Finding and changing the field offset using the Guardian game script

[Trews27]

Hi. I already know how to do this, but there was a problem with one game. With Feild offset finder everything is found and easily changed, but the script does not find anything. Class: ActorCameraController. Fields: public struct ActorCameraController.State Outside; // 0x60. function metaDataOffsets(). I tried to write the field name in different ways, nothing helps. Maybe there is a way to search without the field name? 

function metaDataOffsets()

  startAddressDat = 0

  endAddressDat = 0

  local rangesDat = gg.getRangesList("global-metadata.dat")

  for i, v in ipairs(rangesDat) do

    if v.state == "O" then

      startAddressDat = v.start

      endAddressDat = rangesDat[i]["end"]

      break

    end

  end

end

metaDataOffsets()

 

function stringNames()

  Class_ActorCameraController = "h004163746f7243616d657261436f6e74726f6c6c657200"

end

stringNames()

 

function searchString(className)

  gg.clearResults()

  gg.searchNumber(className, gg.TYPE_BYTE, nil, nil, startAddressDat, endAddressDat)

  gg.searchPointer(0)

  local a = gg.getResults(5)

  for i, v in ipairs(a) do

    v.address = v.address - classOffset

  end

  gg.loadResults(a)

end

 

function isProcess64Bit()

  local regions = gg.getRangesList()

  local lastAddress = regions[#regions]["end"]

  return (lastAddress >> 32) ~= 0

end

 

function validISA()

  instructionSetArchitecture = 0

 if isProcess64Bit() == true then

  instructionSetArchitecture = 64

 else

  instructionSetArchitecture = 32

 end

  return instructionSetArchitecture

end

validISA()

 

function instructionsOffset()

  if instructionSetArchitecture == 32 then

    hexConvert = 0xFFFFFFFF

    dataType = 4

    classOffset = 0x8

  else

    dataType = 32

    classOffset = 0x10

  end

end

instructionsOffset()

 

function offset_actorCameraController()

  if instructionSetArchitecture == 32 then

  else

    offset_Outside = 0x60

  end

end

offset_actorCameraController()

function ActorCameraController()

  gg.clearResults()

  searchString(Class_ActorCameraController)

  gg.searchPointer(0)

  local instances_ActorCameraController = gg.getResults(gg.getResultsCount())

  gg.clearResults()

  local ActorCameraController_Outside = {}

  for i, v in ipairs(instances_ActorCameraController) do

    ActorCameraController_Outside[i] = {address = v.address + offset_Outside, flags = gg.TYPE_FLOAT}

  end

  gg.loadResults(ActorCameraController_Outside)

end

[nok1a]

1 hour ago, Trews27 said:

Hi. I already know how to do this, but there was a problem with one game. With Feild offset finder everything is found and easily changed, but the script does not find anything. Class: ActorCameraController. Fields: public struct ActorCameraController.State Outside; // 0x60. function metaDataOffsets(). I tried to write the field name in different ways, nothing helps. Maybe there is a way to search without the field name? 

function metaDataOffsets()
    startAddressDat = 0
    endAddressDat = 0
    local rangesDat = gg.getRangesList("global-metadata.dat")
    for i, v in ipairs(rangesDat) do
        if v.state == "O" then
            startAddressDat = v.start
            endAddressDat = rangesDat[i]["end"]
            break
        end
    end
end

metaDataOffsets()

function stringNames()
    Class_ActorCameraController = "h004163746f7243616d657261436f6e74726f6c6c657200"
end

stringNames()

function searchString(className)
    gg.clearResults()
    gg.searchNumber(className, gg.TYPE_BYTE, nil, nil, startAddressDat, endAddressDat)
    gg.searchPointer(0)
    local a = gg.getResults(5)
    for i, v in ipairs(a) do
        v.address = v.address - classOffset
    end
    gg.loadResults(a)
end

function isProcess64Bit()
    local regions = gg.getRangesList()
    local lastAddress = regions[#regions]["end"]
    return (lastAddress >> 32) ~= 0
end

function validISA()
    instructionSetArchitecture = 0
    if isProcess64Bit() == true then
        instructionSetArchitecture = 64
    else
        instructionSetArchitecture = 32
    end
    return instructionSetArchitecture
end

validISA()

function instructionsOffset()
    if instructionSetArchitecture == 32 then
        hexConvert = 0xFFFFFFFF
        dataType = 4
        classOffset = 0x8
    else
        dataType = 32
        classOffset = 0x10
    end
end

instructionsOffset()

function offset_actorCameraController()
    if instructionSetArchitecture == 32 then
    else
        offset_Outside = 0x60
    end
end

offset_actorCameraController()

function ActorCameraController()
    gg.clearResults()
    searchString(Class_ActorCameraController)
    gg.searchPointer(0)
    local instances_ActorCameraController = gg.getResults(gg.getResultsCount())
    gg.clearResults()
    local ActorCameraController_Outside = {}
    for i, v in ipairs(instances_ActorCameraController) do
        ActorCameraController_Outside[i] = {address = v.address + offset_Outside, flags = gg.TYPE_FLOAT}
    end

    gg.loadResults(ActorCameraController_Outside)
end

 

Did you enable the correct memory ranges when performing pointer search ? Enable all of them and run the script. See if it works? If it works, add the memory ranges in your script.

[nok1a]

7 hours ago, Trews27 said:

Hi. I already know how to do this, but there was a problem with one game. With Feild offset finder everything is found and easily changed, but the script does not find anything. Class: ActorCameraController. Fields: public struct ActorCameraController.State Outside; // 0x60. function metaDataOffsets(). I tried to write the field name in different ways, nothing helps. Maybe there is a way to search without the field name? 

function metaDataOffsets()

  startAddressDat = 0

  endAddressDat = 0

  local rangesDat = gg.getRangesList("global-metadata.dat")

  for i, v in ipairs(rangesDat) do

    if v.state == "O" then

      startAddressDat = v.start

      endAddressDat = rangesDat[i]["end"]

      break

    end

  end

end

metaDataOffsets()

 

function stringNames()

  Class_ActorCameraController = "h004163746f7243616d657261436f6e74726f6c6c657200"

end

stringNames()

 

function searchString(className)

  gg.clearResults()

  gg.searchNumber(className, gg.TYPE_BYTE, nil, nil, startAddressDat, endAddressDat)

  gg.searchPointer(0)

  local a = gg.getResults(5)

  for i, v in ipairs(a) do

    v.address = v.address - classOffset

  end

  gg.loadResults(a)

end

 

function isProcess64Bit()

  local regions = gg.getRangesList()

  local lastAddress = regions[#regions]["end"]

  return (lastAddress >> 32) ~= 0

end

 

function validISA()

  instructionSetArchitecture = 0

 if isProcess64Bit() == true then

  instructionSetArchitecture = 64

 else

  instructionSetArchitecture = 32

 end

  return instructionSetArchitecture

end

validISA()

 

function instructionsOffset()

  if instructionSetArchitecture == 32 then

    hexConvert = 0xFFFFFFFF

    dataType = 4

    classOffset = 0x8

  else

    dataType = 32

    classOffset = 0x10

  end

end

instructionsOffset()

 

function offset_actorCameraController()

  if instructionSetArchitecture == 32 then

  else

    offset_Outside = 0x60

  end

end

offset_actorCameraController()

function ActorCameraController()

  gg.clearResults()

  searchString(Class_ActorCameraController)

  gg.searchPointer(0)

  local instances_ActorCameraController = gg.getResults(gg.getResultsCount())

  gg.clearResults()

  local ActorCameraController_Outside = {}

  for i, v in ipairs(instances_ActorCameraController) do

    ActorCameraController_Outside[i] = {address = v.address + offset_Outside, flags = gg.TYPE_FLOAT}

  end

  gg.loadResults(ActorCameraController_Outside)

end

Try perhaps this:

function metaDataOffsets()
    startAddressDat = 0
    endAddressDat = 0
    local rangesDat = gg.getRangesList("global-metadata.dat")
    for i, v in ipairs(rangesDat) do
        if v.state == "O" then
            startAddressDat = v.start
            endAddressDat = rangesDat[i]["end"]
            break
        end
    end
end

metaDataOffsets()

function stringNames()
    Class_ActorCameraController = "h004163746f7243616d657261436f6e74726f6c6c657200"
end

stringNames()

function searchString(className)
    gg.clearResults()
	gg.setRanges(gg.REGION_OTHER)
    gg.searchNumber(className, gg.TYPE_BYTE, nil, nil, startAddressDat, endAddressDat)
	local t = gg.getResults(gg.getResultsCount())
	gg.setRanges(gg.REGION_C_ALLOC)
	gg.loadResults(t)
    gg.searchPointer(0)
    local a = gg.getResults(5)
    for i, v in ipairs(a) do
        v.address = v.address - classOffset
    end
    gg.loadResults(a)
end

function isProcess64Bit()
    local regions = gg.getRangesList()
    local lastAddress = regions[#regions]["end"]
    return (lastAddress >> 32) ~= 0
end

function validISA()
    instructionSetArchitecture = 0
    if isProcess64Bit() == true then
        instructionSetArchitecture = 64
    else
        instructionSetArchitecture = 32
    end
    return instructionSetArchitecture
end

validISA()

function instructionsOffset()
    if instructionSetArchitecture == 32 then
        hexConvert = 0xFFFFFFFF
        dataType = 4
        classOffset = 0x8
    else
        dataType = 32
        classOffset = 0x10
    end
end

instructionsOffset()

function offset_actorCameraController()
    if instructionSetArchitecture == 32 then
    else
        offset_Outside = 0x60
    end
end

offset_actorCameraController()

function ActorCameraController()
    gg.clearResults()
    searchString(Class_ActorCameraController)
	gg.setRanges(gg.REGION_ANONYMOUS)
    gg.searchPointer(0)
    local instances_ActorCameraController = gg.getResults(gg.getResultsCount())
    gg.clearResults()
    local ActorCameraController_Outside = {}
    for i, v in ipairs(instances_ActorCameraController) do
        ActorCameraController_Outside[i] = {address = v.address + offset_Outside, flags = gg.TYPE_FLOAT}
    end
    gg.loadResults(ActorCameraController_Outside)
end

 

[Trews27]

The result is the same. The script is executed, no errors, no values found.