View previous topic :: View next topic |
Author |
Message |
coffeeAchiever Newbie cheater Reputation: 0
Joined: 27 Dec 2014 Posts: 22
|
Posted: Thu Jul 16, 2015 2:59 pm Post subject: Got A Green Address. Now What? |
|
|
I'm working with Dead Island: Riptide (I don't think there's a map for the current Steam version of the game). What I've determined:
- The green address 07 8E 0D D8 points to 48 F8 7B 68.
- The contents of [48 F8 7B 68 (loaded into esi) + 20] gets written to 48 A7 30 E8.
- 48 A7 30 E8 is my game XP.
How can I turn this piece of trivia into a CE table?
Last edited by coffeeAchiever on Thu Jul 16, 2015 4:12 pm; edited 1 time in total |
|
Back to top |
|
|
Zanzer I post too much Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Thu Jul 16, 2015 3:59 pm Post subject: |
|
|
Subtract the address at the game.exe from 078E0DD8 for the offset. Then add this address to your table:
[game.exe+offset]+20
|
|
Back to top |
|
|
coffeeAchiever Newbie cheater Reputation: 0
Joined: 27 Dec 2014 Posts: 22
|
Posted: Thu Jul 16, 2015 8:56 pm Post subject: |
|
|
The address of game.exe can be read off by clicking File | Open Process and reading the address from the process list? If so, my game.exe resides at 00 00 1E 44.
Code: |
offset = 07 8E 0D D8 - game.exe
= 07 8E 0D D8 - 00 00 1E 44
= 07 8E 2C 1C |
Then I would add this address to my table:
However, I'm looking at the value contained at (pointed to by) 07 8E 2C 1C, and it's 0. Did I misunderstand your reply? Do you look at the process list to get the address of game.exe?
|
|
Back to top |
|
|
Zanzer I post too much Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Fri Jul 17, 2015 3:36 pm Post subject: |
|
|
No, that's actually the process ID.
Open Memory Viewer and right-click inside the bottom half.
Select go to address and type in the game.exe name.
It will then jump to the base address of the game.
Before you do that, open up the address of the green entry you added to the table.
It might already be in the format "game.exe+XXXXX" that you require.
|
|
Back to top |
|
|
|