Getting a value with two pointers? [Solved]

[ned_is_dead]

Hey guys,

I have a question about creating a pointer via AOB injection.

Normally I search for a value and check what is accessing it. And with that method I find something like:

mov rdi,[rsi+10]

So I can create a AOB injection for that instruction, create a pointer in that script, add the pointer to the table
and add the offset 10 to get to my value. Done!

In my last attempt to find a specific value I found the following instruction:

mov rdi,[rsi+rbx+10]

Now I am not able to do something like this to create a pointer:

mov [pMyPointer],rsi+rbx

rsi contains an address and rbx contains and offset value as address. Something like 000180. So to get to my
value I would need to use the pointer address from rsi and add 000180 and add 10.

How do I do it?

Just creating a pointer for rsi and a second pointer for rbx does not work, because I cannot add the "address" from the rbx
pointer as offset to the rsi pointer.

Any help would be great.

[Rhark]

Example:

Code: Select all

push rax
lea rax,[rsi+rbx]
mov [myPointer],rax
pop rax

[ned_is_dead]

Thank you.

That worked great!