Cheat Engine

lamburger

So, I want to make custom spells, and i read that in order to do that, you use a bullet modification table. I have downloaded about 3 different up-to-date Dark Souls 2 tables, but all of the values are just question marks. I ran 3 different types of CE's from a pure version to the latest 6.4 as admin, and the values are STILL question marks. Is this a problem with me, or the tables? I still can't find any up-to-date video tutorials, so i'm stuck doing this by reading a somewhat vague guide that is based around an out-of-date video tutorial. If someone could lead me through the process, it would be MUCH appreciated.

ParkourPenguin · Posted: Tue Dec 01, 2015 8:56 pm Post subject:

I don't think it matters what version of CE you have, as long as it's somewhat recent.
The problem isn't you; it's that the version of your game isn't the same as the version of the game of whoever made the tables.
If you could link to one of the tables, I might be able to pull some information from it. I don't have the game, though, so I probably won't be able to help that much. To link something, modify the link a bit (i.e. replace . with (.)) because I don't think you're allowed to post links until you're around 15 posts.

lamburger · Posted: Tue Dec 01, 2015 9:20 pm Post subject:

http:)//forum).cheatengine.org/viewtopic.php?p=5586568#5586568

Here's the link, appreciate the response. Just remove those parenthesis at http:) and forum).

ParkourPenguin · Posted: Tue Dec 01, 2015 9:48 pm Post subject:

Well, the "Bullet Editor" script only allocates 8 bytes for the address of the base of the structure for a bullet. You're responsible for actually assigning a value to those 8 bytes. If you leave that address's value at 0, then all those other values will always be question marks. Once you assign "Bullet Address to Edit" a valid value (the address of the base structure of a bullet), then the rest of the addresses should populate correctly.

It seems like there's a script under the bullet editor script called "Find Addresses for Last Bullet Used". You might be able to use that script. Just copy the value of the address in that list that pops up under that script (i.e. the value of "Bullet Effect 1"), and paste it into the value of "Bullet Address to Edit".

If that doesn't work, I found this video that might help:
https://www.youtube.com/watch?v=-qW2PPRNtaQ

lamburger · Posted: Tue Dec 01, 2015 10:17 pm Post subject:

I attempted to take your advice and use the "Find Address for Last Bullet Used", though when i click the box to activate the script, it doesn't check it, it just keeps it blank. The script to find the last bullet used that is. I am also unable to check any other scripts on the table except for the "Bullet Editor". I even attempted to look up what the ID for the bullet i was using is and copy paste it into the "Bullet Address to Edit" value, but that makes the values some random numbers that when edited, change nothing. So my problem now is that i am unable to check the Last Bullet Used script to actually find the true ID of my bullet. I have watched the video and tried my best to follow it, but around 0:35 I am told to click the advanced options and click the code in the code list, but i don't have that code to click on.

ParkourPenguin · Posted: Tue Dec 01, 2015 10:42 pm Post subject:

In that case the AoB scan is broken. You probably have a different version of the game than what the table was made for. The video probably won't work either, but since the address of that instruction is static, you can check to make sure.

Right click in CE's disassembler (top half of the memory view), select "Go to address", and paste in DarkSoulsII.exe+3E6702 (I think that's what it says in the video). If the instruction that pops up is the same as the one in the video, then you should be able to still follow it from there. If it isn't, then you can't. You might be able to find it by scanning for its AoB pattern, though:
8A ?? ?? 0F BE ?? 3B ?? 72 0D 84 ?? 78 09 C6 ?? ?? ?? ?? ?? ?? EB 09 D9 ?? ?? D9 ?? ?? ?? ?? ?? 8B ?? ?? F3 0F 10 ?? ?? ?? ?? ?? F3 0F 10 ?? 0F 5A ?? 0F 5A ?? F2 0F 5C
Set the "value type" to AoB and make sure the "Writable" and "Executable" checkboxes are grey. If no results pop up, try taking away a few bytes from the end of that AoB and search again. If some results pop up, check them by checking what addresses that instruction writes to like the video shows.

lamburger · Posted: Tue Dec 01, 2015 11:03 pm Post subject:

I searched the address, but what came up in the video did not come up for me, so that didn't work. I also scanned the AoB pattern as you suggested, but no results, even after removing some bytes from the pattern a few times. Will i just not be able to edit the bullet now due to the only tables i know of not working? I've searched maybe 50 times for a tutorial or new tables, but i just can't find any tables who's scripts work correctly.

ParkourPenguin · Posted: Wed Dec 02, 2015 9:20 am Post subject:

The data exists, so it's certainly possible to edit it. Finding it is the hard part.

You might be able to fix the AoB for the "Find addresses for last bullet used" script. Try scanning for this manually: type:AoB, make sure writable and executable checkboxes are grey (neither checked nor blank).
0F BE ?? ?? 39 ?? ?? ?? ?? ?? 72 0D 84 ?? 78 09 C6 ?? ?? ?? ?? ?? ?? EB

If one result pops up, great. Post the assembly around that area here (right click -> copy to clipboard -> bytes+opcodes).
If no results pop up, try removing some bytes.
If more than one result pops up, bring them down to the cheat table, extend the length of them from 24 to 55 and copy/paste them here.

lamburger · Posted: Wed Dec 02, 2015 9:57 pm Post subject:

I removed bytes until i found some results. Though i don't know what you mean by extending the length from 22 to 55, here they are. I don't know if i am showing this how you want it though, so please correct me if i am wrong.

ParkourPenguin · Posted: Thu Dec 03, 2015 10:14 am Post subject:

By extending the length, I just mean changing the byte length of the Array of Bytes (AoB). If you change the type of an AoB in your cheat table, you'll see a new property called "Length". This is how many bytes it displays in that AoB.
Also, you don't have to copy and paste them directly like that, since most of that information is useless. All I needed was the value of it.
But just from looking through that, I don't think it's there. The game probably had a fairly major update to this section of code that changed the instructions themselves, not just the operands of the instructions.

I found this address in another post: DarkSoulsII.exe+3ED7D2
Go to that address in the disassembler, and if that's "mov al,[edi+2F]", follow the video I linked to earlier from that point on.

If that address doesn't disassemble to "mov al,[edi+2F]", then I'll work on a Lua script to help find it, but it'll probably be a bit until it's ready (I'm somewhat busy right now).

lamburger · Posted: Thu Dec 03, 2015 12:21 pm Post subject:

I checked that in the disassembler, but it leads to mov ch, [edi+61], not mov al,[edi+2F].

lamburger · Posted: Fri Dec 04, 2015 10:41 pm Post subject:

Well, spent most of the day attempting to find bullet addresses that have to do with any type of modification of bullets, but nothing is working.

This is a real problem Confused

ParkourPenguin · Posted: Sat Dec 05, 2015 12:58 pm Post subject:

lamburger · Posted: Sat Dec 05, 2015 3:12 pm Post subject:

I don't see any addresses in my table, i only see "Found AOB's", "AOB 1","AOB 2", and "Plugin Address". Did i do something wrong, or am I supposed to scan those AOB's?

ParkourPenguin · Posted: Sat Dec 05, 2015 3:27 pm Post subject:

"Found AOBs" is a header. You can ignore it.
"AOB 1", "AOB 2", etc. are the addresses. Just copy their addresses and go to them in the disassembler.
"Plugin Address" shouldn't be appearing, I don't know where that came from.
If you don't have CE 6.4, please update to it.