50410
"Disable Weapon and Costume Reset"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-22
Author : Baboy
This script does blah blah blah
}
[ENABLE]
//For Clothes
aobscanmodule(Disable_Outfit,sao_al.exe,66 41 89 85 E4 00 00 00) // should be unique
alloc(newmem,$1000,Disable_Outfit)
label(code)
label(return)
newmem:
code:
nop
jmp return
Disable_Outfit:
jmp newmem
nop 3
return:
registersymbol(Disable_Outfit)
//For Weapons
aobscanmodule(Disable_Weapon,sao_al.exe,66 41 89 85 DE 00 00 00) // should be unique
alloc(newmem2,$1000,Disable_Weapon)
label(code2)
label(return2)
newmem2:
code2:
nop
jmp return2
Disable_Weapon:
jmp newmem2
nop 3
return2:
registersymbol(Disable_Weapon)
[DISABLE]
Disable_Outfit:
db 66 41 89 85 E4 00 00 00
Disable_Weapon:
db 66 41 89 85 DE 00 00 00
unregistersymbol(Disable_Outfit)
dealloc(newmem)
unregistersymbol(Disable_Weapon)
dealloc(newmem2)
50419
"Aura Test"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-25
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Aura_Manipulate,sao_al.exe,66 45 89 9A B0 00 00 00) // should be unique
alloc(newmem,$1000,Aura_Manipulate)
alloc(Wind,8)
registersymbol(Wind)
alloc(Metal,8)
registersymbol(Metal)
alloc(Water,8)
registersymbol(Water)
label(Wind1)
label(Metal2)
label(Water3)
label(code)
label(return)
Wind:
dq #60
Metal:
dq #105
Water:
dq #90
newmem:
pushf
cmp r11w,#60 //Tailwind
je Wind1
cmp r11w,#105 //Metal Level 2
je Metal2
cmp r11w,#90 //Water Level 3
je Water3
jne code
Water3:
mov r11w,[Water]
jmp code
Metal2:
mov r11w,[Metal]
jmp code
Wind1:
mov r11w,[Wind]
jmp code
code:
mov [r10+000000B0],r11w
popf
jmp return
Aura_Manipulate:
jmp newmem
nop 3
return:
registersymbol(Aura_Manipulate)
[DISABLE]
Aura_Manipulate:
db 66 45 89 9A B0 00 00 00
unregistersymbol(Aura_Manipulate)
unregistersymbol(Wind)
unregistersymbol(Metal)
unregistersymbol(Water)
dealloc(newmem)
dealloc(Wind)
dealloc(Metal)
dealloc(Water)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+15BD12
sao_al.exe+15BCEC: 84 C0 - test al,al
sao_al.exe+15BCEE: 74 0E - je sao_al.exe+15BCFE
sao_al.exe+15BCF0: 44 0F B6 C0 - movzx r8d,al
sao_al.exe+15BCF4: 0F 57 DB - xorps xmm3,xmm3
sao_al.exe+15BCF7: E8 04 0F 22 00 - call sao_al.exe+37CC00
sao_al.exe+15BCFC: EB 05 - jmp sao_al.exe+15BD03
sao_al.exe+15BCFE: E8 9D 09 22 00 - call sao_al.exe+37C6A0
sao_al.exe+15BD03: 84 C0 - test al,al
sao_al.exe+15BD05: 74 0B - je sao_al.exe+15BD12
sao_al.exe+15BD07: 41 C7 82 A0 00 00 00 FF FF FF FF - mov [r10+000000A0],FFFFFFFF
// ---------- INJECTING HERE ----------
sao_al.exe+15BD12: 66 45 89 9A B0 00 00 00 - mov [r10+000000B0],r11w
// ---------- DONE INJECTING ----------
sao_al.exe+15BD1A: 48 83 C4 28 - add rsp,28
sao_al.exe+15BD1E: C3 - ret
sao_al.exe+15BD1F: CC - int 3
sao_al.exe+15BD20: 48 85 D2 - test rdx,rdx
sao_al.exe+15BD23: 0F 84 5E 02 00 00 - je sao_al.exe+15BF87
sao_al.exe+15BD29: 48 89 5C 24 08 - mov [rsp+08],rbx
sao_al.exe+15BD2E: 57 - push rdi
sao_al.exe+15BD2F: 48 83 EC 40 - sub rsp,40
sao_al.exe+15BD33: 48 8B 05 D6 F1 F4 01 - mov rax,[sao_al.exe+20AAF10]
sao_al.exe+15BD3A: 48 8B D9 - mov rbx,rcx
}
50418
"Tailwind Replacer"
51:Lightning Aura
53:Purple Lightning Sparks
411:Ice Aura
412:Purple Aura
418:Dark Straight Line Aura
425:Purple Chains
714:Cool Flames Around
1246:Dark Purple Charging Effect
1456:Ligther dark purple charging effect
2520:Start of Sacred Art Charging Effects
2530:Pink sacred art effect
2540:Darkness Sacred Art Effect
2549:Fire Sacred Art Effect
2592:Rage Effect
2952:Faint Purple Particles
4220:Gold Shield Effect
4222:White Shield Effect
5034:Orange Particles
5035:Blue Particles
0
2 Bytes
Wind
Increase Value
189
1
0
Activate
Increase Value
187
2
1
Activate
50426
"Metal Lvl 2 Replacer"
Tailwind Replacer
0
2 Bytes
Metal
50427
"Water lvl 3 Replacer"
Tailwind Replacer
0
2 Bytes
Water
50422
"Permanent Auras"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-25
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Tailwind,sao_al.exe,F3 0F 11 BB 98 3E 00 00) // should be unique
alloc(newmem,$1000,Tailwind)
label(code)
label(return)
newmem:
pushf
cmp r8,0
jne code
cmp r9,0
jne code
nop
popf
jmp return
code:
popf
movss [rbx+00003E98],xmm7
jmp return
Tailwind:
jmp newmem
nop 3
return:
registersymbol(Tailwind)
[DISABLE]
Tailwind:
db F3 0F 11 BB 98 3E 00 00
unregistersymbol(Tailwind)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+559062
sao_al.exe+55902C: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
sao_al.exe+559031: EB 23 - jmp sao_al.exe+559056
sao_al.exe+559033: 80 3D 30 B3 B5 01 01 - cmp byte ptr [sao_al.exe+20B436A],01
sao_al.exe+55903A: 75 12 - jne sao_al.exe+55904E
sao_al.exe+55903C: F3 0F 10 05 48 4C 76 01 - movss xmm0,[sao_al.exe+1CBDC8C]
sao_al.exe+559044: F3 0F 59 05 54 4D 4A 01 - mulss xmm0,[sao_al.exe+19FDDA0]
sao_al.exe+55904C: EB 08 - jmp sao_al.exe+559056
sao_al.exe+55904E: F3 0F 10 05 46 45 76 01 - movss xmm0,[sao_al.exe+1CBD59C]
sao_al.exe+559056: F3 0F 59 83 A0 3E 00 00 - mulss xmm0,[rbx+00003EA0]
sao_al.exe+55905E: F3 0F 58 F8 - addss xmm7,xmm0
// ---------- INJECTING HERE ----------
sao_al.exe+559062: F3 0F 11 BB 98 3E 00 00 - movss [rbx+00003E98],xmm7
// ---------- DONE INJECTING ----------
sao_al.exe+55906A: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
sao_al.exe+55906F: 90 - nop
sao_al.exe+559070: 45 33 C9 - xor r9d,r9d
sao_al.exe+559073: 4C 8B C6 - mov r8,rsi
sao_al.exe+559076: 8B D7 - mov edx,edi
sao_al.exe+559078: 48 8B CB - mov rcx,rbx
sao_al.exe+55907B: E8 80 32 00 00 - call sao_al.exe+55C300
sao_al.exe+559080: 4C 8B C6 - mov r8,rsi
sao_al.exe+559083: 8B D7 - mov edx,edi
sao_al.exe+559085: 48 8B CB - mov rcx,rbx
}
50424
"Change Sacred Art Generated"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-26
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(SacredArtManipulate,sao_al.exe,66 89 87 90 0B 00 00) // should be unique
alloc(newmem,$1000,SacredArtManipulate)
alloc(SkillID,8)
registersymbol(SkillID)
label(code)
label(return)
SkillID:
dq #8501
newmem:
code:
mov ax,[SkillID]
mov [rdi+00000B90],ax
jmp return
SacredArtManipulate:
jmp newmem
nop 2
return:
registersymbol(SacredArtManipulate)
[DISABLE]
SacredArtManipulate:
db 66 89 87 90 0B 00 00
unregistersymbol(SacredArtManipulate)
unregistersymbol(SkillID)
dealloc(SkillID)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+2A24B1
sao_al.exe+2A2492: E8 D9 9B 29 00 - call sao_al.exe+53C070
sao_al.exe+2A2497: FF CB - dec ebx
sao_al.exe+2A2499: 0F B7 45 B0 - movzx eax,word ptr [rbp-50]
sao_al.exe+2A249D: 45 33 FF - xor r15d,r15d
sao_al.exe+2A24A0: 66 44 3B F8 - cmp r15w,ax
sao_al.exe+2A24A4: 75 0B - jne sao_al.exe+2A24B1
sao_al.exe+2A24A6: 85 DB - test ebx,ebx
sao_al.exe+2A24A8: 79 A7 - jns sao_al.exe+2A2451
sao_al.exe+2A24AA: 32 C0 - xor al,al
sao_al.exe+2A24AC: E9 8A 01 00 00 - jmp sao_al.exe+2A263B
// ---------- INJECTING HERE ----------
sao_al.exe+2A24B1: 66 89 87 90 0B 00 00 - mov [rdi+00000B90],ax
// ---------- DONE INJECTING ----------
sao_al.exe+2A24B8: 44 89 A7 70 0B 00 00 - mov [rdi+00000B70],r12d
sao_al.exe+2A24BF: 44 89 AF 7C 0B 00 00 - mov [rdi+00000B7C],r13d
sao_al.exe+2A24C6: 48 8B 05 43 8A E0 01 - mov rax,[sao_al.exe+20AAF10]
sao_al.exe+2A24CD: 48 85 C0 - test rax,rax
sao_al.exe+2A24D0: 74 22 - je sao_al.exe+2A24F4
sao_al.exe+2A24D2: 48 8B 40 18 - mov rax,[rax+18]
sao_al.exe+2A24D6: 48 05 20 33 04 00 - add rax,00043320
sao_al.exe+2A24DC: 74 16 - je sao_al.exe+2A24F4
sao_al.exe+2A24DE: 48 8B 86 F0 11 00 00 - mov rax,[rsi+000011F0]
sao_al.exe+2A24E5: 48 89 45 B8 - mov [rbp-48],rax
}
50423
"Skill Override"
0
2 Bytes
SkillID
Change of nop
sao_al.exe+3C053E
BD
E8
03
00
00
90
41
3B
C6
44
0F
Change of mov [rcx],dx
sao_al.exe+1D960B
83
C4
40
5F
C3
66
89
11
48
8B
C3
48
8B
Change of mov [r13+000000E4],ax
sao_al.exe+1D43D4
B8
FF
FF
FF
FF
66
41
89
85
E4
00
00
00
E9
53
FE
FF
FF
PerFish3AOB
140658533
PerFish2AOB
140658528
HightlightedItemStatus
140612893
WeaponNPCMasteryInGroupTabAOB
140240ADC
CCharFuncAOB
1401664B0
HighlightedItemAOB
1403BD491
function lua_aobscan(name,module,bytes,index)
index = index - 1
if(module == "") then
local resultSet = AOBScan(bytes)
if(resultSet == nil) then
unregisterSymbol(name)
print(name.." not found")
else
unregisterSymbol(name)
registerSymbol(name,resultSet[index])
resultSet.destroy()
end
else
if(getModuleSize(module) == nil) then
print("Module "..module.." not found")
else
local memScanner = createMemScan()
local memFoundList = createFoundList(memScanner)
memScanner.firstScan(
soExactValue,vtByteArray,rtRounded,bytes,nil,
getAddress(module),(getAddress(module)+getModuleSize(module)),"",
fsmNotAligned,"",true,false,false,false)
memScanner.waitTillDone()
memFoundList.initialize()
if(memFoundList.Count == 0) then
unregisterSymbol(name)
print(name.." in module "..module.." not found")
else
unregisterSymbol(name)
registerSymbol(name,memFoundList.Address[index])
end
memScanner.destroy()
memFoundList.destroy()
end
end
end
"sao_al.exe"+3B5B6C
Get Item Quantity