Completely avoiding encryption by moving live register values into codecaves, this base will help and guide others to make their own project
The decrypted camera address is stored inside of RDX. We apply a (mov qword ptr [rip + offset], reg) patch to write the contents of the register into our codecave
Now using the same method, we do the same for the decrypted actor pointer. Based on RTTI names, this list of actors seems to be some sort of rigid body list. Inside my source code you can see how we filter the actors.
- 3D Bounding Boxes
- Team Check
- Local Player Check
- Dead Check
- Unnamedz03 (for helping me test stuff out and getting me back into r6)
- AyPz78 (for finding stuff with me and sharing cool ideas)