MHS Complex Address : Module Name Unable to Resolve

[WhiteHat]

I was hacking FATE to make a working address of gold, when i get
complex address like this:

[[[[0xD3A228]+0x278]+0x644]+0x458]+0x8
The text box it below read : “71732976 (4468EF0)”, which was fine....

But when i modified the complex address to this:

[[[[Fate-WT.exe+0x93A228]+0x278]+0x644]+0x458]+0x8
The text box it below read : “Valid Expression but Unable to Resolve”

Isn’t expression [Fate-WT.exe+0x93A228] same as [0xD3A228] ?
Then why do they seem to point to different address ?

Thank you very much in advance...

[mezzo]

looks pretty OK to me..

what happens if you simply put [Fate-WT.exe+0x93A228] into the expression box ?
(and are you sure that the address you're building is relative to fate-w.exe and not a DLL ?

[WhiteHat]

Thanks for replying, mezzo...

looks pretty OK to me..

Yes it does...

what happens if you simply put [Fate-WT.exe+0x93A228] into the expression box ?

I’ve tried that also...

Expression : [Fate-WT.exe+0x93A228]
Result : “Valid Expression but Unable to Resolve”

but

Expression : [0xD3A228]
Result : “22992368 (15ED5F0)”

and are you sure that the address you're building is relative to fate-w.exe and not a DLL ?

This is what appeared in Hex Editor > Helper > Info

Code: Select all

00370000
00380000
    00400000 [Fate-WT.exe]
    00401000
    00A22000
    00B1D000
    00B20000
    00D36000
    00D37000
    00D69000
    00D6A000
00D70000
00E30000


so ... 0xD3A288 should be in Fate-Wt.exe module right ?

[L. Spiro]

If the module name has anything besides an underscore, letters, numbers, and one period (or zero), you need to put quotes around it.

In this case, obviously, it has a -, which means “Fate minus WT.exe”, which is clearly not going to be resolvable unless you have a module named Fate and one named WT.exe.


I figured game companies might discover that special characters cause undesired results with the parser and so they would start putting them into their executable names, so I put in a fail-safe way to handle this situation as an alternative.


[[[["Fate-WT.exe"+0x93A228]+0x278]+0x644]+0x458]+0x8


L. Spiro

[WhiteHat]

Thank you very much !.. It works now !

I should really realize this before...

[mezzo]

Now that's what sets MHS WAY ahead of the competition, it's those little well thought of things..

@Whitehat: didn't know this either.. always nice to learn something new

[WhiteHat]

Now that's what sets MHS WAY ahead of the competition, it's those little well thought of things..

Deserves 5-stars rating !

.. always nice to learn something new

Yes it is... Thus, any tutorials from you will be very much appreciated...

(Of course any other else from L. Spiro, Shynd, Alaxul, LouChyper, etc.)