if i find an address then put it in memory viewer then it gives me the address i want which would i put in the pointer search? the address that i put in the memory viewer or the address i got from memory viewer?
If the address in memory tells you the address you actually want, then you've already found the pointer. See if that memory value consistently gives you the address you want. If it usually does, then add the DE000000 80008180 code, and if it only does on rare, specific occaisions, then you may be looking at a pointer in a pointer. In which case, find the location in memory which stores the value you want in two different situations, make a dump of both, then run the pointer search.
Quote from: Almas on February 01, 2009, 10:26:35 PM
If the address in memory tells you the address you actually want, then you've already found the pointer. See if that memory value consistently gives you the address you want. If it usually does, then add the DE000000 80008180 code, and if it only does on rare, specific occaisions, then you may be looking at a pointer in a pointer. In which case, find the location in memory which stores the value you want in two different situations, make a dump of both, then run the pointer search.
Not a pointer within a pointer, just a pointer with an offset. Much easier to search for.