View previous topic :: View next topic |
Author |
Message |
slysnake96 How do I cheat?
Reputation: 0
Joined: 31 May 2019 Posts: 2
|
Posted: Fri May 31, 2019 1:19 pm Post subject: Trouble With Multi Level Pointer |
|
|
Please help,
I am relatively new to MLP's and am having trouble understanding what i should do next.
I have been following the trail of pointers in CE to find the base address of what i am looking for and i have run into a road block.
I have come across something i have not seen before since i have never had to follow a pointer so far before.
This is what i have run into:
7FFD92A54D3B - 49 8B 4C 33 08 - mov rcx,[r11+rsi+08] <That is what is confusing me the [r11+rsi+08] part
How do i work that out so i can learn what to do if i ever run into something like this again.
Full opcodes accessed display of what's going on:
7FFD92A54D34 - 4D 85 C0 - test r8,r8
7FFD92A54D37 - 4D 0F45 C8 - cmovne r9,r8
7FFD92A54D3B - 49 8B 4C 33 08 - mov rcx,[r11+rsi+08] <<
7FFD92A54D40 - 4D 8B C6 - mov r8,r14
7FFD92A54D43 - 41 8B D2 - mov edx,r10d
RAX=0000000000000000
RBX=0000000000000005
RCX=0000019D93CBE470
RDX=0000019D99A376C0
RSI=0000000000000050
RDI=0000019D93CBF420
RSP=000000612EB8F3F0
RBP=000000000000003D
RIP=00007FFD92A54D40
R8=0000000000000000
R9=00007FFD92D30000
R10=000000000000000E
R11=0000019D93CBEA30
R12=0000000000000006
R13=0000000000000006
R14=000000612EB8F4F0
R15=00007FFD93BCB160
previous pointer is this:
shown exactly as it is entered into the pointer.
OffsetBoxTop: 148 > 19DAF926C60+148 = 19DAF926DA8
OffsetBoxMid: 70 > [19DB9D2BD80+70]-> 19DAF926C60
OffsetBoxLow: 28 > [19D93CBE470+28]-> 19DB9D2BD80
AddressBox: 19D93CBEA88 -> 19D93CBE470
Please help me figure out what my next address and offset is
Thanks heaps in advanced
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25793 Location: The netherlands
|
Posted: Fri May 31, 2019 1:40 pm Post subject: |
|
|
If RSI is always the same offset (50) then the offset will be 58
BUT, in case it changes, then try a different path. See if there is another address. Perhaps one a few paths earlier
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
slysnake96 How do I cheat?
Reputation: 0
Joined: 31 May 2019 Posts: 2
|
Posted: Fri May 31, 2019 2:53 pm Post subject: |
|
|
I managed to find exactly what i was looking for thanks to you amazing advice.
I truly appreciate the help Thanks
PS
When i heard about Multi Level Pointers I wasn't expecting something could be longer than a decuple level pointer
|
|
Back to top |
|
 |
|