[General] Multiple Pointers Help

[Malstrom]

I've searched these forums as well as quite a few others, have read tutorials, have searched google, etc.

The steps I've taken so far.
Game: Vanguard
Application: CE 5.5

I can find my character's X,Y,Z locations in memory using CE. That's about as far as I can get. Those are dynamic though and each time restarting the game those locations in memory change.

I've tried 2 or 3 methods to find their base pointers.

1) Use the built in pointer finder in CE. I let the defaults stay at a depth of 5. If I let the search go through all the memory and take its time I get thousands of results. The ones labeled vanguard.exe [hexloc] have similar offsets under them, but some are different. If I just choose any of those found pointers at random and create a multi pointer out of it, it returns no result. looks like: (??)
If I expand the depth to say 10 and do the search again, it doesn't seem to help as I get similar results.

2) Doing individual pointer searches. With my X location I say "What writes to this" and then "Get more Information". I do a search for the value that is mentioned there and get about 200 results. The tutorials I've read show only getting 1 result. If I only got 1 or 2 results I could continue, but I'm not sure how to deal with 200 pointers.

A suggestion I've read if this happens is to use what reads from this, instead of what writes to this. I get a list of about 20 addresses.

Here are some images of where I've left off. Any direction would be greatly appreciated.

Red circle around -5812 is my X location.
Right clicking on that, using "what writes to this loc" and then more info, I get the value 0BD56000 see image below this for that screen. Doing a new search for that Hex value gives me 209 results. ouch.


What writes to my X location value.


As a last ditch attempt I tried using what reads to this location which also gives too many results

[lanman92]

In those assembler listings, you need to find out where the eax/esi comes from. I'm guessing it would be from ecx and those are member functions. You then need to find the pointers to your playerbase.

[luthien23]

1) Use the built in pointer finder in CE. I let the defaults stay at a depth of 5. If I let the search go through all the memory and take its time I get thousands of results. The ones labeled vanguard.exe [hexloc] have similar offsets under them, but some are different. If I just choose any of those found pointers at random and create a multi pointer out of it, it returns no result. looks like: (??)
If I expand the depth to say 10 and do the search again, it doesn't seem to help as I get similar results.

After you have gotten those thousands of results save them in a file.
Close close the game, restart it and attach CE to it again.
Locate X again in the new instance of the game.
Go to the pointer finder, load the file you previously saved and choose "Rescan memory" and scan for the new location. This will erase all the pointer paths you saved who are not able to reach the new pointer location. Most likely there will only be 1 or 0 results left. If it is 1 you are done and if it is 0 it means that you have to scan with more depth or could also mean that such values are inside a linked list in a variable position and thus reachable via variable depths so this approach will not work to locate them.