Game.dll Handle

Quote:

Originally Posted by aocunderground GetModuleHandle can only return module handles from the process in which it was called. Unless you are injected... you're doing it completely wrong.

Quote:

Originally Posted by Revived Soulreaver I am using c# so i am simply getting the process by name and then the main module and the id of that. This returns the Module Handle. I am then attempting to readMemory using this handle. It still however returns 0 everytime even with read only access. EDIT: NVM looks like I am calculating Game.dll address incorrectly so i'll look into this more and see if i can make sure to make this dynamic.

            Process aionProcess = null;
            Process[] processes = Process.GetProcesses();
            foreach (Process process in processes)
            {
                if (process.ProcessName == "AION.bin")
                {
                    aionProcess = process;
                    break;
                }
            }

Quote:

Originally Posted by aocunderground using System.Diagnostics... Code: Process aionProcess = null; Process[] processes = Process.GetProcesses(); foreach (Process process in processes) { if (process.ProcessName == "AION.bin") { aionProcess = process; break; } } The Process object that is returned will hold a list of modules and their associated handles, etc. Oh, and read up on ReadProcessMemory buddy. You don't need the module handle, you need the process handle, which the Process class conveniently contains for you.

Quote:

Originally Posted by Revived Soulreaver Issue Resolved: I was only having an issue since i am running x64, the code you are supplying is for x86 which my code works for as well. Have a good one.

Quote:

Originally Posted by aocunderground What? This code works in x64.

Quote:

Originally Posted by Revived Soulreaver Unfortunately it does not...It does compile and it does run...but you'll never find Game.dll...if you don't believe me feel free to test it. Sorry we were talking about 2 different things, yes that will find Aion.BIN and that is important, but this won't get you a baseAddress which is what my question was...my bad Thanks for the assist.

            foreach (ProcessModule module in aionProcess.Modules)
            {
                if (module.ModuleName == "Game.dll")
                {
                    IntPtr gameBaseAddress = module.BaseAddress;
                    break;
                }
            }

Quote:

Originally Posted by aocunderground Code: foreach (ProcessModule module in aionProcess.Modules) { if (module.ModuleName == "Game.dll") { IntPtr gameBaseAddress = module.BaseAddress; break; } } ModuleName *may* strip off the extension, I can't remember, so it might be "Game" not "Game.dll".

Quote:

Originally Posted by GTxFinish He's right, it doesnt find game.dll module. I am also running x64, and when debugging it only shows a handful of Aion's process Modules (maybe like 10% of what there actually is). Hey RevivedSoulReaver, how did you work around this? Did I read your post wrong or did you figure out how to detect game.dll? Thanks, Fnsh

Quote:

Originally Posted by aocunderground Ah that makes sense, I always enable debug/all access privileges by default. Also, you really don't need module bases if you don't work with offsets (from module bases) ;)

Quote:

Originally Posted by Revived Soulreaver I'm completely unsure about what you are attempting to ;) (sneaky? suggestive) with this. You need base addresses if you are doing any memory work. If you are doing Packet sniffing you just need the appropriate filter.

mov     ecx, dword_108E7230
mov     eax, ecx
sub     eax, 0Ah

Quote:

Originally Posted by iifuzz anyone have the offset to the list of npc's/monsters