Posted: Sun Oct 06, 2024 5:46 am Post subject: Searching for pointer value does not find any results
Hi!
I want to find pointer to player life in D2 classic v1.03 patch. From newer patches whose pointers are known I know it should b some 3 or 4 level pointer.
So far I have never managed to find that entire pointer myself so I would like to learn how to do it correctly.
From what I remember first thing is to find value itself. That I did find. In this case it is in multiples of 256 hence large number. I know that second step is to find out what writes to this address and then search for the value in extra info window. But in my case it finds 0 results. What do I do wrong?
I also attached screenshot d2_103_ce.png to show what I am doing.
Later I also searched for every other register value but the only one that gave 1 result was EBP=036E3660. So I added found address as a pointer but for offset I had to calculate myself instead of looking it up from Extra Info window. I am not sure if this was expected work flow or if I am doing something wrong?
What you're doing might work in some cases. However, the value of eax might not be the same as something like add eax,04 before the found instruction might throw your work into the rubbish. It is always better to generate a pointer map and scan within it. Generating pointer maps and pointer scanning is almost always going to be faster than finding a pointer using this method or even assembly.
What do you mean by that? Is it the idea that I search for the values of pointers like I described in general or is it the fact that I searched for something other than EAX value?
Quote:
However, the value of eax might not be the same as something like add eax,04 before the found instruction might throw your work into the rubbish.
What should I do about that offset 04? Should I search for some other value instead of one that is suggested by CE or does it mean that in that case pointer map generation is the only way to get pointer?
I have not had success with pointer map generation in past. Does it work large and complex structures? Like in this game structs can easily go 3 to 4 levels deep and many have tens of fields.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum