Posted: Mon Oct 10, 2016 8:28 pm Post subject: Pointerscan cross referencing
Hey so I've been trying to find an Entity List for a game. I'm trying to do it in the most evasive way as possible so while I still don't know all the concepts too well I don't want to do AoB injection or the likes.
I was able to find the list in one other game when I got two addresses of the player and an enemy and did a pointerscan on both. Once I managed to get them down low enough I noticed pointers with almost identical offsets bar one. So I looked in the memory region where the offset was different and found the entity list. I'm assuming this is how its typically done?
Anyway in my current game scanning for the player isnt too bad and I have a list of 70 consistent multilevel pointers. Scanning for the enemies however is a bit more difficult and my pointerscan for them is in around 15k. I managed to reduce them both a bit by searching a specific last offset however 15k is still pretty large.
What I was wondering is could I compare the base addresses found in the player's pointscan list to that in my enemies. Or could I cross reference the offsets and see how well they match up i.e. if only one offset is different that is most likely the pointer I need.
Any help would be greatly appreciated. I've tried searching a lot of the forums and looking at videos and just can't find anything relating to this.
If one pointer scan is coming out with much better results than another then they aren't likely to cross reference well unless you can find a pointer table in which case you would be golden. Just that pointer scans already account for small offsets like that.
Maybe it would help to name the game. Could be a table for it already.
The reason why one scan is harder than the other is because I know my health but not my position in the entity list. Basically its an online game which I don't think I'm allowed to talk about here so I won't get into too much detail. So I'll spawn in, in an unknown position most of the time. Once I die a new entity will take my place so I can then figure out that entity's health. Just the constant motion makes it hard to lock down anything.
So if I had two pointerscans how exactly would I go about finding the base address which I can offset to find the entity list.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum