LB/Fred_Durst
28th February 2007, 15:56
hey guys,
i found the address which holds the movement in FEAR ... i searched for it with Tsearch and if i set the dma on 10 i was running pretty fast (original is on 1.2) if i set on 1000 it was like teleport.
well, now the address looks like this:
0c01e083 8B400C mov eax,[eax+0xC] <- address which holds the movement
0c01e086 89442408 mov [esp+0x8],eax
0c01e08a 8B8670270000 mov eax,[esi+0x2770]
0c01e090 85C0 test eax,eax
0c01e092 7413 je short 0x0C01E0A7
0c01e094 8BC8 mov ecx,eax
..............
so,you can suspect that if iīd set a NOP on that address , the player wouldnīt move.
itīs in tsearch so i donīt see the code above "0c01e083"...
my question now. whatīs gonna be my next step.
should i find the eax register now or how can i write a 10.0f to that address now ?
cheers,
F.D.
i found the address which holds the movement in FEAR ... i searched for it with Tsearch and if i set the dma on 10 i was running pretty fast (original is on 1.2) if i set on 1000 it was like teleport.
well, now the address looks like this:
0c01e083 8B400C mov eax,[eax+0xC] <- address which holds the movement
0c01e086 89442408 mov [esp+0x8],eax
0c01e08a 8B8670270000 mov eax,[esi+0x2770]
0c01e090 85C0 test eax,eax
0c01e092 7413 je short 0x0C01E0A7
0c01e094 8BC8 mov ecx,eax
..............
so,you can suspect that if iīd set a NOP on that address , the player wouldnīt move.
itīs in tsearch so i donīt see the code above "0c01e083"...
my question now. whatīs gonna be my next step.
should i find the eax register now or how can i write a 10.0f to that address now ?
cheers,
F.D.