Cheat Engine

[top1]

I've done a lot of ways to find the static address in my game in VMWARE.

seems the address always change not like my Machine which has the static address.

Can anyone tell me why ?

thx

[Dark Byte]

With vmware you get the emulated physical memory instead of the emulated virtual memory

When an operating system allocates memory it picks some random physical memory locations and then links them into a sequence with a pagetable to form a contiguous block of virtual memory

To get a virtual address from a physical and the other way around you must find the physical address of the pagetablebase (the cr3 register of a process holds that, but you might be able to find it with a lot of tedious scanning as well)
Then go through it till you find the entry that describes the page you are interested in

[top1]

Do you have any tricks to find physical address of the the pagetablebase ?

Is the pagetablebase Vmem file ?

thx

[Dark Byte]

no, the pagetablebase is at a random location in physical memory (relative to the vmem base address)

You can manually find it after having found the address by a lot of scanning and manual inspecting the memory region, but that's useless if you wish to use it to find the address in the first place without scanning

Perhaps you can tell windows to always load the kernel at the same physical spot in memory and then use that to walk through the processlist and find the pagetablebase that way

[top1]

so silly question i want to ask : (

How can I tell the windows to load same memory spot in Kernel?

Do you have any links guide

thx in advanced