| View previous topic :: View next topic |
| Author |
Message |
NanoByte Expert Cheater
Reputation: 1
Joined: 13 Sep 2013 Posts: 222
|
Posted: Fri May 16, 2014 2:37 pm Post subject: Edit memory without event? |
|
|
This game i'm messing with has an item which allows you to inc number of minions
when item is equipt
newmem:
add [esi+00000128],#10 //works
originalcode:
inc [esi+00000128]
but it only works of course when u equip the item which executed the code
so what im asking is, can i some how edit [esi+00000128] without waiting for the player to equip that item //it has only a display value as a "type" Byte - 2byte - 4byte
as soon as the player activates the cheat, increase [esi+00000128]
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Fri May 16, 2014 3:09 pm Post subject: |
|
|
You can use pointers, or find other codes to gather the address of the items, but if your question is if you can force the game to execute this code whenever you want, you can but the stack and the registers will be completely screwed up and the result will be a mighty crash, so doing this is useless.
_________________
|
|
| Back to top |
|
 |
NanoByte Expert Cheater
Reputation: 1
Joined: 13 Sep 2013 Posts: 222
|
Posted: Fri May 16, 2014 3:14 pm Post subject: |
|
|
Hmm Damnn Thx For the Answere Geri
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Fri May 16, 2014 3:19 pm Post subject: |
|
|
You should check which codes are accessing to your value. This code is writing to it, but you will probably find several others that will read it and those codes will probably run more frequently.
_________________
|
|
| Back to top |
|
 |
NanoByte Expert Cheater
Reputation: 1
Joined: 13 Sep 2013 Posts: 222
|
Posted: Fri May 16, 2014 3:33 pm Post subject: |
|
|
| Code: | 0F16879B - 81 79 38 48070000 - cmp [ecx+38],00000748 //item id
0F1687A2 - 75 2A - jne 0F1687CE //jump over Minon Value, if i nop this, it sets minons value to 6 no idea why hehe
0F1687A4 - D9 05 1898160F - fld dword ptr [0F169818] : [(float)2.0000] //explain please what these does
0F1687AA - D8 86 B8020000 - fadd dword ptr [esi+000002B8] //??
0F1687B0 - D9 9E B8020000 - fstp dword ptr [esi+000002B8] //??
0F1687B6 - D9 05 1C98160F - fld dword ptr [0F16981C] : [(float)0.1500] //??
0F1687BC - D8 86 B4020000 - fadd dword ptr [esi+000002B4] //??
0F1687C2 - D9 9E B4020000 - fstp dword ptr [esi+000002B4] //??
0F1687C8 - FF 86 28010000 - inc [esi+00000128] //minon value
0F1687CE - 81 79 38 35070000 - cmp [ecx+38],00000735 //probly next item compare
0F1687D5 - 75 18 - jne 0F1687EF
|
So what are my options now i can nop the jmp and and say "mov [esi+00000128],A"
or is there another smart way to do this, also i have no idea how my aobscan code should look like sense i never done double aobscan
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Fri May 16, 2014 3:54 pm Post subject: |
|
|
No idea what values are those float instructions changing, but esi is not changed by any of these codes, so you can try to put a
mov [esi+00000128],(int)10
at any of those jne or cmp instructions. (Either right before the cmp or before the jne, but not after the jne.)
_________________
|
|
| Back to top |
|
 |
NanoByte Expert Cheater
Reputation: 1
Joined: 13 Sep 2013 Posts: 222
|
|
| Back to top |
|
 |
|