View previous topic :: View next topic |
Author |
Message |
markhcnx How do I cheat?
Reputation: 0
Joined: 08 Feb 2017 Posts: 2
|
Posted: Wed Feb 08, 2017 3:01 am Post subject: Values outside of the exe/module memory space |
|
|
First post. I am a solid programmer, but a total newbie with CE and ASM, etc, and having a problem grasping what is going on here. I've read many posts and tutorials, but I'm having trouble understanding.
my.exe is writing data to 0xCD0DE44 whenever the "gamestate" of my game changes. I've tested it in C# by reading process memory at this address.
However it seems this address is outside of the address range of the exe and outside of the address range of every module loaded by the exe. When I view it in CE there is no module name either (I've Ctr-M'd many times).
I can't post urls, so I attached a .png
Any help is appreciated.
Description: |
|
Filesize: |
55.08 KB |
Viewed: |
5726 Time(s) |

|
|
|
Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Wed Feb 08, 2017 3:06 am Post subject: |
|
|
Your address in hex is 0xCD0DE44? I don't see the problem. Why do you say that it's outside of the address range?
|
|
Back to top |
|
 |
markhcnx How do I cheat?
Reputation: 0
Joined: 08 Feb 2017 Posts: 2
|
Posted: Wed Feb 08, 2017 3:19 am Post subject: |
|
|
Yes the address is 0xCD0DE44.
The exe memory space is 1200000 to 20EAF80. In my screenshot the next entry point is zlib1.dll at 5A4C0000 (it's sorted low to high by base address).
Basically, in C# if I scan every module loaded, I cannot find my value needed, because it's not there. I can find it in C# by reading memory at exactly 0xCD0DE44
|
|
Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Wed Feb 08, 2017 3:25 am Post subject: |
|
|
I wasn't sure what the chart was representing.
What are you using to scan? If CE, make sure you are not limiting your scan range. CE should be able to find it. If whatever you are using to scan isn't looking for writable or executable memory, then that could also limit your results.
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25778 Location: The netherlands
|
Posted: Wed Feb 08, 2017 4:23 am Post subject: |
|
|
that address is in allocated memory
check out pointers
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
|