|
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
Revion How do I cheat? Reputation: 0
Joined: 24 Jun 2018 Posts: 1
|
Posted: Mon Jun 25, 2018 8:09 am Post subject: How do I update this ? |
|
|
So I have this table for Warcraft 3 that dosen't work with the latest versions and would like to update the no cooldown script .. but I have no idea how to go about it.
Can someone point me in the right direction ?
Here's the script that I want to update :
Code: | [ENABLE]
alloc( SpellCast, 256, Game.dll )
label( NoManaCost )
label( back_a )
label( NoCooldown )
label( back_b )
SpellCast:
NoManaCost:
push eax
push ecx
mov ecx,edi
call Game.dll+668890
cmp [eax+268],0
pop ecx
pop eax
jne short @f
mov eax,0
jmp back_a
@@:
call [edx+3D4]
jmp back_a
NoCooldown:
push eax
push ecx
mov ecx,edi
call Game.dll+668890
cmp [eax+268],0
pop ecx
pop eax
jne short @f
mov [esp+4],FFFFFFFF
mov [esi+44],0
@@:
call [eax+2EC]
jmp back_b
Game.dll+3DA3DC:
jmp NoManaCost
nop
back_a:
Game.dll+3DA442:
jmp NoCooldown
nop
back_b:
[DISABLE]
Game.dll+3DA3DC:
// FF 92 D4 03 00 00
call [edx+3D4]
Game.dll+3DA442:
// FF 90 EC 02 00 00
call [eax+2EC]
dealloc( SpellCast ) |
|
|
Back to top |
|
|
jgoemat Master Cheater Reputation: 22
Joined: 25 Sep 2011 Posts: 252
|
Posted: Sun Jul 08, 2018 1:57 am Post subject: |
|
|
Gonna be tough if that's all you have to go on. Looks like the first one replaces a call to [edx+3D4], which returns the cost for a spell. 3D4 has probably changed , so you can search for aob 'FF 92 * 03 00 00' and probably find the same position, but there will probably be a lot more. Try ones around 3D4 first, most likely slightly higher because game updates usually add fields to structures instead of removing them. The injection script returns 0 in eax instead of calling the procedure for friends it looks like. It calls another procedure that must return a pointer to some structure that must be a friend/foe indicator at +268. So that procedure address is going to be hard to find also. You can try and find a mana pointer and find the code that access it, That shouldn't be too hard. If you backtrack from where it is changed you might be able to find that point. You'll also have to find the friend/foe procedure somehow.
The cooldown seems to use the same procedure for friend/foe probably., and updates two values on the stack for friends before calling [eax+2EC]. It looks like it is only +66 from the first injection point, so it's probably part of the same 'spellcast' procedure. If you find the first place it should be close to +66 from it. You can see it seems to put a -1 at [esp+4] (probably cooldown) and 0 at [esi+44] (maybe on cooldown flag?), so look for code that accesses addresses like that around the call here. It might be easier to find this one first, replace the 'EC 02' in the disable bytes with '* *' and do an AOB scan with writeable unchecked...
Good luck!
|
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|