That is a pointer... Get the Module Base Address, in this case "t6zm.exe" and add 1E89334 to it. But you don't really need to. Even tho CE says it is a pointer, the address is always the same. The base address for t6zm.exe is always 0x400010, so 0x400010 + 0x1E8933 = 0x2289344 (< This is the your offset) :-)