fMtQr How do I cheat?
Reputation: 0
Joined: 04 Feb 2013 Posts: 6
|
Posted: Wed Feb 06, 2013 6:03 am Post subject: Help finding multilevel pointer |
|
|
Hi, Im trying to get the addres of the static value of a multilevel pointer, i've already found 2 pointer poynting to the same address but i m having problems finding the next pointer...
Here is what i have found:
Dynamic Address = 0A2A6DEC
Pointer 1) Address = 0C384970, Offset = 1C
Pointer 2) Address = 060B4DF0, Offset = 0
Pointer 3) ????
I scan to get the opcodes that access: 060B4DF0 this is what i find (look at sample)
I inspect the first element getting an Address of 0C384970 and from the "mov ebp, [ebp+eax*8+00]" since ebp is my base address, eax = 14DBA then i find that my offset = 14DBA*8+0 = A6DD0 so i go to ->add address manually, check "pointer" and since this is the 3rd pointer I add 2 additional offsets, so i fill address with 0C384970, and when adding the first offset i (A6DD0) i see that it doesnt points correctly!?
What i am doing wrong ?? Please id like love to find this static addres im getting mad and i wont stop until i find it (or unless it cant be found by some reason)!! So help
| Description: |
|
| Filesize: |
193.5 KB |
| Viewed: |
1831 Time(s) |

|
|
|