QuestionHelpHow do I find Base adress

Posts 1–6 of 6 · Page 1 of 1
How do I find Base adress
"mono.dll"+001F20AC <------- This


How do I convert this into a base adress?
( Tried many different things i found on MPGH but none worked )
Search on youtube: Fleep Hacks its good for the basics
Quote Originally Posted by Zelcore View Post
"mono.dll"+001F20AC <------- This


How do I convert this into a base adress?
( Tried many different things i found on MPGH but none worked )
This means that within the "mono.dll" module, the relative offset(from the beggining of the module) is 001F20AC.
To get the VA(Virtual Address), you need to find the base address of that module, and increment it on the offset.

VA(Virtual Address) = (Base Address of Section) + RVA(Relative Virtual Address);
@Necktof87 Really? Fleep covers this part? I thought he only did pointer scans his own way :P. @zTwix0R Can you maybe explain how find that address then? Thanks in advance ~~
Code:
Public Function GetBaseAddressByModuleName(ByVal proc As String, ByVal procmodule As String) As IntPtr
    Dim modules As ProcessModuleCollection = Process.GetProcessesByName(proc)(0).Modules ' list all modules
    For Each m As ProcessModule In modules ' loop through all modules
        If m.ModuleName = "ntdll.dll" Then
            Return m.BaseAddress ' return BaseAddress of module
        End If
    Next

    Return IntPtr.Zero ' no such module in target process
End Function
Just created this so not sure if it works like it is supposed to

Usage:
Code:
Dim base As IntPtr = GetBaseAddressByModuleName("chrome", "ntdll.dll")
Quote Originally Posted by Zelcore View Post
@Necktof87 Really? Fleep covers this part? I thought he only did pointer scans his own way :P. @zTwix0R Can you maybe explain how find that address then? Thanks in advance ~~
This should work(based on @Biesi's function):

Quote Originally Posted by Biesi View Post
Code:
Public Function GetBaseAddressByModuleName(ByVal proc As String, ByVal procmodule As String) As IntPtr
    For Each m As ProcessModule In Process.GetProcessesByName(proc)(0).Modules ' loop through all modules in that process
        If m.ModuleName = procmodule Then
            Return m.BaseAddress ' return BaseAddress of module
        End If
    Next

    Return IntPtr.Zero ' no such module in target process
End Function
Code:
Dim RVAddress as UInt32 =&H001F20AC
Dim VAddress as UInt32 = GetBaseAddressByModuleName("process name of your game", "mono.dll").ToInt32() + RVAddress
Posts 1–6 of 6 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us