Jump to content
  • 0

Dump.cs how would one access the Fields?


ggxAthene
 Share

Question

Quote

public class ItemGeneratorBoss : RGCharacterComponent
{
    // Fields
    public Int32 drop_rate; // 0x28
    public Boolean disable_drop; // 0x2c
    public Boolean drop_protected; // 0x2d

    // Properties

    // Methods
    // RVA: 0xd29e88 VA: 0x7fff3cb29e88
    public override Void InitComponent() { }
    // RVA: 0xd29e88 VA: 0x7fff3cb29e88
    private Void OpenChest() { }
    // RVA: 0xd29e88 VA: 0x7fff3cb29e88
    public Void .ctor() { }

 

I have a dump.cs, I've tried getting the ItemGeneratorBoss searched up and finding the pointer and using 0x28 which is the drop rate to find the value.
However, I get a largely blown out number that I'm 100% sure isnt the drop_rate.

I've tried using similar methods to find the current player health value as well, but it isnt working out well. I get a completely different number.

How do I access the drop_rate's actual value with GameGuardian?
As as you noticed in the method, the offsets are same for all of em...which is quite confusing. And I can't properly pin point the proper thing.

Help would be much appreciated.

Link to comment
Share on other sites

7 answers to this question

Recommended Posts

  • 0
2 hours ago, ggxAthene said:

 

I have a dump.cs, I've tried getting the ItemGeneratorBoss searched up and finding the pointer and using 0x28 which is the drop rate to find the value.
However, I get a largely blown out number that I'm 100% sure isnt the drop_rate.

I've tried using similar methods to find the current player health value as well, but it isnt working out well. I get a completely different number.

How do I access the drop_rate's actual value with GameGuardian?
As as you noticed in the method, the offsets are same for all of em...which is quite confusing. And I can't properly pin point the proper thing.

Help would be much appreciated.

Use script offset field searcher

Link to comment
Share on other sites

  • 0

[ @ggxAthene ]
---

Quote

be the real value in the field or the field name/attributes etc?

Yes. Field offset can points into multiple address/object, as previously used address isn't flushed yet from memory, leaving fake field addresses. Field searcher tool will put your value into those address, even the fake one, so it should also applied into the correct address. If you want to know more in depth, you can see it manually using: regview with the following tutorial on how to use it: hooking register (credit to @Lover1500)
---

Link to comment
Share on other sites

  • 0
8 hours ago, kiynox said:

[ @ggxAthene ]
---

Yes. Field offset can points into multiple address/object, as previously used address isn't flushed yet from memory, leaving fake field addresses. Field searcher tool will put your value into those address, even the fake one, so it should also applied into the correct address. If you want to know more in depth, you can see it manually using: regview with the following tutorial on how to use it: hooking register (credit to @Lover1500)
---

Unfortunately regview is available only for 32 bit 😞 
But you're 100% on target, on what I'm trying to achieve with GameGuardian.
And that's to hook onto a function, and see/intercept the parameters.


Still not sure how to do that perfectly without the use of scripts yet, because most of em arent updated to 64bits.

Any ideas what kind dump I have? Especially looking at the Methods, they have the same offsets. How would one even call them when its pointed to the same offsets? I rarely see dumps like this.
Dumped with Zygisk-Il2CppDumper.

Link to comment
Share on other sites

  • 0
On 12/20/2023 at 4:18 PM, ggxAthene said:

 

I have a dump.cs, I've tried getting the ItemGeneratorBoss searched up and finding the pointer and using 0x28 which is the drop rate to find the value.
However, I get a largely blown out number that I'm 100% sure isnt the drop_rate.

I've tried using similar methods to find the current player health value as well, but it isnt working out well. I get a completely different number.

How do I access the drop_rate's actual value with GameGuardian?
As as you noticed in the method, the offsets are same for all of em...which is quite confusing. And I can't properly pin point the proper thing.

Help would be much appreciated.

What's the name of the game? I dunno about the methods having same offsets but could have a look at the fields.

Link to comment
Share on other sites

  • 0

[ @ggxAthene ]
---

Quote

And that's to hook onto a function, and see/intercept the parameters.

You can put the library inside a dissasembler like: IDA Pro or Ghidra -> find your method/function in there -> and generate pseudo-code (F5) and you can see what register that holds our parameter.
---

Quote

How would one even call them when its pointed to the same offsets? I rarely see dumps like this.

Zygisk dumper is extracting purely from memory, it can be incomplete/hit and miss but it is working for most of the time. You should do another dumping
---

Quote

However, I get a largely blown out number that I'm 100% sure isnt the drop_rate.

It is int32, I'm pretty sure it is not what you're looking for:

  • - You can find all the fields related to "drop_rate" and test it one by one
  • - You can change the parameter of some method/function instead of doing-it from fields.

---

Link to comment
Share on other sites

  • -3
On 12/21/2023 at 3:51 PM, ggxAthene said:

Unfortunately regview is available only for 32 bit 😞 
But you're 100% on target, on what I'm trying to achieve with GameGuardian.
And that's to hook onto a function, and see/intercept the parameters.


Still not sure how to do that perfectly without the use of scripts yet, because most of em arent updated to 64bits.

Any ideas what kind dump I have? Especially looking at the Methods, they have the same offsets. How would one even call them when its pointed to the same offsets? I rarely see dumps like this.
Dumped with Zygisk-Il2CppDumper.

Use script from ltc

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.