Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pointer]

The tag has no usage guidance.

3
votes
1answer
111 views

Point-to analysis of IDA Pro

I am aware that many users on this forum are experts (developers) of IDA Pro. So I am tentatively inquiring some high-level ideas behind the point-to analysis of IDA Pro. According to my personal ...
3
votes
2answers
154 views

replacing static value with variable

I'm trying to replace a static value: MOV DWORD PTR SS:[EBP-30],4c With a value from a specific address: MOV DWORD PTR SS:[EBP-30],400400 // MOV DWORD PTR SS:[EBP-30],OFFSET 400400 But SS:[EBP-30] ...
1
vote
1answer
109 views

How to find V-Table in IDA? (Using class informer)

I've been trying for a while now to get my head around V-Tables, V-Table patching, etc, i understand what V-Tables are and why they are used (At least i think i do). But how do i find them in IDA? I'...
-1
votes
1answer
44 views

Which ARM command is influencing the SP position?

I do static analysis of ARM assembly code (I can't debug it). When I look on argument that in SP+0x<SomeOffset> I can find what I'm looking for, but if I look a few lines further down I see ...
3
votes
2answers
157 views

Is pointer decryption possible?

I’m pretty new to reverse engineering, so bear with me... I’m trying to get a few struct definitions (or whatever they’re called) from this one binary. After some time fiddling around with it, I’ve ...
4
votes
2answers
179 views

Game cheating: Pointers vs Static memory editing

Why do most hackers/modders use pointers instead of editing the static region of the game executable? For example I downloaded so many trainers and I can see most of them are using pointers. I prefer ...
0
votes
0answers
42 views

Finding pointer with 'find out what writes to this address' strange offset

I'm trying to find a base pointer for UrbanTerror42. My setup is as followed, I have a server with 2 players. cheat-engine runs on client a. I climb a ladder with client b and then scan for incease/...
1
vote
0answers
40 views

Is there a static address to a pointer on Mac OS?

Given the sample code below: #include <iostream> struct Data { int a; int b; int c; }; int main() { Data *d = new Data; d->a = 1337; d->b = 1338; d->c = ...
3
votes
1answer
157 views

Function Pointer Assembly Calculations

I am reverse engineering a binary in IDA Pro and I came across the function sub_8048FB6 which I think provides the address to a function pointer. The decompilation of the subroutine is as follows and ...
1
vote
1answer
351 views

IDA Pro's Super-Complicated Function Pointer Definition

I have recently been debugging a binary and at a point I started to decompile a function. One of the lines of the decompiled file is this: v14 = (int (__cdecl *)(signed int))sub_8048FB6(1); I have ...
1
vote
0answers
244 views

Base address and offsets [closed]

I've watched a video about finding out static addresses with pointers Here is an example: OFFSET 0 01DE15B4 OFFSET 14 01DE15D0 OFFSET 378 BASE ADDRESS> 01DE8058 and the person said, that ...
0
votes
1answer
432 views

IDA Pro: how to pass a function a pointer to a structure field

When a C++ subclass object is being passed to a function which accepts base class objects, the C++ compiler implementation is so the subclass object pointer gets shifted down to point to the ...
1
vote
2answers
211 views

How to get pointer from byte code

I have been doing pointer scans on a game when new versions come out as the structure changes to update memory structure offsets. I decided to attempt to use signature scanning to attempt to make my ...
1
vote
1answer
83 views

Why does MSVC x64 Compiler load addresses like this?

Normally, in x86, to load a pointer to a null-terminated string you would use MOV EDX, OFFSET ds:mystring In x64, however, I noticed that the compiler does it like this lea rdx, OFFSET FLAT:$...
1
vote
2answers
757 views

Set register to specific value for use in autoanalysis in IDA Pro 6.9

I'm using IDA Pro 6.9 with some PowerPC disassembly. The code sets up r13 to a value, say 0x10000, then offsets that register to load and store memory in that region. r13 is never modified again in ...
0
votes
1answer
156 views

Whats going on in this Class Constructor?

meanwhile, I am learning more and more how to reverse engineer. Ive figured out tons of stuff already, but I came to the point, where I just need some little explanation whats going on in the ...
1
vote
1answer
392 views

Variable's position on stack

I wanna create a script/program that will modify value in memory of another process. With GDB I've discovered that variable I want modify is located on heap. Because this variable is create ...
1
vote
1answer
101 views

Failure at finding the value of the dereferenced pointer

000007FEEC55CF58| 48 8D 0D F1 A7 0B 00 | lea rcx,qword ptr ds:[7FEEC617750] | ;7FEEC617750:"500117367" I see the above line in the ollyDBG which has the value of "500117367" according to the comment ...
6
votes
1answer
4k views

Is it possible to find static pointer with disassembler?

I found an assembler instruction: mov [esi+2F],dl. I think ESI is a reference to a struct or class. 0x2F is the offset that references a property of the struct/class. Is it possible to find the value ...
2
votes
2answers
156 views

Locate member of a structure

In an assembly line, I have a call to gethostbyname(...). I have read that the return value of that function can be a pointer to a hostent structure (of course, it could be also a null pointer but for ...