If one of the pointers is in a Heap, then you will have to dump from 1º main to the HEAP that have Real HP code.
What nexs does is look for a pointer close to the final Address,we are looking for this in Main because they are static, but if we go deeper with 3 or four we have to DUMP all the...