mgr.inz.Player
I post too much
 Reputation: 218
Joined: 07 Nov 2008
Posts: 4438
Location: W kraju nad Wisla. UTC+01:00
|
 Posted: Tue Apr 03, 2012 11:02 pm Post subject: |
|
|
My mistake. I used pushfd and pushad at the beginning of script
So it should be like this:
ECX == 0x3 (dword)
[esp+20] == 0x70 (dword)
[esp+28] == 0x7 (dword)
Edit:
OK,
ECX == 0x3 (dword)
[esp+20] == 0x70 (dword)
[esp+28] == 0x7 (dword)
[esp+30] == 0x1 (dword)
[esp+34] == 0x7 (dword)
But I still get other "not health" hits:
| Code: | [ENABLE]
alloc(THECODE,2048)
label(returnhere)
label(originalcode)
label(exit)
registersymbol(THECODE)
THECODE:
pushfd
pushad
cmp ecx,00000003
jne short originalcode
cmp [esp+20+24],00000070
jne short originalcode
cmp [esp+28+24],00000007
jne short originalcode
cmp [esp+30+24],00000001
jne short originalcode
cmp [esp+34+24],00000007
jne short originalcode
//filtered
//
//
popad
popfd
mov ecx,[eax+08] // <- try that "find out what addresses this instructions accesses". We have much less other hits.
mov [edi+08],ecx
jmp returnhere
//
//
//
originalcode:
popad
popfd
mov ecx,[eax+08]
mov [edi+08],ecx
exit:
jmp returnhere
"Engine.dll"+15CD11:
jmp THECODE
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(THECODE)
"Engine.dll"+15CD11:
//mov ecx,[eax+08]
//mov [edi+08],ecx
db 8B 48 08 89 4F 08 |
But, it's a good start.
EDIT2:
Final. You can test it. 350HP
| Code: | [ENABLE]
alloc(THECODE,2048)
label(returnhere)
label(originalcode)
label(exit)
registersymbol(THECODE)
label(HP_value)
THECODE:
pushfd
pushad
cmp ecx,00000003
jne short originalcode
cmp [esp+20+24],00000070
jne short originalcode
cmp [esp+28+24],00000007
jne short originalcode
cmp [esp+30+24],00000001
jne short originalcode
cmp [esp+34+24],00000007
jne short originalcode
cmp dword ptr [eax+08+08],0
jne short originalcode
cmp dword ptr [eax+08+0C],0
jne short originalcode
cmp dword ptr [eax+08+10],4
jne short originalcode
mov ecx,[eax+08+18]
cmp [ecx+10],'_yaw'
jne short originalcode
cmp [ecx+30],'_hea'
jne short originalcode
//filtered
//
//
popad
popfd
fld qword ptr [HP_value]
fstp qword ptr [eax+08]
mov ecx,[eax+08]
mov [edi+08],ecx
jmp returnhere
//
//
//
originalcode:
popad
popfd
mov ecx,[eax+08]
mov [edi+08],ecx
exit:
jmp returnhere
HP_value:
dq (double)350.0
"Engine.dll"+15CD11:
jmp THECODE
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(THECODE)
"Engine.dll"+15CD11:
//mov ecx,[eax+08]
//mov [edi+08],ecx
db 8B 48 08 89 4F 08 |
_________________
Dark Souls II Item Swap and Item List
My Borderlands2 tables
Recent CheatEngine builds
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
