Cheat Engine

[Fanatic12]

Hello. I found few momory addresses, but they are not static. When I double klik on their address, it returns for example: file.dll+1D44B0. How can I read address of file.dll in c++? Thanks for any advices .

[Slugsnack]

GetModuleHandle()

[Fanatic12]

Thabks. I already tryed:

DWORD/HANDLE aaaaaa = GetModuleHandle("samp.dll");
printf("aaaaaa=%x\n", aaaaaa);

But it alwyas returns 0 . Any ideas?

[atom0s]

If you aren't injected into the process GetModuleHandle wont work. If you are doing things outside of the process in a separate exe, use:

#include <Tlhelp32.h>
- CreateToolhelp32Snapshot
- Module32First
- Module32Next

or

#include <psapi.h>
- EnumProcessModules
- GetModuleFileNameEx

[Fanatic12]

My code:

while(hWnd == 0)
{
hWnd = FindWindow(NULL, "GTA:SA:MP");
Sleep(5000);
}

printf("GTA:SA:MP runs.\n");
GetWindowThreadProcessId(hWnd, &pId);
pHandle = OpenProcess(PROCESS_ALL_ACCESS, TRUE, pId);

HANDLE aaaaaa = GetModuleHandle("samp.dll");
printf("aaaaaa=%d\n", aaaaaa);


It is wrong?

[atom0s]

Yes, that wont work because you are externally obtaining the information. You will need to use one of the methods I stated above, or inject a dll directly into the process if you wish to use GetModuleHandle.

Also be warned that using PROCESS_ALL_ACCESS isn't valid anymore unless more steps are taken. It is best practice to specify exactly what you need when calling OpenProcess for the flags.

[Fanatic12]

I feel quite noob, but I don't understand this very well .
I made this from something I found on msdn:


while(hWnd == 0)
{
hWnd = FindWindow(NULL, "GTA:SA:MP");
Sleep(5000);
}

printf("GTA:SA:MP runs.\n");
GetWindowThreadProcessId(hWnd, &pId);
pHandle = OpenProcess(PROCESS_ALL_ACCESS, TRUE, pId);

HANDLE aaaaaa = CreateToolhelp32Snapshot(0x8u, pId);
MODULEENTRY32 me32;
Module32First(aaaaaa, &me32);
me32.dwSize = sizeof( MODULEENTRY32 );
Module32First( aaaaaa, &me32 );
printf("aaaaaa=%X\n", aaaaaa);
while(Module32Next( aaaaaa, &me32 ))
{
printf("aaaaaa=%X\n", aaaaaa);
}



I don't know what I am doind now. It writes aaaaaa=68 many times. Cheat engine returns 03E90000. Sorry for my stupid questions .

[atom0s]

Go back to MSDN and read the pages about the API. You aren't using them properly and you aren't using the structures properly either. The pages on MSDN give more then enough information to use the API.

I don't want to spoon feed you code because then you wont learn anything.

[iPromise]

if GetModuleHandle () won't work, use LoadLibrary () instead. Or use a snapshot.

[atom0s]

He's not injected, LoadLibrary wont do shit for him.