Thanks to
DhaosCollider and
DrummerIX for the tables, always amazing quality with you two
About
DhaosCollider's table i have an issue with a script that refuse to activate itself, basically every other script i tried on the table work fine except this one.
The name of the script is "Save Anytime on System Screen" and here is the code below :
Code: Select all
define(address,GameAssembly.dll+6790DC)
define(bytes,0F 84 BA 01 00 00)
[ENABLE]
assert(address,bytes)
address:
nop 6
[DISABLE]
address:
db bytes
// je GameAssembly.dll.udata+3EF29C
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll.udata+3EF0DC
GameAssembly.dll.udata+3EF06B: CC - int 3
GameAssembly.dll.udata+3EF06C: CC - int 3
GameAssembly.dll.udata+3EF06D: CC - int 3
GameAssembly.dll.udata+3EF06E: CC - int 3
GameAssembly.dll.udata+3EF06F: CC - int 3
Game.UICampMenuSelector.OnDecision: 48 89 5C 24 08 - mov [rsp+08],rbx
GameAssembly.dll.udata+3EF075: 57 - push rdi
GameAssembly.dll.udata+3EF076: 48 83 EC 20 - sub rsp,20
GameAssembly.dll.udata+3EF07A: 80 3D D5 0F 95 01 00 - cmp byte ptr [GameAssembly.dll+1FCA056],00
GameAssembly.dll.udata+3EF081: 48 8B D9 - mov rbx,rcx
GameAssembly.dll.udata+3EF084: 75 1F - jne GameAssembly.dll.udata+3EF0A5
GameAssembly.dll.udata+3EF086: 48 8D 0D EB 1E 86 01 - lea rcx,[GameAssembly.dll.xtext+B1F78]
GameAssembly.dll.udata+3EF08D: E8 FE C4 BA FF - call GameAssembly.dll.00cfg+224590
GameAssembly.dll.udata+3EF092: 48 8D 0D FF 15 85 01 - lea rcx,[GameAssembly.dll.xtext+A1698]
GameAssembly.dll.udata+3EF099: E8 F2 C4 BA FF - call GameAssembly.dll.00cfg+224590
GameAssembly.dll.udata+3EF09E: C6 05 B1 0F 95 01 01 - mov byte ptr [GameAssembly.dll+1FCA056],01
GameAssembly.dll.udata+3EF0A5: 33 D2 - xor edx,edx
GameAssembly.dll.udata+3EF0A7: 48 8B CB - mov rcx,rbx
GameAssembly.dll.udata+3EF0AA: E8 E1 07 00 00 - call Game.UICampMenuSelector.GetCurrentSelectItem
GameAssembly.dll.udata+3EF0AF: 48 8B 0D E2 15 85 01 - mov rcx,[GameAssembly.dll.xtext+A1698]
GameAssembly.dll.udata+3EF0B6: 8B F8 - mov edi,eax
GameAssembly.dll.udata+3EF0B8: 8B 93 90 00 00 00 - mov edx,[rbx+00000090]
GameAssembly.dll.udata+3EF0BE: 48 8B 49 38 - mov rcx,[rcx+38]
GameAssembly.dll.udata+3EF0C2: 4C 8B 01 - mov r8,[rcx]
GameAssembly.dll.udata+3EF0C5: 48 8B CB - mov rcx,rbx
GameAssembly.dll.udata+3EF0C8: 4D 8B 48 08 - mov r9,[r8+08]
GameAssembly.dll.udata+3EF0CC: 41 FF D1 - call r9
GameAssembly.dll.udata+3EF0CF: 48 85 C0 - test rax,rax
GameAssembly.dll.udata+3EF0D2: 0F 84 E2 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF0D8: 80 78 24 00 - cmp byte ptr [rax+24],00
// ---------- INJECTING HERE ----------
GameAssembly.dll.udata+3EF0DC: 0F 84 BA 01 00 00 - je GameAssembly.dll.udata+3EF29C
// ---------- DONE INJECTING ----------
GameAssembly.dll.udata+3EF0E2: 83 BB E8 00 00 00 00 - cmp dword ptr [rbx+000000E8],00
GameAssembly.dll.udata+3EF0E9: 0F 84 31 01 00 00 - je GameAssembly.dll.udata+3EF220
GameAssembly.dll.udata+3EF0EF: 83 FF 1F - cmp edi,1F
GameAssembly.dll.udata+3EF0F2: 77 0E - ja GameAssembly.dll.udata+3EF102
GameAssembly.dll.udata+3EF0F4: B8 00 00 40 F3 - mov eax,F3400000
GameAssembly.dll.udata+3EF0F9: 0F A3 F8 - bt eax,edi
GameAssembly.dll.udata+3EF0FC: 0F 82 CA 00 00 00 - jb GameAssembly.dll.udata+3EF1CC
GameAssembly.dll.udata+3EF102: 83 FF 0A - cmp edi,0A
GameAssembly.dll.udata+3EF105: 74 11 - je GameAssembly.dll.udata+3EF118
GameAssembly.dll.udata+3EF107: 8B 83 90 00 00 00 - mov eax,[rbx+00000090]
GameAssembly.dll.udata+3EF10D: 89 83 F8 00 00 00 - mov [rbx+000000F8],eax
GameAssembly.dll.udata+3EF113: E9 B4 00 00 00 - jmp GameAssembly.dll.udata+3EF1CC
GameAssembly.dll.udata+3EF118: 48 8B 8B D8 00 00 00 - mov rcx,[rbx+000000D8]
GameAssembly.dll.udata+3EF11F: C7 83 E8 00 00 00 06 00 00 00 - mov [rbx+000000E8],00000006
GameAssembly.dll.udata+3EF129: 48 85 C9 - test rcx,rcx
GameAssembly.dll.udata+3EF12C: 0F 84 88 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF132: 48 8B 01 - mov rax,[rcx]
GameAssembly.dll.udata+3EF135: 48 8B 90 50 02 00 00 - mov rdx,[rax+00000250]
GameAssembly.dll.udata+3EF13C: FF 90 48 02 00 00 - call qword ptr [rax+00000248]
GameAssembly.dll.udata+3EF142: 80 BB FE 00 00 00 00 - cmp byte ptr [rbx+000000FE],00
GameAssembly.dll.udata+3EF149: 75 23 - jne GameAssembly.dll.udata+3EF16E
GameAssembly.dll.udata+3EF14B: 80 BB FF 00 00 00 00 - cmp byte ptr [rbx+000000FF],00
GameAssembly.dll.udata+3EF152: 74 50 - je GameAssembly.dll.udata+3EF1A4
GameAssembly.dll.udata+3EF154: E8 77 E2 98 FF - call GameAssembly.dll.00cfg+63D0
GameAssembly.dll.udata+3EF159: 48 85 C0 - test rax,rax
GameAssembly.dll.udata+3EF15C: 0F 84 58 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF162: 33 D2 - xor edx,edx
GameAssembly.dll.udata+3EF164: 48 8B C8 - mov rcx,rax
GameAssembly.dll.udata+3EF167: E8 44 35 D5 FF - call Game.ColiseumManager.GetIneligibleMembers
GameAssembly.dll.udata+3EF16C: EB 18 - jmp GameAssembly.dll.udata+3EF186
}
Thanks to
DhaosCollider and
DrummerIX for the tables, always amazing quality with you two
About
DhaosCollider's table i have an issue with a script that refuse to activate itself, basically every other script i tried on the table work fine except this one.
The name of the script is "Save Anytime on System Screen" and here is the code below :
Code: Select all
define(address,GameAssembly.dll+6790DC)
define(bytes,0F 84 BA 01 00 00)
[ENABLE]
assert(address,bytes)
address:
nop 6
[DISABLE]
address:
db bytes
// je GameAssembly.dll.udata+3EF29C
{
// ORIGINAL CODE - INJECTION POINT: GameAssembly.dll.udata+3EF0DC
GameAssembly.dll.udata+3EF06B: CC - int 3
GameAssembly.dll.udata+3EF06C: CC - int 3
GameAssembly.dll.udata+3EF06D: CC - int 3
GameAssembly.dll.udata+3EF06E: CC - int 3
GameAssembly.dll.udata+3EF06F: CC - int 3
Game.UICampMenuSelector.OnDecision: 48 89 5C 24 08 - mov [rsp+08],rbx
GameAssembly.dll.udata+3EF075: 57 - push rdi
GameAssembly.dll.udata+3EF076: 48 83 EC 20 - sub rsp,20
GameAssembly.dll.udata+3EF07A: 80 3D D5 0F 95 01 00 - cmp byte ptr [GameAssembly.dll+1FCA056],00
GameAssembly.dll.udata+3EF081: 48 8B D9 - mov rbx,rcx
GameAssembly.dll.udata+3EF084: 75 1F - jne GameAssembly.dll.udata+3EF0A5
GameAssembly.dll.udata+3EF086: 48 8D 0D EB 1E 86 01 - lea rcx,[GameAssembly.dll.xtext+B1F78]
GameAssembly.dll.udata+3EF08D: E8 FE C4 BA FF - call GameAssembly.dll.00cfg+224590
GameAssembly.dll.udata+3EF092: 48 8D 0D FF 15 85 01 - lea rcx,[GameAssembly.dll.xtext+A1698]
GameAssembly.dll.udata+3EF099: E8 F2 C4 BA FF - call GameAssembly.dll.00cfg+224590
GameAssembly.dll.udata+3EF09E: C6 05 B1 0F 95 01 01 - mov byte ptr [GameAssembly.dll+1FCA056],01
GameAssembly.dll.udata+3EF0A5: 33 D2 - xor edx,edx
GameAssembly.dll.udata+3EF0A7: 48 8B CB - mov rcx,rbx
GameAssembly.dll.udata+3EF0AA: E8 E1 07 00 00 - call Game.UICampMenuSelector.GetCurrentSelectItem
GameAssembly.dll.udata+3EF0AF: 48 8B 0D E2 15 85 01 - mov rcx,[GameAssembly.dll.xtext+A1698]
GameAssembly.dll.udata+3EF0B6: 8B F8 - mov edi,eax
GameAssembly.dll.udata+3EF0B8: 8B 93 90 00 00 00 - mov edx,[rbx+00000090]
GameAssembly.dll.udata+3EF0BE: 48 8B 49 38 - mov rcx,[rcx+38]
GameAssembly.dll.udata+3EF0C2: 4C 8B 01 - mov r8,[rcx]
GameAssembly.dll.udata+3EF0C5: 48 8B CB - mov rcx,rbx
GameAssembly.dll.udata+3EF0C8: 4D 8B 48 08 - mov r9,[r8+08]
GameAssembly.dll.udata+3EF0CC: 41 FF D1 - call r9
GameAssembly.dll.udata+3EF0CF: 48 85 C0 - test rax,rax
GameAssembly.dll.udata+3EF0D2: 0F 84 E2 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF0D8: 80 78 24 00 - cmp byte ptr [rax+24],00
// ---------- INJECTING HERE ----------
GameAssembly.dll.udata+3EF0DC: 0F 84 BA 01 00 00 - je GameAssembly.dll.udata+3EF29C
// ---------- DONE INJECTING ----------
GameAssembly.dll.udata+3EF0E2: 83 BB E8 00 00 00 00 - cmp dword ptr [rbx+000000E8],00
GameAssembly.dll.udata+3EF0E9: 0F 84 31 01 00 00 - je GameAssembly.dll.udata+3EF220
GameAssembly.dll.udata+3EF0EF: 83 FF 1F - cmp edi,1F
GameAssembly.dll.udata+3EF0F2: 77 0E - ja GameAssembly.dll.udata+3EF102
GameAssembly.dll.udata+3EF0F4: B8 00 00 40 F3 - mov eax,F3400000
GameAssembly.dll.udata+3EF0F9: 0F A3 F8 - bt eax,edi
GameAssembly.dll.udata+3EF0FC: 0F 82 CA 00 00 00 - jb GameAssembly.dll.udata+3EF1CC
GameAssembly.dll.udata+3EF102: 83 FF 0A - cmp edi,0A
GameAssembly.dll.udata+3EF105: 74 11 - je GameAssembly.dll.udata+3EF118
GameAssembly.dll.udata+3EF107: 8B 83 90 00 00 00 - mov eax,[rbx+00000090]
GameAssembly.dll.udata+3EF10D: 89 83 F8 00 00 00 - mov [rbx+000000F8],eax
GameAssembly.dll.udata+3EF113: E9 B4 00 00 00 - jmp GameAssembly.dll.udata+3EF1CC
GameAssembly.dll.udata+3EF118: 48 8B 8B D8 00 00 00 - mov rcx,[rbx+000000D8]
GameAssembly.dll.udata+3EF11F: C7 83 E8 00 00 00 06 00 00 00 - mov [rbx+000000E8],00000006
GameAssembly.dll.udata+3EF129: 48 85 C9 - test rcx,rcx
GameAssembly.dll.udata+3EF12C: 0F 84 88 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF132: 48 8B 01 - mov rax,[rcx]
GameAssembly.dll.udata+3EF135: 48 8B 90 50 02 00 00 - mov rdx,[rax+00000250]
GameAssembly.dll.udata+3EF13C: FF 90 48 02 00 00 - call qword ptr [rax+00000248]
GameAssembly.dll.udata+3EF142: 80 BB FE 00 00 00 00 - cmp byte ptr [rbx+000000FE],00
GameAssembly.dll.udata+3EF149: 75 23 - jne GameAssembly.dll.udata+3EF16E
GameAssembly.dll.udata+3EF14B: 80 BB FF 00 00 00 00 - cmp byte ptr [rbx+000000FF],00
GameAssembly.dll.udata+3EF152: 74 50 - je GameAssembly.dll.udata+3EF1A4
GameAssembly.dll.udata+3EF154: E8 77 E2 98 FF - call GameAssembly.dll.00cfg+63D0
GameAssembly.dll.udata+3EF159: 48 85 C0 - test rax,rax
GameAssembly.dll.udata+3EF15C: 0F 84 58 01 00 00 - je GameAssembly.dll.udata+3EF2BA
GameAssembly.dll.udata+3EF162: 33 D2 - xor edx,edx
GameAssembly.dll.udata+3EF164: 48 8B C8 - mov rcx,rax
GameAssembly.dll.udata+3EF167: E8 44 35 D5 FF - call Game.ColiseumManager.GetIneligibleMembers
GameAssembly.dll.udata+3EF16C: EB 18 - jmp GameAssembly.dll.udata+3EF186
}
When i try to access the address that is on the commented part after the code
GameAssembly.dll.udata+3EF0DC, the game tell me "This is not a valid address", same if i try without the offset at the end, but it works if i type only
GameAssembly.dll.
I am a newb regarding this, how sometimes we can access game executable structure and functions like "game_executable.exe.inventoryManager.AddObject" and most often we can't. I guess it's related to the language used in creating the game and its similarity with what CE can understand/read.
So does anyone know where my error came from ? An option not enabled in CE ? I am using the version 7.5 and i had followed differents guides found here and there to configure CE. And i have been able in some games to use the feature that doesn't work for this cheat on this game.
I am very lost about this problem, so any help is greatly appreciated.