View previous topic :: View next topic |
Author |
Message |
h4ck0ry How do I cheat? Reputation: 0
Joined: 12 Jun 2016 Posts: 9
|
Posted: Tue Jun 14, 2016 6:09 pm Post subject: [C#] Finding THREADSTACK0 of 64bit game |
|
|
Hey everyone!
Last edited by h4ck0ry on Thu Jun 16, 2016 3:02 pm; edited 1 time in total |
|
Back to top |
|
|
Matze500 Expert Cheater Reputation: 8
Joined: 25 Jan 2012 Posts: 241 Location: Germany
|
Posted: Tue Jun 14, 2016 8:10 pm Post subject: |
|
|
Here is your Problem:
You call the ReadMemory like this in the error part:
ReadProcessMemory(int,IntPtr,uint,int,int)
But the implementation wants this:
ReadProcessMemory(int,long,byte[],int,int)
stackTop needs to be a byte[] buffer not an uint you can convert the bytes after that to uint with the bitconverter.
(tbi.TebBaseAddress + 8).ToUInt64() should doo its work for the other error.
so your code should look like this:
Code: |
byte[] buffer = new byte[8];
ReadProcessMemory(p.Id, (tbi.TebBaseAddress + 8).ToUInt64(), buffer, 8, ref x);
//Convert byets to uint for stackTop
|
Greets Matze
_________________
|
|
Back to top |
|
|
h4ck0ry How do I cheat? Reputation: 0
Joined: 12 Jun 2016 Posts: 9
|
Posted: Tue Jun 14, 2016 11:22 pm Post subject: |
|
|
-snip-
Last edited by h4ck0ry on Thu Jun 16, 2016 3:02 pm; edited 1 time in total |
|
Back to top |
|
|
Matze500 Expert Cheater Reputation: 8
Joined: 25 Jan 2012 Posts: 241 Location: Germany
|
Posted: Wed Jun 15, 2016 7:56 am Post subject: |
|
|
Searched the error code and found this:
0xC000000A STATUS_BAD_INITIAL_PC: An invalid initial start address was specified in a call to NtCreateThread.
Something seems wrong with your ThreadInfoClass.
Greets Matze
_________________
|
|
Back to top |
|
|
|