Finding Base Addresses

Code Example

// Code cave patch
// Original: mov eax, [rbx+0x10]
// Patch: mov eax, 999  ; infinite value
// NOP remaining bytes

Commands & References

• Wireshark filter / packet capture
• Pointer scan / Pointer map
• VirtualAllocEx / WriteProcessMemory

Lab Steps

1. Set up your environment: Wireshark filter / packet capture
2. Locate the target process or game and attach your tool.
3. Apply the technique and verify the result.
4. Document your findings and any variations.
5. Consider detection risks and mitigation.

Exercises

• Try the same technique on a different value type or game.
• Explore what happens when the game updates.
• Consider how anti-cheat might detect this.
• Design a minimal, undetectable implementation.