Page 1 of 1

Pointer Help

PostPosted: Tue Sep 15, 2009 1:12 pm
by bobbyxrc
hi i have read through the tut... but i still do not understand quite well~ im totally new

About pointer search reguarding Module << what i put and on the + ___ < what do i put? the game.exe and the

i have search the address of health and i get the address

Example Only:
(HP ADDR)
680019B8
Searching for lvl 1 pointer
i do a pointer search with this address From:680009B8 To:680019B8
i get pointer 1: 580019B8 offset 0x368
so i put complex [0x580019B8]+0x368
(module is left blank and so is + ___)

searching for lvl 2 pointer (if im not worng in understanding pointer)
From:580009B8 To:580019B8
pointer 2: 480009B8 offset 0x8
complex: [[0x480009B8]+0x8]+0x368
(module is left blank and so is + ___)

searching for lvl 3 pointer
From:480009B8 To:480009B8
pointer 3: 47FFF9B8 offset 0x4
complex: [[[0x47FFF9B8]+0x4]+0x8]+0x368
(module is left blank and so is + ___)

searching for lvl 4 pointer
From:47FFE9B8 To:47FFF9B8
pointer 4: 37FFF9B8 offset 0x0
complex: [[[[0x37FFF9B8]+0x0]+0x4]+0x8]+0x368
(module is left blank and so is + ___)

and also where i search for the lvl 5 pointer it refer back to the lvl 3 pointer address: and from lvl 3 pointer address it refer back to lvl 4 pointer address it just keep going on and on...

so the back of my complex become +0x0]+0x4]+0x0]+0x4]+0x0]+0x4]+0x8]+0x368 <<< the +0x0]+0x4] just keep going on and on...

what have i done wrong ? please help~

PostPosted: Tue Sep 15, 2009 1:39 pm
by WhiteHat
Similar case to Aspras, and maybe many more members...
http://memoryhacking.com/forums/viewtop ... 8012#38012

Just follow for several posts after.
They may not answer your problem directly, though...

PostPosted: Tue Sep 15, 2009 4:10 pm
by bobbyxrc
so what about the module... what do i add in there ? or i just basically leave it blank ?

PostPosted: Tue Sep 15, 2009 7:43 pm
by WhiteHat
In my understanding, if you really want to build the Complex Address (Pointer Trails), you have to continue digging that pointer till you found static address, that is when module name comes up...

Don’t know of how other people would do, but i just combined these two methods from tutorials section:
http://memoryhacking.com/forums/viewtopic.php?t=2592
http://memoryhacking.com/forums/viewtopic.php?t=2695

And this is what i meant by combining those methods:
http://memoryhacking.com/forums/viewtop ... 8163#38163