Well, rdx+rax could be anything. You'll need to copy it using code injection. Look up "injection copy" / "injection copies" on youtube. _________________
I don't know where I'm going, but I'll figure it out when I get there.
Well, rdx+rax could be anything. You'll need to copy it using code injection. Look up "injection copy" / "injection copies" on youtube.
Thank you.
It's an emulator so there are thousands of other addresses being written by the instruction so I suppose this method is impossible.
Edit:
Not to mention that the line below it, nop [rax+00000000], can't be compiled by code injection for some reason.
Edit2:
I can fix that by just declaring the instructions manually with DB, but the pointers aren't static at all since it's being used by a bajilion other instructions at all, so you can't use this method in the end.
Edit3:
Holy shit, nevermind, I actually did it! The EAX (offset) value is static for the address I want!
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum