11 replies to this topic

[TcM]

Well nowadays there are a lot of memory editors like TSearch, usually to cheat games.... So I thought, is it better to store values in a declared variable for example 'Score=10' or is it better to store that in a text box for example 'Text1.Text=10'? Or it will not make any difference for TSearch? I will try this myself but before I thought I'd ask here.

[TcM]

Ok, I have done the two tests! When I declared the Variable and used the variable TSearch found it!! When I used a textbox to hold the data TSearch found NONE!!

PROVED THAT WORKS!

[John]

TheComputerMaster said:

Ok, I have done the two tests! When I declared the Variable and used the variable TSearch found it!! When I used a textbox to hold the data TSearch found NONE!!

PROVED THAT WORKS!

I find that hard to believe, can you post your two examples? I'd like to give it a shot - in the very least, the value can be found using a debugger...

[TcM]

Well I don't know with a debugger but most people to edit memory will use software like TSearch and no debuggers. Anyways the two exe files are attached in a zip file download and try to find the variables using TSearch, in the 'Declared Variable.exe' you will find it and b able to edit the value too (you will find 4, one of them is the msgbox var and the other 3 are the variable) In the second one 'Value In Textbox.exe' you will find none!

I Blogged about this on my blog Protect Your Software From Memory Editors | TheComputerMaster Technology Blog

[Lop]

Where is the zip? These are interesting results and nice blog, btw.

[TcM]

The ZIP is on the blog post. In the paragraph before the last.

Thanks for the compliment :) I would appreciate if I get some Feed subscribers :) and I'm planning to release more security tips as I discover them!!

Thanks,
TheComputerMaster

[John]

I was thinking, the 'Value In Textbox.exe' stores the value in a text box not an integer box. So the value in the text box is a string not an integer, therefor searching for the integer [0, 1, 2, 3, 4] wont work because its not there. If you have the patients to sit at your computer with Tsearch, first searching unknown, then searching "Has changed" each time you increment the value, eventually you WILL find the memory location that corresponds to the text box - it will take a while, but none-the-less - it is there.

Using a debugger and searching for a string value will be much easier in this case.

[TcM]

Well with TSearch you will not find it! I done it, number has changed etc.. didn't find it. And Using a debugger might find it.. don't know.

[TcM]

Well, generally.... yes. But who knows....

[John]

Kaabi said:

Is the point of that just to cheat to get a higher score in a game.

Thats an application - but I wouldn't consider it the point.