Cheat Engine

[Azzclown]

I got a question about this function

if i have lets say :
integer processId;
PEProcess Process;
PsLookupProcessByProcessId((HANDLE)ProcessID, &Process);

Will this return the "exe" address to Process variable?

Im trying to get my base address that i found on cheat engine but it gives it like "exe"+offset, not really sure how to get that "exe" value.

[Dark Byte]

No, it gives the address of tbge EProcess structure in kernelmod.
It contains data needed to understand the process, like the physical address of the pagedirtable

[Azzclown]