Need help with Pointer

Hacking Call of Duty

Moderators: g3nuin3, SpeedWing, WhiteHat, mezzo

Need help with Pointer

Postby Fukc » Mon Apr 14, 2008 6:07 pm

Program: Call of Duty 4
Target: Ammo clip memory address
Goal: Find pointer address to Ammo clip mem address

Problem:

I have found the Memory address for ammo clip. (00E0DD48)
I also found in MHS what writes to that address.

Which is this line:
Code: Select all
MOV     DWORD PTR DS:[EDI+ECX*4+334], EAX


So the problem i'm having, is that im not sure i know how to convert
[EDI+ECX*4+334] into valid pointer address..

I have read how to do it in MHS (help file and topics here), but i dont know.. Something is still missing from my head.
I think the fact that in my case is multiply by 4 and + 334 together. All other examples had only +12345 without the multiplier.

So far i have tryed these in address modifications dialog.. With complex address turned on.
Maybe one of them is even right, lol. I havent converted any of their values yet into hex code..

Code: Select all
[00E0DD48*4+334]
[00E0DD48*4]+334
00E0DA00+00000005*4+334


Reading from other topics here and the help file, i assume the correct solution would be
Code: Select all
[00E0DD48*4+334]
But im not sure.
User avatar
Fukc
I Ask A Lot Of Questions
 
Posts: 10
Joined: Fri Apr 11, 2008 12:36 am

Postby mezzo » Mon Apr 14, 2008 8:26 pm

00E0DA00+00000005*4+334

= 00E0DA00 + 14 + 334 (these are ALL hex numbers, 4x5 = 14h)

= 00E0DD48

so if the pointer is located at 00E0DD48, you should use
[00E0DA00+(00000005*4h)+0334]

But, EDI and ECX are dynamic; so you may have to find another way around this. A breakpoint script should do the trick.

(anybody feel free to correct me if I'm wrong, just had lunch with my big
boss... *hic*)
- No thanks, I already have a penguin -
User avatar
mezzo
El Mariachi
 
Posts: 739
Joined: Mon Apr 30, 2007 10:27 pm
Location: Antwerp

Postby FrostyHacker » Tue May 20, 2008 1:29 am

Does it ave a easy hack with MHS we can make ???

-FrostyHacker
Me DoZz Catched on vid xD>> http://tu.tv/videos/dozz-speed-hack


Image
User avatar
FrostyHacker
NULL
 
Posts: 122
Joined: Wed Apr 23, 2008 3:23 am

Postby mezzo » Tue May 20, 2008 2:59 am

why are you digging up an old post?
you will have more luck making a new post..
(COD is a recent game and is still being patched a lot, the above is most likely patched already.)
- No thanks, I already have a penguin -
User avatar
mezzo
El Mariachi
 
Posts: 739
Joined: Mon Apr 30, 2007 10:27 pm
Location: Antwerp


Return to Call of Duty

Who is online

Users browsing this forum: No registered users and 0 guests