50410
"Disable Weapon and Costume Reset"
FF8000
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-22
Author : Baboy
This script does blah blah blah
}
[ENABLE]
//For Clothes
aobscanmodule(Disable_Outfit,sao_al.exe,66 41 89 85 E4 00 00 00) // should be unique
alloc(newmem,$1000,Disable_Outfit)
label(code)
label(return)
newmem:
code:
nop
jmp return
Disable_Outfit:
jmp newmem
nop 3
return:
registersymbol(Disable_Outfit)
//For Weapons
aobscanmodule(Disable_Weapon,sao_al.exe,66 41 89 85 DE 00 00 00) // should be unique
alloc(newmem2,$1000,Disable_Weapon)
label(code2)
label(return2)
newmem2:
code2:
nop
jmp return2
Disable_Weapon:
jmp newmem2
nop 3
return2:
registersymbol(Disable_Weapon)
[DISABLE]
Disable_Outfit:
db 66 41 89 85 E4 00 00 00
Disable_Weapon:
db 66 41 89 85 DE 00 00 00
unregistersymbol(Disable_Outfit)
dealloc(newmem)
unregistersymbol(Disable_Weapon)
dealloc(newmem2)
50860
"Aura Related"
400080
1
50861
"Aura Changer"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-25
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Aura_Manipulate,sao_al.exe,66 45 89 9A B0 00 00 00) // should be unique
alloc(newmem,$1000,Aura_Manipulate)
alloc(Wind,8)
registersymbol(Wind)
alloc(Metal,8)
registersymbol(Metal)
alloc(Water,8)
registersymbol(Water)
label(Wind1)
label(Metal2)
label(Water3)
label(code)
label(return)
Wind:
dq #60
Metal:
dq #105
Water:
dq #90
newmem:
pushf
cmp r11w,#60 //Tailwind
je Wind1
cmp r11w,#105 //Metal Level 2
je Metal2
cmp r11w,#90 //Water Level 3
je Water3
jne code
Water3:
mov r11w,[Water]
jmp code
Metal2:
mov r11w,[Metal]
jmp code
Wind1:
mov r11w,[Wind]
jmp code
code:
mov [r10+000000B0],r11w
popf
jmp return
Aura_Manipulate:
jmp newmem
nop 3
return:
registersymbol(Aura_Manipulate)
[DISABLE]
Aura_Manipulate:
db 66 45 89 9A B0 00 00 00
unregistersymbol(Aura_Manipulate)
unregistersymbol(Wind)
unregistersymbol(Metal)
unregistersymbol(Water)
dealloc(newmem)
dealloc(Wind)
dealloc(Metal)
dealloc(Water)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+15BD12
sao_al.exe+15BCEC: 84 C0 - test al,al
sao_al.exe+15BCEE: 74 0E - je sao_al.exe+15BCFE
sao_al.exe+15BCF0: 44 0F B6 C0 - movzx r8d,al
sao_al.exe+15BCF4: 0F 57 DB - xorps xmm3,xmm3
sao_al.exe+15BCF7: E8 04 0F 22 00 - call sao_al.exe+37CC00
sao_al.exe+15BCFC: EB 05 - jmp sao_al.exe+15BD03
sao_al.exe+15BCFE: E8 9D 09 22 00 - call sao_al.exe+37C6A0
sao_al.exe+15BD03: 84 C0 - test al,al
sao_al.exe+15BD05: 74 0B - je sao_al.exe+15BD12
sao_al.exe+15BD07: 41 C7 82 A0 00 00 00 FF FF FF FF - mov [r10+000000A0],FFFFFFFF
// ---------- INJECTING HERE ----------
sao_al.exe+15BD12: 66 45 89 9A B0 00 00 00 - mov [r10+000000B0],r11w
// ---------- DONE INJECTING ----------
sao_al.exe+15BD1A: 48 83 C4 28 - add rsp,28
sao_al.exe+15BD1E: C3 - ret
sao_al.exe+15BD1F: CC - int 3
sao_al.exe+15BD20: 48 85 D2 - test rdx,rdx
sao_al.exe+15BD23: 0F 84 5E 02 00 00 - je sao_al.exe+15BF87
sao_al.exe+15BD29: 48 89 5C 24 08 - mov [rsp+08],rbx
sao_al.exe+15BD2E: 57 - push rdi
sao_al.exe+15BD2F: 48 83 EC 40 - sub rsp,40
sao_al.exe+15BD33: 48 8B 05 D6 F1 F4 01 - mov rax,[sao_al.exe+20AAF10]
sao_al.exe+15BD3A: 48 8B D9 - mov rbx,rcx
}
50862
"Tailwind Replacer"
51:Lightning Aura
53:Purple Lightning Sparks
411:Ice Aura
412:Purple Aura
418:Dark Straight Line Aura
425:Purple Chains
714:Cool Flames Around
1246:Dark Purple Charging Effect
1456:Ligther dark purple charging effect
2520:Start of Sacred Art Charging Effects
2530:Pink sacred art effect
2540:Darkness Sacred Art Effect
2549:Fire Sacred Art Effect
2592:Rage Effect
2952:Faint Purple Particles
4045:Purple Smoke
4220:Gold Shield Effect
4222:White Shield Effect
5034:Orange Particles
5035:Blue Particles
5504:Blue Flaming Aura
5505:Orange Flaming Aura
5515:Icy Aura
5517:Purple Smoke Aura
5529:Faint Purple Particles
5565:Black and Purple Smoke
5570:Purple Smoke with purple particles
6070:Red circles around
6071:Red square around
6114:Blue flames with black swirls
6115:Shield sphere aura
6120:red and black flames with black red swirls
6125:Green mist aura
6127:Green flames with green swirls
0
2 Bytes
Wind
Increase Value
189
1
0
Activate
Increase Value
187
2
1
Activate
50863
"Metal Lvl 2 Replacer"
Tailwind Replacer
0
2 Bytes
Metal
50864
"Water lvl 3 Replacer"
Tailwind Replacer
0
2 Bytes
Water
50865
"Permanent Auras"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-25
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(Tailwind,sao_al.exe,F3 0F 11 BB 98 3E 00 00) // should be unique
alloc(newmem,$1000,Tailwind)
label(code)
label(return)
newmem:
pushf
cmp r8,0
jne code
cmp r9,0
jne code
nop
popf
jmp return
code:
popf
movss [rbx+00003E98],xmm7
jmp return
Tailwind:
jmp newmem
nop 3
return:
registersymbol(Tailwind)
[DISABLE]
Tailwind:
db F3 0F 11 BB 98 3E 00 00
unregistersymbol(Tailwind)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+559062
sao_al.exe+55902C: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
sao_al.exe+559031: EB 23 - jmp sao_al.exe+559056
sao_al.exe+559033: 80 3D 30 B3 B5 01 01 - cmp byte ptr [sao_al.exe+20B436A],01
sao_al.exe+55903A: 75 12 - jne sao_al.exe+55904E
sao_al.exe+55903C: F3 0F 10 05 48 4C 76 01 - movss xmm0,[sao_al.exe+1CBDC8C]
sao_al.exe+559044: F3 0F 59 05 54 4D 4A 01 - mulss xmm0,[sao_al.exe+19FDDA0]
sao_al.exe+55904C: EB 08 - jmp sao_al.exe+559056
sao_al.exe+55904E: F3 0F 10 05 46 45 76 01 - movss xmm0,[sao_al.exe+1CBD59C]
sao_al.exe+559056: F3 0F 59 83 A0 3E 00 00 - mulss xmm0,[rbx+00003EA0]
sao_al.exe+55905E: F3 0F 58 F8 - addss xmm7,xmm0
// ---------- INJECTING HERE ----------
sao_al.exe+559062: F3 0F 11 BB 98 3E 00 00 - movss [rbx+00003E98],xmm7
// ---------- DONE INJECTING ----------
sao_al.exe+55906A: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
sao_al.exe+55906F: 90 - nop
sao_al.exe+559070: 45 33 C9 - xor r9d,r9d
sao_al.exe+559073: 4C 8B C6 - mov r8,rsi
sao_al.exe+559076: 8B D7 - mov edx,edi
sao_al.exe+559078: 48 8B CB - mov rcx,rbx
sao_al.exe+55907B: E8 80 32 00 00 - call sao_al.exe+55C300
sao_al.exe+559080: 4C 8B C6 - mov r8,rsi
sao_al.exe+559083: 8B D7 - mov edx,edi
sao_al.exe+559085: 48 8B CB - mov rcx,rbx
}
50555
"Skill Related"
8000FF
1
50424
"Change Sacred Art Generated"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-26
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(SacredArtManipulate,sao_al.exe,66 89 87 90 0B 00 00) // should be unique
alloc(newmem,$1000,SacredArtManipulate)
//Fire
alloc(FireReplacer1,2)
registersymbol(FireReplacer1)
alloc(FireReplacer2,2)
registersymbol(FireReplacer2)
alloc(FireReplacer3,2)
registersymbol(FireReplacer3)
label(Firelvl1)
label(Firelvl2)
label(Firelvl3)
//Ice
alloc(IceReplacer1,2)
registersymbol(IceReplacer1)
alloc(IceReplacer2,2)
registersymbol(IceReplacer2)
alloc(IceReplacer3,2)
registersymbol(IceReplacer3)
label(Icelvl1)
label(Icelvl2)
label(Icelvl3)
//Wind
alloc(WindReplacer1,2)
registersymbol(WindReplacer1)
alloc(WindReplacer2,2)
registersymbol(WindReplacer2)
alloc(WindReplacer3,2)
registersymbol(WindReplacer3)
label(Windlvl1)
label(Windlvl2)
label(Windlvl3)
//Water
alloc(WaterReplacer1,2)
registersymbol(WaterReplacer1)
alloc(WaterReplacer2,2)
registersymbol(WaterReplacer2)
alloc(WaterReplacer3,2)
registersymbol(WaterReplacer3)
label(Waterlvl1)
label(Waterlvl2)
label(Waterlvl3)
//Water
alloc(WaterReplacer1,2)
registersymbol(WaterReplacer1)
alloc(WaterReplacer2,2)
registersymbol(WaterReplacer2)
alloc(WaterReplacer3,2)
registersymbol(WaterReplacer3)
label(Waterlvl1)
label(Waterlvl2)
label(Waterlvl3)
//Metal
alloc(MetalReplacer1,2)
registersymbol(MetalReplacer1)
alloc(MetalReplacer2,2)
registersymbol(MetalReplacer2)
alloc(MetalReplacer3,2)
registersymbol(MetalReplacer3)
label(Metallvl1)
label(Metallvl2)
label(Metallvl3)
//Crystal
alloc(CrystalReplacer1,2)
registersymbol(CrystalReplacer1)
alloc(CrystalReplacer2,2)
registersymbol(CrystalReplacer2)
alloc(CrystalReplacer3,2)
registersymbol(CrystalReplacer3)
label(Crystallvl1)
label(Crystallvl2)
label(Crystallvl3)
//Light
alloc(LightReplacer1,2)
registersymbol(LightReplacer1)
alloc(LightReplacer2,2)
registersymbol(LightReplacer2)
alloc(LightReplacer3,2)
registersymbol(LightReplacer3)
label(Lightlvl1)
label(Lightlvl2)
label(Lightlvl3)
//Darkness
alloc(DarknessReplacer1,2)
registersymbol(DarknessReplacer1)
alloc(DarknessReplacer2,2)
registersymbol(DarknessReplacer2)
alloc(DarknessReplacer3,2)
registersymbol(DarknessReplacer3)
label(Darknesslvl1)
label(Darknesslvl2)
label(Darknesslvl3)
label(code)
label(return)
FireReplacer1:
dd #8501
FireReplacer2:
dd #8502
FireReplacer3:
dd #8503
IceReplacer1:
dd #8511
IceReplacer2:
dd #8512
IceReplacer3:
dd #8513
WindReplacer1:
dd #8521
WindReplacer2:
dd #8522
WindReplacer3:
dd #8523
WaterReplacer1:
dd #8531
WaterReplacer2:
dd #8532
WaterReplacer3:
dd #8533
MetalReplacer1:
dd #8541
MetalReplacer2:
dd #8542
MetalReplacer3:
dd #8543
CrystalReplacer1:
dd #8551
CrystalReplacer2:
dd #8552
CrystalReplacer3:
dd #8553
LightReplacer1:
dd #8561
LightReplacer2:
dd #8562
LightReplacer3:
dd #8563
DarknessReplacer1:
dd #8571
DarknessReplacer2:
dd #8572
DarknessReplacer3:
dd #8573
newmem:
pushf
cmp [rdi+00000BA0], 0 //check if kirito
jne code
cmp ax,#8501 //Fire 1
je Firelvl1
cmp ax,#8502 //Fire 2
je Firelvl2
cmp ax,#8503 //Fire 3
je Firelvl3
cmp ax,#8511 //Ice 1
je Icelvl1
cmp ax,#8512 //Ice 2
je Icelvl2
cmp ax,#8513 //Ice 3
je Icelvl3
cmp ax,#8521 //Wind 1
je Windlvl1
cmp ax,#8522 //Wind 2
je Windlvl2
cmp ax,#8523 //Wind 3
je Windlvl3
cmp ax,#8531 //Water 1
je Waterlvl1
cmp ax,#8532 //Water 2
je Waterlvl2
cmp ax,#8533 //Water 3
je Waterlvl3
cmp ax,#8541 //Metal 1
je Metallvl1
cmp ax,#8542 //Metal 2
je Metallvl2
cmp ax,#8543 //Metal 3
je Metallvl3
cmp ax,#8551 //Crystal 1
je Crystallvl1
cmp ax,#8552 //Crystal 2
je Crystallvl2
cmp ax,#8553 //Crystal 3
je Crystallvl3
cmp ax,#8561 //Light 1
je Lightlvl1
cmp ax,#8562 //Light 2
je Lightlvl2
cmp ax,#8563 //Light 3
je Lightlvl3
cmp ax,#8571 //Darkness 1
je Darknesslvl1
cmp ax,#8572 //Darkness 2
je Darknesslvl2
cmp ax,#8573 //Darkness 3
je Darknesslvl3
jmp code
Firelvl1:
mov ax,[FireReplacer1]
jmp code
Firelvl2:
mov ax,[FireReplacer2]
jmp code
Firelvl3:
mov ax,[FireReplacer3]
jmp code
Icelvl1:
mov ax,[IceReplacer1]
jmp code
Icelvl2:
mov ax,[IceReplacer2]
jmp code
Icelvl3:
mov ax,[IceReplacer3]
jmp code
Windlvl1:
mov ax,[WindReplacer1]
jmp code
Windlvl2:
mov ax,[WindReplacer2]
jmp code
Windlvl3:
mov ax,[WindReplacer3]
jmp code
Waterlvl1:
mov ax,[WaterReplacer1]
jmp code
Waterlvl2:
mov ax,[WaterReplacer2]
jmp code
Waterlvl3:
mov ax,[WaterReplacer3]
jmp code
Metallvl1:
mov ax,[MetalReplacer1]
jmp code
Metallvl2:
mov ax,[MetalReplacer2]
jmp code
Metallvl3:
mov ax,[MetalReplacer3]
jmp code
Crystallvl1:
mov ax,[CrystalReplacer1]
jmp code
Crystallvl2:
mov ax,[CrystalReplacer2]
jmp code
Crystallvl3:
mov ax,[CrystalReplacer3]
jmp code
Lightlvl1:
mov ax,[LightReplacer1]
jmp code
Lightlvl2:
mov ax,[LightReplacer2]
jmp code
Lightlvl3:
mov ax,[LightReplacer3]
jmp code
Darknesslvl1:
mov ax,[DarknessReplacer1]
jmp code
Darknesslvl2:
mov ax,[DarknessReplacer2]
jmp code
Darknesslvl3:
mov ax,[DarknessReplacer3]
jmp code
code:
mov [rdi+00000B90],ax
popf
jmp return
SacredArtManipulate:
jmp newmem
nop 2
return:
registersymbol(SacredArtManipulate)
[DISABLE]
SacredArtManipulate:
db 66 89 87 90 0B 00 00
unregistersymbol(SacredArtManipulate)
unregistersymbol(FireReplacer1)
unregistersymbol(FireReplacer2)
unregistersymbol(FireReplacer3)
unregistersymbol(IceReplacer1)
unregistersymbol(IceReplacer2)
unregistersymbol(IceReplacer3)
unregistersymbol(WindReplacer1)
unregistersymbol(WindReplacer2)
unregistersymbol(WindReplacer3)
unregistersymbol(WaterReplacer1)
unregistersymbol(WaterReplacer2)
unregistersymbol(WaterReplacer3)
unregistersymbol(MetalReplacer1)
unregistersymbol(MetalReplacer2)
unregistersymbol(MetalReplacer3)
unregistersymbol(CrystalReplacer1)
unregistersymbol(CrystalReplacer2)
unregistersymbol(CrystalReplacer3)
unregistersymbol(LightReplacer1)
unregistersymbol(LightReplacer2)
unregistersymbol(LightReplacer3)
unregistersymbol(DarknessReplacer1)
unregistersymbol(DarknessReplacer2)
unregistersymbol(DarknessReplacer3)
dealloc(FireReplacer1)
dealloc(FireReplacer2)
dealloc(FireReplacer3)
dealloc(IceReplacer1)
dealloc(IceReplacer2)
dealloc(IceReplacer3)
dealloc(WindReplacer1)
dealloc(WindReplacer2)
dealloc(WindReplacer3)
dealloc(WaterReplacer1)
dealloc(WaterReplacer2)
dealloc(WaterReplacer3)
dealloc(MetalReplacer1)
dealloc(MetalReplacer2)
dealloc(MetalReplacer3)
dealloc(CrystalReplacer1)
dealloc(CrystalReplacer2)
dealloc(CrystalReplacer3)
dealloc(LightReplacer1)
dealloc(LightReplacer2)
dealloc(LightReplacer3)
dealloc(DarknessReplacer1)
dealloc(DarknessReplacer2)
dealloc(DarknessReplacer3)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+2A24B1
sao_al.exe+2A2492: E8 D9 9B 29 00 - call sao_al.exe+53C070
sao_al.exe+2A2497: FF CB - dec ebx
sao_al.exe+2A2499: 0F B7 45 B0 - movzx eax,word ptr [rbp-50]
sao_al.exe+2A249D: 45 33 FF - xor r15d,r15d
sao_al.exe+2A24A0: 66 44 3B F8 - cmp r15w,ax
sao_al.exe+2A24A4: 75 0B - jne sao_al.exe+2A24B1
sao_al.exe+2A24A6: 85 DB - test ebx,ebx
sao_al.exe+2A24A8: 79 A7 - jns sao_al.exe+2A2451
sao_al.exe+2A24AA: 32 C0 - xor al,al
sao_al.exe+2A24AC: E9 8A 01 00 00 - jmp sao_al.exe+2A263B
// ---------- INJECTING HERE ----------
sao_al.exe+2A24B1: 66 89 87 90 0B 00 00 - mov [rdi+00000B90],ax
// ---------- DONE INJECTING ----------
sao_al.exe+2A24B8: 44 89 A7 70 0B 00 00 - mov [rdi+00000B70],r12d
sao_al.exe+2A24BF: 44 89 AF 7C 0B 00 00 - mov [rdi+00000B7C],r13d
sao_al.exe+2A24C6: 48 8B 05 43 8A E0 01 - mov rax,[sao_al.exe+20AAF10]
sao_al.exe+2A24CD: 48 85 C0 - test rax,rax
sao_al.exe+2A24D0: 74 22 - je sao_al.exe+2A24F4
sao_al.exe+2A24D2: 48 8B 40 18 - mov rax,[rax+18]
sao_al.exe+2A24D6: 48 05 20 33 04 00 - add rax,00043320
sao_al.exe+2A24DC: 74 16 - je sao_al.exe+2A24F4
sao_al.exe+2A24DE: 48 8B 86 F0 11 00 00 - mov rax,[rsi+000011F0]
sao_al.exe+2A24E5: 48 89 45 B8 - mov [rbp-48],rax
}
50446
"Fire"
1
50423
"Fire Lvl 1 Replacer"
90:Dodge Backwards?
511:Teleport?
518:Teleport 2
519:Teleport 3
1101:Start of 1 handed sword skills
1171:End of 1 handed sword skills
1301:Start of Enemy 1 handed sword skills
1371:End of Enemy 1 handed sword skills
1601:Start of Rapier Skills
1671:End of Rapier skills
1801:Start of Enemy Rapier Skills
1871:End of Enemy Rapier Skills
2601:Start of Dagger Skills
2671:End of Dagger Skills
2801:Start of Enemy Dagger Skills
2871:End of Enemy Dagger Skills
3101:Start of Mace Skills
3171:End of Mace Skills
3181:Some Flashy Skill?
3601:Start of Whip Skills
3671:End of Whip Skills
4101:Start of Katana Skills
4171:End of Katana Skills
4301:Start of Enemy Katana Skills
4371:End of Enemy Katana Skills
4601:Start of 2 handed Skills
4671:End of 2 handed Skills
4801:Start of Enemy 2 handed skills
4871:End of Enemy 2 handed skills
6101:Start of Bow Skills
6171:End of Bow Skills
6401:Start of Enemy Bow Skills
6471:End of Enemy Bow Skills
6601:Start of Dual Wield Skills
6671:End of Dual Wield Skills
7001:Start of Eldrie's Boss Movesets (Whip)
7021:Tract Strike
7022:Swing Whip
7023:Roaring Beat
7024:Catch Move
7026:Turnover
7027:Dropcrash
7028:Sonic Beast
7038:Dance of Madness
7051:Scowling Serpent
7052:Screeching Fiend
7061:Eugeo Cutscene Skill?
7062:Ice Spikes?
7071:Start of Eugeo's Normal Combo String?
7086:Big Ice Spike
7090:Big Ice Summon
7101:Start of Deusolbort's Boss Movesets (Bow)
7121:Aim and Shoot
7122:Hail of Bullets
7123:No name?
7132:Aim and Shoot
7156:Phoenix Descent
7161:Eugeo Cutscene
7162:Ice Spikes 2?
7163:Ice Summon
7201:Start of Fanatio's Boss Movesets (Rapier)
7221:Linear
7222:Flashing Penetrator
7223:Raging Valkyrie
7233:H-P Light Meteorite
7236:H-P Light Judgement
7238:H-P Light God of Destruction
7242:More Heaven Piercing Light?
7253:Dodge and Slash
7301:Start of Alice Boss Movesets (1 Handed Sword)
7312:Alice's Dodge Right
7313:Alice's Dodge Left
7321:Horizontal 1
7322:Horizontal 2
7323:Horizontal 3
7324:Savage Fulcrum
7325:Vertical 1
7326:Vertical 2
7327:Vertical 3
7328:Vertical 4
7329:Sonic Leap 1
7330:Sonic Leap 2
7331:Storm of Petals
7333:Unending Flower Dance
7341:Alice Unique Skill 1
7342:Alice Unique Skill 2
7343:Alice Unique Skill 3
7401:Start of More katana moves
7421:Zekku
7424:Tsujikaze
7425:Tsujikaze 2
7426:Tsujikaze 3
7427:Ukifune
7428:Ukifune 2
7429:Ukifune 3
7430:Tsumuji-Guruma
7431:Shinonome
7432:Gengetsu
7433:Hiougi
7434:Hiougi 2
7435:Sanka
7436:Sanka 2
7463:Blazing Glow
7466:Flame Tornado
7501:Start of more 1 handed sword skills
7601:More Rapier Skills
7701:More Dupe Katana Skills
7751:Double Cross Halo
7752:Double Cross Vanward
7753:Double Cross Turnabout
7821:Dupe Dagger Skills
7921:Dupe 2 Handed Skills
8501:Arrow Shape
8502:Blazing Glow
8503:Flame Tornado
8511:Arctic Thorn
8512:Terrafrost
8513:Glacial Vein
8521:Tailwind
8522:Magic Mirror
8523:Accelerator
8531:Water Cutter
8532:Splash Bomb
8533:Bubble Wall
8541:Create Metal
8542:Strong Body
8543:Force barrier
8551:Create Mirror
8552:Jewel Lance
8553:Crystal Bind
8561:Luminous
8562:Divine Light
8563:Merciful Shine
8571:Blinding Field
8572:Dark Impact
8573:Dazzling Aura
8701:Start of Finish Art Triggers (Including Enhance Armament)
8772:End of Finish Art Triggers
8801:More Triggers
9951:Unknown Skill
10001:Dreadblow (Start of enemy mob skills)
10071:Shield Skill (Makes you invulnerable for a short time)
10171:Another Buff?
10211:Petal Barrage?
10212:Summon Bees?
10271:Another Buff
10811:Shoots out lasers?
10812:Roar?
10813:Explosion?
10814:more lasers
10871:Another shield skill
15218:Cool lasers
17016:Summon Lightning
17041:More lightning summons
17221:More 2 handed skills
17411:More Dagger Skills
17511:Some Cool Enemy skills
17621:More Mace Skills
21000:Start of Buff Skills? (Cooldowns Still Apply)
26460:Virulent Madness
26610:Fill Arts Gauge to Max
26630:Reduce Post Motion Delay
26720:Post Motion Delay set to 0
40001:More Finish Arts and Release Recollection Triggers
40211:More Triggers
40281:More Triggers
40401:More Triggers
40601:Dual Wield Skills Again?
41101:Start of Spear Skills
41171:End of Spear Skills
42101:Start of Shield and Axe Skills
42171:End of Spear Skills
45331:Tyrant's Decree
45721:Permanent? Def Lvl + 3 and Damage Reduction +90 Buff
47581:Cool Dash Forward
47584:Cool Dash Backward
47711:Cool Sword Slashes
0
2 Bytes
FireReplacer1
50445
"Fire Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
FireReplacer2
50444
"Fire Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
FireReplacer3
50451
"Ice"
1
50452
"Ice Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
IceReplacer1
50453
"Ice Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
IceReplacer2
50454
"Ice Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
IceReplacer3
50447
"Wind"
1
50448
"Wind Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WindReplacer1
50449
"Wind Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WindReplacer2
50450
"Wind Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WindReplacer3
50455
"Water"
1
50456
"Water Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WaterReplacer1
50457
"Water Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WaterReplacer2
50458
"Water Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
WaterReplacer3
50459
"Metal"
1
50460
"Metal Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
MetalReplacer1
50461
"Metal Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
MetalReplacer2
50462
"Metal Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
MetalReplacer3
50463
"Crystal"
1
50464
"Crystal Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
CrystalReplacer1
50465
"Crystal Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
CrystalReplacer2
50466
"Crystal Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
CrystalReplacer3
50467
"Light"
1
50468
"Light Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
LightReplacer1
50469
"Lightl Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
LightReplacer2
50470
"Light Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
LightReplacer3
50471
"Darkness"
1
50472
"Darkness Lvl 1 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
DarknessReplacer1
50473
"Darkness Lvl 2 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
DarknessReplacer2
50474
"Darkness Lvl 3 Replacer"
Fire Lvl 1 Replacer
0
2 Bytes
DarknessReplacer3
50589
"Skill Moveset Replacer"
Auto Assembler Script
{ Game : sao_al.exe
Version:
Date : 2023-01-26
Author : Baboy
This script does blah blah blah
}
[ENABLE]
aobscanmodule(SkillTest,sao_al.exe,66 89 87 B4 02 01 00) // should be unique
alloc(newmem,$1000,SkillTest)
alloc(SkillReplacer1,8)
registersymbol(SkillReplacer1)
alloc(SkillTarget1,8)
registersymbol(SkillTarget1)
alloc(Enabler,4)
registersymbol(Enabler)
alloc(DodgeEnabler,1)
registersymbol(DodgeEnabler)
alloc(DodgeReplacer,8)
registersymbol(DodgeReplacer)
alloc(DodgeTarget,8)
registersymbol(DodgeTarget)
alloc(ActionPointer,8)
registersymbol(ActionPointer)
label(Skill1)
label(Skill2)
label(Skill3)
label(Skill4)
label(Dodge1)
label(Dodge2)
label(Dodge3)
label(Dodge4)
label(code)
label(return)
SkillReplacer1:
dq 0
SkillTarget1:
dq 0
ActionPointer:
dq 0
DodgeEnabler:
db 1
DodgeTarget:
dw 1
DodgeTarget+02:
dw 3 //right dodge
DodgeTarget+04:
dw 4 //left dodge
DodgeReplacer:
dw #511
DodgeReplacer+02:
dw #7312
DodgeReplacer+04:
dw #7313
newmem:
pushf
cmp r13, 1 //Check if enemy
jne code
cmp [rdi+0000FBB0], 0 //Check if kirito
jne code
push rbx
lea rbx,[rdi+000102B4]
mov [ActionPointer],rbx
pop rbx
cmp ax, [SkillTarget1]
je Skill1
cmp ax, [SkillTarget1+02]
je Skill2
cmp ax, [SkillTarget1+04]
je Skill3
cmp ax, [SkillTarget1+06]
je Skill4
cmp ax, [DodgeTarget]
je Dodge1
cmp ax, [DodgeTarget+02]
je Dodge2
cmp ax, [DodgeTarget+04]
je Dodge3
cmp ax, [DodgeTarget+06]
je Dodge4
jmp code
Skill1:
cmp byte [Enabler], 0
je code
mov ax, [SkillReplacer1]
jmp code
Skill2:
cmp byte [Enabler+01], 0
je code
mov ax, [SkillReplacer1+02]
jmp code
Skill3:
cmp byte [Enabler+02], 0
je code
mov ax, [SkillReplacer1+04]
jmp code
Skill4:
cmp byte [Enabler+03], 0
je code
mov ax, [SkillReplacer1+06]
jmp code
Dodge1:
cmp byte [DodgeEnabler], 0
je code
mov ax, [DodgeReplacer]
jmp code
Dodge2:
cmp byte [DodgeEnabler], 0
je code
mov ax, [DodgeReplacer+02]
jmp code
Dodge3:
cmp byte [DodgeEnabler], 0
je code
mov ax, [DodgeReplacer+04]
jmp code
Dodge4:
cmp byte [DodgeEnabler], 0
je code
mov ax, [DodgeReplacer+06]
jmp code
code:
popf
mov [rdi+000102B4],ax
jmp return
SkillTest:
jmp newmem
nop 2
return:
registersymbol(SkillTest)
[DISABLE]
SkillTest:
db 66 89 87 B4 02 01 00
unregistersymbol(SkillTest)
unregistersymbol(SkillReplacer1)
unregistersymbol(SkillTarget1)
unregistersymbol(DodgeReplacer)
unregistersymbol(DodgeTarget)
unregistersymbol(Enabler)
unregistersymbol(DodgeEnabler)
unregistersymbol(ActionPointer)
dealloc(newmem)
dealloc(SkillReplacer1)
dealloc(SkillTarget1)
dealloc(DodgeReplacer)
dealloc(DodgeTarget)
dealloc(Enabler)
dealloc(DodgeEnabler)
dealloc(ActionPointer)
{
// ORIGINAL CODE - INJECTION POINT: sao_al.exe+EA61D
sao_al.exe+EA5F0: 48 8B CF - mov rcx,rdi
sao_al.exe+EA5F3: E8 78 0F 00 00 - call sao_al.exe+EB570
sao_al.exe+EA5F8: 84 C0 - test al,al
sao_al.exe+EA5FA: 74 AE - je sao_al.exe+EA5AA
sao_al.exe+EA5FC: 8B 6C 24 60 - mov ebp,[rsp+60]
sao_al.exe+EA600: 8B 74 24 68 - mov esi,[rsp+68]
sao_al.exe+EA604: 41 0F B7 46 0C - movzx eax,word ptr [r14+0C]
sao_al.exe+EA609: 48 8B CF - mov rcx,rdi
sao_al.exe+EA60C: 44 0F B6 BC 24 80 00 00 00 - movzx r15d,byte ptr [rsp+00000080]
sao_al.exe+EA615: 44 8B A4 24 88 00 00 00 - mov r12d,[rsp+00000088]
// ---------- INJECTING HERE ----------
sao_al.exe+EA61D: 66 89 87 B4 02 01 00 - mov [rdi+000102B4],ax
// ---------- DONE INJECTING ----------
sao_al.exe+EA624: 66 89 AF BC 02 01 00 - mov [rdi+000102BC],bp
sao_al.exe+EA62B: 89 B7 B8 02 01 00 - mov [rdi+000102B8],esi
sao_al.exe+EA631: 66 89 9F BE 02 01 00 - mov [rdi+000102BE],bx
sao_al.exe+EA638: 41 8B 46 08 - mov eax,[r14+08]
sao_al.exe+EA63C: 89 87 C0 02 01 00 - mov [rdi+000102C0],eax
sao_al.exe+EA642: 41 0F B7 46 0E - movzx eax,word ptr [r14+0E]
sao_al.exe+EA647: 66 89 87 C8 02 01 00 - mov [rdi+000102C8],ax
sao_al.exe+EA64E: 48 8B 07 - mov rax,[rdi]
sao_al.exe+EA651: 44 88 AF CA 02 01 00 - mov [rdi+000102CA],r13l
sao_al.exe+EA658: 44 88 BF CC 02 01 00 - mov [rdi+000102CC],r15l
}
50590
"Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)"
90:Dodge Backwards?
511:Teleport?
518:Teleport 2
519:Teleport 3
1101:Start of 1 handed sword skills
1171:End of 1 handed sword skills
1301:Start of Enemy 1 handed sword skills
1371:End of Enemy 1 handed sword skills
1601:Start of Rapier Skills
1671:End of Rapier skills
1801:Start of Enemy Rapier Skills
1871:End of Enemy Rapier Skills
2601:Start of Dagger Skills
2671:End of Dagger Skills
2801:Start of Enemy Dagger Skills
2871:End of Enemy Dagger Skills
3101:Start of Mace Skills
3171:End of Mace Skills
3181:Some Flashy Skill?
3601:Start of Whip Skills
3671:End of Whip Skills
4101:Start of Katana Skills
4171:End of Katana Skills
4301:Start of Enemy Katana Skills
4371:End of Enemy Katana Skills
4601:Start of 2 handed Skills
4671:End of 2 handed Skills
4801:Start of Enemy 2 handed skills
4871:End of Enemy 2 handed skills
6101:Start of Bow Skills
6171:End of Bow Skills
6401:Start of Enemy Bow Skills
6471:End of Enemy Bow Skills
6601:Start of Dual Wield Skills
6671:End of Dual Wield Skills
7001:Start of Eldrie's Boss Movesets (Whip)
7021:Tract Strike
7022:Swing Whip
7023:Roaring Beat
7024:Catch Move
7026:Turnover
7027:Dropcrash
7028:Sonic Beast
7038:Dance of Madness
7051:Scowling Serpent
7052:Screeching Fiend
7061:Eugeo Cutscene Skill?
7062:Ice Spikes?
7071:Start of Eugeo's Normal Combo String?
7086:Big Ice Spike
7090:Big Ice Summon
7101:Start of Deusolbort's Boss Movesets (Bow)
7121:Aim and Shoot
7122:Hail of Bullets
7123:No name?
7132:Aim and Shoot
7156:Phoenix Descent
7161:Eugeo Cutscene
7162:Ice Spikes 2?
7163:Ice Summon
7201:Start of Fanatio's Boss Movesets (Rapier)
7221:Linear
7222:Flashing Penetrator
7223:Raging Valkyrie
7233:H-P Light Meteorite
7236:H-P Light Judgement
7238:H-P Light God of Destruction
7242:More Heaven Piercing Light?
7253:Dodge and Slash
7301:Start of Alice Boss Movesets (1 Handed Sword)
7312:Alice's Dodge Right
7313:Alice's Dodge Left
7321:Horizontal 1
7322:Horizontal 2
7323:Horizontal 3
7324:Savage Fulcrum
7325:Vertical 1
7326:Vertical 2
7327:Vertical 3
7328:Vertical 4
7329:Sonic Leap 1
7330:Sonic Leap 2
7331:Storm of Petals
7333:Unending Flower Dance
7341:Alice Unique Skill 1
7342:Alice Unique Skill 2
7343:Alice Unique Skill 3
7401:Start of More katana moves
7421:Zekku
7424:Tsujikaze
7425:Tsujikaze 2
7426:Tsujikaze 3
7427:Ukifune
7428:Ukifune 2
7429:Ukifune 3
7430:Tsumuji-Guruma
7431:Shinonome
7432:Gengetsu
7433:Hiougi
7434:Hiougi 2
7435:Sanka
7436:Sanka 2
7463:Blazing Glow
7466:Flame Tornado
7501:Start of more 1 handed sword skills
7601:More Rapier Skills
7701:More Dupe Katana Skills
7751:Double Cross Halo
7752:Double Cross Vanward
7753:Double Cross Turnabout
7821:Dupe Dagger Skills
7921:Dupe 2 Handed Skills
8501:Arrow Shape
8502:Blazing Glow
8503:Flame Tornado
8511:Arctic Thorn
8512:Terrafrost
8513:Glacial Vein
8521:Tailwind
8522:Magic Mirror
8523:Accelerator
8531:Water Cutter
8532:Splash Bomb
8533:Bubble Wall
8541:Create Metal
8542:Strong Body
8543:Force barrier
8551:Create Mirror
8552:Jewel Lance
8553:Crystal Bind
8561:Luminous
8562:Divine Light
8563:Merciful Shine
8571:Blinding Field
8572:Dark Impact
8573:Dazzling Aura
8701:Start of Finish Art Triggers (Including Enhance Armament)
8772:End of Finish Art Triggers
8801:More Triggers
9951:Unknown Skill
10001:Dreadblow (Start of enemy mob skills)
10071:Shield Skill (Makes you invulnerable for a short time)
10171:Another Buff?
10211:Petal Barrage?
10212:Summon Bees?
10271:Another Buff
10811:Shoots out lasers?
10812:Roar?
10813:Explosion?
10814:more lasers
10871:Another shield skill
15218:Cool lasers
17016:Summon Lightning
17041:More lightning summons
17221:More 2 handed skills
17411:More Dagger Skills
17511:Some Cool Enemy skills
17621:More Mace Skills
21000:Start of Buff Skills? (Cooldowns Still Apply)
26460:Virulent Madness
26610:Fill Arts Gauge to Max
26630:Reduce Post Motion Delay
26720:Post Motion Delay set to 0
40001:More Finish Arts and Release Recollection Triggers
40211:More Triggers
40281:More Triggers
40401:More Triggers
40601:Dual Wield Skills Again?
41101:Start of Spear Skills
41171:End of Spear Skills
42101:Start of Shield and Axe Skills
42171:End of Spear Skills
45331:Tyrant's Decree
45721:Permanent? Def Lvl + 3 and Damage Reduction +90 Buff
47581:Cool Dash Forward
47584:Cool Dash Backward
47711:Cool Sword Slashes
0
2 Bytes
[ActionPointer]
50591
"Dodge Replacers"
1
50592
"Enable? (0 = Disabled, 1 = Enabled)"
0:Disabled
1:Enabled
0
Byte
DodgeEnabler
50593
"Dodge 1 Target"
Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)
0
2 Bytes
DodgeTarget
50594
"Dodge 2 Target"
Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)
0
2 Bytes
DodgeTarget+2
50595
"Dodge 3 Target"
Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)
0
2 Bytes
DodgeTarget+4
50596
"Dodge 4 Target"
Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)
0
2 Bytes
DodgeTarget+6
50597
"Dodge 1 Replacer"
Action 1 Target
0
2 Bytes
DodgeReplacer
50598
"Dodge 2 Replacer"
Action 1 Target
0
2 Bytes
DodgeReplacer+2
50599
"Dodge 3 Replacer"
Action 1 Target
0
2 Bytes
DodgeReplacer+4
50600
"Dodge 4 Replacer"
Action 1 Target
0
2 Bytes
DodgeReplacer+6
50601
"Action 1"
1
50602
"Enable? (0 = Disabled, 1 = Enabled)"
0:Disabled
1:Enabled
0
Byte
Enabler
50603
"Action 1 Target"
Action Address Pointer (Look here if you wanna know what the IDs are for the actions you are doing)
0
2 Bytes
SkillTarget1
50604
"Action 1 Replacer"
Action 1 Target
0
2 Bytes
SkillReplacer1
50605
"Action 2"
1
50606
"Enable? (0 = Disabled, 1 = Enabled)"
0:Disabled
1:Enabled
0
Byte
Enabler+01
50607
"Action 2 Target"
Action 1 Target
0
2 Bytes
SkillTarget1+02
50608
"Action 2 Replacer"
Action 1 Target
0
2 Bytes
SkillReplacer1+02
50609
"Action 3"
1
50610
"Enable? (0 = Disabled, 1 = Enabled)"
0:Disabled
1:Enabled
0
Byte
Enabler+2
50611
"Action 3 Target"
Action 1 Target
0
2 Bytes
SkillTarget1+04
50612
"Action 3 Replacer"
Action 1 Target
0
2 Bytes
SkillReplacer1+04
50613
"Action 4"
1
50614
"Enable? (0 = Disabled, 1 = Enabled)"
0:Disabled
1:Enabled
0
Byte
Enabler+3
50615
"Action 4 Target"
Action 1 Target
0
2 Bytes
SkillTarget1+06
50616
"Action 4 Replacer"
Action 1 Target
0
2 Bytes
SkillReplacer1+06
50510
"Kirito Skills"
1
50522
"1H Sword"
1
50523
"Base Address"
0
2 Bytes
28449E438
50524
"Sword Skills"
1
50525
"Num 1"
2 Bytes
28449E43E
50526
"Num 2"
2 Bytes
28449E43C
50527
"Num 3"
2 Bytes
28449E440
50528
"Num 4"
2 Bytes
28449E442
50529
"Active Skills"
1
50530
"Active (F1)"
0
2 Bytes
28449E444
50531
"Active (F2)"
0
2 Bytes
28449E448
50532
"Active (F3)"
0
2 Bytes
28449E44A
50533
"Active (F4)"
0
2 Bytes
28449E446
50534
"Passive Skills"
1
50535
"Passive Slot 1"
0
2 Bytes
28449E450
50536
"Passive Slot 2"
0
2 Bytes
28449E452
50537
"Passive Slot 3"
0
2 Bytes
28449E454
50538
"Passive Slot 4"
0
2 Bytes
28449E456
50539
"Passive Slot 5"
0
2 Bytes
28449E458
50540
"Passive Slot 6"
0
2 Bytes
28449E45A
50541
"Passive Slot 7"
0
2 Bytes
28449E45C
50542
"Passive Slot 8"
0
2 Bytes
28449E45E
50543
"Passive Slot 9"
0
2 Bytes
28449E460
50544
"Passive Slot 10"
0
2 Bytes
28449E462
50545
"Passive Slot 11"
0
2 Bytes
28449E464
50546
"Passive Slot 12"
0
2 Bytes
28449E466
50547
"Passive Slot 13"
0
2 Bytes
28449E468
50548
"Passive Slot 14"
0
2 Bytes
28449E46A
50515
"Rapier"
1
50521
"Base Address"
0
2 Bytes
28449E714
50511
"Sword Skills"
1
50493
"Num 1"
2 Bytes
28449E71A
50512
"Num 2"
2 Bytes
28449E718
50513
"Num 3"
2 Bytes
28449E71C
50514
"Num 4"
2 Bytes
28449E71E
50520
"Active Skills"
1
50516
"Active (F1)"
0
2 Bytes
28449E720
50518
"Active (F2)"
0
2 Bytes
28449E724
50519
"Active (F3)"
0
2 Bytes
28449E726
50517
"Active (F4)"
0
2 Bytes
28449E722
50496
"Passive Skills"
1
50494
"Passive Slot 1"
0
2 Bytes
28449E72C
50497
"Passive Slot 2"
0
2 Bytes
28449E72E
50498
"Passive Slot 3"
0
2 Bytes
28449E730
50499
"Passive Slot 4"
0
2 Bytes
28449E732
50500
"Passive Slot 5"
0
2 Bytes
28449E734
50501
"Passive Slot 6"
0
2 Bytes
28449E736
50502
"Passive Slot 7"
0
2 Bytes
28449E738
50503
"Passive Slot 8"
0
2 Bytes
28449E73A
50504
"Passive Slot 9"
0
2 Bytes
28449E73C
50505
"Passive Slot 10"
0
2 Bytes
28449E73E
50506
"Passive Slot 11"
0
2 Bytes
28449E740
50507
"Passive Slot 12"
0
2 Bytes
28449E742
50508
"Passive Slot 13"
0
2 Bytes
28449E744
50509
"Passive Slot 14"
0
2 Bytes
28449E746
50617
"Dagger"
1
50618
"Base Address"
0
2 Bytes
28449ECCC
50619
"Sword Skills"
1
50620
"Num 1"
2 Bytes
28449ECD2
50621
"Num 2"
2 Bytes
28449ECD0
50622
"Num 3"
2 Bytes
28449ECD4
50623
"Num 4"
2 Bytes
28449ECD6
50624
"Active Skills"
1
50625
"Active (F1)"
0
2 Bytes
28449ECD8
50626
"Active (F2)"
0
2 Bytes
28449ECDC
50627
"Active (F3)"
0
2 Bytes
28449ECDE
50628
"Active (F4)"
0
2 Bytes
28449ECDA
50629
"Passive Skills"
1
50630
"Passive Slot 1"
0
2 Bytes
28449ECE4
50631
"Passive Slot 2"
0
2 Bytes
28449ECE6
50632
"Passive Slot 3"
0
2 Bytes
28449ECE8
50633
"Passive Slot 4"
0
2 Bytes
28449ECEA
50634
"Passive Slot 5"
0
2 Bytes
28449ECEC
50635
"Passive Slot 6"
0
2 Bytes
28449ECEE
50636
"Passive Slot 7"
0
2 Bytes
28449ECF0
50637
"Passive Slot 8"
0
2 Bytes
28449ECF2
50638
"Passive Slot 9"
0
2 Bytes
28449ECF4
50639
"Passive Slot 10"
0
2 Bytes
28449ECF6
50640
"Passive Slot 11"
0
2 Bytes
28449ECF8
50641
"Passive Slot 12"
0
2 Bytes
28449ECFA
50642
"Passive Slot 13"
0
2 Bytes
28449ECFC
50643
"Passive Slot 14"
0
2 Bytes
28449ECFE
50644
"Mace"
1
50645
"Base Address"
0
2 Bytes
28449EFA8
50646
"Sword Skills"
1
50647
"Num 1"
2 Bytes
28449EFAE
50648
"Num 2"
2 Bytes
28449EFAC
50649
"Num 3"
2 Bytes
28449EFB0
50650
"Num 4"
2 Bytes
28449EFB2
50651
"Active Skills"
1
50652
"Active (F1)"
0
2 Bytes
28449EFB4
50653
"Active (F2)"
0
2 Bytes
28449EFB8
50654
"Active (F3)"
0
2 Bytes
28449EFBA
50655
"Active (F4)"
0
2 Bytes
28449EFB6
50656
"Passive Skills"
1
50657
"Passive Slot 1"
0
2 Bytes
28449EFC0
50658
"Passive Slot 2"
0
2 Bytes
28449EFC2
50659
"Passive Slot 3"
0
2 Bytes
28449EFC4
50660
"Passive Slot 4"
0
2 Bytes
28449EFC6
50661
"Passive Slot 5"
0
2 Bytes
28449EFC8
50662
"Passive Slot 6"
0
2 Bytes
28449EFCA
50663
"Passive Slot 7"
0
2 Bytes
28449EFCC
50664
"Passive Slot 8"
0
2 Bytes
28449EFCE
50665
"Passive Slot 9"
0
2 Bytes
28449EFD0
50666
"Passive Slot 10"
0
2 Bytes
28449EFD2
50667
"Passive Slot 11"
0
2 Bytes
28449EFD4
50668
"Passive Slot 12"
0
2 Bytes
28449EFD6
50669
"Passive Slot 13"
0
2 Bytes
28449EFD8
50670
"Passive Slot 14"
0
2 Bytes
28449EFDA
50671
"Whip"
1
50672
"Base Address"
0
2 Bytes
28449F284
50673
"Sword Skills"
1
50674
"Num 1"
2 Bytes
28449F28A
50675
"Num 2"
2 Bytes
28449F288
50676
"Num 3"
2 Bytes
28449F28C
50677
"Num 4"
2 Bytes
28449F28E
50678
"Active Skills"
1
50679
"Active (F1)"
0
2 Bytes
28449F290
50680
"Active (F2)"
0
2 Bytes
28449F294
50681
"Active (F3)"
0
2 Bytes
28449F296
50682
"Active (F4)"
0
2 Bytes
28449F292
50683
"Passive Skills"
1
50684
"Passive Slot 1"
0
2 Bytes
28449F29C
50685
"Passive Slot 2"
0
2 Bytes
28449F29E
50686
"Passive Slot 3"
0
2 Bytes
28449F2A0
50687
"Passive Slot 4"
0
2 Bytes
28449F2A2
50688
"Passive Slot 5"
0
2 Bytes
28449F2A4
50689
"Passive Slot 6"
0
2 Bytes
28449F2A6
50690
"Passive Slot 7"
0
2 Bytes
28449F2A8
50691
"Passive Slot 8"
0
2 Bytes
28449F2AA
50692
"Passive Slot 9"
0
2 Bytes
28449F2AC
50693
"Passive Slot 10"
0
2 Bytes
28449F2AE
50694
"Passive Slot 11"
0
2 Bytes
28449F2B0
50695
"Passive Slot 12"
0
2 Bytes
28449F2B2
50696
"Passive Slot 13"
0
2 Bytes
28449F2B4
50697
"Passive Slot 14"
0
2 Bytes
28449F2B6
50698
"Katana"
1
50699
"Base Address"
0
2 Bytes
28449F560
50700
"Sword Skills"
1
50701
"Num 1"
2 Bytes
28449F566
50702
"Num 2"
2 Bytes
28449F564
50703
"Num 3"
2 Bytes
28449F568
50704
"Num 4"
2 Bytes
28449F56A
50705
"Active Skills"
1
50706
"Active (F1)"
0
2 Bytes
28449F56C
50707
"Active (F2)"
0
2 Bytes
28449F570
50708
"Active (F3)"
0
2 Bytes
28449F572
50709
"Active (F4)"
0
2 Bytes
28449F56E
50710
"Passive Skills"
1
50711
"Passive Slot 1"
0
2 Bytes
28449F578
50712
"Passive Slot 2"
0
2 Bytes
28449F57A
50713
"Passive Slot 3"
0
2 Bytes
28449F57C
50714
"Passive Slot 4"
0
2 Bytes
28449F57E
50715
"Passive Slot 5"
0
2 Bytes
28449F580
50716
"Passive Slot 6"
0
2 Bytes
28449F582
50717
"Passive Slot 7"
0
2 Bytes
28449F584
50718
"Passive Slot 8"
0
2 Bytes
28449F586
50719
"Passive Slot 9"
0
2 Bytes
28449F588
50720
"Passive Slot 10"
0
2 Bytes
28449F58A
50721
"Passive Slot 11"
0
2 Bytes
28449F58C
50722
"Passive Slot 12"
0
2 Bytes
28449F58E
50723
"Passive Slot 13"
0
2 Bytes
28449F590
50724
"Passive Slot 14"
0
2 Bytes
28449F592
50725
"2 Handed Sword"
1
50726
"Base Address"
0
2 Bytes
28449F83C
50727
"Sword Skills"
1
50728
"Num 1"
2 Bytes
28449F842
50729
"Num 2"
2 Bytes
28449F840
50730
"Num 3"
2 Bytes
28449F844
50731
"Num 4"
2 Bytes
28449F846
50732
"Active Skills"
1
50733
"Active (F1)"
0
2 Bytes
28449F848
50734
"Active (F2)"
0
2 Bytes
28449F84C
50735
"Active (F3)"
0
2 Bytes
28449F84E
50736
"Active (F4)"
0
2 Bytes
28449F84A
50737
"Passive Skills"
1
50738
"Passive Slot 1"
0
2 Bytes
28449F854
50739
"Passive Slot 2"
0
2 Bytes
28449F856
50740
"Passive Slot 3"
0
2 Bytes
28449F858
50741
"Passive Slot 4"
0
2 Bytes
28449F85A
50742
"Passive Slot 5"
0
2 Bytes
28449F85C
50743
"Passive Slot 6"
0
2 Bytes
28449F85E
50744
"Passive Slot 7"
0
2 Bytes
28449F860
50745
"Passive Slot 8"
0
2 Bytes
28449F862
50746
"Passive Slot 9"
0
2 Bytes
28449F864
50747
"Passive Slot 10"
0
2 Bytes
28449F866
50748
"Passive Slot 11"
0
2 Bytes
28449F868
50749
"Passive Slot 12"
0
2 Bytes
28449F86A
50750
"Passive Slot 13"
0
2 Bytes
28449F86C
50751
"Passive Slot 14"
0
2 Bytes
28449F86E
50752
"Spear"
1
50753
"Base Address"
0
2 Bytes
28449FDF4
50754
"Sword Skills"
1
50755
"Num 1"
2 Bytes
28449FDFA
50756
"Num 2"
2 Bytes
28449FDF8
50757
"Num 3"
2 Bytes
28449FDFC
50758
"Num 4"
2 Bytes
28449FDFE
50759
"Active Skills"
1
50760
"Active (F1)"
0
2 Bytes
28449FE00
50761
"Active (F2)"
0
2 Bytes
28449FE04
50762
"Active (F3)"
0
2 Bytes
28449FE06
50763
"Active (F4)"
0
2 Bytes
28449FE02
50764
"Passive Skills"
1
50765
"Passive Slot 1"
0
2 Bytes
28449FE0C
50766
"Passive Slot 2"
0
2 Bytes
28449FE0E
50767
"Passive Slot 3"
0
2 Bytes
28449FE10
50768
"Passive Slot 4"
0
2 Bytes
28449FE12
50769
"Passive Slot 5"
0
2 Bytes
28449FE14
50770
"Passive Slot 6"
0
2 Bytes
28449FE16
50771
"Passive Slot 7"
0
2 Bytes
28449FE18
50772
"Passive Slot 8"
0
2 Bytes
28449FE1A
50773
"Passive Slot 9"
0
2 Bytes
28449FE1C
50774
"Passive Slot 10"
0
2 Bytes
28449FE1E
50775
"Passive Slot 11"
0
2 Bytes
28449FE20
50776
"Passive Slot 12"
0
2 Bytes
28449FE22
50777
"Passive Slot 13"
0
2 Bytes
28449FE24
50778
"Passive Slot 14"
0
2 Bytes
28449FE26
50779
"Bow"
1
50780
"Base Address"
0
2 Bytes
sao_al.exe+2250068
50781
"Sword Skills"
1
50782
"Num 1"
2 Bytes
sao_al.exe+225006E
50783
"Num 2"
2 Bytes
sao_al.exe+225006C
50784
"Num 3"
2 Bytes
sao_al.exe+2250070
50785
"Num 4"
2 Bytes
sao_al.exe+2250072
50786
"Active Skills"
1
50787
"Active (F1)"
0
2 Bytes
sao_al.exe+2250074
50788
"Active (F2)"
0
2 Bytes
sao_al.exe+2250078
50789
"Active (F3)"
0
2 Bytes
sao_al.exe+225007A
50790
"Active (F4)"
0
2 Bytes
sao_al.exe+2250076
50791
"Passive Skills"
1
50792
"Passive Slot 1"
0
2 Bytes
sao_al.exe+2250080
50793
"Passive Slot 2"
0
2 Bytes
sao_al.exe+2250082
50794
"Passive Slot 3"
0
2 Bytes
sao_al.exe+2250084
50795
"Passive Slot 4"
0
2 Bytes
sao_al.exe+2250086
50796
"Passive Slot 5"
0
2 Bytes
sao_al.exe+2250088
50797
"Passive Slot 6"
0
2 Bytes
sao_al.exe+225008A
50798
"Passive Slot 7"
0
2 Bytes
sao_al.exe+225008C
50799
"Passive Slot 8"
0
2 Bytes
sao_al.exe+225008E
50800
"Passive Slot 9"
0
2 Bytes
sao_al.exe+2250090
50801
"Passive Slot 10"
0
2 Bytes
sao_al.exe+2250092
50802
"Passive Slot 11"
0
2 Bytes
sao_al.exe+2250094
50803
"Passive Slot 12"
0
2 Bytes
sao_al.exe+2250096
50804
"Passive Slot 13"
0
2 Bytes
sao_al.exe+2250098
50805
"Passive Slot 14"
0
2 Bytes
sao_al.exe+225009A
50806
"Axe and Shield"
1
50807
"Base Address"
0
2 Bytes
sao_al.exe+2250620
50808
"Sword Skills"
1
50809
"Num 1"
2 Bytes
sao_al.exe+2250626
50810
"Num 2"
2 Bytes
sao_al.exe+2250624
50811
"Num 3"
2 Bytes
sao_al.exe+2250628
50812
"Num 4"
2 Bytes
sao_al.exe+225062A
50813
"Active Skills"
1
50814
"Active (F1)"
0
2 Bytes
sao_al.exe+225062C
50815
"Active (F2)"
0
2 Bytes
sao_al.exe+2250630
50816
"Active (F3)"
0
2 Bytes
sao_al.exe+2250632
50817
"Active (F4)"
0
2 Bytes
sao_al.exe+225062E
50818
"Passive Skills"
1
50819
"Passive Slot 1"
0
2 Bytes
sao_al.exe+2250638
50820
"Passive Slot 2"
0
2 Bytes
sao_al.exe+225063A
50821
"Passive Slot 3"
0
2 Bytes
sao_al.exe+225063C
50822
"Passive Slot 4"
0
2 Bytes
sao_al.exe+225063E
50823
"Passive Slot 5"
0
2 Bytes
sao_al.exe+2250640
50824
"Passive Slot 6"
0
2 Bytes
sao_al.exe+2250642
50825
"Passive Slot 7"
0
2 Bytes
sao_al.exe+2250644
50826
"Passive Slot 8"
0
2 Bytes
sao_al.exe+2250646
50827
"Passive Slot 9"
0
2 Bytes
sao_al.exe+2250648
50828
"Passive Slot 10"
0
2 Bytes
sao_al.exe+225064A
50829
"Passive Slot 11"
0
2 Bytes
sao_al.exe+225064C
50830
"Passive Slot 12"
0
2 Bytes
sao_al.exe+225064E
50831
"Passive Slot 13"
0
2 Bytes
sao_al.exe+2250650
50832
"Passive Slot 14"
0
2 Bytes
sao_al.exe+2250652
50833
"Dual Wield"
1
50834
"Base Address"
0
2 Bytes
sao_al.exe+22508FC
50835
"Sword Skills"
1
50836
"Num 1"
2 Bytes
sao_al.exe+2250902
50837
"Num 2"
2 Bytes
sao_al.exe+2250900
50838
"Num 3"
2 Bytes
sao_al.exe+2250904
50839
"Num 4"
2 Bytes
sao_al.exe+2250906
50840
"Active Skills"
1
50841
"Active (F1)"
0
2 Bytes
sao_al.exe+2250908
50842
"Active (F2)"
0
2 Bytes
sao_al.exe+225090C
50843
"Active (F3)"
0
2 Bytes
sao_al.exe+225090E
50844
"Active (F4)"
0
2 Bytes
sao_al.exe+225090A
50845
"Passive Skills"
1
50846
"Passive Slot 1"
0
2 Bytes
sao_al.exe+2250914
50847
"Passive Slot 2"
0
2 Bytes
sao_al.exe+2250916
50848
"Passive Slot 3"
0
2 Bytes
sao_al.exe+2250918
50849
"Passive Slot 4"
0
2 Bytes
sao_al.exe+225091A
50850
"Passive Slot 5"
0
2 Bytes
sao_al.exe+225091C
50851
"Passive Slot 6"
0
2 Bytes
sao_al.exe+225091E
50852
"Passive Slot 7"
0
2 Bytes
sao_al.exe+2250920
50853
"Passive Slot 8"
0
2 Bytes
sao_al.exe+2250922
50854
"Passive Slot 9"
0
2 Bytes
sao_al.exe+2250924
50855
"Passive Slot 10"
0
2 Bytes
sao_al.exe+2250926
50856
"Passive Slot 11"
0
2 Bytes
sao_al.exe+2250928
50857
"Passive Slot 12"
0
2 Bytes
sao_al.exe+225092A
50858
"Passive Slot 13"
0
2 Bytes
sao_al.exe+225092C
50859
"Passive Slot 14"
0
2 Bytes
sao_al.exe+225092E
Change of nop
sao_al.exe+3C053E
BD
E8
03
00
00
90
41
3B
C6
44
0F
Change of mov [rcx],dx
sao_al.exe+1D960B
83
C4
40
5F
C3
66
89
11
48
8B
C3
48
8B
Change of mov [r13+000000E4],ax
sao_al.exe+1D43D4
B8
FF
FF
FF
FF
66
41
89
85
E4
00
00
00
E9
53
FE
FF
FF
PerFish3AOB
140658533
PerFish2AOB
140658528
HightlightedItemStatus
140612893
WeaponNPCMasteryInGroupTabAOB
140240ADC
CCharFuncAOB
1401664B0
HighlightedItemAOB
1403BD491
function lua_aobscan(name,module,bytes,index)
index = index - 1
if(module == "") then
local resultSet = AOBScan(bytes)
if(resultSet == nil) then
unregisterSymbol(name)
print(name.." not found")
else
unregisterSymbol(name)
registerSymbol(name,resultSet[index])
resultSet.destroy()
end
else
if(getModuleSize(module) == nil) then
print("Module "..module.." not found")
else
local memScanner = createMemScan()
local memFoundList = createFoundList(memScanner)
memScanner.firstScan(
soExactValue,vtByteArray,rtRounded,bytes,nil,
getAddress(module),(getAddress(module)+getModuleSize(module)),"",
fsmNotAligned,"",true,false,false,false)
memScanner.waitTillDone()
memFoundList.initialize()
if(memFoundList.Count == 0) then
unregisterSymbol(name)
print(name.." in module "..module.." not found")
else
unregisterSymbol(name)
registerSymbol(name,memFoundList.Address[index])
end
memScanner.destroy()
memFoundList.destroy()
end
end
end
"sao_al.exe"+3B5B6C
Get Item Quantity