Cielos wrote: ↑Sun Apr 09, 2017 8:17 am
DarkIceCore wrote: ↑Sat Apr 08, 2017 1:25 pm
@Cielos
ABOUT "dupliacte item .4"
in 1.04 aob not found, pls could you share surrounding lines (-10/+10) of "bytes+opcodes" from memory, than i will find injection point by myself.
ps. thx for complete table.
acecel wrote: ↑Sun Apr 09, 2017 1:33 am
By any chance, is it possible for someone to give the code for the Duplicate (with shift) for the 1.4 patch ?
"quantityReadOnTransactionAOB" is the injection point I used for
duplicate item .4.
"quantityDecreaseOnTransactionAOB" is the injection point 1096bimu used for the original script.
so, you should download
1096bimu's table for reference as his aobscan is made for patch 1.04.
that means, use his aob to locate the injection point for 1.04, and the injection for
duplicate item .4 would be the "mov edx,[rdi+1C]" about 20 to 30 lines above it.
hope that helps.
also, if you locate the injection point for patch 1.04, would you mind posting the lines aounrd it as well so that I can make an aobscan that works on both 1.04 and 1.05?
I made this script after I updated the game, as per a request to update 1096bimu's script, so, I didn't make preparation for the patch changes, thus no way to compare it myself.
thanks in advance.
big thx, cuz 1096bimu's code is different from my 1.04 (CPY). AND your choice for injection point in a past from 1096bimu's was RIGHT, you can see it on compare.
so, i already found true injection point for 1.04 and made some "universal" AOB.
here is comparison of yours 1.05 with my 1.04 with scheme of my AOB.
first your 1.05 memory:
Code: Select all
Cielos 1.05
MassEffectAndromeda.IsGameRuntime+4FE6EA - 85 C9 - test ecx,ecx
MassEffectAndromeda.IsGameRuntime+4FE6EC - 75 09 - jne MassEffectAndromeda.IsGameRuntime+4FE6F7
MassEffectAndromeda.IsGameRuntime+4FE6EE - 8B DF - mov ebx,edi
MassEffectAndromeda.IsGameRuntime+4FE6F0 - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.IsGameRuntime+4FE6F5 - EB 59 - jmp MassEffectAndromeda.IsGameRuntime+4FE750
MassEffectAndromeda.IsGameRuntime+4FE6F7 - 48 8B 4E 58 - mov rcx,[rsi+58]
MassEffectAndromeda.IsGameRuntime+4FE6FB - 48 8D 56 48 - lea rdx,[rsi+48]
MassEffectAndromeda.IsGameRuntime+4FE6FF - 48 8B C2 - mov rax,rdx
MassEffectAndromeda.IsGameRuntime+4FE702 - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.IsGameRuntime+4FE705 - 74 17 - je MassEffectAndromeda.IsGameRuntime+4FE71E
MassEffectAndromeda.IsGameRuntime+4FE707 - 44 39 51 20 - cmp [rcx+20],r10d
MassEffectAndromeda.IsGameRuntime+4FE70B - 72 09 - jb MassEffectAndromeda.IsGameRuntime+4FE716
MassEffectAndromeda.IsGameRuntime+4FE70D - 48 8B C1 - mov rax,rcx
MassEffectAndromeda.IsGameRuntime+4FE710 - 48 8B 49 08 - mov rcx,[rcx+08]
MassEffectAndromeda.IsGameRuntime+4FE714 - EB 03 - jmp MassEffectAndromeda.IsGameRuntime+4FE719
MassEffectAndromeda.IsGameRuntime+4FE716 - 48 8B 09 - mov rcx,[rcx]
MassEffectAndromeda.IsGameRuntime+4FE719 - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.IsGameRuntime+4FE71C - 75 E9 - jne MassEffectAndromeda.IsGameRuntime+4FE707
MassEffectAndromeda.IsGameRuntime+4FE71E - 48 3B C2 - cmp rax,rdx
MassEffectAndromeda.IsGameRuntime+4FE721 - 74 06 - je MassEffectAndromeda.IsGameRuntime+4FE729
MassEffectAndromeda.IsGameRuntime+4FE723 - 44 3B 50 20 - cmp r10d,[rax+20]
MassEffectAndromeda.IsGameRuntime+4FE727 - 73 03 - jae MassEffectAndromeda.IsGameRuntime+4FE72C
MassEffectAndromeda.IsGameRuntime+4FE729 - 48 8B C2 - mov rax,rdx
MassEffectAndromeda.IsGameRuntime+4FE72C - 48 8D 4E 48 - lea rcx,[rsi+48]
MassEffectAndromeda.IsGameRuntime+4FE730 - 48 3B C1 - cmp rax,rcx
MassEffectAndromeda.IsGameRuntime+4FE733 - 74 04 - je MassEffectAndromeda.IsGameRuntime+4FE739
MassEffectAndromeda.IsGameRuntime+4FE735 - 48 8B 78 28 - mov rdi,[rax+28]
MassEffectAndromeda.IsGameRuntime+4FE739 - 48 8B DF - mov rbx,rdi
MassEffectAndromeda.IsGameRuntime+4FE73C - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.IsGameRuntime+4FE741 - 48 85 FF - test rdi,rdi
MassEffectAndromeda.IsGameRuntime+4FE744 - 74 0A - je MassEffectAndromeda.IsGameRuntime+4FE750
MassEffectAndromeda.IsGameRuntime+4FE746 - 48 8B 07 - mov rax,[rdi]
MassEffectAndromeda.IsGameRuntime+4FE749 - 48 8B CF - mov rcx,rdi
MassEffectAndromeda.IsGameRuntime+4FE74C - FF 50 08 - call qword ptr [rax+08]
--------my aob start
MassEffectAndromeda.IsGameRuntime+4FE74F - 90 - nop
MassEffectAndromeda.IsGameRuntime+4FE750 - 48 85 FF - test rdi,rdi
MassEffectAndromeda.IsGameRuntime+4FE753 - 0F84 AA000000 - je MassEffectAndromeda.IsGameRuntime+4FE803
quantityReadOnTransactionAOB - 8B 57 1C - mov edx,[rdi+1C] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
MassEffectAndromeda.IsGameRuntime+4FE75C - 3B D5 - cmp edx,ebp
MassEffectAndromeda.IsGameRuntime+4FE75E - 75 3B - jne MassEffectAndromeda.IsGameRuntime+4FE79B
MassEffectAndromeda.IsGameRuntime+4FE760 - 48 8B 06 - mov rax,[rsi]
MassEffectAndromeda.IsGameRuntime+4FE763 - 48 8B D7 - mov rdx,rdi
MassEffectAndromeda.IsGameRuntime+4FE766 - 48 8B CE - mov rcx,rsi
---------my aob end
MassEffectAndromeda.IsGameRuntime+4FE769 - FF 50 30 - call qword ptr [rax+30]
MassEffectAndromeda.IsGameRuntime+4FE76C - 41 B1 01 - mov r9l,01
MassEffectAndromeda.IsGameRuntime+4FE76F - 4C 8B C7 - mov r8,rdi
MassEffectAndromeda.IsGameRuntime+4FE772 - 48 8D 54 24 28 - lea rdx,[rsp+28]
MassEffectAndromeda.IsGameRuntime+4FE777 - 49 8B CE - mov rcx,r14
MassEffectAndromeda.IsGameRuntime+4FE77A - E8 31310000 - call MassEffectAndromeda.IsGameRuntime+5018B0
MassEffectAndromeda.IsGameRuntime+4FE77F - 90 - nop
MassEffectAndromeda.IsGameRuntime+4FE780 - 48 8B 18 - mov rbx,[rax]
MassEffectAndromeda.IsGameRuntime+4FE783 - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.IsGameRuntime+4FE788 - 48 C7 00 00000000 - mov [rax],00000000
MassEffectAndromeda.IsGameRuntime+4FE78F - 48 8B 07 - mov rax,[rdi]
MassEffectAndromeda.IsGameRuntime+4FE792 - 48 8B CF - mov rcx,rdi
MassEffectAndromeda.IsGameRuntime+4FE795 - FF 50 10 - call qword ptr [rax+10]
MassEffectAndromeda.IsGameRuntime+4FE798 - 90 - nop
MassEffectAndromeda.IsGameRuntime+4FE799 - EB 57 - jmp MassEffectAndromeda.IsGameRuntime+4FE7F2
----- 1096bimu's table f
MassEffectAndromeda.IsGameRuntime+4FE79B - 8B C2 - mov eax,edx
MassEffectAndromeda.IsGameRuntime+4FE79D - 3B EA - cmp ebp,edx
MassEffectAndromeda.IsGameRuntime+4FE79F - 0F42 C5 - cmovb eax,ebp
MassEffectAndromeda.IsGameRuntime+4FE7A2 - 8B CA - mov ecx,edx
quantityDecreaseOnTransactionAOB - 2B C8 - sub ecx,eax @@@@@@@@@@@@@@@@@@1096bimu's table f
MassEffectAndromeda.IsGameRuntime+4FE7A6 - 3B CA - cmp ecx,edx
------ 1096bimu's table f
MassEffectAndromeda.IsGameRuntime+4FE7A8 - 74 1A - je MassEffectAndromeda.IsGameRuntime+4FE7C4
MassEffectAndromeda.IsGameRuntime+4FE7AA - 89 4F 1C - mov [rdi+1C],ecx
MassEffectAndromeda.IsGameRuntime+4FE7AD - 80 7F 38 00 - cmp byte ptr [rdi+38],00
MassEffectAndromeda.IsGameRuntime+4FE7B1 - 75 11 - jne MassEffectAndromeda.IsGameRuntime+4FE7C4
MassEffectAndromeda.IsGameRuntime+4FE7B3 - 48 8B 4F 30 - mov rcx,[rdi+30]
MassEffectAndromeda.IsGameRuntime+4FE7B7 - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.IsGameRuntime+4FE7BA - 74 08 - je MassEffectAndromeda.IsGameRuntime+4FE7C4
MassEffectAndromeda.IsGameRuntime+4FE7BC - 48 8B 01 - mov rax,[rcx]
MassEffectAndromeda.IsGameRuntime+4FE7BF - 8B 57 28 - mov edx,[rdi+28]
MassEffectAndromeda.IsGameRuntime+4FE7C2 - FF 10 - call qword ptr [rax]
MassEffectAndromeda.IsGameRuntime+4FE7C4 - 44 8B CD - mov r9d,ebp
second my 1.04 (CPY) memory:
Code: Select all
MY 1.04
MassEffectAndromeda.exe+510F279 - 85 C9 - test ecx,ecx
MassEffectAndromeda.exe+510F27B - 75 09 - jne MassEffectAndromeda.exe+510F286
MassEffectAndromeda.exe+510F27D - 89 FB - mov ebx,edi
MassEffectAndromeda.exe+510F27F - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.exe+510F284 - EB 5C - jmp MassEffectAndromeda.exe+510F2E2
MassEffectAndromeda.exe+510F286 - 48 8B 4E 58 - mov rcx,[rsi+58]
MassEffectAndromeda.exe+510F28A - 48 8D 56 48 - lea rdx,[rsi+48]
MassEffectAndromeda.exe+510F28E - 48 89 D0 - mov rax,rdx
MassEffectAndromeda.exe+510F291 - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+510F294 - 74 1A - je MassEffectAndromeda.exe+510F2B0
MassEffectAndromeda.exe+510F296 - 44 39 51 20 - cmp [rcx+20],r10d
MassEffectAndromeda.exe+510F29A - 72 0C - jb MassEffectAndromeda.exe+510F2A8
MassEffectAndromeda.exe+510F29C - 48 89 C8 - mov rax,rcx
MassEffectAndromeda.exe+510F29F - 48 8B 49 08 - mov rcx,[rcx+08]
MassEffectAndromeda.exe+510F2A3 - EB 06 - jmp MassEffectAndromeda.exe+510F2AB
MassEffectAndromeda.exe+510F2A5 - 7A CF - jp MassEffectAndromeda.exe+510F276
MassEffectAndromeda.exe+510F2A7 - 58 - pop rax
MassEffectAndromeda.exe+510F2A8 - 48 8B 09 - mov rcx,[rcx]
MassEffectAndromeda.exe+510F2AB - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+510F2AE - 75 E6 - jne MassEffectAndromeda.exe+510F296
MassEffectAndromeda.exe+510F2B0 - 48 39 D0 - cmp rax,rdx
MassEffectAndromeda.exe+510F2B3 - 74 06 - je MassEffectAndromeda.exe+510F2BB
MassEffectAndromeda.exe+510F2B5 - 44 3B 50 20 - cmp r10d,[rax+20]
MassEffectAndromeda.exe+510F2B9 - 73 03 - jae MassEffectAndromeda.exe+510F2BE
MassEffectAndromeda.exe+510F2BB - 48 89 D0 - mov rax,rdx
MassEffectAndromeda.exe+510F2BE - 48 8D 4E 48 - lea rcx,[rsi+48]
MassEffectAndromeda.exe+510F2C2 - 48 39 C8 - cmp rax,rcx
MassEffectAndromeda.exe+510F2C5 - 74 04 - je MassEffectAndromeda.exe+510F2CB
MassEffectAndromeda.exe+510F2C7 - 48 8B 78 28 - mov rdi,[rax+28]
MassEffectAndromeda.exe+510F2CB - 48 89 FB - mov rbx,rdi
MassEffectAndromeda.exe+510F2CE - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.exe+510F2D3 - 48 85 FF - test rdi,rdi
MassEffectAndromeda.exe+510F2D6 - 74 0A - je MassEffectAndromeda.exe+510F2E2
MassEffectAndromeda.exe+510F2D8 - 48 8B 07 - mov rax,[rdi]
MassEffectAndromeda.exe+510F2DB - 48 89 F9 - mov rcx,rdi
MassEffectAndromeda.exe+510F2DE - FF 50 08 - call qword ptr [rax+08]
--------my aob start
MassEffectAndromeda.exe+510F2E1 - 90 - nop
MassEffectAndromeda.exe+510F2E2 - 48 85 FF - test rdi,rdi
MassEffectAndromeda.exe+510F2E5 - 0F84 AB000000 - je MassEffectAndromeda.exe+510F396
quantityReadOnTransactionAOB - 8B 57 1C - mov edx,[rdi+1C] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
MassEffectAndromeda.exe+510F2EE - 39 EA - cmp edx,ebp
MassEffectAndromeda.exe+510F2F0 - 75 3C - jne MassEffectAndromeda.exe+510F32E
MassEffectAndromeda.exe+510F2F2 - 48 8B 06 - mov rax,[rsi]
MassEffectAndromeda.exe+510F2F5 - 48 89 FA - mov rdx,rdi
MassEffectAndromeda.exe+510F2F8 - 48 89 F1 - mov rcx,rsi
--------my aob end
MassEffectAndromeda.exe+510F2FB - FF 50 30 - call qword ptr [rax+30]
MassEffectAndromeda.exe+510F2FE - 41 B1 01 - mov r9l,01
MassEffectAndromeda.exe+510F301 - 49 89 F8 - mov r8,rdi
MassEffectAndromeda.exe+510F304 - 48 8D 54 24 28 - lea rdx,[rsp+28]
MassEffectAndromeda.exe+510F309 - 4C 89 F1 - mov rcx,r14
MassEffectAndromeda.exe+510F30C - E8 3F320000 - call MassEffectAndromeda.exe+5112550
MassEffectAndromeda.exe+510F311 - 90 - nop
MassEffectAndromeda.exe+510F312 - 48 8B 18 - mov rbx,[rax]
MassEffectAndromeda.exe+510F315 - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.exe+510F31A - 48 C7 00 00000000 - mov [rax],00000000
MassEffectAndromeda.exe+510F321 - 48 8B 07 - mov rax,[rdi]
MassEffectAndromeda.exe+510F324 - 48 89 F9 - mov rcx,rdi
MassEffectAndromeda.exe+510F327 - FF 50 10 - call qword ptr [rax+10]
MassEffectAndromeda.exe+510F32A - 90 - nop
MassEffectAndromeda.exe+510F32B - EB 58 - jmp MassEffectAndromeda.exe+510F385
----- 1096bimu's table f
MassEffectAndromeda.exe+510F32D - A1 89D039D50F42C589 - mov eax,[89C5420FD539D089]
MassEffectAndromeda.exe+510F336 - D1 29 - shr [rcx],1
MassEffectAndromeda.exe+510F338 - C1 39 D1 - sar [rcx],-2F
----- 1096bimu's table f
MassEffectAndromeda.exe+510F33B - 74 1A - je MassEffectAndromeda.exe+510F357
MassEffectAndromeda.exe+510F33D - 89 4F 1C - mov [rdi+1C],ecx
MassEffectAndromeda.exe+510F340 - 80 7F 38 00 - cmp byte ptr [rdi+38],00
MassEffectAndromeda.exe+510F344 - 75 11 - jne MassEffectAndromeda.exe+510F357
MassEffectAndromeda.exe+510F346 - 48 8B 4F 30 - mov rcx,[rdi+30]
MassEffectAndromeda.exe+510F34A - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+510F34D - 74 08 - je MassEffectAndromeda.exe+510F357
MassEffectAndromeda.exe+510F34F - 48 8B 01 - mov rax,[rcx]
MassEffectAndromeda.exe+510F352 - 8B 57 28 - mov edx,[rdi+28]
MassEffectAndromeda.exe+510F355 - FF 10 - call qword ptr [rax]
MassEffectAndromeda.exe+510F357 - 41 89 E9 - mov r9d,ebp
MassEffectAndromeda.exe+510F35A - 4C 8B 47 10 - mov r8,[rdi+10]
MassEffectAndromeda.exe+510F35E - 48 8D 54 24 28 - lea rdx,[rsp+28]
MassEffectAndromeda.exe+510F363 - 4C 89 F1 - mov rcx,r14
MassEffectAndromeda.exe+510F366 - E8 851F0000 - call MassEffectAndromeda.exe+51112F0
MassEffectAndromeda.exe+510F36B - 90 - nop
MassEffectAndromeda.exe+510F36C - 48 8B 18 - mov rbx,[rax]
MassEffectAndromeda.exe+510F36F - 48 89 5C 24 70 - mov [rsp+70],rbx
MassEffectAndromeda.exe+510F374 - 48 C7 00 00000000 - mov [rax],00000000
MassEffectAndromeda.exe+510F37B - 48 8B 07 - mov rax,[rdi]
MassEffectAndromeda.exe+510F37E - 48 89 F9 - mov rcx,rdi
MassEffectAndromeda.exe+510F381 - FF 50 10 - call qword ptr [rax+10]
MassEffectAndromeda.exe+510F384 - 90 - nop
MassEffectAndromeda.exe+510F385 - 48 8B 4C 24 28 - mov rcx,[rsp+28]
MassEffectAndromeda.exe+510F38A - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+510F38D - 74 07 - je MassEffectAndromeda.exe+510F396
MassEffectAndromeda.exe+510F38F - 48 8B 01 - mov rax,[rcx]
MassEffectAndromeda.exe+510F392 - FF 50 10 - call qword ptr [rax+10]
MassEffectAndromeda.exe+510F395 - 90 - nop
MassEffectAndromeda.exe+510F396 - 48 85 DB - test rbx,rbx
like you can see on compare, for my table i'm using this AOB+A:
90 48 85 FF 0F xx xx 00 00 00 8B 57 1C XX xx 7x xx 48 XX XX 48 XX XX 48 XX XX
around your inj.point from NOP. so thx for sharing code!
EDIT:
+ABOUT your "ignore level for research"
cannot find
"playerLvlReadAOB 8B 80 C8 00 00 00 FF C0 EB 02"
is it this or not?:
Code: Select all
MassEffectAndromeda.exe+51F53C4 - 48 85 DB - test rbx,rbx
MassEffectAndromeda.exe+51F53C7 - 74 08 - je MassEffectAndromeda.exe+51F53D1
MassEffectAndromeda.exe+51F53C9 - 48 83 C3 F8 - add rbx,-08 { 248 }
MassEffectAndromeda.exe+51F53CD - EB 04 - jmp MassEffectAndromeda.exe+51F53D3
MassEffectAndromeda.exe+51F53CF - D4 B4 - aam -4C { 180 }
MassEffectAndromeda.exe+51F53D1 - 31 DB - xor ebx,ebx
MassEffectAndromeda.exe+51F53D3 - 48 89 D9 - mov rcx,rbx
MassEffectAndromeda.exe+51F53D6 - E8 F562EBFF - call MassEffectAndromeda.exe+50AB6D0
MassEffectAndromeda.exe+51F53DB - 48 89 C3 - mov rbx,rax
MassEffectAndromeda.exe+51F53DE - 48 8B 4C 24 48 - mov rcx,[rsp+48]
MassEffectAndromeda.exe+51F53E3 - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+51F53E6 - 74 10 - je MassEffectAndromeda.exe+51F53F8
MassEffectAndromeda.exe+51F53E8 - F0 FF 49 08 - lock dec [rcx+08]
MassEffectAndromeda.exe+51F53EC - 75 0A - jne MassEffectAndromeda.exe+51F53F8
MassEffectAndromeda.exe+51F53EE - 48 85 C9 - test rcx,rcx
MassEffectAndromeda.exe+51F53F1 - 74 05 - je MassEffectAndromeda.exe+51F53F8
MassEffectAndromeda.exe+51F53F3 - E8 18C0B0FF - call MassEffectAndromeda.exe+4D01410
MassEffectAndromeda.exe+51F53F8 - 48 85 DB - test rbx,rbx
MassEffectAndromeda.exe+51F53FB - 74 1A - je MassEffectAndromeda.exe+51F5417
MassEffectAndromeda.exe+51F53FD - 48 8B 83 F8080000 - mov rax,[rbx+000008F8]
MassEffectAndromeda.exe+51F5404 - 48 85 C0 - test rax,rax
MassEffectAndromeda.exe+51F5407 - 74 0E - je MassEffectAndromeda.exe+51F5417
------
playerLvlReadAOB - 8B 80 C8000000 - mov eax,[rax+000000C8]
MassEffectAndromeda.exe+51F540F - FF C0 - inc eax
MassEffectAndromeda.exe+51F5411 - EB 06 - jmp MassEffectAndromeda.exe+51F5419
-------
MassEffectAndromeda.exe+51F5413 - 21 FC - and esp,edi
MassEffectAndromeda.exe+51F5415 - 32 10 - xor dl,[rax]
MassEffectAndromeda.exe+51F5417 - 31 C0 - xor eax,eax
MassEffectAndromeda.exe+51F5419 - 48 83 C4 30 - add rsp,30 { 48 }
MassEffectAndromeda.exe+51F541D - 5B - pop rbx
MassEffectAndromeda.exe+51F541E - C3 - ret
MassEffectAndromeda.exe+51F541F - 37 - aaa
MassEffectAndromeda.exe+51F5420 - CC - int 3
MassEffectAndromeda.exe+51F5421 - CC - int 3
MassEffectAndromeda.exe+51F5422 - CC - int 3
MassEffectAndromeda.exe+51F5423 - CC - int 3
MassEffectAndromeda.exe+51F5424 - CC - int 3
MassEffectAndromeda.exe+51F5425 - CC - int 3
MassEffectAndromeda.exe+51F5426 - 66 2E 0F1F 84 00 00000000 - nop cs:[rax+rax+00000000]
MassEffectAndromeda.exe+51F5430 - 48 89 5C 24 08 - mov [rsp+08],rbx
MassEffectAndromeda.exe+51F5435 - 57 - push rdi
MassEffectAndromeda.exe+51F5436 - 48 83 EC 30 - sub rsp,30 { 48 }
MassEffectAndromeda.exe+51F543A - 0F29 74 24 20 - movaps [rsp+20],xmm6
MassEffectAndromeda.exe+51F543F - 48 89 D7 - mov rdi,rdx
MassEffectAndromeda.exe+51F5442 - 48 89 CB - mov rbx,rcx
MassEffectAndromeda.exe+51F5445 - 0F28 F2 - movaps xmm6,xmm2
MassEffectAndromeda.exe+51F5448 - E8 93FEFFFF - call MassEffectAndromeda.exe+51F52E0
MassEffectAndromeda.exe+51F544D - 44 8B 43 58 - mov r8d,[rbx+58]
MassEffectAndromeda.exe+51F5451 - 41 89 C1 - mov r9d,eax
MassEffectAndromeda.exe+51F5454 - 41 83 F8 FF - cmp r8d,-01 { 255 }
MassEffectAndromeda.exe+51F5458 - 0F84 B7000000 - je MassEffectAndromeda.exe+51F5515
MassEffectAndromeda.exe+51F545E - 45 39 C8 - cmp r8d,r9d
MassEffectAndromeda.exe+51F5461 - 0F84 AE000000 - je MassEffectAndromeda.exe+51F5515
MassEffectAndromeda.exe+51F5467 - 8B 17 - mov edx,[rdi]
MassEffectAndromeda.exe+51F5469 - 44 89 C9 - mov ecx,r9d
MassEffectAndromeda.exe+51F546C - 29 D1 - sub ecx,edx
MassEffectAndromeda.exe+51F546E - 41 39 C8 - cmp r8d,ecx
MassEffectAndromeda.exe+51F5471 - 72 0F - jb MassEffectAndromeda.exe+51F5482
MassEffectAndromeda.exe+51F5473 - 8B 47 04 - mov eax,[rdi+04]
+if anyone interested, i'm using some small code's for unl.boost and unl.nomad boost (it's could be based on another one's searches but it optimized with inj.point and just more simplest)
jetpack
Code: Select all
[ENABLE]
aobscanmodule(jetpackAOB,MassEffectAndromeda.exe,74 11 F3 0F 10 XX XX XX 00 00 EB 0F)
registersymbol(jetpackAOB)
//
jetpackAOB+A:
db EB 33
[DISABLE]
jetpackAOB+A:
db EB 0F
unregistersymbol(jetpackAOB)
nomad boost
Code: Select all
[ENABLE]
aobscanmodule(MYnomadboostAOB,MassEffectAndromeda.exe,75 06 41 XX XX XX 77 05 F3)
registersymbol(MYnomadboostAOB)
//
MYnomadboostAOB:
db 74 06
[DISABLE]
MYnomadboostAOB:
db 75 06
unregistersymbol(MYnomadboostAOB)