Olly + AuotIt + Me = o.O

07/19/2010 01:29 ~kau~#1

Hi ho E*pvp,
Hab immer noch das Problem....
Ich machs kurz...
Source:

Spoiler

hoffe ihr k�nnt mir helfen.
TY:handsdown:

07/19/2010 12:03 ~kau~#2

#push
immer nioch kiene idee?

07/19/2010 13:18 bladerofdarknes#3

erkl�r uns was nicht funktioniert und pushen darfst du nur im black market ;)

07/19/2010 15:49 ~kau~#4

aso^^ kk, na wie beim addy logger in c++ memorysearch($start, $end"Byte", "mask")
also nur in autoIt

07/19/2010 16:11 ddl#5

du hast den C++ Code dazu und kannst es nicht portieren?
Eigentlich sollte ich es dir nicht geben aber:
[Only registered and activated users can see links. Click Here To Register...]

Code:

;==================================================================================
; Function:         _MemoryScan($ah_Handle, $pattern [, $after[, $iv_addrStart, [$iv_addrEnd]]])
; Description:      Finds the address of the first occurance of a pattern in a process.
; Parameter(s):     $ah_Handle - An array containing the Dll handle and the handle
;                                of the open process as returned by _MemoryOpen().
;                   $pattern - The pattern you want to find. Provide the pattern 
;                              as a String of hex values. You may use the '.' as wildcard. 
;                              Any other character as '0123456789ABCDEFabcdef.' is ignored. 
;                              Example: "55 8B .. 83"
;                   $after - (optional) Set to FALSE by default.
;                            If set to TRUE, the method will return the address
;                            after the pattern, else the method returns the address
;                            of the pattern itself.
;                   $iv_addrStart - (optional) Set to 0x00400000 by default.
;                                   This is the address where the method begins to scan
;                                   for the pattern. It must be in hex format (0x00000000).
;                   $iv_addrEnd - (optional) Set to 0X00FFFFFF by default.
;                                 This is the address where the method stops to scan
;                                 for the pattern. It must be in hex format (0x00000000).
; Requirement(s):   None.
; Return Value(s):  On Success - Returns the address of the first occurance of the pattern 
;                                ($after = FALSE) or the address after the first occurance 
;                                of the pattern ($after = TRUE). The address is in 
;                                hexadecimal format.
;                   On Failure - Returns -1
;                   @Error - 0 = No error.
;                            1 = Invalid $ah_Handle.
;                            2 = Invalid $pattern.
; Author(s):        Luzifer42
; Note(s):          The default scan range will be completed in less than one second.
;==================================================================================
Func _MemoryScan($ah_Handle, $pattern, $after=false, $iv_addrStart=0x00400000, $iv_addrEnd=0X00FFFFFF, $step=51200)
	If Not IsArray($ah_Handle) Then
		SetError(1)
        Return -1
	EndIf
	$pattern=StringRegExpReplace($pattern, "[^0123456789ABCDEFabcdef.]", "")
	IF StringLen($pattern)=0 Then 
		SetError(2)
        Return -1
	EndIf
	For $addr=$iv_addrStart To $iv_addrEnd Step $step-(StringLen($pattern)/2)
		StringRegExp(_MemoryRead($addr, $ah_Handle, "byte[" & $step & "]"), $pattern, 1, 2)
		If Not @Error Then
			If $after Then
				return StringFormat("0x%.8X", $addr+((@Extended-2)/2))
			Else
				return StringFormat("0x%.8X", $addr+((@Extended-StringLen($pattern)-2)/2))
			EndIf
		EndIf
	Next
	Return -1
EndFunc