|
You last visited: Today at 21:25
Advertisement
Memory read...Probleme ohne Ende
Discussion on Memory read...Probleme ohne Ende within the AutoIt forum part of the Coders Den category.
05/08/2011, 14:02
|
#1
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Memory read...Probleme ohne Ende
Hey Leute,
ich hab hier n Problem mit Memory read n Autoit. Ich möchte, dass ein Pointer ausgelesen wird und in einem Label angezeigt wird. Dafür hab ich ein Beispielscript erstellt. Wenn ich das nur mit der Adresse mache klappt es wunderbar. Jetzt will ich es aber mit einem Pointer machen, damit ich nicht immer die Adresse neu suchen muss. Nur Probleme. Ich versteh es einfach nicht ich mache immer was falsch.
Hier mein Script :
#include <GUIConstantsEx.au3>
#include <StaticConstants.au3>
#include <WindowsConstants.au3>
#RequireAdmin
#include <NomadMemory.au3>
#include <ButtonConstants.au3>
#include <GUIConstantsEx.au3>
#include <StaticConstants.au3>
#include <WindowsConstants.au3>
#include <ButtonConstants.au3>
#include <GUIConstantsEx.au3>
#include <ProgressConstants.au3>
#include <StaticConstants.au3>
#include <WindowsConstants.au3>
#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Form1", 422, 164, 192, 124)
$Label1 = GUICtrlCreateLabel("Label1", 16, 16, 36, 17)
$Button1 = GUICtrlCreateButton("Button1", 128, 128, 113, 33, $WS_GROUP)
$Progress1 = GUICtrlCreateProgress(48, 80, 337, 25)
GUISetState(@SW_SHOW)
#EndRegion ### END Koda GUI section ###
while 5
Global $Adresse = 0x310A3170
Dim $Offset[1] = [0x5DA]
SetPrivilege("SeDebugPrivilege", 1)
While Not ProcessExists("aion.bin")
Sleep(200)
WEnd
$Open = _memoryopen(ProcessExists("aion.bin"))
$Read = _MemoryRead($Adresse , $Open,'dword')
$1 = _MemoryRead($Adresse + $Offset,'dword')
$2 = Guictrlread($1)
Guictrlsetdata($Label1,$2)
wend
While 1
$nMsg = GUIGetMsg()
Switch $nMsg
Case $GUI_EVENT_CLOSE
Exit
EndSwitch
WEnd
Kann mir einer sagen, was ich falsch mache?
|
|
|
05/08/2011, 14:13
|
#2
|
elite*gold: 0
Join Date: Mar 2009
Posts: 7,260
Received Thanks: 33,149
|
Die Frage, was du richtig machst, lässt sich einfacher beantworten. Kopiere dir nicht alles zusammen, sondern lerne es gleich.
Hier mal ein Beispiel, wie es funktionieren würde:
PHP Code:
#RequireAdmin
#include <NomadMemory.au3>
#include <GUIConstantsEx.au3>
GUICreate("Test", 420, 165)
$Label = GUICtrlCreateLabel("", 16, 16, 36, 17)
$Button = GUICtrlCreateButton("Button", 128, 128, 113, 33)
$Progress = GUICtrlCreateProgress(48, 80, 337, 25)
GUISetState(@SW_SHOW)
$Adresse = 0x310A3170
Dim $Offset[2] = [0, 0x5DA]
Do
$Open = _MemoryOpen(ProcessExists("aion.bin"))
If Not @error Then
$Read = _MemoryRead($Adresse, $Open)
$Value = _MemoryRead($Read + $Offset[1], $Open)
If $Value <> GUICtrlRead($Label) Then GUICtrlSetData($Label, $Value)
EndIf
Until GUIGetMsg() == $GUI_EVENT_CLOSE
|
|
|
05/08/2011, 14:33
|
#3
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Danke erstmal. Ich weiß ich bin total der Nichtskönner was Memory read angeht.
Also ich habs mal so übernommen, wie du es hier gepostet hast.
Das Problem :
Es tut sich leider garnichts. Haste ne Idee, woran es liegen könnte?
|
|
|
05/09/2011, 14:45
|
#4
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Also ich habe den Offset-wert von der Hp Anzahl genommen.
Der ist 5DA. Dann hab ich wegen autoit 0x davor gemacht und die Adresse müsste auf jedenfall stimmen.
Passiert entweder nichts, oder er zeigt immer 0 an.
|
|
|
05/10/2011, 14:41
|
#5
|
elite*gold: 0
Join Date: Mar 2009
Posts: 7,260
Received Thanks: 33,149
|
Das Script sollte richtig sein.
_MemoryRead:
Code:
#RequireAdmin
#include <NomadMemory.au3>
#include <GUIConstantsEx.au3>
GUICreate("Test", 420, 165)
$Label = GUICtrlCreateLabel("", 16, 16, 36, 17)
$Button = GUICtrlCreateButton("Button", 128, 128, 113, 33)
$Progress = GUICtrlCreateProgress(48, 80, 337, 25)
GUISetState(@SW_SHOW)
$Adresse = 0x310A3170
$Offset = 0x5DA
Do
$Open = _MemoryOpen(ProcessExists("aion.bin"))
If Not @error Then
$Read = _MemoryRead($Adresse, $Open)
$Value = _MemoryRead($Read + $Offset, $Open)
If $Value <> GUICtrlRead($Label) Then GUICtrlSetData($Label, $Value)
_MemoryClose($Open)
EndIf
Sleep(10)
Until GUIGetMsg() == $GUI_EVENT_CLOSE
_MemoryPointerRead:
Code:
#RequireAdmin
#include <NomadMemory.au3>
#include <GUIConstantsEx.au3>
GUICreate("Test", 420, 165)
$Label = GUICtrlCreateLabel("", 16, 16, 36, 17)
$Button = GUICtrlCreateButton("Button", 128, 128, 113, 33)
$Progress = GUICtrlCreateProgress(48, 80, 337, 25)
GUISetState(@SW_SHOW)
$Adresse = 0x310A3170
Dim $Offset[2] = [0, 0x5DA]
Do
$Open = _MemoryOpen(ProcessExists("aion.bin"))
If Not @error Then
$Value = _MemoryPointerRead($Adresse, $Open, $Offset)
If Not @error And ($Value[1] <> GUICtrlRead($Label)) Then GUICtrlSetData($Label, $Value[1])
_MemoryClose($Open)
EndIf
Sleep(10)
Until GUIGetMsg() == $GUI_EVENT_CLOSE
Funktioniert es den mit Cheat Engine?
|
|
|
05/11/2011, 14:10
|
#6
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Ja mit Cheat engine funktioniert es.
Aber wenn ich's ins Script einbauen will, klappts nicht.
Meine Frage : Ich habe jetzt mal einen anderen Pointer rausgefunden, der 1 Offset hat.
Ich hab den mit Pointer Scann rausgefunden. Wie schreib ich das ins Script?
Hier mal ein Bild. Ist eigentlich völlig Wurst welchen Pointer ihr davon als Beispiel benutzt. Würde es nur gerne erklärt haben.
Danke =)
Bild :
|
|
|
05/11/2011, 14:52
|
#7
|
elite*gold: 0
Join Date: Dec 2009
Posts: 1,622
Received Thanks: 2,070
|
Code:
#RequireAdmin
#include <NomadMemory.au3>
#include <GUIConstantsEx.au3>
GUICreate("Test", 420, 165)
$Label = GUICtrlCreateLabel("", 16, 16, 36, 17)
$Button = GUICtrlCreateButton("Button", 128, 128, 113, 33)
$Progress = GUICtrlCreateProgress(48, 80, 337, 25)
GUISetState(@SW_SHOW)
$Adresse = 0x0009545C
Dim $Offset[2] = [0, 0x4C4]
Do
$Open = _MemoryOpen(ProcessExists("aion.bin"))
If Not @error Then
$Value = _MemoryPointerRead($Adresse, $Open, $Offset)
If Not @error And ($Value[1] <> GUICtrlRead($Label)) Then GUICtrlSetData($Label, $Value[1])
_MemoryClose($Open)
EndIf
Sleep(10)
Until GUIGetMsg() == $GUI_EVENT_CLOSE
Doppelklicke mal alle "Pointer" in der liste, und lass ce offen.
Starte Crysis Neu und attache ce wieder ans spiel und lass die liste drin.
Schau an welche adresse richtig ist.
Rechtsklick auf diese, und klick auf "copy"
Öffne Notepad und drücke strg+v
diesen text schreibe mal hier in einen Post
btw.
Er hat sicher die Normale NomadMemory, in welcher Pointer nicht enthalten sind.
Ich poste gleich mal meine NomadMemory, und ersetze diese durch deine.
NomadMemory.au3
Code:
#include-once
#region _Memory
;==================================================================================
; AutoIt Version: 3.1.127 (beta)
; Language: English
; Platform: All Windows
; Author: Nomad
; Requirements: These functions will only work with beta.
;==================================================================================
; Credits: wOuter - These functions are based on his original _Mem() functions.
; But they are easier to comprehend and more reliable. These
; functions are in no way a direct copy of his functions. His
; functions only provided a foundation from which these evolved.
;==================================================================================
;
; Functions:
;
;==================================================================================
; Function: _MemoryOpen($iv_Pid[, $iv_DesiredAccess[, $iv_InheritHandle]])
; Description: Opens a process and enables all possible access rights to the
; process. The Process ID of the process is used to specify which
; process to open. You must call this function before calling
; _MemoryClose(), _MemoryRead(), or _MemoryWrite().
; Parameter(s): $iv_Pid - The Process ID of the program you want to open.
; $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which
; enables all possible access rights to the
; process specified by the Process ID.
; $iv_InheritHandle - (optional) If this value is TRUE, all processes
; created by this process will inherit the access
; handle. Set to 1 (TRUE) by default. Set to 0
; if you want it FALSE.
; Requirement(s): None.
; Return Value(s): On Success - Returns an array containing the Dll handle and an
; open handle to the specified process.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $iv_Pid.
; 2 = Failed to open Kernel32.dll.
; 3 = Failed to open the specified process.
; Author(s): Nomad
; Note(s):
;==================================================================================
Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1)
If Not ProcessExists($iv_Pid) Then
SetError(1)
Return 0
EndIf
Local $ah_Handle[2] = [DllOpen('kernel32.dll')]
If @Error Then
SetError(2)
Return 0
EndIf
Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid)
If @Error Then
DllClose($ah_Handle[0])
SetError(3)
Return 0
EndIf
$ah_Handle[1] = $av_OpenProcess[0]
Return $ah_Handle
EndFunc
;==================================================================================
; Function: _MemoryRead($iv_Address, $ah_Handle[, $sv_Type])
; Description: Reads the value located in the memory address specified.
; Parameter(s): $iv_Address - The memory address you want to read from. It must
; be in hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle
; of the open process as returned by _MemoryOpen().
; $sv_Type - (optional) The "Type" of value you intend to read.
; This is set to 'dword'(32bit(4byte) signed integer)
; by default. See the help file for DllStructCreate
; for all types. An example: If you want to read a
; word that is 15 characters in length, you would use
; 'char[16]' since a 'char' is 8 bits (1 byte) in size.
; Return Value(s): On Success - Returns the value located at the specified address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless specified as a
; 'char' type, then they are returned in ASCII format. Also note
; that size ('char[size]') for all 'char' types should be 1
; greater than the actual size.
;==================================================================================
Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')
If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf
Local $v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 1)
Return 0
EndIf
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If Not @Error Then
Local $v_Value = DllStructGetData($v_Buffer, 1)
Return $v_Value
Else
SetError(6)
Return 0
EndIf
EndFunc
;==================================================================================
; Function: _MemoryWrite($iv_Address, $ah_Handle, $v_Data[, $sv_Type])
; Description: Writes data to the specified memory address.
; Parameter(s): $iv_Address - The memory address which you want to write to.
; It must be in hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle
; of the open process as returned by _MemoryOpen().
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of value you intend to write.
; This is set to 'dword'(32bit(4byte) signed integer)
; by default. See the help file for DllStructCreate
; for all types. An example: If you want to write a
; word that is 15 characters in length, you would use
; 'char[16]' since a 'char' is 8 bits (1 byte) in size.
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = $v_Data is not in the proper format to be used with the
; "Type" selected for $sv_Type, or it is out of range.
; 7 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Values sent must be in Decimal format, unless specified as a
; 'char' type, then they must be in ASCII format. Also note
; that size ('char[size]') for all 'char' types should be 1
; greater than the actual size.
;==================================================================================
Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')
If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf
Local $v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 1)
Return 0
Else
DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(6)
Return 0
EndIf
EndIf
DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If Not @Error Then
Return 1
Else
SetError(7)
Return 0
EndIf
EndFunc
;==================================================================================
; Function: _MemoryClose($ah_Handle)
; Description: Closes the process handle opened by using _MemoryOpen().
; Parameter(s): $ah_Handle - An array containing the Dll handle and the handle
; of the open process as returned by _MemoryOpen().
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = Unable to close the process handle.
; Author(s): Nomad
; Note(s):
;==================================================================================
Func _MemoryClose($ah_Handle)
If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf
DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
If Not @Error Then
DllClose($ah_Handle[0])
Return 1
Else
DllClose($ah_Handle[0])
SetError(2)
Return 0
EndIf
EndFunc
;==================================================================================
; Function: SetPrivilege( $privilege, $bEnable )
; Description: Enables (or disables) the $privilege on the current process
; (Probably) requires administrator privileges to run
;
; Author(s): Larry (from autoitscript.com's Forum)
; Notes(s):
; http://www.autoitscript.com/forum/index.ph...st&p=223999
;==================================================================================
Func SetPrivilege( $privilege, $bEnable )
Const $TOKEN_ADJUST_PRIVILEGES = 0x0020
Const $TOKEN_QUERY = 0x0008
Const $SE_PRIVILEGE_ENABLED = 0x0002
Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
$nTokens = 1
$LUID = DLLStructCreate("dword;int")
If IsArray($privilege) Then $nTokens = UBound($privilege)
$TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
$SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","hwnd",$hCurrProcess[0], _
"int",BitOR($TOKEN_ADJUST_PRIVILEGES,$TOKEN_QUERY),"int*",0)
If $SP_auxret[0] Then
$hToken = $SP_auxret[3]
DLLStructSetData($TOKEN_PRIVILEGES,1,1)
$nTokenIndex = 1
While $nTokenIndex <= $nTokens
If IsArray($privilege) Then
$priv = $privilege[$nTokenIndex-1]
Else
$priv = $privilege
EndIf
$ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue","str","","str",$priv, _
"ptr",DLLStructGetPtr($LUID))
If $ret[0] Then
If $bEnable Then
DLLStructSetData($TOKEN_PRIVILEGES,2,$SE_PRIVILEGE_ENABLED,(3 * $nTokenIndex))
Else
DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
EndIf
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,1),(3 * ($nTokenIndex-1)) + 1)
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,2),(3 * ($nTokenIndex-1)) + 2)
DLLStructSetData($LUID,1,0)
DLLStructSetData($LUID,2,0)
EndIf
$nTokenIndex += 1
WEnd
$ret = DLLCall("advapi32.dll","int","AdjustTokenPrivileges","hwnd",$hToken,"int",0, _
"ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",DllStructGetSize($NEWTOKEN_PRIVILEGES), _
"ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*",0)
$f = DLLCall("kernel32.dll","int","GetLastError")
EndIf
$NEWTOKEN_PRIVILEGES=0
$TOKEN_PRIVILEGES=0
$LUID=0
If $SP_auxret[0] = 0 Then Return 0
$SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd",$hToken)
If Not $ret[0] And Not $SP_auxret[0] Then Return 0
return $ret[0]
EndFunc ;==>SetPrivilege
;=================================================================================================
; Function: _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset[, $sv_Type])
; Description: Reads a chain of pointers and returns an array containing the destination
; address and the data at the address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension.
; $sv_Type - (optional) The "Type" of data you intend to read at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns an array containing the destination address and the value
; located at the address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = $sv_Type is not a string.
; 4 = $sv_Type is an unknown data type.
; 5 = Failed to allocate the memory needed for the DllStructure.
; 6 = Error allocating memory for $sv_Type.
; 7 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;=================================================================================================
Func _MemoryPointerRead($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')
If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf
Local $iv_Data[2], $i
Local $v_Buffer = DllStructCreate('dword')
For $i = 0 To $iv_PointerCount
If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @error Then
SetError(@error + 2)
Return 0
EndIf
$iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @error Then
SetError(7)
Return 0
EndIf
$iv_Data[1] = DllStructGetData($v_Buffer, 1)
ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @error Then
SetError(7)
Return 0
EndIf
$iv_Data[1] = DllStructGetData($v_Buffer, 1)
Else
$iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @error Then
SetError(7)
Return 0
EndIf
$iv_Data[1] = DllStructGetData($v_Buffer, 1)
EndIf
Next
$iv_Data[0] = $iv_Address
Return $iv_Data
EndFunc ;==>_MemoryPointerRead
;=================================================================================================
; Function: _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data[, $sv_Type])
; Description: Reads a chain of pointers and writes the data to the destination address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension.
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of data you intend to write at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns the destination address.
; On Failure - Returns 0.
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = Failed to read from the specified process.
; 4 = $sv_Type is not a string.
; 5 = $sv_Type is an unknown data type.
; 6 = Failed to allocate the memory needed for the DllStructure.
; 7 = Error allocating memory for $sv_Type.
; 8 = $v_Data is not in the proper format to be used with the
; "Type" selected for $sv_Type, or it is out of range.
; 9 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Data written is in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used, doesn't matter what's entered)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;=================================================================================================
Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')
If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf
Local $iv_StructData, $i
Local $v_Buffer = DllStructCreate('dword')
For $i = 0 to $iv_PointerCount
If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 3)
Return 0
EndIf
DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(8)
Return 0
EndIf
$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(9)
Return 0
Else
Return $iv_Address
EndIf
ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf
$iv_StructData = DllStructGetData($v_Buffer, 1)
Else
$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf
$iv_StructData = DllStructGetData($v_Buffer, 1)
EndIf
Next
EndFunc
;===================================================================================================
; Function........: _MemoryGetBaseAddress($ah_Handle, $iHD)
;
; Description.....: Reads the 'Allocation Base' from the open process.
;
; Parameter(s)....: $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $iHD - Return type:
; |0 = Hex (Default)
; |1 = Dec
;
; Requirement(s)..: A valid process ID.
;
; Return Value(s).: On Success - Returns the 'allocation Base' address and sets @Error to 0.
; On Failure - Returns 0 and sets @Error to:
; |1 = Invalid $ah_Handle.
; |2 = Failed to find correct allocation address.
; |3 = Failed to read from the specified process.
;
; Author(s).......: Nomad. Szhlopp.
; URL.............: http://www.autoitscript.com/forum/index.php?showtopic=78834
; Note(s).........: Go to Www.CheatEngine.org for the latest version of CheatEngine.
;===================================================================================================
Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)
Local $iv_Address = 0x00100000
Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')
Local $vData
Local $vType
If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf
DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
If Not @Error Then
$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))
While $vType <> "00000080"
DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))
If Hex($iv_Address) = "01000000" Then ExitLoop
$iv_Address += 65536
WEnd
If $vType = "00000080" Then
SetError(0)
If $iHexDec = 1 Then
Return Dec($vData)
Else
Return $vData
EndIf
Else
SetError(2)
Return 0
EndIf
Else
SetError(3)
Return 0
EndIf
EndFunc ;==>_MemoryGetBaseAddress
#EndRegion
|
|
|
05/11/2011, 15:24
|
#8
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Also danke erstmal hatte wirklich noch die alte NomadMemory. So jetzt hab ich das gemacht, was du gesagt hast. Bleiben leider noch 19 Pojtner übrig ich hab jetzt mal 3 Kopiert.
1.
<?xml version="1.0"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<Description>"pointerscan result"</Description>
<Color>80000008</Color>
<VariableType>4 Bytes</VariableType>
<Address>"Game.dll"+0009545C</Address>
<Offsets>
<Offset>4C4</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatTable>
2.
<?xml version="1.0"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<Description>"pointerscan result"</Description>
<Color>80000008</Color>
<VariableType>4 Bytes</VariableType>
<Address>"Game.dll"+00147CB0</Address>
<Offsets>
<Offset>1C</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatTable>
3.
<?xml version="1.0"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<Description>"pointerscan result"</Description>
<Color>80000008</Color>
<VariableType>4 Bytes</VariableType>
<Address>"Game.dll"+002824E0</Address>
<Offsets>
<Offset>4C</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatTable>
|
|
|
05/15/2011, 11:47
|
#9
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Tja...und was jetzt?
|
|
|
05/18/2011, 18:56
|
#10
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Kann denn keiner helfen?? Ich vermute, dass es an der Game.dll+ blablabla liegt, weil game.dll ja die base adress ist und man die ja glaub ich nicht einfach weglassen kann...noch einer ne idee?
|
|
|
05/20/2011, 00:16
|
#11
|
elite*gold: 0
Join Date: Mar 2009
Posts: 7,260
Received Thanks: 33,149
|
Cheat Engine:
Add address manually → Address: Game.dll → OK
Auf die angezeigte Adresse addierst du anschließend 0x9545C. Wäre "Game.dll" = 0x100000, wäre "Game.dll + 0x9545C" = 0x19545C.
|
|
|
08/26/2011, 22:03
|
#12
|
elite*gold: 0
Join Date: May 2009
Posts: 191
Received Thanks: 19
|
Kleines Problem noch .. was mach ich wenn sich die base adresse immer ändert?
|
|
|
08/26/2011, 23:37
|
#13
|
elite*gold: 0
Join Date: Mar 2009
Posts: 7,260
Received Thanks: 33,149
|
Dann schmeißt du CE an, suchst die neue Base und änderst sie im Script. So wie es die meisten tun. Gäbe evtl. noch andere Wege, aber davon wirst du wohl keine Ahnung haben.
|
|
|
08/27/2011, 07:56
|
#14
|
elite*gold: 1826
Join Date: Mar 2009
Posts: 4,310
Received Thanks: 6,287
|
Code:
typedef struct tagMODULEENTRY32 {
DWORD dwSize;
DWORD th32ModuleID;
DWORD th32ProcessID;
DWORD GlblcntUsage;
DWORD ProccntUsage;
[COLOR="Red"]BYTE *modBaseAddr;[/COLOR]
DWORD modBaseSize;
HMODULE hModule;
TCHAR szModule[MAX_MODULE_NAME32 + 1];
TCHAR szExePath[MAX_PATH];
} MODULEENTRY32, *PMODULEENTRY32;
|
|
|
 |
Similar Threads
|
Glutseidenstoff ohne Ende
12/13/2010 - WoW Exploits, Hacks, Tools & Macros - 12 Replies
Wenn Ihr auf der Suche nach Glutseidenstoff seit, kann ich Euch eine Quest in Uldum ans Herz Legen.
Bei dem Questabschnitt "Schnottz und Wasser" müßt Ihr in der Kammer des Mondes Elite Mobs killen, die nur noch knapp 20% HP haben und nur mäßig schaden machen.
Sie droppen aber wie ganz normale Elitemobs. Also 5-6 Glutseidenstoff.
Ich habe die Questreihe nicht abgeschlossen und farme dort momentan knapp 500 Stoffe pro Stunde...und daß als nicht Schneiderer.
Hoffe dem ein oder anderen...
|
Laggs ohne Ende.
07/14/2010 - CrossFire - 28 Replies
Heyho!
Ich meld mich auch nochmal in der Section und stell direkt mal eine Frage an euch und hoffe, dass vielleicht jemand eine Lösung hat.
Ich spiele seit kurzem bzw. ich versuche seit kurzem Crossfire zu spielen.
Leider will Crossfire nicht so, wie ich es will... .
Hab leider immer sehr starke laggs und keine ahnung wie ich die los werde.
Support und z8games Forum als Lösung anzubieten verbiete ich euch mal, auch wenn ich kein Mod oder sonstiges bin, aber die beiden genannten Sachen...
|
[VB]Write Memory bzw Read Memory
06/26/2010 - .NET Languages - 8 Replies
Hi
Ich hab das TuT von *Guidman* benütz um einen hack zu machen.
So aber nun hab ihc ein paar fragen könnte man memory teil kürzer machen und am besten wie kann man das selber machen weil ich will nihct immer C&P machen.
Und zu Read Memory kann man das auch machen das ein Label immer die Bestimmte Ahnzahl angiebt von dem Pointer?.(Wenn das Read Memory ist ?)
Bitte helf mir
Danke
|
All times are GMT +1. The time now is 21:27.
|
|