Tsearch finds and MHS does not?

Ask for Help on Using the Language With Memory Hacking Software

Moderators: g3nuin3, SpeedWing, WhiteHat, mezzo

Tsearch finds and MHS does not?

Postby Fukc » Fri Apr 11, 2008 3:54 am

Hello,

I have made custom application in cpp to test memory editing and interesting thing i came cross was that MHS cant find the global variable value which is being set in my application and tsearch can.

I have tryed different options in MHS but nothing seems to solve this. I even tryed to track it down with unknown value and then checked which values have increased.

So I included my application with source code, for someone maybe more experienced with mhs to test it, maybe im just doing something wrong.

Value type is float.

www.yarf.biz/app.rar

-------
Edit
------
Blah, i posted it under wrong forum section, sorry for that..
Wanted to post it under Memory Hacking Software, Help section :/
User avatar
Fukc
I Ask A Lot Of Questions
 
Posts: 10
Joined: Fri Apr 11, 2008 12:36 am

Postby L. Spiro » Fri Apr 11, 2008 9:59 am

MHS had no problems finding the value.
The address is below 0x00400000 (0x00335A38) so you are going to have to change your search range. And it is not static.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3129
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Postby Fukc » Fri Apr 11, 2008 12:02 pm

haha, i have no idea how did i miss that. : )

Thanks!
User avatar
Fukc
I Ask A Lot Of Questions
 
Posts: 10
Joined: Fri Apr 11, 2008 12:36 am

Postby WhiteHat » Fri Apr 11, 2008 12:05 pm

L. Spiro, would you please tell us (err... me) how the address goes
below address 0x400000, and any circumstances that caused this to
happens ?

I’ve never seen something like this before, and would like to know.

Thank you very much in advance...
.. to boldly go where no eagle has gone before...
User avatar
WhiteHat
Elang Djawa
 
Posts: 1059
Joined: Fri Jul 21, 2006 12:49 pm
Location: Away for a while...

Postby Fukc » Fri Apr 11, 2008 1:12 pm

It's so because i have used pointers for my variables.

When you use pointers in C++, then the address which is being modified isnt copied and recreated in a new function in the program.

By a function i mean something what will for example, add money to your bank account in a game :)

So in my code, where the value of my variable is first time ever set, (which is pretty much beginning of the code) will be at 0x00335A38.
And the same address will be used later on in a function where there will be added +10 to value inside of 0x00335A38.

If i hadn't used pointers then the function would recreate (Copy) the variable (which first was at 0x00335A38) and it will be for example at 0x004335A38.

I assume it's because of that, that it's in the beginning of the code. No game ever sets it's Health and Money in the beginning of the code :)
So thats why you have never came across this before.

I could be wrong though, but just a theory, because the value of address is 0x004* after i remove pointers.
And for testing purposes for your answer, when i just set some random variable in the beginning of the code with some random value then it returns in mhs two search results, one address is at 0x0012FF60 and second at 0x0041773C.

I hope i didnt went too confuzing with my text. :)
User avatar
Fukc
I Ask A Lot Of Questions
 
Posts: 10
Joined: Fri Apr 11, 2008 12:36 am

Postby WhiteHat » Fri Apr 11, 2008 3:43 pm

Your reply is quite confusing, but i am more thankful of it...

I’ve dealt pretty much with pointer in hacking games. However, this is the
first time i see an address allocated outside the boundary of default address
in MHS. So, i was very curious...
.. to boldly go where no eagle has gone before...
User avatar
WhiteHat
Elang Djawa
 
Posts: 1059
Joined: Fri Jul 21, 2006 12:49 pm
Location: Away for a while...


Return to Help

Who is online

Users browsing this forum: No registered users and 0 guests