Dark Byte Site Admin Reputation: 458
Joined: 09 May 2003 Posts: 25296 Location: The netherlands
|
Posted: Mon Jul 10, 2017 5:37 pm Post subject: |
|
|
Code: |
call dword ptr [edx]
|
edx contains the address of the function to call, not the address that holds the address of the function
you can try
but if that fails, you can always try:
Code: |
mov ecx, edi
mov edx, [ecx]
push 0x01
push 0x64
push 0x07D0
call dword ptr [edx+0x1c]
jmp [CGateWay_Update_ReturnAddress]
|
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|