[REQ] The Bard's Tale IV: Barrows Deep

[bloodfayte]

Here we go this is a better script, just had to add in a few extra nops when using the opcode above the other and this keeps that jump from being carried to allocated memory. Thank you very much for the assistance Tim, I never even thought about that

Bards Tale IV: Barrows Deep:
Inf Health with One Hits Kill

Code: Select all

[ENABLE]

aobscanmodule(god3,BardsTale4-Win64-Shipping.exe,41 03 8F 98 01 00 00)
alloc(newmem,$1000,god3)

label(code)
label(return)

newmem:
add ecx,[r15+00000198]
cmp [r15+48],00
jne code
mov rax,rcx
mov [r15+5C],eax
  jmp return

code:
  mov [r15+5C],00 // replace 00 with eax for normal damage
  jmp return

god3:
  jmp newmem
  nop
  nop
  nop
  nop
  nop
  nop
return:
registersymbol(god3)

[DISABLE]

god3:
  db 41 03 8F 98 01 00 00 41 89 47 5C

unregistersymbol(god3)
dealloc(newmem)