Latest Addresses [20-10-2010]

[Departure]

Just out of interest because im new to these game hacks... Are you guys Creating the process in suspended state using "createprocess" and then using writeprocessmemory ? or do you use openprocess with the game already running to patch your addresses? I have only been on here 5 minutes but it seems people are using some sort library, untill i seen this thread wich had Virtuall address's, seems like virtual addresses to a dll by looking at it, which is strange because dll are not garenteed to load in memoery at the same place as a exe would (00410000)..

Anyway anyone will tell me more about these game hack so I can start learning? I have no probs with olly debug, Only thing I can think of is this game must have some sort memory protection or packed/protected with some packer??

Any info will be greatly appreciated..

I write in Delphi but I have no problems reading C++ as it all API calls anyway but just syntax changes

[ac1d_buRn]

Just out of interest because im new to these game hacks... Are you guys Creating the process in suspended state using "createprocess" and then using writeprocessmemory ? or do you use openprocess with the game already running to patch your addresses? I have only been on here 5 minutes but it seems people are using some sort library, untill i seen this thread wich had Virtuall address's, seems like virtual addresses to a dll by looking at it, which is strange because dll are not garenteed to load in memoery at the same place as a exe would (00410000)..

Anyway anyone will tell me more about these game hack so I can start learning? I have no probs with olly debug, Only thing I can think of is this game must have some sort memory protection or packed/protected with some packer??

Any info will be greatly appreciated..

I write in Delphi but I have no problems reading C++ as it all API calls anyway but just syntax changes

You seem extremly intelligent /

Well, You create the dll thread by using CreateThread, Then you can use memcpy ect. You dont need to WPM as you already have access to memory

The main DLL you will be needing to analyze is now packed (CShell.dll), so you will need to create a dump of ot (or if you can, unpack it).
To dump it, you can use Kernal Detective

I think i answered your questions correctly, as I am not quite sure how to answer them/

If you need anymore help, be ssure to leave me a message.

Acid