Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Can't read the content of gs:[00000030] address?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
yazigegeda
Expert Cheater
Reputation: 0

Joined: 22 Jan 2019
Posts: 159

PostPosted: Sat Sep 18, 2021 1:54 am    Post subject: Can't read the content of gs:[00000030] address? Reply with quote

Code:


[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat


GlobalAlloc(GetPeb,1024)
Label(pteb)
RegisterSymbol(pteb)
CreateThread(GetPeb)


GetPeb:

sub rsp,28

mov rax,gs:[00000030]
mov [pteb],rax

add rsp,28
ret

pteb:
dq 0
 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat




What should I do if I can’t get help?



2.jpg
 Description:
 Filesize:  26.48 KB
 Viewed:  878 Time(s)

2.jpg



1.jpg
 Description:
 Filesize:  49.59 KB
 Viewed:  879 Time(s)

1.jpg


Back to top
View user's profile Send private message
DanyDollaro
Master Cheater
Reputation: 3

Joined: 01 Aug 2019
Posts: 334

PostPosted: Sat Sep 18, 2021 2:08 pm    Post subject: Reply with quote

If you are trying to get the IsDebuggerPresent flag which is inside the PEB structure you should do this (64 bit process case):
Code:
mov rax, gs:[60] // You get the base of PEB
mov [PEB], rax // And store it into a variable


And if you want to have the IsDebuggerPresent flag in the table you have to add the following address:
Code:
[PEB] + 2



Peb.png
 Description:
 Filesize:  10 KB
 Viewed:  812 Time(s)

Peb.png


Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites