Cheat Engine

[24quant42]

I am using dbk to access the memory. But in memory I don't see something like myprogram.exe+FFAA, instead I just see the address of something like AA2244FFAA.

It may be interesting, but when I use the Enumerate DLL and Symbols function, I see modules with the sys extension, but I expected to see dll modules of the process....

is there a way to display module names in Memory View if you connect via dbk?

[Dark Byte]

if you're on 7.6 beta you can use the processlist dma option to target the process

if not you'll need to fill in a symbollist yourself with the module base and size and then register it. That will nake it show

as for figuring that out you could scan for a MZ header on addresses ending with 0000 and parse it for the name and size when loaded

Alternatively use the ntldr list (tip: get the windows kernel symbols)