Part5: How to find judgment method for code cave

[bagakkkk]

method 1: compare registers
see Optantic's tut

method 2: compare patterns
1. get player HP offset
2. dump range: player offset +/- 0x200
3. replay or load game
4. repeat 1~3 several time

5. get another enemy HP offset
6. dump range: enemy offset +/- 0x200
7. repeat 5~6 several time

8. use tool to compare difference between player and enemy
9. you got some offsets and values
10. you can choose one to judge player and enemy

if(*(DWORD*)(hp_addr + 0x0C) == 0xABCD1234)
{
if(HP_cheat_on)
{
...........................
}
}
else
{
if(InstantKill_cheat_on)
{
...........................
}
}

you can write search function and patterns method to locate player offset without code cave (xbox games, diable3, blue dragon)

[optantic]

in other words, Ducktales Remastered HD

if(*(DWORD*)(hp_register + 0x64) == 0x5363726F ) // Scrooge = Player HP
else = Enemy HP

[Serious_M]

nice tuts share bagakkkk and optantic

[rafaelstefany]

in other words, Ducktales Remastered HD

if(*(DWORD*)(hp_register + 0x64) == 0x5363726F ) // Scrooge = Player HP
else = Enemy HP

What you are using as "hp_register".
Is the address on your exemple a static address?

[cosmatypk]

What you are using as "hp_register".
Is the address on your exemple a static address?

This value (address) in the register r3.
DWORD hp_register;
__asm mr hp_register,r3
* (DWORD *) (hp_register + 0x64) == 0x5363726F -This value is by address of register r3.

[rafaelstefany]

This value (address) in the register r3.
DWORD hp_register;
__asm mr hp_register,r3
* (DWORD *) (hp_register + 0x64) == 0x5363726F -This value is by address of register r3.

Thanks dude.
By the way, any way to convert ppc intruction to byte code?

[thegutta]

Great TuT share bagakkkk :)

[optantic]

What you are using as "hp_register".
Is the address on your exemple a static address?

822E6F14 stfs fr13,2ACh(r3) // HP Breakpoint, r3(base address) + 0x2AC = in game HP address
hit player
r3 = 00000000BCA1FF00

after HP address has changed in game , set Breakpoint on 0x822E6F14 and get hit by cpu, will always give you the new r3 (base address) for Player's HP address