Red Faction Guerrilla Re-Mars-tered Trainer

GrandPa · Post by **GrandPa** » Mon Jul 09, 2018 5:03 pm

Most of the time, injecting the first hook in the game makes CE freezing.

Trying to use speedhack is even worse.

The first time I try to attach the debugger (VEH), I get a warning from CE and I have to click OK to retry.

Every time I use "Find out what accessed....", even if there are a couple of hundreds of accesses per second, the game becomes laggy.

ALT-Tabbing to CE, even if the game goes to Pause mode, my VGA fan starts spinning like crazy forcing me to "Pause the process" to stop the annoyance.

I thought it was because my machine is at minimal specs, (an old 1GB VGA card).

Post by **xorps** » Mon Jul 09, 2018 5:22 pm

[QUOTE="l0wb1t, post: 51393, member: 6208"]So searching for float 1.0 near to 5004500 ? or how do you mean this? :D[/QUOTE]

Your value 112233445566.0 should be searched in the range 1122334455(50) -1122334455(70)

The float is not exactly written in memory, especially such as yours. On this and advised to look for a rounded 5004500 and preferably seven characters

Sorry for my bad English ?

Post by **l0wb1t** » Mon Jul 09, 2018 5:24 pm

[QUOTE="GrandPa, post: 51413, member: 7406"]Most of the time, injecting the first hook in the game makes CE freezing.

Trying to use speedhack is even worse.

The first time I try to attach the debugger (VEH), I get a warning from CE and I have to click OK to retry.

Every time I use "Find out what accessed....", even if there are a couple of hundreds of accesses per second, the game becomes laggy.

ALT-Tabbing to CE, even if the game goes to Pause mode, my VGA fan starts spinning like crazy forcing me to "Pause the process" to stop the annoyance.

I thought it was because my machine is at minimal specs, (an old 1GB VGA card).[/QUOTE]

Yes like me, super fucked up, with my old ce 5.6 this doesn't happen, also i never had this problem with any other game. this is the first time i got this strange issue

[QUOTE="xorps, post: 51416, member: 10126"]Your value 112233445566.0 should be searched in the range 1122334455(50) -1122334455(70)

Sorry for my bad English ?[/QUOTE]

nah, the game just dont apply the changes i made, looks liek it's some protection for the mutiplayer or something.

Else i would see the changes ingame, this is super shitty, xD

I tried to port the cheat from the old game, no luck code seems to be competly removed

From the old RFG

{

// ORIGINAL CODE - INJECTION POINT: "rfg.exe"+3D26F9

"rfg.exe"+3D26DC: 75 05 - jne rfg.exe+3D26E3

"rfg.exe"+3D26DE: D9 E8 - fld1

"rfg.exe"+3D26E0: D9 5E 0C - fstp dword ptr [esi+0C]

"rfg.exe"+3D26E3: B8 02 00 00 00 - mov eax,00000002

"rfg.exe"+3D26E8: E9 DC FE FF FF - jmp rfg.exe+3D25C9

"rfg.exe"+3D26ED: CC - int 3

"rfg.exe"+3D26EE: CC - int 3

"rfg.exe"+3D26EF: CC - int 3

"rfg.exe"+3D26F0: 83 EC 14 - sub esp,14

"rfg.exe"+3D26F3: 8B 80 24 03 00 00 - mov eax,[eax+00000324]

// ---------- INJECTING HERE ----------

"rfg.exe"+3D26F9: D9 40 0C - fld dword ptr [eax+0C] // player size

"rfg.exe"+3D26FC: 8D 4C 24 08 - lea ecx,[esp+08]

// ---------- DONE INJECTING ----------

"rfg.exe"+3D2700: D9 1C 24 - fstp dword ptr [esp]

"rfg.exe"+3D2703: 51 - push ecx

"rfg.exe"+3D2704: D9 40 0C - fld dword ptr [eax+0C]

"rfg.exe"+3D2707: D9 5C 24 08 - fstp dword ptr [esp+08]

"rfg.exe"+3D270B: D9 40 0C - fld dword ptr [eax+0C]

"rfg.exe"+3D270E: D9 5C 24 0C - fstp dword ptr [esp+0C]

"rfg.exe"+3D2712: D9 44 24 04 - fld dword ptr [esp+04]

"rfg.exe"+3D2716: D9 5C 24 10 - fstp dword ptr [esp+10]

"rfg.exe"+3D271A: D9 44 24 08 - fld dword ptr [esp+08]

"rfg.exe"+3D271E: D9 5C 24 14 - fstp dword ptr [esp+14]

}

Try out this, should work for most weapons.

Rapid Fire:

[CODE][ENABLE]

aobscanmodule(_RapidFire,rfg.exe,F3 0F 10 8E 14 02 00 00 0F 57) // should be unique

alloc(newmem,$1000)

label(code)

label(return)

newmem:

mov [esi+00000214],(float)0.9

code:

movss xmm1,[esi+00000214]

jmp return

_RapidFire:

jmp newmem

nop

nop

nop

return:

registersymbol(_RapidFire)

[DISABLE]

_RapidFire:

db F3 0F 10 8E 14 02 00 00

unregistersymbol(_RapidFire)

dealloc(newmem)[/CODE]

Here's my Table Progress so far.

Cheats wich have * behind name were made by [USER=10126]@xorps[/USER] . so all credits to him for those :)

No Fall Damage (real)

[CODE][ENABLE]

aobscanmodule(_NoFallDamage,rfg.exe,04 F3 0F 10 86 6C 02 00 00) // should be unique

alloc(newmem,$1000)

label(code)

label(return)

newmem:

mov [esi+0000026C],(float)-9999

code:

movss xmm0,[esi+0000026C]

jmp return

_NoFallDamage+01:

jmp newmem

nop

nop

nop

return:

registersymbol(_NoFallDamage)

[DISABLE]

_NoFallDamage+01:

db F3 0F 10 86 6C 02 00 00

unregistersymbol(_NoFallDamage)

dealloc(newmem)[/CODE]

Post by **xorps** » Mon Jul 09, 2018 6:46 pm

[QUOTE="l0wb1t, post: 51417, member: 6208"]Here's my Table Progress so far.[/QUOTE]

And over time, what will we do ? It's called from here. ?

[CODE]53 8B * 8D 8B * * * * * * * * * 84 * * * 8B 83 * * * * * C3 * * 8D 8B 78 04 00 00[/CODE]

Post by **l0wb1t** » Mon Jul 09, 2018 7:03 pm

[QUOTE="xorps, post: 51422, member: 10126"]And over time, what will we do ? It's called from here. ?

[CODE]53 8B * 8D 8B * * * * * * * * * 84 * * * 8B 83 * * * * * C3 * * 8D 8B 78 04 00 00[/CODE][/QUOTE]

What get's called from there mate? :)

Im Working on Enemy Teleporter + Vehiclke Teleport aka spawn random vehicle :D

Post by **xorps** » Mon Jul 09, 2018 7:55 pm

[QUOTE="l0wb1t, post: 51424, member: 6208"]Im Working on Enemy Teleporter + Vehiclke Teleport aka spawn random vehicle :D[/QUOTE]

I sit with hours ?

So super jump and super speed than not teleport ? ?

And with teleport fuss is a lot, there are a lot of addresses creeping into the desired function

Kanelakis · Post by **Kanelakis** » Mon Jul 09, 2018 9:36 pm

This trainer is slowly becoming better than the others. :)

However, I wait for it to be completely finished to taste it.:D

In addition, if you do not want to explode the grenades with the weapon, can you set a normal code of infinite grenades that I explode with the command?

Is there a chance to fly with the vehicle, and land?

Post by **l0wb1t** » Mon Jul 09, 2018 9:58 pm

Watch this xD Teleport Fun

Info:

"random" means nearst in this case, sometimes they are really random, sometimes it's just the nearest NPC/Vehicle. I may also use a different code for Vehicle coords, since i noticed some objects like barrels are going also thru this code xD

Anways

Watch this:

UO7BDRn_Ud4

[TABLE][TR][TD]

Cheat

[/TD]

[TD]

Hotkey

[/TD][/TR]

[TR][TD]

Save Position

[/TD]

[TD]

Numpad 7

[/TD][/TR]

[TR][TD]

Load Position

[/TD]

[TD]

Numpad 8

[/TD][/TR]

[TR][TD]

Undo Teleport

[/TD]

[TD]

Numpad 9

[/TD][/TR]

[TR][TD]

Teleport to Waypoint

[/TD]

[TD]

Numpad Multiply

[/TD][/TR]

[TR][TD]

Teleport "random" Vehicle to last saved Position

[/TD]

[TD]

END

[/TD][/TR]

[TR][TD]

Teleport to "random" Vehicle

[/TD]

[TD]

Page Down

[/TD][/TR]

[TR][TD]

Teleport to "random" NPC

[/TD]

[TD]

Page Up

[/TD][/TR]

[TR][TD]

Teleport NPC's to last saved position and freeze them (toggle)

[/TD]

[TD]

Numpad Divide

[/TD][/TR][/TABLE]

xorps, post: 51429, member: 10126 wrote:I sit with hours ?

So super jump and super speed than not teleport ? ?

And with teleport fuss is a lot, there are a lot of addresses creeping into the desired function

Yeah, there are some, where your char choords are always on top, some codes only hold yours. i use the first one i said, since my char is alays on the top, you don't even need a compare, but for the NPC Teleporter you need to compare when using the same code as me. It's not that hard.

Kanelakis · Post by **Kanelakis** » Mon Jul 09, 2018 10:41 pm

There was another update of the game today.

Is it possible to add in the trainer an explanation of each code of what he does?

At least one knows what's active.

Post by **l0wb1t** » Mon Jul 09, 2018 10:47 pm

[QUOTE="Kanelakis, post: 51440, member: 13439"]There was another update of the game today.

Is it possible to add in the trainer an explanation of each code of what he does?

At least one knows what's active.[/QUOTE]

Shouldn't matter for my Table, the only thing that needs to be updated would be Bomb Limit, this is the only cheat which contains an hardcoded adress.

What version is the game yet? since i did not even saw the latest update you said xD

:Edit:

Well its CS4496 now, only Bomb limit bypass isn't workign xD like i said.

[IMG]https://puu.sh/ATIX4/3a6733d4b6.png[/IMG]

Kanelakis · Post by **Kanelakis** » Mon Jul 09, 2018 10:57 pm

[QUOTE="l0wb1t, post: 51441, member: 6208"]Shouldn't matter for my Table, the only thing that needs to be updated would be Bomb Limit, this is the only cheat which contains an hardcoded adress.

What version is the game yet? since i did not even saw the latest update you said xD

:Edit:

Well its CS4496 now, only Bomb limit bypass isn't workign xD like i said.

[IMG]https://puu.sh/ATIX4/3a6733d4b6.png[/IMG][/QUOTE]

This is what they have set.

[URL='https://steamcommunity.com/id/MegalomaniacNG']MegalomaniacNG[/URL] [sviluppatore] 4 ore fa

Patch #2 - 9th July

[B]Changelog[/B]

- MP Teleporting should be fixed now

- MP Next Game Button shows up after a match if you play without party

- More diagnostic logging in order to find the cause of some of the crashes

Post by **l0wb1t** » Tue Jul 10, 2018 4:21 am

MP Teleport xd, i loved that :D

I can still teleport to others , but i cannot teleport other players to me. (did not tested that before)

Post by **xorps** » Tue Jul 10, 2018 7:50 am

[QUOTE="l0wb1t, post: 51441, member: 6208"]updated would be Bomb Limit[/QUOTE]

The limit on mines is better to make here so. No need to update

[ICODE]

[ENABLE]

aobscanmodule(baseplayerunlimitedlimitmine,rfg.exe,8B * * * * * * * * * * * * * * * * * * * * * * A1 * * * * * 33 C9 * 85 * * * 8B * * * * * 0F * * 8B * * * * * 8B * * 8B * 33 F6)

alloc(hackmem,$1000)

label(exitbaseplayerunlimitedlimitmine)

label(baseplayerunlimitedlimitmineret)

label(copycode)

hackmem:

db 31 C0

exitbaseplayerunlimitedlimitmine:

jmp baseplayerunlimitedlimitmineret

copycode:

readmem(baseplayerunlimitedlimitmine+17,5)

baseplayerunlimitedlimitmine+17:

jmp hackmem

baseplayerunlimitedlimitmineret:

registersymbol(baseplayerunlimitedlimitmine)

registersymbol(copycode)

[DISABLE]

baseplayerunlimitedlimitmine+17:

readmem(copycode,5)

unregistersymbol(baseplayerunlimitedlimitmine)

unregistersymbol(copycode)

dealloc(hackmem)

[/ICODE]

Post by **l0wb1t** » Tue Jul 10, 2018 9:21 am

Well readmem is good here. Always forget this Feature xD

GrandPa · Post by **GrandPa** » Wed Jul 11, 2018 11:35 am

Just to rectify a couple of my statements....

1. Level Alert:

the aobscan has to be for "39 35 C0 0C xx 0x" not for "39 35 C0 0C xx 02".

Every time I start a game session the code changes (not the instruction), so readmem here is a friend.

2. Speedhack:

after applying update CS4480 speedhack has no more effect, so it's pointless using it and I apologize for hinting its use.

If I consider the game a good one, I should revert back to the previous version I got (where it worked), but now I just want to finish it and free my disk space

FearLess Cheat Engine