Game version GOG v1.4.1-237
I traced these game codes to find the addresses of interest. Readers require some knowledge of CE in order to make use of. I have no interest in writing script.
Time(sec) (float)
Code: Select all
RoboQuest-Win64-Shipping.exe+145DEB6 - 75 5D - jne RoboQuest-Win64-Shipping.exe+145DF15
RoboQuest-Win64-Shipping.exe+145DEB8 - 0F28 C6 - movaps xmm0,xmm6
RoboQuest-Win64-Shipping.exe+145DEBB - 48 8D 8B B80E0000 - lea rcx,[rbx+00000EB8]
RoboQuest-Win64-Shipping.exe+145DEC2 - F3 0F58 83 D80E0000 - addss xmm0,[rbx+00000ED8]
RoboQuest-Win64-Shipping.exe+145DECA - 48 8D 54 24 40 - lea rdx,[rsp+40]
RoboQuest-Win64-Shipping.exe+145DECF - F3 0F11 83 D80E0000 - movss [rbx+00000ED8],xmm0 << write Time(sec)
RoboQuest-Win64-Shipping.exe+145DED7 - F3 0F11 44 24 40 - movss [rsp+40],xmm0
RoboQuest-Win64-Shipping.exe+145DEDD - E8 AEE745FF - call RoboQuest-Win64-Shipping.exe+8BC690
Power Cell
Code: Select all
RoboQuest-Win64-Shipping.exe+136B00F - CC - int 3
RoboQuest-Win64-Shipping.exe+136B010 - 40 53 - push rbx
RoboQuest-Win64-Shipping.exe+136B012 - 55 - push rbp
RoboQuest-Win64-Shipping.exe+136B013 - 48 81 EC 88000000 - sub rsp,00000088 { 136 }
RoboQuest-Win64-Shipping.exe+136B01A - 01 91 98850000 - add [rcx+00008598],edx << add Power Cell
RoboQuest-Win64-Shipping.exe+136B020 - 8B EA - mov ebp,edx
RoboQuest-Win64-Shipping.exe+136B022 - 4C 89 74 24 78 - mov [rsp+78],r14
RoboQuest-Win64-Shipping.exe+136B027 - 48 8B D9 - mov rbx,rcx
RoboQuest-Win64-Shipping.exe+136B02A - 4C 89 7C 24 70 - mov [rsp+70],r15
RoboQuest-Win64-Shipping.exe+136B02F - 45 0FB6 F8 - movzx r15d,r8b
RoboQuest-Win64-Shipping.exe+136B033 - E8 5812FBFF - call RoboQuest-Win64-Shipping.exe+131C290
Weapon Proficiency (max 230)
tips: change register r12 to 230 (hex E6)
Code: Select all
RoboQuest-Win64-Shipping.exe+142525A - 0F84 68020000 - je RoboQuest-Win64-Shipping.exe+14254C8
RoboQuest-Win64-Shipping.exe+1425260 - 44 01 67 14 - add [rdi+14],r12d << add Weapon Proficiency
RoboQuest-Win64-Shipping.exe+1425264 - 48 8D 8B 10070000 - lea rcx,[rbx+00000710]
RoboQuest-Win64-Shipping.exe+142526B - 49 8B 06 - mov rax,[r14]
RoboQuest-Win64-Shipping.exe+142526E - 48 8D 55 30 - lea rdx,[rbp+30]
RoboQuest-Win64-Shipping.exe+1425272 - 48 89 45 30 - mov [rbp+30],rax
RoboQuest-Win64-Shipping.exe+1425276 - E8 157449FF - call RoboQuest-Win64-Shipping.exe+8BC690
Reroll (access by shared code!), the code access the reroll address twice per open&close of perk selection menu
tips1: for example, having 2 Reroll and open&close Perk Selection 5 times, the code will have accessed an address with Value 2 (4btye) Count 10
tips2: slow down and pause/unpause the game to limit the number of monitored address, pause game to stop code updating in background, then sort the results
tips3: perhaps editing Reroll to a large number might crash game
Code: Select all
VCRUNTIME140.memmove+11A - 8B 0A - mov ecx,[rdx] << [shared code!] access Reroll(4btye), access twice per open&close of perk selection menu
VCRUNTIME140.memmove+11C - 89 08 - mov [rax],ecx
VCRUNTIME140.memmove+11E - C3 - ret
Display only on-screen %bar (float), could be used to deduce value of interest? Still, no idea what EXP could be...
Code: Select all
RoboQuest-Win64-Shipping.exe+1D290AE - E8 BD11FBFF - call RoboQuest-Win64-Shipping.exe+1CDA270
RoboQuest-Win64-Shipping.exe+1D290B3 - 0FB6 48 04 - movzx ecx,byte ptr [rax+04]
RoboQuest-Win64-Shipping.exe+1D290B7 - 88 4C 24 50 - mov [rsp+50],cl
RoboQuest-Win64-Shipping.exe+1D290BB - 84 C9 - test cl,cl
RoboQuest-Win64-Shipping.exe+1D290BD - 74 06 - je RoboQuest-Win64-Shipping.exe+1D290C5
RoboQuest-Win64-Shipping.exe+1D290BF - F3 0F10 38 - movss xmm7,[rax] << [display only] access %bar on-screen
RoboQuest-Win64-Shipping.exe+1D290C3 - EB 06 - jmp RoboQuest-Win64-Shipping.exe+1D290CB
RoboQuest-Win64-Shipping.exe+1D290C5 - F3 0F10 7C 24 70 - movss xmm7,[rsp+70]
RoboQuest-Win64-Shipping.exe+1D290CB - 83 BF 50030000 00 - cmp dword ptr [rdi+00000350],00 { 0 }
RoboQuest-Win64-Shipping.exe+1D290D2 - 74 43 - je RoboQuest-Win64-Shipping.exe+1D29117