View previous topic :: View next topic |
Author |
Message |
pursuited357 Cheater Reputation: 0
Joined: 23 Sep 2020 Posts: 26
|
Posted: Sun Aug 01, 2021 3:28 pm Post subject: What is the text put in address field for ImageBase? |
|
|
I don't have my External HD with my at a friends house. So I was killing time with CE - but forgot something simple...
I tried googling it - but seem to be googling it wrong?
Question:
What is the "shortcut" text you can put in the address part so that CE will show the ImageBase of what it is attached to?
I apologize if this answer is right in front of me or easy to find...
But what the heck..
Thanks in advance!
|
|
Back to top |
|
|
pursuited357 Cheater Reputation: 0
Joined: 23 Sep 2020 Posts: 26
|
Posted: Sun Aug 01, 2021 6:22 pm Post subject: |
|
|
Quote: | Click on memory view under the scan resoults, above your table.
On the toolbar of the memory view window click view, then enumerate dlls and symbols. |
I know of that way.
There is a word you can put in the address text field and CE will auto put the attached programs BaseAddress in the Value field. No need for any of what you described.
|
|
Back to top |
|
|
atom0s Moderator Reputation: 198
Joined: 25 Jan 2006 Posts: 8517 Location: 127.0.0.1
|
Posted: Sun Aug 01, 2021 10:49 pm Post subject: |
|
|
You can use $process
_________________
- Retired. |
|
Back to top |
|
|
pursuited357 Cheater Reputation: 0
Joined: 23 Sep 2020 Posts: 26
|
Posted: Tue Aug 03, 2021 7:56 pm Post subject: |
|
|
Its always something simple....
Out of curiosity, is there a universal listing of what you can type in the address field to have CE do w/e...?
I dont know how I would put that into words to search for it.
-Thx!
|
|
Back to top |
|
|
atom0s Moderator Reputation: 198
Joined: 25 Jan 2006 Posts: 8517 Location: 127.0.0.1
|
Posted: Wed Aug 04, 2021 2:06 am Post subject: |
|
|
Think Dark Byte would be best to answer that as there are a handful of shortcuts that can be done now if I recall, but I don't keep up with them or have them written down to remember.
$ is a prefix for processing anything that follows it as Lua. So for example, but not advised as this will just crash CE, you can do: $print('hi')
So with that in mind, 'process' is a global defined in CE's Lua namespace, thus why $process works. Another example of doing Lua to use the processes main module would be: $enumModules()[1].Address
_________________
- Retired. |
|
Back to top |
|
|
pursuited357 Cheater Reputation: 0
Joined: 23 Sep 2020 Posts: 26
|
Posted: Wed Aug 04, 2021 2:26 am Post subject: |
|
|
I had a list of common ones I used, but for the life of me I cannot find where I put it....
I knew it can reference LUA..
I just thought I would of asked - simply because I dont know what to search for to find this "list".
Thanks for your reply nonetheless!
|
|
Back to top |
|
|
|