cstudent
How do I cheat?
![]() Reputation: 0
Joined: 28 Apr 2016
Posts: 1
|
 Posted: Thu Apr 28, 2016 5:10 pm Post subject: Base addres problem |
 |
|
Hi. This is my first post.
I have an issue, that is annoying.
I have writen a program, that read memory. It was in x86. I thought i understand that, but than i started programing on the x64 platform.
In the basics i try to find a base adres of the application.
If i try to find a base addr for the "calc.exe" chaet engine shows me an addr : 300905A4d. if I do a pointer scan it shows some static offset (lets say, i dont get it how it was found, but I can just copy it to my c++ app).
I have found a base addr in my application and it is: FF710000.
Now if we compare these adresses it is easy to find out that: FF710000 != 300905A4d.
When i was looking for the application start in the memory window of CE it has started in fact in the: FF710000 addr.
How this 300905A4d addr was found?
//edit
problem solved.
I had correct BaseAddr, and when I was checking what "calc.exe" mean in the pointer tab i had seen the value as below:
| Code: |
ReadProcessMemory(hProcess,(LPVOID)lpModuleEntry.modBaseAddr,&temp,sizeof(DWORD64),0);
m_baseAddr = temp;
|
So i (ohhh i stupid) have seen the value that was shown as it was a pointer set on the start of my program .....(stupid, stupid, stupid me .....2 days of my life)
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
