How do I cheat?
Joined: 21 Mar 2018
|Posted: Wed Mar 21, 2018 2:32 pm Post subject: An address seems to be held by no module
Thanks to Cheat Engine I have been able to come up with a pattern that finds an address very easily. The pattern works all the times when I use Cheat engine’s scanner.
Therefore, I have made a scanner that scans through a given process’s module. It works for sure, I have tested it with the first bytes of the process main module and
it gave me back the same address as Cheat Engine.
Unfortunately, the address I am trying to find is not located in the main module, thus I made a loop ( For each ProcessModule module in targetProcess.Modules)
so that it would find the DLL for me. To my surprise the loop still didn’t find the pattern even though Cheat Engine did.
To make sure the loops works fine, I have put a message box that shows the name of each scanned DLL and compared it manually
to the list of DLLs given by cheat engine (Memory view -> View -> Enumerate DLL’s and symbols).
I guarantee that the scanned DLLs are the same as the ones found by Cheat engine
(there were a couple of exception due to my x64 system, compiled my scanner in 64 bits, but the address was not “hidden” in one of those).
So far, my conclusion would be that the address is not held in any module in the process. Thus, how does cheat engine find it?
By the way, normally with cheat engine we can find the module very easily because in “memory view “ the address looks like this: “client.dll + XXXXX”.
If you look at the pic attached, you will see it's not the case...
If anyone has an explanation I would be very grateful. Because until now, it seems like I am stuck.
if I don’t see what’s going on, I can’t code some feature to get through this.
|| 48.51 KB
|| 1738 Time(s)