Re: Final Fantasy XV (Steam)
Posted: Fri Apr 06, 2018 7:05 pm
Steam Version. It crashes every time, I activate an option
Community Cheat Tables of Cheat Engine
https://fearlessrevolution.com/
Steam Version. It crashes every time, I activate an option
I never looked into how model loading works in this game, I haven't even checked how OleMagne did it yet.FadeTM wrote: ↑Wed Apr 04, 2018 10:16 pm@cielos we need your help to make visible everywhere the glaive. For now it works only in insomnia. We tried with OleMagne but we need your help: he was able to fix the invisible problem for snow aranea and old cor, but for the glaive there is a different thing to do, related to the quest. So if you can help us finding how to do it, it would be really appreciated!
that's exciting news~
The constraints and kinematics being used are Noctis' yeah. And yes, I am "kinda" force-loading her through the guest loader, swapping out Araneas models for hers so that the models are at least loaded into memory. I could do this with any other file, but with a guests I know the game won't crash. Otherwise Noctis is just invisible when changing his outfits out for hers. It also only disables the field model, not the menu model. Weird.Cielos wrote: ↑Sat Apr 07, 2018 3:13 pmthat's exciting news~
I see you are swapping Noctis model with her, will she just move like Nocits as well? which would be kinda... funny...
did you try to force load her model when adding her as a guest? if so, does she came with a special set of fighting moves?
or can we, for example, swap iris model with luna? than we can drive around and doing side quest and stuff?
or swap with Aranea, and driving around the snow mountains in Prompto episode with her.. (imagining her with Aranea attack moves now. which should be quite cool I think...)
I'm playing other games now, and getting ready to replay assassin's creed origins once the "animus control panel" (or whatever it's called) is out.
but it kinda let me want to replay this game a bit before that.
can't wait!
Code: Select all
Char debug:
Onhit Aranea:
====
RBX points to charvalues, 8F C7 (normal aranea btw)
RCX+28 has charvalues (8F C7 01 01)
RSI has character file (ebex)
Second hit: (probably model)
Second hit, RSI holds same
Second hit, R12 has character model (gmdl)
Second hit, R14 has same
===
Check if RBX holds:
16893839 // Aranea
what did they show? I didn't know about it. link please? I want to go Yowza too!SDK is out soon enough and from what they showed yesterday. Yowza!
[Link]
Here's a table to force-load Lunafreya's model into memory and "play" as her... For safety reasons (in regards to not fucking up some other models), I'm only doing a check for Aranea so she needs to be in your party. Either load a save with her in the guest slot or use Cielos' table and choose Aranea as your guest.Last edit: [Link]
Quick updateNow supports debug release (sans play-as-luna script). Opcodes are close enough that debugging this version should be fine, and maybe even easier since it's 83megs vs 243megs and has a shitton more strings and func. names.
Order of the codes mirror those of the release version so you know which one is which.
Includes a lua script from CE's wiki to auto-attach to ffxv_s.exe and pause it immediately for those who want to test stuff at launch. Script comes from [Link]. I only added "pause()".
NOTES 20180408, 22:48Added VCRuntime to make it easier to debug. I think this is the one that loads files into memory, but how it gets the values in register is beyond me. It runs AFTER the other two calls.
Added symbols for convenience.
In mem viewer use these as addresses -> Go to:
For "ffxv_s.exe"+5976437: CHECKME_FFXV
For "VCRUNTIME140.dll"+CCFE: CHECKME_VC
NOTES 20180408, 20:39Got new stuff loaded into memory, but I must be missing something. Hmm.
NOTES 20180408, 10:19Well that wasn't it. Removed it to avoid confusion. Time wasted. :<
NOTES 20180407, 23:30CharaResourceManager::RegisterIndependentCharaEntry : character/nh/nh10/entry/nh10_000.ebex
...
[CharaResourceManager] +++ load +++ : character/nh/nh10/entry/nh10_000.ebex
NOTES 20180407, 21:42ffxv_s.exe+5976466 accesses it first. Not sure how it's used, but it hits Aranea quite a few times via rax+rsi+14 before ffxv_s.exe+5976437 accesses it, and WAAAY before VCRUNTIME140.dll+CCFE. Could be a part of a bigger function that reads/writes from/to an array (or perhaps it IS the array?). Idk.
Aranea normal
2B 36 01 01 8F C7 01 01 8F C7 01 01
Aranea winter:
CE 28 05 01 CD 28 05 01 CD 28 05 01
==== ffxv_s.exe+5976437 (cmp [rsi+14],#808544366 -- checking rbx (holds char id, 8F C7 -- 4B: 16893839) crashes? :S
RBX points to charvalues, 8F C7 (normal aranea, winter is CD 28 ref above)
RCX+28 the same
RSI has character file (ebex)
Second hit: (probably model)
Second hit, RSI holds same
Second hit, R12 has character model (gmdl)
Second hit, R14 has same
==== VCRUNTIME140.dll+CCFE (cmp [rcx+rdx+14],#808544366)
VCRuntime (first hit):
RAX is after model (string)
RSI,R10 holds model: data://character/nh/nh10/entry/nh10_000.ebex@
VCRuntime (second hit):
RAX is after model (string)
RSI,R10 holds model: data://character/nh/nh10/entry/nh10_000.ebex (without @)
RCX+RDX <- Model gets loaded into this?!
VCRuntime (third hit):
RSI,R10 holds model: data://character/nh/nh10/entry/nh10_000.ebex@
======
Root: /datas/
Files set in memory by common/autobuild.earc
Charfiles set by data/character/bin/resident-character.win32.bins
no need for those. you can get the same effects by using infinite items and infinite elemental energy