmp dword ptr [rcx+70],C8
jae short code
mov dword ptr [rcx+70],C8
code:
// cmp dword ptr [rcx+70],64
reassemble(INJECT_CHARGE_NO_DEC)
// jl sora_2nd.exe+91B39
reassemble(INJECT_CHARGE_NO_DEC+4)
jmp return
align 10 cc
INJECT_CHARGE_NO_DEC:
jmp newmem
nop 1
return:
registersymbol(INJECT_CHARGE_NO_DEC INJECT_CHARGE_NO_DECo)
[DISABLE]
INJECT_CHARGE_NO_DEC:
readmem(INJECT_CHARGE_NO_DECo, $6)
unregistersymbol(INJECT_CHARGE_NO_DEC INJECT_CHARGE_NO_DECo)
dealloc(newmem)
dealloc(INJECT_CHARGE_NO_DECo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+91A4A
sora_2nd.exe+919F3: 89 41 04 - mov [rcx+04],eax
sora_2nd.exe+919F6: 8B 41 28 - mov eax,[rcx+28]
sora_2nd.exe+919F9: 89 41 08 - mov [rcx+08],eax
sora_2nd.exe+919FC: C7 41 10 00 00 80 3F - mov [rcx+10],3F800000
sora_2nd.exe+91A03: C7 41 14 00 00 80 3F - mov [rcx+14],3F800000
sora_2nd.exe+91A0A: C7 41 18 00 00 80 3F - mov [rcx+18],3F800000
sora_2nd.exe+91A11: 48 C7 41 30 CD CC CC 3D - mov qword ptr [rcx+30],3DCCCCCD
sora_2nd.exe+91A19: 89 51 38 - mov [rcx+38],edx
sora_2nd.exe+91A1C: 48 8B 0D 15 AD BC 00 - mov rcx,[sora_2nd.exe+C5C738]
sora_2nd.exe+91A23: 80 B9 30 2D 00 00 00 - cmp byte ptr [rcx+00002D30],00
sora_2nd.exe+91A2A: 75 75 - jne sora_2nd.exe+91AA1
sora_2nd.exe+91A2C: 48 8B 05 F5 E3 BC 00 - mov rax,[sora_2nd.exe+C5FE28]
sora_2nd.exe+91A33: F6 80 05 01 00 00 04 - test byte ptr [rax+00000105],04
sora_2nd.exe+91A3A: 75 1D - jne sora_2nd.exe+91A59
sora_2nd.exe+91A3C: 48 8B 81 50 2C 00 00 - mov rax,[rcx+00002C50]
sora_2nd.exe+91A43: 48 8B 88 68 02 00 00 - mov rcx,[rax+00000268]
// ---------- INJECTING HERE ----------
sora_2nd.exe+91A4A: 83 79 70 64 - cmp dword ptr [rcx+70],64
// ---------- DONE INJECTING ----------
sora_2nd.exe+91A4E: 7C 09 - jl sora_2nd.exe+91A59
sora_2nd.exe+91A50: E8 BB 01 00 00 - call sora_2nd.exe+91C10
sora_2nd.exe+91A55: 84 C0 - test al,al
sora_2nd.exe+91A57: 75 48 - jne sora_2nd.exe+91AA1
sora_2nd.exe+91A59: 4C 8B 8B 20 06 00 00 - mov r9,[rbx+00000620]
sora_2nd.exe+91A60: 4D 85 C9 - test r9,r9
sora_2nd.exe+91A63: 74 26 - je sora_2nd.exe+91A8B
sora_2nd.exe+91A65: 48 63 83 14 06 00 00 - movsxd rax,dword ptr [rbx+00000614]
sora_2nd.exe+91A6C: 41 B8 01 00 00 00 - mov r8d,00000001
sora_2nd.exe+91A72: 48 8B 8B C8 05 00 00 - mov rcx,[rbx+000005C8]
sora_2nd.exe+91A79: 48 83 C0 02 - add rax,02
sora_2nd.exe+91A7D: 48 8D 14 40 - lea rdx,[rax+rax*2]
sora_2nd.exe+91A81: 8B 94 93 C8 05 00 00 - mov edx,[rbx+rdx*4+000005C8]
sora_2nd.exe+91A88: 41 FF D1 - call r9
sora_2nd.exe+91A8B: 48 63 83 14 06 00 00 - movsxd rax,dword ptr [rbx+00000614]
sora_2nd.exe+91A92: 48 8D 0C 40 - lea rcx,[rax+rax*2]
}
4085
"フィールド飯バフ：効果時間の最低値を固定 / Food buff: set min duration"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/09/19
}
[ENABLE]
// WARNING: AOB uniqueness not verified - test in target process before use
aobscanmodule(INJECT_3730,sora_2nd.exe,F3 ?? 0F 5C ?? F3 0F 5F ?? 0F 2F ?? F3 0F 11 ?? B4 00 00 00)
// raw AOB: 8B ?? 54 BB 20 00 FF ?? 3B ?? 0F 47 ?? 89 ?? 54 BB 20 00 8B ?? 50 BB 20 00 FF ?? 89 ?? 50 BB 20 00 3B ?? 72 ?? 89 ?? 50 BB 20 00 ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? B8 2C 00 00 F3 0F 10 ?? B4 00 00 00 0F 2F ?? 0F 86 ?? ?? ?? ?? F3 ?? 0F 5C ?? F3 0F 5F ?? 0F 2F ?? F3 0F 11 ?? B4 00 00 00 0F 82 ?? ?? ?? ?? ?? 89 ?? B0 00 00 00 33 ?? ?? ?? B0 00 00 00 89 ?? B8 00 00 00 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B ?? 24 ?? 8B ?? 24 ?? ?? 8B ?? ?? ?? ?? ?? 83 ?? 7E 74 ?? ?? 8B
// injection point AOB: F3 ?? 0F 5C ?? F3 0F 5F ?? 0F 2F ?? F3 0F 11 ?? B4 00 00 00 0F 82 ?? ?? ?? ?? ?? 89 ?? B0 00 00 00 33 ?? ?? ?? B0 00 00 00 89 ?? B8 00 00 00 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B ?? 24 ?? 8B ?? 24 ?? ?? 8B ?? ?? ?? ?? ?? 83 ?? 7E 74 ?? ?? 8B
alloc(newmem,$1000,INJECT_3730)
alloc(INJECT_3730o, $5)
label(code)
label(return)
label(vc_min_769240)
INJECT_3730o:
readmem(INJECT_3730, $5)
newmem:
// **** Begin Auto script: Clamp
// min=30
code:
// subss xmm0,xmm10
reassemble(INJECT_3730)
// Clamp: float min
vmaxss xmm0, xmm0, [vc_min_769240]
// **** End Auto script: Clamp
jmp return
align 10 cc
vc_min_769240:
dd (float)30
INJECT_3730:
jmp newmem
return:
registersymbol(INJECT_3730 INJECT_3730o vc_min_769240)
[DISABLE]
INJECT_3730:
readmem(INJECT_3730o, $5)
unregistersymbol(INJECT_3730 INJECT_3730o vc_min_769240)
dealloc(newmem)
dealloc(INJECT_3730o)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+2D1E41
sora_2nd.exe+2D1DF7: 8B 82 54 BB 20 00 - mov eax,[rdx+0020BB54]
sora_2nd.exe+2D1DFD: FF C0 - inc eax
sora_2nd.exe+2D1DFF: 3B C1 - cmp eax,ecx
sora_2nd.exe+2D1E01: 0F 47 C1 - cmova eax,ecx
sora_2nd.exe+2D1E04: 89 82 54 BB 20 00 - mov [rdx+0020BB54],eax
sora_2nd.exe+2D1E0A: 8B 82 50 BB 20 00 - mov eax,[rdx+0020BB50]
sora_2nd.exe+2D1E10: FF C0 - inc eax
sora_2nd.exe+2D1E12: 89 82 50 BB 20 00 - mov [rdx+0020BB50],eax
sora_2nd.exe+2D1E18: 3B C1 - cmp eax,ecx
sora_2nd.exe+2D1E1A: 72 06 - jb sora_2nd.exe+2D1E22
sora_2nd.exe+2D1E1C: 89 BA 50 BB 20 00 - mov [rdx+0020BB50],edi
sora_2nd.exe+2D1E22: 48 8B 05 3F B9 98 00 - mov rax,[sora_2nd.exe+C5D768]
sora_2nd.exe+2D1E29: 48 8B 88 B8 2C 00 00 - mov rcx,[rax+00002CB8]
sora_2nd.exe+2D1E30: F3 0F 10 81 B4 00 00 00 - movss xmm0,[rcx+000000B4]
sora_2nd.exe+2D1E38: 0F 2F C6 - comiss xmm0,xmm6
sora_2nd.exe+2D1E3B: 0F 86 E7 FA FF FF - jbe sora_2nd.exe+2D1928
// ---------- INJECTING HERE ----------
sora_2nd.exe+2D1E41: F3 41 0F 5C C2 - subss xmm0,xmm10
// ---------- DONE INJECTING ----------
sora_2nd.exe+2D1E46: F3 0F 5F C6 - maxss xmm0,xmm6
sora_2nd.exe+2D1E4A: 0F 2F F0 - comiss xmm6,xmm0
sora_2nd.exe+2D1E4D: F3 0F 11 81 B4 00 00 00 - movss [rcx+000000B4],xmm0
sora_2nd.exe+2D1E55: 0F 82 CD FA FF FF - jb sora_2nd.exe+2D1928
sora_2nd.exe+2D1E5B: 48 89 B9 B0 00 00 00 - mov [rcx+000000B0],rdi
sora_2nd.exe+2D1E62: 33 D2 - xor edx,edx
sora_2nd.exe+2D1E64: 41 B8 B0 00 00 00 - mov r8d,000000B0
sora_2nd.exe+2D1E6A: 89 B9 B8 00 00 00 - mov [rcx+000000B8],edi
sora_2nd.exe+2D1E70: E8 0B 1B 5D 00 - call sora_2nd.exe+8A3980
sora_2nd.exe+2D1E75: E9 AE FA FF FF - jmp sora_2nd.exe+2D1928
sora_2nd.exe+2D1E7A: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1E7F: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1E83: 48 8B 35 5E F0 98 00 - mov rsi,[sora_2nd.exe+C60EE8]
sora_2nd.exe+2D1E8A: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1E8D: 74 1B - je sora_2nd.exe+2D1EAA
sora_2nd.exe+2D1E8F: 48 8B 06 - mov rax,[rsi]
}
4086
"secs"
0
C08000
Float
vc_min_769240
185
"オーブメント - 選択中のクオーツ / Cur. quartz"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_GET_CURRENT_QUARTZ,$process,39 ?? ?? 2C 02 00 00 74 ?? 8B ?? B8 2C 02 00 00 ?? 8B ?? 48 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B)
// raw AOB: 75 ?? 41 8B D4 EB ?? 8B 52 10 48 8B 8B 70 02 00 00 45 33 C9 E8 ?? ?? ?? ?? 48 8B 93 00 02 00 00 8B BA B8 00 00 00 83 FF FF 74 ?? 8B 92 C8 00 00 00 48 8B 0D ?? ?? ?? ?? E8 ?? ?? ?? ?? 48 85 C0 74 ?? 39 AC B8 2C 02 00 00 74 ?? 8B 94 B8 2C 02 00 00 48 8B 4B 48 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? 48 8B CB E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? 48 8B 83 00 02 00 00 8B 88 B8 00 00 00 83 F9 FF 0F 84 ?? ?? ?? ?? 89 8B 0C 02 00 00 40 88 A8 CC 00 00 00 48 8B 80 88 00 00 00 48 8B 88 B0 02 00 00
// injection point AOB: 39 ?? ?? 2C 02 00 00 74 ?? 8B ?? B8 2C 02 00 00 ?? 8B ?? 48 E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? E9 ?? ?? ?? ?? ?? 8B ?? 00 02 00 00 8B ?? B8 00 00 00 83 ?? FF 0F 84 ?? ?? ?? ?? 89 ?? 0C 02 00 00 ?? 88 ?? CC 00 00 00 ?? 8B ?? 88 00 00 00 ?? 8B ?? B0 02 00 00
alloc(newmem,$1000,INJECT_GET_CURRENT_QUARTZ)
alloc(INJECT_GET_CURRENT_QUARTZo, $7)
label(code)
label(return)
INJECT_GET_CURRENT_QUARTZo:
readmem(INJECT_GET_CURRENT_QUARTZ, $7)
label(i_bse_cqtz_addr)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: cmp [rax+rsi*4+0000022C],ebx
// new injection: cmp [rax+rdi*4+0000022C],ebp
// register RBX -> RBP
// register RSI -> RDI
// 1 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
//push r15
// AOBMaker was: lea rcx, [rax+rsi*4+0000022C]
lea rcx, [rax+rdi*4+0000022C]
mov [i_bse_cqtz_addr], rcx
//pop r15
code:
// cmp [rax+rdi*4+0000022C],ebp
reassemble(INJECT_GET_CURRENT_QUARTZ)
jmp return
align 10 cc
i_bse_cqtz_addr:
dq 0
INJECT_GET_CURRENT_QUARTZ:
jmp newmem
nop 2
return:
registersymbol(INJECT_GET_CURRENT_QUARTZ INJECT_GET_CURRENT_QUARTZo)
registersymbol(i_bse_cqtz_addr)
[DISABLE]
INJECT_GET_CURRENT_QUARTZ:
readmem(INJECT_GET_CURRENT_QUARTZo, $7)
unregistersymbol(INJECT_GET_CURRENT_QUARTZ INJECT_GET_CURRENT_QUARTZo)
dealloc(newmem)
dealloc(INJECT_GET_CURRENT_QUARTZo)
unregistersymbol(i_bse_cqtz_addr)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+1CBBD0
sora_2nd.exe+1CBB8E: 75 05 - jne sora_2nd.exe+1CBB95
sora_2nd.exe+1CBB90: 41 8B D4 - mov edx,r12d
sora_2nd.exe+1CBB93: EB 03 - jmp sora_2nd.exe+1CBB98
sora_2nd.exe+1CBB95: 8B 52 10 - mov edx,[rdx+10]
sora_2nd.exe+1CBB98: 48 8B 8B 70 02 00 00 - mov rcx,[rbx+00000270]
sora_2nd.exe+1CBB9F: 45 33 C9 - xor r9d,r9d
sora_2nd.exe+1CBBA2: E8 79 35 FE FF - call sora_2nd.exe+1AF120
sora_2nd.exe+1CBBA7: 48 8B 93 00 02 00 00 - mov rdx,[rbx+00000200]
sora_2nd.exe+1CBBAE: 8B BA B8 00 00 00 - mov edi,[rdx+000000B8]
sora_2nd.exe+1CBBB4: 83 FF FF - cmp edi,-01 // signed:-1
sora_2nd.exe+1CBBB7: 74 35 - je sora_2nd.exe+1CBBEE
sora_2nd.exe+1CBBB9: 8B 92 C8 00 00 00 - mov edx,[rdx+000000C8]
sora_2nd.exe+1CBBBF: 48 8B 0D 5A 42 A9 00 - mov rcx,[sora_2nd.exe+C5FE20]
sora_2nd.exe+1CBBC6: E8 B5 14 27 00 - call sora_2nd.exe+43D080
sora_2nd.exe+1CBBCB: 48 85 C0 - test rax,rax
sora_2nd.exe+1CBBCE: 74 1E - je sora_2nd.exe+1CBBEE
// ---------- INJECTING HERE ----------
sora_2nd.exe+1CBBD0: 39 AC B8 2C 02 00 00 - cmp [rax+rdi*4+0000022C],ebp
// ---------- DONE INJECTING ----------
sora_2nd.exe+1CBBD7: 74 15 - je sora_2nd.exe+1CBBEE
sora_2nd.exe+1CBBD9: 8B 94 B8 2C 02 00 00 - mov edx,[rax+rdi*4+0000022C]
sora_2nd.exe+1CBBE0: 48 8B 4B 48 - mov rcx,[rbx+48]
sora_2nd.exe+1CBBE4: E8 07 BF F6 FF - call sora_2nd.exe+137AF0
sora_2nd.exe+1CBBE9: E9 A8 FD FF FF - jmp sora_2nd.exe+1CB996
sora_2nd.exe+1CBBEE: 48 8B CB - mov rcx,rbx
sora_2nd.exe+1CBBF1: E8 5A BB 00 00 - call sora_2nd.exe+1D7750
sora_2nd.exe+1CBBF6: E9 9B FD FF FF - jmp sora_2nd.exe+1CB996
sora_2nd.exe+1CBBFB: 48 8B 83 00 02 00 00 - mov rax,[rbx+00000200]
sora_2nd.exe+1CBC02: 8B 88 B8 00 00 00 - mov ecx,[rax+000000B8]
sora_2nd.exe+1CBC08: 83 F9 FF - cmp ecx,-01 // signed:-1
sora_2nd.exe+1CBC0B: 0F 84 19 FE FF FF - je sora_2nd.exe+1CBA2A
sora_2nd.exe+1CBC11: 89 8B 0C 02 00 00 - mov [rbx+0000020C],ecx
sora_2nd.exe+1CBC17: 40 88 A8 CC 00 00 00 - mov [rax+000000CC],bpl
sora_2nd.exe+1CBC1E: 48 8B 80 88 00 00 00 - mov rax,[rax+00000088]
sora_2nd.exe+1CBC25: 48 8B 88 B0 02 00 00 - mov rcx,[rax+000002B0]
}
186
"現在のクオーツ / Cur. quartz"
Quartz.ID
0
FF8080
4 Bytes
i_bse_cqtz_addr
0
73
"ステータスビューアー / Char. stats viewer"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_GET_CHAR_STAT,$process,8B ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? 8B ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? 8B ?? ?? 0F 28 ?? 0F 28 ?? 39 ?? ?? 75 ?? F3 0F 10 ?? ?? ?? ?? ?? F3 0F 10 ?? ?? ?? ?? ?? F3 0F 11 ?? A8 01 00 00 F3 0F 11 ?? AC 01 00 00 C7 ?? A4 01 00 00 00 00 80 3F C7 ?? 84 01 00 00 00 00 80 3F 8B ?? A8 01 00 00 89 ?? 88 01 00 00 8B ?? AC 01 00 00 F3 0F 11 ?? 98 01 00 00 F3 0F 11 ?? 9C 01 00 00 89 ?? 8C 01 00 00 C7 ?? 94 01 00 00 00 00 80 3F ?? 89 ?? B4 01 00 00 89 ?? BC 01 00 00 66 0F 6E ?? ?? ?? 8B ?? 28)
// raw AOB: 49 8B 87 30 02 00 00 4C 8D 24 C6 49 3B F4 74 ?? 48 8B 0E 48 8D 15 ?? ?? ?? ?? 41 B1 01 41 B8 FE FF FF 7F E8 ?? ?? ?? ?? 4C 8B F8 48 85 C0 75 ?? 48 83 C6 08 49 3B F4 75 ?? 4C 8B FF 8B 55 14 48 8B CB E8 ?? ?? ?? ?? 8B 55 18 49 8B CD E8 ?? ?? ?? ?? 8B 45 18 0F 28 C6 0F 28 CE 39 45 14 75 ?? F3 0F 10 05 ?? ?? ?? ?? F3 0F 10 0D ?? ?? ?? ?? F3 0F 11 83 A8 01 00 00 F3 0F 11 8B AC 01 00 00 C7 83 A4 01 00 00 00 00 80 3F C7 83 84 01 00 00 00 00 80 3F 8B 83 A8 01 00 00
// injection point AOB: 8B ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? 8B ?? ?? ?? 8B ?? E8 ?? ?? ?? ?? 8B ?? ?? 0F 28 ?? 0F 28 ?? 39 ?? ?? 75 ?? F3 0F 10 ?? ?? ?? ?? ?? F3 0F 10 ?? ?? ?? ?? ?? F3 0F 11 ?? A8 01 00 00 F3 0F 11 ?? AC 01 00 00 C7 ?? A4 01 00 00 00 00 80 3F C7 ?? 84 01 00 00 00 00 80 3F 8B ?? A8 01 00 00
alloc(newmem,$1000,INJECT_GET_CHAR_STAT)
alloc(INJECT_GET_CHAR_STATo, $6)
label(code)
label(return)
INJECT_GET_CHAR_STATo:
readmem(INJECT_GET_CHAR_STAT, $6)
label(i_base_char_stat_addr)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: mov edx,[rsi+14]
// new injection: mov edx,[rbp+14]
// register RSI -> RBP
// 1 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
// AOBMaker was: mov [i_base_char_stat_addr], rsi
mov [i_base_char_stat_addr], rbp
code:
// mov edx,[rbp+14]
reassemble(INJECT_GET_CHAR_STAT)
// mov rcx,rbx
reassemble(INJECT_GET_CHAR_STAT+3)
jmp return
align 10 cc
i_base_char_stat_addr:
dq 0
INJECT_GET_CHAR_STAT:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_CHAR_STAT INJECT_GET_CHAR_STATo)
registersymbol(i_base_char_stat_addr)
[DISABLE]
INJECT_GET_CHAR_STAT:
readmem(INJECT_GET_CHAR_STATo, $6)
unregistersymbol(INJECT_GET_CHAR_STAT INJECT_GET_CHAR_STATo)
dealloc(newmem)
dealloc(INJECT_GET_CHAR_STATo)
unregistersymbol(i_base_char_stat_addr)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+54225F
sora_2nd.exe+542223: 49 8B 87 30 02 00 00 - mov rax,[r15+00000230]
sora_2nd.exe+54222A: 4C 8D 24 C6 - lea r12,[rsi+rax*8]
sora_2nd.exe+54222E: 49 3B F4 - cmp rsi,r12
sora_2nd.exe+542231: 74 29 - je sora_2nd.exe+54225C
sora_2nd.exe+542233: 48 8B 0E - mov rcx,[rsi]
sora_2nd.exe+542236: 48 8D 15 6B A3 5A 00 - lea rdx,[sora_2nd.exe+AEC5A8]
sora_2nd.exe+54223D: 41 B1 01 - mov r9b,01
sora_2nd.exe+542240: 41 B8 FE FF FF 7F - mov r8d,7FFFFFFE
sora_2nd.exe+542246: E8 45 EF 03 00 - call sora_2nd.exe+581190
sora_2nd.exe+54224B: 4C 8B F8 - mov r15,rax
sora_2nd.exe+54224E: 48 85 C0 - test rax,rax
sora_2nd.exe+542251: 75 0C - jne sora_2nd.exe+54225F
sora_2nd.exe+542253: 48 83 C6 08 - add rsi,08
sora_2nd.exe+542257: 49 3B F4 - cmp rsi,r12
sora_2nd.exe+54225A: 75 D7 - jne sora_2nd.exe+542233
sora_2nd.exe+54225C: 4C 8B FF - mov r15,rdi
// ---------- INJECTING HERE ----------
sora_2nd.exe+54225F: 8B 55 14 - mov edx,[rbp+14]
// ---------- DONE INJECTING ----------
sora_2nd.exe+542262: 48 8B CB - mov rcx,rbx
sora_2nd.exe+542265: E8 D6 89 0A 00 - call sora_2nd.exe+5EAC40
sora_2nd.exe+54226A: 8B 55 18 - mov edx,[rbp+18]
sora_2nd.exe+54226D: 49 8B CD - mov rcx,r13
sora_2nd.exe+542270: E8 CB 89 0A 00 - call sora_2nd.exe+5EAC40
sora_2nd.exe+542275: 8B 45 18 - mov eax,[rbp+18]
sora_2nd.exe+542278: 0F 28 C6 - movaps xmm0,xmm6
sora_2nd.exe+54227B: 0F 28 CE - movaps xmm1,xmm6
sora_2nd.exe+54227E: 39 45 14 - cmp [rbp+14],eax
sora_2nd.exe+542281: 75 10 - jne sora_2nd.exe+542293
sora_2nd.exe+542283: F3 0F 10 05 7D A8 5E 00 - movss xmm0,[sora_2nd.exe+B2CB08]
sora_2nd.exe+54228B: F3 0F 10 0D 05 A6 5E 00 - movss xmm1,[sora_2nd.exe+B2C898]
sora_2nd.exe+542293: F3 0F 11 83 A8 01 00 00 - movss [rbx+000001A8],xmm0
sora_2nd.exe+54229B: F3 0F 11 8B AC 01 00 00 - movss [rbx+000001AC],xmm1
sora_2nd.exe+5422A3: C7 83 A4 01 00 00 00 00 80 3F - mov [rbx+000001A4],3F800000
sora_2nd.exe+5422AD: C7 83 84 01 00 00 00 00 80 3F - mov [rbx+00000184],3F800000
}
74
"ID? (勿更改 / do not edit)"
Char.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
0
75
"Lv"
0
FF8080
4 Bytes
i_base_char_stat_addr
4
76
"XP"
0
FF8080
4 Bytes
i_base_char_stat_addr
8
77
"HP"
0
FF8080
4 Bytes
i_base_char_stat_addr
C
78
"Max HP"
0
FF8080
4 Bytes
i_base_char_stat_addr
10
79
"EP"
0
FF8080
4 Bytes
i_base_char_stat_addr
14
80
"Max EP"
0
FF8080
4 Bytes
i_base_char_stat_addr
18
81
"CP"
0
FF8080
4 Bytes
i_base_char_stat_addr
1C
82
"Max CP"
0
FF8080
4 Bytes
i_base_char_stat_addr
20
83
"STR"
0
FF8080
4 Bytes
i_base_char_stat_addr
24
84
"DEF"
0
FF8080
4 Bytes
i_base_char_stat_addr
28
85
"ATS"
0
FF8080
4 Bytes
i_base_char_stat_addr
2C
86
"ADF"
0
FF8080
4 Bytes
i_base_char_stat_addr
30
87
"SPD"
0
FF8080
4 Bytes
i_base_char_stat_addr
34
88
"AGL"
0
FF8080
4 Bytes
i_base_char_stat_addr
38
89
"DEX"
0
FF8080
4 Bytes
i_base_char_stat_addr
3C
90
"MOV"
0
FF8080
4 Bytes
i_base_char_stat_addr
40
91
"RNG"
0
FF8080
4 Bytes
i_base_char_stat_addr
44
92
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
48
93
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
4C
94
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
50
95
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
54
96
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
58
97
"??"
0
FF8080
4 Bytes
i_base_char_stat_addr
5C
98
"Hit %"
0
FF8080
4 Bytes
i_base_char_stat_addr
60
99
"Evade %"
0
FF8080
4 Bytes
i_base_char_stat_addr
64
100
"Mgi Evade %"
0
FF8080
4 Bytes
i_base_char_stat_addr
68
101
"Crit %"
0
FF8080
4 Bytes
i_base_char_stat_addr
6C
191
"Spells+"
1
190
"Spell 01"
0
FF8080
2 Bytes
i_base_char_stat_addr
18C
192
"Spell 02"
0
FF8080
2 Bytes
i_base_char_stat_addr
18E
193
"Spell 03"
0
FF8080
2 Bytes
i_base_char_stat_addr
190
194
"Spell 04"
0
FF8080
2 Bytes
i_base_char_stat_addr
192
195
"Spell 05"
0
FF8080
2 Bytes
i_base_char_stat_addr
194
196
"Spell 06"
0
FF8080
2 Bytes
i_base_char_stat_addr
196
197
"Spell 07"
0
FF8080
2 Bytes
i_base_char_stat_addr
198
198
"Spell 08"
0
FF8080
2 Bytes
i_base_char_stat_addr
19A
199
"Spell 09"
0
FF8080
2 Bytes
i_base_char_stat_addr
19C
200
"Spell 10"
0
FF8080
2 Bytes
i_base_char_stat_addr
19E
201
"Spell 11"
0
FF8080
2 Bytes
i_base_char_stat_addr
1A0
202
"Spell 12"
0
FF8080
2 Bytes
i_base_char_stat_addr
1A2
203
"Spell 13"
0
FF8080
2 Bytes
i_base_char_stat_addr
1A4
204
"Spell 14"
0
FF8080
2 Bytes
i_base_char_stat_addr
1A6
205
"Spell 15"
0
FF8080
2 Bytes
i_base_char_stat_addr
1A8
206
"Spell 16"
0
FF8080
2 Bytes
i_base_char_stat_addr
1AA
207
"Spell 17"
0
FF8080
2 Bytes
i_base_char_stat_addr
1AC
208
"Spell 18"
0
FF8080
2 Bytes
i_base_char_stat_addr
1AE
209
"Spell 19"
0
FF8080
2 Bytes
i_base_char_stat_addr
1B0
210
"Spell 20"
0
FF8080
2 Bytes
i_base_char_stat_addr
1B2
211
"Spell 21"
0
FF8080
2 Bytes
i_base_char_stat_addr
1B4
212
"Spell 22"
0
FF8080
2 Bytes
i_base_char_stat_addr
1B6
213
"Spell 23"
0
FF8080
2 Bytes
i_base_char_stat_addr
1B8
214
"Spell 24"
0
FF8080
2 Bytes
i_base_char_stat_addr
1BA
215
"Spell 25"
0
FF8080
2 Bytes
i_base_char_stat_addr
1BC
216
"Spell 26"
0
FF8080
2 Bytes
i_base_char_stat_addr
1BE
217
"Spell 27"
0
FF8080
2 Bytes
i_base_char_stat_addr
1C0
218
"Spell 28"
0
FF8080
2 Bytes
i_base_char_stat_addr
1C2
219
"Spell29"
0
FF8080
2 Bytes
i_base_char_stat_addr
1C4
220
"Spell 30"
0
FF8080
2 Bytes
i_base_char_stat_addr
1C6
221
"Spell 31"
0
FF8080
2 Bytes
i_base_char_stat_addr
1C8
222
"Spell 32"
0
FF8080
2 Bytes
i_base_char_stat_addr
1CA
223
"Spell 33"
0
FF8080
2 Bytes
i_base_char_stat_addr
1CC
224
"Spell 34"
0
FF8080
2 Bytes
i_base_char_stat_addr
1CE
225
"Spell 35"
0
FF8080
2 Bytes
i_base_char_stat_addr
1D0
226
"Spell 36"
0
FF8080
2 Bytes
i_base_char_stat_addr
1D2
227
"Spell 37"
0
FF8080
2 Bytes
i_base_char_stat_addr
1D4
228
"Spell 38"
0
FF8080
2 Bytes
i_base_char_stat_addr
1D6
229
"Spell 39"
0
FF8080
2 Bytes
i_base_char_stat_addr
1D8
230
"Spell 40"
0
FF8080
2 Bytes
i_base_char_stat_addr
1DA
102
"Quartz #1"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
22C
179
"Quartz #2"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
230
180
"Quartz #3"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
234
181
"Quartz #4"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
238
182
"Quartz #5"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
23C
183
"Quartz #6"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
240
231
"Weapon"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
25C
232
"Armour"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
260
233
"Shoe"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
264
234
"Accessory #1"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
268
235
"Accessory #2"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
26C
236
"Costume #1"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
270
237
"Costume #2"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
274
238
"Costume #3"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
278
239
"Costume #4"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
27C
240
"Costume #5"
Quartz.ID
0
FF8080
4 Bytes
i_base_char_stat_addr
280
103
"??"
0
FF8080
Byte
i_base_char_stat_addr
28A
104
"Overdrive"
0
FF8080
Byte
i_base_char_stat_addr
28B
105
"Support EXP"
0
FF8080
4 Bytes
i_base_char_stat_addr
28C
106
"進行中のリワードを取得 / Get on-going reward data / max 50"
Auto Assembler Script
{ Game : ed9.exe
Version:
Date : 2025-09-19
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ACHIEVEMENT,sora_2nd.exe,8B 8B ?? ?? ?? 00 8B C1 C1 E8 1E 83 F8 01) // should be unique
alloc(newmem,$1000,INJECT_GET_ACHIEVEMENT)
alloc(INJECT_GET_ACHIEVEMENTo, 6)
label(code)
label(return i_base_achi_addr)
INJECT_GET_ACHIEVEMENTo:
readmem(INJECT_GET_ACHIEVEMENT, 6)
newmem:
push r15
push r14
push rcx
xor ecx, ecx
mov dword ptr [i_idx], 0
mov ecx, [INJECT_GET_ACHIEVEMENTo+2]
lea r15, [rbx+rcx]
loop1:
mov ecx, [i_idx]
mov r14, i_base_achi_addr
lea r14, [r14+rcx*8]
cmp qword ptr [r14], r15
je endp
cmp qword ptr [r14], 0
je write_it
jmp chk_next
write_it:
mov [r14], r15
jmp endp
db EB 3B 54
db 68 69 73 20 74
db 61 62 6C 65 20 63 6F 6D 65 73 20 66 72 6F 6D 20 68 74
db 74 70 73 3A 2F
db 2F 6F 70 65 6E 63 68 65
db 61 74 74 61 62 6C 65 73
db 2E 63 6F 6D
db 20 2F 20 43 45 20 37 2E 34 2B
chk_next:
inc dword ptr [i_idx]
cmp dword ptr [i_idx], 33
jb loop1
endp:
pop rcx
pop r14
pop r15
code:
// mov ecx,[rbx+00011100]
reassemble(INJECT_GET_ACHIEVEMENT)
jmp return
align 10 cc
i_idx:
dd 0 0
i_base_achi_addr:
dq 0
align 100 0
db 0
align 100 0
db 0
align 100 0
db 0
INJECT_GET_ACHIEVEMENT:
jmp newmem
nop
return:
registersymbol(INJECT_GET_ACHIEVEMENT i_base_achi_addr)
registersymbol(INJECT_GET_ACHIEVEMENTo)
[DISABLE]
INJECT_GET_ACHIEVEMENT:
//db 8B 8B 00 11 01 00
readmem(INJECT_GET_ACHIEVEMENTo, 6)
unregistersymbol(INJECT_GET_ACHIEVEMENT i_base_achi_addr)
dealloc(newmem)
unregistersymbol(INJECT_GET_ACHIEVEMENTo)
dealloc(INJECT_GET_ACHIEVEMENTo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+23BFA
sora_2nd.exe+23BAC: 48 8B 05 75 C2 C3 00 - mov rax,[sora_2nd.exe+C5FE28]
sora_2nd.exe+23BB3: 48 C1 E9 03 - shr rcx,03
sora_2nd.exe+23BB7: 84 94 01 00 01 00 00 - test [rcx+rax+00000100],dl
sora_2nd.exe+23BBE: 74 73 - je sora_2nd.exe+23C33
sora_2nd.exe+23BC0: 8B 46 08 - mov eax,[rsi+08]
sora_2nd.exe+23BC3: 48 8B 1D 5E C2 C3 00 - mov rbx,[sora_2nd.exe+C5FE28]
sora_2nd.exe+23BCA: 3D 00 01 00 00 - cmp eax,00000100
sora_2nd.exe+23BCF: 72 25 - jb sora_2nd.exe+23BF6
sora_2nd.exe+23BD1: 4C 8D 0D 30 E3 AE 00 - lea r9,[sora_2nd.exe+B11F08]
sora_2nd.exe+23BD8: 41 B8 79 02 00 00 - mov r8d,00000279
sora_2nd.exe+23BDE: 48 8D 15 CB E2 AE 00 - lea rdx,[sora_2nd.exe+B11EB0]
sora_2nd.exe+23BE5: B9 03 00 00 00 - mov ecx,00000003
sora_2nd.exe+23BEA: E8 C1 82 55 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+23BEF: 44 8B 54 24 78 - mov r10d,[rsp+78]
sora_2nd.exe+23BF4: EB 04 - jmp sora_2nd.exe+23BFA
sora_2nd.exe+23BF6: 48 8D 1C 83 - lea rbx,[rbx+rax*4]
// ---------- INJECTING HERE ----------
sora_2nd.exe+23BFA: 8B 8B 00 11 01 00 - mov ecx,[rbx+00011100]
// ---------- DONE INJECTING ----------
sora_2nd.exe+23C00: 8B C1 - mov eax,ecx
sora_2nd.exe+23C02: C1 E8 1E - shr eax,1E
sora_2nd.exe+23C05: 83 F8 01 - cmp eax,01
sora_2nd.exe+23C08: 75 0C - jne sora_2nd.exe+23C16
sora_2nd.exe+23C0A: 8D 04 8D 00 00 00 00 - lea eax,[rcx*4+00000000]
sora_2nd.exe+23C11: C1 F8 02 - sar eax,02
sora_2nd.exe+23C14: EB 18 - jmp sora_2nd.exe+23C2E
sora_2nd.exe+23C16: 83 F8 02 - cmp eax,02
sora_2nd.exe+23C19: 75 11 - jne sora_2nd.exe+23C2C
sora_2nd.exe+23C1B: 8D 04 8D 00 00 00 00 - lea eax,[rcx*4+00000000]
sora_2nd.exe+23C22: 66 0F 6E C0 - movd xmm0,eax
sora_2nd.exe+23C26: F3 0F 2C C0 - cvttss2si eax,xmm0
sora_2nd.exe+23C2A: EB 02 - jmp sora_2nd.exe+23C2E
sora_2nd.exe+23C2C: 33 C0 - xor eax,eax
sora_2nd.exe+23C2E: 3B 46 0C - cmp eax,[rsi+0C]
sora_2nd.exe+23C31: 7D 5E - jnl sora_2nd.exe+23C91
}
107
"#1"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr
0
108
"#2"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+8
0
109
"#3"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+10
0
110
"#4"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+18
0
111
"#5"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+20
0
112
"#6"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+28
0
113
"#7"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+30
0
114
"#8"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+38
0
115
"#9"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+40
0
116
"#10"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+48
0
117
"#11"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+50
0
118
"#12"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+58
0
119
"#13"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+60
0
120
"#14"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+68
0
121
"#15"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+70
0
122
"#16"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+78
0
123
"#17"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+80
0
124
"#18"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+88
0
125
"#19"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+90
0
126
"#20"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+98
0
127
"#21"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+A0
0
128
"#22"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+A8
0
129
"#23"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+B0
0
130
"#24"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+B8
0
131
"#25"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+C0
0
132
"#26"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+C8
0
133
"#27"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+D0
0
134
"#28"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+D8
0
135
"#29"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+E0
0
136
"#30"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+E8
0
137
"#31"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+F0
0
138
"#32"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+F8
0
139
"#33"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+100
0
140
"#34"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+108
0
141
"#35"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+110
0
142
"#36"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+118
0
143
"#37"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+120
0
144
"#38"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+128
0
145
"#39"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+130
0
146
"#40"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+138
0
147
"#41"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+140
0
148
"#42"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+148
0
149
"#43"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+150
0
150
"#44"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+158
0
151
"#45"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+160
0
152
"#46"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+168
0
153
"#47"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+170
0
154
"#48"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+178
0
155
"#49"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+180
0
156
"#50"
0
FF8080
Custom
Kueo2 integer
i_base_achi_addr+188
0
157
"レシピ選択時：必要素材を自動補充 / Auto set ingredient amt. when browsing recipes"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_AUTO_COOKING_INGREDIENTS,$process,?? 0F B7 ?? 88 4C 8A 12 00 ?? 8B ?? 28)
// raw AOB: 72 ?? 4C 8D 0D ?? ?? ?? ?? 89 44 24 20 41 B8 BB 04 00 00 48 8D 15 ?? ?? ?? ?? B9 03 00 00 00 E8 ?? ?? ?? ?? EB ?? 8D 88 CA FE FF FF 83 F9 07 77 ?? 48 8B 05 ?? ?? ?? ?? 44 8B A4 88 28 B6 20 00 EB ?? 48 8B C8 48 8B 05 ?? ?? ?? ?? 44 0F B7 A4 88 4C 8A 12 00 49 8B 9E 28 02 00 00 49 8B 86 30 02 00 00 48 8D 3C C3 48 3B DF 74 ?? 0F 1F 80 00 00 00 00 48 8B 0B 48 8D 15 ?? ?? ?? ?? 41 B1 01 45 33 C0 E8 ?? ?? ?? ?? 48 8B E8 48 85 C0 75 ?? 48 83 C3 08 48 3B DF
// injection point AOB: ?? 0F B7 ?? 88 4C 8A 12 00 ?? 8B ?? 28 02 00 00 ?? 8B ?? 30 02 00 00 ?? 8D ?? C3 ?? 3B ?? 74 ?? 0F 1F ?? 00 00 00 00 ?? 8B ?? ?? 8D ?? ?? ?? ?? ?? ?? ?? 01 ?? 33 ?? E8 ?? ?? ?? ?? ?? 8B ?? ?? 85 ?? 75 ?? ?? 83 ?? 08 ?? 3B
alloc(newmem,$1000,INJECT_AUTO_COOKING_INGREDIENTS)
alloc(INJECT_AUTO_COOKING_INGREDIENTSo, $9)
label(code)
label(return)
INJECT_AUTO_COOKING_INGREDIENTSo:
readmem(INJECT_AUTO_COOKING_INGREDIENTS, $9)
label(iw_ingredient_set_to)
newmem:
mov bx, [iw_ingredient_set_to]
cmp word ptr [rax+rcx*4+00128A4C], bx
jae short code
mov [rax+rcx*4+00128A4C], bx
code:
// movzx r12d,word ptr [rax+rcx*4+00128A4C]
reassemble(INJECT_AUTO_COOKING_INGREDIENTS)
jmp return
align 10 cc
iw_ingredient_set_to:
dw #70
INJECT_AUTO_COOKING_INGREDIENTS:
jmp newmem
nop 4
return:
registersymbol(INJECT_AUTO_COOKING_INGREDIENTS INJECT_AUTO_COOKING_INGREDIENTSo)
registersymbol(iw_ingredient_set_to)
[DISABLE]
INJECT_AUTO_COOKING_INGREDIENTS:
readmem(INJECT_AUTO_COOKING_INGREDIENTSo, $9)
unregistersymbol(INJECT_AUTO_COOKING_INGREDIENTS INJECT_AUTO_COOKING_INGREDIENTSo)
dealloc(newmem)
dealloc(INJECT_AUTO_COOKING_INGREDIENTSo)
unregistersymbol(iw_ingredient_set_to)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+411FA9
sora_2nd.exe+411F5D: 72 24 - jb sora_2nd.exe+411F83
sora_2nd.exe+411F5F: 4C 8D 0D 6A D3 6F 00 - lea r9,[sora_2nd.exe+B0F2D0]
sora_2nd.exe+411F66: 89 44 24 20 - mov [rsp+20],eax
sora_2nd.exe+411F6A: 41 B8 C9 04 00 00 - mov r8d,000004C9
sora_2nd.exe+411F70: 48 8D 15 39 D2 6F 00 - lea rdx,[sora_2nd.exe+B0F1B0]
sora_2nd.exe+411F77: B9 03 00 00 00 - mov ecx,00000003
sora_2nd.exe+411F7C: E8 2F 9F 16 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+411F81: EB 2F - jmp sora_2nd.exe+411FB2
sora_2nd.exe+411F83: 8D 88 CA FE FF FF - lea ecx,[rax-00000136]
sora_2nd.exe+411F89: 83 F9 07 - cmp ecx,07
sora_2nd.exe+411F8C: 77 11 - ja sora_2nd.exe+411F9F
sora_2nd.exe+411F8E: 48 8B 05 8B DE 84 00 - mov rax,[sora_2nd.exe+C5FE20]
sora_2nd.exe+411F95: 44 8B A4 88 28 B6 20 00 - mov r12d,[rax+rcx*4+0020B628]
sora_2nd.exe+411F9D: EB 13 - jmp sora_2nd.exe+411FB2
sora_2nd.exe+411F9F: 48 8B C8 - mov rcx,rax
sora_2nd.exe+411FA2: 48 8B 05 77 DE 84 00 - mov rax,[sora_2nd.exe+C5FE20]
// ---------- INJECTING HERE ----------
sora_2nd.exe+411FA9: 44 0F B7 A4 88 4C 8A 12 00 - movzx r12d,word ptr [rax+rcx*4+00128A4C]
// ---------- DONE INJECTING ----------
sora_2nd.exe+411FB2: 49 8B 9E 28 02 00 00 - mov rbx,[r14+00000228]
sora_2nd.exe+411FB9: 49 8B 86 30 02 00 00 - mov rax,[r14+00000230]
sora_2nd.exe+411FC0: 48 8D 3C C3 - lea rdi,[rbx+rax*8]
sora_2nd.exe+411FC4: 48 3B DF - cmp rbx,rdi
sora_2nd.exe+411FC7: 74 2D - je sora_2nd.exe+411FF6
sora_2nd.exe+411FC9: 0F 1F 80 00 00 00 00 - nop dword ptr [rax+00000000]
sora_2nd.exe+411FD0: 48 8B 0B - mov rcx,[rbx]
sora_2nd.exe+411FD3: 48 8D 15 56 BB 6F 00 - lea rdx,[sora_2nd.exe+B0DB30]
sora_2nd.exe+411FDA: 41 B1 01 - mov r9b,01
sora_2nd.exe+411FDD: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+411FE0: E8 AB F1 16 00 - call sora_2nd.exe+581190
sora_2nd.exe+411FE5: 48 8B E8 - mov rbp,rax
sora_2nd.exe+411FE8: 48 85 C0 - test rax,rax
sora_2nd.exe+411FEB: 75 0B - jne sora_2nd.exe+411FF8
sora_2nd.exe+411FED: 48 83 C3 08 - add rbx,08
sora_2nd.exe+411FF1: 48 3B DF - cmp rbx,rdi
}
158
"使用法：対象のレシピ閲覧後、料理メニューを開き直す"
8000FF
1
159
"Usage: Browse the related recipe, then reopen the cooking menu
"
8000FF
1
189
"即座に反映 / take effect immediately"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_AUTO_COOKING_INGREDIENTS2,$process,0F B7 ?? 8A 4C 8A 12 00 ?? 0F)
// raw AOB: 4C 8D 0D ?? ?? ?? ?? 89 44 24 20 41 B8 BB 04 00 00 48 8D 15 ?? ?? ?? ?? B9 03 00 00 00 E8 ?? ?? ?? ?? 48 8B 15 ?? ?? ?? ?? 33 C9 EB ?? 8D 88 CA FE FF FF 83 F9 07 77 ?? 05 CA FE FF FF 8B 8C 82 28 B6 20 00 EB ?? 8B C8 0F B7 8C 8A 4C 8A 12 00 40 0F B6 C5 3B C8 0F 82 ?? ?? ?? ?? FF C6 48 83 C3 08 3B F7 72 ?? 32 C0 E9 ?? ?? ?? ?? CC CC 48 89 5C 24 10 48 89 74 24 18 57 48 83 EC 30 48 8B 05
// injection point AOB: 0F B7 ?? 8A 4C 8A 12 00 ?? 0F B6 ?? 3B ?? 0F 82 ?? ?? ?? ?? FF ?? ?? 83 ?? 08 3B ?? 72 ?? 32 ?? E9 ?? ?? ?? ?? CC CC ?? 89 ?? 24 ?? ?? 89 ?? 24 ?? ?? 48 83 EC 30 ?? 8B
alloc(newmem,$1000,INJECT_AUTO_COOKING_INGREDIENTS2)
alloc(INJECT_AUTO_COOKING_INGREDIENTS2o, $8)
label(code)
label(return)
INJECT_AUTO_COOKING_INGREDIENTS2o:
readmem(INJECT_AUTO_COOKING_INGREDIENTS2, $8)
newmem:
mov ax, [iw_ingredient_set_to]
cmp word ptr [rdx+rcx*4+00128A4C], ax
jae code
mov [rdx+rcx*4+00128A4C], ax
code:
// movzx ecx,word ptr [rdx+rcx*4+00128A4C]
reassemble(INJECT_AUTO_COOKING_INGREDIENTS2)
jmp return
align 10 cc
INJECT_AUTO_COOKING_INGREDIENTS2:
jmp newmem
nop 3
return:
registersymbol(INJECT_AUTO_COOKING_INGREDIENTS2 INJECT_AUTO_COOKING_INGREDIENTS2o)
[DISABLE]
INJECT_AUTO_COOKING_INGREDIENTS2:
readmem(INJECT_AUTO_COOKING_INGREDIENTS2o, $8)
unregistersymbol(INJECT_AUTO_COOKING_INGREDIENTS2 INJECT_AUTO_COOKING_INGREDIENTS2o)
dealloc(newmem)
dealloc(INJECT_AUTO_COOKING_INGREDIENTS2o)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+414069
sora_2nd.exe+414021: 4C 8D 0D A8 B2 6F 00 - lea r9,[sora_2nd.exe+B0F2D0]
sora_2nd.exe+414028: 89 44 24 20 - mov [rsp+20],eax
sora_2nd.exe+41402C: 41 B8 C9 04 00 00 - mov r8d,000004C9
sora_2nd.exe+414032: 48 8D 15 77 B1 6F 00 - lea rdx,[sora_2nd.exe+B0F1B0]
sora_2nd.exe+414039: B9 03 00 00 00 - mov ecx,00000003
sora_2nd.exe+41403E: E8 6D 7E 16 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+414043: 48 8B 15 D6 BD 84 00 - mov rdx,[sora_2nd.exe+C5FE20]
sora_2nd.exe+41404A: 33 C9 - xor ecx,ecx
sora_2nd.exe+41404C: EB 23 - jmp sora_2nd.exe+414071
sora_2nd.exe+41404E: 8D 88 CA FE FF FF - lea ecx,[rax-00000136]
sora_2nd.exe+414054: 83 F9 07 - cmp ecx,07
sora_2nd.exe+414057: 77 0E - ja sora_2nd.exe+414067
sora_2nd.exe+414059: 05 CA FE FF FF - add eax,FFFFFECA // signed:-310
sora_2nd.exe+41405E: 8B 8C 82 28 B6 20 00 - mov ecx,[rdx+rax*4+0020B628]
sora_2nd.exe+414065: EB 0A - jmp sora_2nd.exe+414071
sora_2nd.exe+414067: 8B C8 - mov ecx,eax
// ---------- INJECTING HERE ----------
sora_2nd.exe+414069: 0F B7 8C 8A 4C 8A 12 00 - movzx ecx,word ptr [rdx+rcx*4+00128A4C]
// ---------- DONE INJECTING ----------
sora_2nd.exe+414071: 40 0F B6 C5 - movzx eax,bpl
sora_2nd.exe+414075: 3B C8 - cmp ecx,eax
sora_2nd.exe+414077: 0F 82 2A FF FF FF - jb sora_2nd.exe+413FA7
sora_2nd.exe+41407D: FF C6 - inc esi
sora_2nd.exe+41407F: 48 83 C3 08 - add rbx,08
sora_2nd.exe+414083: 3B F7 - cmp esi,edi
sora_2nd.exe+414085: 72 89 - jb sora_2nd.exe+414010
sora_2nd.exe+414087: 32 C0 - xor al,al
sora_2nd.exe+414089: E9 1B FF FF FF - jmp sora_2nd.exe+413FA9
sora_2nd.exe+41408E: CC - int 3
sora_2nd.exe+41408F: CC - int 3
sora_2nd.exe+414090: 48 89 5C 24 10 - mov [rsp+10],rbx
sora_2nd.exe+414095: 48 89 74 24 18 - mov [rsp+18],rsi
sora_2nd.exe+41409A: 57 - push rdi
sora_2nd.exe+41409B: 48 83 EC 30 - sub rsp,30
sora_2nd.exe+41409F: 48 8B 05 A2 86 84 00 - mov rax,[sora_2nd.exe+C5C748]
}
160
"最小値 / min. value"
0
C08000
2 Bytes
iw_ingredient_set_to
161
"個別クエスト情報閲覧 / Quest viewer"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_SINGLE_QUEST_VIEWER,$process,?? 0F B6 ?? D6 0A)
// raw AOB: BA 9F 85 FB 41 C7 84 24 A0 00 00 00 08 00 00 00 48 8D 0D ?? ?? ?? ?? C7 84 24 A4 00 00 00 E7 B5 A5 28 C7 84 24 A8 00 00 00 04 00 00 00 C7 84 24 AC 00 00 00 45 D4 D5 86 C7 84 24 B0 00 00 00 02 00 00 00 C7 84 24 B4 00 00 00 29 2C E0 A2 C7 84 24 B8 00 00 00 20 00 00 00 C7 84 24 BC 00 00 00 A0 88 28 D8 E8 ?? ?? ?? ?? 8B CF 4C 8D 84 24 A0 00 00 00 44 8B D0 48 8D 14 89 48 03 D2 45 0F B6 4C D6 0A 49 8B 08 48 8B D1 48 C1 EA 20 41 85 C9 75 ?? 49 83 C0 08 48 8D 84 24 C0 00 00 00 4C 3B C0 75 ?? EB ?? 44 8B D2 48 8B 9C 24 90 00 00 00 48 8B 05 ?? ?? ?? ?? 44 89 93 EC 02 00 00 48 8B 88 B8 06 00 00 48 85 C9
// injection point AOB: ?? 0F B6 ?? D6 0A ?? 8B ?? ?? 8B ?? ?? C1 ?? 20 ?? 85 ?? 75 ?? ?? 83 ?? 08 ?? 8D ?? 24 ?? 00 00 00 ?? 3B ?? 75 ?? EB ?? ?? 8B ?? ?? 8B ?? 24 ?? 00 00 00 ?? 8B ?? ?? ?? ?? ?? ?? 89 ?? EC 02 00 00 ?? 8B ?? B8 06 00 00 ?? 85
alloc(newmem,$1000,INJECT_SINGLE_QUEST_VIEWER)
alloc(INJECT_SINGLE_QUEST_VIEWERo, $6)
label(code)
label(return)
INJECT_SINGLE_QUEST_VIEWERo:
readmem(INJECT_SINGLE_QUEST_VIEWER, $6)
label(i_base_quest_addr)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: movzx eax,byte ptr [rbp+rdx*8+0A]
// new injection: movzx r9d,byte ptr [r14+rdx*8+0A]
// register RAX -> R9
// register RBP -> R14
// 1 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
push r15
// AOBMaker was: lea r15, [rbp+rdx*8]
lea r15, [r14+rdx*8]
mov [i_base_quest_addr], r15
pop r15
code:
// movzx r9d,byte ptr [r14+rdx*8+0A]
reassemble(INJECT_SINGLE_QUEST_VIEWER)
jmp return
align 10 cc
i_base_quest_addr:
dq 0
INJECT_SINGLE_QUEST_VIEWER:
jmp newmem
nop 1
return:
registersymbol(INJECT_SINGLE_QUEST_VIEWER INJECT_SINGLE_QUEST_VIEWERo)
registersymbol(i_base_quest_addr)
[DISABLE]
INJECT_SINGLE_QUEST_VIEWER:
readmem(INJECT_SINGLE_QUEST_VIEWERo, $6)
unregistersymbol(INJECT_SINGLE_QUEST_VIEWER INJECT_SINGLE_QUEST_VIEWERo)
dealloc(newmem)
dealloc(INJECT_SINGLE_QUEST_VIEWERo)
unregistersymbol(i_base_quest_addr)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+4271AB
sora_2nd.exe+42712E: BA 9F 85 FB 41 - mov edx,41FB859F
sora_2nd.exe+427133: C7 84 24 A0 00 00 00 08 00 00 00 - mov [rsp+000000A0],00000008
sora_2nd.exe+42713E: 48 8D 0D 04 5F 6E 00 - lea rcx,[sora_2nd.exe+B0D049]
sora_2nd.exe+427145: C7 84 24 A4 00 00 00 E7 B5 A5 28 - mov [rsp+000000A4],28A5B5E7
sora_2nd.exe+427150: C7 84 24 A8 00 00 00 04 00 00 00 - mov [rsp+000000A8],00000004
sora_2nd.exe+42715B: C7 84 24 AC 00 00 00 45 D4 D5 86 - mov [rsp+000000AC],86D5D445
sora_2nd.exe+427166: C7 84 24 B0 00 00 00 02 00 00 00 - mov [rsp+000000B0],00000002
sora_2nd.exe+427171: C7 84 24 B4 00 00 00 29 2C E0 A2 - mov [rsp+000000B4],A2E02C29
sora_2nd.exe+42717C: C7 84 24 B8 00 00 00 20 00 00 00 - mov [rsp+000000B8],00000020
sora_2nd.exe+427187: C7 84 24 BC 00 00 00 A0 88 28 D8 - mov [rsp+000000BC],D82888A0
sora_2nd.exe+427192: E8 E9 3F C3 FF - call sora_2nd.exe+5B180
sora_2nd.exe+427197: 8B CF - mov ecx,edi
sora_2nd.exe+427199: 4C 8D 84 24 A0 00 00 00 - lea r8,[rsp+000000A0]
sora_2nd.exe+4271A1: 44 8B D0 - mov r10d,eax
sora_2nd.exe+4271A4: 48 8D 14 89 - lea rdx,[rcx+rcx*4]
sora_2nd.exe+4271A8: 48 03 D2 - add rdx,rdx
// ---------- INJECTING HERE ----------
sora_2nd.exe+4271AB: 45 0F B6 4C D6 0A - movzx r9d,byte ptr [r14+rdx*8+0A]
// ---------- DONE INJECTING ----------
sora_2nd.exe+4271B1: 49 8B 08 - mov rcx,[r8]
sora_2nd.exe+4271B4: 48 8B D1 - mov rdx,rcx
sora_2nd.exe+4271B7: 48 C1 EA 20 - shr rdx,20
sora_2nd.exe+4271BB: 41 85 C9 - test r9d,ecx
sora_2nd.exe+4271BE: 75 13 - jne sora_2nd.exe+4271D3
sora_2nd.exe+4271C0: 49 83 C0 08 - add r8,08
sora_2nd.exe+4271C4: 48 8D 84 24 C0 00 00 00 - lea rax,[rsp+000000C0]
sora_2nd.exe+4271CC: 4C 3B C0 - cmp r8,rax
sora_2nd.exe+4271CF: 75 E0 - jne sora_2nd.exe+4271B1
sora_2nd.exe+4271D1: EB 03 - jmp sora_2nd.exe+4271D6
sora_2nd.exe+4271D3: 44 8B D2 - mov r10d,edx
sora_2nd.exe+4271D6: 48 8B 9C 24 90 00 00 00 - mov rbx,[rsp+00000090]
sora_2nd.exe+4271DE: 48 8B 05 73 8C 83 00 - mov rax,[sora_2nd.exe+C5FE58]
sora_2nd.exe+4271E5: 44 89 93 EC 02 00 00 - mov [rbx+000002EC],r10d
sora_2nd.exe+4271EC: 48 8B 88 B8 06 00 00 - mov rcx,[rax+000006B8]
sora_2nd.exe+4271F3: 48 85 C9 - test rcx,rcx
}
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+346618
sora_2nd.exe+3465D2: C7 84 24 A8 00 00 00 02 00 00 00 - mov [rsp+000000A8],00000002
sora_2nd.exe+3465DD: C7 84 24 AC 00 00 00 29 2C E0 A2 - mov [rsp+000000AC],A2E02C29
sora_2nd.exe+3465E8: C7 84 24 B0 00 00 00 20 00 00 00 - mov [rsp+000000B0],00000020
sora_2nd.exe+3465F3: C7 84 24 B4 00 00 00 A0 88 28 D8 - mov [rsp+000000B4],D82888A0
sora_2nd.exe+3465FE: E8 5D C1 D2 FF - call sora_2nd.exe+72760
sora_2nd.exe+346603: 41 8B CF - mov ecx,r15d
sora_2nd.exe+346606: 4C 8D 84 24 98 00 00 00 - lea r8,[rsp+00000098]
sora_2nd.exe+34660E: 44 8B C8 - mov r9d,eax
sora_2nd.exe+346611: 48 8D 14 89 - lea rdx,[rcx+rcx*4]
sora_2nd.exe+346615: 48 03 D2 - add rdx,rdx
// ---------- INJECTING HERE ----------
sora_2nd.exe+346618: 0F B6 44 D5 0A - movzx eax,byte ptr [rbp+rdx*8+0A]
// ---------- DONE INJECTING ----------
sora_2nd.exe+34661D: 0F 1F 00 - nop dword ptr [rax]
sora_2nd.exe+346620: 49 8B 08 - mov rcx,[r8]
sora_2nd.exe+346623: 85 C1 - test ecx,eax
sora_2nd.exe+346625: 75 13 - jne sora_2nd.exe+34663A
sora_2nd.exe+346627: 49 83 C0 08 - add r8,08
sora_2nd.exe+34662B: 48 8D 8C 24 B8 00 00 00 - lea rcx,[rsp+000000B8]
sora_2nd.exe+346633: 4C 3B C1 - cmp r8,rcx
sora_2nd.exe+346636: 75 E8 - jne sora_2nd.exe+346620
sora_2nd.exe+346638: EB 07 - jmp sora_2nd.exe+346641
sora_2nd.exe+34663A: 4C 8B C9 - mov r9,rcx
}
162
"使用：查看委託"
8000FF
1
163
"Usage: View quests"
8000FF
1
164
"base"
1
0
808080
8 Bytes
i_base_quest_addr
165
"進捗ステータス / Status"
Quest.StatusID
0
FF8080
Byte
i_base_quest_addr
A
166
"報告フラグ / Reported"
Quest.Completed
0
FF8080
Byte
i_base_quest_addr
B
167
"BPボーナス / Bonus BP"
0
FF8080
Byte
i_base_quest_addr
4C
4052
"Quest log ID list"
0
1
i_base_quest_addr
+C
4051
"#1"
0
FF8080
2 Bytes
+0
4053
"#2"
0
FF8080
2 Bytes
+2
4054
"#3"
0
FF8080
2 Bytes
+4
4055
"#4"
0
FF8080
2 Bytes
+6
4056
"#5"
0
FF8080
2 Bytes
+8
4057
"#6"
0
FF8080
2 Bytes
+A
4058
"#7"
0
FF8080
2 Bytes
+C
4059
"#8"
0
FF8080
2 Bytes
+E
4060
"#9"
0
FF8080
2 Bytes
+10
4061
"#10"
0
FF8080
2 Bytes
+12
4062
"#11"
0
FF8080
2 Bytes
+14
4063
"#12"
0
FF8080
2 Bytes
+16
4064
"#13"
0
FF8080
2 Bytes
+18
4065
"#14"
0
FF8080
2 Bytes
+1A
4066
"#15"
0
FF8080
2 Bytes
+1C
4067
"#16"
0
FF8080
2 Bytes
+1E
4068
"#17"
0
FF8080
2 Bytes
+20
4069
"#18"
0
FF8080
2 Bytes
+22
4070
"#19"
0
FF8080
2 Bytes
+24
4071
"#20"
0
FF8080
2 Bytes
+26
4072
"#21"
0
FF8080
2 Bytes
+28
4073
"#22"
0
FF8080
2 Bytes
+2A
4074
"#23"
0
FF8080
2 Bytes
+2C
4075
"#24"
0
FF8080
2 Bytes
+2E
4076
"#25"
0
FF8080
2 Bytes
+30
4077
"#26"
0
FF8080
2 Bytes
+32
4078
"#27"
0
FF8080
2 Bytes
+34
4079
"#28"
0
FF8080
2 Bytes
+36
4080
"#29"
0
FF8080
2 Bytes
+38
4081
"#30"
0
FF8080
2 Bytes
+3A
4082
"#31"
0
FF8080
2 Bytes
+3C
4083
"#32"
0
FF8080
2 Bytes
+3E
168
"クエスト全進捗データ取得 / Get all quests progress"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/21
}
[ENABLE]
aobscanmodule(INJECT_GET_QUEST_PROGRESS,$process,?? F6 ?? ?? 0A 04 74 ?? 0F B6)
// raw AOB: 48 63 C1 4C 89 74 24 08 4C 89 3C 24 48 8D 0C 80 48 03 C9 44 8B 74 CB 48 44 8B 7C CB 44 48 8B 1D ?? ?? ?? ?? 41 8B CE 0F AF CA 49 03 CF 0F B7 04 29 66 41 3B C4 73 ?? 4C 8D 04 80 4D 03 C0 42 F6 44 C3 0A 04 74 ?? 0F B6 4C 29 28 42 0F B7 44 C3 4C 03 C8 41 01 0B FF C2 3B D7 72 ?? 4C 8B 3C 24 4C 8B 74 24 08 4C 8B 64 24 38 48 8B 6C 24 28 48 8B 15 ?? ?? ?? ?? 48 8B 7C 24 30 48 8B 5C 24 20 8B 8A 48 11 01 00
// injection point AOB: ?? F6 ?? ?? 0A 04 74 ?? 0F B6 ?? 29 28 ?? 0F B7 ?? C3 4C 03 ?? ?? 01 ?? FF ?? 3B ?? 72 ?? ?? 8B ?? 24 ?? 8B ?? 24 ?? ?? 8B ?? 24 ?? ?? 8B ?? ?? ?? ?? 8B ?? ?? ?? ?? ?? ?? 8B ?? 24 ?? ?? 8B ?? 24 ?? 8B ?? 48 11 01 00
alloc(newmem,$1000,INJECT_GET_QUEST_PROGRESS)
alloc(INJECT_GET_QUEST_PROGRESSo, $6)
label(code)
label(return)
INJECT_GET_QUEST_PROGRESSo:
readmem(INJECT_GET_QUEST_PROGRESS, $6)
label(i_base_quest_data_addrs)
newmem:
// AOBMaker migration - what AOBMaker changed below
// old injection: test byte ptr [rdi+rcx*8+0A],04
// new injection: test byte ptr [rbx+r8*8+0A],04
// register RDI -> RBX
// register RCX -> R8
// 1 changed line(s) carry a '// AOBMaker was: ...' note above them holding the code before the change.
// To get this script without them, untick 'Note the old code' and migrate again.
// To remove them from this copy in Notepad++: open Replace (Ctrl+H), Search Mode to
// 'Regular expression', leave '. matches newline' UNCHECKED, leave 'Replace with'
// empty, then press Replace All. Copy the pattern from the next line, after the slashes:
// ^[ \t]*// AOBMaker was:[^\r\n]*\R?
// Replace All covers the whole file, so with a .CT open it runs over every script
// in the table. Press Ctrl+Z if the line count drops by more than the note count.
// Read the diff before you enable this. AOBMaker proposes, it does not verify.
// AOBMaker migration end
push r15
push r14
push r13
xor r13, r13
// AOBMaker was: lea r15, [rdi+rcx*8]
lea r15, [rbx+r8*8]
loop1:
mov r14, i_base_quest_data_addrs
lea r14, [r14+r13*8]
cmp [r14], r15
je endp
cmp qword ptr [r14], 0
jne @F
//write data
mov [r14], r15
jmp endp
@@:
inc r13
cmp r13, #99
jae endp
jmp loop1
endp:
pop r13
pop r14
pop r15
code:
// test byte ptr [rbx+r8*8+0A],04
reassemble(INJECT_GET_QUEST_PROGRESS)
jmp return
align 10 cc
i_base_quest_data_addrs:
dq 0
align 400 0 0
db 0
INJECT_GET_QUEST_PROGRESS:
jmp newmem
nop 1
return:
registersymbol(INJECT_GET_QUEST_PROGRESS INJECT_GET_QUEST_PROGRESSo)
registersymbol(i_base_quest_data_addrs)
[DISABLE]
INJECT_GET_QUEST_PROGRESS:
readmem(INJECT_GET_QUEST_PROGRESSo, $6)
unregistersymbol(INJECT_GET_QUEST_PROGRESS INJECT_GET_QUEST_PROGRESSo)
dealloc(newmem)
dealloc(INJECT_GET_QUEST_PROGRESSo)
unregistersymbol(i_base_quest_data_addrs)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+433D0B
sora_2nd.exe+433CCD: 48 63 C1 - movsxd rax,ecx
sora_2nd.exe+433CD0: 4C 89 74 24 08 - mov [rsp+08],r14
sora_2nd.exe+433CD5: 4C 89 3C 24 - mov [rsp],r15
sora_2nd.exe+433CD9: 48 8D 0C 80 - lea rcx,[rax+rax*4]
sora_2nd.exe+433CDD: 48 03 C9 - add rcx,rcx
sora_2nd.exe+433CE0: 44 8B 74 CB 48 - mov r14d,[rbx+rcx*8+48]
sora_2nd.exe+433CE5: 44 8B 7C CB 44 - mov r15d,[rbx+rcx*8+44]
sora_2nd.exe+433CEA: 48 8B 1D 1F C1 82 00 - mov rbx,[sora_2nd.exe+C5FE10]
sora_2nd.exe+433CF1: 41 8B CE - mov ecx,r14d
sora_2nd.exe+433CF4: 0F AF CA - imul ecx,edx
sora_2nd.exe+433CF7: 49 03 CF - add rcx,r15
sora_2nd.exe+433CFA: 0F B7 04 29 - movzx eax,word ptr [rcx+rbp]
sora_2nd.exe+433CFE: 66 41 3B C4 - cmp ax,r12w
sora_2nd.exe+433D02: 73 1F - jae sora_2nd.exe+433D23
sora_2nd.exe+433D04: 4C 8D 04 80 - lea r8,[rax+rax*4]
sora_2nd.exe+433D08: 4D 03 C0 - add r8,r8
// ---------- INJECTING HERE ----------
sora_2nd.exe+433D0B: 42 F6 44 C3 0A 04 - test byte ptr [rbx+r8*8+0A],04
// ---------- DONE INJECTING ----------
sora_2nd.exe+433D11: 74 10 - je sora_2nd.exe+433D23
sora_2nd.exe+433D13: 0F B6 4C 29 28 - movzx ecx,byte ptr [rcx+rbp+28]
sora_2nd.exe+433D18: 42 0F B7 44 C3 4C - movzx eax,word ptr [rbx+r8*8+4C]
sora_2nd.exe+433D1E: 03 C8 - add ecx,eax
sora_2nd.exe+433D20: 41 01 0B - add [r11],ecx
sora_2nd.exe+433D23: FF C2 - inc edx
sora_2nd.exe+433D25: 3B D7 - cmp edx,edi
sora_2nd.exe+433D27: 72 C8 - jb sora_2nd.exe+433CF1
sora_2nd.exe+433D29: 4C 8B 3C 24 - mov r15,[rsp]
sora_2nd.exe+433D2D: 4C 8B 74 24 08 - mov r14,[rsp+08]
sora_2nd.exe+433D32: 4C 8B 64 24 38 - mov r12,[rsp+38]
sora_2nd.exe+433D37: 48 8B 6C 24 28 - mov rbp,[rsp+28]
sora_2nd.exe+433D3C: 48 8B 15 E5 C0 82 00 - mov rdx,[sora_2nd.exe+C5FE28]
sora_2nd.exe+433D43: 48 8B 7C 24 30 - mov rdi,[rsp+30]
sora_2nd.exe+433D48: 48 8B 5C 24 20 - mov rbx,[rsp+20]
sora_2nd.exe+433D4D: 8B 8A 48 11 01 00 - mov ecx,[rdx+00011148]
}
{
sora_1st:
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+352ACC
sora_2nd.exe+352AA4: 44 8B 7C CF 44 - mov r15d,[rdi+rcx*8+44]
sora_2nd.exe+352AA9: 48 8B 3D 70 C2 5A 00 - mov rdi,[sora_2nd.exe+8FED20]
sora_2nd.exe+352AB0: 44 8B C5 - mov r8d,ebp
sora_2nd.exe+352AB3: 44 0F AF C2 - imul r8d,edx
sora_2nd.exe+352AB7: 4D 03 C7 - add r8,r15
sora_2nd.exe+352ABA: 41 0F B7 04 18 - movzx eax,word ptr [r8+rbx]
sora_2nd.exe+352ABF: 66 41 3B C4 - cmp ax,r12w
sora_2nd.exe+352AC3: 73 1E - jae sora_2nd.exe+352AE3
sora_2nd.exe+352AC5: 48 8D 0C 80 - lea rcx,[rax+rax*4]
sora_2nd.exe+352AC9: 48 03 C9 - add rcx,rcx
// ---------- INJECTING HERE ----------
sora_2nd.exe+352ACC: F6 44 CF 0A 04 - test byte ptr [rdi+rcx*8+0A],04
// ---------- DONE INJECTING ----------
sora_2nd.exe+352AD1: 74 10 - je sora_2nd.exe+352AE3
sora_2nd.exe+352AD3: 0F B7 4C CF 4C - movzx ecx,word ptr [rdi+rcx*8+4C]
sora_2nd.exe+352AD8: 41 0F B6 44 18 28 - movzx eax,byte ptr [r8+rbx+28]
sora_2nd.exe+352ADE: 03 C8 - add ecx,eax
sora_2nd.exe+352AE0: 41 01 0B - add [r11],ecx
sora_2nd.exe+352AE3: FF C2 - inc edx
sora_2nd.exe+352AE5: 3B D6 - cmp edx,esi
sora_2nd.exe+352AE7: 72 C7 - jb sora_2nd.exe+352AB0
sora_2nd.exe+352AE9: 4C 8B 3C 24 - mov r15,[rsp]
sora_2nd.exe+352AED: 4C 8B 64 24 08 - mov r12,[rsp+08]
}
169
"使用：向公會任務NPC回報"
8000FF
1
170
"Usage: report to guild quests NPC"
8000FF
1
171
"base"
1
0
808080
8 Bytes
i_base_quest_data_addrs
172
"クエスト進行状況リストを生成 / Generate quests status"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
closeLuaEngine2()
-- ====== 可調參數 ======
local PARENT_NAME = "+Quest List (削除不可 / do not delete this)"
local BASE_SYM = "i_base_quest_data_addrs" -- 這裡存放的是 指標陣列 的起始位址
local PTR_COUNT = 99 -- 一共 99 組
local PTR_STRIDE = 0x8 -- 每個指標 8 bytes（64-bit）
-- 顏色（交錯上色，方便閱讀）
local evenColor = 0xFF8000
local oddColor = 0xAA8044
-- ====== 欄位位移定義 ======
local OFF_QUEST_STATUS = 0x0A -- 1 byte
local OFF_COMPLETED = 0x0B -- 1 byte
local OFF_BONUS_BP = 0x4C -- 2 bytes
local OFF_UNKNOWN_04 = 0x04 -- 1 byte
local OFF_QUEST_TYPE = 0x05 -- 1 byte
-- Quest log 子區間：0x0C ~ 0x4A，步長 2
local LOG_BEGIN = 0x0C
local LOG_END = 0x4A
local LOG_STEP = 0x02
local addressList = getAddressList()
-- 讀出指標陣列起點位址（這裡 BASE_SYM 本身是個位址，裡面每 8 bytes 存一個指標）
local baseAddr = getAddress(BASE_SYM)
if not baseAddr or baseAddr == 0 then
print("Read error: cannot resolve symbol '" .. BASE_SYM .. "'")
return
end
-- 小工具：建立單一記錄
local function addRec(desc, addr, vt, parent, opts)
local r = addressList.createMemoryRecord()
r.Description = desc
r.Address = string.format("%X", addr or 0)
r.Vartype = vt
r.Parent = parent
if opts then
if opts.hex ~= nil then r.ShowAsHex = opts.hex end
if opts.color then r.Color = opts.color end
if opts.ddLinked then r.DropDownLinked = opts.ddLinked end
if opts.ddMemrec then r.DropDownLinkedMemrec = opts.ddMemrec end
end
return r
end
synchronize(function()
-- 取得/建立父節點
local parent = addressList.getMemoryRecordByDescription(PARENT_NAME)
if not parent then
parent = addressList.createMemoryRecord()
parent.Description = PARENT_NAME
parent.IsGroupHeader = true
parent.Options = "[moHideChildren]"
end
-- 清掉舊子節點
for i = addressList.Count - 1, 0, -1 do
local mr = addressList[i]
if mr.Parent == parent then mr.delete() end
end
-- 逐筆讀取指標並建立節點
for n = 0, PTR_COUNT - 1 do
-- 讀出第 n 筆任務資料指標
local ptrSlotAddr = baseAddr + (PTR_STRIDE * n)
local questPtr = readPointer(ptrSlotAddr) or 0
-- 外層 Row
local row = addressList.createMemoryRecord()
row.Description = string.format("Row[%03d]", n + 1)
row.IsGroupHeader = true
row.Parent = parent
row.Color = (n % 2 == 0) and evenColor or oddColor
-- === 基本欄位 ===
-- Quest status (1 byte)
addRec("進捗ステータス / Status", questPtr + OFF_QUEST_STATUS, vtByte, row, {ddLinked = true, ddMemrec = "Quest.StatusID"})
-- 讀任務狀態 (byte)
row.Options = "[moHideChildren,moDeactivateChildrenAsWell]"
local statusVal = readBytes(questPtr + OFF_QUEST_STATUS, 1, false) or 0
if statusVal == 0 then
row.Collapsed = true -- 預設收合
row.Active = false
else
row.Collapsed = false -- 預設展開
row.Active = true
end
-- Completed or not (1 byte)
addRec("報告フラグ / Reported", questPtr + OFF_COMPLETED, vtByte, row, {ddLinked = true, ddMemrec = "Quest.Completed"})
-- Bonus BP (2 bytes)
addRec("BPボーナス / Bonus BP", questPtr + OFF_BONUS_BP, vtWord, row, {color = row.Color})
-- Unknown @0x04 (1 byte)
--addRec("Unknown (0x04)", questPtr + OFF_UNKNOWN_04, vtByte, row)
-- Quest type? @0x05 (1 byte)
addRec("クエストタイプ? / Quest type?", questPtr + OFF_QUEST_TYPE, vtByte, row)
-- === Quest log 子節點（預設收合） ===
local logGroup = addressList.createMemoryRecord()
logGroup.Description = "依頼履歴 / Quest log"
logGroup.IsGroupHeader = true
logGroup.Parent = row
logGroup.Options = "[moHideChildren]" -- 允許收合
logGroup.Active = false -- 預設收合
logGroup.Color = (n % 2 == 0) and evenColor or oddColor
-- 0x0C ~ 0x4A，每 2 bytes 一筆（vtWord）
local idx = 1
for off = LOG_BEGIN, LOG_END, LOG_STEP do
addRec(string.format("log ID %d", idx), questPtr + off, vtWord, logGroup, {ddLinked = true, ddMemrec = "Quest.LogID"})
idx = idx + 1
end
end
parent.IsExpanded = true
end)
print(string.format("%d quest rows built to '%s'.", PTR_COUNT, PARENT_NAME))
closeLuaEngine()
[DISABLE]
{$lua}
if syntaxcheck then return end
local PARENT_NAME = "+Quest List (削除不可 / do not delete this)"
local addressList = getAddressList()
synchronize(function()
local parent = addressList.getMemoryRecordByDescription(PARENT_NAME)
if not parent then
print("Cannot find parent node: " .. PARENT_NAME)
return
end
for i = addressList.Count - 1, 0, -1 do
local mr = addressList[i]
if mr.Parent == parent then mr.delete() end
end
parent.Active = false
end)
print("Quest nodes cleared.")
closeLuaEngine()
173
""base" 不得為0 / "base" cannot be 0"
8000FF
1
174
"+Quest List (削除不可 / do not delete this)"
1
260
"視点切替 / カメラ切替 / Change POV [orig. credit to amorrow28, Sora_1st code]"
1
259
"有効化 / Enable change POV [num 0]"
Auto Assembler Script
[ENABLE]
// ========== Configuration Variables ==========
globalalloc(speedModifier,8)
speedModifier:
dd (float)3.0
globalalloc(useMouse,8)
useMouse:
dd (float)1.0
globalalloc(mouseSensitivity,8)
mouseSensitivity:
dd (float)8.0
// ========== AOB Scans ==========
aobscanmodule(cameracoordinates_aob,$process,?? 8B ?? 90 06 00 00 ?? 8B ?? 3E C8)
// raw AOB: F3 44 0F 58 C0 F3 0F 58 F9 F3 0F 58 F2 F3 44 0F 58 54 24 7C F3 44 0F 58 E8 F3 44 0F 58 E1 41 B7 01 F3 44 0F 58 DA 48 83 C3 40 48 3B DE 75 ?? 8B 87 34 07 00 00 D1 E8 4C 8B 15 ?? ?? ?? ?? A8 01 0F 85 ?? ?? ?? ?? 48 8B 8F 90 06 00 00 41 8B 84 3E C8 01 00 00 89 41 08 41 8B 84 3E CC 01 00 00 89 41 0C 41 8B 84 3E D0 01 00 00 89 41 10 48 8B 8F 90 06 00 00 41 8B 84 3E 04 02 00 00 89 41 18 41 8B 84 3E 08 02 00 00 89 41 1C 41 8B 84 3E 0C 02 00 00 89 41 20 48 8B 8F 90 06 00 00 41 8B 84 3E 40 02 00 00 89 41 28
// injection point AOB: ?? 8B ?? 90 06 00 00 ?? 8B ?? 3E C8 01 00 00 89 ?? 08 ?? 8B ?? 3E CC 01 00 00 89 ?? 0C ?? 8B ?? 3E D0 01 00 00 89 ?? 10 ?? 8B ?? 90 06 00 00 ?? 8B ?? 3E 04 02 00 00 89 ?? 18 ?? 8B ?? 3E 08 02 00 00 89 ?? 1C ?? 8B ?? 3E 0C 02 00 00 89 ?? 20 ?? 8B ?? 90 06 00 00 ?? 8B ?? 3E 40 02 00 00 89 ?? 28
aobscanmodule(moveplayer_aob,$process,E8 ?? ?? ?? ?? ?? 8B ?? ?? 0F 28 ?? F3 0F 58 ?? B8)
// raw AOB: 48 8B 86 90 16 01 00 48 89 B8 D8 02 00 00 48 8B 8E 90 16 01 00 48 8B 01 FF 50 10 EB ?? 4C 8D 0D ?? ?? ?? ?? 4C 89 74 24 20 41 B8 C0 01 00 00 48 8D 15 ?? ?? ?? ?? B9 03 00 00 00 E8 ?? ?? ?? ?? 48 8B CB E8 ?? ?? ?? ?? 48 8D 8B 10 01 00 00 41 0F 28 CA E8 ?? ?? ?? ?? 48 8B 03 41 0F 28 C2 F3 0F 58 83 B8 02 00 00 48 8B CB F3 0F 11 83 B8 02 00 00 FF 50 18 44 0F 28 AC 24 80 01 00 00 0F 28 B4 24 F0 01 00 00 4C 8B BC 24 00 02 00 00 4C 8B B4 24 08 02 00 00 4C 8B A4 24 18 02 00 00 48 8B B4 24 50 02 00 00 84 C0 75 ?? 83 BB 98 00 00 00 03 74
// injection point AOB: E8 ?? ?? ?? ?? ?? 8B ?? ?? 0F 28 ?? F3 0F 58 ?? B8 02 00 00 ?? 8B ?? F3 0F 11 ?? B8 02 00 00 FF ?? 18 ?? 0F 28 ?? ?? ?? ?? 00 00 0F 28 ?? ?? ?? ?? 00 00 ?? 8B ?? 24 ?? ?? 00 00 ?? 8B ?? 24 ?? ?? 00 00 ?? 8B ?? 24 ?? ?? 00 00 ?? 8B ?? 24 ?? ?? 00 00 84 ?? 75 ?? 83 ?? 98 00 00 00 03 74
alloc(moveplayer_aobo, $5)
moveplayer_aobo:
readmem(moveplayer_aob, $5)
// ========== Memory Allocations ==========
alloc(newmem,$100,cameracoordinates_aob)
alloc(cameracoordinates,$100)
alloc(tempBuffer,$80)
registersymbol(cameracoordinates_aob)
registersymbol(moveplayer_aob)
registersymbol(moveplayer_aobo)
registersymbol(cameracoordinates)
registersymbol(tempBuffer)
label(code)
label(return)
// ========== Camera Hook ==========
newmem:
code:
mov rcx,[rdi+00000690]
mov [cameracoordinates],rcx
jmp return
cameracoordinates_aob:
jmp newmem
nop 2
return:
// ========== NOP the camera update instructions ==========
// inject pt: sora_2nd.exe+1278EA - 48 8B 8F 90060000 - mov rcx,[rdi+00000690]
// nop sora_2nd.exe+1278F9 - 89 41 08 - mov [rcx+08],eax
cameracoordinates_aob+F:
nop 3
// sora_2nd.exe+127904 - 89 41 0C - mov [rcx+0C],eax
cameracoordinates_aob+1A:
nop 3
// sora_2nd.exe+12790F - 89 41 10 - mov [rcx+10],eax
cameracoordinates_aob+25:
nop 3
// sora_2nd.exe+127921 - 89 41 18 - mov [rcx+18],eax
cameracoordinates_aob+37:
nop 3
// sora_2nd.exe+12792C - 89 41 1C - mov [rcx+1C],eax
cameracoordinates_aob+42:
nop 3
// sora_2nd.exe+127937 - 89 41 20 - mov [rcx+20],eax
cameracoordinates_aob+4D:
nop 3
// sora_2nd.exe+127949 - 89 41 28 - mov [rcx+28],eax
cameracoordinates_aob+5F:
nop 3
// sora_2nd.exe+127954 - 89 41 2C - mov [rcx+2C],eax
cameracoordinates_aob+6A:
nop 3
// sora_2nd.exe+12795F - 89 41 30 - mov [rcx+30],eax
cameracoordinates_aob+75:
nop 3
// ========== Disable Player Movement ==========
moveplayer_aob:
nop 5
// ========== Lua Camera Control ==========
{$lua}
if syntaxcheck then return end
function checkKeys()
if not (getForegroundProcess() == getOpenedProcessID()) then return end
if (getAddressSafe("[cameracoordinates]")) then
-- Read configuration
local speed = readFloat("speedModifier")
local use_mouse = readFloat("useMouse")
local mouse_speed = readFloat("mouseSensitivity")
-- Camera Coordinates
local camx = readFloat("[cameracoordinates]+08")
local camy = readFloat("[cameracoordinates]+10")
local camz = readFloat("[cameracoordinates]+0C")
-- Target Coordinates
local targetx = readFloat("[cameracoordinates]+18")
local targety = readFloat("[cameracoordinates]+20")
local targetz = readFloat("[cameracoordinates]+1C")
-- Validate coordinates
if (targetz == nil) or (targetz == camz and targetx == camx and targety == camy) then
return
end
-- Mouse initialization
local new_mouse_x, new_mouse_y = getMousePos()
local mouse_loaded = readInteger("cameracoordinates+38")
if not (mouse_loaded == 1) and (use_mouse == 1) then
new_mouse_x = getScreenWidth() / 2
new_mouse_y = getScreenHeight() / 2
setMousePos(getScreenWidth() / 2, getScreenHeight() / 2)
writeInteger("cameracoordinates+38", 1)
end
-- Mouse movement delta
local mouse_move_x = new_mouse_x - getScreenWidth() / 2
local mouse_move_y = new_mouse_y - getScreenHeight() / 2
-- Calculate camera angles
local camdist = ((targetx - camx)^2 + (targety - camy)^2 + (targetz - camz)^2)^0.5
local tilt = math.atan2(camz - targetz, ((targetx - camx)^2 + (targety - camy)^2)^0.5)
local pan = math.atan2(targetx - camx, targety - camy) + math.rad(180)
-- Trigonometry
local siny = math.sin(pan)
local cosy = math.cos(pan)
local sinp = math.sin(tilt)
local cosp = math.cos(tilt)
-- Movement speed
local movespeed = speed * 0.03
-- Forward
if isKeyPressed(VK_W) then
camx = camx - (siny * movespeed)
camy = camy - (cosy * movespeed)
camz = camz - (sinp * movespeed)
end
-- Left
if isKeyPressed(VK_A) then
camx = camx + (math.sin(pan - math.rad(90)) * movespeed)
camy = camy + (math.cos(pan - math.rad(90)) * movespeed)
end
-- Back
if isKeyPressed(VK_S) then
camx = camx + (siny * movespeed)
camy = camy + (cosy * movespeed)
camz = camz + (sinp * movespeed)
end
-- Right
if isKeyPressed(VK_D) then
camx = camx - (math.sin(pan - math.rad(90)) * movespeed)
camy = camy - (math.cos(pan - math.rad(90)) * movespeed)
end
-- Diagonal movement combinations
if isKeyPressed(VK_W) and isKeyPressed(VK_D) then
camx = camx - (math.sin(pan - math.rad(45)) * movespeed)
camy = camy - (math.cos(pan - math.rad(45)) * movespeed)
camz = camz - (sinp * movespeed)
end
if isKeyPressed(VK_W) and isKeyPressed(VK_A) then
camx = camx - (math.sin(pan + math.rad(45)) * movespeed)
camy = camy - (math.cos(pan + math.rad(45)) * movespeed)
camz = camz - (sinp * movespeed)
end
if isKeyPressed(VK_S) and isKeyPressed(VK_A) then
camx = camx + (math.sin(pan - math.rad(45)) * movespeed)
camy = camy + (math.cos(pan - math.rad(45)) * movespeed)
camz = camz + (sinp * movespeed)
end
if isKeyPressed(VK_S) and isKeyPressed(VK_D) then
camx = camx + (math.sin(pan + math.rad(45)) * movespeed)
camy = camy + (math.cos(pan + math.rad(45)) * movespeed)
camz = camz + (sinp * movespeed)
end
-- Vertical movement
if isKeyPressed(VK_R) then
camz = camz + (speed * 0.02)
end
if isKeyPressed(VK_F) then
camz = camz - (speed * 0.02)
end
-- Camera rotation
if isKeyPressed(VK_L) then
pan = pan - speed * 0.01
end
if isKeyPressed(VK_J) then
pan = pan + speed * 0.01
end
if isKeyPressed(VK_I) then
tilt = math.max(tilt - speed * 0.01, math.rad(-89.5))
end
if isKeyPressed(VK_K) then
tilt = math.min(tilt + speed * 0.01, math.rad(89.5))
end
-- Mouse rotation
if (use_mouse == 1) then
if not(mouse_move_y == 0) then
tilt = math.min(math.max(tilt + mouse_move_y * mouse_speed * 0.0003, math.rad(-89.5)), math.rad(89.5))
end
if not(mouse_move_x == 0) then
pan = pan - mouse_move_x * mouse_speed * 0.0003
end
setMousePos(getScreenWidth() / 2, getScreenHeight() / 2)
end
-- Copy original memory to temp buffer
copyMemory("[cameracoordinates]+08", 48, "tempBuffer")
-- Write new values to temp buffer
writeFloat("tempBuffer+00", camx)
writeFloat("tempBuffer+08", camy)
writeFloat("tempBuffer+04", camz)
writeFloat("tempBuffer+10", camx - (camdist * math.cos(tilt) * math.sin(pan)))
writeFloat("tempBuffer+18", camy - (camdist * math.cos(tilt) * math.cos(pan)))
writeFloat("tempBuffer+14", camz - (camdist * math.sin(tilt)))
-- Anti-vomit settings
writeFloat("tempBuffer+20", 0)
writeFloat("tempBuffer+24", 1)
writeFloat("tempBuffer+28", 0)
-- Copy buffer back to game memory
copyMemory("tempBuffer", 48, "[cameracoordinates]+08")
-- Speed modifiers
if isKeyPressed(VK_F3) then
writeFloat("speedModifier", 12)
elseif isKeyPressed(VK_F2) then
writeFloat("speedModifier", 6)
elseif isKeyPressed(VK_F1) then
writeFloat("speedModifier", 0.5)
else
writeFloat("speedModifier", 3)
end
-- Mouse toggle
if isKeyPressed(VK_PRIOR) then
writeFloat("useMouse", 1)
elseif isKeyPressed(VK_NEXT) then
writeFloat("useMouse", 0)
writeInteger("cameracoordinates+38", 0)
end
end
end
-- Timer setup
t = createTimer(nil)
timer_setInterval(t, 10)
timer_onTimer(t, checkKeys)
timer_setEnabled(t, true)
{$asm}
[DISABLE]
{$lua}
if syntaxcheck then return end
timer_setEnabled(t, false)
{$asm}
// Restore original code
cameracoordinates_aob:
db 48 8B 8F 90 06 00 00 41 8B 84 3E C8 01 00 00 89 41 08 41 8B 84 3E CC 01
db 00 00 89 41 0C 41 8B 84 3E D0 01 00 00 89 41 10 48 8B 8F 90 06 00 00 41
db 8B 84 3E 04 02 00 00 89 41 18 41 8B 84 3E 08 02 00 00 89 41 1C 41 8B 84
db 3E 0C 02 00 00 89 41 20 48 8B 8F 90 06 00 00 41 8B 84 3E 40 02 00 00 89
db 41 28 41 8B 84 3E 44 02 00 00 89 41 2C 41 8B 84 3E 48 02 00 00 89 41 30
moveplayer_aob:
readmem(moveplayer_aobo, $5)
// Clean up
unregistersymbol(cameracoordinates_aob)
unregistersymbol(moveplayer_aob)
unregistersymbol(moveplayer_aobo)
unregistersymbol(cameracoordinates)
unregistersymbol(tempBuffer)
dealloc(cameracoordinates)
dealloc(newmem)
dealloc(tempBuffer)
dealloc(moveplayer_aobo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+58022A
sora_2nd.exe+57FC40: 4C 8B DC - mov r11,rsp
sora_2nd.exe+57FC43: 55 - push rbp
sora_2nd.exe+57FC44: 56 - push rsi
sora_2nd.exe+57FC45: 57 - push rdi
sora_2nd.exe+57FC46: 49 8D AB F8 FD FF FF - lea rbp,[r11-208]
sora_2nd.exe+57FC4D: 48 81 EC F0 02 00 00 - sub rsp,2F0
sora_2nd.exe+57FC54: 45 0F 29 93 78 FF FF FF - movaps [r11-88],xmm10
sora_2nd.exe+57FC5C: 48 8B 05 DD 13 67 00 - mov rax,[rel sora_2nd.exe+BF1040]
sora_2nd.exe+57FC63: 48 33 C4 - xor rax,rsp
sora_2nd.exe+57FC66: 48 89 85 20 01 00 00 - mov [rbp+120],rax
sora_2nd.exe+57FC6D: F6 81 A0 00 00 00 01 - test byte [rcx+0A0],1
sora_2nd.exe+57FC74: 49 8B F0 - mov rsi,r8
sora_2nd.exe+57FC77: 44 0F 28 D1 - movaps xmm10,xmm1
sora_2nd.exe+57FC7B: 48 8B F9 - mov rdi,rcx
sora_2nd.exe+57FC7E: 0F 85 57 10 00 00 - jne near sora_2nd.exe+580CDB
sora_2nd.exe+57FC84: 48 8B 81 48 02 00 00 - mov rax,[rcx+248]
sora_2nd.exe+57FC8B: 49 89 5B 20 - mov [r11+20],rbx
sora_2nd.exe+57FC8F: 48 8B 99 40 02 00 00 - mov rbx,[rcx+240]
sora_2nd.exe+57FC96: 4D 89 63 E0 - mov [r11-20],r12
sora_2nd.exe+57FC9A: 4D 89 6B D8 - mov [r11-28],r13
sora_2nd.exe+57FC9E: 4D 89 73 D0 - mov [r11-30],r14
sora_2nd.exe+57FCA2: 4C 8D 34 C3 - lea r14,[rbx+rax*8]
sora_2nd.exe+57FCA6: 4D 89 7B C8 - mov [r11-38],r15
sora_2nd.exe+57FCAA: 45 0F 29 9B 68 FF FF FF - movaps [r11-98],xmm11
sora_2nd.exe+57FCB2: 49 3B DE - cmp rbx,r14
sora_2nd.exe+57FCB5: 74 25 - je short sora_2nd.exe+57FCDC
sora_2nd.exe+57FCB7: 66 0F 1F 84 00 00 00 00 00 - nop word [rax+rax]
sora_2nd.exe+57FCC0: 48 8B 0B - mov rcx,[rbx]
sora_2nd.exe+57FCC3: 4C 8B CE - mov r9,rsi
sora_2nd.exe+57FCC6: 4C 8B C7 - mov r8,rdi
sora_2nd.exe+57FCC9: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FCCD: 48 8B 01 - mov rax,[rcx]
sora_2nd.exe+57FCD0: FF 50 08 - call qword [rax+8]
sora_2nd.exe+57FCD3: 48 83 C3 08 - add rbx,8
sora_2nd.exe+57FCD7: 49 3B DE - cmp rbx,r14
sora_2nd.exe+57FCDA: 75 E4 - jne short sora_2nd.exe+57FCC0
sora_2nd.exe+57FCDC: 48 8D 8F D0 00 00 00 - lea rcx,[rdi+0D0]
sora_2nd.exe+57FCE3: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FCE7: E8 14 5E B9 FF - call sora_2nd.exe+115B00
sora_2nd.exe+57FCEC: 48 8D 8F 0C 01 00 00 - lea rcx,[rdi+10C]
sora_2nd.exe+57FCF3: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FCF7: E8 14 76 BA FF - call sora_2nd.exe+127310
sora_2nd.exe+57FCFC: 48 8D 8F 48 01 00 00 - lea rcx,[rdi+148]
sora_2nd.exe+57FD03: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FD07: E8 F4 5D B9 FF - call sora_2nd.exe+115B00
sora_2nd.exe+57FD0C: 48 8D 8F 84 01 00 00 - lea rcx,[rdi+184]
sora_2nd.exe+57FD13: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FD17: E8 E4 5D B9 FF - call sora_2nd.exe+115B00
sora_2nd.exe+57FD1C: 48 8D 8F FC 01 00 00 - lea rcx,[rdi+1FC]
sora_2nd.exe+57FD23: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FD27: E8 94 78 AB FF - call sora_2nd.exe+375C0
sora_2nd.exe+57FD2C: 48 8D 8F C0 01 00 00 - lea rcx,[rdi+1C0]
sora_2nd.exe+57FD33: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+57FD37: E8 C4 5D B9 FF - call sora_2nd.exe+115B00
sora_2nd.exe+57FD3C: 83 BF A0 00 00 00 00 - cmp dword [rdi+0A0],0
sora_2nd.exe+57FD43: 45 0F 57 DB - xorps xmm11,xmm11
sora_2nd.exe+57FD47: F3 0F 10 8F 68 01 00 00 - movss xmm1,[rdi+168]
sora_2nd.exe+57FD4F: F3 0F 10 9F 70 01 00 00 - movss xmm3,[rdi+170]
sora_2nd.exe+57FD57: F3 0F 10 97 6C 01 00 00 - movss xmm2,[rdi+16C]
sora_2nd.exe+57FD5F: 66 0F 6F 25 D9 FA 5A 00 - movdqa xmm4,[rel sora_2nd.exe+B2F840]
sora_2nd.exe+57FD67: 4C 8B 35 EA 00 6E 00 - mov r14,[rel sora_2nd.exe+C5FE58]
sora_2nd.exe+57FD6E: 48 C7 44 24 34 00 00 00 00 - mov qword [rsp+34],0
sora_2nd.exe+57FD77: C7 44 24 3C 00 00 00 00 - mov dword [rsp+3C],0
sora_2nd.exe+57FD7F: 0F 10 44 24 30 - movups xmm0,[rsp+30]
sora_2nd.exe+57FD84: 48 C7 44 24 20 00 00 00 00 - mov qword [rsp+20],0
sora_2nd.exe+57FD8D: C7 44 24 2C 00 00 00 00 - mov dword [rsp+2C],0
sora_2nd.exe+57FD95: F3 0F 10 C1 - movss xmm0,xmm1
sora_2nd.exe+57FD99: C7 85 D0 00 00 00 00 00 00 00 - mov dword [rbp+0D0],0
sora_2nd.exe+57FDA3: 0F 11 44 24 30 - movups [rsp+30],xmm0
sora_2nd.exe+57FDA8: 48 C7 85 D8 00 00 00 00 00 00 00 - mov qword [rbp+0D8],0
sora_2nd.exe+57FDB3: 0F 10 8D D0 00 00 00 - movups xmm1,[rbp+0D0]
sora_2nd.exe+57FDBA: 66 0F 7F 85 E0 00 00 00 - movdqa [rbp+0E0],xmm0
sora_2nd.exe+57FDC2: 0F 10 44 24 20 - movups xmm0,[rsp+20]
sora_2nd.exe+57FDC7: 0F C6 C9 E1 - shufps xmm1,xmm1,0E1 // signed:-31
sora_2nd.exe+57FDCB: 0F C6 C0 D2 - shufps xmm0,xmm0,0D2 // signed:-46
sora_2nd.exe+57FDCF: F3 0F 10 CA - movss xmm1,xmm2
sora_2nd.exe+57FDD3: 0F C6 C9 E1 - shufps xmm1,xmm1,0E1 // signed:-31
sora_2nd.exe+57FDD7: F3 0F 10 C3 - movss xmm0,xmm3
sora_2nd.exe+57FDDB: 0F C6 C0 C9 - shufps xmm0,xmm0,0C9 // signed:-55
sora_2nd.exe+57FDDF: 0F 11 44 24 20 - movups [rsp+20],xmm0
sora_2nd.exe+57FDE4: 66 0F 7F 85 00 01 00 00 - movdqa [rbp+100],xmm0
sora_2nd.exe+57FDEC: 0F 11 8D D0 00 00 00 - movups [rbp+0D0],xmm1
sora_2nd.exe+57FDF3: 66 0F 7F 8D F0 00 00 00 - movdqa [rbp+0F0],xmm1
sora_2nd.exe+57FDFB: 66 0F 7F A5 10 01 00 00 - movdqa [rbp+110],xmm4
sora_2nd.exe+57FE03: 7D 7B - jge short sora_2nd.exe+57FE80
sora_2nd.exe+57FE05: 49 8D 8E E8 05 00 00 - lea rcx,[r14+5E8]
sora_2nd.exe+57FE0C: 4C 8D 85 10 01 00 00 - lea r8,[rbp+110]
sora_2nd.exe+57FE13: 48 8D 55 C0 - lea rdx,[rbp-40]
sora_2nd.exe+57FE17: E8 94 B3 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FE1C: 4C 8D 85 00 01 00 00 - lea r8,[rbp+100]
sora_2nd.exe+57FE23: 4C 8B D8 - mov r11,rax
sora_2nd.exe+57FE26: 48 8D 55 80 - lea rdx,[rbp-80]
sora_2nd.exe+57FE2A: E8 81 B3 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FE2F: 4C 8D 85 F0 00 00 00 - lea r8,[rbp+0F0]
sora_2nd.exe+57FE36: 4C 8B D0 - mov r10,rax
sora_2nd.exe+57FE39: 48 8D 55 D0 - lea rdx,[rbp-30]
sora_2nd.exe+57FE3D: E8 6E B3 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FE42: 4C 8D 85 E0 00 00 00 - lea r8,[rbp+0E0]
sora_2nd.exe+57FE49: 4C 8B C8 - mov r9,rax
sora_2nd.exe+57FE4C: 48 8D 55 90 - lea rdx,[rbp-70]
sora_2nd.exe+57FE50: E8 5B B3 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FE55: 41 0F 10 11 - movups xmm2,[r9]
sora_2nd.exe+57FE59: 41 0F 10 0A - movups xmm1,[r10]
sora_2nd.exe+57FE5D: 0F 10 18 - movups xmm3,[rax]
sora_2nd.exe+57FE60: 41 0F 10 03 - movups xmm0,[r11]
sora_2nd.exe+57FE64: 0F 29 9D E0 00 00 00 - movaps [rbp+0E0],xmm3
sora_2nd.exe+57FE6B: 0F 29 95 F0 00 00 00 - movaps [rbp+0F0],xmm2
sora_2nd.exe+57FE72: 0F 29 8D 00 01 00 00 - movaps [rbp+100],xmm1
sora_2nd.exe+57FE79: 0F 29 85 10 01 00 00 - movaps [rbp+110],xmm0
sora_2nd.exe+57FE80: 0F 10 87 F0 00 00 00 - movups xmm0,[rdi+0F0]
sora_2nd.exe+57FE87: 44 8B 87 A4 02 00 00 - mov r8d,[rdi+2A4]
sora_2nd.exe+57FE8E: 0F 11 44 24 30 - movups [rsp+30],xmm0
sora_2nd.exe+57FE93: 45 85 C0 - test r8d,r8d
sora_2nd.exe+57FE96: 74 3B - je short sora_2nd.exe+57FED3
sora_2nd.exe+57FE98: 48 8D 95 D0 00 00 00 - lea rdx,[rbp+0D0]
sora_2nd.exe+57FE9F: 48 8B CE - mov rcx,rsi
sora_2nd.exe+57FEA2: E8 A9 25 01 00 - call sora_2nd.exe+592450
sora_2nd.exe+57FEA7: 66 0F 6E 85 D4 00 00 00 - movd xmm0,[rbp+0D4]
sora_2nd.exe+57FEAF: 66 0F 6E 8D D0 00 00 00 - movd xmm1,[rbp+0D0]
sora_2nd.exe+57FEB7: F3 0F 10 64 24 30 - movss xmm4,[rsp+30]
sora_2nd.exe+57FEBD: F3 0F 10 6C 24 34 - movss xmm5,[rsp+34]
sora_2nd.exe+57FEC3: 0F 5B C0 - cvtdq2ps xmm0,xmm0
sora_2nd.exe+57FEC6: 0F 5B C9 - cvtdq2ps xmm1,xmm1
sora_2nd.exe+57FEC9: F3 0F 58 E0 - addss xmm4,xmm0
sora_2nd.exe+57FECD: F3 0F 58 E9 - addss xmm5,xmm1
sora_2nd.exe+57FED1: EB 0C - jmp short sora_2nd.exe+57FEDF
sora_2nd.exe+57FED3: F3 0F 10 6C 24 34 - movss xmm5,[rsp+34]
sora_2nd.exe+57FED9: F3 0F 10 64 24 30 - movss xmm4,[rsp+30]
sora_2nd.exe+57FEDF: F7 87 A0 00 00 00 00 00 01 00 - test dword [rdi+0A0],10000
sora_2nd.exe+57FEE9: 44 0F 29 B4 24 40 02 00 00 - movaps [rsp+240],xmm14
sora_2nd.exe+57FEF2: F3 44 0F 10 35 59 CC 5A 00 - movss xmm14,[rel sora_2nd.exe+B2CB54]
sora_2nd.exe+57FEFB: C7 44 24 2C 00 00 80 3F - mov dword [rsp+2C],3F800000
sora_2nd.exe+57FF03: 0F 84 68 01 00 00 - je near sora_2nd.exe+580071
sora_2nd.exe+57FF09: F3 0F 10 44 24 38 - movss xmm0,[rsp+38]
sora_2nd.exe+57FF0F: 49 8D 8E 28 06 00 00 - lea rcx,[r14+628]
sora_2nd.exe+57FF16: 4C 8D 44 24 20 - lea r8,[rsp+20]
sora_2nd.exe+57FF1B: F3 0F 11 44 24 28 - movss [rsp+28],xmm0
sora_2nd.exe+57FF21: 48 8D 54 24 30 - lea rdx,[rsp+30]
sora_2nd.exe+57FF26: F3 0F 11 64 24 20 - movss [rsp+20],xmm4
sora_2nd.exe+57FF2C: F3 0F 11 6C 24 24 - movss [rsp+24],xmm5
sora_2nd.exe+57FF32: E8 79 B2 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FF37: 66 0F 6F 05 C1 DB 5A 00 - movdqa xmm0,[rel sora_2nd.exe+B2DB00]
sora_2nd.exe+57FF3F: 48 8D 97 2C 01 00 00 - lea rdx,[rdi+12C]
sora_2nd.exe+57FF46: 66 0F 6F 15 B2 DF 5A 00 - movdqa xmm2,[rel sora_2nd.exe+B2DF00]
sora_2nd.exe+57FF4E: 48 8D 4D 60 - lea rcx,[rbp+60]
sora_2nd.exe+57FF52: 66 0F 6F 0D 36 DC 5A 00 - movdqa xmm1,[rel sora_2nd.exe+B2DB90]
sora_2nd.exe+57FF5A: F3 0F 10 18 - movss xmm3,[rax]
sora_2nd.exe+57FF5E: F3 0F 10 60 04 - movss xmm4,[rax+4]
sora_2nd.exe+57FF63: F3 0F 10 68 08 - movss xmm5,[rax+8]
sora_2nd.exe+57FF68: 0F 11 44 24 40 - movups [rsp+40],xmm0
sora_2nd.exe+57FF6D: C7 44 24 2C 00 00 80 3F - mov dword [rsp+2C],3F800000
sora_2nd.exe+57FF75: 0F 10 44 24 20 - movups xmm0,[rsp+20]
sora_2nd.exe+57FF7A: 0F 11 4C 24 50 - movups [rsp+50],xmm1
sora_2nd.exe+57FF7F: F3 0F 10 C3 - movss xmm0,xmm3
sora_2nd.exe+57FF83: 0F C6 C0 E1 - shufps xmm0,xmm0,0E1 // signed:-31
sora_2nd.exe+57FF87: F3 0F 10 C4 - movss xmm0,xmm4
sora_2nd.exe+57FF8B: 0F C6 C0 C6 - shufps xmm0,xmm0,0C6 // signed:-58
sora_2nd.exe+57FF8F: F3 0F 10 C5 - movss xmm0,xmm5
sora_2nd.exe+57FF93: 0F C6 C0 C9 - shufps xmm0,xmm0,0C9 // signed:-55
sora_2nd.exe+57FF97: 0F 11 44 24 20 - movups [rsp+20],xmm0
sora_2nd.exe+57FF9C: 0F 11 44 24 70 - movups [rsp+70],xmm0
sora_2nd.exe+57FFA1: 0F 11 54 24 60 - movups [rsp+60],xmm2
sora_2nd.exe+57FFA6: E8 F5 4A BB FF - call sora_2nd.exe+134AA0
sora_2nd.exe+57FFAB: 48 8D 55 90 - lea rdx,[rbp-70]
sora_2nd.exe+57FFAF: 4C 8B D0 - mov r10,rax
sora_2nd.exe+57FFB2: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+57FFB7: 4C 8D 40 30 - lea r8,[rax+30]
sora_2nd.exe+57FFBB: E8 F0 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FFC0: 4D 8D 42 20 - lea r8,[r10+20]
sora_2nd.exe+57FFC4: 48 8B D8 - mov rbx,rax
sora_2nd.exe+57FFC7: 48 8D 95 D0 00 00 00 - lea rdx,[rbp+0D0]
sora_2nd.exe+57FFCE: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+57FFD3: E8 D8 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FFD8: 4D 8D 42 10 - lea r8,[r10+10]
sora_2nd.exe+57FFDC: 4C 8B D8 - mov r11,rax
sora_2nd.exe+57FFDF: 48 8D 55 E0 - lea rdx,[rbp-20]
sora_2nd.exe+57FFE3: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+57FFE8: E8 C3 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+57FFED: 4D 8B C2 - mov r8,r10
sora_2nd.exe+57FFF0: 48 8D 55 A0 - lea rdx,[rbp-60]
sora_2nd.exe+57FFF4: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+57FFF9: 4C 8B C8 - mov r9,rax
sora_2nd.exe+57FFFC: E8 AF B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580001: 41 0F 10 09 - movups xmm1,[r9]
sora_2nd.exe+580005: 4C 8D 85 10 01 00 00 - lea r8,[rbp+110]
sora_2nd.exe+58000C: 48 8D 55 A0 - lea rdx,[rbp-60]
sora_2nd.exe+580010: 0F 10 00 - movups xmm0,[rax]
sora_2nd.exe+580013: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+580018: 0F 11 4C 24 50 - movups [rsp+50],xmm1
sora_2nd.exe+58001D: 0F 10 0B - movups xmm1,[rbx]
sora_2nd.exe+580020: 0F 11 44 24 40 - movups [rsp+40],xmm0
sora_2nd.exe+580025: 41 0F 10 03 - movups xmm0,[r11]
sora_2nd.exe+580029: 0F 11 4C 24 70 - movups [rsp+70],xmm1
sora_2nd.exe+58002E: 0F 11 44 24 60 - movups [rsp+60],xmm0
sora_2nd.exe+580033: E8 78 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580038: 4C 8D 85 00 01 00 00 - lea r8,[rbp+100]
sora_2nd.exe+58003F: 4C 8B D8 - mov r11,rax
sora_2nd.exe+580042: 48 8D 55 F0 - lea rdx,[rbp-10]
sora_2nd.exe+580046: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+58004B: E8 60 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580050: 4C 8D 85 F0 00 00 00 - lea r8,[rbp+0F0]
sora_2nd.exe+580057: 4C 8B D0 - mov r10,rax
sora_2nd.exe+58005A: 48 8D 55 00 - lea rdx,[rbp]
sora_2nd.exe+58005E: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+580063: E8 48 B1 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580068: 48 8D 55 B0 - lea rdx,[rbp-50]
sora_2nd.exe+58006C: E9 22 01 00 00 - jmp sora_2nd.exe+580193
sora_2nd.exe+580071: 66 0F 6F 05 87 DA 5A 00 - movdqa xmm0,[rel sora_2nd.exe+B2DB00]
sora_2nd.exe+580079: 48 8D 97 2C 01 00 00 - lea rdx,[rdi+12C]
sora_2nd.exe+580080: F3 0F 10 5C 24 38 - movss xmm3,[rsp+38]
sora_2nd.exe+580086: 48 8D 4D 60 - lea rcx,[rbp+60]
sora_2nd.exe+58008A: 66 0F 6F 15 6E DE 5A 00 - movdqa xmm2,[rel sora_2nd.exe+B2DF00]
sora_2nd.exe+580092: 66 0F 6F 0D F6 DA 5A 00 - movdqa xmm1,[rel sora_2nd.exe+B2DB90]
sora_2nd.exe+58009A: 0F 11 44 24 40 - movups [rsp+40],xmm0
sora_2nd.exe+58009F: 0F 10 44 24 20 - movups xmm0,[rsp+20]
sora_2nd.exe+5800A4: 0F 11 4C 24 50 - movups [rsp+50],xmm1
sora_2nd.exe+5800A9: F3 0F 10 C4 - movss xmm0,xmm4
sora_2nd.exe+5800AD: 0F C6 C0 E1 - shufps xmm0,xmm0,0E1 // signed:-31
sora_2nd.exe+5800B1: F3 0F 10 C5 - movss xmm0,xmm5
sora_2nd.exe+5800B5: 0F C6 C0 C6 - shufps xmm0,xmm0,0C6 // signed:-58
sora_2nd.exe+5800B9: F3 0F 10 C3 - movss xmm0,xmm3
sora_2nd.exe+5800BD: 0F C6 C0 C9 - shufps xmm0,xmm0,0C9 // signed:-55
sora_2nd.exe+5800C1: 0F 11 44 24 20 - movups [rsp+20],xmm0
sora_2nd.exe+5800C6: 0F 11 44 24 70 - movups [rsp+70],xmm0
sora_2nd.exe+5800CB: 0F 11 54 24 60 - movups [rsp+60],xmm2
sora_2nd.exe+5800D0: E8 CB 49 BB FF - call sora_2nd.exe+134AA0
sora_2nd.exe+5800D5: 48 8D 55 B0 - lea rdx,[rbp-50]
sora_2nd.exe+5800D9: 4C 8B D0 - mov r10,rax
sora_2nd.exe+5800DC: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+5800E1: 4C 8D 40 30 - lea r8,[rax+30]
sora_2nd.exe+5800E5: E8 C6 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5800EA: 4D 8D 42 20 - lea r8,[r10+20]
sora_2nd.exe+5800EE: 48 8B D8 - mov rbx,rax
sora_2nd.exe+5800F1: 48 8D 55 00 - lea rdx,[rbp]
sora_2nd.exe+5800F5: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+5800FA: E8 B1 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5800FF: 4D 8D 42 10 - lea r8,[r10+10]
sora_2nd.exe+580103: 4C 8B D8 - mov r11,rax
sora_2nd.exe+580106: 48 8D 55 F0 - lea rdx,[rbp-10]
sora_2nd.exe+58010A: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+58010F: E8 9C B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580114: 4D 8B C2 - mov r8,r10
sora_2nd.exe+580117: 48 8D 55 A0 - lea rdx,[rbp-60]
sora_2nd.exe+58011B: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+580120: 4C 8B C8 - mov r9,rax
sora_2nd.exe+580123: E8 88 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580128: 41 0F 10 09 - movups xmm1,[r9]
sora_2nd.exe+58012C: 4C 8D 85 10 01 00 00 - lea r8,[rbp+110]
sora_2nd.exe+580133: 48 8D 55 B0 - lea rdx,[rbp-50]
sora_2nd.exe+580137: 0F 10 00 - movups xmm0,[rax]
sora_2nd.exe+58013A: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+58013F: 0F 11 4C 24 50 - movups [rsp+50],xmm1
sora_2nd.exe+580144: 0F 10 0B - movups xmm1,[rbx]
sora_2nd.exe+580147: 0F 11 44 24 40 - movups [rsp+40],xmm0
sora_2nd.exe+58014C: 41 0F 10 03 - movups xmm0,[r11]
sora_2nd.exe+580150: 0F 11 4C 24 70 - movups [rsp+70],xmm1
sora_2nd.exe+580155: 0F 11 44 24 60 - movups [rsp+60],xmm0
sora_2nd.exe+58015A: E8 51 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+58015F: 4C 8D 85 00 01 00 00 - lea r8,[rbp+100]
sora_2nd.exe+580166: 4C 8B D8 - mov r11,rax
sora_2nd.exe+580169: 48 8D 55 E0 - lea rdx,[rbp-20]
sora_2nd.exe+58016D: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+580172: E8 39 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580177: 4C 8D 85 F0 00 00 00 - lea r8,[rbp+0F0]
sora_2nd.exe+58017E: 4C 8B D0 - mov r10,rax
sora_2nd.exe+580181: 48 8D 55 90 - lea rdx,[rbp-70]
sora_2nd.exe+580185: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+58018A: E8 21 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+58018F: 48 8D 55 D0 - lea rdx,[rbp-30]
sora_2nd.exe+580193: 4C 8D 85 E0 00 00 00 - lea r8,[rbp+0E0]
sora_2nd.exe+58019A: 4C 8B C8 - mov r9,rax
sora_2nd.exe+58019D: 48 8D 4C 24 40 - lea rcx,[rsp+40]
sora_2nd.exe+5801A2: E8 09 B0 AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5801A7: 41 0F 10 03 - movups xmm0,[r11]
sora_2nd.exe+5801AB: 48 8B CF - mov rcx,rdi
sora_2nd.exe+5801AE: 41 0F 10 11 - movups xmm2,[r9]
sora_2nd.exe+5801B2: 0F 10 18 - movups xmm3,[rax]
sora_2nd.exe+5801B5: B8 08 00 00 00 - mov eax,8
sora_2nd.exe+5801BA: 41 0F 10 0A - movups xmm1,[r10]
sora_2nd.exe+5801BE: 48 8D 1C 08 - lea rbx,[rax+rcx]
sora_2nd.exe+5801C2: 0F 11 1B - movups [rbx],xmm3
sora_2nd.exe+5801C5: 0F 11 53 10 - movups [rbx+10],xmm2
sora_2nd.exe+5801C9: 0F 11 4B 20 - movups [rbx+20],xmm1
sora_2nd.exe+5801CD: 0F 11 43 30 - movups [rbx+30],xmm0
sora_2nd.exe+5801D1: 8B 87 A4 01 00 00 - mov eax,[rdi+1A4]
sora_2nd.exe+5801D7: 89 47 48 - mov [rdi+48],eax
sora_2nd.exe+5801DA: 8B 87 A8 01 00 00 - mov eax,[rdi+1A8]
sora_2nd.exe+5801E0: 89 47 4C - mov [rdi+4C],eax
sora_2nd.exe+5801E3: 8B 87 AC 01 00 00 - mov eax,[rdi+1AC]
sora_2nd.exe+5801E9: 89 47 50 - mov [rdi+50],eax
sora_2nd.exe+5801EC: 8B 87 E0 01 00 00 - mov eax,[rdi+1E0]
sora_2nd.exe+5801F2: 89 47 58 - mov [rdi+58],eax
sora_2nd.exe+5801F5: 8B 87 E4 01 00 00 - mov eax,[rdi+1E4]
sora_2nd.exe+5801FB: 89 47 5C - mov [rdi+5C],eax
sora_2nd.exe+5801FE: 8B 87 E8 01 00 00 - mov eax,[rdi+1E8]
sora_2nd.exe+580204: 89 47 60 - mov [rdi+60],eax
sora_2nd.exe+580207: F3 0F 10 86 DC 00 00 00 - movss xmm0,[rsi+0DC]
sora_2nd.exe+58020F: F3 0F 59 87 04 02 00 00 - mulss xmm0,[rdi+204]
sora_2nd.exe+580217: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+80]
sora_2nd.exe+58021E: 8B 87 C0 00 00 00 - mov eax,[rdi+0C0]
sora_2nd.exe+580224: 89 87 C4 00 00 00 - mov [rdi+0C4],eax
// ---------- INJECTING HERE ----------
sora_2nd.exe+58022A: F3 0F 11 47 78 - movss [rdi+78],xmm0
// ---------- DONE INJECTING ----------
sora_2nd.exe+58022F: 48 85 C9 - test rcx,rcx
sora_2nd.exe+580232: 0F 84 08 03 00 00 - je near sora_2nd.exe+580540
sora_2nd.exe+580238: 8B 87 A0 00 00 00 - mov eax,[rdi+0A0]
sora_2nd.exe+58023E: 83 E0 0E - and eax,0E
sora_2nd.exe+580241: 3C 0E - cmp al,0E
sora_2nd.exe+580243: 0F 85 D2 00 00 00 - jne near sora_2nd.exe+58031B
sora_2nd.exe+580249: F3 0F 10 41 08 - movss xmm0,[rcx+8]
sora_2nd.exe+58024E: F3 0F 11 85 E0 00 00 00 - movss [rbp+0E0],xmm0
sora_2nd.exe+580256: F3 0F 10 49 0C - movss xmm1,[rcx+0C]
sora_2nd.exe+58025B: F3 0F 11 8D E4 00 00 00 - movss [rbp+0E4],xmm1
sora_2nd.exe+580263: F3 0F 10 41 10 - movss xmm0,[rcx+10]
sora_2nd.exe+580268: F3 0F 11 85 E8 00 00 00 - movss [rbp+0E8],xmm0
sora_2nd.exe+580270: F3 0F 10 49 14 - movss xmm1,[rcx+14]
sora_2nd.exe+580275: F3 0F 11 8D EC 00 00 00 - movss [rbp+0EC],xmm1
sora_2nd.exe+58027D: F3 0F 10 41 18 - movss xmm0,[rcx+18]
sora_2nd.exe+580282: F3 0F 11 85 F0 00 00 00 - movss [rbp+0F0],xmm0
sora_2nd.exe+58028A: F3 0F 10 49 1C - movss xmm1,[rcx+1C]
sora_2nd.exe+58028F: F3 0F 11 8D F4 00 00 00 - movss [rbp+0F4],xmm1
sora_2nd.exe+580297: F3 0F 10 41 20 - movss xmm0,[rcx+20]
sora_2nd.exe+58029C: F3 0F 11 85 F8 00 00 00 - movss [rbp+0F8],xmm0
sora_2nd.exe+5802A4: F3 0F 10 49 24 - movss xmm1,[rcx+24]
sora_2nd.exe+5802A9: F3 0F 11 8D FC 00 00 00 - movss [rbp+0FC],xmm1
sora_2nd.exe+5802B1: F3 0F 10 41 28 - movss xmm0,[rcx+28]
sora_2nd.exe+5802B6: F3 0F 11 85 00 01 00 00 - movss [rbp+100],xmm0
sora_2nd.exe+5802BE: F3 0F 10 49 2C - movss xmm1,[rcx+2C]
sora_2nd.exe+5802C3: F3 0F 11 8D 04 01 00 00 - movss [rbp+104],xmm1
sora_2nd.exe+5802CB: F3 0F 10 41 30 - movss xmm0,[rcx+30]
sora_2nd.exe+5802D0: F3 0F 11 85 08 01 00 00 - movss [rbp+108],xmm0
sora_2nd.exe+5802D8: F3 0F 10 49 34 - movss xmm1,[rcx+34]
sora_2nd.exe+5802DD: F3 0F 11 8D 0C 01 00 00 - movss [rbp+10C],xmm1
sora_2nd.exe+5802E5: F3 0F 10 41 38 - movss xmm0,[rcx+38]
sora_2nd.exe+5802EA: F3 0F 11 85 10 01 00 00 - movss [rbp+110],xmm0
sora_2nd.exe+5802F2: F3 0F 10 49 3C - movss xmm1,[rcx+3C]
sora_2nd.exe+5802F7: F3 0F 11 8D 14 01 00 00 - movss [rbp+114],xmm1
sora_2nd.exe+5802FF: F3 0F 10 41 40 - movss xmm0,[rcx+40]
sora_2nd.exe+580304: F3 0F 11 85 18 01 00 00 - movss [rbp+118],xmm0
sora_2nd.exe+58030C: F3 0F 10 49 44 - movss xmm1,[rcx+44]
sora_2nd.exe+580311: F3 0F 11 8D 1C 01 00 00 - movss [rbp+11C],xmm1
sora_2nd.exe+580319: EB 16 - jmp short sora_2nd.exe+580331
sora_2nd.exe+58031B: 48 8D 95 E0 00 00 00 - lea rdx,[rbp+0E0]
sora_2nd.exe+580322: 48 8B CF - mov rcx,rdi
sora_2nd.exe+580325: E8 C6 11 00 00 - call sora_2nd.exe+5814F0
sora_2nd.exe+58032A: 4C 8B 35 27 FB 6D 00 - mov r14,[rel sora_2nd.exe+C5FE58]
sora_2nd.exe+580331: F7 87 A0 00 00 00 00 00 20 00 - test dword [rdi+0A0],200000
sora_2nd.exe+58033B: 74 40 - je short sora_2nd.exe+58037D
sora_2nd.exe+58033D: 44 8B 87 A0 02 00 00 - mov r8d,[rdi+2A0]
sora_2nd.exe+580344: 48 8D 55 80 - lea rdx,[rbp-80]
sora_2nd.exe+580348: 48 8B CF - mov rcx,rdi
sora_2nd.exe+58034B: E8 A0 23 00 00 - call sora_2nd.exe+5826F0
sora_2nd.exe+580350: 4C 8B 35 01 FB 6D 00 - mov r14,[rel sora_2nd.exe+C5FE58]
sora_2nd.exe+580357: F3 0F 10 00 - movss xmm0,[rax]
sora_2nd.exe+58035B: F3 0F 11 85 10 01 00 00 - movss [rbp+110],xmm0
sora_2nd.exe+580363: F3 0F 10 48 04 - movss xmm1,[rax+4]
sora_2nd.exe+580368: F3 0F 11 8D 14 01 00 00 - movss [rbp+114],xmm1
sora_2nd.exe+580370: F3 0F 10 40 08 - movss xmm0,[rax+8]
sora_2nd.exe+580375: F3 0F 11 85 18 01 00 00 - movss [rbp+118],xmm0
sora_2nd.exe+58037D: 4C 8D 43 30 - lea r8,[rbx+30]
sora_2nd.exe+580381: 48 8D 55 80 - lea rdx,[rbp-80]
sora_2nd.exe+580385: 48 8D 8D E0 00 00 00 - lea rcx,[rbp+0E0]
sora_2nd.exe+58038C: E8 1F AE AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+580391: 4C 8D 43 20 - lea r8,[rbx+20]
sora_2nd.exe+580395: 4C 8B D8 - mov r11,rax
sora_2nd.exe+580398: 48 8D 55 C0 - lea rdx,[rbp-40]
sora_2nd.exe+58039C: 48 8D 8D E0 00 00 00 - lea rcx,[rbp+0E0]
sora_2nd.exe+5803A3: E8 08 AE AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5803A8: 4C 8D 43 10 - lea r8,[rbx+10]
sora_2nd.exe+5803AC: 4C 8B D0 - mov r10,rax
sora_2nd.exe+5803AF: 48 8D 55 40 - lea rdx,[rbp+40]
sora_2nd.exe+5803B3: 48 8D 8D E0 00 00 00 - lea rcx,[rbp+0E0]
sora_2nd.exe+5803BA: E8 F1 AD AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5803BF: 4C 8B C3 - mov r8,rbx
sora_2nd.exe+5803C2: 48 8D 55 50 - lea rdx,[rbp+50]
sora_2nd.exe+5803C6: 48 8D 8D E0 00 00 00 - lea rcx,[rbp+0E0]
sora_2nd.exe+5803CD: 4C 8B C8 - mov r9,rax
sora_2nd.exe+5803D0: E8 DB AD AD FF - call sora_2nd.exe+5B1B0
sora_2nd.exe+5803D5: 41 0F 10 11 - movups xmm2,[r9]
sora_2nd.exe+5803D9: 41 0F 10 0A - movups xmm1,[r10]
sora_2nd.exe+5803DD: 0F 10 18 - movups xmm3,[rax]
sora_2nd.exe+5803E0: 41 0F 10 03 - movups xmm0,[r11]
sora_2nd.exe+5803E4: 0F 11 1B - movups [rbx],xmm3
sora_2nd.exe+5803E7: 0F 11 53 10 - movups [rbx+10],xmm2
sora_2nd.exe+5803EB: 0F 11 4B 20 - movups [rbx+20],xmm1
sora_2nd.exe+5803EF: 0F 11 43 30 - movups [rbx+30],xmm0
sora_2nd.exe+5803F3: 8B 8F A0 00 00 00 - mov ecx,[rdi+0A0]
sora_2nd.exe+5803F9: F6 C1 10 - test cl,10
sora_2nd.exe+5803FC: 74 16 - je short sora_2nd.exe+580414
sora_2nd.exe+5803FE: 48 8B 87 80 00 00 00 - mov rax,[rdi+80]
sora_2nd.exe+580405: F3 0F 10 40 78 - movss xmm0,[rax+78]
sora_2nd.exe+58040A: F3 0F 59 47 78 - mulss xmm0,[rdi+78]
sora_2nd.exe+58040F: F3 0F 11 47 78 - movss [rdi+78],xmm0
sora_2nd.exe+580414: 0F BA E1 0E - bt ecx,0E
sora_2nd.exe+580418: 73 36 - jae short sora_2nd.exe+580450
sora_2nd.exe+58041A: 48 8B 87 80 00 00 00 - mov rax,[rdi+80]
sora_2nd.exe+580421: F3 0F 10 50 48 - movss xmm2,[rax+48]
sora_2nd.exe+580426: F3 0F 10 48 4C - movss xmm1,[rax+4C]
sora_2nd.exe+58042B: F3 0F 10 40 50 - movss xmm0,[rax+50]
sora_2nd.exe+580430: F3 0F 59 57 48 - mulss xmm2,[rdi+48]
sora_2nd.exe+580435: F3 0F 59 4F 4C - mulss xmm1,[rdi+4C]
sora_2nd.exe+58043A: F3 0F 59 47 50 - mulss xmm0,[rdi+50]
sora_2nd.exe+58043F: F3 0F 11 57 48 - movss [rdi+48],xmm2
sora_2nd.exe+580444: F3 0F 11 4F 4C - movss [rdi+4C],xmm1
sora_2nd.exe+580449: F3 0F 11 47 50 - movss [rdi+50],xmm0
sora_2nd.exe+58044E: EB 1E - jmp short sora_2nd.exe+58046E
sora_2nd.exe+580450: F6 C1 20 - test cl,20
sora_2nd.exe+580453: 74 19 - je short sora_2nd.exe+58046E
sora_2nd.exe+580455: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+80]
sora_2nd.exe+58045C: 8B 41 48 - mov eax,[rcx+48]
sora_2nd.exe+58045F: 89 47 48 - mov [rdi+48],eax
sora_2nd.exe+580462: 8B 41 4C - mov eax,[rcx+4C]
sora_2nd.exe+580465: 89 47 4C - mov [rdi+4C],eax
sora_2nd.exe+580468: 8B 41 50 - mov eax,[rcx+50]
sora_2nd.exe+58046B: 89 47 50 - mov [rdi+50],eax
sora_2nd.exe+58046E: 8B 87 A0 00 00 00 - mov eax,[rdi+0A0]
sora_2nd.exe+580474: 0F BA E0 0F - bt eax,0F
sora_2nd.exe+580478: 73 36 - jae short sora_2nd.exe+5804B0
sora_2nd.exe+58047A: 48 8B 87 80 00 00 00 - mov rax,[rdi+80]
sora_2nd.exe+580481: F3 0F 10 57 58 - movss xmm2,[rdi+58]
sora_2nd.exe+580486: F3 0F 10 4F 5C - movss xmm1,[rdi+5C]
sora_2nd.exe+58048B: F3 0F 10 47 60 - movss xmm0,[rdi+60]
sora_2nd.exe+580490: F3 0F 58 50 58 - addss xmm2,[rax+58]
sora_2nd.exe+580495: F3 0F 58 48 5C - addss xmm1,[rax+5C]
sora_2nd.exe+58049A: F3 0F 58 40 60 - addss xmm0,[rax+60]
sora_2nd.exe+58049F: F3 0F 11 57 58 - movss [rdi+58],xmm2
sora_2nd.exe+5804A4: F3 0F 11 4F 5C - movss [rdi+5C],xmm1
sora_2nd.exe+5804A9: F3 0F 11 47 60 - movss [rdi+60],xmm0
sora_2nd.exe+5804AE: EB 1D - jmp short sora_2nd.exe+5804CD
sora_2nd.exe+5804B0: A8 40 - test al,40
sora_2nd.exe+5804B2: 74 19 - je short sora_2nd.exe+5804CD
sora_2nd.exe+5804B4: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+80]
sora_2nd.exe+5804BB: 8B 41 58 - mov eax,[rcx+58]
sora_2nd.exe+5804BE: 89 47 58 - mov [rdi+58],eax
sora_2nd.exe+5804C1: 8B 41 5C - mov eax,[rcx+5C]
sora_2nd.exe+5804C4: 89 47 5C - mov [rdi+5C],eax
sora_2nd.exe+5804C7: 8B 41 60 - mov eax,[rcx+60]
sora_2nd.exe+5804CA: 89 47 60 - mov [rdi+60],eax
sora_2nd.exe+5804CD: 8B 97 A0 00 00 00 - mov edx,[rdi+0A0]
sora_2nd.exe+5804D3: 84 D2 - test dl,dl
sora_2nd.exe+5804D5: 79 1F - jns short sora_2nd.exe+5804F6
sora_2nd.exe+5804D7: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+80]
sora_2nd.exe+5804DE: 8B 81 B4 00 00 00 - mov eax,[rcx+0B4]
sora_2nd.exe+5804E4: 89 87 B4 00 00 00 - mov [rdi+0B4],eax
sora_2nd.exe+5804EA: 8B 81 B8 00 00 00 - mov eax,[rcx+0B8]
sora_2nd.exe+5804F0: 89 87 B8 00 00 00 - mov [rdi+0B8],eax
sora_2nd.exe+5804F6: 0F BA E2 12 - bt edx,12
sora_2nd.exe+5804FA: 73 1F - jae short sora_2nd.exe+58051B
sora_2nd.exe+5804FC: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+80]
sora_2nd.exe+580503: 8B 81 C8 00 00 00 - mov eax,[rcx+0C8]
sora_2nd.exe+580509: 89 87 C8 00 00 00 - mov [rdi+0C8],eax
sora_2nd.exe+58050F: 8B 81 CC 00 00 00 - mov eax,[rcx+0CC]
sora_2nd.exe+580515: 89 87 CC 00 00 00 - mov [rdi+0CC],eax
sora_2nd.exe+58051B: 0F BA E2 0C - bt edx,0C
sora_2nd.exe+58051F: 73 1F - jae short sora_2nd.exe+580540
sora_2nd.exe+580521: 48 8B 87 80 00 00 00 - mov rax,[rdi+80]
sora_2nd.exe+580528: F3 0F 10 80 C4 00 00 00 - movss xmm0,[rax+0C4]
sora_2nd.exe+580530: F3 0F 58 87 C4 00 00 00 - addss xmm0,[rdi+0C4]
sora_2nd.exe+580538: F3 0F 11 87 C4 00 00 00 - movss [rdi+0C4],xmm0
sora_2nd.exe+580540: 8B 86 88 00 00 00 - mov eax,[rsi+88]
sora_2nd.exe+580546: 4C 8B BC 24 D0 02 00 00 - mov r15,[rsp+2D0]
sora_2nd.exe+58054E: FF C8 - dec eax
sora_2nd.exe+580550: 4C 8B AC 24 E0 02 00 00 - mov r13,[rsp+2E0]
sora_2nd.exe+580558: 4C 8B A4 24 E8 02 00 00 - mov r12,[rsp+2E8]
sora_2nd.exe+580560: 83 F8 01 - cmp eax,1
sora_2nd.exe+580563: 0F 87 53 04 00 00 - ja near sora_2nd.exe+5809BC
sora_2nd.exe+580569: F7 87 A0 00 00 00 00 04 00 00 - test dword [rdi+0A0],400
sora_2nd.exe+580573: 0F 84 43 04 00 00 - je near sora_2nd.exe+5809BC
sora_2nd.exe+580579: 0F 29 B4 24 C0 02 00 00 - movaps [rsp+2C0],xmm6
sora_2nd.exe+580581: 0F 10 76 60 - movups xmm6,[rsi+60]
sora_2nd.exe+580585: 44 0F 29 A4 24 60 02 00 00 - movaps [rsp+260],xmm12
sora_2nd.exe+58058E: 44 0F 29 AC 24 50 02 00 00 - movaps [rsp+250],xmm13
sora_2nd.exe+580597: 44 0F 28 E6 - movaps xmm12,xmm6
sora_2nd.exe+58059B: 44 0F C6 E6 55 - shufps xmm12,xmm6,55
sora_2nd.exe+5805A0: 0F 28 CE - movaps xmm1,xmm6
sora_2nd.exe+5805A3: 41 0F 28 C4 - movaps xmm0,xmm12
sora_2nd.exe+5805A7: F3 0F 59 CE - mulss xmm1,xmm6
sora_2nd.exe+5805AB: F3 41 0F 59 C4 - mulss xmm0,xmm12
sora_2nd.exe+5805B0: 44 0F 28 EE - movaps xmm13,xmm6
sora_2nd.exe+5805B4: 44 0F C6 EE AA - shufps xmm13,xmm6,0AA // signed:-86
sora_2nd.exe+5805B9: F3 0F 58 C8 - addss xmm1,xmm0
sora_2nd.exe+5805BD: 41 0F 28 C5 - movaps xmm0,xmm13
sora_2nd.exe+5805C1: F3 41 0F 59 C5 - mulss xmm0,xmm13
sora_2nd.exe+5805C6: F3 0F 58 C8 - addss xmm1,xmm0
sora_2nd.exe+5805CA: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5805CD: 0F 2E C1 - ucomiss xmm0,xmm1
sora_2nd.exe+5805D0: 77 09 - ja short sora_2nd.exe+5805DB
sora_2nd.exe+5805D2: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5805D5: F3 0F 51 C1 - sqrtss xmm0,xmm1
sora_2nd.exe+5805D9: EB 08 - jmp short sora_2nd.exe+5805E3
sora_2nd.exe+5805DB: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+5805DE: E8 81 25 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+5805E3: 41 0F 2F C3 - comiss xmm0,xmm11
sora_2nd.exe+5805E7: 0F 86 B5 03 00 00 - jbe near sora_2nd.exe+5809A2
sora_2nd.exe+5805ED: 0F 10 5E 50 - movups xmm3,[rsi+50]
sora_2nd.exe+5805F1: F3 44 0F 5E E0 - divss xmm12,xmm0
sora_2nd.exe+5805F6: F3 44 0F 5E E8 - divss xmm13,xmm0
sora_2nd.exe+5805FB: F3 0F 5E F0 - divss xmm6,xmm0
sora_2nd.exe+5805FF: 0F 29 BC 24 B0 02 00 00 - movaps [rsp+2B0],xmm7
sora_2nd.exe+580607: 41 0F 28 C4 - movaps xmm0,xmm12
sora_2nd.exe+58060B: 44 0F 29 84 24 A0 02 00 00 - movaps [rsp+2A0],xmm8
sora_2nd.exe+580614: 41 0F 28 FD - movaps xmm7,xmm13
sora_2nd.exe+580618: 44 0F 29 8C 24 90 02 00 00 - movaps [rsp+290],xmm9
sora_2nd.exe+580621: 44 0F 28 C6 - movaps xmm8,xmm6
sora_2nd.exe+580625: 45 0F 28 CC - movaps xmm9,xmm12
sora_2nd.exe+580629: 44 0F 29 BC 24 30 02 00 00 - movaps [rsp+230],xmm15
sora_2nd.exe+580632: F3 44 0F 59 CB - mulss xmm9,xmm3
sora_2nd.exe+580637: 0F 28 D3 - movaps xmm2,xmm3
sora_2nd.exe+58063A: 0F C6 D3 55 - shufps xmm2,xmm3,55
sora_2nd.exe+58063E: 0F 28 CB - movaps xmm1,xmm3
sora_2nd.exe+580641: F3 0F 59 FA - mulss xmm7,xmm2
sora_2nd.exe+580645: 0F C6 CB AA - shufps xmm1,xmm3,0AA // signed:-86
sora_2nd.exe+580649: F3 0F 59 C1 - mulss xmm0,xmm1
sora_2nd.exe+58064D: F3 44 0F 59 C1 - mulss xmm8,xmm1
sora_2nd.exe+580652: F3 0F 5C F8 - subss xmm7,xmm0
sora_2nd.exe+580656: 41 0F 28 C5 - movaps xmm0,xmm13
sora_2nd.exe+58065A: F3 0F 59 C3 - mulss xmm0,xmm3
sora_2nd.exe+58065E: F3 44 0F 5C C0 - subss xmm8,xmm0
sora_2nd.exe+580663: 0F 28 C6 - movaps xmm0,xmm6
sora_2nd.exe+580666: F3 0F 59 C2 - mulss xmm0,xmm2
sora_2nd.exe+58066A: 0F 28 D7 - movaps xmm2,xmm7
sora_2nd.exe+58066D: F3 0F 59 D7 - mulss xmm2,xmm7
sora_2nd.exe+580671: F3 44 0F 5C C8 - subss xmm9,xmm0
sora_2nd.exe+580676: 41 0F 28 C0 - movaps xmm0,xmm8
sora_2nd.exe+58067A: F3 41 0F 59 C0 - mulss xmm0,xmm8
sora_2nd.exe+58067F: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+580683: 41 0F 28 C9 - movaps xmm1,xmm9
sora_2nd.exe+580687: F3 41 0F 59 C9 - mulss xmm1,xmm9
sora_2nd.exe+58068C: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+58068F: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+580693: 0F 2E C2 - ucomiss xmm0,xmm2
sora_2nd.exe+580696: 77 09 - ja short sora_2nd.exe+5806A1
sora_2nd.exe+580698: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+58069B: F3 0F 51 C2 - sqrtss xmm0,xmm2
sora_2nd.exe+58069F: EB 08 - jmp short sora_2nd.exe+5806A9
sora_2nd.exe+5806A1: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+5806A4: E8 BB 24 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+5806A9: F3 0F 10 57 08 - movss xmm2,[rdi+8]
sora_2nd.exe+5806AE: 45 0F 28 FE - movaps xmm15,xmm14
sora_2nd.exe+5806B2: F3 0F 10 4F 10 - movss xmm1,[rdi+10]
sora_2nd.exe+5806B7: F3 44 0F 5E F8 - divss xmm15,xmm0
sora_2nd.exe+5806BC: F3 0F 10 47 0C - movss xmm0,[rdi+0C]
sora_2nd.exe+5806C1: F3 0F 59 C0 - mulss xmm0,xmm0
sora_2nd.exe+5806C5: F3 0F 59 D2 - mulss xmm2,xmm2
sora_2nd.exe+5806C9: F3 0F 59 C9 - mulss xmm1,xmm1
sora_2nd.exe+5806CD: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+5806D1: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5806D4: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+5806D8: 0F 2E C2 - ucomiss xmm0,xmm2
sora_2nd.exe+5806DB: 77 09 - ja short sora_2nd.exe+5806E6
sora_2nd.exe+5806DD: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5806E0: F3 0F 51 C2 - sqrtss xmm0,xmm2
sora_2nd.exe+5806E4: EB 08 - jmp short sora_2nd.exe+5806EE
sora_2nd.exe+5806E6: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+5806E9: E8 76 24 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+5806EE: F3 45 0F 59 CF - mulss xmm9,xmm15
sora_2nd.exe+5806F3: 0F 28 CE - movaps xmm1,xmm6
sora_2nd.exe+5806F6: F3 45 0F 59 C7 - mulss xmm8,xmm15
sora_2nd.exe+5806FB: F3 41 0F 59 FF - mulss xmm7,xmm15
sora_2nd.exe+580700: 45 0F 28 FD - movaps xmm15,xmm13
sora_2nd.exe+580704: F3 44 0F 59 C8 - mulss xmm9,xmm0
sora_2nd.exe+580709: F3 44 0F 59 C0 - mulss xmm8,xmm0
sora_2nd.exe+58070E: F3 0F 59 F8 - mulss xmm7,xmm0
sora_2nd.exe+580712: 41 0F 28 C4 - movaps xmm0,xmm12
sora_2nd.exe+580716: F3 41 0F 59 C1 - mulss xmm0,xmm9
sora_2nd.exe+58071B: F3 41 0F 59 C9 - mulss xmm1,xmm9
sora_2nd.exe+580720: F3 44 0F 11 4F 10 - movss [rdi+10],xmm9
sora_2nd.exe+580726: 45 0F 28 CC - movaps xmm9,xmm12
sora_2nd.exe+58072A: F3 45 0F 59 F8 - mulss xmm15,xmm8
sora_2nd.exe+58072F: F3 44 0F 59 CF - mulss xmm9,xmm7
sora_2nd.exe+580734: F3 44 0F 5C F8 - subss xmm15,xmm0
sora_2nd.exe+580739: F3 0F 11 7F 08 - movss [rdi+8],xmm7
sora_2nd.exe+58073E: 41 0F 28 C5 - movaps xmm0,xmm13
sora_2nd.exe+580742: F3 44 0F 11 47 0C - movss [rdi+0C],xmm8
sora_2nd.exe+580748: F3 0F 59 C7 - mulss xmm0,xmm7
sora_2nd.exe+58074C: 41 0F 28 D7 - movaps xmm2,xmm15
sora_2nd.exe+580750: F3 0F 5C C8 - subss xmm1,xmm0
sora_2nd.exe+580754: F3 41 0F 59 D7 - mulss xmm2,xmm15
sora_2nd.exe+580759: 0F 28 C6 - movaps xmm0,xmm6
sora_2nd.exe+58075C: F3 41 0F 59 C0 - mulss xmm0,xmm8
sora_2nd.exe+580761: F3 0F 11 8D D0 00 00 00 - movss [rbp+0D0],xmm1
sora_2nd.exe+580769: F3 44 0F 5C C8 - subss xmm9,xmm0
sora_2nd.exe+58076E: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+580771: F3 0F 59 C1 - mulss xmm0,xmm1
sora_2nd.exe+580775: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+580779: 41 0F 28 C9 - movaps xmm1,xmm9
sora_2nd.exe+58077D: F3 41 0F 59 C9 - mulss xmm1,xmm9
sora_2nd.exe+580782: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+580785: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+580789: 0F 2E C2 - ucomiss xmm0,xmm2
sora_2nd.exe+58078C: 77 09 - ja short sora_2nd.exe+580797
sora_2nd.exe+58078E: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+580791: F3 0F 51 C2 - sqrtss xmm0,xmm2
sora_2nd.exe+580795: EB 08 - jmp short sora_2nd.exe+58079F
sora_2nd.exe+580797: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+58079A: E8 C5 23 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+58079F: F3 0F 10 57 18 - movss xmm2,[rdi+18]
sora_2nd.exe+5807A4: 41 0F 28 FE - movaps xmm7,xmm14
sora_2nd.exe+5807A8: F3 0F 10 4F 20 - movss xmm1,[rdi+20]
sora_2nd.exe+5807AD: F3 0F 5E F8 - divss xmm7,xmm0
sora_2nd.exe+5807B1: F3 0F 10 47 1C - movss xmm0,[rdi+1C]
sora_2nd.exe+5807B6: F3 0F 59 C0 - mulss xmm0,xmm0
sora_2nd.exe+5807BA: F3 0F 59 D2 - mulss xmm2,xmm2
sora_2nd.exe+5807BE: F3 0F 59 C9 - mulss xmm1,xmm1
sora_2nd.exe+5807C2: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+5807C6: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5807C9: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+5807CD: 0F 2E C2 - ucomiss xmm0,xmm2
sora_2nd.exe+5807D0: 77 09 - ja short sora_2nd.exe+5807DB
sora_2nd.exe+5807D2: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+5807D5: F3 0F 51 C2 - sqrtss xmm0,xmm2
sora_2nd.exe+5807D9: EB 08 - jmp short sora_2nd.exe+5807E3
sora_2nd.exe+5807DB: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+5807DE: E8 81 23 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+5807E3: 0F 28 CF - movaps xmm1,xmm7
sora_2nd.exe+5807E6: 0F 28 D7 - movaps xmm2,xmm7
sora_2nd.exe+5807E9: F3 0F 59 95 D0 00 00 00 - mulss xmm2,[rbp+0D0]
sora_2nd.exe+5807F1: F3 41 0F 59 CF - mulss xmm1,xmm15
sora_2nd.exe+5807F6: 44 0F 28 BC 24 30 02 00 00 - movaps xmm15,[rsp+230]
sora_2nd.exe+5807FF: F3 0F 59 D0 - mulss xmm2,xmm0
sora_2nd.exe+580803: F3 0F 59 C8 - mulss xmm1,xmm0
sora_2nd.exe+580807: F3 0F 11 57 1C - movss [rdi+1C],xmm2
sora_2nd.exe+58080C: F3 41 0F 59 F9 - mulss xmm7,xmm9
sora_2nd.exe+580811: F3 0F 11 4F 18 - movss [rdi+18],xmm1
sora_2nd.exe+580816: F3 0F 59 F8 - mulss xmm7,xmm0
sora_2nd.exe+58081A: F3 0F 11 7F 20 - movss [rdi+20],xmm7
sora_2nd.exe+58081F: F3 0F 10 47 2C - movss xmm0,[rdi+2C]
sora_2nd.exe+580824: F3 0F 10 57 28 - movss xmm2,[rdi+28]
sora_2nd.exe+580829: F3 0F 10 4F 30 - movss xmm1,[rdi+30]
sora_2nd.exe+58082E: F3 0F 59 D2 - mulss xmm2,xmm2
sora_2nd.exe+580832: F3 0F 59 C0 - mulss xmm0,xmm0
sora_2nd.exe+580836: F3 0F 59 C9 - mulss xmm1,xmm1
sora_2nd.exe+58083A: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+58083E: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+580841: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+580845: 0F 2E C2 - ucomiss xmm0,xmm2
sora_2nd.exe+580848: 77 09 - ja short sora_2nd.exe+580853
sora_2nd.exe+58084A: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+58084D: F3 0F 51 C2 - sqrtss xmm0,xmm2
sora_2nd.exe+580851: EB 08 - jmp short sora_2nd.exe+58085B
sora_2nd.exe+580853: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+580856: E8 09 23 32 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+58085B: 0F 10 5C 24 20 - movups xmm3,[rsp+20]
sora_2nd.exe+580860: 48 8D 97 2C 01 00 00 - lea rdx,[rdi+12C]
sora_2nd.exe+580867: F3 0F 59 F0 - mulss xmm6,xmm0
sora_2nd.exe+58086B: 48 8D 8D A0 00 00 00 - lea rcx,[rbp+0A0]
sora_2nd.exe+580872: F3 44 0F 59 E0 - mulss xmm12,xmm0
sora_2nd.exe+580877: F3 44 0F 59 E8 - mulss xmm13,xmm0
sora_2nd.exe+58087C: 0F 28 FE - movaps xmm7,xmm6
sora_2nd.exe+58087F: F3 0F 11 77 28 - movss [rdi+28],xmm6
sora_2nd.exe+580884: F3 44 0F 11 67 2C - movss [rdi+2C],xmm12
sora_2nd.exe+58088A: F3 44 0F 11 6F 30 - movss [rdi+30],xmm13
sora_2nd.exe+580890: F3 0F 10 47 08 - movss xmm0,[rdi+8]
sora_2nd.exe+580895: F3 0F 10 57 10 - movss xmm2,[rdi+10]
sora_2nd.exe+58089A: F3 0F 10 D8 - movss xmm3,xmm0
sora_2nd.exe+58089E: F3 0F 10 67 18 - movss xmm4,[rdi+18]
sora_2nd.exe+5808A3: F3 0F 10 6F 1C - movss xmm5,[rdi+1C]
sora_2nd.exe+5808A8: F3 0F 10 77 20 - movss xmm6,[rdi+20]
sora_2nd.exe+5808AD: 0F C6 DB E1 - shufps xmm3,xmm3,0E1 // signed:-31
sora_2nd.exe+5808B1: F3 41 0F 10 D8 - movss xmm3,xmm8
sora_2nd.exe+5808B6: 0F C6 DB C6 - shufps xmm3,xmm3,0C6 // signed:-58
sora_2nd.exe+5808BA: F3 0F 10 DA - movss xmm3,xmm2
sora_2nd.exe+5808BE: 0F C6 DB C9 - shufps xmm3,xmm3,0C9 // signed:-55
sora_2nd.exe+5808C2: 0F 11 5C 24 20 - movups [rsp+20],xmm3
sora_2nd.exe+5808C7: 0F 10 44 24 20 - movups xmm0,[rsp+20]
sora_2nd.exe+5808CC: 0F 11 5D 10 - movups [rbp+10],xmm3
sora_2nd.exe+5808D0: F3 0F 10 C4 - movss xmm0,xmm4
sora_2nd.exe+5808D4: 0F C6 C0 E1 - shufps xmm0,xmm0,0E1 // signed:-31
sora_2nd.exe+5808D8: F3 0F 10 C5 - movss xmm0,xmm5
sora_2nd.exe+5808DC: 0F C6 C0 C6 - shufps xmm0,xmm0,0C6 // signed:-58
sora_2nd.exe+5808E0: F3 0F 10 C6 - movss xmm0,xmm6
sora_2nd.exe+5808E4: 0F C6 C0 C9 - shufps xmm0,xmm0,0C9 // signed:-55
sora_2nd.exe+5808E8: 0F 11 44 24 20 - movups [rsp+20],xmm0
sora_2nd.exe+5808ED: 0F 10 4C 24 20 - movups xmm1,[rsp+20]
sora_2nd.exe+5808F2: 0F 11 45 20 - movups [rbp+20],xmm0
sora_2nd.exe+5808F6: F3 0F 10 CF - movss xmm1,xmm7
sora_2nd.exe+5808FA: 0F C6 C9 E1 - shufps xmm1,xmm1,0E1 // signed:-31
sora_2nd.exe+5808FE: F3 41 0F 10 CC - movss xmm1,xmm12
sora_2nd.exe+580903: 0F C6 C9 C6 - shufps xmm1,xmm1,0C6 // signed:-58
sora_2nd.exe+580907: F3 41 0F 10 CD - movss xmm1,xmm13
sora_2nd.exe+58090C: 0F C6 C9 C9 - shufps xmm1,xmm1,0C9 // signed:-55
sora_2nd.exe+580910: 0F 11 4C 24 20 - movups [rsp+20],xmm1
sora_2nd.exe+580915: 0F 11 4D 30 - movups [rbp+30],xmm1
sora_2nd.exe+580919: E8 62 40 B7 FF - call sora_2nd.exe+F4980
sora_2nd.exe+58091E: 4C 8B C0 - mov r8,rax
sora_2nd.exe+580921: 48 8D 54 24 40 - lea rdx,[rsp+40]
sora_2nd.exe+580926: 48 8D 4D 10 - lea rcx,[rbp+10]
sora_2nd.exe+58092A: E8 D1 5F CA FF - call sora_2nd.exe+226900
sora_2nd.exe+58092F: 44 0F 28 8C 24 90 02 00 00 - movaps xmm9,[rsp+290]
sora_2nd.exe+580938: 44 0F 28 84 24 A0 02 00 00 - movaps xmm8,[rsp+2A0]
sora_2nd.exe+580941: 0F 28 BC 24 B0 02 00 00 - movaps xmm7,[rsp+2B0]
sora_2nd.exe+580949: 0F 10 08 - movups xmm1,[rax]
sora_2nd.exe+58094C: F3 0F 11 4F 08 - movss [rdi+8],xmm1
sora_2nd.exe+580951: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+580954: 0F C6 C1 55 - shufps xmm0,xmm1,55
sora_2nd.exe+580958: F3 0F 11 47 0C - movss [rdi+0C],xmm0
sora_2nd.exe+58095D: 0F C6 C9 AA - shufps xmm1,xmm1,0AA // signed:-86
sora_2nd.exe+580961: F3 0F 11 4F 10 - movss [rdi+10],xmm1
sora_2nd.exe+580966: 0F 10 48 10 - movups xmm1,[rax+10]
sora_2nd.exe+58096A: F3 0F 11 4F 18 - movss [rdi+18],xmm1
sora_2nd.exe+58096F: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+580972: 0F C6 C1 55 - shufps xmm0,xmm1,55
sora_2nd.exe+580976: F3 0F 11 47 1C - movss [rdi+1C],xmm0
sora_2nd.exe+58097B: 0F C6 C9 AA - shufps xmm1,xmm1,0AA // signed:-86
sora_2nd.exe+58097F: F3 0F 11 4F 20 - movss [rdi+20],xmm1
sora_2nd.exe+580984: 0F 10 48 20 - movups xmm1,[rax+20]
sora_2nd.exe+580988: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+58098B: F3 0F 11 4F 28 - movss [rdi+28],xmm1
sora_2nd.exe+580990: 0F C6 C1 55 - shufps xmm0,xmm1,55
sora_2nd.exe+580994: 0F C6 C9 AA - shufps xmm1,xmm1,0AA // signed:-86
sora_2nd.exe+580998: F3 0F 11 4F 30 - movss [rdi+30],xmm1
sora_2nd.exe+58099D: F3 0F 11 47 2C - movss [rdi+2C],xmm0
sora_2nd.exe+5809A2: 44 0F 28 A4 24 60 02 00 00 - movaps xmm12,[rsp+260]
sora_2nd.exe+5809AB: 0F 28 B4 24 C0 02 00 00 - movaps xmm6,[rsp+2C0]
sora_2nd.exe+5809B3: 44 0F 28 AC 24 50 02 00 00 - movaps xmm13,[rsp+250]
sora_2nd.exe+5809BC: 8B 8F A0 00 00 00 - mov ecx,[rdi+0A0]
sora_2nd.exe+5809C2: F3 0F 10 2D E6 F5 5A 00 - movss xmm5,[rel sora_2nd.exe+B2FFB0]
sora_2nd.exe+5809CA: F7 C1 00 08 08 00 - test ecx,80800
sora_2nd.exe+5809D0: 0F 84 F6 00 00 00 - je near sora_2nd.exe+580ACC
sora_2nd.exe+5809D6: 8B 86 88 00 00 00 - mov eax,[rsi+88]
sora_2nd.exe+5809DC: F3 0F 10 67 40 - movss xmm4,[rdi+40]
sora_2nd.exe+5809E1: 83 F8 01 - cmp eax,1
sora_2nd.exe+5809E4: 76 5D - jbe short sora_2nd.exe+580A43
sora_2nd.exe+5809E6: 83 F8 02 - cmp eax,2
sora_2nd.exe+5809E9: 75 53 - jne short sora_2nd.exe+580A3E
sora_2nd.exe+5809EB: 48 8B 86 98 00 00 00 - mov rax,[rsi+98]
sora_2nd.exe+5809F2: 48 85 C0 - test rax,rax
sora_2nd.exe+5809F5: 75 0C - jne short sora_2nd.exe+580A03
sora_2nd.exe+5809F7: 49 8B 86 A8 05 00 00 - mov rax,[r14+5A8]
sora_2nd.exe+5809FE: 48 85 C0 - test rax,rax
sora_2nd.exe+580A01: 74 3B - je short sora_2nd.exe+580A3E
sora_2nd.exe+580A03: 0F 10 58 68 - movups xmm3,[rax+68]
sora_2nd.exe+580A07: F3 0F 10 80 80 00 00 00 - movss xmm0,[rax+80]
sora_2nd.exe+580A0F: F3 0F 59 47 3C - mulss xmm0,[rdi+3C]
sora_2nd.exe+580A14: F3 0F 10 88 90 00 00 00 - movss xmm1,[rax+90]
sora_2nd.exe+580A1C: 0F C6 DB AA - shufps xmm3,xmm3,0AA // signed:-86
sora_2nd.exe+580A20: F3 0F 59 5F 38 - mulss xmm3,[rdi+38]
sora_2nd.exe+580A25: F3 0F 59 CC - mulss xmm1,xmm4
sora_2nd.exe+580A29: F3 0F 58 D8 - addss xmm3,xmm0
sora_2nd.exe+580A2D: F3 0F 58 D9 - addss xmm3,xmm1
sora_2nd.exe+580A31: F3 0F 58 98 A0 00 00 00 - addss xmm3,[rax+0A0]
sora_2nd.exe+580A39: 0F 57 DD - xorps xmm3,xmm5
sora_2nd.exe+580A3C: EB 0B - jmp short sora_2nd.exe+580A49
sora_2nd.exe+580A3E: 0F 57 DB - xorps xmm3,xmm3
sora_2nd.exe+580A41: EB 06 - jmp short sora_2nd.exe+580A49
sora_2nd.exe+580A43: 0F 57 E5 - xorps xmm4,xmm5
sora_2nd.exe+580A46: 0F 28 DC - movaps xmm3,xmm4
sora_2nd.exe+580A49: 0F BA E1 13 - bt ecx,13
sora_2nd.exe+580A4D: 73 3D - jae short sora_2nd.exe+580A8C
sora_2nd.exe+580A4F: F3 0F 10 8F A4 00 00 00 - movss xmm1,[rdi+0A4]
sora_2nd.exe+580A57: 0F 28 D3 - movaps xmm2,xmm3
sora_2nd.exe+580A5A: F3 0F 10 87 A8 00 00 00 - movss xmm0,[rdi+0A8]
sora_2nd.exe+580A62: F3 0F 5C D1 - subss xmm2,xmm1
sora_2nd.exe+580A66: F3 0F 5C C1 - subss xmm0,xmm1
sora_2nd.exe+580A6A: 41 0F 28 CE - movaps xmm1,xmm14
sora_2nd.exe+580A6E: F3 0F 5E D0 - divss xmm2,xmm0
sora_2nd.exe+580A72: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+580A75: F3 41 0F 5D D6 - minss xmm2,xmm14
sora_2nd.exe+580A7A: F3 0F 5F C2 - maxss xmm0,xmm2
sora_2nd.exe+580A7E: F3 0F 5C C8 - subss xmm1,xmm0
sora_2nd.exe+580A82: F3 0F 59 4F 78 - mulss xmm1,[rdi+78]
sora_2nd.exe+580A87: F3 0F 11 4F 78 - movss [rdi+78],xmm1
sora_2nd.exe+580A8C: 0F BA E1 0B - bt ecx,0B
sora_2nd.exe+580A90: 73 3A - jae short sora_2nd.exe+580ACC
sora_2nd.exe+580A92: F3 0F 10 8F AC 00 00 00 - movss xmm1,[rdi+0AC]
sora_2nd.exe+580A9A: F3 0F 10 87 B0 00 00 00 - movss xmm0,[rdi+0B0]
sora_2nd.exe+580AA2: F3 0F 5C D9 - subss xmm3,xmm1
sora_2nd.exe+580AA6: F3 0F 5C C1 - subss xmm0,xmm1
sora_2nd.exe+580AAA: 41 0F 28 CE - movaps xmm1,xmm14
sora_2nd.exe+580AAE: F3 0F 5E D8 - divss xmm3,xmm0
sora_2nd.exe+580AB2: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+580AB5: F3 41 0F 5D DE - minss xmm3,xmm14
sora_2nd.exe+580ABA: F3 0F 5F C3 - maxss xmm0,xmm3
sora_2nd.exe+580ABE: F3 0F 5C C8 - subss xmm1,xmm0
sora_2nd.exe+580AC2: F3 0F 59 4F 78 - mulss xmm1,[rdi+78]
sora_2nd.exe+580AC7: F3 0F 11 4F 78 - movss [rdi+78],xmm1
sora_2nd.exe+580ACC: F7 87 A0 00 00 00 00 00 02 00 - test dword [rdi+0A0],20000
sora_2nd.exe+580AD6: 0F 84 4B 01 00 00 - je near sora_2nd.exe+580C27
sora_2nd.exe+580ADC: 83 BE 88 00 00 00 02 - cmp dword [rsi+88],2
sora_2nd.exe+580AE3: 0F 85 3E 01 00 00 - jne near sora_2nd.exe+580C27
sora_2nd.exe+580AE9: 48 8B 86 98 00 00 00 - mov rax,[rsi+98]
sora_2nd.exe+580AF0: F3 0F 10 67 40 - movss xmm4,[rdi+40]
sora_2nd.exe+580AF5: 48 85 C0 - test rax,rax
sora_2nd.exe+580AF8: 75 0C - jne short sora_2nd.exe+580B06
sora_2nd.exe+580AFA: 49 8B 86 A8 05 00 00 - mov rax,[r14+5A8]
sora_2nd.exe+580B01: 48 85 C0 - test rax,rax
sora_2nd.exe+580B04: 74 34 - je short sora_2nd.exe+580B3A
sora_2nd.exe+580B06: F3 0F 10 58 70 - movss xmm3,[rax+70]
sora_2nd.exe+580B0B: F3 0F 59 5F 38 - mulss xmm3,[rdi+38]
sora_2nd.exe+580B10: F3 0F 10 80 80 00 00 00 - movss xmm0,[rax+80]
sora_2nd.exe+580B18: F3 0F 59 47 3C - mulss xmm0,[rdi+3C]
sora_2nd.exe+580B1D: F3 0F 59 A0 90 00 00 00 - mulss xmm4,[rax+90]
sora_2nd.exe+580B25: F3 0F 58 D8 - addss xmm3,xmm0
sora_2nd.exe+580B29: F3 0F 58 DC - addss xmm3,xmm4
sora_2nd.exe+580B2D: F3 0F 58 98 A0 00 00 00 - addss xmm3,[rax+0A0]
sora_2nd.exe+580B35: 0F 57 DD - xorps xmm3,xmm5
sora_2nd.exe+580B38: EB 03 - jmp short sora_2nd.exe+580B3D
sora_2nd.exe+580B3A: 0F 57 DB - xorps xmm3,xmm3
sora_2nd.exe+580B3D: F3 0F 10 8F 1C 02 00 00 - movss xmm1,[rdi+21C]
sora_2nd.exe+580B45: 48 8D 4F 08 - lea rcx,[rdi+8]
sora_2nd.exe+580B49: F3 0F 10 87 20 02 00 00 - movss xmm0,[rdi+220]
sora_2nd.exe+580B51: F3 0F 5C D9 - subss xmm3,xmm1
sora_2nd.exe+580B55: F3 0F 10 97 14 02 00 00 - movss xmm2,[rdi+214]
sora_2nd.exe+580B5D: F3 0F 5C C1 - subss xmm0,xmm1
sora_2nd.exe+580B61: 48 C7 44 24 24 00 00 00 00 - mov qword [rsp+24],0
sora_2nd.exe+580B6A: 48 8D 95 E0 00 00 00 - lea rdx,[rbp+0E0]
sora_2nd.exe+580B71: C7 44 24 2C 00 00 00 00 - mov dword [rsp+2C],0
sora_2nd.exe+580B79: 48 C7 85 D0 00 00 00 00 00 00 00 - mov qword [rbp+0D0],0
sora_2nd.exe+580B84: C7 85 DC 00 00 00 00 00 00 00 - mov dword [rbp+0DC],0
sora_2nd.exe+580B8E: F3 0F 5E D8 - divss xmm3,xmm0
sora_2nd.exe+580B92: C7 44 24 30 00 00 00 00 - mov dword [rsp+30],0
sora_2nd.exe+580B9A: 48 C7 44 24 38 00 00 00 00 - mov qword [rsp+38],0
sora_2nd.exe+580BA3: F3 0F 10 87 18 02 00 00 - movss xmm0,[rdi+218]
sora_2nd.exe+580BAB: 0F 10 4C 24 30 - movups xmm1,[rsp+30]
sora_2nd.exe+580BB0: F3 0F 5C C2 - subss xmm0,xmm2
sora_2nd.exe+580BB4: 0F C6 C9 E1 - shufps xmm1,xmm1,0E1 // signed:-31
sora_2nd.exe+580BB8: F3 41 0F 5D DE - minss xmm3,xmm14
sora_2nd.exe+580BBD: F3 44 0F 5F DB - maxss xmm11,xmm3
sora_2nd.exe+580BC2: F3 44 0F 59 D8 - mulss xmm11,xmm0
sora_2nd.exe+580BC7: 0F 10 44 24 20 - movups xmm0,[rsp+20]
sora_2nd.exe+580BCC: F3 44 0F 58 DA - addss xmm11,xmm2
sora_2nd.exe+580BD1: 66 0F 6F 15 67 EC 5A 00 - movdqa xmm2,[rel sora_2nd.exe+B2F840]
sora_2nd.exe+580BD9: 0F 11 95 10 01 00 00 - movups [rbp+110],xmm2
sora_2nd.exe+580BE0: F3 41 0F 10 C3 - movss xmm0,xmm11
sora_2nd.exe+580BE5: F3 44 0F 11 9F 24 02 00 00 - movss [rdi+224],xmm11
sora_2nd.exe+580BEE: 0F 11 85 E0 00 00 00 - movups [rbp+0E0],xmm0
sora_2nd.exe+580BF5: 0F 10 85 D0 00 00 00 - movups xmm0,[rbp+0D0]
sora_2nd.exe+580BFC: F3 41 0F 10 CB - movss xmm1,xmm11
sora_2nd.exe+580C01: 0F C6 C0 D2 - shufps xmm0,xmm0,0D2 // signed:-46
sora_2nd.exe+580C05: F3 41 0F 10 C3 - movss xmm0,xmm11
sora_2nd.exe+580C0A: 0F C6 C9 E1 - shufps xmm1,xmm1,0E1 // signed:-31
sora_2nd.exe+580C0E: 0F C6 C0 C9 - shufps xmm0,xmm0,0C9 // signed:-55
sora_2nd.exe+580C12: 0F 11 85 00 01 00 00 - movups [rbp+100],xmm0
sora_2nd.exe+580C19: 0F 11 8D F0 00 00 00 - movups [rbp+0F0],xmm1
sora_2nd.exe+580C20: E8 DB 55 CA FF - call sora_2nd.exe+226200
sora_2nd.exe+580C25: EB 0A - jmp short sora_2nd.exe+580C31
sora_2nd.exe+580C27: C7 87 24 02 00 00 00 00 80 3F - mov dword [rdi+224],3F800000
sora_2nd.exe+580C31: 48 8B 07 - mov rax,[rdi]
sora_2nd.exe+580C34: 4C 8B C6 - mov r8,rsi
sora_2nd.exe+580C37: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+580C3B: 48 8B CF - mov rcx,rdi
sora_2nd.exe+580C3E: FF 50 08 - call qword [rax+8]
sora_2nd.exe+580C41: 48 8B 9F 40 02 00 00 - mov rbx,[rdi+240]
sora_2nd.exe+580C48: 48 8B 87 48 02 00 00 - mov rax,[rdi+248]
sora_2nd.exe+580C4F: 44 0F 28 B4 24 40 02 00 00 - movaps xmm14,[rsp+240]
sora_2nd.exe+580C58: 44 0F 28 9C 24 70 02 00 00 - movaps xmm11,[rsp+270]
sora_2nd.exe+580C61: 4C 8D 34 C3 - lea r14,[rbx+rax*8]
sora_2nd.exe+580C65: 49 3B DE - cmp rbx,r14
sora_2nd.exe+580C68: 74 22 - je short sora_2nd.exe+580C8C
sora_2nd.exe+580C6A: 66 0F 1F 44 00 00 - nop word [rax+rax]
sora_2nd.exe+580C70: 48 8B 0B - mov rcx,[rbx]
sora_2nd.exe+580C73: 4C 8B CE - mov r9,rsi
sora_2nd.exe+580C76: 4C 8B C7 - mov r8,rdi
sora_2nd.exe+580C79: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+580C7D: 48 8B 01 - mov rax,[rcx]
sora_2nd.exe+580C80: FF 50 10 - call qword [rax+10]
sora_2nd.exe+580C83: 48 83 C3 08 - add rbx,8
sora_2nd.exe+580C87: 49 3B DE - cmp rbx,r14
sora_2nd.exe+580C8A: 75 E4 - jne short sora_2nd.exe+580C70
sora_2nd.exe+580C8C: 4C 8B B4 24 D8 02 00 00 - mov r14,[rsp+2D8]
sora_2nd.exe+580C94: C6 87 A8 02 00 00 01 - mov byte [rdi+2A8],1
sora_2nd.exe+580C9B: 48 8B 9F 28 02 00 00 - mov rbx,[rdi+228]
sora_2nd.exe+580CA2: 48 8B 87 30 02 00 00 - mov rax,[rdi+230]
sora_2nd.exe+580CA9: 48 8D 3C C3 - lea rdi,[rbx+rax*8]
sora_2nd.exe+580CAD: 48 3B DF - cmp rbx,rdi
sora_2nd.exe+580CB0: 74 21 - je short sora_2nd.exe+580CD3
sora_2nd.exe+580CB2: 48 8B 0B - mov rcx,[rbx]
sora_2nd.exe+580CB5: F6 81 A0 00 00 00 01 - test byte [rcx+0A0],1
sora_2nd.exe+580CBC: 75 0C - jne short sora_2nd.exe+580CCA
sora_2nd.exe+580CBE: 4C 8B C6 - mov r8,rsi
sora_2nd.exe+580CC1: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+580CC5: E8 76 EF FF FF - call sora_2nd.exe+57FC40
sora_2nd.exe+580CCA: 48 83 C3 08 - add rbx,8
sora_2nd.exe+580CCE: 48 3B DF - cmp rbx,rdi
sora_2nd.exe+580CD1: 75 DF - jne short sora_2nd.exe+580CB2
sora_2nd.exe+580CD3: 48 8B 9C 24 28 03 00 00 - mov rbx,[rsp+328]
sora_2nd.exe+580CDB: 48 8B 8D 20 01 00 00 - mov rcx,[rbp+120]
sora_2nd.exe+580CE2: 48 33 CC - xor rcx,rsp
sora_2nd.exe+580CE5: E8 F6 82 24 00 - call sora_2nd.exe+7C8FE0
sora_2nd.exe+580CEA: 44 0F 28 94 24 80 02 00 00 - movaps xmm10,[rsp+280]
sora_2nd.exe+580CF3: 48 81 C4 F0 02 00 00 - add rsp,2F0
sora_2nd.exe+580CFA: 5F - pop rdi
sora_2nd.exe+580CFB: 5E - pop rsi
sora_2nd.exe+580CFC: 5D - pop rbp
sora_2nd.exe+580CFD: C3 - ret
}
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+2D28D3
sora_2nd.exe+2D1410: 4C 8B DC - mov r11,rsp
sora_2nd.exe+2D1413: 55 - push rbp
sora_2nd.exe+2D1414: 53 - push rbx
sora_2nd.exe+2D1415: 49 8D AB C8 FE FF FF - lea rbp,[r11-138]
sora_2nd.exe+2D141C: 48 81 EC 28 02 00 00 - sub rsp,228
sora_2nd.exe+2D1423: 48 8B 05 16 FC 91 00 - mov rax,[rel sora_2nd.exe+BF1040]
sora_2nd.exe+2D142A: 48 33 C4 - xor rax,rsp
sora_2nd.exe+2D142D: 48 89 45 50 - mov [rbp+50],rax
sora_2nd.exe+2D1431: C6 81 52 03 00 00 00 - mov byte [rcx+352],0
sora_2nd.exe+2D1438: 48 8B D9 - mov rbx,rcx
sora_2nd.exe+2D143B: 48 8B 41 60 - mov rax,[rcx+60]
sora_2nd.exe+2D143F: 48 85 C0 - test rax,rax
sora_2nd.exe+2D1442: 0F 84 31 15 00 00 - je near sora_2nd.exe+2D2979
sora_2nd.exe+2D1448: F7 80 D4 23 00 00 00 08 00 00 - test dword [rax+23D4],800
sora_2nd.exe+2D1452: 49 89 73 18 - mov [r11+18],rsi
sora_2nd.exe+2D1456: 49 89 7B E8 - mov [r11-18],rdi
sora_2nd.exe+2D145A: 4D 89 63 E0 - mov [r11-20],r12
sora_2nd.exe+2D145E: 4D 89 6B D8 - mov [r11-28],r13
sora_2nd.exe+2D1462: 4D 89 73 D0 - mov [r11-30],r14
sora_2nd.exe+2D1466: 4D 89 7B C8 - mov [r11-38],r15
sora_2nd.exe+2D146A: 41 0F 29 73 B8 - movaps [r11-48],xmm6
sora_2nd.exe+2D146F: 41 0F 29 7B A8 - movaps [r11-58],xmm7
sora_2nd.exe+2D1474: 45 0F 29 43 98 - movaps [r11-68],xmm8
sora_2nd.exe+2D1479: 45 0F 29 4B 88 - movaps [r11-78],xmm9
sora_2nd.exe+2D147E: 45 0F 29 93 78 FF FF FF - movaps [r11-88],xmm10
sora_2nd.exe+2D1486: F3 44 0F 10 52 08 - movss xmm10,[rdx+8]
sora_2nd.exe+2D148C: 45 0F 29 9B 68 FF FF FF - movaps [r11-98],xmm11
sora_2nd.exe+2D1494: 45 0F 29 A3 58 FF FF FF - movaps [r11-0A8],xmm12
sora_2nd.exe+2D149C: 45 0F 29 AB 48 FF FF FF - movaps [r11-0B8],xmm13
sora_2nd.exe+2D14A4: 45 0F 29 B3 38 FF FF FF - movaps [r11-0C8],xmm14
sora_2nd.exe+2D14AC: 45 0F 29 BB 28 FF FF FF - movaps [r11-0D8],xmm15
sora_2nd.exe+2D14B4: 74 06 - je short sora_2nd.exe+2D14BC
sora_2nd.exe+2D14B6: F3 44 0F 10 52 0C - movss xmm10,[rdx+0C]
sora_2nd.exe+2D14BC: E8 EF 34 00 00 - call sora_2nd.exe+2D49B0
sora_2nd.exe+2D14C1: 48 8B 0D 70 B2 98 00 - mov rcx,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D14C8: 44 0F B6 E8 - movzx r13d,al
sora_2nd.exe+2D14CC: 88 44 24 50 - mov [rsp+50],al
sora_2nd.exe+2D14D0: 80 B9 30 2D 00 00 00 - cmp byte [rcx+2D30],0
sora_2nd.exe+2D14D7: 0F 85 99 00 00 00 - jne near sora_2nd.exe+2D1576
sora_2nd.exe+2D14DD: 48 8B 4B 60 - mov rcx,[rbx+60]
sora_2nd.exe+2D14E1: 48 8B 89 90 1D 00 00 - mov rcx,[rcx+1D90]
sora_2nd.exe+2D14E8: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D14EB: 0F 84 85 00 00 00 - je near sora_2nd.exe+2D1576
sora_2nd.exe+2D14F1: E8 CA 56 E1 FF - call sora_2nd.exe+E6BC0
sora_2nd.exe+2D14F6: 84 C0 - test al,al
sora_2nd.exe+2D14F8: 74 7C - je short sora_2nd.exe+2D1576
sora_2nd.exe+2D14FA: 48 63 83 A4 02 00 00 - movsxd rax,[rbx+2A4]
sora_2nd.exe+2D1501: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+2D1505: 8B 94 8B 70 02 00 00 - mov edx,[rbx+rcx*4+270]
sora_2nd.exe+2D150C: 8D 42 DC - lea eax,[rdx-24]
sora_2nd.exe+2D150F: 83 F8 01 - cmp eax,1
sora_2nd.exe+2D1512: 76 5A - jbe short sora_2nd.exe+2D156E
sora_2nd.exe+2D1514: 48 8B 83 B0 02 00 00 - mov rax,[rbx+2B0]
sora_2nd.exe+2D151B: 48 85 C0 - test rax,rax
sora_2nd.exe+2D151E: 74 0F - je short sora_2nd.exe+2D152F
sora_2nd.exe+2D1520: 48 8B 8B 10 01 00 00 - mov rcx,[rbx+110]
sora_2nd.exe+2D1527: 41 B8 24 00 00 00 - mov r8d,24
sora_2nd.exe+2D152D: FF D0 - call rax
sora_2nd.exe+2D152F: 48 63 83 A4 02 00 00 - movsxd rax,[rbx+2A4]
sora_2nd.exe+2D1536: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+2D153A: C7 84 8B 74 02 00 00 24 00 00 00 - mov dword [rbx+rcx*4+274],24
sora_2nd.exe+2D1545: 48 8B 4B 60 - mov rcx,[rbx+60]
sora_2nd.exe+2D1549: E8 D2 66 F4 FF - call sora_2nd.exe+217C20
sora_2nd.exe+2D154E: 4C 8D 0D 53 34 83 00 - lea r9,[rel sora_2nd.exe+B049A8]
sora_2nd.exe+2D1555: 48 89 44 24 20 - mov [rsp+20],rax
sora_2nd.exe+2D155A: 41 B8 81 03 00 00 - mov r8d,381
sora_2nd.exe+2D1560: 48 8D 15 B9 34 83 00 - lea rdx,[rel sora_2nd.exe+B04A20]
sora_2nd.exe+2D1567: 33 C9 - xor ecx,ecx
sora_2nd.exe+2D1569: E8 42 A9 2A 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+2D156E: 45 32 ED - xor r13b,r13b
sora_2nd.exe+2D1571: 44 88 6C 24 50 - mov [rsp+50],r13b
sora_2nd.exe+2D1576: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D157A: F3 44 0F 10 2D D1 B5 85 00 - movss xmm13,[rel sora_2nd.exe+B2CB54]
sora_2nd.exe+2D1583: F3 44 0F 10 35 3C B4 85 00 - movss xmm14,[rel sora_2nd.exe+B2C9C8]
sora_2nd.exe+2D158C: F3 44 0F 10 3D 23 B3 85 00 - movss xmm15,[rel sora_2nd.exe+B2C8B8]
sora_2nd.exe+2D1595: 48 8B 88 90 1D 00 00 - mov rcx,[rax+1D90]
sora_2nd.exe+2D159C: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D159F: 0F 84 00 01 00 00 - je near sora_2nd.exe+2D16A5
sora_2nd.exe+2D15A5: F7 41 20 00 00 00 04 - test dword [rcx+20],4000000
sora_2nd.exe+2D15AC: 0F 84 F3 00 00 00 - je near sora_2nd.exe+2D16A5
sora_2nd.exe+2D15B2: 45 32 ED - xor r13b,r13b
sora_2nd.exe+2D15B5: 44 88 6C 24 50 - mov [rsp+50],r13b
sora_2nd.exe+2D15BA: 33 C0 - xor eax,eax
sora_2nd.exe+2D15BC: 48 8D 4B 08 - lea rcx,[rbx+8]
sora_2nd.exe+2D15C0: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D15C3: 48 8D 55 BC - lea rdx,[rbp-44]
sora_2nd.exe+2D15C7: 0F 11 45 EC - movups [rbp-14],xmm0
sora_2nd.exe+2D15CB: 33 FF - xor edi,edi
sora_2nd.exe+2D15CD: 66 89 45 EC - mov [rbp-14],ax
sora_2nd.exe+2D15D1: 0F 11 45 CC - movups [rbp-34],xmm0
sora_2nd.exe+2D15D5: 48 89 45 CC - mov [rbp-34],rax
sora_2nd.exe+2D15D9: 0F 11 45 DC - movups [rbp-24],xmm0
sora_2nd.exe+2D15DD: 88 45 D4 - mov [rbp-2C],al
sora_2nd.exe+2D15E0: 0F 11 45 BC - movups [rbp-44],xmm0
sora_2nd.exe+2D15E4: 48 89 45 BC - mov [rbp-44],rax
sora_2nd.exe+2D15E8: 0F 11 45 FC - movups [rbp-4],xmm0
sora_2nd.exe+2D15EC: 89 45 C4 - mov [rbp-3C],eax
sora_2nd.exe+2D15EF: 48 89 45 D8 - mov [rbp-28],rax
sora_2nd.exe+2D15F3: 0F 57 F6 - xorps xmm6,xmm6
sora_2nd.exe+2D15F6: 48 89 45 E0 - mov [rbp-20],rax
sora_2nd.exe+2D15FA: 89 45 E8 - mov [rbp-18],eax
sora_2nd.exe+2D15FD: 88 45 EE - mov [rbp-12],al
sora_2nd.exe+2D1600: 48 89 45 F0 - mov [rbp-10],rax
sora_2nd.exe+2D1604: 0F 11 45 F8 - movups [rbp-8],xmm0
sora_2nd.exe+2D1608: 88 45 08 - mov [rbp+8],al
sora_2nd.exe+2D160B: 89 7D 0C - mov [rbp+0C],edi
sora_2nd.exe+2D160E: E8 FD FC FF FF - call sora_2nd.exe+2D1310
sora_2nd.exe+2D1613: 48 8B 4B 60 - mov rcx,[rbx+60]
sora_2nd.exe+2D1617: 8B 81 D8 00 00 00 - mov eax,[rcx+0D8]
sora_2nd.exe+2D161D: 89 83 C0 02 00 00 - mov [rbx+2C0],eax
sora_2nd.exe+2D1623: 8B 81 DC 00 00 00 - mov eax,[rcx+0DC]
sora_2nd.exe+2D1629: 89 83 C4 02 00 00 - mov [rbx+2C4],eax
sora_2nd.exe+2D162F: 8B 81 E0 00 00 00 - mov eax,[rcx+0E0]
sora_2nd.exe+2D1635: 89 83 C8 02 00 00 - mov [rbx+2C8],eax
sora_2nd.exe+2D163B: 48 89 BB E8 00 00 00 - mov [rbx+0E8],rdi
sora_2nd.exe+2D1642: 89 BB F0 00 00 00 - mov [rbx+0F0],edi
sora_2nd.exe+2D1648: 48 8B 0D 69 E8 98 00 - mov rcx,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D164F: E8 5C 05 2F 00 - call sora_2nd.exe+5C1BB0
sora_2nd.exe+2D1654: 4C 8B 3D ED BA 98 00 - mov r15,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D165B: 0F 57 FF - xorps xmm7,xmm7
sora_2nd.exe+2D165E: 45 0F 57 C0 - xorps xmm8,xmm8
sora_2nd.exe+2D1662: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1665: F3 44 0F 10 18 - movss xmm11,[rax]
sora_2nd.exe+2D166A: F3 44 0F 10 48 04 - movss xmm9,[rax+4]
sora_2nd.exe+2D1670: 4D 8B A7 E8 00 00 00 - mov r12,[r15+0E8]
sora_2nd.exe+2D1677: 41 0F 10 87 E0 00 00 00 - movups xmm0,[r15+0E0]
sora_2nd.exe+2D167F: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1682: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1686: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D168B: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D168E: 0F 84 06 05 00 00 - je near sora_2nd.exe+2D1B9A
sora_2nd.exe+2D1694: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1697: 41 8B 14 C7 - mov edx,[r15+rax*8]
sora_2nd.exe+2D169B: 45 8B 7C C7 04 - mov r15d,[r15+rax*8+4]
sora_2nd.exe+2D16A0: E9 FE 04 00 00 - jmp sora_2nd.exe+2D1BA3
sora_2nd.exe+2D16A5: 45 84 ED - test r13b,r13b
sora_2nd.exe+2D16A8: 0F 84 0C FF FF FF - je near sora_2nd.exe+2D15BA
sora_2nd.exe+2D16AE: 33 FF - xor edi,edi
sora_2nd.exe+2D16B0: 0F 57 F6 - xorps xmm6,xmm6
sora_2nd.exe+2D16B3: 40 38 7B 54 - cmp [rbx+54],dil
sora_2nd.exe+2D16B7: 0F 84 38 01 00 00 - je near sora_2nd.exe+2D17F5
sora_2nd.exe+2D16BD: F3 0F 10 4B 50 - movss xmm1,[rbx+50]
sora_2nd.exe+2D16C2: 48 8D 4B 08 - lea rcx,[rbx+8]
sora_2nd.exe+2D16C6: 33 C0 - xor eax,eax
sora_2nd.exe+2D16C8: 89 7D B8 - mov [rbp-48],edi
sora_2nd.exe+2D16CB: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D16CE: 48 8D 54 24 68 - lea rdx,[rsp+68]
sora_2nd.exe+2D16D3: 0F 11 45 98 - movups [rbp-68],xmm0
sora_2nd.exe+2D16D7: 66 89 45 98 - mov [rbp-68],ax
sora_2nd.exe+2D16DB: 0F 11 44 24 78 - movups [rsp+78],xmm0
sora_2nd.exe+2D16E0: 48 89 44 24 78 - mov [rsp+78],rax
sora_2nd.exe+2D16E5: 0F 11 45 88 - movups [rbp-78],xmm0
sora_2nd.exe+2D16E9: 88 45 80 - mov [rbp-80],al
sora_2nd.exe+2D16EC: 0F 11 44 24 68 - movups [rsp+68],xmm0
sora_2nd.exe+2D16F1: 48 89 44 24 68 - mov [rsp+68],rax
sora_2nd.exe+2D16F6: 0F 11 45 A8 - movups [rbp-58],xmm0
sora_2nd.exe+2D16FA: 89 44 24 70 - mov [rsp+70],eax
sora_2nd.exe+2D16FE: 48 89 45 84 - mov [rbp-7C],rax
sora_2nd.exe+2D1702: 48 89 45 8C - mov [rbp-74],rax
sora_2nd.exe+2D1706: 89 45 94 - mov [rbp-6C],eax
sora_2nd.exe+2D1709: 88 45 9A - mov [rbp-66],al
sora_2nd.exe+2D170C: 48 89 45 9C - mov [rbp-64],rax
sora_2nd.exe+2D1710: 0F 11 45 A4 - movups [rbp-5C],xmm0
sora_2nd.exe+2D1714: 88 45 B4 - mov [rbp-4C],al
sora_2nd.exe+2D1717: E8 F4 FB FF FF - call sora_2nd.exe+2D1310
sora_2nd.exe+2D171C: C6 43 54 01 - mov byte [rbx+54],1
sora_2nd.exe+2D1720: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1723: F3 0F 11 4B 50 - movss [rbx+50],xmm1
sora_2nd.exe+2D1728: 4C 8B 3D 19 BA 98 00 - mov r15,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D172F: 4D 8B A7 18 03 00 00 - mov r12,[r15+318]
sora_2nd.exe+2D1736: 41 0F 10 87 10 03 00 00 - movups xmm0,[r15+310]
sora_2nd.exe+2D173E: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1741: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1745: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D174A: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D174D: 74 0E - je short sora_2nd.exe+2D175D
sora_2nd.exe+2D174F: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1752: 41 8B 14 C7 - mov edx,[r15+rax*8]
sora_2nd.exe+2D1756: 45 8B 7C C7 04 - mov r15d,[r15+rax*8+4]
sora_2nd.exe+2D175B: EB 09 - jmp short sora_2nd.exe+2D1766
sora_2nd.exe+2D175D: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1762: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1766: 48 8B 35 4B E7 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D176D: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1770: 74 1B - je short sora_2nd.exe+2D178D
sora_2nd.exe+2D1772: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1775: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1779: E8 22 48 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D177E: 8B D0 - mov edx,eax
sora_2nd.exe+2D1780: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1783: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1786: 41 FF D1 - call r9
sora_2nd.exe+2D1789: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D178D: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1791: 74 20 - je short sora_2nd.exe+2D17B3
sora_2nd.exe+2D1793: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1796: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1799: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D179D: E8 FE 47 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D17A2: 8B D0 - mov edx,eax
sora_2nd.exe+2D17A4: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D17A7: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D17AA: 41 FF D1 - call r9
sora_2nd.exe+2D17AD: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D17B0: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D17B3: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D17B7: 74 19 - je short sora_2nd.exe+2D17D2
sora_2nd.exe+2D17B9: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D17BC: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D17BF: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D17C2: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D17C5: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D17C9: 41 FF D1 - call r9
sora_2nd.exe+2D17CC: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D17CF: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D17D2: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D17D6: 74 14 - je short sora_2nd.exe+2D17EC
sora_2nd.exe+2D17D8: F3 0F 10 05 94 B2 98 00 - movss xmm0,[rel sora_2nd.exe+C5CA74]
sora_2nd.exe+2D17E0: F3 0F 58 43 50 - addss xmm0,[rbx+50]
sora_2nd.exe+2D17E5: F3 0F 11 43 50 - movss [rbx+50],xmm0
sora_2nd.exe+2D17EA: EB 2B - jmp short sora_2nd.exe+2D1817
sora_2nd.exe+2D17EC: 40 88 7B 54 - mov [rbx+54],dil
sora_2nd.exe+2D17F0: 89 7B 50 - mov [rbx+50],edi
sora_2nd.exe+2D17F3: EB 22 - jmp short sora_2nd.exe+2D1817
sora_2nd.exe+2D17F5: 8B 43 5C - mov eax,[rbx+5C]
sora_2nd.exe+2D17F8: 85 C0 - test eax,eax
sora_2nd.exe+2D17FA: 75 0A - jne short sora_2nd.exe+2D1806
sora_2nd.exe+2D17FC: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D17FF: E8 9C 1C 00 00 - call sora_2nd.exe+2D34A0
sora_2nd.exe+2D1804: EB 11 - jmp short sora_2nd.exe+2D1817
sora_2nd.exe+2D1806: 83 F8 01 - cmp eax,1
sora_2nd.exe+2D1809: 75 0C - jne short sora_2nd.exe+2D1817
sora_2nd.exe+2D180B: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+2D180F: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D1812: E8 39 26 00 00 - call sora_2nd.exe+2D3E50
sora_2nd.exe+2D1817: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D181B: 48 8B 88 90 1D 00 00 - mov rcx,[rax+1D90]
sora_2nd.exe+2D1822: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D1825: 74 19 - je short sora_2nd.exe+2D1840
sora_2nd.exe+2D1827: 48 8B 05 0A AF 98 00 - mov rax,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D182E: 40 38 B8 30 2D 00 00 - cmp [rax+2D30],dil
sora_2nd.exe+2D1835: 75 09 - jne short sora_2nd.exe+2D1840
sora_2nd.exe+2D1837: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+2D183B: E8 70 96 E0 FF - call sora_2nd.exe+DAEB0
sora_2nd.exe+2D1840: 0F B6 93 51 03 00 00 - movzx edx,byte [rbx+351]
sora_2nd.exe+2D1847: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D184A: E8 81 02 01 00 - call sora_2nd.exe+2E1AD0
sora_2nd.exe+2D184F: 66 C7 83 51 03 00 00 00 01 - mov word [rbx+351],100
sora_2nd.exe+2D1858: 48 63 83 A4 02 00 00 - movsxd rax,[rbx+2A4]
sora_2nd.exe+2D185F: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+2D1863: 8B 84 8B 70 02 00 00 - mov eax,[rbx+rcx*4+270]
sora_2nd.exe+2D186A: 83 F8 02 - cmp eax,2
sora_2nd.exe+2D186D: 74 20 - je short sora_2nd.exe+2D188F
sora_2nd.exe+2D186F: 83 C0 F9 - add eax,0FFFFFFF9 // signed:-7
sora_2nd.exe+2D1872: 83 F8 01 - cmp eax,1
sora_2nd.exe+2D1875: 76 18 - jbe short sora_2nd.exe+2D188F
sora_2nd.exe+2D1877: F3 0F 10 15 F9 AF 85 00 - movss xmm2,[rel sora_2nd.exe+B2C878]
sora_2nd.exe+2D187F: 41 0F 28 DA - movaps xmm3,xmm10
sora_2nd.exe+2D1883: 48 8B 4B 60 - mov rcx,[rbx+60]
sora_2nd.exe+2D1887: 0F 57 C9 - xorps xmm1,xmm1
sora_2nd.exe+2D188A: E8 91 4E F4 FF - call sora_2nd.exe+216720
sora_2nd.exe+2D188F: 48 8B 05 B2 AE 98 00 - mov rax,[rel sora_2nd.exe+C5C748]
sora_2nd.exe+2D1896: 48 8B 88 C0 00 00 00 - mov rcx,[rax+0C0]
sora_2nd.exe+2D189D: 48 8B 41 08 - mov rax,[rcx+8]
sora_2nd.exe+2D18A1: 48 8B 48 30 - mov rcx,[rax+30]
sora_2nd.exe+2D18A5: 48 8B 81 A8 02 00 00 - mov rax,[rcx+2A8]
sora_2nd.exe+2D18AC: 48 85 C0 - test rax,rax
sora_2nd.exe+2D18AF: 74 05 - je short sora_2nd.exe+2D18B6
sora_2nd.exe+2D18B1: 8B 40 04 - mov eax,[rax+4]
sora_2nd.exe+2D18B4: EB 02 - jmp short sora_2nd.exe+2D18B8
sora_2nd.exe+2D18B6: 8B C7 - mov eax,edi
sora_2nd.exe+2D18B8: 66 0F 6E F8 - movd xmm7,eax
sora_2nd.exe+2D18BC: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D18C0: 0F 5B FF - cvtdq2ps xmm7,xmm7
sora_2nd.exe+2D18C3: 48 8B 88 90 1D 00 00 - mov rcx,[rax+1D90]
sora_2nd.exe+2D18CA: F3 0F 59 3D 56 AE 85 00 - mulss xmm7,[rel sora_2nd.exe+B2C728]
sora_2nd.exe+2D18D2: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D18D5: 74 27 - je short sora_2nd.exe+2D18FE
sora_2nd.exe+2D18D7: 48 8B 89 A8 05 00 00 - mov rcx,[rcx+5A8]
sora_2nd.exe+2D18DE: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D18E1: BA 06 01 00 00 - mov edx,106
sora_2nd.exe+2D18E6: E8 D5 23 DE FF - call sora_2nd.exe+B3CC0
sora_2nd.exe+2D18EB: 66 0F 6E C0 - movd xmm0,eax
sora_2nd.exe+2D18EF: 0F 5B C0 - cvtdq2ps xmm0,xmm0
sora_2nd.exe+2D18F2: F3 0F 5E 05 3A B9 85 00 - divss xmm0,[rel sora_2nd.exe+B2D234]
sora_2nd.exe+2D18FA: F3 0F 59 F8 - mulss xmm7,xmm0
sora_2nd.exe+2D18FE: 48 8B 53 60 - mov rdx,[rbx+60]
sora_2nd.exe+2D1902: 48 8B 82 A0 25 00 00 - mov rax,[rdx+25A0]
sora_2nd.exe+2D1909: 48 85 C0 - test rax,rax
sora_2nd.exe+2D190C: 0F 84 4D 01 00 00 - je near sora_2nd.exe+2D1A5F
sora_2nd.exe+2D1912: 8B 48 34 - mov ecx,[rax+34]
sora_2nd.exe+2D1915: 83 F9 02 - cmp ecx,2
sora_2nd.exe+2D1918: 0F 85 35 01 00 00 - jne near sora_2nd.exe+2D1A53
sora_2nd.exe+2D191E: 48 8B 8A A8 01 00 00 - mov rcx,[rdx+1A8]
sora_2nd.exe+2D1925: 0F 28 CF - movaps xmm1,xmm7
sora_2nd.exe+2D1928: F3 0F 58 CF - addss xmm1,xmm7
sora_2nd.exe+2D192C: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D192F: 74 0D - je short sora_2nd.exe+2D193E
sora_2nd.exe+2D1931: F3 0F 10 51 54 - movss xmm2,[rcx+54]
sora_2nd.exe+2D1936: F3 44 0F 10 41 5C - movss xmm8,[rcx+5C]
sora_2nd.exe+2D193C: EB 08 - jmp short sora_2nd.exe+2D1946
sora_2nd.exe+2D193E: 41 0F 28 D5 - movaps xmm2,xmm13
sora_2nd.exe+2D1942: 45 0F 57 C0 - xorps xmm8,xmm8
sora_2nd.exe+2D1946: 66 0F 6F 1D 42 C2 85 00 - movdqa xmm3,[rel sora_2nd.exe+B2DB90]
sora_2nd.exe+2D194E: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+2D1951: 66 0F 6F 25 A7 C5 85 00 - movdqa xmm4,[rel sora_2nd.exe+B2DF00]
sora_2nd.exe+2D1959: F3 0F 11 B8 68 01 00 00 - movss [rax+168],xmm7
sora_2nd.exe+2D1961: F3 0F 11 88 6C 01 00 00 - movss [rax+16C],xmm1
sora_2nd.exe+2D1969: F3 0F 5C CA - subss xmm1,xmm2
sora_2nd.exe+2D196D: 66 0F 6F 15 8B C1 85 00 - movdqa xmm2,[rel sora_2nd.exe+B2DB00]
sora_2nd.exe+2D1975: C7 40 50 00 00 80 3F - mov dword [rax+50],3F800000
sora_2nd.exe+2D197C: F3 41 0F 59 C6 - mulss xmm0,xmm14
sora_2nd.exe+2D1981: 89 7D 10 - mov [rbp+10],edi
sora_2nd.exe+2D1984: F3 41 0F 59 CE - mulss xmm1,xmm14
sora_2nd.exe+2D1989: 89 7D 18 - mov [rbp+18],edi
sora_2nd.exe+2D198C: F3 0F 5F C7 - maxss xmm0,xmm7
sora_2nd.exe+2D1990: C7 45 1C 00 00 80 3F - mov dword [rbp+1C],3F800000
sora_2nd.exe+2D1997: 0F 10 6D 10 - movups xmm5,[rbp+10]
sora_2nd.exe+2D199B: F3 44 0F 5C C1 - subss xmm8,xmm1
sora_2nd.exe+2D19A0: 0F 28 CA - movaps xmm1,xmm2
sora_2nd.exe+2D19A3: 0F C6 CA AA - shufps xmm1,xmm2,0AA // signed:-86
sora_2nd.exe+2D19A7: 0F C6 ED E1 - shufps xmm5,xmm5,0E1 // signed:-31
sora_2nd.exe+2D19AB: F3 44 0F 58 C0 - addss xmm8,xmm0
sora_2nd.exe+2D19B0: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+2D19B3: 0F C6 C2 55 - shufps xmm0,xmm2,55
sora_2nd.exe+2D19B7: F3 0F 11 40 54 - movss [rax+54],xmm0
sora_2nd.exe+2D19BC: 0F 28 C3 - movaps xmm0,xmm3
sora_2nd.exe+2D19BF: F3 0F 11 48 58 - movss [rax+58],xmm1
sora_2nd.exe+2D19C4: 0F 28 CB - movaps xmm1,xmm3
sora_2nd.exe+2D19C7: 0F C6 C3 55 - shufps xmm0,xmm3,55
sora_2nd.exe+2D19CB: 0F C6 CB AA - shufps xmm1,xmm3,0AA // signed:-86
sora_2nd.exe+2D19CF: F3 41 0F 10 E8 - movss xmm5,xmm8
sora_2nd.exe+2D19D4: 0F C6 ED E1 - shufps xmm5,xmm5,0E1 // signed:-31
sora_2nd.exe+2D19D8: 0F C6 D2 FF - shufps xmm2,xmm2,0FF // signed:-1
sora_2nd.exe+2D19DC: F3 0F 11 50 5C - movss [rax+5C],xmm2
sora_2nd.exe+2D19E1: F3 0F 11 58 60 - movss [rax+60],xmm3
sora_2nd.exe+2D19E6: F3 0F 11 40 64 - movss [rax+64],xmm0
sora_2nd.exe+2D19EB: 0F 28 C4 - movaps xmm0,xmm4
sora_2nd.exe+2D19EE: F3 0F 11 48 68 - movss [rax+68],xmm1
sora_2nd.exe+2D19F3: 0F 28 CC - movaps xmm1,xmm4
sora_2nd.exe+2D19F6: 0F C6 C4 55 - shufps xmm0,xmm4,55
sora_2nd.exe+2D19FA: 0F C6 CC AA - shufps xmm1,xmm4,0AA // signed:-86
sora_2nd.exe+2D19FE: 0F C6 DB FF - shufps xmm3,xmm3,0FF // signed:-1
sora_2nd.exe+2D1A02: F3 0F 11 58 6C - movss [rax+6C],xmm3
sora_2nd.exe+2D1A07: F3 0F 11 60 70 - movss [rax+70],xmm4
sora_2nd.exe+2D1A0C: F3 0F 11 40 74 - movss [rax+74],xmm0
sora_2nd.exe+2D1A11: 0F 28 C5 - movaps xmm0,xmm5
sora_2nd.exe+2D1A14: F3 0F 11 48 78 - movss [rax+78],xmm1
sora_2nd.exe+2D1A19: 0F 28 CD - movaps xmm1,xmm5
sora_2nd.exe+2D1A1C: 0F C6 C5 55 - shufps xmm0,xmm5,55
sora_2nd.exe+2D1A20: 0F C6 CD AA - shufps xmm1,xmm5,0AA // signed:-86
sora_2nd.exe+2D1A24: 0F C6 E4 FF - shufps xmm4,xmm4,0FF // signed:-1
sora_2nd.exe+2D1A28: F3 0F 11 60 7C - movss [rax+7C],xmm4
sora_2nd.exe+2D1A2D: F3 0F 11 A8 80 00 00 00 - movss [rax+80],xmm5
sora_2nd.exe+2D1A35: F3 0F 11 80 84 00 00 00 - movss [rax+84],xmm0
sora_2nd.exe+2D1A3D: 0F C6 ED FF - shufps xmm5,xmm5,0FF // signed:-1
sora_2nd.exe+2D1A41: F3 0F 11 88 88 00 00 00 - movss [rax+88],xmm1
sora_2nd.exe+2D1A49: F3 0F 11 A8 8C 00 00 00 - movss [rax+8C],xmm5
sora_2nd.exe+2D1A51: EB 0C - jmp short sora_2nd.exe+2D1A5F
sora_2nd.exe+2D1A53: 85 C9 - test ecx,ecx
sora_2nd.exe+2D1A55: 75 08 - jne short sora_2nd.exe+2D1A5F
sora_2nd.exe+2D1A57: F3 0F 11 B8 68 01 00 00 - movss [rax+168],xmm7
sora_2nd.exe+2D1A5F: 48 8B 05 72 E3 98 00 - mov rax,[rel sora_2nd.exe+C5FDD8]
sora_2nd.exe+2D1A66: 81 B8 A0 06 00 00 FF FF 00 00 - cmp dword [rax+6A0],0FFFF
sora_2nd.exe+2D1A70: 0F 85 CC 00 00 00 - jne near sora_2nd.exe+2D1B42
sora_2nd.exe+2D1A76: 0F 10 9B C0 02 00 00 - movups xmm3,[rbx+2C0]
sora_2nd.exe+2D1A7D: 48 8B 15 9C E3 98 00 - mov rdx,[rel sora_2nd.exe+C5FE20]
sora_2nd.exe+2D1A84: B9 63 00 00 00 - mov ecx,63
sora_2nd.exe+2D1A89: 0F 28 E3 - movaps xmm4,xmm3
sora_2nd.exe+2D1A8C: 0F 28 EB - movaps xmm5,xmm3
sora_2nd.exe+2D1A8F: 0F C6 E3 AA - shufps xmm4,xmm3,0AA // signed:-86
sora_2nd.exe+2D1A93: 4C 63 82 50 BB 20 00 - movsxd r8,[rdx+20BB50]
sora_2nd.exe+2D1A9A: 0F C6 EB 55 - shufps xmm5,xmm3,55
sora_2nd.exe+2D1A9E: 41 8D 40 FF - lea eax,[r8-1]
sora_2nd.exe+2D1AA2: 85 C0 - test eax,eax
sora_2nd.exe+2D1AA4: 0F 48 C1 - cmovs eax,ecx
sora_2nd.exe+2D1AA7: 39 BA 54 BB 20 00 - cmp [rdx+20BB54],edi
sora_2nd.exe+2D1AAD: 7E 44 - jle short sora_2nd.exe+2D1AF3
sora_2nd.exe+2D1AAF: 48 98 - cdqe
sora_2nd.exe+2D1AB1: 0F 28 D3 - movaps xmm2,xmm3
sora_2nd.exe+2D1AB4: 0F 28 C5 - movaps xmm0,xmm5
sora_2nd.exe+2D1AB7: 0F 28 CC - movaps xmm1,xmm4
sora_2nd.exe+2D1ABA: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+2D1ABE: F3 0F 5C 94 8A A0 B6 20 00 - subss xmm2,[rdx+rcx*4+20B6A0]
sora_2nd.exe+2D1AC7: F3 0F 5C 84 8A A4 B6 20 00 - subss xmm0,[rdx+rcx*4+20B6A4]
sora_2nd.exe+2D1AD0: F3 0F 5C 8C 8A A8 B6 20 00 - subss xmm1,[rdx+rcx*4+20B6A8]
sora_2nd.exe+2D1AD9: F3 0F 59 D2 - mulss xmm2,xmm2
sora_2nd.exe+2D1ADD: F3 0F 59 C0 - mulss xmm0,xmm0
sora_2nd.exe+2D1AE1: F3 0F 59 C9 - mulss xmm1,xmm1
sora_2nd.exe+2D1AE5: F3 0F 58 D0 - addss xmm2,xmm0
sora_2nd.exe+2D1AE9: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+2D1AED: 44 0F 2F FA - comiss xmm15,xmm2
sora_2nd.exe+2D1AF1: 77 4F - ja short sora_2nd.exe+2D1B42
sora_2nd.exe+2D1AF3: 4B 8D 0C 40 - lea rcx,[r8+r8*2]
sora_2nd.exe+2D1AF7: F3 0F 11 9C 8A A0 B6 20 00 - movss [rdx+rcx*4+20B6A0],xmm3
sora_2nd.exe+2D1B00: F3 0F 11 AC 8A A4 B6 20 00 - movss [rdx+rcx*4+20B6A4],xmm5
sora_2nd.exe+2D1B09: F3 0F 11 A4 8A A8 B6 20 00 - movss [rdx+rcx*4+20B6A8],xmm4
sora_2nd.exe+2D1B12: B9 64 00 00 00 - mov ecx,64
sora_2nd.exe+2D1B17: 8B 82 54 BB 20 00 - mov eax,[rdx+20BB54]
sora_2nd.exe+2D1B1D: FF C0 - inc eax
sora_2nd.exe+2D1B1F: 3B C1 - cmp eax,ecx
sora_2nd.exe+2D1B21: 0F 47 C1 - cmova eax,ecx
sora_2nd.exe+2D1B24: 89 82 54 BB 20 00 - mov [rdx+20BB54],eax
sora_2nd.exe+2D1B2A: 8B 82 50 BB 20 00 - mov eax,[rdx+20BB50]
sora_2nd.exe+2D1B30: FF C0 - inc eax
sora_2nd.exe+2D1B32: 89 82 50 BB 20 00 - mov [rdx+20BB50],eax
sora_2nd.exe+2D1B38: 3B C1 - cmp eax,ecx
sora_2nd.exe+2D1B3A: 72 06 - jb short sora_2nd.exe+2D1B42
sora_2nd.exe+2D1B3C: 89 BA 50 BB 20 00 - mov [rdx+20BB50],edi
sora_2nd.exe+2D1B42: 48 8B 05 EF AB 98 00 - mov rax,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D1B49: 48 8B 88 B8 2C 00 00 - mov rcx,[rax+2CB8]
sora_2nd.exe+2D1B50: F3 0F 10 81 B4 00 00 00 - movss xmm0,[rcx+0B4]
sora_2nd.exe+2D1B58: 0F 2F C6 - comiss xmm0,xmm6
sora_2nd.exe+2D1B5B: 0F 86 E7 FA FF FF - jbe near sora_2nd.exe+2D1648
sora_2nd.exe+2D1B61: F3 41 0F 5C C2 - subss xmm0,xmm10
sora_2nd.exe+2D1B66: F3 0F 5F C6 - maxss xmm0,xmm6
sora_2nd.exe+2D1B6A: 0F 2F F0 - comiss xmm6,xmm0
sora_2nd.exe+2D1B6D: F3 0F 11 81 B4 00 00 00 - movss [rcx+0B4],xmm0
sora_2nd.exe+2D1B75: 0F 82 CD FA FF FF - jb near sora_2nd.exe+2D1648
sora_2nd.exe+2D1B7B: 48 89 B9 B0 00 00 00 - mov [rcx+0B0],rdi
sora_2nd.exe+2D1B82: 33 D2 - xor edx,edx
sora_2nd.exe+2D1B84: 41 B8 B0 00 00 00 - mov r8d,0B0
sora_2nd.exe+2D1B8A: 89 B9 B8 00 00 00 - mov [rcx+0B8],edi
sora_2nd.exe+2D1B90: E8 5B 1A 5D 00 - call sora_2nd.exe+8A35F0
sora_2nd.exe+2D1B95: E9 AE FA FF FF - jmp sora_2nd.exe+2D1648
sora_2nd.exe+2D1B9A: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1B9F: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1BA3: 48 8B 35 0E E3 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D1BAA: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1BAD: 74 1B - je short sora_2nd.exe+2D1BCA
sora_2nd.exe+2D1BAF: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1BB2: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1BB6: E8 E5 43 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1BBB: 8B D0 - mov edx,eax
sora_2nd.exe+2D1BBD: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1BC0: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1BC3: 41 FF D1 - call r9
sora_2nd.exe+2D1BC6: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D1BCA: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1BCE: 74 20 - je short sora_2nd.exe+2D1BF0
sora_2nd.exe+2D1BD0: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1BD3: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1BD6: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1BDA: E8 C1 43 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1BDF: 8B D0 - mov edx,eax
sora_2nd.exe+2D1BE1: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1BE4: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1BE7: 41 FF D1 - call r9
sora_2nd.exe+2D1BEA: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1BED: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1BF0: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1BF4: 74 19 - je short sora_2nd.exe+2D1C0F
sora_2nd.exe+2D1BF6: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1BF9: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D1BFC: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D1BFF: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1C02: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1C06: 41 FF D1 - call r9
sora_2nd.exe+2D1C09: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1C0C: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1C0F: F3 44 0F 10 25 3C BA 85 00 - movss xmm12,[rel sora_2nd.exe+B2D654]
sora_2nd.exe+2D1C18: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D1C1C: 74 04 - je short sora_2nd.exe+2D1C22
sora_2nd.exe+2D1C1E: 45 0F 28 C4 - movaps xmm8,xmm12
sora_2nd.exe+2D1C22: 48 8B 0D 1F B5 98 00 - mov rcx,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D1C29: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1C2C: 4C 8B A1 F8 00 00 00 - mov r12,[rcx+0F8]
sora_2nd.exe+2D1C33: 0F 10 81 F0 00 00 00 - movups xmm0,[rcx+0F0]
sora_2nd.exe+2D1C3A: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1C3D: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1C41: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D1C46: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1C49: 74 0D - je short sora_2nd.exe+2D1C58
sora_2nd.exe+2D1C4B: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1C4E: 8B 14 C1 - mov edx,[rcx+rax*8]
sora_2nd.exe+2D1C51: 44 8B 7C C1 04 - mov r15d,[rcx+rax*8+4]
sora_2nd.exe+2D1C56: EB 09 - jmp short sora_2nd.exe+2D1C61
sora_2nd.exe+2D1C58: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1C5D: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1C61: 48 8B 35 50 E2 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D1C68: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1C6B: 74 1B - je short sora_2nd.exe+2D1C88
sora_2nd.exe+2D1C6D: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1C70: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1C74: E8 27 43 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1C79: 8B D0 - mov edx,eax
sora_2nd.exe+2D1C7B: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1C7E: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1C81: 41 FF D1 - call r9
sora_2nd.exe+2D1C84: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D1C88: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1C8C: 74 20 - je short sora_2nd.exe+2D1CAE
sora_2nd.exe+2D1C8E: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1C91: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1C94: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1C98: E8 03 43 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1C9D: 8B D0 - mov edx,eax
sora_2nd.exe+2D1C9F: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1CA2: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1CA5: 41 FF D1 - call r9
sora_2nd.exe+2D1CA8: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1CAB: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1CAE: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1CB2: 74 19 - je short sora_2nd.exe+2D1CCD
sora_2nd.exe+2D1CB4: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1CB7: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D1CBA: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D1CBD: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1CC0: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1CC4: 41 FF D1 - call r9
sora_2nd.exe+2D1CC7: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1CCA: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1CCD: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D1CD1: 74 05 - je short sora_2nd.exe+2D1CD8
sora_2nd.exe+2D1CD3: F3 45 0F 58 C5 - addss xmm8,xmm13
sora_2nd.exe+2D1CD8: 48 8B 0D 69 B4 98 00 - mov rcx,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D1CDF: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1CE2: 4C 8B A1 18 01 00 00 - mov r12,[rcx+118]
sora_2nd.exe+2D1CE9: 0F 10 81 10 01 00 00 - movups xmm0,[rcx+110]
sora_2nd.exe+2D1CF0: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1CF3: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1CF7: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D1CFC: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1CFF: 74 0D - je short sora_2nd.exe+2D1D0E
sora_2nd.exe+2D1D01: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1D04: 8B 14 C1 - mov edx,[rcx+rax*8]
sora_2nd.exe+2D1D07: 44 8B 7C C1 04 - mov r15d,[rcx+rax*8+4]
sora_2nd.exe+2D1D0C: EB 09 - jmp short sora_2nd.exe+2D1D17
sora_2nd.exe+2D1D0E: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1D13: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1D17: 48 8B 35 9A E1 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D1D1E: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1D21: 74 1B - je short sora_2nd.exe+2D1D3E
sora_2nd.exe+2D1D23: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1D26: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1D2A: E8 71 42 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1D2F: 8B D0 - mov edx,eax
sora_2nd.exe+2D1D31: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1D34: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1D37: 41 FF D1 - call r9
sora_2nd.exe+2D1D3A: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D1D3E: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1D42: 74 20 - je short sora_2nd.exe+2D1D64
sora_2nd.exe+2D1D44: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1D47: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1D4A: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1D4E: E8 4D 42 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1D53: 8B D0 - mov edx,eax
sora_2nd.exe+2D1D55: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1D58: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1D5B: 41 FF D1 - call r9
sora_2nd.exe+2D1D5E: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1D61: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1D64: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1D68: 74 19 - je short sora_2nd.exe+2D1D83
sora_2nd.exe+2D1D6A: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1D6D: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D1D70: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D1D73: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1D76: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1D7A: 41 FF D1 - call r9
sora_2nd.exe+2D1D7D: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1D80: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1D83: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D1D87: 74 04 - je short sora_2nd.exe+2D1D8D
sora_2nd.exe+2D1D89: 41 0F 28 FD - movaps xmm7,xmm13
sora_2nd.exe+2D1D8D: 48 8B 0D B4 B3 98 00 - mov rcx,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D1D94: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1D97: 4C 8B A1 08 01 00 00 - mov r12,[rcx+108]
sora_2nd.exe+2D1D9E: 0F 10 81 00 01 00 00 - movups xmm0,[rcx+100]
sora_2nd.exe+2D1DA5: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1DA8: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1DAC: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D1DB1: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1DB4: 74 0D - je short sora_2nd.exe+2D1DC3
sora_2nd.exe+2D1DB6: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1DB9: 8B 14 C1 - mov edx,[rcx+rax*8]
sora_2nd.exe+2D1DBC: 44 8B 7C C1 04 - mov r15d,[rcx+rax*8+4]
sora_2nd.exe+2D1DC1: EB 09 - jmp short sora_2nd.exe+2D1DCC
sora_2nd.exe+2D1DC3: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1DC8: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1DCC: 48 8B 35 E5 E0 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D1DD3: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1DD6: 74 1B - je short sora_2nd.exe+2D1DF3
sora_2nd.exe+2D1DD8: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1DDB: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1DDF: E8 BC 41 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1DE4: 8B D0 - mov edx,eax
sora_2nd.exe+2D1DE6: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1DE9: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1DEC: 41 FF D1 - call r9
sora_2nd.exe+2D1DEF: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D1DF3: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1DF7: 74 20 - je short sora_2nd.exe+2D1E19
sora_2nd.exe+2D1DF9: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1DFC: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1DFF: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1E03: E8 98 41 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1E08: 8B D0 - mov edx,eax
sora_2nd.exe+2D1E0A: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1E0D: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1E10: 41 FF D1 - call r9
sora_2nd.exe+2D1E13: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1E16: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1E19: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1E1D: 74 19 - je short sora_2nd.exe+2D1E38
sora_2nd.exe+2D1E1F: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1E22: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D1E25: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D1E28: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1E2B: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1E2F: 41 FF D1 - call r9
sora_2nd.exe+2D1E32: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1E35: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1E38: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D1E3C: 74 05 - je short sora_2nd.exe+2D1E43
sora_2nd.exe+2D1E3E: F3 41 0F 58 FC - addss xmm7,xmm12
sora_2nd.exe+2D1E43: 48 8B 0D FE B2 98 00 - mov rcx,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D1E4A: 44 8B F7 - mov r14d,edi
sora_2nd.exe+2D1E4D: 4C 8B A1 28 01 00 00 - mov r12,[rcx+128]
sora_2nd.exe+2D1E54: 0F 10 81 20 01 00 00 - movups xmm0,[rcx+120]
sora_2nd.exe+2D1E5B: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D1E5E: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D1E62: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D1E67: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1E6A: 74 0D - je short sora_2nd.exe+2D1E79
sora_2nd.exe+2D1E6C: 48 03 C0 - add rax,rax
sora_2nd.exe+2D1E6F: 8B 14 C1 - mov edx,[rcx+rax*8]
sora_2nd.exe+2D1E72: 44 8B 7C C1 04 - mov r15d,[rcx+rax*8+4]
sora_2nd.exe+2D1E77: EB 09 - jmp short sora_2nd.exe+2D1E82
sora_2nd.exe+2D1E79: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D1E7E: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D1E82: 48 8B 35 2F E0 98 00 - mov rsi,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D1E89: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D1E8C: 74 1B - je short sora_2nd.exe+2D1EA9
sora_2nd.exe+2D1E8E: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1E91: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1E95: E8 06 41 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1E9A: 8B D0 - mov edx,eax
sora_2nd.exe+2D1E9C: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1E9F: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1EA2: 41 FF D1 - call r9
sora_2nd.exe+2D1EA5: 44 0F B6 F0 - movzx r14d,al
sora_2nd.exe+2D1EA9: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D1EAD: 74 20 - je short sora_2nd.exe+2D1ECF
sora_2nd.exe+2D1EAF: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1EB2: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D1EB5: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1EB9: E8 E2 40 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D1EBE: 8B D0 - mov edx,eax
sora_2nd.exe+2D1EC0: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1EC3: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D1EC6: 41 FF D1 - call r9
sora_2nd.exe+2D1EC9: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1ECC: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1ECF: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D1ED3: 74 19 - je short sora_2nd.exe+2D1EEE
sora_2nd.exe+2D1ED5: 48 8B 06 - mov rax,[rsi]
sora_2nd.exe+2D1ED8: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D1EDB: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D1EDE: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D1EE1: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D1EE5: 41 FF D1 - call r9
sora_2nd.exe+2D1EE8: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D1EEB: 44 0B F0 - or r14d,eax
sora_2nd.exe+2D1EEE: 41 F6 C6 04 - test r14b,4
sora_2nd.exe+2D1EF2: 74 46 - je short sora_2nd.exe+2D1F3A
sora_2nd.exe+2D1EF4: 0F 28 CF - movaps xmm1,xmm7
sora_2nd.exe+2D1EF7: 41 0F 28 C0 - movaps xmm0,xmm8
sora_2nd.exe+2D1EFB: F3 0F 59 CF - mulss xmm1,xmm7
sora_2nd.exe+2D1EFF: F3 41 0F 59 C0 - mulss xmm0,xmm8
sora_2nd.exe+2D1F04: F3 0F 58 C8 - addss xmm1,xmm0
sora_2nd.exe+2D1F08: 41 0F 2F CF - comiss xmm1,xmm15
sora_2nd.exe+2D1F0C: 72 2C - jb short sora_2nd.exe+2D1F3A
sora_2nd.exe+2D1F0E: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D1F11: 0F 2E C1 - ucomiss xmm0,xmm1
sora_2nd.exe+2D1F14: 77 09 - ja short sora_2nd.exe+2D1F1F
sora_2nd.exe+2D1F16: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D1F19: F3 0F 51 C1 - sqrtss xmm0,xmm1
sora_2nd.exe+2D1F1D: EB 08 - jmp short sora_2nd.exe+2D1F27
sora_2nd.exe+2D1F1F: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+2D1F22: E8 3D 0C 5D 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+2D1F27: F3 0F 5E F8 - divss xmm7,xmm0
sora_2nd.exe+2D1F2B: F3 44 0F 5E C0 - divss xmm8,xmm0
sora_2nd.exe+2D1F30: F3 41 0F 59 FE - mulss xmm7,xmm14
sora_2nd.exe+2D1F35: F3 45 0F 59 C6 - mulss xmm8,xmm14
sora_2nd.exe+2D1F3A: 44 0F 28 BC 24 60 01 00 00 - movaps xmm15,[rsp+160]
sora_2nd.exe+2D1F43: F3 45 0F 58 C8 - addss xmm9,xmm8
sora_2nd.exe+2D1F48: 44 0F 28 84 24 D0 01 00 00 - movaps xmm8,[rsp+1D0]
sora_2nd.exe+2D1F51: F3 44 0F 58 DF - addss xmm11,xmm7
sora_2nd.exe+2D1F56: 44 0F 28 B4 24 70 01 00 00 - movaps xmm14,[rsp+170]
sora_2nd.exe+2D1F5F: 45 84 ED - test r13b,r13b
sora_2nd.exe+2D1F62: 0F 84 45 01 00 00 - je near sora_2nd.exe+2D20AD
sora_2nd.exe+2D1F68: 41 0F 28 C1 - movaps xmm0,xmm9
sora_2nd.exe+2D1F6C: 41 0F 28 CB - movaps xmm1,xmm11
sora_2nd.exe+2D1F70: F3 41 0F 59 C1 - mulss xmm0,xmm9
sora_2nd.exe+2D1F75: F3 41 0F 59 CB - mulss xmm1,xmm11
sora_2nd.exe+2D1F7A: F3 0F 58 C8 - addss xmm1,xmm0
sora_2nd.exe+2D1F7E: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D1F81: 0F 2E C1 - ucomiss xmm0,xmm1
sora_2nd.exe+2D1F84: 77 09 - ja short sora_2nd.exe+2D1F8F
sora_2nd.exe+2D1F86: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D1F89: F3 0F 51 C1 - sqrtss xmm0,xmm1
sora_2nd.exe+2D1F8D: EB 08 - jmp short sora_2nd.exe+2D1F97
sora_2nd.exe+2D1F8F: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+2D1F92: E8 CD 0B 5D 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+2D1F97: 0F 2F 05 52 A9 85 00 - comiss xmm0,[rel sora_2nd.exe+B2C8F0]
sora_2nd.exe+2D1F9E: 0F 86 09 01 00 00 - jbe near sora_2nd.exe+2D20AD
sora_2nd.exe+2D1FA4: 80 7B 54 00 - cmp byte [rbx+54],0
sora_2nd.exe+2D1FA8: 0F 85 FF 00 00 00 - jne near sora_2nd.exe+2D20AD
sora_2nd.exe+2D1FAE: 48 8B 15 8B A7 98 00 - mov rdx,[rel sora_2nd.exe+C5C740]
sora_2nd.exe+2D1FB5: C7 44 24 5C 00 00 00 00 - mov dword [rsp+5C],0
sora_2nd.exe+2D1FBD: 48 63 82 30 07 00 00 - movsxd rax,[rdx+730]
sora_2nd.exe+2D1FC4: 48 69 C8 A0 01 00 00 - imul rcx,rax,1A0
sora_2nd.exe+2D1FCB: F3 0F 10 84 11 C8 01 00 00 - movss xmm0,[rcx+rdx+1C8]
sora_2nd.exe+2D1FD4: F3 0F 10 8C 11 D0 01 00 00 - movss xmm1,[rcx+rdx+1D0]
sora_2nd.exe+2D1FDD: F3 0F 5C 84 11 04 02 00 00 - subss xmm0,[rcx+rdx+204]
sora_2nd.exe+2D1FE6: F3 0F 5C 8C 11 0C 02 00 00 - subss xmm1,[rcx+rdx+20C]
sora_2nd.exe+2D1FEF: 48 8D 54 24 58 - lea rdx,[rsp+58]
sora_2nd.exe+2D1FF4: 48 8D 4D 38 - lea rcx,[rbp+38]
sora_2nd.exe+2D1FF8: F3 0F 11 44 24 58 - movss [rsp+58],xmm0
sora_2nd.exe+2D1FFE: F3 0F 11 4C 24 60 - movss [rsp+60],xmm1
sora_2nd.exe+2D2004: E8 D7 09 D8 FF - call sora_2nd.exe+529E0
sora_2nd.exe+2D2009: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D200C: F3 0F 10 60 08 - movss xmm4,[rax+8]
sora_2nd.exe+2D2011: F3 0F 10 28 - movss xmm5,[rax]
sora_2nd.exe+2D2015: F3 0F 10 50 04 - movss xmm2,[rax+4]
sora_2nd.exe+2D201A: 0F 28 CD - movaps xmm1,xmm5
sora_2nd.exe+2D201D: 48 8B 03 - mov rax,[rbx]
sora_2nd.exe+2D2020: 0F 28 DA - movaps xmm3,xmm2
sora_2nd.exe+2D2023: F3 41 0F 59 C9 - mulss xmm1,xmm9
sora_2nd.exe+2D2028: F3 0F 59 DE - mulss xmm3,xmm6
sora_2nd.exe+2D202C: F3 41 0F 59 D1 - mulss xmm2,xmm9
sora_2nd.exe+2D2031: 0F 28 C3 - movaps xmm0,xmm3
sora_2nd.exe+2D2034: F3 0F 5C C4 - subss xmm0,xmm4
sora_2nd.exe+2D2038: F3 41 0F 59 C3 - mulss xmm0,xmm11
sora_2nd.exe+2D203D: F3 0F 5C C8 - subss xmm1,xmm0
sora_2nd.exe+2D2041: 0F 28 C5 - movaps xmm0,xmm5
sora_2nd.exe+2D2044: F3 0F 59 C6 - mulss xmm0,xmm6
sora_2nd.exe+2D2048: F3 0F 5C EB - subss xmm5,xmm3
sora_2nd.exe+2D204C: F3 0F 11 4C 24 58 - movss [rsp+58],xmm1
sora_2nd.exe+2D2052: 0F 28 CC - movaps xmm1,xmm4
sora_2nd.exe+2D2055: F3 0F 59 CE - mulss xmm1,xmm6
sora_2nd.exe+2D2059: F3 41 0F 59 E1 - mulss xmm4,xmm9
sora_2nd.exe+2D205E: F3 0F 5C C8 - subss xmm1,xmm0
sora_2nd.exe+2D2062: F3 41 0F 59 EB - mulss xmm5,xmm11
sora_2nd.exe+2D2067: F3 0F 5C E5 - subss xmm4,xmm5
sora_2nd.exe+2D206B: F3 41 0F 59 CB - mulss xmm1,xmm11
sora_2nd.exe+2D2070: F3 0F 5C D1 - subss xmm2,xmm1
sora_2nd.exe+2D2074: F3 0F 11 64 24 60 - movss [rsp+60],xmm4
sora_2nd.exe+2D207A: F3 0F 11 54 24 5C - movss [rsp+5C],xmm2
sora_2nd.exe+2D2080: FF 50 18 - call qword [rax+18]
sora_2nd.exe+2D2083: 84 C0 - test al,al
sora_2nd.exe+2D2085: 74 17 - je short sora_2nd.exe+2D209E
sora_2nd.exe+2D2087: F3 44 0F 11 4C 24 5C - movss [rsp+5C],xmm9
sora_2nd.exe+2D208E: C7 44 24 58 00 00 00 00 - mov dword [rsp+58],0
sora_2nd.exe+2D2096: C7 44 24 60 00 00 00 00 - mov dword [rsp+60],0
sora_2nd.exe+2D209E: 48 8D 54 24 58 - lea rdx,[rsp+58]
sora_2nd.exe+2D20A3: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D20A6: E8 E5 28 00 00 - call sora_2nd.exe+2D4990
sora_2nd.exe+2D20AB: EB 0F - jmp short sora_2nd.exe+2D20BC
sora_2nd.exe+2D20AD: C6 43 18 00 - mov byte [rbx+18],0
sora_2nd.exe+2D20B1: 48 C7 43 08 00 00 00 00 - mov qword [rbx+8],0
sora_2nd.exe+2D20B9: 89 7B 10 - mov [rbx+10],edi
sora_2nd.exe+2D20BC: 41 0F 28 C1 - movaps xmm0,xmm9
sora_2nd.exe+2D20C0: 45 32 E4 - xor r12b,r12b
sora_2nd.exe+2D20C3: F3 41 0F 59 C1 - mulss xmm0,xmm9
sora_2nd.exe+2D20C8: 41 0F 28 CB - movaps xmm1,xmm11
sora_2nd.exe+2D20CC: 44 88 63 3A - mov [rbx+3A],r12b
sora_2nd.exe+2D20D0: F3 41 0F 59 CB - mulss xmm1,xmm11
sora_2nd.exe+2D20D5: F3 0F 58 C8 - addss xmm1,xmm0
sora_2nd.exe+2D20D9: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D20DC: 0F 2E C1 - ucomiss xmm0,xmm1
sora_2nd.exe+2D20DF: 77 09 - ja short sora_2nd.exe+2D20EA
sora_2nd.exe+2D20E1: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D20E4: F3 0F 51 C1 - sqrtss xmm0,xmm1
sora_2nd.exe+2D20E8: EB 08 - jmp short sora_2nd.exe+2D20F2
sora_2nd.exe+2D20EA: 0F 28 C1 - movaps xmm0,xmm1
sora_2nd.exe+2D20ED: E8 72 0A 5D 00 - call sora_2nd.exe+8A2B64
sora_2nd.exe+2D20F2: 0F 2F 05 FB A9 85 00 - comiss xmm0,[rel sora_2nd.exe+B2CAF4]
sora_2nd.exe+2D20F9: F3 0F 10 3D 4B A9 85 00 - movss xmm7,[rel sora_2nd.exe+B2CA4C]
sora_2nd.exe+2D2101: 76 49 - jbe short sora_2nd.exe+2D214C
sora_2nd.exe+2D2103: 41 0F 28 D3 - movaps xmm2,xmm11
sora_2nd.exe+2D2107: 41 0F 28 C9 - movaps xmm1,xmm9
sora_2nd.exe+2D210B: F3 0F 59 53 44 - mulss xmm2,[rbx+44]
sora_2nd.exe+2D2110: F3 0F 59 4B 48 - mulss xmm1,[rbx+48]
sora_2nd.exe+2D2115: F3 0F 58 D1 - addss xmm2,xmm1
sora_2nd.exe+2D2119: F3 41 0F 5D D5 - minss xmm2,xmm13
sora_2nd.exe+2D211E: F3 44 0F 5F E2 - maxss xmm12,xmm2
sora_2nd.exe+2D2123: 41 0F 28 C4 - movaps xmm0,xmm12
sora_2nd.exe+2D2127: E8 44 D7 5C 00 - call sora_2nd.exe+89F870
sora_2nd.exe+2D212C: 0F 2F 05 3D AA 85 00 - comiss xmm0,[rel sora_2nd.exe+B2CB70]
sora_2nd.exe+2D2133: 76 17 - jbe short sora_2nd.exe+2D214C
sora_2nd.exe+2D2135: F3 44 0F 11 5B 44 - movss [rbx+44],xmm11
sora_2nd.exe+2D213B: 41 B4 01 - mov r12b,1
sora_2nd.exe+2D213E: F3 44 0F 11 4B 48 - movss [rbx+48],xmm9
sora_2nd.exe+2D2144: 89 7B 3C - mov [rbx+3C],edi
sora_2nd.exe+2D2147: FF 43 40 - inc dword [rbx+40]
sora_2nd.exe+2D214A: EB 27 - jmp short sora_2nd.exe+2D2173
sora_2nd.exe+2D214C: F3 0F 10 05 20 A9 98 00 - movss xmm0,[rel sora_2nd.exe+C5CA74]
sora_2nd.exe+2D2154: F3 0F 58 43 3C - addss xmm0,[rbx+3C]
sora_2nd.exe+2D2159: F3 0F 5D C7 - minss xmm0,xmm7
sora_2nd.exe+2D215D: 0F 2F C7 - comiss xmm0,xmm7
sora_2nd.exe+2D2160: F3 0F 11 43 3C - movss [rbx+3C],xmm0
sora_2nd.exe+2D2165: 72 0C - jb short sora_2nd.exe+2D2173
sora_2nd.exe+2D2167: F3 44 0F 11 5B 44 - movss [rbx+44],xmm11
sora_2nd.exe+2D216D: F3 44 0F 11 4B 48 - movss [rbx+48],xmm9
sora_2nd.exe+2D2173: 4C 8B 35 3E DD 98 00 - mov r14,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D217A: 33 D2 - xor edx,edx
sora_2nd.exe+2D217C: E8 FF 0D D6 FF - call sora_2nd.exe+32F80
sora_2nd.exe+2D2181: 4C 8B 05 90 AA 98 00 - mov r8,[rel sora_2nd.exe+C5CC18]
sora_2nd.exe+2D2188: 44 8B D0 - mov r10d,eax
sora_2nd.exe+2D218B: 41 8B 10 - mov edx,[r8]
sora_2nd.exe+2D218E: E8 0D 3E D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D2193: 41 8B 50 04 - mov edx,[r8+4]
sora_2nd.exe+2D2197: 8B F0 - mov esi,eax
sora_2nd.exe+2D2199: E8 02 3E D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D219E: 44 0F 28 A4 24 90 01 00 00 - movaps xmm12,[rsp+190]
sora_2nd.exe+2D21A7: 44 8B E8 - mov r13d,eax
sora_2nd.exe+2D21AA: 44 0F 28 9C 24 A0 01 00 00 - movaps xmm11,[rsp+1A0]
sora_2nd.exe+2D21B3: 44 0F 28 8C 24 C0 01 00 00 - movaps xmm9,[rsp+1C0]
sora_2nd.exe+2D21BC: 41 83 FA FF - cmp r10d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D21C0: 74 19 - je short sora_2nd.exe+2D21DB
sora_2nd.exe+2D21C2: 49 8B 0E - mov rcx,[r14]
sora_2nd.exe+2D21C5: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D21C8: 41 8B D2 - mov edx,r10d
sora_2nd.exe+2D21CB: 4C 8B 49 28 - mov r9,[rcx+28]
sora_2nd.exe+2D21CF: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D21D2: 41 FF D1 - call r9
sora_2nd.exe+2D21D5: 44 0F B6 F8 - movzx r15d,al
sora_2nd.exe+2D21D9: EB 03 - jmp short sora_2nd.exe+2D21DE
sora_2nd.exe+2D21DB: 45 32 FF - xor r15b,r15b
sora_2nd.exe+2D21DE: 83 FE FF - cmp esi,0FFFFFFFF // signed:-1
sora_2nd.exe+2D21E1: 74 17 - je short sora_2nd.exe+2D21FA
sora_2nd.exe+2D21E3: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D21E6: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D21E9: 8B D6 - mov edx,esi
sora_2nd.exe+2D21EB: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D21EE: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D21F2: 41 FF D1 - call r9
sora_2nd.exe+2D21F5: 0F B6 F0 - movzx esi,al
sora_2nd.exe+2D21F8: EB 03 - jmp short sora_2nd.exe+2D21FD
sora_2nd.exe+2D21FA: 40 32 F6 - xor sil,sil
sora_2nd.exe+2D21FD: 41 83 FD FF - cmp r13d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D2201: 74 16 - je short sora_2nd.exe+2D2219
sora_2nd.exe+2D2203: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2206: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2209: 41 8B D5 - mov edx,r13d
sora_2nd.exe+2D220C: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D220F: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D2213: 41 FF D1 - call r9
sora_2nd.exe+2D2216: 40 0A F0 - or sil,al
sora_2nd.exe+2D2219: 41 0A F7 - or sil,r15b
sora_2nd.exe+2D221C: 40 F6 C6 01 - test sil,1
sora_2nd.exe+2D2220: 0F 85 5E 01 00 00 - jne near sora_2nd.exe+2D2384
sora_2nd.exe+2D2226: 4C 8B 35 8B DC 98 00 - mov r14,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D222D: BA 03 00 00 00 - mov edx,3
sora_2nd.exe+2D2232: E8 49 0D D6 FF - call sora_2nd.exe+32F80
sora_2nd.exe+2D2237: 4C 8B 05 DA A9 98 00 - mov r8,[rel sora_2nd.exe+C5CC18]
sora_2nd.exe+2D223E: 44 8B D0 - mov r10d,eax
sora_2nd.exe+2D2241: 41 8B 50 30 - mov edx,[r8+30]
sora_2nd.exe+2D2245: E8 56 3D D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D224A: 41 8B 50 34 - mov edx,[r8+34]
sora_2nd.exe+2D224E: 8B F0 - mov esi,eax
sora_2nd.exe+2D2250: E8 4B 3D D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D2255: 44 8B E8 - mov r13d,eax
sora_2nd.exe+2D2258: 41 83 FA FF - cmp r10d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D225C: 74 19 - je short sora_2nd.exe+2D2277
sora_2nd.exe+2D225E: 49 8B 0E - mov rcx,[r14]
sora_2nd.exe+2D2261: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D2264: 41 8B D2 - mov edx,r10d
sora_2nd.exe+2D2267: 4C 8B 49 28 - mov r9,[rcx+28]
sora_2nd.exe+2D226B: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D226E: 41 FF D1 - call r9
sora_2nd.exe+2D2271: 44 0F B6 F8 - movzx r15d,al
sora_2nd.exe+2D2275: EB 03 - jmp short sora_2nd.exe+2D227A
sora_2nd.exe+2D2277: 45 32 FF - xor r15b,r15b
sora_2nd.exe+2D227A: 83 FE FF - cmp esi,0FFFFFFFF // signed:-1
sora_2nd.exe+2D227D: 74 17 - je short sora_2nd.exe+2D2296
sora_2nd.exe+2D227F: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2282: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2285: 8B D6 - mov edx,esi
sora_2nd.exe+2D2287: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D228A: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D228E: 41 FF D1 - call r9
sora_2nd.exe+2D2291: 0F B6 F0 - movzx esi,al
sora_2nd.exe+2D2294: EB 03 - jmp short sora_2nd.exe+2D2299
sora_2nd.exe+2D2296: 40 32 F6 - xor sil,sil
sora_2nd.exe+2D2299: 41 83 FD FF - cmp r13d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D229D: 74 16 - je short sora_2nd.exe+2D22B5
sora_2nd.exe+2D229F: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D22A2: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D22A5: 41 8B D5 - mov edx,r13d
sora_2nd.exe+2D22A8: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D22AB: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D22AF: 41 FF D1 - call r9
sora_2nd.exe+2D22B2: 40 0A F0 - or sil,al
sora_2nd.exe+2D22B5: 41 0A F7 - or sil,r15b
sora_2nd.exe+2D22B8: 40 F6 C6 01 - test sil,1
sora_2nd.exe+2D22BC: 0F 85 C2 00 00 00 - jne near sora_2nd.exe+2D2384
sora_2nd.exe+2D22C2: 4C 8B 35 EF DB 98 00 - mov r14,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D22C9: BA 01 00 00 00 - mov edx,1
sora_2nd.exe+2D22CE: E8 AD 0C D6 FF - call sora_2nd.exe+32F80
sora_2nd.exe+2D22D3: 4C 8B 05 3E A9 98 00 - mov r8,[rel sora_2nd.exe+C5CC18]
sora_2nd.exe+2D22DA: 44 8B D0 - mov r10d,eax
sora_2nd.exe+2D22DD: 41 8B 50 10 - mov edx,[r8+10]
sora_2nd.exe+2D22E1: E8 BA 3C D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D22E6: 41 8B 50 14 - mov edx,[r8+14]
sora_2nd.exe+2D22EA: 8B F0 - mov esi,eax
sora_2nd.exe+2D22EC: E8 AF 3C D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D22F1: 44 8B E8 - mov r13d,eax
sora_2nd.exe+2D22F4: 41 83 FA FF - cmp r10d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D22F8: 74 19 - je short sora_2nd.exe+2D2313
sora_2nd.exe+2D22FA: 49 8B 0E - mov rcx,[r14]
sora_2nd.exe+2D22FD: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D2300: 41 8B D2 - mov edx,r10d
sora_2nd.exe+2D2303: 4C 8B 49 28 - mov r9,[rcx+28]
sora_2nd.exe+2D2307: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D230A: 41 FF D1 - call r9
sora_2nd.exe+2D230D: 44 0F B6 F8 - movzx r15d,al
sora_2nd.exe+2D2311: EB 03 - jmp short sora_2nd.exe+2D2316
sora_2nd.exe+2D2313: 45 32 FF - xor r15b,r15b
sora_2nd.exe+2D2316: 83 FE FF - cmp esi,0FFFFFFFF // signed:-1
sora_2nd.exe+2D2319: 74 17 - je short sora_2nd.exe+2D2332
sora_2nd.exe+2D231B: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D231E: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2321: 8B D6 - mov edx,esi
sora_2nd.exe+2D2323: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2326: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D232A: 41 FF D1 - call r9
sora_2nd.exe+2D232D: 0F B6 F0 - movzx esi,al
sora_2nd.exe+2D2330: EB 03 - jmp short sora_2nd.exe+2D2335
sora_2nd.exe+2D2332: 40 32 F6 - xor sil,sil
sora_2nd.exe+2D2335: 41 83 FD FF - cmp r13d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D2339: 74 16 - je short sora_2nd.exe+2D2351
sora_2nd.exe+2D233B: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D233E: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2341: 41 8B D5 - mov edx,r13d
sora_2nd.exe+2D2344: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2347: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D234B: 41 FF D1 - call r9
sora_2nd.exe+2D234E: 40 0A F0 - or sil,al
sora_2nd.exe+2D2351: 41 0A F7 - or sil,r15b
sora_2nd.exe+2D2354: 40 F6 C6 01 - test sil,1
sora_2nd.exe+2D2358: 75 2A - jne short sora_2nd.exe+2D2384
sora_2nd.exe+2D235A: F3 0F 10 0D 12 A7 98 00 - movss xmm1,[rel sora_2nd.exe+C5CA74]
sora_2nd.exe+2D2362: F3 0F 58 4B 4C - addss xmm1,[rbx+4C]
sora_2nd.exe+2D2367: F3 0F 5D CF - minss xmm1,xmm7
sora_2nd.exe+2D236B: F3 0F 11 4B 4C - movss [rbx+4C],xmm1
sora_2nd.exe+2D2370: F3 0F 10 43 3C - movss xmm0,[rbx+3C]
sora_2nd.exe+2D2375: 0F 2F C7 - comiss xmm0,xmm7
sora_2nd.exe+2D2378: 72 19 - jb short sora_2nd.exe+2D2393
sora_2nd.exe+2D237A: 0F 2F CF - comiss xmm1,xmm7
sora_2nd.exe+2D237D: 72 14 - jb short sora_2nd.exe+2D2393
sora_2nd.exe+2D237F: 89 7B 40 - mov [rbx+40],edi
sora_2nd.exe+2D2382: EB 0F - jmp short sora_2nd.exe+2D2393
sora_2nd.exe+2D2384: 0F 2F 7B 4C - comiss xmm7,[rbx+4C]
sora_2nd.exe+2D2388: 76 06 - jbe short sora_2nd.exe+2D2390
sora_2nd.exe+2D238A: FF 43 40 - inc dword [rbx+40]
sora_2nd.exe+2D238D: 41 B4 01 - mov r12b,1
sora_2nd.exe+2D2390: 89 7B 4C - mov [rbx+4C],edi
sora_2nd.exe+2D2393: 0F 28 BC 24 E0 01 00 00 - movaps xmm7,[rsp+1E0]
sora_2nd.exe+2D239B: 45 84 E4 - test r12b,r12b
sora_2nd.exe+2D239E: 4C 8B AC 24 10 02 00 00 - mov r13,[rsp+210]
sora_2nd.exe+2D23A6: 0F 95 C0 - setne al
sora_2nd.exe+2D23A9: 88 43 3A - mov [rbx+3A],al
sora_2nd.exe+2D23AC: 48 8B 05 6D DA 98 00 - mov rax,[rel sora_2nd.exe+C5FE20]
sora_2nd.exe+2D23B3: 80 B8 0E 3A 62 00 01 - cmp byte [rax+623A0E],1
sora_2nd.exe+2D23BA: 75 5E - jne short sora_2nd.exe+2D241A
sora_2nd.exe+2D23BC: 80 7B 18 00 - cmp byte [rbx+18],0
sora_2nd.exe+2D23C0: 74 08 - je short sora_2nd.exe+2D23CA
sora_2nd.exe+2D23C2: 89 BB 14 03 00 00 - mov [rbx+314],edi
sora_2nd.exe+2D23C8: EB 50 - jmp short sora_2nd.exe+2D241A
sora_2nd.exe+2D23CA: 48 63 83 A4 02 00 00 - movsxd rax,[rbx+2A4]
sora_2nd.exe+2D23D1: 48 8D 0C 40 - lea rcx,[rax+rax*2]
sora_2nd.exe+2D23D5: 8B 84 8B 70 02 00 00 - mov eax,[rbx+rcx*4+270]
sora_2nd.exe+2D23DC: 83 F8 09 - cmp eax,9
sora_2nd.exe+2D23DF: 77 39 - ja short sora_2nd.exe+2D241A
sora_2nd.exe+2D23E1: B9 29 02 00 00 - mov ecx,229
sora_2nd.exe+2D23E6: 0F A3 C1 - bt ecx,eax
sora_2nd.exe+2D23E9: 73 2F - jae short sora_2nd.exe+2D241A
sora_2nd.exe+2D23EB: F3 0F 10 15 11 A6 85 00 - movss xmm2,[rel sora_2nd.exe+B2CA04]
sora_2nd.exe+2D23F3: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+2D23F7: F3 0F 58 8B 14 03 00 00 - addss xmm1,[rbx+314]
sora_2nd.exe+2D23FF: 0F 28 C2 - movaps xmm0,xmm2
sora_2nd.exe+2D2402: F3 0F 5D C1 - minss xmm0,xmm1
sora_2nd.exe+2D2406: 0F 2F C2 - comiss xmm0,xmm2
sora_2nd.exe+2D2409: F3 0F 11 83 14 03 00 00 - movss [rbx+314],xmm0
sora_2nd.exe+2D2411: 72 07 - jb short sora_2nd.exe+2D241A
sora_2nd.exe+2D2413: C6 83 41 03 00 00 00 - mov byte [rbx+341],0
sora_2nd.exe+2D241A: 80 7C 24 50 00 - cmp byte [rsp+50],0
sora_2nd.exe+2D241F: 0F 84 9B 04 00 00 - je near sora_2nd.exe+2D28C0
sora_2nd.exe+2D2425: 48 8B 05 0C A3 98 00 - mov rax,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D242C: 80 B8 30 2D 00 00 00 - cmp byte [rax+2D30],0
sora_2nd.exe+2D2433: 0F 85 60 03 00 00 - jne near sora_2nd.exe+2D2799
sora_2nd.exe+2D2439: 83 7B 5C 01 - cmp dword [rbx+5C],1
sora_2nd.exe+2D243D: 0F 87 56 03 00 00 - ja near sora_2nd.exe+2D2799
sora_2nd.exe+2D2443: 48 8B 05 DE D9 98 00 - mov rax,[rel sora_2nd.exe+C5FE28]
sora_2nd.exe+2D244A: F6 80 00 01 00 00 20 - test byte [rax+100],20
sora_2nd.exe+2D2451: 75 74 - jne short sora_2nd.exe+2D24C7
sora_2nd.exe+2D2453: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D2456: 48 8D 0D 33 A3 98 00 - lea rcx,[rel sora_2nd.exe+C5C790]
sora_2nd.exe+2D245D: BA 40 00 00 00 - mov edx,40
sora_2nd.exe+2D2462: E8 C9 06 D6 FF - call sora_2nd.exe+32B30
sora_2nd.exe+2D2467: A8 04 - test al,4
sora_2nd.exe+2D2469: 75 44 - jne short sora_2nd.exe+2D24AF
sora_2nd.exe+2D246B: 48 8B 05 AE D9 98 00 - mov rax,[rel sora_2nd.exe+C5FE20]
sora_2nd.exe+2D2472: 48 8D 0D 17 A3 98 00 - lea rcx,[rel sora_2nd.exe+C5C790]
sora_2nd.exe+2D2479: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D247C: BA 06 00 00 00 - mov edx,6
sora_2nd.exe+2D2481: 44 38 80 0E 3A 62 00 - cmp [rax+623A0E],r8b
sora_2nd.exe+2D2488: 74 15 - je short sora_2nd.exe+2D249F
sora_2nd.exe+2D248A: E8 D1 03 D6 FF - call sora_2nd.exe+32860
sora_2nd.exe+2D248F: A8 01 - test al,1
sora_2nd.exe+2D2491: 74 1C - je short sora_2nd.exe+2D24AF
sora_2nd.exe+2D2493: 80 BB 41 03 00 00 00 - cmp byte [rbx+341],0
sora_2nd.exe+2D249A: 0F 94 C0 - sete al
sora_2nd.exe+2D249D: EB 0A - jmp short sora_2nd.exe+2D24A9
sora_2nd.exe+2D249F: E8 BC 03 D6 FF - call sora_2nd.exe+32860
sora_2nd.exe+2D24A4: C1 E8 02 - shr eax,2
sora_2nd.exe+2D24A7: 24 01 - and al,1
sora_2nd.exe+2D24A9: 88 83 41 03 00 00 - mov [rbx+341],al
sora_2nd.exe+2D24AF: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D24B2: 48 8D 0D D7 A2 98 00 - lea rcx,[rel sora_2nd.exe+C5C790]
sora_2nd.exe+2D24B9: BA 26 00 00 00 - mov edx,26
sora_2nd.exe+2D24BE: E8 6D 06 D6 FF - call sora_2nd.exe+32B30
sora_2nd.exe+2D24C3: A8 04 - test al,4
sora_2nd.exe+2D24C5: 74 07 - je short sora_2nd.exe+2D24CE
sora_2nd.exe+2D24C7: C6 83 41 03 00 00 00 - mov byte [rbx+341],0
sora_2nd.exe+2D24CE: 4C 8B 35 E3 D9 98 00 - mov r14,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D24D5: BA 08 00 00 00 - mov edx,8
sora_2nd.exe+2D24DA: E8 A1 0A D6 FF - call sora_2nd.exe+32F80
sora_2nd.exe+2D24DF: 4C 8B 05 32 A7 98 00 - mov r8,[rel sora_2nd.exe+C5CC18]
sora_2nd.exe+2D24E6: 44 8B D0 - mov r10d,eax
sora_2nd.exe+2D24E9: 41 8B 90 80 00 00 00 - mov edx,[r8+80]
sora_2nd.exe+2D24F0: E8 AB 3A D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D24F5: 41 8B 90 84 00 00 00 - mov edx,[r8+84]
sora_2nd.exe+2D24FC: 8B F0 - mov esi,eax
sora_2nd.exe+2D24FE: E8 9D 3A D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D2503: 44 8B E0 - mov r12d,eax
sora_2nd.exe+2D2506: 41 83 FA FF - cmp r10d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D250A: 74 19 - je short sora_2nd.exe+2D2525
sora_2nd.exe+2D250C: 49 8B 0E - mov rcx,[r14]
sora_2nd.exe+2D250F: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D2512: 41 8B D2 - mov edx,r10d
sora_2nd.exe+2D2515: 4C 8B 49 28 - mov r9,[rcx+28]
sora_2nd.exe+2D2519: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D251C: 41 FF D1 - call r9
sora_2nd.exe+2D251F: 44 0F B6 F8 - movzx r15d,al
sora_2nd.exe+2D2523: EB 03 - jmp short sora_2nd.exe+2D2528
sora_2nd.exe+2D2525: 45 32 FF - xor r15b,r15b
sora_2nd.exe+2D2528: 83 FE FF - cmp esi,0FFFFFFFF // signed:-1
sora_2nd.exe+2D252B: 74 17 - je short sora_2nd.exe+2D2544
sora_2nd.exe+2D252D: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2530: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2533: 8B D6 - mov edx,esi
sora_2nd.exe+2D2535: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2538: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D253C: 41 FF D1 - call r9
sora_2nd.exe+2D253F: 0F B6 F0 - movzx esi,al
sora_2nd.exe+2D2542: EB 03 - jmp short sora_2nd.exe+2D2547
sora_2nd.exe+2D2544: 40 32 F6 - xor sil,sil
sora_2nd.exe+2D2547: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D254B: 74 16 - je short sora_2nd.exe+2D2563
sora_2nd.exe+2D254D: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2550: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2553: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D2556: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2559: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D255D: 41 FF D1 - call r9
sora_2nd.exe+2D2560: 40 0A F0 - or sil,al
sora_2nd.exe+2D2563: 41 0A F7 - or sil,r15b
sora_2nd.exe+2D2566: 40 F6 C6 01 - test sil,1
sora_2nd.exe+2D256A: 0F 84 94 00 00 00 - je near sora_2nd.exe+2D2604
sora_2nd.exe+2D2570: 48 8B 05 C1 A1 98 00 - mov rax,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D2577: 0F 57 DB - xorps xmm3,xmm3
sora_2nd.exe+2D257A: 89 7C 24 48 - mov [rsp+48],edi
sora_2nd.exe+2D257E: 0F 57 D2 - xorps xmm2,xmm2
sora_2nd.exe+2D2581: C7 44 24 40 FF FF FF FF - mov dword [rsp+40],0FFFFFFFF // signed:-1
sora_2nd.exe+2D2589: 89 7C 24 38 - mov [rsp+38],edi
sora_2nd.exe+2D258D: 48 8B 88 C8 2C 00 00 - mov rcx,[rax+2CC8]
sora_2nd.exe+2D2594: C7 44 24 30 FF FF FF FF - mov dword [rsp+30],0FFFFFFFF // signed:-1
sora_2nd.exe+2D259C: F3 44 0F 11 6C 24 28 - movss [rsp+28],xmm13
sora_2nd.exe+2D25A3: F3 0F 11 74 24 20 - movss [rsp+20],xmm6
sora_2nd.exe+2D25A9: 48 83 B9 B8 00 00 00 00 - cmp qword [rcx+0B8],0
sora_2nd.exe+2D25B1: 48 8B 0D 78 D8 98 00 - mov rcx,[rel sora_2nd.exe+C5FE30]
sora_2nd.exe+2D25B8: 74 21 - je short sora_2nd.exe+2D25DB
sora_2nd.exe+2D25BA: BA F1 03 00 00 - mov edx,3F1
sora_2nd.exe+2D25BF: E8 7C 06 23 00 - call sora_2nd.exe+502C40
sora_2nd.exe+2D25C4: 48 8B 0D 6D A1 98 00 - mov rcx,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D25CB: 33 D2 - xor edx,edx
sora_2nd.exe+2D25CD: 48 8B 89 C8 2C 00 00 - mov rcx,[rcx+2CC8]
sora_2nd.exe+2D25D4: E8 27 F9 E2 FF - call sora_2nd.exe+101F00
sora_2nd.exe+2D25D9: EB 3B - jmp short sora_2nd.exe+2D2616
sora_2nd.exe+2D25DB: BA EA 03 00 00 - mov edx,3EA
sora_2nd.exe+2D25E0: E8 5B 06 23 00 - call sora_2nd.exe+502C40
sora_2nd.exe+2D25E5: 48 8B 0D 4C A1 98 00 - mov rcx,[rel sora_2nd.exe+C5C738]
sora_2nd.exe+2D25EC: B2 01 - mov dl,1
sora_2nd.exe+2D25EE: F3 0F 10 15 8E AF 85 00 - movss xmm2,[rel sora_2nd.exe+B2D584]
sora_2nd.exe+2D25F6: 48 8B 89 C8 2C 00 00 - mov rcx,[rcx+2CC8]
sora_2nd.exe+2D25FD: E8 6E FB E2 FF - call sora_2nd.exe+102170
sora_2nd.exe+2D2602: EB 12 - jmp short sora_2nd.exe+2D2616
sora_2nd.exe+2D2604: 41 B1 01 - mov r9b,1
sora_2nd.exe+2D2607: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D260A: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+2D260E: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D2611: E8 0A 05 00 00 - call sora_2nd.exe+2D2B20
sora_2nd.exe+2D2616: 4C 8B 3D 2B AB 98 00 - mov r15,[rel sora_2nd.exe+C5D148]
sora_2nd.exe+2D261D: 8B F7 - mov esi,edi
sora_2nd.exe+2D261F: 4D 8B A7 C8 03 00 00 - mov r12,[r15+3C8]
sora_2nd.exe+2D2626: 41 0F 10 87 C0 03 00 00 - movups xmm0,[r15+3C0]
sora_2nd.exe+2D262E: 49 8B C4 - mov rax,r12
sora_2nd.exe+2D2631: 48 C1 E8 20 - shr rax,20
sora_2nd.exe+2D2635: 0F 11 44 24 58 - movups [rsp+58],xmm0
sora_2nd.exe+2D263A: 83 F8 FF - cmp eax,0FFFFFFFF // signed:-1
sora_2nd.exe+2D263D: 74 0E - je short sora_2nd.exe+2D264D
sora_2nd.exe+2D263F: 48 03 C0 - add rax,rax
sora_2nd.exe+2D2642: 41 8B 14 C7 - mov edx,[r15+rax*8]
sora_2nd.exe+2D2646: 45 8B 7C C7 04 - mov r15d,[r15+rax*8+4]
sora_2nd.exe+2D264B: EB 09 - jmp short sora_2nd.exe+2D2656
sora_2nd.exe+2D264D: 44 8B 7C 24 5C - mov r15d,[rsp+5C]
sora_2nd.exe+2D2652: 8B 54 24 58 - mov edx,[rsp+58]
sora_2nd.exe+2D2656: 4C 8B 35 5B D8 98 00 - mov r14,[rel sora_2nd.exe+C5FEB8]
sora_2nd.exe+2D265D: 83 FA 7E - cmp edx,7E
sora_2nd.exe+2D2660: 74 1A - je short sora_2nd.exe+2D267C
sora_2nd.exe+2D2662: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2665: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D2669: E8 32 39 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D266E: 8B D0 - mov edx,eax
sora_2nd.exe+2D2670: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2673: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2676: 41 FF D1 - call r9
sora_2nd.exe+2D2679: 0F B6 F0 - movzx esi,al
sora_2nd.exe+2D267C: 41 83 FF 7E - cmp r15d,7E
sora_2nd.exe+2D2680: 74 1F - je short sora_2nd.exe+2D26A1
sora_2nd.exe+2D2682: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D2685: 41 8B D7 - mov edx,r15d
sora_2nd.exe+2D2688: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D268C: E8 0F 39 D6 FF - call sora_2nd.exe+35FA0
sora_2nd.exe+2D2691: 8B D0 - mov edx,eax
sora_2nd.exe+2D2693: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D2696: 41 B0 01 - mov r8b,1
sora_2nd.exe+2D2699: 41 FF D1 - call r9
sora_2nd.exe+2D269C: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D269F: 0B F0 - or esi,eax
sora_2nd.exe+2D26A1: 41 83 FC FF - cmp r12d,0FFFFFFFF // signed:-1
sora_2nd.exe+2D26A5: 74 18 - je short sora_2nd.exe+2D26BF
sora_2nd.exe+2D26A7: 49 8B 06 - mov rax,[r14]
sora_2nd.exe+2D26AA: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D26AD: 41 8B D4 - mov edx,r12d
sora_2nd.exe+2D26B0: 49 8B CE - mov rcx,r14
sora_2nd.exe+2D26B3: 4C 8B 48 28 - mov r9,[rax+28]
sora_2nd.exe+2D26B7: 41 FF D1 - call r9
sora_2nd.exe+2D26BA: 0F B6 C0 - movzx eax,al
sora_2nd.exe+2D26BD: 0B F0 - or esi,eax
sora_2nd.exe+2D26BF: C1 EE 02 - shr esi,2
sora_2nd.exe+2D26C2: 40 80 E6 01 - and sil,1
sora_2nd.exe+2D26C6: 40 88 73 2D - mov [rbx+2D],sil
sora_2nd.exe+2D26CA: F3 0F 10 8B 08 03 00 00 - movss xmm1,[rbx+308]
sora_2nd.exe+2D26D2: 0F 2F CE - comiss xmm1,xmm6
sora_2nd.exe+2D26D5: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D26D9: 76 3D - jbe short sora_2nd.exe+2D2718
sora_2nd.exe+2D26DB: F3 41 0F 5C CA - subss xmm1,xmm10
sora_2nd.exe+2D26E0: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D26E3: F3 0F 5F C1 - maxss xmm0,xmm1
sora_2nd.exe+2D26E7: F3 0F 11 83 08 03 00 00 - movss [rbx+308],xmm0
sora_2nd.exe+2D26EF: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D26F2: F3 0F 10 8B 04 03 00 00 - movss xmm1,[rbx+304]
sora_2nd.exe+2D26FA: F3 41 0F 5C CA - subss xmm1,xmm10
sora_2nd.exe+2D26FF: F3 0F 5F C1 - maxss xmm0,xmm1
sora_2nd.exe+2D2703: F3 0F 11 83 04 03 00 00 - movss [rbx+304],xmm0
sora_2nd.exe+2D270B: 48 8B 80 90 1D 00 00 - mov rax,[rax+1D90]
sora_2nd.exe+2D2712: 83 48 20 01 - or dword [rax+20],1
sora_2nd.exe+2D2716: EB 11 - jmp short sora_2nd.exe+2D2729
sora_2nd.exe+2D2718: 89 BB 04 03 00 00 - mov [rbx+304],edi
sora_2nd.exe+2D271E: 48 8B 80 90 1D 00 00 - mov rax,[rax+1D90]
sora_2nd.exe+2D2725: 83 60 20 FC - and dword [rax+20],0FFFFFFFC
sora_2nd.exe+2D2729: F3 0F 10 8B 38 03 00 00 - movss xmm1,[rbx+338]
sora_2nd.exe+2D2731: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D2734: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D2738: F3 41 0F 5C CA - subss xmm1,xmm10
sora_2nd.exe+2D273D: F3 0F 5F C1 - maxss xmm0,xmm1
sora_2nd.exe+2D2741: F3 0F 11 83 38 03 00 00 - movss [rbx+338],xmm0
sora_2nd.exe+2D2749: 0F 57 C0 - xorps xmm0,xmm0
sora_2nd.exe+2D274C: F3 0F 10 8B 0C 03 00 00 - movss xmm1,[rbx+30C]
sora_2nd.exe+2D2754: F3 41 0F 5C CA - subss xmm1,xmm10
sora_2nd.exe+2D2759: F3 0F 5F C1 - maxss xmm0,xmm1
sora_2nd.exe+2D275D: 0F 2F C6 - comiss xmm0,xmm6
sora_2nd.exe+2D2760: F3 0F 11 83 0C 03 00 00 - movss [rbx+30C],xmm0
sora_2nd.exe+2D2768: 48 8B 88 90 1D 00 00 - mov rcx,[rax+1D90]
sora_2nd.exe+2D276F: 76 06 - jbe short sora_2nd.exe+2D2777
sora_2nd.exe+2D2771: 83 49 20 04 - or dword [rcx+20],4
sora_2nd.exe+2D2775: EB 04 - jmp short sora_2nd.exe+2D277B
sora_2nd.exe+2D2777: 83 61 20 FB - and dword [rcx+20],0FFFFFFFB
sora_2nd.exe+2D277B: F3 0F 10 83 10 03 00 00 - movss xmm0,[rbx+310]
sora_2nd.exe+2D2783: 0F 2F C6 - comiss xmm0,xmm6
sora_2nd.exe+2D2786: 76 11 - jbe short sora_2nd.exe+2D2799
sora_2nd.exe+2D2788: F3 41 0F 5C C2 - subss xmm0,xmm10
sora_2nd.exe+2D278D: F3 0F 5F F0 - maxss xmm6,xmm0
sora_2nd.exe+2D2791: F3 0F 11 B3 10 03 00 00 - movss [rbx+310],xmm6
sora_2nd.exe+2D2799: 48 8B 4B 70 - mov rcx,[rbx+70]
sora_2nd.exe+2D279D: 48 85 C9 - test rcx,rcx
sora_2nd.exe+2D27A0: 0F 84 1A 01 00 00 - je near sora_2nd.exe+2D28C0
sora_2nd.exe+2D27A6: 48 83 B9 38 02 00 00 00 - cmp qword [rcx+238],0
sora_2nd.exe+2D27AE: 0F 84 0C 01 00 00 - je near sora_2nd.exe+2D28C0
sora_2nd.exe+2D27B4: 8B 81 90 01 00 00 - mov eax,[rcx+190]
sora_2nd.exe+2D27BA: 4C 8D 4D 48 - lea r9,[rbp+48]
sora_2nd.exe+2D27BE: 48 8B 35 63 D6 98 00 - mov rsi,[rel sora_2nd.exe+C5FE28]
sora_2nd.exe+2D27C5: 25 FF FF FF 3F - and eax,3FFFFFFF
sora_2nd.exe+2D27CA: 0F BA E8 1E - bts eax,1E
sora_2nd.exe+2D27CE: C7 44 24 20 FF FF 00 00 - mov dword [rsp+20],0FFFF
sora_2nd.exe+2D27D6: 89 45 4C - mov [rbp+4C],eax
sora_2nd.exe+2D27D9: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D27DC: 4C 8B B1 38 02 00 00 - mov r14,[rcx+238]
sora_2nd.exe+2D27E3: 48 8B CE - mov rcx,rsi
sora_2nd.exe+2D27E6: 49 8B D6 - mov rdx,r14
sora_2nd.exe+2D27E9: 89 7D 48 - mov [rbp+48],edi
sora_2nd.exe+2D27EC: E8 8F 9E 1F 00 - call sora_2nd.exe+4CC680
sora_2nd.exe+2D27F1: 48 8B D0 - mov rdx,rax
sora_2nd.exe+2D27F4: 48 85 C0 - test rax,rax
sora_2nd.exe+2D27F7: 0F 84 A0 00 00 00 - je near sora_2nd.exe+2D289D
sora_2nd.exe+2D27FD: 8B 45 48 - mov eax,[rbp+48]
sora_2nd.exe+2D2800: 85 C0 - test eax,eax
sora_2nd.exe+2D2802: 0F 88 95 00 00 00 - js near sora_2nd.exe+2D289D
sora_2nd.exe+2D2808: 48 8B 4A 30 - mov rcx,[rdx+30]
sora_2nd.exe+2D280C: 3B 41 08 - cmp eax,[rcx+8]
sora_2nd.exe+2D280F: 72 05 - jb short sora_2nd.exe+2D2816
sora_2nd.exe+2D2811: 48 8B CF - mov rcx,rdi
sora_2nd.exe+2D2814: EB 0D - jmp short sora_2nd.exe+2D2823
sora_2nd.exe+2D2816: 8B 49 04 - mov ecx,[rcx+4]
sora_2nd.exe+2D2819: 48 C1 E0 05 - shl rax,5
sora_2nd.exe+2D281D: 48 03 C8 - add rcx,rax
sora_2nd.exe+2D2820: 48 03 0A - add rcx,[rdx]
sora_2nd.exe+2D2823: 44 8B 41 1C - mov r8d,[rcx+1C]
sora_2nd.exe+2D2827: 41 8B C0 - mov eax,r8d
sora_2nd.exe+2D282A: 25 00 00 00 C0 - and eax,0C0000000
sora_2nd.exe+2D282F: 3D 00 00 00 C0 - cmp eax,0C0000000
sora_2nd.exe+2D2834: 75 17 - jne short sora_2nd.exe+2D284D
sora_2nd.exe+2D2836: 42 8D 04 85 00 00 00 00 - lea eax,[r8*4]
sora_2nd.exe+2D283E: C1 F8 02 - sar eax,2
sora_2nd.exe+2D2841: 85 C0 - test eax,eax
sora_2nd.exe+2D2843: 74 08 - je short sora_2nd.exe+2D284D
sora_2nd.exe+2D2845: 44 8B C0 - mov r8d,eax
sora_2nd.exe+2D2848: 4C 03 02 - add r8,[rdx]
sora_2nd.exe+2D284B: EB 07 - jmp short sora_2nd.exe+2D2854
sora_2nd.exe+2D284D: 4C 8D 05 B5 33 81 00 - lea r8,[rel sora_2nd.exe+AE5C09]
sora_2nd.exe+2D2854: 48 8B 86 90 16 01 00 - mov rax,[rsi+11690]
sora_2nd.exe+2D285B: 0F B6 80 08 04 00 00 - movzx eax,byte [rax+408]
sora_2nd.exe+2D2862: 84 C0 - test al,al
sora_2nd.exe+2D2864: 75 5A - jne short sora_2nd.exe+2D28C0
sora_2nd.exe+2D2866: 48 8B 86 90 16 01 00 - mov rax,[rsi+11690]
sora_2nd.exe+2D286D: 4C 8D 4D 4C - lea r9,[rbp+4C]
sora_2nd.exe+2D2871: C7 44 24 20 01 00 00 00 - mov dword [rsp+20],1
sora_2nd.exe+2D2879: 48 89 B8 D0 02 00 00 - mov [rax+2D0],rdi
sora_2nd.exe+2D2880: 48 8B 86 90 16 01 00 - mov rax,[rsi+11690]
sora_2nd.exe+2D2887: 48 89 B8 D8 02 00 00 - mov [rax+2D8],rdi
sora_2nd.exe+2D288E: 48 8B 8E 90 16 01 00 - mov rcx,[rsi+11690]
sora_2nd.exe+2D2895: 48 8B 01 - mov rax,[rcx]
sora_2nd.exe+2D2898: FF 50 10 - call qword [rax+10]
sora_2nd.exe+2D289B: EB 23 - jmp short sora_2nd.exe+2D28C0
sora_2nd.exe+2D289D: 4C 8D 0D 04 F1 83 00 - lea r9,[rel sora_2nd.exe+B119A8]
sora_2nd.exe+2D28A4: 4C 89 74 24 20 - mov [rsp+20],r14
sora_2nd.exe+2D28A9: 41 B8 C0 01 00 00 - mov r8d,1C0
sora_2nd.exe+2D28AF: 48 8D 15 FA F5 83 00 - lea rdx,[rel sora_2nd.exe+B11EB0]
sora_2nd.exe+2D28B6: B9 03 00 00 00 - mov ecx,3
sora_2nd.exe+2D28BB: E8 F0 95 2A 00 - call sora_2nd.exe+57BEB0
sora_2nd.exe+2D28C0: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D28C3: E8 68 39 00 00 - call sora_2nd.exe+2D6230
sora_2nd.exe+2D28C8: 48 8D 8B 10 01 00 00 - lea rcx,[rbx+110]
sora_2nd.exe+2D28CF: 41 0F 28 CA - movaps xmm1,xmm10
// ---------- INJECTING HERE ----------
sora_2nd.exe+2D28D3: E8 68 F7 00 00 - call sora_2nd.exe+2E2040
// ---------- DONE INJECTING ----------
sora_2nd.exe+2D28D8: 48 8B 03 - mov rax,[rbx]
sora_2nd.exe+2D28DB: 41 0F 28 C2 - movaps xmm0,xmm10
sora_2nd.exe+2D28DF: F3 0F 58 83 B8 02 00 00 - addss xmm0,[rbx+2B8]
sora_2nd.exe+2D28E7: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D28EA: F3 0F 11 83 B8 02 00 00 - movss [rbx+2B8],xmm0
sora_2nd.exe+2D28F2: FF 50 18 - call qword [rax+18]
sora_2nd.exe+2D28F5: 44 0F 28 AC 24 80 01 00 00 - movaps xmm13,[rsp+180]
sora_2nd.exe+2D28FE: 0F 28 B4 24 F0 01 00 00 - movaps xmm6,[rsp+1F0]
sora_2nd.exe+2D2906: 4C 8B BC 24 00 02 00 00 - mov r15,[rsp+200]
sora_2nd.exe+2D290E: 4C 8B B4 24 08 02 00 00 - mov r14,[rsp+208]
sora_2nd.exe+2D2916: 4C 8B A4 24 18 02 00 00 - mov r12,[rsp+218]
sora_2nd.exe+2D291E: 48 8B B4 24 50 02 00 00 - mov rsi,[rsp+250]
sora_2nd.exe+2D2926: 84 C0 - test al,al
sora_2nd.exe+2D2928: 75 10 - jne short sora_2nd.exe+2D293A
sora_2nd.exe+2D292A: 83 BB 98 00 00 00 03 - cmp dword [rbx+98],3
sora_2nd.exe+2D2931: 74 07 - je short sora_2nd.exe+2D293A
sora_2nd.exe+2D2933: 48 89 BB 90 00 00 00 - mov [rbx+90],rdi
sora_2nd.exe+2D293A: 45 33 C0 - xor r8d,r8d
sora_2nd.exe+2D293D: 41 0F 28 CA - movaps xmm1,xmm10
sora_2nd.exe+2D2941: 48 8B CB - mov rcx,rbx
sora_2nd.exe+2D2944: E8 07 99 00 00 - call sora_2nd.exe+2DC250
sora_2nd.exe+2D2949: 48 8B 43 60 - mov rax,[rbx+60]
sora_2nd.exe+2D294D: 48 8B 88 90 1D 00 00 - mov rcx,[rax+1D90]
sora_2nd.exe+2D2954: 48 8B 89 A8 05 00 00 - mov rcx,[rcx+5A8]
sora_2nd.exe+2D295B: E8 50 11 DE FF - call sora_2nd.exe+B3AB0
sora_2nd.exe+2D2960: 44 0F 28 94 24 B0 01 00 00 - movaps xmm10,[rsp+1B0]
sora_2nd.exe+2D2969: 48 8B BC 24 20 02 00 00 - mov rdi,[rsp+220]
sora_2nd.exe+2D2971: F3 0F 11 83 2C 03 00 00 - movss [rbx+32C],xmm0
sora_2nd.exe+2D2979: 48 8B 4D 50 - mov rcx,[rbp+50]
sora_2nd.exe+2D297D: 48 33 CC - xor rcx,rsp
sora_2nd.exe+2D2980: E8 5B 66 4F 00 - call sora_2nd.exe+7C8FE0
sora_2nd.exe+2D2985: 48 81 C4 28 02 00 00 - add rsp,228
sora_2nd.exe+2D298C: 5B - pop rbx
sora_2nd.exe+2D298D: 5D - pop rbp
sora_2nd.exe+2D298E: C3 - ret
}
Toggle Activation
96
0
Activate
Deactivate
262
"使用：【W / A / S / D】移動、【R / F】上昇・下降、【マウス移動】視点回転（カメラ操作）"
8000FF
1
264
"使用：【I / J / K / L】カメラ操作、【Page Up】マウス操作ON、【Page Down】マウス操作OFF"
8000FF
1
265
"使用：【F1】超低速モード、【F2】高速モード、【F3】超高速モード、【入力なし】通常速度"
8000FF
1
263
"Usage: W, A, S, D: move; R, F:up/down; Mouse: change view"
8000FF
1
266
"Usage: I, J, K, L: view angle; PgUp: enable mouse. PgDn: Disable mouse"
8000FF
1
267
"Usage: F1: Slow speed, F2: fast speed, F3: Ultra fast speed"
8000FF
1
279
"ccords.base"
1
0
808080
8 Bytes
cameracoordinates
280
"camx"
0
FF8080
Float
+0
8
281
"camy"
0
FF8080
Float
+0
10
282
"camz"
0
FF8080
Float
+0
C
283
"targetx"
0
FF8080
Float
+0
18
284
"targety"
0
FF8080
Float
+0
20
285
"targetz"
0
FF8080
Float
+0
1C
261
"HUD非表示 / Hide HUD [F7]"
Auto Assembler Script
{
Generated by AOBMaker, bbfox@https://github.com/bbfox0703/AOBMaker-Release
Date : 2026/08/20
}
[ENABLE]
aobscanmodule(INJECT_HIDE_HUD,$process,F3 0F 11 ?? 78 ?? 85)
// raw AOB: 89 47 48 8B 87 A8 01 00 00 89 47 4C 8B 87 AC 01 00 00 89 47 50 8B 87 E0 01 00 00 89 47 58 8B 87 E4 01 00 00 89 47 5C 8B 87 E8 01 00 00 89 47 60 F3 0F 10 86 DC 00 00 00 F3 0F 59 87 04 02 00 00 48 8B 8F 80 00 00 00 8B 87 C0 00 00 00 89 87 C4 00 00 00 F3 0F 11 47 78 48 85 C9 0F 84 ?? ?? ?? ?? 8B 87 A0 00 00 00 83 E0 0E 3C 0E 0F 85 ?? ?? ?? ?? F3 0F 10 41 08 F3 0F 11 85 E0 00 00 00 F3 0F 10 49 0C F3 0F 11 8D E4 00 00 00 F3 0F 10 41 10 F3 0F 11 85 E8 00 00 00 F3 0F 10 49 14 F3 0F 11 8D EC 00 00 00 F3 0F 10 41 18 F3 0F 11 85 F0 00 00 00
// injection point AOB: F3 0F 11 ?? 78 ?? 85 ?? 0F 84 ?? ?? ?? ?? 8B ?? A0 00 00 00 83 ?? 0E 3C 0E 0F 85 ?? ?? ?? ?? F3 0F 10 ?? 08 F3 0F 11 ?? ?? 00 00 00 F3 0F 10 ?? 0C F3 0F 11 ?? ?? 00 00 00 F3 0F 10 ?? 10 F3 0F 11 ?? ?? 00 00 00 F3 0F 10 ?? 14 F3 0F 11 ?? ?? 00 00 00 F3 0F 10 ?? 18 F3 0F 11 ?? ?? 00 00 00
alloc(newmem,$1000,INJECT_HIDE_HUD)
alloc(INJECT_HIDE_HUDo, $5)
label(code)
label(return)
INJECT_HIDE_HUDo:
readmem(INJECT_HIDE_HUD, $5)
newmem:
pxor xmm0, xmm0
code:
// movss [rdi+78],xmm0
reassemble(INJECT_HIDE_HUD)
jmp return
align 10 cc
INJECT_HIDE_HUD:
jmp newmem
return:
registersymbol(INJECT_HIDE_HUD INJECT_HIDE_HUDo)
[DISABLE]
INJECT_HIDE_HUD:
readmem(INJECT_HIDE_HUDo, $5)
unregistersymbol(INJECT_HIDE_HUD INJECT_HIDE_HUDo)
dealloc(newmem)
dealloc(INJECT_HIDE_HUDo)
{
// ORIGINAL CODE - INJECTION POINT: sora_2nd.exe+58022A
sora_2nd.exe+5801D7: 89 47 48 - mov [rdi+48],eax
sora_2nd.exe+5801DA: 8B 87 A8 01 00 00 - mov eax,[rdi+000001A8]
sora_2nd.exe+5801E0: 89 47 4C - mov [rdi+4C],eax
sora_2nd.exe+5801E3: 8B 87 AC 01 00 00 - mov eax,[rdi+000001AC]
sora_2nd.exe+5801E9: 89 47 50 - mov [rdi+50],eax
sora_2nd.exe+5801EC: 8B 87 E0 01 00 00 - mov eax,[rdi+000001E0]
sora_2nd.exe+5801F2: 89 47 58 - mov [rdi+58],eax
sora_2nd.exe+5801F5: 8B 87 E4 01 00 00 - mov eax,[rdi+000001E4]
sora_2nd.exe+5801FB: 89 47 5C - mov [rdi+5C],eax
sora_2nd.exe+5801FE: 8B 87 E8 01 00 00 - mov eax,[rdi+000001E8]
sora_2nd.exe+580204: 89 47 60 - mov [rdi+60],eax
sora_2nd.exe+580207: F3 0F 10 86 DC 00 00 00 - movss xmm0,[rsi+000000DC]
sora_2nd.exe+58020F: F3 0F 59 87 04 02 00 00 - mulss xmm0,[rdi+00000204]
sora_2nd.exe+580217: 48 8B 8F 80 00 00 00 - mov rcx,[rdi+00000080]
sora_2nd.exe+58021E: 8B 87 C0 00 00 00 - mov eax,[rdi+000000C0]
sora_2nd.exe+580224: 89 87 C4 00 00 00 - mov [rdi+000000C4],eax
// ---------- INJECTING HERE ----------
sora_2nd.exe+58022A: F3 0F 11 47 78 - movss [rdi+78],xmm0
// ---------- DONE INJECTING ----------
sora_2nd.exe+58022F: 48 85 C9 - test rcx,rcx
sora_2nd.exe+580232: 0F 84 08 03 00 00 - je sora_2nd.exe+580540
sora_2nd.exe+580238: 8B 87 A0 00 00 00 - mov eax,[rdi+000000A0]
sora_2nd.exe+58023E: 83 E0 0E - and eax,0E
sora_2nd.exe+580241: 3C 0E - cmp al,0E
sora_2nd.exe+580243: 0F 85 D2 00 00 00 - jne sora_2nd.exe+58031B
sora_2nd.exe+580249: F3 0F 10 41 08 - movss xmm0,[rcx+08]
sora_2nd.exe+58024E: F3 0F 11 85 E0 00 00 00 - movss [rbp+000000E0],xmm0
sora_2nd.exe+580256: F3 0F 10 49 0C - movss xmm1,[rcx+0C]
sora_2nd.exe+58025B: F3 0F 11 8D E4 00 00 00 - movss [rbp+000000E4],xmm1
sora_2nd.exe+580263: F3 0F 10 41 10 - movss xmm0,[rcx+10]
sora_2nd.exe+580268: F3 0F 11 85 E8 00 00 00 - movss [rbp+000000E8],xmm0
sora_2nd.exe+580270: F3 0F 10 49 14 - movss xmm1,[rcx+14]
sora_2nd.exe+580275: F3 0F 11 8D EC 00 00 00 - movss [rbp+000000EC],xmm1
sora_2nd.exe+58027D: F3 0F 10 41 18 - movss xmm0,[rcx+18]
sora_2nd.exe+580282: F3 0F 11 85 F0 00 00 00 - movss [rbp+000000F0],xmm0
}
Toggle Activation
118
0
175
"空の軌跡 the 2nd / bbfox@opencheattables.com"
00B300
1
176
"Quest.Completed"
0:いいえ / No
1:はい / Yes
1
270
"Char.ID"
0:艾絲芾爾 / エステル / Estelle
1:約書亞 / ヨシュア / Joshua
2:シェラザード / Scherazard
3:オリビエ / Olivier
4:克蘿賽 / クローゼ / Kloe
5:阿加特 / アガット / Agate
6:ティータ / Tita
7:陣 / ジン / Zin
101:アネラス
1
187
"Quartz.ID"
1
177
"Quest.StatusID"
0:未開始 / not started
4:(未確認) 失敗? / Failed?
16:依頼前 / 未受注 / before accept
18:達成済み / completed
22:報告済み / reported
48:進行中 / 受注中 / in progress
50:達成済み / completed
52:報告済み / reported
54:報告済み / reported
1
178
"Quest.LogID"
255:無効値 / Empty
1
287
"空の軌跡 the 2nd攻略wiki"
1
288
"https://kamigame.jp/soranokiseki2nd/index.html"
1
The movement algorithm is based on Cyber's CS4 script, adapted for Kuro's engine by me. Credit also goes to DhaosCollider for AOB (from Kuro CLE) for FOV, to lock player movement, and for the fantastic idea of using the latter to allow WASD control. My eternal gratitude to both!
--[[
[ENABLE]
{$lua}
if syntaxcheck then return end
]]--
-- **デバッグモードの設定 (デフォルト: 無効)**
local debugMode = false
-- AOBScanModule関数
if not AOBScanModule then
function AOBScanModule(moduleName, signature, scanOptions)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then
if debugMode then print("❗ Error: Module " .. moduleName .. " not found!") end
return nil
end
if debugMode then
print(string.format("✔️ %s Base Address: 0x%X", moduleName, baseAddr))
print(string.format("🔬 Scanning Range: 0x%X - 0x%X", baseAddr, maxAddr))
end
local ms = createMemScan()
synchronize(function()
ms.firstScan(
soExactValue,
vtByteArray,
nil,
signature,
nil,
baseAddr,
maxAddr,
scanOptions or "+X+R",
fsmNotAligned,
"1",
true,
true,
false,
false
)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addr
synchronize(function()
if results.getCount() > 0 then
addr = results[0]
end
end)
if addr then
if debugMode then print("🔦 AOB found at: 0x" .. addr) end
else
if debugMode then print("💔 AOB not found in " .. moduleName) end
end
results.destroy()
ms.destroy()
return addr
end
end
registerLuaFunctionHighlight('AOBScanModule')
--[[
test AOBScanModule()
local aob_addr_str = AOBScanModule("???.exe", "48 8B 05 ?? ?? ?? ?? 33 ED 48 8B 88", "+X+R")
if aob_addr_str then
print("🔦 Final AOB Address: 0x" .. aob_addr_str)
else
print("💔 AOB not found in ???.exe")
end
]]--
-- AOBScanModuleN関数
if not AOBScanModuleN then
function AOBScanModuleN(moduleName, signature, maxResults, scanOptions)
local baseAddr = nil
local maxAddr = 0
local modList
synchronize(function()
modList = enumModules()
end)
for _, mod in ipairs(modList) do
if string.lower(mod.Name) == string.lower(moduleName) then
baseAddr = mod.Address
maxAddr = baseAddr + mod.Size
break
end
end
if not baseAddr then
if debugMode then print("❗ Error: Module " .. moduleName .. " not found!") end
return nil
end
if debugMode then
print(string.format("✔️ %s Base Address: 0x%X", moduleName, baseAddr))
print(string.format("🔬 Scanning Range: 0x%X - 0x%X", baseAddr, maxAddr))
end
local ms = createMemScan()
synchronize(function()
ms.firstScan(
soExactValue,
vtByteArray,
nil,
signature,
nil,
baseAddr,
maxAddr,
scanOptions or "+X+R",
fsmNotAligned,
"1",
true,
true,
false,
false
)
end)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
local addrs = {}
synchronize(function()
local count = results.getCount()
for i = 0, math.min(maxResults - 1, count - 1) do
table.insert(addrs, results[i])
if debugMode then
print(string.format("🔦 AOB[%d] found at: 0x%s", i + 1, results[i]))
end
end
end)
if #addrs == 0 and debugMode then
print("💔 AOB not found in " .. moduleName)
end
results.destroy()
ms.destroy()
return addrs
end
end
registerLuaFunctionHighlight('AOBScanModuleN')
-- 搜尋並取出最多5筆結果
--[[
local list = AOBScanModuleN("GameModule.exe", "12 34 56 ?? 78", 5)
if list then
for i, addr in ipairs(list) do
print(string.format("地址 %d: 0x%s", i, addr))
end
end
]]--
-- Lua scripts that table checkbox will not be checked with "NO_ACTIVATE" in comment/script body
if not onMemRecPostExecute then
function onMemRecPostExecute(memoryrecord, newState, succeeded)
if memoryrecord.Type == vtAutoAssembler and memoryrecord.Script:find("NO_ACTIVATE") and newState and succeeded then
synchronize(function()
memoryrecord.disableWithoutExecute()
end)
end
end
end
-- Memory record IDs now allowed to be 'locked'
IDs = {999999, 9999999}
-- Determine event trigger sequence
if not contains then
function contains(table, val)
for i = 1, #table do
if table[i] == val then
return true
end
end
return false
end
end
if not onMemRecPreExecute then
function onMemRecPreExecute(memoryrecord, newstate)
if contains(IDs, memoryrecord.ID) and newstate then
synchronize(function()
if not memoryrecord.OnActivate then
memoryrecord.OnActivate = function(memoryrecord, before, currentstate)
return false
end
end
end)
end
end
end
-- Utility Functions
-- Clear lua engine log
if not clearLuaLog then
function clearLuaLog()
synchronize(function()
getLuaEngine().MenuItem5.doClick()
end)
end
end
registerLuaFunctionHighlight('clearLuaLog')
-- Close lua engine log
if not closeLuaEngine then
function closeLuaEngine()
synchronize(function()
getLuaEngine().Close()
end)
end
end
registerLuaFunctionHighlight('closeLuaEngine')
-- Clear lua engine log & close lua engine
if not closeLuaEngine2 then
function closeLuaEngine2()
synchronize(function()
getLuaEngine().MenuItem5.doClick()
getLuaEngine().Close()
end)
end
end
registerLuaFunctionHighlight('closeLuaEngine2')
if not getProcessNameFromPID then
function getProcessNameFromPID(pid)
local sl = createStringList()
getProcessList(sl)
local hexPid = string.format("%X", pid):upper()
for i = 0, sl.Count - 1 do
local entry = sl[i]
local hexid, name = entry:match("^(%x+)%-(.+)$")
if hexid and name then
if tonumber(hexid, 16) == pid then
return name
end
end
end
return "(unknown)"
end
end
registerLuaFunctionHighlight('getProcessNameFromPID')
if not printProcessInfo then
function printProcessInfo()
local pid = getOpenedProcessID()
local name = getProcessNameFromPID(pid)
print(string.format("📎 Attached to process: %s (PID: %d / 0x%X)", name, pid, pid))
end
end
registerLuaFunctionHighlight('printProcessInfo')
if not dumpProcessListAndFindPID then
function dumpProcessListAndFindPID()
local pid = getOpenedProcessID()
print(string.format("💭 Current PID: %d / 0x%X", pid, pid))
local sl = createStringList()
getProcessList(sl)
print("🧾 Dumping process list:")
for i = 0, sl.Count - 1 do
local entry = sl[i]
print(string.format("[%d] %s", i, entry))
-- 嘗試解析並比對 PID
local name, hexid = entry:match("(.+)%-(%x+)$")
if name and hexid then
local parsed = tonumber(hexid, 16)
if parsed == pid then
print("🔦 Match found in process list:")
print(string.format("Name: %s | PID: %s (0x%s)", name, parsed, hexid))
end
end
end
end
end
registerLuaFunctionHighlight('dumpProcessListAndFindPID')
if not toHex32 then
function toHex32(num)
local hexstr = "0123456789ABCDEF"
local result = ""
if num < 0 then
num = (num + (1 << 32)) % (1 << 32) -- 轉成32-bit補數
end
for i = 1, 8 do -- 32-bit 一共8個hex位
local n = num & 0xF -- 取最低4 bit
result = hexstr:sub(n + 1, n + 1) .. result
num = num >> 4 -- 右移4 bit
end
return result
end
end
registerLuaFunctionHighlight('toHex32')
if not toHex then
function toHex(num)
local hexstr = "0123456789ABCDEF"
local result = ""
if num < 0 then
num = (num + (1 << 64)) % (1 << 64) -- 轉成64-bit補數
end
for i = 1, 16 do -- 每4 bit 一個 hex字，64-bit總共16個hex位
local n = num & 0xF -- 取最低4bit
result = hexstr:sub(n + 1, n + 1) .. result
num = num >> 4 -- 右移4bit
end
return result
end
end
registerLuaFunctionHighlight('toHex')
synchronize(function() AddressList.Header.OnSectionClick = nil end)
--[[
[DISABLE]
{$lua}
if AOBScanModule then
AOBScanModule = nil
end
if onMemRecPostExecute then
onMemRecPostExecute = nil
end
if onMemRecPreExecute then
onMemRecPreExecute = nil
end
if clearLuaLog then
clearLuaLog = nil
end
if closeLuaEngine then
closeLuaEngine = nil
end
if closeLuaEngine2 then
closeLuaEngine2 = nil
end
]]--