Cheat Engine

Luckyxero · How do I cheat? Reputation: 0 Joined: 01 Sep 2018 Posts: 2

Q1:

When I have a pointer address and it says "game.exe"+offset, what exactly is "game.exe" and how do I find it using a C++ program? (Don't tell me to use GetModuleHandle, because it doesn't return "game.exe". I tested that myself by subtracting the offset from "game.exe"+offset and comparing it with GetModuleHandle())

Q2:

Take a look at the picture below. It says [03211000 + 5B0] -> 01695000. Why is 03211000 + 5B0 equal to 01695000? Shouldn't it be 32115B0? That happens with all offsets.

t328163 · Posted: Sat Sep 01, 2018 5:14 am Post subject:

A1: base address.
A2: hex calc

TheyCallMeTim13 · Posted: Sat Sep 01, 2018 6:15 am Post subject:

https://guidedhacking.com/threads/get-module-base-address-tutorial-dwgetmodulebaseaddress.5781/

ParkourPenguin · Posted: Sat Sep 01, 2018 7:24 am Post subject:

1: GetModuleHandle(NULL) will return the base address of the .exe file of the calling process. If you're not injected into the game's process, it won't work.
Assuming you're not in the calling process, look into CreateToolhelp32Snapshot. If you are (e.g. injected dll), you're doing something wrong with GetModuleHandle.

2: Square brackets usually refer to the value stored at an address. [0x03211000 + 0x5B0] = 0x01695000 means the value stored at the address 0x032115B0 is 0x01695000.

Luckyxero · How do I cheat? Reputation: 0 Joined: 01 Sep 2018 Posts: 2