Game Engine: RPCS3 (PS3)
Game Version: 1
Options Required: Cheat Table with:
- WALK THROUGH WALLLS
- ITEM STATS
THIS ONE IS A HARD CODE TO HACK.
HELP PLEASE!
READ MY POST.
Thanks
Code: Select all
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>41</ID>
<Description>"Battle Timer1"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : rpcs3.exe
Version:
Date : 2021-03-12
Author : 009
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscan(battletimer,0F 38 F0 8C 18 84 00 00 00 48 FF C1 45) // should be unique
registersymbol(battletimer)
battletimer:
db B9 3B 00 00 00 90 90 90 90 48 FF C1 45
battletimer:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
battletimer:
db 0F 38 F0 8C 18 84 00 00 00 48 FF C1 45
unregistersymbol(battletimer)
{
// ORIGINAL CODE - INJECTION POINT: 1001E8E39
1001E8E07: E8 5A F5 07 00 - call 100268366
1001E8E0C: 48 83 C4 28 - add rsp,28
1001E8E10: C3 - ret
1001E8E11: 66 66 66 66 66 66 2E 0F 1F 84 00 00 00 00 00 - nop word ptr cs:[rax+rax+00000000]
1001E8E20: 48 83 EC 28 - sub rsp,28
1001E8E24: 83 7D 14 00 - cmp dword ptr [rbp+14],00
1001E8E28: 75 6E - jne 1001E8E98
1001E8E2A: 48 8B 45 70 - mov rax,[rbp+70]
1001E8E2E: 44 0F 38 F0 74 18 40 - movbe r14d,[rax+rbx+40]
1001E8E35: 4C 89 75 18 - mov [rbp+18],r14
// ---------- INJECTING HERE ----------
1001E8E39: 0F 38 F0 8C 18 84 00 00 00 - movbe ecx,[rax+rbx+00000084]
// ---------- DONE INJECTING ----------
1001E8E42: 48 FF C1 - inc rcx
1001E8E45: 45 85 F6 - test r14d,r14d
1001E8E48: 0F 98 85 3C 04 00 00 - sets byte ptr [rbp+0000043C]
1001E8E4F: 0F 9F 85 3D 04 00 00 - setg byte ptr [rbp+0000043D]
1001E8E56: 0F 94 85 3E 04 00 00 - sete byte ptr [rbp+0000043E]
1001E8E5D: 8A 95 78 04 00 00 - mov dl,[rbp+00000478]
1001E8E63: 88 95 3F 04 00 00 - mov [rbp+0000043F],dl
1001E8E69: 48 89 4D 60 - mov [rbp+60],rcx
1001E8E6D: 0F B7 55 68 - movzx edx,word ptr [rbp+68]
1001E8E71: 66 0F 38 F1 94 18 8C 07 00 00 - movbe [rax+rbx+0000078C],edx
}
</AssemblerScript>
</CheatEntry>
</CheatEntries>
</CheatTable>
Cool thanks but I found another way to hack it butfearless123456 wrote: ↑Fri Mar 12, 2021 2:07 amTime played addresses:
30091D5E8
3008F8014
Battle timer always 1 second:
find the following array of bytes (it is probably in the address 1001E8E39)
0F 38 F0 8C 18 84 00 00 00 48 FF C1 45
add it to your list and change it to the following:
B9 3B 00 00 00 90 90 90 90 48 FF C1 45
You can also try this script:Spoiler
Code: Select all
<?xml version="1.0" encoding="utf-8"?> <CheatTable> <CheatEntries> <CheatEntry> <ID>41</ID> <Description>"Battle Timer1"</Description> <LastState/> <VariableType>Auto Assembler Script</VariableType> <AssemblerScript>{ Game : rpcs3.exe Version: Date : 2021-03-12 Author : 009 This script does blah blah blah } [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat aobscan(battletimer,0F 38 F0 8C 18 84 00 00 00 48 FF C1 45) // should be unique registersymbol(battletimer) battletimer: db B9 3B 00 00 00 90 90 90 90 48 FF C1 45 battletimer: [DISABLE] //code from here till the end of the code will be used to disable the cheat battletimer: db 0F 38 F0 8C 18 84 00 00 00 48 FF C1 45 unregistersymbol(battletimer) { // ORIGINAL CODE - INJECTION POINT: 1001E8E39 1001E8E07: E8 5A F5 07 00 - call 100268366 1001E8E0C: 48 83 C4 28 - add rsp,28 1001E8E10: C3 - ret 1001E8E11: 66 66 66 66 66 66 2E 0F 1F 84 00 00 00 00 00 - nop word ptr cs:[rax+rax+00000000] 1001E8E20: 48 83 EC 28 - sub rsp,28 1001E8E24: 83 7D 14 00 - cmp dword ptr [rbp+14],00 1001E8E28: 75 6E - jne 1001E8E98 1001E8E2A: 48 8B 45 70 - mov rax,[rbp+70] 1001E8E2E: 44 0F 38 F0 74 18 40 - movbe r14d,[rax+rbx+40] 1001E8E35: 4C 89 75 18 - mov [rbp+18],r14 // ---------- INJECTING HERE ---------- 1001E8E39: 0F 38 F0 8C 18 84 00 00 00 - movbe ecx,[rax+rbx+00000084] // ---------- DONE INJECTING ---------- 1001E8E42: 48 FF C1 - inc rcx 1001E8E45: 45 85 F6 - test r14d,r14d 1001E8E48: 0F 98 85 3C 04 00 00 - sets byte ptr [rbp+0000043C] 1001E8E4F: 0F 9F 85 3D 04 00 00 - setg byte ptr [rbp+0000043D] 1001E8E56: 0F 94 85 3E 04 00 00 - sete byte ptr [rbp+0000043E] 1001E8E5D: 8A 95 78 04 00 00 - mov dl,[rbp+00000478] 1001E8E63: 88 95 3F 04 00 00 - mov [rbp+0000043F],dl 1001E8E69: 48 89 4D 60 - mov [rbp+60],rcx 1001E8E6D: 0F B7 55 68 - movzx edx,word ptr [rbp+68] 1001E8E71: 66 0F 38 F1 94 18 8C 07 00 00 - movbe [rax+rbx+0000078C],edx } </AssemblerScript> </CheatEntry> </CheatEntries> </CheatTable>
Code: Select all
{ Game : rpcs3.exe
Version:
Date : 2021-03-14
Author : jason
This script does blah blah blah
}
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscan(BTCS,0F 38 F0 8C 18 84 00 00 00 48 8B) // should be unique
alloc(newmem,$1000,BTCS)
BTCS+5:
db 83
return:
registersymbol(BTCS)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
BTCS+5:
db 0F 38 F0 8C 18 84 00 00 00
unregistersymbol(BTCS)
dealloc(newmem)
Users browsing this forum: batista25255, Google [Bot], Retroboy