[COMPLETED] Mortal Kombat 11

Archangel73337 · Post by **Archangel73337** » Fri Apr 26, 2019 9:54 am

Hi guys, I'm almost finished my script creation which will give Red Hearts, Green Souls and Gold Koins. But I need help.
Red Heart script is working flawlessly, but Green Souls and Gold Koins scripts need little correction.
Anyone here can tell me how to do negative value with (int) type, because when I set -9999999 it's just set maximum value for chests and lock them to unlock.

Thanks in advance.

KS212 · Post by **KS212** » Fri Apr 26, 2019 10:12 am

Stalker4589 wrote: ↑
Fri Apr 26, 2019 9:44 am

SunBeam wrote: ↑
Fri Apr 26, 2019 8:31 am
The location I told Tim to check a few posts ago does work. It's run on any type of intractable item in the Krypt. Only when you are in range.

MK11.exe+8E5DD1F

BR,
Sun
Hey Sun

I'm looking for a way to give myself an item. Specifically

ForgeMaterial_ShinnokEye

ShinnokEye=Ensorcelled Eye of a Dragon

This item seems bugged as i've done everything and still unable to get it and require it to progress. Any and all help would be appreciated if it's possible to hack it in or add it to a chest or something

You're stuck on that one too eh? Supposedly you get it from smacking the spiders in D'Vorah's stage area but I've smacked the bastards for an hour now with no eye...

EDIT: Ok apparently everyone on PC will have this issue... Maybe we should wait for the patch to drop first before trying.

DeaDHeaD · Post by **DeaDHeaD** » Fri Apr 26, 2019 10:14 am

Archangel73337 wrote: ↑
Fri Apr 26, 2019 9:54 am
Hi guys, I'm almost finished my script creation which will give Red Hearts, Green Souls and Gold Koins. But I need help.
Red Heart script is working flawlessly, but Green Souls and Gold Koins scripts need little correction.
Anyone here can tell me how to do negative value with (int) type, because when I set -9999999 it's just set maximum value for chests and lock them to unlock.

Thanks in advance.

Try to set not -9999999, but 4284967237. Perhaps this will work.

Archangel73337 · Post by **Archangel73337** » Fri Apr 26, 2019 10:21 am

DeaDHeaD wrote: ↑
Fri Apr 26, 2019 10:14 am

Archangel73337 wrote: ↑
Fri Apr 26, 2019 9:54 am
Hi guys, I'm almost finished my script creation which will give Red Hearts, Green Souls and Gold Koins. But I need help.
Red Heart script is working flawlessly, but Green Souls and Gold Koins scripts need little correction.
Anyone here can tell me how to do negative value with (int) type, because when I set -9999999 it's just set maximum value for chests and lock them to unlock.

Thanks in advance.
Try to set not -9999999, but 4284967237. Perhaps this will work.

Did it already, doesn't work, it's show you 1 332 231 449 and lock icon, you can't open chest.
I even tried to convert value to HEX but it also doesn't help.

Stalker4589 · Post by **Stalker4589** » Fri Apr 26, 2019 10:25 am

KS212 wrote: ↑
Fri Apr 26, 2019 10:12 am

Stalker4589 wrote: ↑
Fri Apr 26, 2019 9:44 am

SunBeam wrote: ↑
Fri Apr 26, 2019 8:31 am
The location I told Tim to check a few posts ago does work. It's run on any type of intractable item in the Krypt. Only when you are in range.

MK11.exe+8E5DD1F

BR,
Sun
Hey Sun

I'm looking for a way to give myself an item. Specifically

ForgeMaterial_ShinnokEye

ShinnokEye=Ensorcelled Eye of a Dragon

This item seems bugged as i've done everything and still unable to get it and require it to progress. Any and all help would be appreciated if it's possible to hack it in or add it to a chest or something
You're stuck on that one too eh? Supposedly you get it from smacking the spiders in D'Vorah's stage area but I've smacked the bastards for an hour now with no eye...

EDIT: Ok apparently everyone on PC will have this issue... Maybe we should wait for the patch to drop first before trying.

Oh Yikes really?

Post by **SunBeam** » Fri Apr 26, 2019 10:34 am

This is where the console would've been helpful. You can use the summon command to create _C type objects in UE4. Think I've seen it in 3 as well. Will check after the 1st of May. Till then I'm on vacation

TimFun13 · Post by **TimFun13** » Fri Apr 26, 2019 11:20 am

Here's a Krypt unlocker based on SunBeams findings.
This will Unlock all chests and doors and set the chest cost to 1 for all types, but you have to approach the chest twice to see the change. But there is something that resets some of the chests when I reloaded the game and it doesn't work on those.

Code: Select all

{
	Process			: MK11.exe  -  (x64)
	Module			: MK11.exe
	Game Title		: MK11
	Game Version	: 1.0.0.0
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 04/26/19
	Author			: ShyTwig16
	Name			: KryptChestCheckHook

	Krypt Chest Check Hook
}

{$STRICT}

define(address, MK11.exe+8E5DD1F)
define(bytes, 83 BB 28 04 00 00 FF)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobKryptChestCheckHook, MK11.exe, F7xxxxxxxxxxxxxxxxxx0F85xxxxxxxx83xxxxxxxxxxxx74xx83xxxxxxxxxxxx74xx83xxxxxxxxxxxx0F85xxxxxxxx83xxxxxxxxxxxx0F85xxxxxxxx83)
define(injKryptChestCheckHook, aobKryptChestCheckHook+10)
assert(injKryptChestCheckHook, bytes)
registerSymbol(injKryptChestCheckHook)

alloc(memKryptChestCheckHook, 0x400, injKryptChestCheckHook)

label(ptrKryptChestCheckHook)
registerSymbol(ptrKryptChestCheckHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memKryptChestCheckHook:
	ptrKryptChestCheckHook:
		dq 0
	align 10 CC
	n_code:
		push rax
		mov [ptrKryptChestCheckHook],rbx
		or byte ptr [rbx+D0],08
		cmp dword ptr [rbx+488],00
		je @f
			mov dword ptr [rbx+488],01
			jmp o_code
		@@:
		cmp dword ptr [rbx+4B8],00
		je @f
			mov dword ptr [rbx+4B8],01
			jmp o_code
		@@:
		mov rax,[rbx+1C8]
		test rax,rax
		jz o_code
			cmp dword ptr [rax+10],00
			je @f
				mov dword ptr [rax+10],01
				jmp o_code
			@@:
	o_code:
		cmp dword ptr [rbx+00000428],-01
	exit:
		pop rax
		jmp return


////
//// ---------- Injection Point ----------
injKryptChestCheckHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injKryptChestCheckHook:
	db bytes

unregisterSymbol(injKryptChestCheckHook)

unregisterSymbol(ptrKryptChestCheckHook)

dealloc(memKryptChestCheckHook)

{
//// Injection Point: MK11.exe+8E5DD1F  -  0000000148E5DD1F
//// AOB address: 0000000148E5DD0F  -  MK11.exe+8E5DD0F
//// Process: MK11.exe  -  0000000140000000
//// Module: MK11.exe  -  0000000140000000
//// Module Size: 0000000017EBE000
MK11.exe+8E5DCCE:  48 8B 0C 24                 -  mov rcx,[rsp]                      
MK11.exe+8E5DCD2:  48 8D 64 24 08              -  lea rsp,[rsp+08]                   
MK11.exe+8E5DCD7:  9D                          -  popfq                              
MK11.exe+8E5DCD8:  53                          -  push rbx                           
MK11.exe+8E5DCD9:  48 8D 1D F0DF2101           -  lea rbx,[14A07BCD0]                [245C8948]
MK11.exe+8E5DCE0:  48 87 1C 24                 -  xchg [rsp],rbx                     
MK11.exe+8E5DCE4:  C3                          -  ret                                
MK11.exe+8E5DCE5:  4C 8D 3D B03B5C0E           -  lea r15,[15742189C]                [8D4C3289]
MK11.exe+8E5DCEC:  41 FF E3                    -  jmp r11                            
MK11.exe+8E5DCEF:  3D 48894C24                 -  cmp eax,244C8948                   [(float)-0.0304]
MK11.exe+8E5DCF4:  08 53 48                    -  or [rbx+48],dl                     
MK11.exe+8E5DCF7:  83 EC 70                    -  sub esp,70                         
MK11.exe+8E5DCFA:  48 89 CB                    -  mov rbx,rcx                        
MK11.exe+8E5DCFD:  31 D2                       -  xor edx,edx                        
MK11.exe+8E5DCFF:  31 C9                       -  xor ecx,ecx                        
MK11.exe+8E5DD01:  E8 3AB25DF7                 -  call 140438F40                     
MK11.exe+8E5DD06:  48 85 C0                    -  test rax,rax                       
MK11.exe+8E5DD09:  0F84 47050000               -  je 148E5E256                       
MK11.exe+8E5DD0F:  F7 83 D0000000 00000200     -  test [rbx+000000D0],20000          <<<--- AOB Starts Here
MK11.exe+8E5DD19:  0F85 37050000               -  jne 148E5E256                      
////  INJECTING START  ----------------------------------------------------------
MK11.exe+8E5DD1F:  83 BB 28040000 FF           -  cmp dword ptr [rbx+00000428],-01   
////  INJECTING END  ----------------------------------------------------------
MK11.exe+8E5DD26:  74 30                       -  je 148E5DD58                       
MK11.exe+8E5DD28:  83 BB 58040000 FF           -  cmp dword ptr [rbx+00000458],-01   
MK11.exe+8E5DD2F:  74 27                       -  je 148E5DD58                       
MK11.exe+8E5DD31:  83 BB 88040000 00           -  cmp dword ptr [rbx+00000488],00    
MK11.exe+8E5DD38:  0F85 18050000               -  jne 148E5E256                      
MK11.exe+8E5DD3E:  83 BB B8040000 00           -  cmp dword ptr [rbx+000004B8],00    
MK11.exe+8E5DD45:  0F85 0B050000               -  jne 148E5E256                      
MK11.exe+8E5DD4B:  83 BB E8040000 00           -  cmp dword ptr [rbx+000004E8],00    
MK11.exe+8E5DD52:  0F85 FE040000               -  jne 148E5E256                      
MK11.exe+8E5DD58:  48 89 6C 24 68              -  mov [rsp+68],rbp                   
MK11.exe+8E5DD5D:  48 8B 2D 1C5320FA           -  mov rbp,[143063080]                [74E4B940]
MK11.exe+8E5DD64:  48 89 AC 24 98000000        -  mov [rsp+00000098],rbp             
MK11.exe+8E5DD6C:  48 85 ED                    -  test rbp,rbp                       
MK11.exe+8E5DD6F:  0F84 DC040000               -  je 148E5E251                       
MK11.exe+8E5DD75:  48 89 D9                    -  mov rcx,rbx                        
MK11.exe+8E5DD78:  E8 D3EB98F7                 -  call 1407EC950                     
MK11.exe+8E5DD7D:  83 F8 05                    -  cmp eax,05                         
MK11.exe+8E5DD80:  0F84 CB040000               -  je 148E5E251                       
MK11.exe+8E5DD86:  48 83 BB C8010000 00        -  cmp qword ptr [rbx+000001C8],00    
MK11.exe+8E5DD8E:  0F85 BD040000               -  jne 148E5E251                      
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

If you want it to only approach the chest once use this script as well.

Code: Select all

{
	Process			: MK11.exe  -  (x64)
	Module			: MK11.exe
	Game Title		: MK11
	Game Version	: 1.0.0.0
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 04/25/19
	Author			: ShyTwig16
	Name			: KryptChestReadHook

	Krypt Chest Read Hook
}

{$STRICT}

define(address, MK11.exe+8E87480)
define(bytes, 8B 96 88 04 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobKryptChestReadHook, MK11.exe, 48xxxxFFxx8Bxxxxxxxxxx8Bxxxxxxxxxx8Bxxxxxxxxxx41xxxxxx75)
define(injKryptChestReadHook, aobKryptChestReadHook+5)
assert(injKryptChestReadHook, bytes)
registerSymbol(injKryptChestReadHook)

alloc(memKryptChestReadHook, 0x400, injKryptChestReadHook)

label(intKryptChestReadHook)
registerSymbol(intKryptChestReadHook)

label(ptrKryptChestReadHook)
registerSymbol(ptrKryptChestReadHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memKryptChestReadHook:
	intKryptChestReadHook:
		dd (int)1
	align 10
	ptrKryptChestReadHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrKryptChestReadHook],rsi
		mov edx,[intKryptChestReadHook]
		cmp dword ptr [rsi+488],00
		je @f
			mov [rsi+488],edx
			jmp o_code
		@@:
		cmp dword ptr [rsi+4B8],00
		je @f
			mov [rsi+4B8],edx
			jmp o_code
		@@:
	o_code:
		mov edx,[rsi+00000488]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injKryptChestReadHook:
	jmp n_code
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injKryptChestReadHook:
	db bytes

unregisterSymbol(injKryptChestReadHook)

unregisterSymbol(intKryptChestReadHook)

unregisterSymbol(ptrKryptChestReadHook)

dealloc(memKryptChestReadHook)

{
//// Injection Point: MK11.exe+8E87480  -  0000000148E87480
//// AOB address: 0000000148E8747B  -  MK11.exe+8E8747B
//// Process: MK11.exe  -  0000000140000000
//// Module: MK11.exe  -  0000000140000000
//// Module Size: 0000000017EBE000
MK11.exe+8E87439:  C1 E8 0F                    -  shr eax,0F                         
MK11.exe+8E8743C:  F6 D0                       -  not al                             
MK11.exe+8E8743E:  24 01                       -  and al,01                          
MK11.exe+8E87440:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
MK11.exe+8E87445:  48 8B 74 24 38              -  mov rsi,[rsp+38]                   
MK11.exe+8E8744A:  48 83 C4 20                 -  add rsp,20                         
MK11.exe+8E8744E:  5F                          -  pop rdi                            
MK11.exe+8E8744F:  C3                          -  ret                                
MK11.exe+8E87450:  48 89 F1                    -  mov rcx,rsi                        
MK11.exe+8E87453:  E8 383C96F7                 -  call 1407EB090                     
MK11.exe+8E87458:  41 89 C0                    -  mov r8d,eax                        
MK11.exe+8E8745B:  FF C8                       -  dec eax                            
MK11.exe+8E8745D:  83 F8 16                    -  cmp eax,16                         
MK11.exe+8E87460:  77 1E                       -  ja 148E87480                       
MK11.exe+8E87462:  48 63 C8                    -  movsxd  rcx,eax                    
MK11.exe+8E87465:  48 8D 05 948B17F7           -  lea rax,[140000000]                [00905A4D]
MK11.exe+8E8746C:  0FB6 8C 08 4CBE7E00         -  movzx ecx,byte ptr [rax+rcx+007EBE4C]
MK11.exe+8E87474:  8B 94 88 44BE7E00           -  mov edx,[rax+rcx*4+007EBE44]       
MK11.exe+8E8747B:  48 01 C2                    -  add rdx,rax                        <<<--- AOB Starts Here
MK11.exe+8E8747E:  FF E2                       -  jmp rdx                            
////  INJECTING START  ----------------------------------------------------------
MK11.exe+8E87480:  8B 96 88040000              -  mov edx,[rsi+00000488]             
////  INJECTING END  ----------------------------------------------------------
MK11.exe+8E87486:  8B 8E B8040000              -  mov ecx,[rsi+000004B8]             
MK11.exe+8E8748C:  8B 86 E8040000              -  mov eax,[rsi+000004E8]             
MK11.exe+8E87492:  41 83 F8 0C                 -  cmp r8d,0C                         
MK11.exe+8E87496:  75 3C                       -  jne 148E874D4                      
MK11.exe+8E87498:  85 C9                       -  test ecx,ecx                       
MK11.exe+8E8749A:  7E 1A                       -  jle 148E874B6                      
MK11.exe+8E8749C:  C7 07 02000000              -  mov [rdi],00000002                 
MK11.exe+8E874A2:  B0 01                       -  mov al,01                          
MK11.exe+8E874A4:  89 0B                       -  mov [rbx],ecx                      
MK11.exe+8E874A6:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
MK11.exe+8E874AB:  48 8B 74 24 38              -  mov rsi,[rsp+38]                   
MK11.exe+8E874B0:  48 83 C4 20                 -  add rsp,20                         
MK11.exe+8E874B4:  5F                          -  pop rdi                            
MK11.exe+8E874B5:  C3                          -  ret                                
MK11.exe+8E874B6:  85 C0                       -  test eax,eax                       
MK11.exe+8E874B8:  7E 24                       -  jle 148E874DE                      
MK11.exe+8E874BA:  C7 07 03000000              -  mov [rdi],00000003                 
MK11.exe+8E874C0:  89 03                       -  mov [rbx],eax                      
MK11.exe+8E874C2:  B0 01                       -  mov al,01                          
MK11.exe+8E874C4:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

SunBeam wrote: ↑
Fri Apr 26, 2019 10:34 am
...Till then I'm on vacation

Have fun, where you going this time?

EDIT:
Does anyone know what this chest is?
[Link]
[Link]

Lemonforce · Post by **Lemonforce** » Fri Apr 26, 2019 11:34 am

ShyTwig16 wrote: ↑

Fri Apr 26, 2019 11:20 am

Here's a Krypt unlocker based on SunBeams findings.
This will Unlock all chests and doors and set the chest cost to 1 for all types, but you have to approach the chest twice to see the change. But there is something that resets some of the chests when I reloaded the game and it doesn't work on those.

Code: Select all

{
	Process			: MK11.exe  -  (x64)
	Module			: MK11.exe
	Game Title		: MK11
	Game Version	: 1.0.0.0
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 04/26/19
	Author			: ShyTwig16
	Name			: KryptChestCheckHook

	Krypt Chest Check Hook
}

{$STRICT}

define(address, MK11.exe+8E5DD1F)
define(bytes, 83 BB 28 04 00 00 FF)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobKryptChestCheckHook, MK11.exe, F7xxxxxxxxxxxxxxxxxx0F85xxxxxxxx83xxxxxxxxxxxx74xx83xxxxxxxxxxxx74xx83xxxxxxxxxxxx0F85xxxxxxxx83xxxxxxxxxxxx0F85xxxxxxxx83)
define(injKryptChestCheckHook, aobKryptChestCheckHook+10)
assert(injKryptChestCheckHook, bytes)
registerSymbol(injKryptChestCheckHook)

alloc(memKryptChestCheckHook, 0x400, injKryptChestCheckHook)

label(ptrKryptChestCheckHook)
registerSymbol(ptrKryptChestCheckHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memKryptChestCheckHook:
	ptrKryptChestCheckHook:
		dq 0
	align 10 CC
	n_code:
		push rax
		mov [ptrKryptChestCheckHook],rbx
		or byte ptr [rbx+D0],08
		cmp dword ptr [rbx+488],00
		je @f
			mov dword ptr [rbx+488],01
			jmp o_code
		@@:
		cmp dword ptr [rbx+4B8],00
		je @f
			mov dword ptr [rbx+4B8],01
			jmp o_code
		@@:
		mov rax,[rbx+1C8]
		test rax,rax
		jz o_code
			cmp dword ptr [rax+10],00
			je @f
				mov dword ptr [rax+10],01
				jmp o_code
			@@:
	o_code:
		cmp dword ptr [rbx+00000428],-01
	exit:
		pop rax
		jmp return


////
//// ---------- Injection Point ----------
injKryptChestCheckHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injKryptChestCheckHook:
	db bytes

unregisterSymbol(injKryptChestCheckHook)

unregisterSymbol(ptrKryptChestCheckHook)

dealloc(memKryptChestCheckHook)

{
//// Injection Point: MK11.exe+8E5DD1F  -  0000000148E5DD1F
//// AOB address: 0000000148E5DD0F  -  MK11.exe+8E5DD0F
//// Process: MK11.exe  -  0000000140000000
//// Module: MK11.exe  -  0000000140000000
//// Module Size: 0000000017EBE000
MK11.exe+8E5DCCE:  48 8B 0C 24                 -  mov rcx,[rsp]                      
MK11.exe+8E5DCD2:  48 8D 64 24 08              -  lea rsp,[rsp+08]                   
MK11.exe+8E5DCD7:  9D                          -  popfq                              
MK11.exe+8E5DCD8:  53                          -  push rbx                           
MK11.exe+8E5DCD9:  48 8D 1D F0DF2101           -  lea rbx,[14A07BCD0]                [245C8948]
MK11.exe+8E5DCE0:  48 87 1C 24                 -  xchg [rsp],rbx                     
MK11.exe+8E5DCE4:  C3                          -  ret                                
MK11.exe+8E5DCE5:  4C 8D 3D B03B5C0E           -  lea r15,[15742189C]                [8D4C3289]
MK11.exe+8E5DCEC:  41 FF E3                    -  jmp r11                            
MK11.exe+8E5DCEF:  3D 48894C24                 -  cmp eax,244C8948                   [(float)-0.0304]
MK11.exe+8E5DCF4:  08 53 48                    -  or [rbx+48],dl                     
MK11.exe+8E5DCF7:  83 EC 70                    -  sub esp,70                         
MK11.exe+8E5DCFA:  48 89 CB                    -  mov rbx,rcx                        
MK11.exe+8E5DCFD:  31 D2                       -  xor edx,edx                        
MK11.exe+8E5DCFF:  31 C9                       -  xor ecx,ecx                        
MK11.exe+8E5DD01:  E8 3AB25DF7                 -  call 140438F40                     
MK11.exe+8E5DD06:  48 85 C0                    -  test rax,rax                       
MK11.exe+8E5DD09:  0F84 47050000               -  je 148E5E256                       
MK11.exe+8E5DD0F:  F7 83 D0000000 00000200     -  test [rbx+000000D0],20000          <<<--- AOB Starts Here
MK11.exe+8E5DD19:  0F85 37050000               -  jne 148E5E256                      
////  INJECTING START  ----------------------------------------------------------
MK11.exe+8E5DD1F:  83 BB 28040000 FF           -  cmp dword ptr [rbx+00000428],-01   
////  INJECTING END  ----------------------------------------------------------
MK11.exe+8E5DD26:  74 30                       -  je 148E5DD58                       
MK11.exe+8E5DD28:  83 BB 58040000 FF           -  cmp dword ptr [rbx+00000458],-01   
MK11.exe+8E5DD2F:  74 27                       -  je 148E5DD58                       
MK11.exe+8E5DD31:  83 BB 88040000 00           -  cmp dword ptr [rbx+00000488],00    
MK11.exe+8E5DD38:  0F85 18050000               -  jne 148E5E256                      
MK11.exe+8E5DD3E:  83 BB B8040000 00           -  cmp dword ptr [rbx+000004B8],00    
MK11.exe+8E5DD45:  0F85 0B050000               -  jne 148E5E256                      
MK11.exe+8E5DD4B:  83 BB E8040000 00           -  cmp dword ptr [rbx+000004E8],00    
MK11.exe+8E5DD52:  0F85 FE040000               -  jne 148E5E256                      
MK11.exe+8E5DD58:  48 89 6C 24 68              -  mov [rsp+68],rbp                   
MK11.exe+8E5DD5D:  48 8B 2D 1C5320FA           -  mov rbp,[143063080]                [74E4B940]
MK11.exe+8E5DD64:  48 89 AC 24 98000000        -  mov [rsp+00000098],rbp             
MK11.exe+8E5DD6C:  48 85 ED                    -  test rbp,rbp                       
MK11.exe+8E5DD6F:  0F84 DC040000               -  je 148E5E251                       
MK11.exe+8E5DD75:  48 89 D9                    -  mov rcx,rbx                        
MK11.exe+8E5DD78:  E8 D3EB98F7                 -  call 1407EC950                     
MK11.exe+8E5DD7D:  83 F8 05                    -  cmp eax,05                         
MK11.exe+8E5DD80:  0F84 CB040000               -  je 148E5E251                       
MK11.exe+8E5DD86:  48 83 BB C8010000 00        -  cmp qword ptr [rbx+000001C8],00    
MK11.exe+8E5DD8E:  0F85 BD040000               -  jne 148E5E251                      
//// Template: I2CEA_AOBFullInjectionWithValues
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

If you want it to only approach the chest once use this script as well.

Code: Select all

{
	Process			: MK11.exe  -  (x64)
	Module			: MK11.exe
	Game Title		: MK11
	Game Version	: 1.0.0.0
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 04/25/19
	Author			: ShyTwig16
	Name			: KryptChestReadHook

	Krypt Chest Read Hook
}

{$STRICT}

define(address, MK11.exe+8E87480)
define(bytes, 8B 96 88 04 00 00)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobKryptChestReadHook, MK11.exe, 48xxxxFFxx8Bxxxxxxxxxx8Bxxxxxxxxxx8Bxxxxxxxxxx41xxxxxx75)
define(injKryptChestReadHook, aobKryptChestReadHook+5)
assert(injKryptChestReadHook, bytes)
registerSymbol(injKryptChestReadHook)

alloc(memKryptChestReadHook, 0x400, injKryptChestReadHook)

label(intKryptChestReadHook)
registerSymbol(intKryptChestReadHook)

label(ptrKryptChestReadHook)
registerSymbol(ptrKryptChestReadHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memKryptChestReadHook:
	intKryptChestReadHook:
		dd (int)1
	align 10
	ptrKryptChestReadHook:
		dq 0
	align 10 CC
	n_code:
		mov [ptrKryptChestReadHook],rsi
		mov edx,[intKryptChestReadHook]
		cmp dword ptr [rsi+488],00
		je @f
			mov [rsi+488],edx
			jmp o_code
		@@:
		cmp dword ptr [rsi+4B8],00
		je @f
			mov [rsi+4B8],edx
			jmp o_code
		@@:
	o_code:
		mov edx,[rsi+00000488]
	exit:
		jmp return


////
//// ---------- Injection Point ----------
injKryptChestReadHook:
	jmp n_code
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injKryptChestReadHook:
	db bytes

unregisterSymbol(injKryptChestReadHook)

unregisterSymbol(intKryptChestReadHook)

unregisterSymbol(ptrKryptChestReadHook)

dealloc(memKryptChestReadHook)

{
//// Injection Point: MK11.exe+8E87480  -  0000000148E87480
//// AOB address: 0000000148E8747B  -  MK11.exe+8E8747B
//// Process: MK11.exe  -  0000000140000000
//// Module: MK11.exe  -  0000000140000000
//// Module Size: 0000000017EBE000
MK11.exe+8E87439:  C1 E8 0F                    -  shr eax,0F                         
MK11.exe+8E8743C:  F6 D0                       -  not al                             
MK11.exe+8E8743E:  24 01                       -  and al,01                          
MK11.exe+8E87440:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
MK11.exe+8E87445:  48 8B 74 24 38              -  mov rsi,[rsp+38]                   
MK11.exe+8E8744A:  48 83 C4 20                 -  add rsp,20                         
MK11.exe+8E8744E:  5F                          -  pop rdi                            
MK11.exe+8E8744F:  C3                          -  ret                                
MK11.exe+8E87450:  48 89 F1                    -  mov rcx,rsi                        
MK11.exe+8E87453:  E8 383C96F7                 -  call 1407EB090                     
MK11.exe+8E87458:  41 89 C0                    -  mov r8d,eax                        
MK11.exe+8E8745B:  FF C8                       -  dec eax                            
MK11.exe+8E8745D:  83 F8 16                    -  cmp eax,16                         
MK11.exe+8E87460:  77 1E                       -  ja 148E87480                       
MK11.exe+8E87462:  48 63 C8                    -  movsxd  rcx,eax                    
MK11.exe+8E87465:  48 8D 05 948B17F7           -  lea rax,[140000000]                [00905A4D]
MK11.exe+8E8746C:  0FB6 8C 08 4CBE7E00         -  movzx ecx,byte ptr [rax+rcx+007EBE4C]
MK11.exe+8E87474:  8B 94 88 44BE7E00           -  mov edx,[rax+rcx*4+007EBE44]       
MK11.exe+8E8747B:  48 01 C2                    -  add rdx,rax                        <<<--- AOB Starts Here
MK11.exe+8E8747E:  FF E2                       -  jmp rdx                            
////  INJECTING START  ----------------------------------------------------------
MK11.exe+8E87480:  8B 96 88040000              -  mov edx,[rsi+00000488]             
////  INJECTING END  ----------------------------------------------------------
MK11.exe+8E87486:  8B 8E B8040000              -  mov ecx,[rsi+000004B8]             
MK11.exe+8E8748C:  8B 86 E8040000              -  mov eax,[rsi+000004E8]             
MK11.exe+8E87492:  41 83 F8 0C                 -  cmp r8d,0C                         
MK11.exe+8E87496:  75 3C                       -  jne 148E874D4                      
MK11.exe+8E87498:  85 C9                       -  test ecx,ecx                       
MK11.exe+8E8749A:  7E 1A                       -  jle 148E874B6                      
MK11.exe+8E8749C:  C7 07 02000000              -  mov [rdi],00000002                 
MK11.exe+8E874A2:  B0 01                       -  mov al,01                          
MK11.exe+8E874A4:  89 0B                       -  mov [rbx],ecx                      
MK11.exe+8E874A6:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
MK11.exe+8E874AB:  48 8B 74 24 38              -  mov rsi,[rsp+38]                   
MK11.exe+8E874B0:  48 83 C4 20                 -  add rsp,20                         
MK11.exe+8E874B4:  5F                          -  pop rdi                            
MK11.exe+8E874B5:  C3                          -  ret                                
MK11.exe+8E874B6:  85 C0                       -  test eax,eax                       
MK11.exe+8E874B8:  7E 24                       -  jle 148E874DE                      
MK11.exe+8E874BA:  C7 07 03000000              -  mov [rdi],00000003                 
MK11.exe+8E874C0:  89 03                       -  mov [rbx],eax                      
MK11.exe+8E874C2:  B0 01                       -  mov al,01                          
MK11.exe+8E874C4:  48 8B 5C 24 30              -  mov rbx,[rsp+30]                   
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

SunBeam wrote: ↑
Fri Apr 26, 2019 10:34 am
...Till then I'm on vacation

Have fun, where you going this time?

EDIT:
Does anyone know what this chest is?
[Link]
[Link]

To make those chests openable you have to find these hanging fire lantern things and hit them with Scorpion's chain then go and find the corresponding chest.

sixonesix · Post by **sixonesix** » Fri Apr 26, 2019 11:48 am

Hey everyone, I've made a profile only to talk in this topic :^)
So, as some people here said, there is a problem with finding Ensorcelled Eye of a Dragon on PC, and I have the same problem :^(

ShyTwig16 wrote: ↑
Fri Apr 26, 2019 11:20 am
This will Unlock all chests and doors

There is one more door need to be unlocked. Just at the starting point, behind you, there is a door in Shang Tsung house that unlocks only when you put all the heads on the spikes at the Warrior Shrine. As I think, you get the head when you perform some number of fatalities and\or brutalities ON that character. Like, if you want head of Jax, you need to fatality him, some people say, 50 times. Maybe there is a way to bypass this grindy mechanics, and get all the heads, or just unlock the door? Thanks!
UPD: Oh, and I fogrot, there is also one more door that unlocks with 3 amulets, down at the Kytinn Hive.

Hyoga · Post by **Hyoga** » Fri Apr 26, 2019 12:13 pm

Any chance of having a table created for our use?

KS212 · Post by **KS212** » Fri Apr 26, 2019 12:23 pm

ShyTwig16 wrote: ↑
Fri Apr 26, 2019 11:20 am

Does anyone know what this chest is?

You need to play until you get Scorpion's Spear key item that allows you to pull distant objects. Then somewhere reasonably near the flaming chest will be a flaming lantern. It will not always be IMMEDIATELY near, you may have to explore around the general area to find it. Pull down the lantern to put out the fire, then you can open it.

TimFun13 · Post by **TimFun13** » Fri Apr 26, 2019 12:28 pm

My table is posted here: viewtopic.php?f=4&t=9291

Lemonforce wrote: ↑
Fri Apr 26, 2019 11:34 am
...
To make those chests openable you have to find these hanging fire lantern things and hit them with Scorpion's chain then go and find the corresponding chest.

KS212 wrote: ↑
Fri Apr 26, 2019 12:23 pm
...
You need to play until you get Scorpion's Spear key item that allows you to pull distant objects. Then somewhere reasonably near the flaming chest will be a flaming lantern. It will not always be IMMEDIATELY near, you may have to explore around the general area to find it. Pull down the lantern to put out the fire, then you can open it.

Thanks. I'll have to find Scorpion's chain, don't have that yet.

Hyoga wrote: ↑
Fri Apr 26, 2019 12:13 pm
Any chance of having a table created for our use?

Yes.

sixonesix wrote: ↑
Fri Apr 26, 2019 11:48 am
...
UPD: Oh, and I fogrot, there is also one more door that unlocks with 3 amulets, down at the Kytinn Hive.

Try the table I posted you'll need to align the wheels but it will allow you to activate the unlock without the amulets.

Wibblecakes · Post by **Wibblecakes** » Fri Apr 26, 2019 1:59 pm

SunBeam wrote: ↑
Fri Apr 26, 2019 7:04 am
Tim's script and all of my explanations remove the need to do scans. See my video above. I'm showing all 3 types: Koin, Ermac and Heart chests. No idea why you're fixed on tedious methods. Maybe because you can't seem to accommodate to advanced techniques? Even if shown in a video?.. In today's games, if you go like "someone said the address is 4xxxxxxxxx", considering the engines dynamically allocate memory, you show 2 things: you don't understand what's really going on and that you bluntly follow someone's directions without thinking "why am I doing this like that?".

Dude, chill. You have a pretty severe superiority syndrome mate, get over yourself. Let people do what they want and you just do you. Why do you have to talk down to everyone just because they don't follow the more advanced techniques you use? Stop being so obnoxious towards folks for not being as good at cheat engine as you.

[Link]

Post by **SunBeam** » Fri Apr 26, 2019 2:13 pm

Wibblecakes wrote: ↑
Fri Apr 26, 2019 1:59 pm
as good at cheat engine as you.

I wish it were only Cheat Engine.. that's my problem. Self-sufficiency. Then they're the ones PMing me asking me how to do this and that, how I got to know this much and so on. If in today's world not even a VIDEO with some MEGA pointers in the right direction is considered "obnoxious", then fuck it. I'll just show the conclusion, no more attempts at indirect teachings. I'll keep your name and post in Notepad, so when people ask me why I stopped posting detailed information, I will refer them to just that

Yeah, am sure you'll struggle through the calvary of scanning, editing, crashing, etc. till you drop dead, then wait for days, weeks till someone like Tim spends money from his pocket to buy the game and feed your OCD-istic asses. What does he get in return? "Thanks" in text form? If 15$ for a trainer is much, consider his attitude and what he did when you think of some form of compensation for his work; money isn't always an object (can be a hundred other things).

BR,
Sun

sixonesix · Post by **sixonesix** » Fri Apr 26, 2019 2:20 pm

ShyTwig16 wrote: ↑
Fri Apr 26, 2019 1:16 pm

sixonesix wrote: ↑
Fri Apr 26, 2019 12:53 pm
...
Will there be an update for that? Because I think all cool stuff from Krypt is exactly in Shang Tsung home. At least, someone on YouTube got really cool things there
Spoiler

Yeah, the table is a work in progress; with SunBeams object dumper I should be able to find it.

I found in Sun's NamesDump some things that can be helpful. Here they are:

Spoiler

Code: Select all

Name[001360] TOTAL_KRYPT_HEADS_IMPALED
Name[011021] Default__MK11KryptComponentClimbingData
Name[011022] Default__MK11KryptComponentFatalityHeadData
Name[020420] MK11Unlockable_BarakaFatalityHeadUnlock
Name[020421] MK11Unlockable_CassieFatalityHeadUnlock
Name[020422] MK11Unlockable_CetrionFatalityHeadUnlock
Name[020423] MK11Unlockable_CyberFrostFatalityHeadUnlock
Name[020424] MK11Unlockable_DvorahFatalityHeadUnlock
Name[020425] MK11Unlockable_ErronBlackFatalityHeadUnlock
Name[020426] MK11Unlockable_JacquiFatalityHeadUnlock
Name[020427] MK11Unlockable_JadeFatalityHeadUnlock
Name[020428] MK11Unlockable_JaxFatalityHeadUnlock
Name[020429] MK11Unlockable_JohnnyFatalityHeadUnlock
Name[020430] MK11Unlockable_KabalFatalityHeadUnlock
Name[020431] MK11Unlockable_KanoFatalityHeadUnlock
Name[020444] MK11Unlockable_KitanaFatalityHeadUnlock
Name[020445] MK11Unlockable_KollectorFatalityHeadUnlock
Name[020446] MK11Unlockable_KotalKahnFatalityHeadUnlock
Name[020447] MK11Unlockable_KungLaoFatalityHeadUnlock
Name[020448] MK11Unlockable_LiuKangFatalityHeadUnlock
Name[020449] MK11Unlockable_NoobFatalityHeadUnlock
Name[020450] MK11Unlockable_RaidenFatalityHeadUnlock
Name[020451] MK11Unlockable_ScorpionFatalityHeadUnlock
Name[020452] MK11Unlockable_ShaoKahnFatalityHeadUnlock
Name[020453] MK11Unlockable_SkarletFatalityHeadUnlock
Name[020454] MK11Unlockable_SonyaFatalityHeadUnlock
Name[020455] MK11Unlockable_SubZeroFatalityHeadUnlock
Name[020456] MK11Unlockable_TerminusFatalityHeadUnlock

FearLess Cheat Engine

[COMPLETED] Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Re: Mortal Kombat 11

Who is online