Posted: Thu Sep 23, 2010 2:18 am Post subject: im having a problem using the offsets to find a pointer
just need some quick help decoding this offset
mov [edx+ebx*4+0c]
i tried 0c and 0 both of them changed to original value so its not right help please XD
Joined: 17 Feb 2008 Posts: 520 Location: Inside the Intel CET shadow stack
Posted: Thu Sep 23, 2010 10:04 pm Post subject:
To elabourate a little on what XaLeX said...
Let's say your instruction is:
mov [edx+ebx*4+0c], 0x123
1) Multiply ebx by 4.
2) Add 0x0C (decimal 12) to that value.
3) Add that to the value in edx.
4) The number you have now is your address. Write 0x123 to that address.
So, for example, if ebx was 6 and edx was 0x00040000:
Looking at the *4 part, it looks like ebx is the index of an array stored at 12 past edx. So it might have 3 dwords describing an array, and then an array after that. But then again I don't even know what game your hacking or anything so I'm probably reading to much into one instruction.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum