Trouble Making A Pointer

Z

zachillios

Expert Cheater
Table Maker
Joined
Mar 3, 2017
Messages
531
So I'm usually able to make pointers just fine, but this time I'm having quite a bit of trouble. After properly checking to see what accessed the item addresses (I tried like 10 different ones) only one code came up and the code in question is:
Code:
movsx eax,word ptr [rcx+rax*2+10]
So normally I would just try:
Code:
mov {Pointername],rcx
But that's not properly updating when I attempt to use it, it only shows the first item on the list and then doesn't update it further. So how would I go about making a pointer out of this? Here's the code and its surroundings:


Thank you for any help in advance.
 
TheyCallMeTim13

TheyCallMeTim13

Enchanter
Staff member
Administrator
Fearless Donors
Talents
Joined
Mar 3, 2017
Messages
1,794
zachillios said:
I'd use the base the for the memory records and just make your offsets 0*2+10, 1*2+10, 2*2+10, etc.

But you could also just use a registry and LEA (load effective address).
Code:
<i>
</i>push rbx
lea rbx,[rcx+rax*2+10]
mov [Pointername],rbx
pop rbx
 
Z

zachillios

Expert Cheater
Table Maker
Joined
Mar 3, 2017
Messages
531
TheyCallMeTim13 said:
zachillios said:
I'd use the base the for the memory records and just make your offsets 0*2+10, 1*2+10, 2*2+10, etc.

But you could also just use a registry and LEA (load defective address).
Code:
<i>
</i>push rbx
lea rbx,[rcx+rax*2+10]
mov [Pointername],rbx
pop rbx
Thank you so much! That worked perfectly.
 
P

pitufo22

What is cheating?
Joined
Apr 10, 2019
Messages
2
the money adress is hidden and variable
i got this problem i scan to get the adress.

25361D74

then i get where the adress is being written.

i got this

175D6F19 - 05 10000000 - add eax,00000010
175D6F1E - 8B 4D 10 - mov ecx,[ebp+10]
175D6F21 - 89 48 0C - mov [eax+0C],ecx <<
175D6F24 - 8B 47 24 - mov eax,[edi+24]
175D6F27 - 40 - inc eax

EAX=25361D68
EBX=00000001
ECX=00000030
EDX=10BDFEF8
ESI=14EED2A0
EDI=14EDC428
ESP=009EF1A0
EBP=009EF1F8
EIP=175D6F24

what should i do next ? what do i have to inject ?
 
Top