View previous topic :: View next topic |
Author |
Message |
sambushme How do I cheat?
Reputation: 0
Joined: 12 Mar 2017 Posts: 4
|
Posted: Sun Mar 12, 2017 7:40 am Post subject: Memory Address Doesnt seem right |
|
|
I have used cheat engine to find the address that I was looking for but I cant help but notice it doesnt look the same to what I am used to.
Normal address(8 characters) example: 09A3E873
My address(12 characters): 7FF6104486E3
So I then created a quick Autoit script to see if this even works when trying to read it.... it doesnt.
Can someone,anyone please help me out with this? Even if you can provide some infomation regarding the memory address and/or why it is different.
#include <NomadMemory.au3>
$demo = ProcessExists ( "DemoProgram.exe")
$MemoryOpem = _MemoryOpen($demo)
while 1
$Mem_Read = _MemoryRead ('0x' & '7FF6104486E3', $MemoryOpem)
ToolTip($Mem_Read,0,0)
Sleep(100)
WEnd
|
|
Back to top |
|
 |
Viloresi Expert Cheater
Reputation: 0
Joined: 02 Feb 2017 Posts: 149
|
Posted: Sun Mar 12, 2017 9:35 am Post subject: |
|
|
Wow, nomad memory... that flashed my mind back in to the 2007 ...
Aniway if you read inside nomad.au3 you will find that the third parameter you can give to the _memoryread function, is the type of the value you are going to read... By default it is set to DWORD , so it's 32 bits... And these are not enough for a hex number with 12 ciphers...
You are saying characters but I'm not sure, that you know that it is what you meant.
Btw if it is made of 12 characters you can try
_MemoryOpen(address , processid , char[13])
|
|
Back to top |
|
 |
Zanzer I post too much
Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Sun Mar 12, 2017 9:41 am Post subject: |
|
|
That's what happens when you attach to a 64-bit target.
I don't know AutoIt, so I can't help you.
If that address works in CE, then that's the correct address.
I find it odd that it ends with a "3", but if it works, it works.
|
|
Back to top |
|
 |
sambushme How do I cheat?
Reputation: 0
Joined: 12 Mar 2017 Posts: 4
|
Posted: Sun Mar 12, 2017 10:23 am Post subject: |
|
|
I tried to do this i C++ but i get something strange in return.
This is what i get back in return: 0094B138
0094B138 should equal 5 but it doesnt. I thought maybe it was a hex value but its not.
ReadProcessMemory(handle, (LPVOID)0x7FF6104486E3, &newValue, sizeof(newValue), 0);
cout << "new value is" << &newValue << endl;
Sleep(5000);
exit(-1);
|
|
Back to top |
|
 |
Viloresi Expert Cheater
Reputation: 0
Joined: 02 Feb 2017 Posts: 149
|
Posted: Sun Mar 12, 2017 10:44 am Post subject: |
|
|
you should use
Code: |
cout << "new value is" << newValue << endl; |
without the & before newValue
|
|
Back to top |
|
 |
|