4
"HuniePop 2 Double Date"
Auto Assembler Script
{$lua}
if (LaunchMonoDataCollector()==0) then
error('Failed to Activate Mono Features')
end
{$asm}
[ENABLE]
//aobscan(INJECT_Playerbase,83 39 00 48 8B 40 28 0F B6 40 28 85 C0 0F 85 57) // should be unique
define(INJECT_Playerbase,GameCamera:Update+46)
alloc(newmem,$1000,INJECT_Playerbase)
registersymbol(playerbase)
label(playerbase)
label(code)
label(return)
newmem:
code:
mov [playerbase],rcx
cmp dword ptr [rcx],00
mov rax,[rax+28]
jmp return
playerbase:
dq
INJECT_Playerbase:
jmp newmem
nop 2
return:
registersymbol(INJECT_Playerbase)
[DISABLE]
INJECT_Playerbase:
db 83 39 00 48 8B 40 28
unregistersymbol(playerbase)
unregistersymbol(INJECT_Playerbase)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 1FFF49D9EC6
1FFF49D9E9B: 0F 85 EA 02 00 00 - jne 1FFF49DA18B
1FFF49D9EA1: 0F B6 46 54 - movzx eax,byte ptr [rsi+54]
1FFF49D9EA5: 85 C0 - test eax,eax
1FFF49D9EA7: 74 09 - je 1FFF49D9EB2
1FFF49D9EA9: C6 46 54 00 - mov byte ptr [rsi+54],00
1FFF49D9EAD: E9 D9 02 00 00 - jmp 1FFF49DA18B
1FFF49D9EB2: 48 8D 6D 00 - lea rbp,[rbp+00]
1FFF49D9EB6: 49 BB 70 01 78 F2 FF 01 00 00 - mov r11,000001FFF2780170
1FFF49D9EC0: 41 FF D3 - call r11
1FFF49D9EC3: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
1FFF49D9EC6: 83 39 00 - cmp dword ptr [rcx],00
// ---------- DONE INJECTING ----------
1FFF49D9EC9: 48 8B 40 28 - mov rax,[rax+28]
1FFF49D9ECD: 0F B6 40 28 - movzx eax,byte ptr [rax+28]
1FFF49D9ED1: 85 C0 - test eax,eax
1FFF49D9ED3: 0F 85 57 00 00 00 - jne 1FFF49D9F30
1FFF49D9ED9: 48 8D 64 24 00 - lea rsp,[rsp+00]
1FFF49D9EDE: 49 BB E0 A1 9D F4 FF 01 00 00 - mov r11,000001FFF49DA1E0
1FFF49D9EE8: 41 FF D3 - call r11
1FFF49D9EEB: 85 C0 - test eax,eax
1FFF49D9EED: 0F 84 3D 00 00 00 - je 1FFF49D9F30
1FFF49D9EF3: 66 66 90 - nop 3
}
5
"BASE"
0
0080FF
4 Bytes
playerbase
0
6
"Debug Mode"
0:Off
1:On
0
Byte
playerbase
31
11
"Fruit (Currancy)"
1
7
"Tallent"
0
4 Bytes
[playerbase]+28
20
20
20
10
20
8
"Flirtation"
0
4 Bytes
[playerbase]+28
24
20
20
10
20
9
"Romance"
0
4 Bytes
[playerbase]+28
28
20
20
10
20
10
"Sexuality"
0
4 Bytes
[playerbase]+28
2C
20
20
10
20
16
"Affection Level Exps"
1
12
"Talent"
4 Bytes
1FFB95DD4E8
20
28
20
10
20
13
"Flirtation"
4 Bytes
1FFB95DD4E8
24
28
20
10
20
14
"Romance"
4 Bytes
1FFB95DD4E8
28
28
20
10
20
15
"Sexuality"
4 Bytes
1FFB95DD4E8
2C
28
20
10
20
173
"All Girls"
1
17
"Girl 1"
0
String
128
1
0
1
[playerbase]+28
14
20
18
20
10
40
20
10
20
18
"Player Met"
0
Byte
[playerbase]+28
60
20
10
40
20
10
20
19
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
20
10
40
20
10
20
20
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
20
10
40
20
10
20
21
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
20
10
40
20
10
20
22
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
20
10
40
20
10
20
23
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
20
10
40
20
10
20
24
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
20
10
40
20
10
20
25
"Styles On Dates"
0
Byte
[playerbase]+28
7C
20
10
40
20
10
20
152
"Girl 2"
0
String
128
1
0
1
[playerbase]+28
14
20
18
28
10
40
20
10
20
153
"Player Met"
0
Byte
[playerbase]+28
60
28
10
40
20
10
20
154
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
28
10
40
20
10
20
155
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
28
10
40
20
10
20
156
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
28
10
40
20
10
20
157
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
28
10
40
20
10
20
158
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
28
10
40
20
10
20
159
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
28
10
40
20
10
20
160
"Styles On Dates"
0
Byte
[playerbase]+28
7C
28
10
40
20
10
20
143
"Girl 3"
0
String
128
1
0
1
[playerbase]+28
14
20
18
30
10
40
20
10
20
144
"Player Met"
0
Byte
[playerbase]+28
60
30
10
40
20
10
20
145
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
30
10
40
20
10
20
146
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
30
10
40
20
10
20
147
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
30
10
40
20
10
20
148
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
30
10
40
20
10
20
149
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
30
10
40
20
10
20
150
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
30
10
40
20
10
20
151
"Styles On Dates"
0
Byte
[playerbase]+28
7C
30
10
40
20
10
20
134
"Girl 4"
0
String
128
1
0
1
[playerbase]+28
14
20
18
38
10
40
20
10
20
135
"Player Met"
0
Byte
[playerbase]+28
60
38
10
40
20
10
20
136
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
38
10
40
20
10
20
137
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
38
10
40
20
10
20
138
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
38
10
40
20
10
20
139
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
38
10
40
20
10
20
140
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
38
10
40
20
10
20
141
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
38
10
40
20
10
20
142
"Styles On Dates"
0
Byte
[playerbase]+28
7C
38
10
40
20
10
20
125
"Girl 5"
0
String
128
1
0
1
[playerbase]+28
14
20
18
40
10
40
20
10
20
126
"Player Met"
0
Byte
[playerbase]+28
60
40
10
40
20
10
20
127
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
40
10
40
20
10
20
128
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
40
10
40
20
10
20
129
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
40
10
40
20
10
20
130
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
40
10
40
20
10
20
131
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
40
10
40
20
10
20
132
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
40
10
40
20
10
20
133
"Styles On Dates"
0
Byte
[playerbase]+28
7C
40
10
40
20
10
20
116
"Girl 6"
0
String
128
1
0
1
[playerbase]+28
14
20
18
48
10
40
20
10
20
117
"Player Met"
0
Byte
[playerbase]+28
60
48
10
40
20
10
20
118
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
48
10
40
20
10
20
119
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
48
10
40
20
10
20
120
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
48
10
40
20
10
20
121
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
48
10
40
20
10
20
122
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
48
10
40
20
10
20
123
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
48
10
40
20
10
20
124
"Styles On Dates"
0
Byte
[playerbase]+28
7C
48
10
40
20
10
20
107
"Girl 7"
0
String
128
1
0
1
[playerbase]+28
14
20
18
50
10
40
20
10
20
108
"Player Met"
0
Byte
[playerbase]+28
60
50
10
40
20
10
20
109
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
50
10
40
20
10
20
110
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
50
10
40
20
10
20
111
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
50
10
40
20
10
20
112
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
50
10
40
20
10
20
113
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
50
10
40
20
10
20
114
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
50
10
40
20
10
20
115
"Styles On Dates"
0
Byte
[playerbase]+28
7C
50
10
40
20
10
20
98
"Girl 8"
0
String
128
1
0
1
[playerbase]+28
14
20
18
58
10
40
20
10
20
99
"Player Met"
0
Byte
[playerbase]+28
60
58
10
40
20
10
20
100
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
58
10
40
20
10
20
101
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
58
10
40
20
10
20
102
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
58
10
40
20
10
20
103
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
58
10
40
20
10
20
104
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
58
10
40
20
10
20
105
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
58
10
40
20
10
20
106
"Styles On Dates"
0
Byte
[playerbase]+28
7C
58
10
40
20
10
20
89
"Girl 9"
0
String
128
1
0
1
[playerbase]+28
14
20
18
60
10
40
20
10
20
90
"Player Met"
0
Byte
[playerbase]+28
60
60
10
40
20
10
20
91
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
60
10
40
20
10
20
92
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
60
10
40
20
10
20
93
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
60
10
40
20
10
20
94
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
60
10
40
20
10
20
95
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
60
10
40
20
10
20
96
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
60
10
40
20
10
20
97
"Styles On Dates"
0
Byte
[playerbase]+28
7C
60
10
40
20
10
20
80
"Girl 10"
0
String
128
1
0
1
[playerbase]+28
14
20
18
68
10
40
20
10
20
81
"Player Met"
0
Byte
[playerbase]+28
60
68
10
40
20
10
20
82
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
68
10
40
20
10
20
83
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
68
10
40
20
10
20
84
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
68
10
40
20
10
20
85
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
68
10
40
20
10
20
86
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
68
10
40
20
10
20
87
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
68
10
40
20
10
20
88
"Styles On Dates"
0
Byte
[playerbase]+28
7C
68
10
40
20
10
20
192
"Girl 11"
0
String
128
1
0
1
[playerbase]+28
14
20
18
70
10
40
20
10
20
193
"Player Met"
0
Byte
[playerbase]+28
60
70
10
40
20
10
20
194
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
70
10
40
20
10
20
195
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
70
10
40
20
10
20
196
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
70
10
40
20
10
20
197
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
70
10
40
20
10
20
198
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
70
10
40
20
10
20
199
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
70
10
40
20
10
20
200
"Styles On Dates"
0
Byte
[playerbase]+28
7C
70
10
40
20
10
20
183
"Girl 12"
0
String
128
1
0
1
[playerbase]+28
14
20
18
78
10
40
20
10
20
184
"Player Met"
0
Byte
[playerbase]+28
60
78
10
40
20
10
20
185
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
78
10
40
20
10
20
186
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
78
10
40
20
10
20
187
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
78
10
40
20
10
20
188
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
78
10
40
20
10
20
189
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
78
10
40
20
10
20
190
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
78
10
40
20
10
20
191
"Styles On Dates"
0
Byte
[playerbase]+28
7C
78
10
40
20
10
20
174
"Girl 13"
0
String
128
1
0
1
[playerbase]+28
14
20
18
80
10
40
20
10
20
175
"Player Met"
0
Byte
[playerbase]+28
60
80
10
40
20
10
20
176
"Relationship Points"
0
4 Bytes
[playerbase]+28
64
80
10
40
20
10
20
177
"Relationship Up Count"
0
4 Bytes
[playerbase]+28
68
80
10
40
20
10
20
178
"Active Baggage Index"
0
4 Bytes
[playerbase]+28
6C
80
10
40
20
10
20
179
"Hairstyle Index"
0
4 Bytes
[playerbase]+28
70
80
10
40
20
10
20
180
"Outfit Index"
0
4 Bytes
[playerbase]+28
74
80
10
40
20
10
20
181
"Stamina Freeze"
0
4 Bytes
[playerbase]+28
78
80
10
40
20
10
20
182
"Styles On Dates"
0
Byte
[playerbase]+28
7C
80
10
40
20
10
20
201
"Stats"
1
161
"settingGender"
0
4 Bytes
[playerbase]+28
94
20
10
20
162
"settingDifficulty"
0
4 Bytes
[playerbase]+28
98
20
10
20
163
"storyProgress"
0
4 Bytes
[playerbase]+28
9C
20
10
20
164
"daytimeElapsed"
0
4 Bytes
[playerbase]+28
A0
20
10
20
165
"finderRestockTime"
0
4 Bytes
[playerbase]+28
A4
20
10
20
166
"storeRestockDay"
0
4 Bytes
[playerbase]+28
A8
20
10
20
167
"staminaFoodLimit"
0
4 Bytes
[playerbase]+28
AC
20
10
20
168
"relationshipPoints"
0
4 Bytes
[playerbase]+28
B0
20
10
20
169
"relationshipUpCount"
0
4 Bytes
[playerbase]+28
B4
20
10
20
170
"alphaDateCount"
0
4 Bytes
[playerbase]+28
B8
20
10
20
171
"nonstopDateCount"
0
4 Bytes
[playerbase]+28
BC
20
10
20
172
"sidesFlipped"
0
Byte
[playerbase]+28
C0
20
10
20
203
"Puzzle"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_GameSession,83 39 00 48 8B 40 28 48 89 85 E8) // should be unique
define(INJECT_GameSession,UiPuzzleGrid:Update+44)
alloc(newmem,$1000,INJECT_GameSession)
registersymbol(session)
label(session)
label(code)
label(return)
newmem:
code:
mov [session],rcx
cmp dword ptr [rcx],00
mov rax,[rax+28]
jmp return
session:
dq
INJECT_GameSession:
jmp newmem
nop 2
return:
registersymbol(INJECT_GameSession)
[DISABLE]
INJECT_GameSession:
db 83 39 00 48 8B 40 28
unregistersymbol(session)
unregistersymbol(INJECT_GameSession)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: UiPuzzleGrid:Update+44
UiPuzzleGrid:Update+13: 48 89 7D D8 - mov [rbp-28],rdi
UiPuzzleGrid:Update+17: 4C 89 65 E0 - mov [rbp-20],r12
UiPuzzleGrid:Update+1b: 4C 89 6D E8 - mov [rbp-18],r13
UiPuzzleGrid:Update+1f: 4C 89 75 F0 - mov [rbp-10],r14
UiPuzzleGrid:Update+23: 4C 89 7D F8 - mov [rbp-08],r15
UiPuzzleGrid:Update+27: 48 8B F1 - mov rsi,rcx
UiPuzzleGrid:Update+2a: C7 85 28 FF FF FF 00 00 00 00 - mov [rbp-000000D8],00000000
UiPuzzleGrid:Update+34: 48 B8 90 7E FE 09 FF 01 00 00 - mov rax,000001FF09FE7E90
UiPuzzleGrid:Update+3e: 48 8B 00 - mov rax,[rax]
UiPuzzleGrid:Update+41: 48 8B C8 - mov rcx,rax
// ---------- INJECTING HERE ----------
UiPuzzleGrid:Update+44: 83 39 00 - cmp dword ptr [rcx],00
// ---------- DONE INJECTING ----------
UiPuzzleGrid:Update+47: 48 8B 40 28 - mov rax,[rax+28]
UiPuzzleGrid:Update+4b: 48 89 85 E8 FE FF FF - mov [rbp-00000118],rax
UiPuzzleGrid:Update+52: 48 B9 00 B6 04 E4 FF 01 00 00 - mov rcx,000001FFE404B600
UiPuzzleGrid:Update+5c: BA 01 00 00 00 - mov edx,00000001
UiPuzzleGrid:Update+61: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiPuzzleGrid:Update+66: 49 BB A0 48 78 0A FF 01 00 00 - mov r11,System:Object:__icall_wrapper_ves_icall_array_new_specific
UiPuzzleGrid:Update+70: 41 FF D3 - call r11
UiPuzzleGrid:Update+73: 48 8B C8 - mov rcx,rax
UiPuzzleGrid:Update+76: 48 8B 85 E8 FE FF FF - mov rax,[rbp-00000118]
UiPuzzleGrid:Update+7d: 48 8B D1 - mov rdx,rcx
}
204
"BASE"
0
4 Bytes
session
0
205
"Left Girl"
0
String
128
1
0
1
[session]+70
14
20
18
10
28
20
223
"Girl Stats"
1
206
"Player Met"
0
Byte
[session]+70
60
10
28
20
207
"Relationship Points"
0
4 Bytes
[session]+70
64
10
28
20
208
"Relationship Up Count"
0
4 Bytes
[session]+70
68
10
28
20
209
"Active Baggage Index"
0
4 Bytes
[session]+70
6C
10
28
20
210
"Hair Style Index"
0
4 Bytes
[session]+70
70
10
28
20
211
"Outfit Index"
0
4 Bytes
[session]+70
74
10
28
20
212
"Stamina Freeze"
0
4 Bytes
[session]+70
78
10
28
20
213
"Styles On Dates"
0
Byte
[session]+70
7C
10
28
20
214
"Alt Girl"
0
Byte
[session]+70
58
28
20
215
"Stamina"
0
4 Bytes
[session]+70
5C
28
20
216
"Exhausted"
0
Byte
[session]+70
60
28
20
217
"Upset"
0
Byte
[session]+70
61
28
20
218
"Passion"
0
4 Bytes
[session]+70
64
28
20
219
"Sentiment"
0
4 Bytes
[session]+70
68
28
20
220
"Flat Stamina Cost"
0
4 Bytes
[session]+70
6C
28
20
221
"Force Move Cost"
0
4 Bytes
[session]+70
70
28
20
222
"Exhausted Count"
0
4 Bytes
[session]+70
74
28
20
224
"Right Girl"
0
String
128
1
0
1
[session]+70
14
20
18
10
30
20
233
"Stats"
1
232
"Player Met"
0
Byte
[session]+70
60
10
30
20
231
"Relationship Points"
0
4 Bytes
[session]+70
64
10
30
20
230
"Relationship Up Count"
0
4 Bytes
[session]+70
68
10
30
20
229
"Active Baggage Index"
0
4 Bytes
[session]+70
6C
10
30
20
228
"Hairstyle Index"
0
4 Bytes
[session]+70
70
10
30
20
227
"Outfit Index"
0
4 Bytes
[session]+70
74
10
30
20
226
"Stamina Freeze"
0
4 Bytes
[session]+70
78
10
30
20
225
"Styles On Dates"
0
Byte
[session]+70
7C
10
30
20
234
"Alt Girl"
0
Byte
[session]+70
58
30
20
235
"Stamina"
0
4 Bytes
[session]+70
5C
30
20
236
"Exhausted"
0
Byte
[session]+70
60
30
20
237
"Upset"
0
Byte
[session]+70
61
30
20
238
"Passion"
0
4 Bytes
[session]+70
64
30
20
239
"Sentiment"
0
4 Bytes
[session]+70
68
30
20
240
"Flat Stamina Cost"
0
4 Bytes
[session]+70
6C
30
20
241
"Force Move Cost"
0
4 Bytes
[session]+70
70
30
20
242
"Exhausted Count"
0
4 Bytes
[session]+70
74
30
20
248
"Affection"
0
4 Bytes
[session]+70
5C
20
249
"AffectionGoal"
0
4 Bytes
[session]+70
60
20
250
"Moves Remaining"
0
4 Bytes
[session]+70
64
20
262
"Quick Scripts"
1
255
"Max Stam"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_Stam1,49 63 7C 24 5C) // should be unique
define(INJECT_Stam1,UiPuzzleStaminaHint:Refresh+6b)
alloc(newmem1,$1000,INJECT_Stam1)
label(code1)
label(return1)
newmem1:
code1:
mov dword ptr [r12+5C],#6
movsxd rdi,dword ptr [r12+5C]
jmp return1
INJECT_Stam1:
jmp newmem1
return1:
registersymbol(INJECT_Stam1)
[DISABLE]
INJECT_Stam1:
db 49 63 7C 24 5C
unregistersymbol(INJECT_Stam1)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: UiPuzzleStaminaHint:Refresh+6b
UiPuzzleStaminaHint:Refresh+47: 48 8B 88 70 01 00 00 - mov rcx,[rax+00000170]
UiPuzzleStaminaHint:Refresh+4e: 0F B6 46 70 - movzx eax,byte ptr [rsi+70]
UiPuzzleStaminaHint:Refresh+52: 4C 8B E9 - mov r13,rcx
UiPuzzleStaminaHint:Refresh+55: 83 39 00 - cmp dword ptr [rcx],00
UiPuzzleStaminaHint:Refresh+58: 85 C0 - test eax,eax
UiPuzzleStaminaHint:Refresh+5a: 74 06 - je UiPuzzleStaminaHint:Refresh+62
UiPuzzleStaminaHint:Refresh+5c: 4D 8B 65 30 - mov r12,[r13+30]
UiPuzzleStaminaHint:Refresh+60: EB 04 - jmp UiPuzzleStaminaHint:Refresh+66
UiPuzzleStaminaHint:Refresh+62: 4D 8B 65 28 - mov r12,[r13+28]
UiPuzzleStaminaHint:Refresh+66: 41 83 3C 24 00 - cmp dword ptr [r12],00
// ---------- INJECTING HERE ----------
UiPuzzleStaminaHint:Refresh+6b: 49 63 7C 24 5C - movsxd rdi,dword ptr [r12+5C]
// ---------- DONE INJECTING ----------
UiPuzzleStaminaHint:Refresh+70: 45 33 FF - xor r15d,r15d
UiPuzzleStaminaHint:Refresh+73: 48 B8 90 7E 88 7D E9 01 00 00 - mov rax,000001E97D887E90
UiPuzzleStaminaHint:Refresh+7d: 48 8B 00 - mov rax,[rax]
UiPuzzleStaminaHint:Refresh+80: 48 8B C8 - mov rcx,rax
UiPuzzleStaminaHint:Refresh+83: 83 39 00 - cmp dword ptr [rcx],00
UiPuzzleStaminaHint:Refresh+86: 48 8B 40 28 - mov rax,[rax+28]
UiPuzzleStaminaHint:Refresh+8a: 48 89 85 88 FE FF FF - mov [rbp-00000178],rax
UiPuzzleStaminaHint:Refresh+91: 48 B9 78 5B F8 75 EB 01 00 00 - mov rcx,000001EB75F85B78
UiPuzzleStaminaHint:Refresh+9b: BA 01 00 00 00 - mov edx,00000001
UiPuzzleStaminaHint:Refresh+a0: 48 8D 64 24 00 - lea rsp,[rsp+00]
}
258
"Max Passion/Sentiment"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_PassSent,48 63 51 64 48 8B C8 4C 8B C6 45 33 C9 83 38 00 48 8D 64) // should be unique
define(INJECT_PassSent,UiCellphoneAppStatus:RollAllMeters+131)
alloc(newmem,$1000,INJECT_PassSent)
label(code)
label(return)
newmem:
code:
mov [rcx+64],#100
mov [rcx+68],#100
mov rdx,dword ptr [rcx+64]
mov rcx,rax
jmp return
INJECT_PassSent:
jmp newmem
nop 2
return:
registersymbol(INJECT_PassSent)
///////////////////////////////////////////////////////////////////////////////
//aobscan(INJECT_PassSent2,48 63 51 64 48 8B C8 48) // should be unique
define(INJECT_PassSent2,UiCellphoneAppStatus:RollAllMeters+171)
alloc(newmem2,$1000,INJECT_PassSent2)
label(code2)
label(return2)
newmem2:
code2:
mov [rcx+64],#100
mov [rcx+68],#100
mov rdx,dword ptr [rcx+64]
mov rcx,rax
jmp return2
INJECT_PassSent2:
jmp newmem2
nop 2
return2:
registersymbol(INJECT_PassSent2)
[DISABLE]
INJECT_PassSent:
db 48 63 51 64 48 8B C8
unregistersymbol(INJECT_PassSent)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: UiCellphoneAppStatus:RollAllMeters+131
UiCellphoneAppStatus:RollAllMeters+101: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiCellphoneAppStatus:RollAllMeters+106: 49 BB 90 B5 70 9F EB 01 00 00 - mov r11,MeterRollerBehavior:RollTo
UiCellphoneAppStatus:RollAllMeters+110: 41 FF D3 - call r11
UiCellphoneAppStatus:RollAllMeters+113: 48 8B 87 B8 00 00 00 - mov rax,[rdi+000000B8]
UiCellphoneAppStatus:RollAllMeters+11a: 48 8B 8F 08 01 00 00 - mov rcx,[rdi+00000108]
UiCellphoneAppStatus:RollAllMeters+121: 48 8B D1 - mov rdx,rcx
UiCellphoneAppStatus:RollAllMeters+124: 83 3A 00 - cmp dword ptr [rdx],00
UiCellphoneAppStatus:RollAllMeters+127: 48 8B 49 28 - mov rcx,[rcx+28]
UiCellphoneAppStatus:RollAllMeters+12b: 48 8B D1 - mov rdx,rcx
UiCellphoneAppStatus:RollAllMeters+12e: 83 3A 00 - cmp dword ptr [rdx],00
// ---------- INJECTING HERE ----------
UiCellphoneAppStatus:RollAllMeters+131: 48 63 51 64 - movsxd rdx,dword ptr [rcx+64]
// ---------- DONE INJECTING ----------
UiCellphoneAppStatus:RollAllMeters+135: 48 8B C8 - mov rcx,rax
UiCellphoneAppStatus:RollAllMeters+138: 4C 8B C6 - mov r8,rsi
UiCellphoneAppStatus:RollAllMeters+13b: 45 33 C9 - xor r9d,r9d
UiCellphoneAppStatus:RollAllMeters+13e: 83 38 00 - cmp dword ptr [rax],00
UiCellphoneAppStatus:RollAllMeters+141: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiCellphoneAppStatus:RollAllMeters+146: 49 BB 90 B5 70 9F EB 01 00 00 - mov r11,MeterRollerBehavior:RollTo
UiCellphoneAppStatus:RollAllMeters+150: 41 FF D3 - call r11
UiCellphoneAppStatus:RollAllMeters+153: 48 8B 87 C0 00 00 00 - mov rax,[rdi+000000C0]
UiCellphoneAppStatus:RollAllMeters+15a: 48 8B 8F 08 01 00 00 - mov rcx,[rdi+00000108]
UiCellphoneAppStatus:RollAllMeters+161: 48 8B D1 - mov rdx,rcx
}
////////////////////////////////////////////////////////////////////////////////
INJECT_PassSent2:
db 48 63 51 64 48 8B C8
unregistersymbol(INJECT_PassSent2)
dealloc(newmem2)
{
// ORIGINAL CODE - INJECTION POINT: UiCellphoneAppStatus:RollAllMeters+171
UiCellphoneAppStatus:RollAllMeters+141: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiCellphoneAppStatus:RollAllMeters+146: 49 BB 90 B5 70 9F EB 01 00 00 - mov r11,MeterRollerBehavior:RollTo
UiCellphoneAppStatus:RollAllMeters+150: 41 FF D3 - call r11
UiCellphoneAppStatus:RollAllMeters+153: 48 8B 87 C0 00 00 00 - mov rax,[rdi+000000C0]
UiCellphoneAppStatus:RollAllMeters+15a: 48 8B 8F 08 01 00 00 - mov rcx,[rdi+00000108]
UiCellphoneAppStatus:RollAllMeters+161: 48 8B D1 - mov rdx,rcx
UiCellphoneAppStatus:RollAllMeters+164: 83 3A 00 - cmp dword ptr [rdx],00
UiCellphoneAppStatus:RollAllMeters+167: 48 8B 49 30 - mov rcx,[rcx+30]
UiCellphoneAppStatus:RollAllMeters+16b: 48 8B D1 - mov rdx,rcx
UiCellphoneAppStatus:RollAllMeters+16e: 83 3A 00 - cmp dword ptr [rdx],00
// ---------- INJECTING HERE ----------
UiCellphoneAppStatus:RollAllMeters+171: 48 63 51 64 - movsxd rdx,dword ptr [rcx+64]
// ---------- DONE INJECTING ----------
UiCellphoneAppStatus:RollAllMeters+175: 48 8B C8 - mov rcx,rax
UiCellphoneAppStatus:RollAllMeters+178: 48 63 51 64 - movsxd rdx,dword ptr [rcx+64]
UiCellphoneAppStatus:RollAllMeters+17c: 48 8B C8 - mov rcx,rax
UiCellphoneAppStatus:RollAllMeters+17f: 38 00 - cmp [rax],al
UiCellphoneAppStatus:RollAllMeters+181: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiCellphoneAppStatus:RollAllMeters+186: 49 BB 90 B5 70 9F EB 01 00 00 - mov r11,MeterRollerBehavior:RollTo
UiCellphoneAppStatus:RollAllMeters+190: 41 FF D3 - call r11
UiCellphoneAppStatus:RollAllMeters+193: 48 8B 87 C8 00 00 00 - mov rax,[rdi+000000C8]
UiCellphoneAppStatus:RollAllMeters+19a: 48 8B 8F 08 01 00 00 - mov rcx,[rdi+00000108]
UiCellphoneAppStatus:RollAllMeters+1a1: 48 8B D1 - mov rdx,rcx
}
259
"Max Affection"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_affection,41 FF D3 41 89 46 5C) // should be unique
define(INJECT_affection,PuzzleStatus:AddResourceValue+80)
alloc(newmem,$1000,INJECT_affection)
label(code)
label(return)
newmem:
call r11
cmp [r14+5C],0
je code
mov eax,[r14+60]
code:
mov [r14+5C],eax
jmp return
INJECT_affection:
jmp newmem
nop 2
return:
registersymbol(INJECT_affection)
[DISABLE]
INJECT_affection:
db 41 FF D3 41 89 46 5C
unregistersymbol(INJECT_affection)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PuzzleStatus:AddResourceValue+80
PuzzleStatus:AddResourceValue+5c: 48 03 C1 - add rax,rcx
PuzzleStatus:AddResourceValue+5f: 48 8B 00 - mov rax,[rax]
PuzzleStatus:AddResourceValue+62: FF E0 - jmp rax
PuzzleStatus:AddResourceValue+64: 49 63 4E 5C - movsxd rcx,dword ptr [r14+5C]
PuzzleStatus:AddResourceValue+68: 03 CF - add ecx,edi
PuzzleStatus:AddResourceValue+6a: 4D 63 46 60 - movsxd r8,dword ptr [r14+60]
PuzzleStatus:AddResourceValue+6e: 33 D2 - xor edx,edx
PuzzleStatus:AddResourceValue+70: 48 8D 64 24 00 - lea rsp,[rsp+00]
PuzzleStatus:AddResourceValue+75: 90 - nop
PuzzleStatus:AddResourceValue+76: 49 BB A0 A6 4D CE 92 02 00 00 - mov r11,UnityEngine:Mathf:Clamp
// ---------- INJECTING HERE ----------
PuzzleStatus:AddResourceValue+80: 41 FF D3 - call r11
// ---------- DONE INJECTING ----------
PuzzleStatus:AddResourceValue+83: 41 89 46 5C - mov [r14+5C],eax
PuzzleStatus:AddResourceValue+87: E9 DA 00 00 00 - jmp PuzzleStatus:AddResourceValue+166
PuzzleStatus:AddResourceValue+8c: 49 63 56 64 - movsxd rdx,dword ptr [r14+64]
PuzzleStatus:AddResourceValue+90: 03 D7 - add edx,edi
PuzzleStatus:AddResourceValue+92: 49 8B CE - mov rcx,r14
PuzzleStatus:AddResourceValue+95: 90 - nop
PuzzleStatus:AddResourceValue+96: 49 BB 10 7C 56 F1 90 02 00 00 - mov r11,PuzzleStatus:set_movesRemaining
PuzzleStatus:AddResourceValue+a0: 41 FF D3 - call r11
PuzzleStatus:AddResourceValue+a3: E9 BE 00 00 00 - jmp PuzzleStatus:AddResourceValue+166
PuzzleStatus:AddResourceValue+a8: 41 83 7D 00 00 - cmp dword ptr [r13+00],00
}
260
"Max Moves"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_moves,89 47 64 48 8B 7D F8) // should be unique
define(INJECT_moves,PuzzleStatus:set_movesRemaining+53)
alloc(newmem,$1000,INJECT_moves)
label(code)
label(return)
newmem:
code:
mov [rdi+64],#30
mov rdi,[rbp-08]
jmp return
INJECT_moves:
jmp newmem
nop 2
return:
registersymbol(INJECT_moves)
[DISABLE]
INJECT_moves:
db 89 47 64 48 8B 7D F8
unregistersymbol(INJECT_moves)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PuzzleStatus:set_movesRemaining+53
PuzzleStatus:set_movesRemaining+24: 48 89 45 E8 - mov [rbp-18],rax
PuzzleStatus:set_movesRemaining+28: 48 8B CF - mov rcx,rdi
PuzzleStatus:set_movesRemaining+2b: 66 66 90 - nop 3
PuzzleStatus:set_movesRemaining+2e: 49 BB 10 84 F6 F0 90 02 00 00 - mov r11,PuzzleStatus:get_maxMovesRemaining
PuzzleStatus:set_movesRemaining+38: 41 FF D3 - call r11
PuzzleStatus:set_movesRemaining+3b: 4C 8B C0 - mov r8,rax
PuzzleStatus:set_movesRemaining+3e: 48 8B 55 E8 - mov rdx,[rbp-18]
PuzzleStatus:set_movesRemaining+42: 48 63 4D F0 - movsxd rcx,dword ptr [rbp-10]
PuzzleStatus:set_movesRemaining+46: 49 BB A0 A6 4D CE 92 02 00 00 - mov r11,UnityEngine:Mathf:Clamp
PuzzleStatus:set_movesRemaining+50: 41 FF D3 - call r11
// ---------- INJECTING HERE ----------
PuzzleStatus:set_movesRemaining+53: 89 47 64 - mov [rdi+64],eax
// ---------- DONE INJECTING ----------
PuzzleStatus:set_movesRemaining+56: 48 8B 7D F8 - mov rdi,[rbp-08]
PuzzleStatus:set_movesRemaining+5a: 48 8D 65 00 - lea rsp,[rbp+00]
PuzzleStatus:set_movesRemaining+5e: 5D - pop rbp
PuzzleStatus:set_movesRemaining+5f: C3 - ret
290F1567C70: 01 04 02 - add [rdx+rax],eax
290F1567C73: 05 04 03 01 50 - add eax,50010304
290F1567C78: 00 00 - add [rax],al
290F1567C7A: 00 00 - add [rax],al
290F1567C7C: 00 00 - add [rax],al
290F1567C7E: 00 00 - add [rax],al
}
261
"Fruit 999 (Buy Something)"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_cash,89 08 49 8B 87 80 00 00 00) // should be unique
define(INJECT_cash,PlayerFile:AddFruitCount+6b)
alloc(newmem,$1000,INJECT_cash)
label(code)
label(return)
newmem:
code:
mov [rax],#999
mov rax,[r15+00000080]
jmp return
INJECT_cash:
jmp newmem
nop 4
return:
registersymbol(INJECT_cash)
[DISABLE]
INJECT_cash:
db 89 08 49 8B 87 80 00 00 00
unregistersymbol(INJECT_cash)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PlayerFile:AddFruitCount+6b
PlayerFile:AddFruitCount+3b: 41 B8 E7 03 00 00 - mov r8d,000003E7
PlayerFile:AddFruitCount+41: 48 8D 64 24 00 - lea rsp,[rsp+00]
PlayerFile:AddFruitCount+46: 49 BB 10 6A C2 40 EF 01 00 00 - mov r11,UnityEngine:Mathf:Clamp
PlayerFile:AddFruitCount+50: 41 FF D3 - call r11
PlayerFile:AddFruitCount+53: 48 8B C8 - mov rcx,rax
PlayerFile:AddFruitCount+56: 48 8B 45 E0 - mov rax,[rbp-20]
PlayerFile:AddFruitCount+5a: 48 63 D7 - movsxd rdx,edi
PlayerFile:AddFruitCount+5d: 39 50 18 - cmp [rax+18],edx
PlayerFile:AddFruitCount+60: 0F 86 3A 00 00 00 - jbe PlayerFile:AddFruitCount+a0
PlayerFile:AddFruitCount+66: 48 8D 44 90 20 - lea rax,[rax+rdx*4+20]
// ---------- INJECTING HERE ----------
PlayerFile:AddFruitCount+6b: 89 08 - mov [rax],ecx
// ---------- DONE INJECTING ----------
PlayerFile:AddFruitCount+6d: 49 8B 87 80 00 00 00 - mov rax,[r15+00000080]
PlayerFile:AddFruitCount+74: 48 85 C0 - test rax,rax
PlayerFile:AddFruitCount+77: 0F 84 15 00 00 00 - je PlayerFile:AddFruitCount+92
PlayerFile:AddFruitCount+7d: 49 8B 87 80 00 00 00 - mov rax,[r15+00000080]
PlayerFile:AddFruitCount+84: 48 8B C8 - mov rcx,rax
PlayerFile:AddFruitCount+87: 48 89 45 E0 - mov [rbp-20],rax
PlayerFile:AddFruitCount+8b: FF 50 18 - call qword ptr [rax+18]
PlayerFile:AddFruitCount+8e: 48 8B 45 E0 - mov rax,[rbp-20]
PlayerFile:AddFruitCount+92: 48 8B 7D F0 - mov rdi,[rbp-10]
PlayerFile:AddFruitCount+96: 4C 8B 7D F8 - mov r15,[rbp-08]
}
263
"Unlock All Outfits (Temp While Checked)"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_Outfits,74 0A B8 01 00 00 00 E9 B3 00 00 00 48 8B 47 18 48 63 80 68) // should be unique
define(INJECT_Outfits,PlayerFileGirl:IsOutfitUnlocked+35)
alloc(newmem,$1000,INJECT_Outfits)
label(code)
label(return)
newmem:
code:
//je PlayerFileGirl:IsOutfitUnlocked+41
mov eax,00000001
jmp return
INJECT_Outfits:
jmp newmem
nop 2
return:
registersymbol(INJECT_Outfits)
[DISABLE]
INJECT_Outfits:
db 74 0A B8 01 00 00 00
unregistersymbol(INJECT_Outfits)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PlayerFileGirl:IsOutfitUnlocked+35
PlayerFileGirl:IsOutfitUnlocked+10: 48 8B F9 - mov rdi,rcx
PlayerFileGirl:IsOutfitUnlocked+13: 48 8B F2 - mov rsi,rdx
PlayerFileGirl:IsOutfitUnlocked+16: 48 8B 47 48 - mov rax,[rdi+48]
PlayerFileGirl:IsOutfitUnlocked+1a: 48 8B C8 - mov rcx,rax
PlayerFileGirl:IsOutfitUnlocked+1d: 48 8B D6 - mov rdx,rsi
PlayerFileGirl:IsOutfitUnlocked+20: 83 38 00 - cmp dword ptr [rax],00
PlayerFileGirl:IsOutfitUnlocked+23: 66 66 90 - nop 3
PlayerFileGirl:IsOutfitUnlocked+26: 49 BB A0 55 9B 97 1C 02 00 00 - mov r11,System.Collections.Generic:List`1:Contains
PlayerFileGirl:IsOutfitUnlocked+30: 41 FF D3 - call r11
PlayerFileGirl:IsOutfitUnlocked+33: 85 C0 - test eax,eax
// ---------- INJECTING HERE ----------
PlayerFileGirl:IsOutfitUnlocked+35: 74 0A - je PlayerFileGirl:IsOutfitUnlocked+41
// ---------- DONE INJECTING ----------
PlayerFileGirl:IsOutfitUnlocked+37: B8 01 00 00 00 - mov eax,00000001
PlayerFileGirl:IsOutfitUnlocked+3c: E9 B3 00 00 00 - jmp PlayerFileGirl:IsOutfitUnlocked+f4
PlayerFileGirl:IsOutfitUnlocked+41: 48 8B 47 18 - mov rax,[rdi+18]
PlayerFileGirl:IsOutfitUnlocked+45: 48 63 80 68 01 00 00 - movsxd rax,dword ptr [rax+00000168]
PlayerFileGirl:IsOutfitUnlocked+4c: 3B F0 - cmp esi,eax
PlayerFileGirl:IsOutfitUnlocked+4e: 0F 84 83 00 00 00 - je PlayerFileGirl:IsOutfitUnlocked+d7
PlayerFileGirl:IsOutfitUnlocked+54: 48 B8 90 7E 74 67 1A 02 00 00 - mov rax,0000021A67747E90
PlayerFileGirl:IsOutfitUnlocked+5e: 48 8B 00 - mov rax,[rax]
PlayerFileGirl:IsOutfitUnlocked+61: 48 8B C8 - mov rcx,rax
PlayerFileGirl:IsOutfitUnlocked+64: 83 39 00 - cmp dword ptr [rcx],00
}
264
"Unlock All Hairstyles (Temp While Checked)"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_Hair,74 0A B8 01 00 00 00 E9 B3) // should be unique
define(INJECT_Hair,PlayerFileGirl:IsHairstyleUnlocked+35)
alloc(newmem,$1000,INJECT_Hair)
label(code)
label(return)
newmem:
code:
//je PlayerFileGirl:IsHairstyleUnlocked+41
mov eax,00000001
jmp return
INJECT_Hair:
jmp newmem
nop 2
return:
registersymbol(INJECT_Hair)
[DISABLE]
INJECT_Hair:
db 74 0A B8 01 00 00 00
unregistersymbol(INJECT_Hair)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: PlayerFileGirl:IsHairstyleUnlocked+35
PlayerFileGirl:IsHairstyleUnlocked+10: 48 8B F9 - mov rdi,rcx
PlayerFileGirl:IsHairstyleUnlocked+13: 48 8B F2 - mov rsi,rdx
PlayerFileGirl:IsHairstyleUnlocked+16: 48 8B 47 40 - mov rax,[rdi+40]
PlayerFileGirl:IsHairstyleUnlocked+1a: 48 8B C8 - mov rcx,rax
PlayerFileGirl:IsHairstyleUnlocked+1d: 48 8B D6 - mov rdx,rsi
PlayerFileGirl:IsHairstyleUnlocked+20: 83 38 00 - cmp dword ptr [rax],00
PlayerFileGirl:IsHairstyleUnlocked+23: 66 66 90 - nop 3
PlayerFileGirl:IsHairstyleUnlocked+26: 49 BB A0 55 9B 97 1C 02 00 00 - mov r11,System.Collections.Generic:List`1:Contains
PlayerFileGirl:IsHairstyleUnlocked+30: 41 FF D3 - call r11
PlayerFileGirl:IsHairstyleUnlocked+33: 85 C0 - test eax,eax
// ---------- INJECTING HERE ----------
PlayerFileGirl:IsHairstyleUnlocked+35: 74 0A - je PlayerFileGirl:IsHairstyleUnlocked+41
// ---------- DONE INJECTING ----------
PlayerFileGirl:IsHairstyleUnlocked+37: B8 01 00 00 00 - mov eax,00000001
PlayerFileGirl:IsHairstyleUnlocked+3c: E9 B3 00 00 00 - jmp PlayerFileGirl:IsHairstyleUnlocked+f4
PlayerFileGirl:IsHairstyleUnlocked+41: 48 8B 47 18 - mov rax,[rdi+18]
PlayerFileGirl:IsHairstyleUnlocked+45: 48 63 80 64 01 00 00 - movsxd rax,dword ptr [rax+00000164]
PlayerFileGirl:IsHairstyleUnlocked+4c: 3B F0 - cmp esi,eax
PlayerFileGirl:IsHairstyleUnlocked+4e: 0F 84 83 00 00 00 - je PlayerFileGirl:IsHairstyleUnlocked+d7
PlayerFileGirl:IsHairstyleUnlocked+54: 48 B8 90 7E 74 67 1A 02 00 00 - mov rax,0000021A67747E90
PlayerFileGirl:IsHairstyleUnlocked+5e: 48 8B 00 - mov rax,[rax]
PlayerFileGirl:IsHairstyleUnlocked+61: 48 8B C8 - mov rcx,rax
PlayerFileGirl:IsHairstyleUnlocked+64: 83 39 00 - cmp dword ptr [rcx],00
}
265
"Photo Unlock (nymphs only)"
Auto Assembler Script
[ENABLE]
//aobscan(INJECT_PhotoUnlock,0F 8C DA 01 00 00 48 B8) // should be unique
define(INJECT_PhotoUnlock,UiPhotoSlot:Init+38d)
alloc(newmem,$1000,INJECT_PhotoUnlock)
label(code)
label(return)
newmem:
code:
// jl UiPhotoSlot:Init+56d
jmp return
INJECT_PhotoUnlock:
jmp newmem
nop
return:
registersymbol(INJECT_PhotoUnlock)
[DISABLE]
INJECT_PhotoUnlock:
db 0F 8C DA 01 00 00
unregistersymbol(INJECT_PhotoUnlock)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: UiPhotoSlot:Init+38d
UiPhotoSlot:Init+35b: 66 66 90 - nop 3
UiPhotoSlot:Init+35e: 49 BB AA FF 87 E0 7B 02 00 00 - mov r11,0000027BE087FFAA
UiPhotoSlot:Init+368: 41 FF D3 - call r11
UiPhotoSlot:Init+36b: 48 8B C8 - mov rcx,rax
UiPhotoSlot:Init+36e: 83 38 00 - cmp dword ptr [rax],00
UiPhotoSlot:Init+371: 48 8D 64 24 00 - lea rsp,[rsp+00]
UiPhotoSlot:Init+376: 49 BB 47 88 C0 7F 7C 02 00 00 - mov r11,0000027C7FC08847
UiPhotoSlot:Init+380: 41 FF D3 - call r11
UiPhotoSlot:Init+383: 48 63 80 9C 00 00 00 - movsxd rax,dword ptr [rax+0000009C]
UiPhotoSlot:Init+38a: 83 F8 0C - cmp eax,0C
// ---------- INJECTING HERE ----------
UiPhotoSlot:Init+38d: 0F 8C DA 01 00 00 - jl UiPhotoSlot:Init+56d
// ---------- DONE INJECTING ----------
UiPhotoSlot:Init+393: 48 B8 90 7E CD 38 7A 02 00 00 - mov rax,0000027A38CD7E90
UiPhotoSlot:Init+39d: 48 8B 00 - mov rax,[rax]
UiPhotoSlot:Init+3a0: 48 8B C8 - mov rcx,rax
UiPhotoSlot:Init+3a3: 83 39 00 - cmp dword ptr [rcx],00
UiPhotoSlot:Init+3a6: 48 8B 40 58 - mov rax,[rax+58]
UiPhotoSlot:Init+3aa: 48 8B 80 98 00 00 00 - mov rax,[rax+00000098]
UiPhotoSlot:Init+3b1: 48 89 85 20 FF FF FF - mov [rbp-000000E0],rax
UiPhotoSlot:Init+3b8: 48 63 4F 44 - movsxd rcx,dword ptr [rdi+44]
UiPhotoSlot:Init+3bc: 48 B8 90 7E CD 38 7A 02 00 00 - mov rax,0000027A38CD7E90
UiPhotoSlot:Init+3c6: 48 8B 00 - mov rax,[rax]
}
Change of call r11
14D5D827778
C7
4D
01
00
00
41
FF
D3
89
47
5C
48
B8
Change of call r11
1EAE2A9FF78
4C
EB
01
00
00
41
FF
D3
89
47
5C
48
B8
Change of call r11
2BB60C3FEB8
60
BB
02
00
00
41
FF
D3
49
8B
F5
B9
01
Change of call r11
1EF1D5F6078
1D
EF
01
00
00
41
FF
D3
85
C0
0F
84
3A
Change of je PhotoDefinition:GetThumbnailImage+6d
1EF1D5F607D
41
FF
D3
85
C0
0F
84
3A
00
00
00
48
8B
47
38
48
Change of call r11
1EF1D5F60B8
DA
EE
01
00
00
41
FF
D3
03
F0
48
8B
47
Change of call r11
1EF1D5F60E8
40
EF
01
00
00
41
FF
D3
48
8B
4D
D0
4C
Change of jae PhotoDefinition:GetThumbnailImage+db
1F597789AC0
47
18
44
3B
F0
0F
83
25
00
00
00
49
8B
47
10
49
Change of je PlayerFileGirl:IsOutfitUnlocked+f2
21C979B8EE5
41
FF
D3
85
C0
74
1B
48
8B
CF
48
8B
Change of je PlayerFileGirl:IsOutfitUnlocked+41
21C979B8E45
41
FF
D3
85
C0
74
0A
B8
01
00
00
00
Change of je PlayerFileGirl:IsHairstyleUnlocked+41
21C979B7915
41
FF
D3
85
C0
74
0A
B8
01
00
00
00
Change of call r11
21C979BFC10
97
1C
02
00
00
41
FF
D3
48
8D
65
00
5D
Change of call r11
21C979BFC41
67
1A
02
00
00
41
FF
D3
08
70
9A
C5
61
Change of sbb al,byte ptr [rdx]
21C979BFC3B
00
49
BB
20
02
67
67
1A
02
00
00
41
FF
D3
Change of je PhotoData:Get+55
21C979C5685
41
FF
D3
85
C0
74
1E
48
8B
47
10
48
Change of jmp PhotoData:Get+57
21C979C56A3
00
00
41
FF
D3
EB
02
33
C0
48
8B
75
Change of call r11
21C979C5709
67
1A
02
00
00
41
FF
D3
08
70
91
C5
61
Change of je PhotoDefinition:ShouldUseAlts+e8
21C979C1EE5
B6
46
50
85
C0
0F
84
CD
00
00
00
48
8B
4E
40
48
Change of jne PhotoDefinition:ShouldUseAlts+83
21C979C1F05
41
FF
D3
85
C0
0F
85
48
00
00
00
66
66
90
49
BB
Change of jg PhotoDefinition:ShouldUseAlts+e1
21C979C1F4D
41
FF
D3
85
C0
0F
8F
5E
00
00
00
48
8B
4E
48
33
Change of je PhotoDefinition:ShouldUseAlts+dd
21C979C1F6D
41
FF
D3
85
C0
0F
84
3A
00
00
00
66
66
90
49
BB
Change of je PhotoDefinition:GetThumbnailImage+6d
21C979C1DCD
41
FF
D3
85
C0
0F
84
3A
00
00
00
48
8B
47
38
48
Change of call r11
21C979C1DC8
97
1C
02
00
00
41
FF
D3
85
C0
0F
84
3A
Change of jae PhotoDefinition:GetThumbnailImage+db
21C979C1E50
47
18
44
3B
F0
0F
83
25
00
00
00
49
8B
47
10
49
Change of jmp PhotoDefinition:GetThumbnailImage+b6
21C979C1E8B
00
00
41
FF
D3
EB
C9
02
00
00
00
00
Change of je PhotoData:.ctor+bc
2566D875CFC
8B
EE
4D
85
F6
0F
84
3A
00
00
00
4D
8B
26
49
8B
Change of jne PhotoData:.ctor+b9
2566D875D0C
46
10
48
85
C0
75
2B
41
0F
B6
44
24
Change of jne PhotoData:.ctor+b9
2566D875D18
2C
48
83
F8
01
75
1F
49
8B
04
24
48
Change of je PhotoData:.ctor+bc
2566D875D37
00
00
48
3B
C1
74
03
45
33
ED
49
8B
Change of jmp PhotoData:.ctor+12e
2566D875D42
8B
FD
45
33
FF
E9
67
00
00
00
90
49
63
C7
39
Change of jbe PhotoData:.ctor+17a
2566D875D4E
63
C7
39
47
18
0F
86
A6
00
00
00
48
8D
44
C7
20
Change of je PhotoData:.ctor+12b
2566D875D62
B6
40
1C
85
C0
0F
84
43
00
00
00
48
8B
46
10
49
Change of jbe PhotoData:.ctor+173
2566D875D72
63
CF
39
4F
18
0F
86
7B
00
00
00
48
8D
4C
CF
20
Change of jbe PhotoData:.ctor+155
2566D875D8A
63
CF
39
4F
18
0F
86
45
00
00
00
48
8D
4C
CF
20
Change of jl PhotoData:.ctor+c8
2566D875DB5
47
18
44
3B
F8
7C
91
48
8B
75
D0
48
Change of ret
2566D875DD4
48
8D
65
00
5D
C3
BA
69
00
00
00
Change of jmp PhotoData:.ctor+15a
2566D875DF8
BA
81
00
00
00
EB
E0
BA
A5
00
00
00
Change of jmp PhotoData:.ctor+15a
2566D875DFF
BA
A5
00
00
00
EB
D9
00
00
00
00
00
Change of call r11
2566D875DF0
05
54
02
00
00
41
FF
D3
BA
81
00
00
00
Change of call r11
2566D875E29
05
54
02
00
00
41
FF
D3
08
00
BA
C5
60
Change of call r11
2566D875E55
05
54
02
00
00
41
FF
D3
08
E0
B8
C5
60
Change of je PhotoData:Get+55
25612720DF5
41
FF
D3
85
C0
74
1E
48
8B
47
10
48
Change of cmp dword ptr [rax],00
25612720DE0
8B
C8
48
8B
D6
83
38
00
66
66
90
49
BB
Change of call r11
25612720DF0
12
56
02
00
00
41
FF
D3
85
C0
74
1E
48
Change of cmp dword ptr [rax],00
25612720E01
8B
C8
48
8B
D6
83
38
00
66
90
49
BB
43
Change of call r11
25612720E10
12
56
02
00
00
41
FF
D3
EB
02
33
C0
48
Change of jmp PhotoData:Get+57
25612720E13
00
00
41
FF
D3
EB
02
33
C0
48
8B
75
Change of call r11
25612721130
12
56
02
00
00
41
FF
D3
48
8D
65
00
5D
Change of je PhotoDefinition:GetThumbnailImage+6d
1B1FFE2CF2D
41
FF
D3
85
C0
0F
84
3A
00
00
00
48
8B
47
38
48
Change of jae PhotoDefinition:GetThumbnailImage+db
1B1FFE2CFB0
47
18
44
3B
F0
0F
83
25
00
00
00
49
8B
47
10
49
Change of jmp PhotoDefinition:GetThumbnailImage+b6
1B1FFE2CFEB
00
00
41
FF
D3
EB
C9
FF
FF
FF
00
00
Change of call r11
1B1FFE2CFE8
5D
B1
01
00
00
41
FF
D3
EB
C9
FF
FF
FF
Change of call r11
1B1FFE2CF98
5D
B1
01
00
00
41
FF
D3
48
8B
4D
D0
4C
Change of jne UiWindowPhotos:Show+728
24C1AAFCAF4
01
00
00
85
C0
0F
85
BE
06
00
00
45
33
FF
E9
6C
Change of jmp UiWindowPhotos:Show+3de
24C1AAFCAFD
00
00
45
33
FF
E9
6C
03
00
00
48
8D
64
24
00
Change of jae UiWindowPhotos:Show+885
24C1AAFCB40
45
18
44
3B
F8
0F
83
CF
07
00
00
49
8B
45
10
49
Change of jae UiWindowPhotos:Show+898
24C1AAFCB7F
85
50
FF
FF
FF
0F
83
A3
07
00
00
48
8B
85
58
FF
Change of jae UiWindowPhotos:Show+8b0
24C1AAFCC91
85
28
FF
FF
FF
0F
83
A9
06
00
00
48
8B
85
30
FF
Change of jae UiWindowPhotos:Show+8c8
24C1AAFCDC1
85
08
FF
FF
FF
0F
83
91
05
00
00
48
8B
85
10
FF
Change of jl UiWindowPhotos:Show+78
24C1AAFCE7F
40
18
44
3B
F8
0F
8C
83
FC
FF
FF
F3
0F
10
05
C3
Change of cmp dword ptr [rcx],00
24C1AAFCE75
47
58
48
8B
C8
83
39
00
48
63
40
18
44
Change of cmp r15d,eax
24C1AAFCE7C
00
48
63
40
18
44
3B
F8
0F
8C
83
FC
FF
Change of call r11
1D2FC22D998
FB
D2
01
00
00
41
FF
D3
41
FF
C7
48
8B
Change of movsxd rax,dword ptr [rax+18]
1D2FC22D9A8
8B
C8
83
39
00
48
63
40
18
44
3B
F8
0F
8C
Change of inc r15d
1D2FC22D99B
00
00
41
FF
D3
41
FF
C7
48
8B
47
58
48
Change of cmp dword ptr [rcx],00
19A4E450410
47
60
48
8B
C8
83
39
00
48
8B
48
58
F3
Change of je UiWindowPhotos:Show+8e0
19A4E4506A0
48
40
48
85
FF
0F
84
3A
02
00
00
F3
0F
10
87
84
Change of jmp UiWindowPhotos:Show+863
19A4E450723
00
00
41
FF
D3
E9
3B
01
00
00
66
0F
57
C0
F2
Change of jmp UiWindowPhotos:Show+b6
2767AE1CE83
00
00
41
FF
D3
E9
1E
F8
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+f5
2767AE1CE9B
00
00
41
FF
D3
E9
45
F8
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+207
2767AE1CEB3
00
00
41
FF
D3
E9
3F
F9
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+337
2767AE1CECB
00
00
41
FF
D3
E9
57
FA
FF
FF
BA
5B
02
00
00
Change of call r11
2767AE1CEE8
6D
74
02
00
00
41
FF
D3
00
00
00
00
00
Change of cmp eax,00000000
2767AE1CF13
00
00
CD
CC
CC
3D
00
00
00
00
00
00
00
00
00
Change of jne <Module>:begin_invoke_IAsyncResult__this___UiPhotoSlot_AsyncCallback_object+30
2761867B969
00
00
4D
85
F6
75
05
45
33
F6
EB
5D
Change of je <Module>:begin_invoke_IAsyncResult__this___UiPhotoSlot_AsyncCallback_object+66
2761867B97F
C6
00
F0
FF
FF
74
25
48
81
EC
00
10
Change of jae <Module>:begin_invoke_IAsyncResult__this___UiPhotoSlot_AsyncCallback_object+41
2761867B99A
FE
00
10
00
00
73
E5
4D
85
F6
74
08
Change of je <Module>:begin_invoke_IAsyncResult__this___UiPhotoSlot_AsyncCallback_object+69
2761867B99F
73
E5
4D
85
F6
74
08
49
2B
E6
EB
03
Change of jmp <Module>:begin_invoke_IAsyncResult__this___UiPhotoSlot_AsyncCallback_object+69
2761867B9A4
74
08
49
2B
E6
EB
03
49
2B
E6
50
51
Change of jnp 2761867BAC8
2761867BA50
D3
08
C8
E0
45
7B
76
02
00
00
00
00
Change of call r11
2761867BA49
6D
74
02
00
00
41
FF
D3
08
C8
E0
45
7B
Change of jne System:Object:__icall_wrapper_ves_icall_mono_delegate_ctor+d3
275D647D94E
00
8B
00
85
C0
0F
85
4F
00
00
00
EB
00
48
8B
45
Change of jmp System:Object:__icall_wrapper_ves_icall_mono_delegate_ctor+86
275D647D954
85
4F
00
00
00
EB
00
48
8B
45
B0
49
Change of jne System:Object:__icall_wrapper_ves_icall_mono_delegate_ctor+c3
275D647D9C1
8B
F0
48
85
C0
75
D0
EB
91
00
00
00
Change of je UiPhotoSlot:Awake+fb
27618675FDC
45
E0
48
85
F6
0F
84
A9
00
00
00
48
B9
F0
41
8F
Change of je UiPhotoSlot:Awake+dd
27618676005
45
E0
48
85
F6
0F
84
62
00
00
00
48
89
72
20
48
Change of jae UiPhotoSlot:Init+56d
27618677940
40
41
83
FF
04
0F
83
07
03
00
00
49
8B
C7
48
C1
Change of jmp rax
2761867795F
03
C1
48
8B
00
FF
E0
48
63
47
44
48
Change of jnl UiPhotoSlot:Init+56d
276186779AD
63
49
18
3B
C1
0F
8D
9A
02
00
00
4C
8B
FF
49
BB
Change of jae UiPhotoSlot:Init+649
222A3CB9D22
63
49
18
3B
C1
0F
83
31
03
00
00
49
8B
46
10
49
Change of jmp UiPhotoSlot:Init+56d
189128E57BF
30
49
89
47
30
E9
39
02
00
00
48
B8
90
7E
E1
Change of jmp UiPhotoSlot:Init+56d
189128E57E6
00
48
89
47
30
E9
12
02
00
00
66
66
90
49
BB
Change of jl UiPhotoSlot:Init+56d
189128E581D
00
00
83
F8
0C
0F
8C
DA
01
00
00
48
B8
90
7E
E1
Change of jbe UiPhotoSlot:Init+67b
27CA22CD3C3
63
C9
39
48
18
0F
86
72
02
00
00
48
8D
44
C8
20
Change of jmp UiPhotoSlot:Init+56d
27CA22CD3D5
00
48
89
47
30
E9
53
01
00
00
48
8D
6D
00
49
Change of jl UiPhotoSlot:Init+56d
27CA22CD40D
00
00
83
F8
0D
0F
8C
1A
01
00
00
66
66
90
49
BB
Change of jl UiPhotoSlot:Init+56d
27CA22CD45D
41
FF
D3
85
C0
0F
8C
CA
00
00
00
48
B8
90
7E
CD
Change of jbe UiPhotoSlot:Init+660
27CA22CD51B
63
C9
39
48
18
0F
86
FF
00
00
00
48
8D
44
C8
20
Change of je UiPhotoSlot:Init+5a8
27CA22CD545
41
FF
D3
85
C0
74
21
48
8B
CF
48
63
Change of jmp UiPhotoSlot:Init+633
27CA22CD563
00
00
41
FF
D3
E9
8B
00
00
00
48
8B
47
20
48
Change of call r11
27CA22CD560
23
7C
02
00
00
41
FF
D3
E9
8B
00
00
00
Change of call r11
27CA22CD580
7F
7C
02
00
00
41
FF
D3
48
63
47
40
85
Change of je UiPhotoSlot:Init+633
27CA22CD589
63
47
40
85
C0
0F
84
64
00
00
00
48
8B
47
28
48
Change of call r11
27CA22CD5A8
7F
7C
02
00
00
41
FF
D3
48
8B
47
28
48
Change of jmp UiPhotoSlot:Init+318
27CA22CD61B
00
00
41
FF
D3
E9
B8
FC
FF
FF
BA
20
01
00
00
Change of call r11
27CA22CD638
38
7A
02
00
00
41
FF
D3
BA
78
02
00
00
Change of jmp UiPhotoSlot:Init+665
27CA22CD640
BA
78
02
00
00
EB
E3
00
00
00
00
00
Change of call r11
27C24114E70
24
7C
02
00
00
41
FF
D3
48
8D
65
00
5D
Change of je PhotoData:.ctor+bc
27C7F9A5CFC
8B
EE
4D
85
F6
0F
84
3A
00
00
00
4D
8B
26
49
8B
Change of jne PhotoData:.ctor+b9
27C7F9A5D0C
46
10
48
85
C0
75
2B
41
0F
B6
44
24
Change of jne PhotoData:.ctor+b9
27C7F9A5D18
2C
48
83
F8
01
75
1F
49
8B
04
24
48
Change of cmp rax,01
27C7F9A5D14
0F
B6
44
24
2C
48
83
F8
01
75
1F
49
8B
04
Change of je PhotoData:.ctor+bc
27C7F9A5D37
00
00
48
3B
C1
74
03
45
33
ED
49
8B
Change of jmp PhotoData:.ctor+12e
27C7F9A5D42
8B
FD
45
33
FF
E9
67
00
00
00
90
49
63
C7
39
Change of jbe PhotoData:.ctor+17a
27C7F9A5D4E
63
C7
39
47
18
0F
86
A6
00
00
00
48
8D
44
C7
20
Change of je PhotoData:.ctor+12b
27C7F9A5D62
B6
40
1C
85
C0
0F
84
43
00
00
00
48
8B
46
10
49
Change of jbe PhotoData:.ctor+173
27C7F9A5D72
63
CF
39
4F
18
0F
86
7B
00
00
00
48
8D
4C
CF
20
Change of jbe PhotoData:.ctor+155
27C7F9A5D8A
63
CF
39
4F
18
0F
86
45
00
00
00
48
8D
4C
CF
20
Change of jl PhotoData:.ctor+c8
27C7F9A5DB5
47
18
44
3B
F8
7C
91
48
8B
75
D0
48
Change of jmp PhotoData:.ctor+15a
27C7F9A5DF8
BA
81
00
00
00
EB
E0
BA
A5
00
00
00
Change of jmp PhotoData:.ctor+15a
27C7F9A5DFF
BA
A5
00
00
00
EB
D9
00
00
00
00
00
Change of je PhotoData:Get+55
27C24114EF5
41
FF
D3
85
C0
74
1E
48
8B
47
10
48
Change of jmp PhotoData:Get+57
27C24114F13
00
00
41
FF
D3
EB
02
33
C0
48
8B
75
Change of call r11
27C47F87F88
99
7B
02
00
00
41
FF
D3
48
B9
E0
B7
C8
Change of call r11
27C47F87FB8
99
7B
02
00
00
41
FF
D3
48
B9
E0
B7
C8
Change of call r11
27C47F87FE0
47
7C
02
00
00
41
FF
D3
48
8B
75
F8
48
Change of call r11
27C23C6FB18
23
7C
02
00
00
41
FF
D3
85
C0
0F
84
3A
Change of call r11
27C23C6FB58
47
7C
02
00
00
41
FF
D3
03
F0
48
8B
47
Change of call r11
27C23C6FB88
47
7C
02
00
00
41
FF
D3
48
8B
4D
D0
4C
Change of jae PhotoDefinition:GetThumbnailImage+db
1DE265DFCA0
47
18
44
3B
F0
0F
83
25
00
00
00
49
8B
47
10
49
Change of call r11
27DFF66D6A8
69
7D
02
00
00
41
FF
D3
EB
C9
F0
4C
8B
Change of mov r11,0000027D6976D316
27DFF66D69E
5D
C3
66
66
90
49
BB
16
D3
76
69
7D
02
00
00
41
FF
D3
EB
C9
Change of cmp dword ptr [r15],00
27DFF66D665
8B
F9
4C
8B
F0
41
83
3F
00
49
63
47
18
44
Change of cmp r14d,eax
27DFF66D66D
00
49
63
47
18
44
3B
F0
0F
83
25
00
00
Change of jne UiWindowPhotos:Show+728
27BA56E09C4
01
00
00
85
C0
0F
85
BE
06
00
00
45
33
FF
E9
6C
Change of jmp UiWindowPhotos:Show+3de
27BA56E09CD
00
00
45
33
FF
E9
6C
03
00
00
48
8D
64
24
00
Change of jae UiWindowPhotos:Show+885
27BA56E0A10
45
18
44
3B
F8
0F
83
CF
07
00
00
49
8B
45
10
49
Change of jae UiWindowPhotos:Show+898
27BA56E0A4F
85
50
FF
FF
FF
0F
83
A3
07
00
00
48
8B
85
58
FF
Change of jae UiWindowPhotos:Show+8b0
27BA56E0B61
85
28
FF
FF
FF
0F
83
A9
06
00
00
48
8B
85
30
FF
Change of jae UiWindowPhotos:Show+8c8
27BA56E0C91
85
08
FF
FF
FF
0F
83
91
05
00
00
48
8B
85
10
FF
Change of jl UiWindowPhotos:Show+78
27BA56E0D4F
40
18
44
3B
F8
0F
8C
83
FC
FF
FF
F3
0F
10
05
C3
Change of je UiWindowPhotos:Show+8e0
27BA56E1000
48
40
48
85
FF
0F
84
3A
02
00
00
F3
0F
10
87
84
Change of jmp UiWindowPhotos:Show+b6
27BA56E11F3
00
00
41
FF
D3
E9
1E
F8
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+f5
27BA56E120B
00
00
41
FF
D3
E9
45
F8
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+207
27BA56E1223
00
00
41
FF
D3
E9
3F
F9
FF
FF
48
8D
64
24
00
Change of jmp UiWindowPhotos:Show+337
27BA56E123B
00
00
41
FF
D3
E9
57
FA
FF
FF
BA
5B
02
00
00
Change of jne UiWindowPhotos:Hide+6c0
27BA56ECCB6
01
00
00
85
C0
0F
85
84
06
00
00
45
33
FF
E9
EA
Change of jae UiWindowPhotos:Hide+a45
27BA56ECD0F
45
18
44
3B
F8
0F
83
B0
09
00
00
49
8B
45
10
49
Change of jae UiWindowPhotos:Hide+a58
27BA56ECD42
40
18
39
45
80
0F
83
90
09
00
00
48
8B
45
88
48
Change of jae UiWindowPhotos:Hide+a70
27BA56ECE6B
85
58
FF
FF
FF
0F
83
7F
08
00
00
48
8B
85
60
FF
Change of jae UiWindowPhotos:Hide+a88
27BA56ED00B
85
38
FF
FF
FF
0F
83
F7
06
00
00
48
8B
85
40
FF
Change of jl UiWindowPhotos:Hide+48
27BA56ED0BF
40
18
44
3B
F8
0F
8C
03
FC
FF
FF
66
0F
57
C0
F2
Change of jmp UiWindowPhotos:Hide+a23
27BA56ED33B
00
00
41
FF
D3
E9
63
03
00
00
48
B8
90
7E
78
Change of jbe UiWindowPhotos:Hide+aa0
27BA56ED38C
D1
83
79
18
00
0F
86
8E
03
00
00
C7
41
20
01
00
Change of jne UiWindowPhotos:Refresh+191
27BA56EB755
41
FF
D3
85
C0
0F
85
46
01
00
00
85
F6
74
14
48
Change of je UiWindowPhotos:Refresh+63
27BA56EB75D
01
00
00
85
F6
74
14
48
8B
CF
48
8D
Change of je UiWindowPhotos:Refresh+c8
27BA56EB78A
00
00
44
3B
F8
0F
84
48
00
00
00
48
8B
87
00
01
Change of jae UiWindowPhotos:Refresh+1af
27BA56EB7A7
45
18
44
3B
E0
0F
83
12
01
00
00
49
8B
45
10
49
Change of jae UiWindowPhotos:Refresh+1c8
27BA56EB7EF
45
18
44
3B
E0
0F
83
E3
00
00
00
49
8B
45
10
49
Change of je UiWindowPhotos:Update+a6f
27BA56EBD9D
01
00
00
85
C0
0F
84
1C
0A
00
00
33
C9
90
49
BB
Change of jne UiWindowPhotos:Update+598
27BA56EBDB5
41
FF
D3
85
C0
0F
85
2D
05
00
00
48
B8
88
7E
78
Change of je UiWindowPhotos:Update+aa8
27BA56EBE65
FF
FF
48
85
F6
0F
84
8D
09
00
00
48
B9
38
FA
A8
Change of je UiPhotoSlot:Init+5a8
23B16197365
41
FF
D3
85
C0
74
21
48
8B
CF
48
63
Change of movss xmm0,[UiPhotoSlot:Init+6a0]
23B16196E4F
85
4C
FF
FF
FF
F3
0F
10
05
29
06
00
00
F3
0F
5A
C0
F2
Change of mov r11,UnityEngine:Transform:set_localEulerAngles
23B16196FA6
8D
64
24
00
90
49
BB
50
24
19
16
3B
02
00
00
41
FF
D3
48
8B
Change of call r11
23215A790E0
90
31
02
00
00
41
FF
D3
48
8B
47
28
48
Change of call qword ptr [rax+000001C8]
23215A790FB
8B
C8
48
8B
00
FF
90
C8
01
00
00
66
0F
57
C0
48
Change of call qword ptr [rax+000001C0]
23215A79162
8D
12
48
8B
00
FF
90
C0
01
00
00
4C
63
7F
40
41
Change of jae UiPhotoSlot:Init+56d
23215A79170
40
41
83
FF
04
0F
83
07
03
00
00
49
8B
C7
48
C1
Change of cmp dword ptr [rdx],00
23215A791D4
49
58
48
8B
D1
83
3A
00
48
63
49
18
3B
Change of jnl UiPhotoSlot:Init+56d
23215A791DD
63
49
18
3B
C1
0F
8D
9A
02
00
00
4C
8B
FF
49
BB
Change of cmp dword ptr [rcx],00
1C0F33CD8C9
8B
F1
4C
8B
E8
83
39
00
48
63
49
18
3B
Change of jae UiPhotoSlot:Init+649
1D3750EFA92
63
49
18
3B
C1
0F
83
31
03
00
00
49
8B
46
10
49
Change of call r11
1D3750EFD00
36
D3
01
00
00
41
FF
D3
85
C0
74
21
48
Change of je UiPhotoSlot:Init+5a8
1D3750EFD05
41
FF
D3
85
C0
74
21
48
8B
CF
48
63
Change of call r11
1D3750EFD20
11
D3
01
00
00
41
FF
D3
E9
8B
00
00
00
Change of call r11
1D3750EFDF8
26
D1
01
00
00
41
FF
D3
BA
78
02
00
00