Jump to content
Sign in to follow this  
oMBRa

Base dll address

Recommended Posts

oMBRa

I scanned the memory of a game with cheat engine and I found this static address: ''Game.dll+A9DD34'', so I used Szhlopp UDF to get base address, then I did Game.dll (''00400000'') + ''A9DD34' and I get this:

''00E9DD1C'', but the very address is ''6FA9DD34'', so how to solve this problem?

link to UDF: http://www.autoitscript.com/forum/index.ph...=78834&st=0

Share this post


Link to post
Share on other sites
BrettF
SuneC

Szhlopp's UDF obviously doesn't return the same base address as Cheat Engine.

Check whether or not "Game.dll"'s base address (0x6F000000) is static by checking the value a couple of times and also restarting the game. If it is, just use a static pointer (0x6FA9DD34).

If not, could you tell what "Game.dll" is, if it's injected, etc.

Share this post


Link to post
Share on other sites
SuneC

Sorry about the double post.. Came just exactly too late for edit. Try changing these things:

Local $iv_Address = 0x00100000

to 0x05000000

and

If Hex($iv_Address) = "01000000" Then ExitLoop

to "90000000"

Good luck!

Share this post


Link to post
Share on other sites
oMBRa

Sorry about the double post.. Came just exactly too late for edit. Try changing these things:

Local $iv_Address = 0x00100000

to 0x05000000

and

If Hex($iv_Address) = "01000000" Then ExitLoop

to "90000000"

Good luck!

I already did it , but is like that the base address is from 00400000 to 76000000

Share this post


Link to post
Share on other sites
BrettF

I meant something like this:

$value1 = 0x00400000
$value2 = 0xA9DD34

$added = $value1 + $value2
$bit = BitOR ($value1,$value2)

MsgBox (0, "",  "Value 1 = " & $value1 & @CR & _
                "Value 2 = " & $value2 & @CR & _
                "Added = " & $added & @CR & _
                "BitOr = " & $bit & @CR & _
                "Hex = " & Hex ($bit,8))

You need to double check your offsets IMO... :mellow:

Share this post


Link to post
Share on other sites
oMBRa

I got what's the problem... ''0x00400000'' is the base memory address of the process, what I need is the base memory address of the dll... is possible to get it?

Share this post


Link to post
Share on other sites
truongthinhqn

nevermind... solved

Can't you tell me how to solve this?

Share this post


Link to post
Share on other sites
JLogan3o13

truongthingqn, please see the forum rules in the lower right corner of this (and every) forum page. Things have changed since this thread began; game automation is no longer supported on the forum.

 

This is also why we do not encourage resurrecting 5 year old posts ;)


√-1 2^3 ∑ π, and it was delicious!

Share this post


Link to post
Share on other sites
Melba23

truongthinhqn,

Go and read my post in your own thread and do not necro-post in threads which are against the current Forum rules. :naughty:

M23


Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind._______My UDFs:

Spoiler

ArrayMultiColSort ---- Sort arrays on multiple columns
ChooseFileFolder ---- Single and multiple selections from specified path treeview listing
Date_Time_Convert -- Easily convert date/time formats, including the language used
ExtMsgBox --------- A highly customisable replacement for MsgBox
GUIExtender -------- Extend and retract multiple sections within a GUI
GUIFrame ---------- Subdivide GUIs into many adjustable frames
GUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView items
GUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeView
Marquee ----------- Scrolling tickertape GUIs
NoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxes
Notify ------------- Small notifications on the edge of the display
Scrollbars ----------Automatically sized scrollbars with a single command
StringSize ---------- Automatically size controls to fit text
Toast -------------- Small GUIs which pop out of the notification area

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

×

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.