How to get the value of the address, a pointer is pointing at? [Solved]

Yeah, the title should say it all.

I tried out this:

Code:

DWORD Base = (DWORD) GetModuleHandleA("client.dll") + 0x56C8C4;
DWORD offset = 0x98;

char* _test = new char[2];
*_test = *(char*)((DWORD)Base + offset);

drawText(8, 64, e3color, pFont, _test);

and this

Code:

DWORD Base = (DWORD) GetModuleHandleA("client.dll") + 0x56C8C4;
DWORD offset = 0x98;
DWORD Address = *(DWORD*)(Base) + offset;

char *_test = (char*)Address;

drawText(8, 64, e3color, pFont, _test);

Both of them return some crap, but not what i want. It works with Cheat Engine.
(Add Address -> [x] Pointer -> client.dll+56C8C4 -> Offset: 98)

Help would be appreciated

Offset is added to whatever base points to.

so try

Code:

DWORD BaseAddress = (DWORD)GetModuleHandleA("client.dll");
DWORD Structure = *(DWORD*)(BaseAddress + 0x56C8C4);
DWORD offset = 0x98;
char *_test = (char*)(Structure + offset);

Hi Jason,
thanks for your reply. It returns exactly the same as before.

I uploaded a screenshot:
[img]http://img7.imagebanan*****m/img/mdz6963m/see.png[/img]

The value should be an integer from 0-3. Maybe its the conversion from DWORD to char* ?

The pointer is pointing to a 4 byte value. To test if your pointer is correct try this:

Code:

DWORD address = (*(DWORD*)0x67F1C8C4) + 0x98;
DWORD value = *(DWORD*)address;
char *buffer = new char[20];
sprintf(buffer, "%d", value);
MessageBoxA(NULL, buffer, "test", MB_OK);

And check that the value is corroborates with what CE is telling you.

Code:

DWORD address = (*(DWORD*)0x67F1C8C4) + 0x98;
DWORD value = *(DWORD*)address;
char *buffer = new char[20];
sprintf(buffer, "%d", value);
MessageBoxA(NULL, buffer, "test", MB_OK);

This works with the plain addy, but it doesnt seem to work with GetModuleHandle("client.dll").
(GetModuleHandle does return a decimal value from what i've tested)

I tried this:

Code:

DWORD address = (*(DWORD*)GetModuleHandle("client.dll") + 0x56C8C4) + 0x98;
DWORD value = *(DWORD*)address;
//...

and similar stuff :/

Any ideas?

I think you might need to check the 0x56C8C4 offset from the client.dll. Thats probably your problem. To check do this:

Code:

DWORD offset = 0x67F1C8C4 - (DWORD)GetModuleHandle("client.dll");
char value[256];
sprintf(value,"%X",offset);
MessageBox(NULL,value,value,MB_OK);

If the popup comes up with 0x56C8C4 then its not that problem.

Possible try this too:

Code:

DWORD address = (*(DWORD*) (GetModuleHandle("client.dll") + 0x56C8C4)) + 0x98;
DWORD value = *(DWORD*)address;

And also, you can't covnert from DWORD to (char*) if the value is from 0 - 3. (char*) is a pointer to string and it will pointing to the address of 0 - 3 which will likely crash or give you garbage.

The 0x67F1C8C4 isn't a static address, it was client.dll+56C8C4 at some startup and will unlikely be the same again.

I'll try the lower part, thanks

//Edit
Alright, it crashes the game. It seems like you can't perform that addition GetModuleHandle("client.dll") + 0x56C8C4..

Perhaps it's a multi-level pointer? Try looking for anything that points to 0x67F1C8C4 (or whatever it is when the game is running since it's not static)

Originally Posted by master131

Perhaps it's a multi-level pointer? Try looking for anything that points to 0x67F1C8C4 (or whatever it is when the game is running since it's not static)

He already said he knows how many levels the pointer is...

Ugh, never mind.

The reason why it doesn't work is because you are dereferencing the module base. This will give you the numeric equivalent of the first four bytes of the IMAGE_DOS_HEADER.

Dereference after adding the first offset:

Code:

LPDWORD lpBaseAddress; 

lpBaseAddress = reinterpret_cast<DWORD*>(GetModuleHandle(TEXT("client.dll")));
lpBaseAddress += 0x56C8C4;

Dereference lpBaseAddress, add 0x98, and then dereference once more to obtain the correct address.

@Fovea
The code didnt work for some reason, but helped me alot:

Code:

DWORD Base = (DWORD) GetModuleHandle(TEXT("client.dll")) + 0x56C8C4;
DWORD Address = *(DWORD*) (Base) + 0x90;
DWORD *Value = (DWORD*) Address;

Thats it guys, thanks for your help!

/Marked solved then.

How to get the value of the address, a pointer is pointing at? [Solved]

Post a Reply

Similar Threads

Tags for this Thread