Get the absolute address of a value

Oct 13, 2014 at 5:16pm
Hi, I want to get the absolute address of a value of a program. I don't know how to do this, but I think I've seen somewhere that I can do that with knowing what is the first address of the program in memory and then using a program like cheat engine to discover the offset of the address I want using the value it has to find it. Am I correct? If so, do you know any guide related to this I could use? If not, how can I do this?

Last edited on Oct 13, 2014 at 5:18pm
Oct 13, 2014 at 5:21pm
There is no "offset" or something. Each program can use whole address space. What it will get depends on system memory allocator.

What you can do, is to find some address on stack and try to find offsets of other values on stack (making sure that you will not try to access variable outside of its lifetime).
Note that you can only find stack variables that way (usually local variables in program)
Oct 13, 2014 at 5:27pm
I'm a begginer and you see me very confused. Do you know any good guide on this technique?
Oct 13, 2014 at 5:32pm
If you want address of some value in the program you can use operator&
1
2
3
4
5
6
7
int main()
{
    int i;
    int* x = &i; 
    //Now x contains address of variable i
    //Do whatever you want with it.
}

If you want to read other processes memory, you need to use system API:
http://msdn.microsoft.com/en-us/library/ms680553%28VS.85%29.aspx
Or use http://en.wikipedia.org/wiki/Windows_Driver_Kit
Oct 13, 2014 at 5:56pm
Thanks, I'll read on that!
Last edited on Oct 13, 2014 at 5:56pm
Topic archived. No new replies allowed.