GameObject facing - Survey Archeology - Need help

[RivaLfr]

Hi,

I don't find the rotation of GameObject ( Survey ).

I have try all function and VTable ( sub_1ABB20 , CGObject_C__GetFacing_Override , CGUnit_C__GetFacing VTable (index 14), ... ) but I don't work for the gameobject facing.

If someone can help me.

Thank

+rep for usefull reply.

[migtron]

In my private Archaeology bot I'm using entry 14 of CGGameObject_C's VMT (at 0x006E1830), which points to 0x001ABB20. Both addresses are rebased to 0x1000. You mentioned that you already tried that, but you must make a mistake somewhere, because this method works perfectly fine for me. The method takes no parameters and returns a float with the angle in radians.

[Robske]

14th virtual method hasn't failed me, you're doing it wrong.

[RivaLfr]

The return result is in eax? I not find the return result (I call the function with asm)

"mov ecx, " + baseAddress,
"call " + (uint)VTable,
"mov [" + result_Codecave + "], eax",

...

float result = ReadFloat(result_Codecave); // Result not correct
float result2 = ReadFloat(ReadUInt(result_Codecave)); // Result not correct


VTable address is good, baseAddress is good also, I think I don't read the good register.

[migtron]

No, the result is not in EAX, as the method returns a float. The result is on top of the floating point stack, in register ST0.

[RivaLfr]

Thank, the final injection is:

"mov ecx, " + (uint)baseAddress,
"call " + (uint)VTable,
"mov edx, " + (uint)result_Codecave,
"fstp dword [edx]",

After just read a float at result_Codecave.

Thank for your help.