post the new mem offsets

10/16/2011 20:46 Multani2842#16
Thank for the help. So i did apply the method and found the log buffer. I also found the corresponding structure pointing to it, figuring it was something like:
  • ptr to index array
  • next adr to write in the index array
  • something
  • ptr to array that contains the messages
  • next adr to write in this array

Following this i am stuck. I did put some break on what access this pointers and got 2 offset (4 and 14).
After that something goes wrong: the corresponding addresses (at -4 and -14) are nowhere to be found, and if i put some break on it they are never trigger.

How did you do to find the base adr of the structure (here 30 or 40) and so on ?
10/17/2011 06:51 Cooleko#17
I'm not sure what has been answered but since you took the efforts to dig around so much ill give you more detail.
You must be using Cheat Engine for this method to help you.

Once you find the memory address you are looking for, right click on it and select 'Pointer scan for this address'.

You can select how Deep "Max Level" and how Wide "Maximum Offset value"
For FFXIV most offsets are 3-5 deep and the largest I have encountered was just under 4000 wide.

Because of this I always scan 4096 wide, 6 deep.

If you start/stop here it will take about 10 hours to scan for your offset (can vary +-9 hours)

Now, To give yourself a huge head start you can trace the function calls that change your memory address and then add the offsets that you find to the pointer scanner, then the scan will take much less time (30 minutes).

Tracing the function calls is easy, and I can walk you through it, however google 'Break and Trace Cheat engine' for simple tutorials that will give you more information than I will with my explanation.

Hope this helps
10/21/2011 00:32 Multani2842#18
I did gave a chance to the pointer scan and found a valid path to the log structure. But too bad, the halloween event seems to have change the adresses, i will have to remake it again.

I am not very fan of the pointer scan: it can take a hell of time for nothing :(


Anyway, my next hurdle is the inventory, i tried to guess how it was build: some kind of fixed array, tracked the number of item in it, and in stack, etc ... . But every thing resulted in failure.
Did you got some clues for this one ?
10/21/2011 02:08 Cooleko#19
I think the offsets are all still the same >.>