admin/GameHackingBook-GameHackingCode
1
0
Fork 0
mirror of https://github.com/GameHackingBook/GameHackingCode synced 2026-06-08 11:08:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Various fixes

Browse Source
This commit is contained in:
Nick Cano
2016-04-20 14:15:23 -07:00
parent 078d92c45e
commit 50152ef2c9
4 changed files with 29 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Chapter6_AccessingMemory/main-accessingMemory.cpp
+24 -12
View File
@@ -123,19 +123,31 @@ DWORD getMyBaseAddressFS()
return newBase;
}
DWORD getRemoteBaseAddress(HANDLE Process)
DWORD getRemoteBaseAddress(HANDLE process)
{
LPVOID TIB;
__asm
{
MOV EAX, DWORD PTR FS:[0x18]
ADD EAX, 0x30
MOV TIB, EAX
}
// read 0x30 bytes past _the_game's_ TIB to get the PEB
DWORD PEB = readMemoryAPI<DWORD>(Process, TIB);
// read 0x8 bytes past _the_game's_ PEB to get the base
return readMemoryAPI<DWORD>(Process, (LPVOID)(PEB + 0x08));
DWORD newBase;
// get the address of kernel32.dll
HMODULE k32 = GetModuleHandleA("kernel32.dll");
// get the address of GetModuleHandle()
LPVOID funcAdr = GetProcAddress(k32, "GetModuleHandleA");
if (!funcAdr)
funcAdr = GetProcAddress(k32, "GetModuleHandleW");
// create the thread
HANDLE thread = CreateRemoteThread(process, NULL, NULL, (LPTHREAD_START_ROUTINE)funcAdr, NULL, NULL, NULL);
// let the thread finish
WaitForSingleObject(thread, INFINITE);
// get the exit code
GetExitCodeThread(thread, &newBase);
// clean up the thread handle
CloseHandle(thread);
return newBase;
}
void printMyBaseAddresses(HANDLE Process)