Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Trouble With Multi Level Pointer

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
slysnake96
How do I cheat?
Reputation: 0

Joined: 31 May 2019
Posts: 2

PostPosted: Fri May 31, 2019 1:19 pm    Post subject: Trouble With Multi Level Pointer Reply with quote

Please help,
I am relatively new to MLP's and am having trouble understanding what i should do next.
I have been following the trail of pointers in CE to find the base address of what i am looking for and i have run into a road block.
I have come across something i have not seen before since i have never had to follow a pointer so far before.
This is what i have run into:
7FFD92A54D3B - 49 8B 4C 33 08 - mov rcx,[r11+rsi+08] <That is what is confusing me the [r11+rsi+08] part
How do i work that out so i can learn what to do if i ever run into something like this again.

Full opcodes accessed display of what's going on:

7FFD92A54D34 - 4D 85 C0 - test r8,r8
7FFD92A54D37 - 4D 0F45 C8 - cmovne r9,r8
7FFD92A54D3B - 49 8B 4C 33 08 - mov rcx,[r11+rsi+08] <<
7FFD92A54D40 - 4D 8B C6 - mov r8,r14
7FFD92A54D43 - 41 8B D2 - mov edx,r10d

RAX=0000000000000000
RBX=0000000000000005
RCX=0000019D93CBE470
RDX=0000019D99A376C0
RSI=0000000000000050
RDI=0000019D93CBF420
RSP=000000612EB8F3F0
RBP=000000000000003D
RIP=00007FFD92A54D40
R8=0000000000000000
R9=00007FFD92D30000
R10=000000000000000E
R11=0000019D93CBEA30
R12=0000000000000006
R13=0000000000000006
R14=000000612EB8F4F0
R15=00007FFD93BCB160

previous pointer is this:
shown exactly as it is entered into the pointer.

OffsetBoxTop: 148 > 19DAF926C60+148 = 19DAF926DA8
OffsetBoxMid: 70 > [19DB9D2BD80+70]-> 19DAF926C60
OffsetBoxLow: 28 > [19D93CBE470+28]-> 19DB9D2BD80
AddressBox: 19D93CBEA88 -> 19D93CBE470

Please help me figure out what my next address and offset is Question
Thanks heaps in advanced Very Happy
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25792
Location: The netherlands

PostPosted: Fri May 31, 2019 1:40 pm    Post subject: Reply with quote

If RSI is always the same offset (50) then the offset will be 58

BUT, in case it changes, then try a different path. See if there is another address. Perhaps one a few paths earlier

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
slysnake96
How do I cheat?
Reputation: 0

Joined: 31 May 2019
Posts: 2

PostPosted: Fri May 31, 2019 2:53 pm    Post subject: Reply with quote

I managed to find exactly what i was looking for thanks to you amazing advice.
I truly appreciate the help Thanks Very Happy


PS
When i heard about Multi Level Pointers I wasn't expecting something could be longer than a decuple level pointer Shocked
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites