Memory scanning, code injection, debugger internals and other gamemodding related discussion
pharaon
Expert Cheater
Posts: 93 Joined: Sat Aug 05, 2017 1:42 pm
Reputation: 0
Post
by pharaon » Sun Apr 01, 2018 4:00 pm
hope some one can help me understand this code
Code: Select all
RAX=E336871304
RBX=00000004
RCX=00000339
RDX=00000001
RSI=E336876F40
RDI=231B2642910
RBP=E33686DBF0
RSP=E33686DAF0
RIP=7FF6D68AF130
Probable base pointer =E336871304
7FF6D68AF124 - mov [rax-0C],r13
7FF6D68AF128 - mov [rax-04],r13
7FF6D68AF12C - mov [rax+04],r13d
7FF6D68AF130 - lea rax,[rax+1C]
7FF6D68AF134 - sub rcx,01
TimFun13
Expert Cheater
Posts: 1354 Joined: Fri Mar 03, 2017 12:31 am
Reputation: 6
Post
by TimFun13 » Sun Apr 01, 2018 5:29 pm
set the address at the value of RAX-0xC to the value of R13 (as quad word)
set the address at the value of RAX-0x4 to the value of R13 (as quad word)
set the address at the value of RAX+0x4 to the value of R13 (as double word)
set the value of RAX to the value of RAX+0x1C (as quad word)
subtract the value of RCX by the immediate value of 0x1 (as quad word)
[Link]
[Link]
[Link]
SunBeam
Administration
Posts: 4779 Joined: Sun Feb 04, 2018 7:16 pm
Reputation: 4408
Post
by SunBeam » Mon Apr 02, 2018 6:27 am
That doesn't look like a base pointer with that value. And if it is, I'm looking at code from an emulator. PS emulator? You won't be able to find a proper base pointer..
Users browsing this forum: No registered users