Page 1 of 1

Need help with Pointer

PostPosted: Mon Apr 14, 2008 6:07 pm
by Fukc
Program: Call of Duty 4
Target: Ammo clip memory address
Goal: Find pointer address to Ammo clip mem address

Problem:

I have found the Memory address for ammo clip. (00E0DD48)
I also found in MHS what writes to that address.

Which is this line:
Code: Select all
MOV     DWORD PTR DS:[EDI+ECX*4+334], EAX


So the problem i'm having, is that im not sure i know how to convert
[EDI+ECX*4+334] into valid pointer address..

I have read how to do it in MHS (help file and topics here), but i dont know.. Something is still missing from my head.
I think the fact that in my case is multiply by 4 and + 334 together. All other examples had only +12345 without the multiplier.

So far i have tryed these in address modifications dialog.. With complex address turned on.
Maybe one of them is even right, lol. I havent converted any of their values yet into hex code..

Code: Select all
[00E0DD48*4+334]
[00E0DD48*4]+334
00E0DA00+00000005*4+334


Reading from other topics here and the help file, i assume the correct solution would be
Code: Select all
[00E0DD48*4+334]
But im not sure.

PostPosted: Mon Apr 14, 2008 8:26 pm
by mezzo
00E0DA00+00000005*4+334

= 00E0DA00 + 14 + 334 (these are ALL hex numbers, 4x5 = 14h)

= 00E0DD48

so if the pointer is located at 00E0DD48, you should use
[00E0DA00+(00000005*4h)+0334]

But, EDI and ECX are dynamic; so you may have to find another way around this. A breakpoint script should do the trick.

(anybody feel free to correct me if I'm wrong, just had lunch with my big
boss... *hic*)

PostPosted: Tue May 20, 2008 1:29 am
by FrostyHacker
Does it ave a easy hack with MHS we can make ???

-FrostyHacker

PostPosted: Tue May 20, 2008 2:59 am
by mezzo
why are you digging up an old post?
you will have more luck making a new post..
(COD is a recent game and is still being patched a lot, the above is most likely patched already.)