Page 1 of 1

Immortal Unchained CE?

Posted: Fri Sep 07, 2018 9:14 am
by Idlehands88
When trying to make an AoB for this game I can only find points for dll's. When I try to use those for the AoB the game just crashes. Anyone have an idea of how to make it work?

PS the game values are all in Double.

Re: Immortal Unchained CE?

Posted: Fri Sep 07, 2018 3:54 pm
by koderkrazy
Idlehands88 wrote:
Fri Sep 07, 2018 9:14 am
When trying to make an AoB for this game I can only find points for dll's. When I try to use those for the AoB the game just crashes. Anyone have an idea of how to make it work?
...
Are you just creating AOBs for finding memory location or doing aobscan injection?

Assuming you are doing Aobscan injection:
Is the game 64-bit?
If yes, check the jmp instruction size. Is it 5-bytes or 14-bytes?

If 14-bytes, then you'll have to modify nops after jmp newmem instruction. And also need to include more instruction after code: label.

Re: Immortal Unchained CE?

Posted: Fri Sep 07, 2018 4:11 pm
by Idlehands88
Upon looking more at them it turns out each of the functions point to hundreds of other values. Not sure about the other stuff you said, will have to look (still new to AoB).

Re: Immortal Unchained CE?

Posted: Fri Sep 07, 2018 4:25 pm
by koderkrazy
Idlehands88 wrote:
Fri Sep 07, 2018 4:11 pm
Upon looking more at them it turns out each of the functions point to hundreds of other values. Not sure about the other stuff you said, will have to look (still new to AoB).
post screenshots of function code where you are injecting and your aob script.

Re: Immortal Unchained CE?

Posted: Fri Sep 07, 2018 4:34 pm
by Idlehands88
Did a scan for the Reserve Ammo in my Sniper.
First Offset
Image
Second Offset
Image
As you can see each one accesses A LOT of offsets.

EDIT: Added the AoB scripts for them (unedited).

Re: Immortal Unchained CE?

Posted: Fri Sep 07, 2018 5:14 pm
by koderkrazy
Don't inject there. It's not game code. It's lua51.dll(library used by game).

'Second' aob injection is better place.
Try this:
1. right click on pointer that you've found and do browse this memory region.
2. in memory view. select those 4 bytes, right click then do break on read.
3. When execution breaks at second aob location (If it breaks at cmp(first aob) then press F9 to skip)
then keep pressing F8 till you return from the function(ret instruction), keep returning from methods till you get in game code.
4. Once you get in game code. try to inject before the lua method call.

Re: Immortal Unchained CE?

Posted: Sat Sep 08, 2018 1:17 am
by Idlehands88
koderkrazy wrote:
Fri Sep 07, 2018 5:14 pm
Don't inject there. It's not game code. It's lua51.dll(library used by game).

'Second' aob injection is better place.
Try this:
1. right click on pointer that you've found and do browse this memory region.
2. in memory view. select those 4 bytes, right click then do break on read.
3. When execution breaks at second aob location (If it breaks at cmp(first aob) then press F9 to skip)
then keep pressing F8 till you return from the function(ret instruction), keep returning from methods till you get in game code.
4. Once you get in game code. try to inject before the lua method call.
Sorry for the late reply, I fell asleep lol. Anyways, that doesn't work on this game because as soon as you do the Break on Access it freezes the game.

Re: Immortal Unchained CE?

Posted: Sat Sep 08, 2018 1:28 am
by koderkrazy
Idlehands88 wrote:
Sat Sep 08, 2018 1:17 am
...
Sorry for the late reply, I fell asleep lol. Anyways, that doesn't work on this game because as soon as you do the Break on Access it freezes the game.
It freezes the game because execution stops at instruction which tries to access the data. If the game access the data non stop then game will remain froze till you delete the break point and press F9 to resume execution.

Look in the Memory View window in CE and debug the code. After you are done debugging delete the break point(press ctrl+B and delete all) and press F9 to resume execution.

Re: Immortal Unchained CE?

Posted: Sat Sep 08, 2018 2:31 am
by Idlehands88
Ya that's above my knowledge lol, thanks for the help though :)