Unlimited height on the jetpack

[op9080]

Now I'm happy.

 

Address 0x8703D8 - float constant, maximum height of the jetpack

Unit: meter

Value: 100

Notes:

• The height is relative to ground, not an absolute height.
• You actually get about 20 more meters because there's some code there to stop you gradually when you cross the limit.
• This constant is not shared by any other code, so it's safe to change.

Code that checks the limit:

0067F260: D8 5D 08            fcomp       dword ptr [ebp+8]0067F263: DF E0               fnstsw      ax0067F265: F6 C4 05            test        ah,50067F268: 7A 47               jp          0067F2B1

 

How to remove:

Change byte at 0x67F268 from 0x7A to 0xEB to change it to an unconditional jmp and ignore the test.

 

hoodlum file address: 0x27E668

EU version: same

[demonj0e]

omg op9080 your are a god, how you find allt his out, this is goign onto my sa loader straight away,

[Jmyst]

Grove 4 Life-->How do u install it?<--Jmystik

[demonj0e]

cleary ure user title dosenot speak the truth

 

i have a gta sa loader that atm removes the hydra topspeed and now ive added this to it so im going to test soon

 

if it works ill send it to u

[adam schiller]

hmm this is already been in deviouses trainer for ages sorry m8.But if you could be able to parachute from that height that would be awesome or make planes to have unlimited height.

[op9080]

There's no problem parachuting from that height. I jumped from Liberty City and the parachute worked as usual.

 

Unlimited height on aircraft:

 

Address 0x8594DC - float constant, maximum height of aircraft

Unit: meter

Value: 800

 

Code that checks the limit:

 006D2612: D8 1D DC 94 85 00  fcomp       dword ptr ds:[008594DCh] 006D2618: DF E0              fnstsw      ax 006D261A: F6 C4 05           test        ah,5 006D261D: 7B 1E              jnp         006D263D

 

How to remove:

Change byte at 0x6D261D from 0x7B to 0xEB to change it to an unconditional jmp and ignore the test.

 

hoodlum file address: 0x2D1A1D

EU version: same

 

I tested the Hydra & the Hunter, parachuted from the Hydra from a height of 3012 meters - no problem.

I didn't check if this applies to flying cars. Maybe someone else wants to do the honors.

Edited November 14, 2005 by op9080

[adam schiller]

oh nice so what do I edit do you think somone could add this to a trainer or something?

 

nice work man.

[demonj0e]

ill add to my sa loader now and upload if it works

[adam schiller]

Will that make it EASIER for the idiots who cant install the mod themselfs (me lol)

[demonj0e]

should do all u do is run it and it will start up sa and apply the settings

im just working on an interface for it and then ill upload ok

[TonyB.]

Edit: loader doesnt seem to work right (http://tony-b.net/loader2.exe)

Edited November 14, 2005 by TonyB.

[blitz1008]

very nice find op9080

 

[op9080]

To people writing loaders:

• For doing the patch in-process, use VirtualProtect() + store the byte.
• For doing the patch remotely use VirtualProtectEx() + WriteProcessMemory().
• If you're trying to patch the bona fide encrypted exe, you can't just do it by creating a suspended process, patching and then resuming it. The exe decrypts its code & constant sections during the first few seconds. The patch needs to be done after the decryption. So you have to insert a delay and let it run for awhile. The best thing to do is to make a loop that does something like - a) wait 5 seconds, b) read a block of code from the code section and compare it to an uncrypted version of the block you've previously extracted. c) If it's been decrypted, go ahead and patch. Otherwise, repeat the loop.

[TonyB.]

ahh, VirtualProtectEx... forgot about that (i do everything inprocess now) (rewrites loader w/ that and a sleep())

Edited November 15, 2005 by TonyB.

[adam schiller]

how do I put it in game??

[adam schiller]

have you done the easy script?

[mageezer]

 

Edit: loader doesnt seem to work right (http://tony-b.net/loader2.exe)

 

(rewrites loader w/ that and a sleep())

By that do you mean that you've re-written the loader at http://tony-b.net/loader2.exe? Because I downloaded that and it doesn't work, there's still a limit on my jetpack and aircraft heights. Will it work on a hoodlum exe?