How To Create Hook For Shit Like [esi+ebx*04-18]

[exassasinx]

in case of mov [ebx+10],esi it's simple to create a hook by doing
mov [testhook],ebx but....
mov [testhook],[esi+ebx*04] doesn't work.

[Bloodybone]

in case of mov [ebx+10],esi it's simple to create a hook by doing
mov [testhook],ebx but....
mov [testhook],[esi+ebx*04] doesn't work.

What should work would be :

Code: Select all

push eax
lea eax,[esi+ebx*04]
mov [testhook],eax
pop eax 

[exassasinx]

well eax is used
original code is
mov [esi+ebx*04-18],eax

[Bloodybone]

well eax is used
original code is
mov [esi+ebx*04-18],eax

then use for example edx

or any other register that isn't used in the script and isn't eip,ebp or esp

[exassasinx]

how to know which stack/register isn't used...is it in black on toggled breakpoint?

[exassasinx]

everything is red except edx

[Bloodybone]

how to know which stack/register isn't used...is it in black on toggled breakpoint?

As long as it isn't used in the script you're ok. As long as you push and pop it

[STN]

Learn assembly language then you will know what to use and not.