| View previous topic :: View next topic |
| Author |
Message |
kdorui How do I cheat?
Reputation: 0
Joined: 15 Mar 2021 Posts: 3
|
Posted: Mon Mar 15, 2021 9:29 am Post subject: quick dumb offset question |
|
|
So I'm not sure how to figure this offset out so i was hoping someone would be willing to help out. Not sure what to do with [rcx+rbx]. is rbx the offset? I can not submit urls yet since i just joined, but once I can ill add it to the post.
_________________
Cs noobie |
|
| Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4716
|
Posted: Mon Mar 15, 2021 11:10 am Post subject: |
|
|
Either. Look at the values of the registers. The lesser one is probably the offset.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
 |
kdorui How do I cheat?
Reputation: 0
Joined: 15 Mar 2021 Posts: 3
|
Posted: Tue Mar 16, 2021 8:41 am Post subject: |
|
|
I still can't find the pointer to save my life. rbx's address is 00000014 and i convert it to decimal and get 20 and add it as offset. It does not work, im probably doing something basic wrong. Please halp.
Also sorry for late reply.
_________________
Cs noobie |
|
| Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4716
|
|
| Back to top |
|
 |
kdorui How do I cheat?
Reputation: 0
Joined: 15 Mar 2021 Posts: 3
|
Posted: Wed Mar 17, 2021 11:15 am Post subject: |
|
|
So I have been doing pointer scans and I get a bunch of pointers that point the end value, but after a certain amount of time they all change to empty. They are all "Threadstacks" so not sure what to do from here. I added an attached snip of what it shows at the end.
edit - I added the address with its offests, to possibly show some extra data.
| Description: |
|
| Filesize: |
30.63 KB |
| Viewed: |
1486 Time(s) |

|
| Description: |
|
| Filesize: |
76.65 KB |
| Viewed: |
1492 Time(s) |

|
_________________
Cs noobie |
|
| Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4716
|
Posted: Wed Mar 17, 2021 12:24 pm Post subject: |
|
|
You probably won't be finding a good pointer to that value.
If you're trying to automatically get that value, try code injection instead. Inject code at an instruction that (uniquely) accesses the address of that value and copy the address into a memory location you control. Search for "injection copy" for more information.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
 |
|