Results 1 to 3 of 3
  1. #1

    How can I get the memory offsets that functions in a dll access?

    I am developing an anti cheat patch for a friend for an old game for him and his small community of players for free. I am doing a dll in visual basic becasue the community is so small I know that VB will be just fine. I do know that fighting cheaters is a losing battle but it is such a small community that it won't be as bad but I need to get the cheats patched that are out now.

    I have all the file modificaiton cheats detected and blocked and its working fine as well as some registry checks and some checks for known open programs that are cheats.

    I am struggling on blocking the memory hacks that a specific dll uses. Someone made a dsound dll that has about 10 different cheats in it. I have tried to load the dll and search for what changes in memory programs like tsearch but i cant seem to find the addresses.

    How would I be able to debug or dissasemble the dll and get the memory addresses that the cheats edit so I can check those addresses

  2. #2
    Join Date
    Jan 2010
    Location
    good ole UK
    Posts
    341
    Try OllyDbg
    I H4t3 l33T, l33T i5 4 l053r5!
    ██
    ███
    ████ Personally I'm always ready to learn, although I do not always like being taught.

  3. #3
    Join Date
    Apr 2009
    Location
    Pittsburgh, Pennsylvania
    Posts
    582
    Quote Originally Posted by lJesterl View Post
    I am developing an anti cheat patch for a friend for an old game for him and his small community of players for free. I am doing a dll in visual basic becasue the community is so small I know that VB will be just fine. I do know that fighting cheaters is a losing battle but it is such a small community that it won't be as bad but I need to get the cheats patched that are out now.

    I have all the file modificaiton cheats detected and blocked and its working fine as well as some registry checks and some checks for known open programs that are cheats.

    I am struggling on blocking the memory hacks that a specific dll uses. Someone made a dsound dll that has about 10 different cheats in it. I have tried to load the dll and search for what changes in memory programs like tsearch but i cant seem to find the addresses.

    How would I be able to debug or dissasemble the dll and get the memory addresses that the cheats edit so I can check those addresses
    idapro advance 6. yea, it costs $1,059, but it is worth it. I use it regularly, love the ability for version diffing, and writing scripts to automate a lot of the tasks for me.

    And btw, detecting memory hacks is a game not worth playing, blizzard entertainment (developers of world of warcraft) have been battling MDY (which i am for MDY, hope they win!) its in the millions, if someone wants to bypass and cheat on a game, its going to happen. And stopping cheats with visual basic isn't even ideal, use c or c++.

    Also, if your friend is making any money, i'd suggest using http://global.nprotect.com/product/gg.php if he can afford it, not really sure on the pricing. But it will stop autoit color scanners, many script kiddie mem hacks and such.

Similar Threads

  1. How to: Trusted Reseller Access to CSF unban and whitelist functions
    By jon-f in forum Hosting Security and Technology
    Replies: 0
    Last Post: 10-15-2009, 05:24 PM
  2. System user 32.dll was relocated in memory?????
    By catfished in forum Computers and Peripherals
    Replies: 8
    Last Post: 04-10-2007, 08:04 PM
  3. Think you know Server Year offsets?
    By jacemindlab in forum Programming Discussion
    Replies: 2
    Last Post: 03-02-2007, 06:31 AM
  4. Easy Functions [Functions Tool Kit] PHP Coders Needed!
    By DiverseFlow in forum Other Offers & Requests
    Replies: 0
    Last Post: 03-14-2005, 12:40 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •