mgr.inz.Player I post too much Reputation: 218 Joined: 07 Nov 2008 Posts: 4438 Location: W kraju nad Wisla. UTC+01:00
|
Posted: Sun Jul 24, 2016 7:49 am Post subject: |
|
|
In official CE651 memory record has "Hotkeylist: TList" at offset 0x48.
In other releases it can change. There is a method to find correct offset for your CE version:
1 start CE, attach CE to itself
2 add one memory record (can be simple address, pointer or AA script)
3 assign few hotkeys to that entry, e.g. three
4 do 4byte scan with value 3
5 assign another hotkey to that entry (or delete), e.g. now you have four
6 do 4byte scan with value 4 (number of currently assigned hotkeys)
7 you will find address of FCount
8 do print( getAddressList()[0] ) you will get address of memory record
9 then use structure spider.
For me it is:
FCount - 09F5AE40
memory record - 0C6B7E40
As you see, this "[[memrec+80]+8]+10" points to FCount and "[memrec+80]+0" points to TList
Address of TList is at "memrec+80"
So, I have to use 0x80 in the script for my current CE version (custom build). _________________ Dark Souls II Item Swap and Item List
My Borderlands2 tables
Recent CheatEngine builds
|
|