| View previous topic :: View next topic |
| Author |
Message |
raziel240
Newbie cheater
![]() Reputation: 0
Joined: 07 Aug 2015
Posts: 20
|
 Posted: Thu Aug 16, 2018 4:02 am Post subject: [SOLVED] Red Faction Guerrilla Remastered Singularity Bomb |
 |
|
Well, as the title says, I'm searching for the value of the singularity bomb to either freeze or AOB.
I found 2 static addresses for each value type; Bytes, 2 bytes, 4 bytes, 8 bytes and as ridiculous as it sounds I even tried float, double and binary.
So, my problem is the static addresses do nothing and after loading a saved game the value goes with different static addresses. For example I have 4 Singularity bombs and I search for the value. I always end up with 1 bomb left and 2 static addresses. Changing either doesn't do anything. I load a save game and search the value again, this time I get different addresses but also static.
I already set a script for infinite ammo and it's working even after restart and updates so I know this must be possible somehow.
| Code: | Instruction: 000841F2 - 89 46 08 - mov [esi+08],eax
000841E8 - FF 24 85 CC420800 - jmp dword ptr [eax*4+rfg.vint-variant::operator=+10C]
000841EF - 8B 47 08 - mov eax,[edi+08]
000841F2 - 89 46 08 - mov [esi+08],eax <<
000841F5 - 5F - pop edi
000841F6 - 8B C6 - mov eax,esi
EAX=00000001
EBX=01638548 |
This is what I get when I search for what writes to this address.
I dared to do some AOB with this and some might shake their head because of this. Slight changes in the code just crashes the game.
Am I missing something while searching for the value? Maybe it's a different number like value 5 for 4 bombs?
Last edited by raziel240 on Thu Aug 16, 2018 6:42 am; edited 1 time in total |
|
| Back to top |
|
 |
FreeER
Grandmaster Cheater Supreme
![]() Reputation: 53
Joined: 09 Aug 2013
Posts: 1091
|
| Posted: Thu Aug 16, 2018 5:43 am Post subject: |
|
|
It's probably really generic code that changes a bunch of other values as well (mainly based on "variant" and the use of edi/esi rather than a direct sub/dec etc.). Backtrace to see what's calling it eg. when it breaks step through to the return and look up in the code to see what called that function and how it calculated the value to pass.
| Quote: | | Am I missing something while searching for the value? Maybe it's a different number like value 5 for 4 bombs? |
Always possible, it could even be 0 and count to 4 as you use them or negative or encrypted or a string, or the number of bits set in a value (popcount) etc. etc. etc. I don't have the game so I'm not sure myself.
_________________
|
|
| Back to top |
|
|
raziel240
Newbie cheater
![]() Reputation: 0
Joined: 07 Aug 2015
Posts: 20
|
| Posted: Thu Aug 16, 2018 6:24 am Post subject: |
|
|
After several tries I finally found the value of the bomb. I backtraced as you suggested and I found the value 3. For 4 items. How ridiculous is that? I was doing everything right all along. Just used the wrong number.
Thanks for telling me about the backtracing.  |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
