^ It's on a door in Goro's throne room, just to the left of the throne.
And here's what I'm using to hook the coord's, not a great spot I need to find a better one. But it works good for a speed multiplier.
Code: Select all
{
Process : MK11.exe - (x64)
Module : MK11.exe
Game Title : Mortal Kombat 11
Game Version : 1.0.0.0
CE Version : 6.83
Script Version : 0.0.1
Date : 04/28/19
Author : ShyTwig16
Name : CoordHook
Coord Hook
}
{$STRICT}
define(address, MK11.exe+1590F1E5)
define(bytes, 44 0F 58 0F 0F 28 C5)
////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
// aobScanModule(aobCoordHook, MK11.exe, 44xxxxxxxx0F59xx44xxxxxx0F28xx0F15xx0FC6xxxx0F28)
i2aobScanModule(aobCoordHook, MK11.exe, 44xxxxxxxx0F59xx44xxxxxx0F28xx0F15xx0FC6xxxx0F28)
define(injCoordHook, aobCoordHook+8)
// assert(injCoordHook, bytes)
i2assert(injCoordHook, bytes)
registerSymbol(injCoordHook)
alloc(memCoordHook, 0x400, injCoordHook)
label(fltCoordHook)
registerSymbol(fltCoordHook)
label(flgCoordHook)
registerSymbol(flgCoordHook)
label(ptrCoordHook)
registerSymbol(ptrCoordHook)
label(n_code)
label(o_code)
label(exit)
label(return)
memCoordHook:
fltCoordHook:
dd (float)1.5
align 10
dd (float)1.5
dd (float)1.5
dd (float)1.5
dd (float)1
align 10
flgCoordHook:
db 00
align 10
ptrCoordHook:
dq 0
align 10 CC
n_code:
pushfq
mov [ptrCoordHook],rdi
cmp byte ptr [flgCoordHook],0
je o_code
cmp byte ptr [flgCoordHook],1
jne @f
movss xmm0,[fltCoordHook]
movss [fltCoordHook+10],xmm0
movss [fltCoordHook+14],xmm0
movss [fltCoordHook+18],xmm0
mulps xmm9,[fltCoordHook+10]
jmp o_code
@@:
mov byte ptr [flgCoordHook],0
o_code:
addps xmm9,[rdi]
movaps xmm0,xmm5
exit:
popfq
jmp return
{$lua}
I2CETeleporter.WriteToCoordsTimerTicksMax = 20
I2CETeleporter.CoordPointerSymbol = 'ptrCoordHook'
I2CETeleporter.Xoffset = 0x0
I2CETeleporter.Yoffset = 0x8
I2CETeleporter.Zoffset = 0x4
-- I2CETeleporter.WaypointPointerSymbol = ''
-- I2CETeleporter.WayXoffset = 0x
-- I2CETeleporter.WayYoffset = 0x
-- I2CETeleporter.WayZoffset = 0x
-- I2CETeleporter.WayYaddOnRead = 0
{$asm}
////
//// ---------- Injection Point ----------
injCoordHook:
jmp n_code
nop
nop
return:
////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injCoordHook:
db bytes
unregisterSymbol(injCoordHook)
unregisterSymbol(fltCoordHook)
unregisterSymbol(flgCoordHook)
unregisterSymbol(ptrCoordHook)
dealloc(memCoordHook)
{
//// Injection Point: MK11.exe+1590F1E5 - 000000015590F1E5
//// AOB address: 000000015590F1DD - MK11.exe+1590F1DD
//// Process: MK11.exe - 0000000140000000
//// Module: MK11.exe - 0000000140000000
//// Module Size: 0000000018215000
MK11.exe+1590F18B: 0F28 4D 80 - movaps xmm1,[rbp-80]
MK11.exe+1590F18F: 48 89 D9 - mov rcx,rbx
MK11.exe+1590F192: 4C 8B 85 20050000 - mov r8,[rbp+00000520]
MK11.exe+1590F199: 48 89 FA - mov rdx,rdi
MK11.exe+1590F19C: 0F11 4F 70 - movups [rdi+70],xmm1
MK11.exe+1590F1A0: 66 89 47 36 - mov [rdi+36],ax
MK11.exe+1590F1A4: 0F10 57 10 - movups xmm2,[rdi+10]
MK11.exe+1590F1A8: 0F28 3D A14262ED - movaps xmm7,[142F33450] [(float)1.0000]
MK11.exe+1590F1AF: 0F28 DA - movaps xmm3,xmm2
MK11.exe+1590F1B2: 0F28 6D 80 - movaps xmm5,[rbp-80]
MK11.exe+1590F1B6: 0F28 CA - movaps xmm1,xmm2
MK11.exe+1590F1B9: 48 8B 45 A0 - mov rax,[rbp-60]
MK11.exe+1590F1BD: 44 0F28 4C 24 70 - movaps xmm9,[rsp+70]
MK11.exe+1590F1C3: 0FC6 DA FF - shufps xmm3,xmm2,-01
MK11.exe+1590F1C7: 48 C1 E1 05 - shl rcx,05
MK11.exe+1590F1CB: 0F10 40 20 - movups xmm0,[rax+20]
MK11.exe+1590F1CF: 0F59 05 6A4362ED - mulps xmm0,[142F33540] [(float)0.5000]
MK11.exe+1590F1D6: 48 03 8D 18050000 - add rcx,[rbp+00000518]
MK11.exe+1590F1DD: 44 0F59 48 20 - mulps xmm9,[rax+20] <<<--- AOB Starts Here
MK11.exe+1590F1E2: 0F59 E8 - mulps xmm5,xmm0
//// INJECTING START ----------------------------------------------------------
MK11.exe+1590F1E5: 44 0F58 0F - addps xmm9,[rdi]
MK11.exe+1590F1E9: 0F28 C5 - movaps xmm0,xmm5
//// INJECTING END ----------------------------------------------------------
MK11.exe+1590F1EC: 0F15 C7 - unpckhps xmm0,xmm7
MK11.exe+1590F1EF: 0FC6 E8 C4 - shufps xmm5,xmm0,-3C
MK11.exe+1590F1F3: 0F28 C2 - movaps xmm0,xmm2
MK11.exe+1590F1F6: 0FC6 C2 C9 - shufps xmm0,xmm2,-37
MK11.exe+1590F1FA: 0F28 F5 - movaps xmm6,xmm5
MK11.exe+1590F1FD: 0F59 C5 - mulps xmm0,xmm5
MK11.exe+1590F200: 0F28 E5 - movaps xmm4,xmm5
MK11.exe+1590F203: 0FC6 F5 C9 - shufps xmm6,xmm5,-37
MK11.exe+1590F207: 0F59 F2 - mulps xmm6,xmm2
MK11.exe+1590F20A: 0F59 D5 - mulps xmm2,xmm5
MK11.exe+1590F20D: 0FC6 E5 FF - shufps xmm4,xmm5,-01
MK11.exe+1590F211: 0F5C F0 - subps xmm6,xmm0
MK11.exe+1590F214: 0F59 CC - mulps xmm1,xmm4
MK11.exe+1590F217: 0F28 C5 - movaps xmm0,xmm5
MK11.exe+1590F21A: 0F59 E3 - mulps xmm4,xmm3
MK11.exe+1590F21D: 0F59 C3 - mulps xmm0,xmm3
MK11.exe+1590F220: 0FC6 F6 C9 - shufps xmm6,xmm6,-37
MK11.exe+1590F224: 44 0F29 4D C0 - movaps [rbp-40],xmm9
MK11.exe+1590F229: 0F58 F0 - addps xmm6,xmm0
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}