Announcement

Collapse
No announcement yet.

RenegadeEX2 - EX Plus 0wnage

Collapse
This is a sticky topic.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • RenegadeEX2 - EX Plus 0wnage

    RenegadeEX2 - EX Plus 0wnage

    Well, I keep mentioning I'm working on this. Having started this complete source rewrite then leaving it sit for 2 years made things a little difficult. After my ~2.5 year marathon of playing Halo Reach (187 DAYS of playtime, yeah seriously), I got the urge to come back to this. Programming 16 hours/day is killing me neck though. Anyway, I'll link the ReadMe rather than wasting time copy-pasting a bunch of stuff. Check her out and see how she handles. I was a little torn between releasing something for testing and releasing something more filled with features, but I'll hopefully get to the extras soon.

    ReadMe
    Download v2.00
    Download v2.01
    Download v2.02
    Download v2.03

    Edit: It should be noted that the time to use Auto Hook is when there's a ROM actually loaded and playing.
    Edit 2: If anyone wants Dolphin support, they'll need to figure out how to go about finding the GCN/Wii ram in process memory reliably. I tried checking out the beginning of GCN RAM, and 2 of the 3 games had the same thing ("Licensed by Nintendo" or something in ASCII) but Mario Sunshine was different. I need something static in the RAM of every game or something unique in the emulator's process memory near a pointer. hmm. As I write this, I wonder how many pages in the process memory would be big enough to be GCN or Wii RAM...
    Edit 3: Yep, there's only about 7 blocks of memory in the process that are big enough to be RAM. I suppose giving people a list to play Russian roulette with hook addresses is better than nothing. Now how big is Wii memory? I could use some info there. I saw something about 2 different memory regions (24MB and 64MB) but are we hacking both? How's it work for code purposes? Seems like most of the codes are ASM hacks anyway so it's a bitch to find something to test with.

    Edit 4 (2015): New version. Memory editor added, and some minor fixes to file comparing.

  • #2
    I'm going to test this out now. Thanks, Viper.
    I only bother with things that interest me.

    Comment


    • #3
      Probably can't check it out tonight, but downloaded to check it out tomorrow
      I may be lazy, but I can...zzzZZZzzzZZZzzzZZZ...

      Comment


      • #4
        Nice app if only the memory editor was there it would rock out with its cock out.
        Spoiler Alert! Click to view...

        THE BAD GUY!!!!!!

        Comment


        • #5
          Originally posted by helder View Post
          Nice app if only the memory editor was there it would rock out with its cock out.
          Well, for now you could always try using auto hook to get the process address and copying that to the old version. I think I want to get started on the memory editor for this version sooner rather than later, but we'll see.

          Comment


          • #6
            Thanks for the nice tools!

            UH-OH! I got this when download your tool... I am using Chrome browser!

            RenegadeEX2v200.zip is not commonly downloaded and could be dangerous.
            I think is... VIRUS or MALWARE or something?
            Last edited by AsPika2219; 03-28-2013, 09:18:56 PM. Reason: Can't download Renegade?
            Doakan untuk MH370 / Pray for M370

            Comment


            • #7
              Originally posted by AsPika2219 View Post
              Thanks for the nice tools!

              UH-OH! I got this when download your tool... I am using Chrome browser!



              I think is... VIRUS or MALWARE or something?
              To the right of the "Discard" button there is a drop-down. Open the drop-down and click on "Keep". And no, it's not a virus.
              Not taking any requests at this time.

              Bored? Watch some of my hacks here.

              Comment


              • #8
                OK! Thanks Abystus.
                Doakan untuk MH370 / Pray for M370

                Comment


                • #9
                  My day was kinda shot so I spent a couple hours and added the Artemis library and stuff. Once I got it to compile, I nearly shit myself when it worked on the first try. Probably took longer to setup the extra GUI stuff. lol

                  I also added the GCN option, but auto hook just narrows it down. I'll hopefully start on the memory editor tomorrow.

                  Comment


                  • #10
                    Well it appears to work in Windows 8 64-bit. Hacked my first N64 asm hack (though it was already hacked before), so I'm happy. Kinda wished more games worked with Nemu64 though as I can't debug outside of that emulator :/. Would it be possible for you to do something like cheat engine does, allowing breakpoints to be set in memory (via your app), and having it break and trace the instructions (I believe if you are continually monitoring the emulator might be locked until the tracing is done)? I would think its possible, though not really sure on the "how" to get current pc, register values, etc back since it's running in its own environment. I think this would be more like remote debugging, though again I am not all that knowledgeable about this sort of memory interaction (almost like VM).
                    Not taking any requests at this time.

                    Bored? Watch some of my hacks here.

                    Comment


                    • #11
                      Originally posted by Abystus View Post
                      Well it appears to work in Windows 8 64-bit. Hacked my first N64 asm hack (though it was already hacked before), so I'm happy. Kinda wished more games worked with Nemu64 though as I can't debug outside of that emulator :/. Would it be possible for you to do something like cheat engine does, allowing breakpoints to be set in memory (via your app), and having it break and trace the instructions (I believe if you are continually monitoring the emulator might be locked until the tracing is done)? I would think its possible, though not really sure on the "how" to get current pc, register values, etc back since it's running in its own environment. I think this would be more like remote debugging, though again I am not all that knowledgeable about this sort of memory interaction (almost like VM).
                      I always wished there was a way to do that, but I don't see how it'd be possible to breakpoint an x86 app and get the MIPS/whatever stuff from the outside. I wanted to put a debugger in the Mupen64 source, which surprisingly compiled with the previous Renegade built in, but I never got breakpoints working. I think I had it all setup, but the goddamn thing wouldn't halt until it was like 12 instructions past the read/write.

                      Comment


                      • #12
                        Originally posted by Viper187 View Post
                        I always wished there was a way to do that, but I don't see how it'd be possible to breakpoint an x86 app and get the MIPS/whatever stuff from the outside. I wanted to put a debugger in the Mupen64 source, which surprisingly compiled with the previous Renegade built in, but I never got breakpoints working. I think I had it all setup, but the goddamn thing wouldn't halt until it was like 12 instructions past the read/write.
                        Well it was worth a shot lol.

                        Anyways, I have a few feature/wish requests that I've come up with after using the new Renegade for bit:

                        Hook Tab:
                        Code:
                        -Hook button moved to the right or below "Hook Process" drop-down.
                        -Preset information can be auto set on hook based on executable name.
                        - or.. remove the Hook Tab entirely as in the mock-up below.
                        Memory Editor Tab (I know this is a WIP):
                        Code:
                        - Opens in its own window.
                        - Multiple instances can be opened.
                        - Auto refreshed and live to input.
                        - Cell color change upon value change (similar to the red flash when values change in cheat engine).
                        - Move "Memory Dump" here.
                        - Right-click menu to perform various actions.
                        Search/Cheats Tabs:
                        Code:
                        - A pointer scan of sorts (similar to cheat engine) that sends multiple threads out in different paths to return, and be able to refine pointers in a view-able/save-able list.
                        - Move/Shrink Search History, and move Results below Search (sucks switching tabs to see results).
                        - Add Memory Watch (A place to watch the value at a specific addresses outside the memory viewer window.)
                        - Active Cheats Moved to the "Cheat" Tab.
                        - Not sure what "Label" is as there is a value entry section already (does it have a purpose?).
                        - Quick shortcut search buttons change to text instead of symbols ("Init" - This could be "First Scan", "Equal", "Not Equal", "Increase", "Decrease").
                        - Search/Reset buttons moved below the "Search Type" section.
                        - Hide "Value(s)" and "-" labels when not in use.
                        - Result count moved to Results label of frame.
                        - Right-click menu in Results grid to perform various actions.
                        General:

                        Code:
                        - Tool-tips,(Button|Menu) images, etc.. 
                        - Default action on Enter key press within value fields, or search fields.

                        That's about all I have for now. I'll be testing it some more over the next few days (Nemu64 is so cumbersome! can't believe anything was ever hacked in this...) Hope to see more progress on this application as it seems to be very useful.

                        By the way, I made a quick mock-up of the layout, though it's just for reference to the above (though I did not get time to refine/tweak it more with all your features due to my wife/kid wanting my attention lol). Thanks for continuing work on the project (has been quite a while since it has seen an update).

                        Not taking any requests at this time.

                        Bored? Watch some of my hacks here.

                        Comment


                        • #13
                          Anyone else have issues with both this and the previous incarnation of Renegade on Win7? I was trying to search a file for a known value and kept crashing at the end of the search. That obviously shouldn't happening something so simple, so I'm wondering if it's Win7 fucking with me. I had to have tested doing exactly this building at least one of these. Unless I fucked it up later somehow while only testing on emulators. I should boot XP and try, but I'm running a checksum tool to try to find what the fuck kind of checksum Juiced 2 saves use.

                          Comment


                          • #14
                            I haven't had any crashes with it on 7, only hook problems. It won't auto-hook pcsx2, it says the RAM starting area is 0x1F000000 when in actuality it is 0x20000000. Same with PJ64, could never get it to give the right addresses, the only way I've been able to get N64 RAM addresses is if I use Mupen with Renegade built in to it.

                            Comment


                            • #15
                              good to see you're still working on this app viper, it's been a while hahaha I used a lot when the ds hacking started

                              Comment

                              Working...
                              X