| View previous topic :: View next topic |
| Author |
Message |
Evil_Intentions
Expert Cheater
 Reputation: 65
Joined: 07 Jan 2010
Posts: 214
|
 Posted: Sun Jun 13, 2010 9:37 pm Post subject: Question for the gods of memory editing |
 |
|
Not sure if any of yall ever heard of the SADX memory editor:http://membres.multimania.fr/mprower/pso/sadx/pc_edit/
but basically it allows one to have almost godly access to the chao garden. I would like to make my own version of it, adding a few of my own codes. Now i can SLOOOOWWWLLYYY get the addresses by using cheatengine, but i was wondering if there is a way to see what addresses the program writes to. Im downloading ollydbg right now, and will take a look at it while you do your ponderin 
|
|
| Back to top |
|
 |
hcavolsdsadgadsg
I'm a spammer
![]() Reputation: 26
Joined: 11 Jun 2007
Posts: 5801
|
| Posted: Sun Jun 13, 2010 10:20 pm Post subject: |
|
|
| set a breakpoint of all instances of WriteProcessMemory
|
|
| Back to top |
|
|
Evil_Intentions
Expert Cheater
Reputation: 65
Joined: 07 Jan 2010
Posts: 214
|
| Posted: Sun Jun 13, 2010 10:52 pm Post subject: |
|
|
| slovach wrote: | | set a breakpoint of all instances of WriteProcessMemory |
Okay, so i go into olly debug, press alt+f1, type bp WriteProcessMemory?
ive tried that and bp Kernel32.WriteProcessMemory and nothing changes. nothing is highlighted, the view doesn't move to a different address, nada.
Then again, this is my first time using ollydbg
Ill keep trying different things and googling more.
|
|
| Back to top |
|
|
hcavolsdsadgadsg
I'm a spammer
![]() Reputation: 26
Joined: 11 Jun 2007
Posts: 5801
|
| Posted: Mon Jun 14, 2010 12:09 am Post subject: |
|
|
off the top of my head, control-n
right click the api call
set breakpoint on all instances or something.
|
|
| Back to top |
|
|
Evil_Intentions
Expert Cheater
Reputation: 65
Joined: 07 Jan 2010
Posts: 214
|
| Posted: Mon Jun 14, 2010 12:19 am Post subject: |
|
|
Yes, i got to the api call screen, but they dont have what im looking for, so im kinda bummed.
Ill look thru it a bit more, like i said, im an ollydbg noob.
|
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Mon Jun 14, 2010 5:38 am Post subject: |
|
|
You need to look at the stack window in Olly after you land on the breakpoint for WriteProcessMemory. The two params you will want to look at are the data size and data pointer params. Follow the data pointer in the dump window and look at the bytes based on the data size.
_________________
- Retired. |
|
| Back to top |
|
|
Evil_Intentions
Expert Cheater
Reputation: 65
Joined: 07 Jan 2010
Posts: 214
|
| Posted: Mon Jun 14, 2010 12:21 pm Post subject: |
|
|
| Wiccaan wrote: | | You need to look at the stack window in Olly after you land on the breakpoint for WriteProcessMemory. The two params you will want to look at are the data size and data pointer params. Follow the data pointer in the dump window and look at the bytes based on the data size. |
Thanks, but i think im going to go read up on some ASM, i dont know what the HELL is going on here 
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
