This make take a while, no one bothered finding state: 0 , 1 or 2(I did mange to find this one quite easily though, while writing this post). >> I know now that I'm not the only person looking for it, I think you are. Nave didn't add any new detours to the dll to create his state. I won't tell you what he did, because that would pretty much take away all the effort required on your part(and I don't remember what he was trying to do). They used hacked together states + creative dc to accomplish it.
Anyway state 2 is here:
00406551 - 83 bc 0f ac 07 00 00 02 - cmp dword ptr [edi+ecx+000007ac],02
00413b92 - 83 bc 0a ac 07 00 00 02 - cmp dword ptr [edx+ecx+000007ac],02
State 0 and 1 are probably some where here:
00413df2 - 39 84 0a ac 07 00 00 - cmp [edx+ecx+000007ac],eax
0041f635 - 8b 84 11 ac 07 00 00 - mov eax,[ecx+edx+000007ac]
00413436 - 8b 02 - mov eax,[edx] *
0040da97 - 39 bc 0a ac 07 00 00 - cmp [edx+ecx+000007ac],edi
0040db08 - 39 bc 08 ac 07 00 00 - cmp [eax+ecx+000007ac],edi
0040db52 - 39 94 08 ac 07 00 00 - cmp [eax+ecx+000007ac],edx
00421195 - 8b 94 0a ac 07 00 00 - mov edx,[edx+ecx+000007ac] *
0040dc18 - 39 bc 0a ac 07 00 00 - cmp [edx+ecx+000007ac],edi
*I suspect it'll be one of the mov ones. You'll have to scroll down from there, to look for the cmps which will find the state. That's because the state is pushed into a register and then compared later on.
Anyway, you are better DCing your platforms to get it working, that will help you think about how you want to do it(a.k.a do it properly, and copy the original states or make random states with creative dc).
Anyway state 2 is here:
00406551 - 83 bc 0f ac 07 00 00 02 - cmp dword ptr [edi+ecx+000007ac],02
00413b92 - 83 bc 0a ac 07 00 00 02 - cmp dword ptr [edx+ecx+000007ac],02
State 0 and 1 are probably some where here:
00413df2 - 39 84 0a ac 07 00 00 - cmp [edx+ecx+000007ac],eax
0041f635 - 8b 84 11 ac 07 00 00 - mov eax,[ecx+edx+000007ac]
00413436 - 8b 02 - mov eax,[edx] *
0040da97 - 39 bc 0a ac 07 00 00 - cmp [edx+ecx+000007ac],edi
0040db08 - 39 bc 08 ac 07 00 00 - cmp [eax+ecx+000007ac],edi
0040db52 - 39 94 08 ac 07 00 00 - cmp [eax+ecx+000007ac],edx
00421195 - 8b 94 0a ac 07 00 00 - mov edx,[edx+ecx+000007ac] *
0040dc18 - 39 bc 0a ac 07 00 00 - cmp [edx+ecx+000007ac],edi
*I suspect it'll be one of the mov ones. You'll have to scroll down from there, to look for the cmps which will find the state. That's because the state is pushed into a register and then compared later on.
Anyway, you are better DCing your platforms to get it working, that will help you think about how you want to do it(a.k.a do it properly, and copy the original states or make random states with creative dc).
![[Image: doty7Xn.gif]](http://i.imgur.com/doty7Xn.gif)
10 ʏᴇᴀʀs sɪɴᴄᴇ ɪʀᴄ ɢᴏᴏᴅ.ɪ ᴡᴀʟᴋ ᴛʜʀᴏᴜɢʜ ᴛʜᴇ ᴇᴍᴘᴛʏ sᴛʀᴇᴇᴛs ᴛʀʏɪɴɢ ᴛᴏ ᴛʜɪɴᴋ ᴏғ sᴏᴍᴇᴛʜɪɴɢ ᴇʟsᴇ ʙᴜᴛ ᴍʏ ᴘᴀᴛʜ ᴀʟᴡᴀʏs ʟᴇᴀᴅs ᴛᴏ ᴛʜᴇ ɪʀᴄ. ɪ sᴛᴀʀᴇ ᴀᴛ ᴛʜᴇ sᴄʀᴇᴇɴ ғᴏʀ ʜᴏᴜʀs ᴀɴᴅ ᴛʀʏ ᴛᴏ sᴜᴍᴍᴏɴ ᴛʜᴇ ɢᴏᴏᴅ ɪʀᴄ. ɪ ᴡᴀᴛᴄʜ ᴏᴛʜᴇʀ ɪʀᴄ ᴄʜᴀɴɴᴇʟs ʙᴜᴛ ɪᴛ ɪs ɴᴏ ɢᴏᴏᴅ. ɪ ᴘᴇsᴛᴇʀ ᴢᴏʀᴛ ᴀɴᴅ ᴛʀʏ ᴛᴏ ʀᴇsɪsᴛ ʜɪs sᴇxɪɴᴇss ʙᴜᴛ ɪᴛ ɪs ᴀʟʟ ᴍᴇᴀɴɪɴɢʟᴇss. ᴛʜᴇ ᴇɴᴅ ɪs ɴᴇᴀʀ.ɪ ᴛʜᴇɴ ᴜsᴜᴀʟʟʏ ʀᴇᴀᴅ sᴏᴍᴇ ᴏʟᴅ ɪʀᴄ ʟᴏɢs ᴀɴᴅ ᴄʀʏ ᴍʏsᴇʟғ ᴛᴏ sʟᴇᴇᴘ.

Chat

