Will Offsets

[roger21]

I am having a lot more trouble than usual finding the Will offsets - does anyone have any tips?

I find the address just fine, but it is not turning up any offsets at all. I tried on two different PC's and 4 different exe's.

Blarg, I don't want to have to input a new Will address every time i reload.

Thanks!

[evilimprint]

All i can tell you is they changed their method for strings.

[roger21]

Oh, wow, interesting.

I just wrote a little program to scan all the addresses within 1000 of what I suspected the 3rd and 4th offset should be and turned up nothing. Are offset 1 and 2 not the same as x location? They have been that way since 2011 at least.

I can still find the string and its address, so I can just re-find it every time and input it manually. It will work but so inelegant. No hints on how to find the static now?

Thanks! -rog

[evilimprint]

i had to follow it back in IDA, but i can tell you now its nothing like it was. They added some new method for strings that should save the client on memory.

[roger21]

Dern, i have no experience with dissasemblers. I guess it's as good a reason to learn as any. Thanks for the point in the right direction.

[neuronet]

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>369</ID>
<Description>"Will Pointer"</Description>
<LastState Activated="0" RealAddress="31C800A8"/>
<Color>80000008</Color>
<VariableType>String</VariableType>
<Length>10</Length>
<Unicode>1</Unicode>
<ZeroTerminate>1</ZeroTerminate>
<Address>"Atlantica.exe"+0278882C</Address>
<Offsets>
<Offset>0</Offset>
<Offset>2FC</Offset>
<Offset>1F0B0</Offset>
<Offset>F0</Offset>
<Offset>15B38</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatTable>

[roger21]

Thanks Neuro!

This will be very helpful =D

Very interesting - i was looking all around this area, but the last offset of 0 really threw me off - I have never seen this before.