Static object references

[tqbnnf]

I'm wondering how one would be able to find truly static object references, global variables aside.

Here's what I'm thinking:

You could locate a stack base address and use an offset to reach whatever is stack-allocated in functions/methods, but seeing as frame locations aren't necessarily static, you'd probably end up with garbage 99% of the time.

Anything heap-allocated is useless since object locations are random by design.

You could patch some code in memory to make an address of your choosing be assigned a pointer to whatever object, but given software like Warden you'd most likely want to avoid code patching.

Alternatively you could search for a binary "signature" unique to one or more objects, but you're not guaranteed that any such signature exists, and the method dosn't provide you with any static references.

In short, what makes the static pointers you post here, static
Thank you.

[tqbnnf]

Basically I'd like to know why some non-static/global pointer ends up at the same address in every instance of a process.