AutoIt Porblem Mt2 hack erstellen

[Cekdar]

Hay leute,
ich habe ein Problem mit autoit..
es will einfach nicht °_°
also, ich arbeite an einem Project, also einen Hack für ein Pserver in Metin2!

also, das ist der MoveSpeed Code/Script:
Hier ist noch die HexVaule für MoveSpeed; 4EBA93AE aber wo soll die nun hinnein? danke euch!

 Spoiler

$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"Calypso-2.exe.exe")
$testoffset1 = "4" ; offset neben dem metin2client.bin
$testoffset2 = "5BA" ;das obere offset
$testoffset3 = "0041F060" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input2), "dword")

so sieht mein Ganzer hack aus

 Spoiler

#include <GUIConstants.au3>
#include <pointer.au3>
#RequireAdmin
SetPrivilege("SeDebugPrivilege", 1)

#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Rambo's Multihack!! Created by Ramasan", 366, 376, 193, 192)
$Label1 = GUICtrlCreateLabel("AttackSpeed", 16, 16, 66, 17)
$Input1 = GUICtrlCreateInput("16256", 88, 8, 121, 21)
$Button1 = GUICtrlCreateButton("AttackSpeed", 248, 8, 83, 25, 0)
$Input2 = GUICtrlCreateInput("16256", 89, 37, 121, 21)
$Button2 = GUICtrlCreateButton("FasterAsFast", 249, 39, 83, 25, 0)
$Label2 = GUICtrlCreateLabel("MoveSpeed", 24, 42, 62, 17)
$Input3 = GUICtrlCreateInput("16256", 89, 72, 121, 21)
$Label3 = GUICtrlCreateLabel("AttackRange", 20, 75, 67, 17)
$Button3 = GUICtrlCreateButton("AttackRange", 250, 69, 83, 25, 0)
$Label4 = GUICtrlCreateLabel("WaffenHaltung", 14, 104, 76, 17)
$Combo1 = GUICtrlCreateCombo("Bitte Wählen!", 96, 104, 145, 25)
GUICtrlSetData(-1, "Faust|Einhand|Zweihand")
$Button5 = GUICtrlCreateButton("OneHit", 248, 150, 83, 25, 0)
$Label5 = GUICtrlCreateLabel("OneHite", 19, 148, 43, 17)
$Combo2 = GUICtrlCreateCombo("Wählen Bitte!", 93, 148, 145, 25)
GUICtrlSetData(-1, "1|2|3")
$Button4 = GUICtrlCreateButton("WaffeHaltung", 252, 103, 83, 25, 0)
$Button6 = GUICtrlCreateButton("Zoom!", 90, 177, 107, 25, 0)
$Label6 = GUICtrlCreateLabel("ZoomHack", 21, 183, 57, 17)
$Button7 = GUICtrlCreateButton("Zoom nich-.-", 205, 179, 107, 25, 0)
$Label8 = GUICtrlCreateLabel("Credit: -_HackGamer, .United & Ramasan!", 24, 336, 282, 17)
GUISetState(@SW_SHOW)
#EndRegion ### END Koda GUI section ###

$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"calypso-2.exe.exe")

While 1
$nMsg = GUIGetMsg()
Switch $nMsg
Case $GUI_EVENT_CLOSE
Exit
Case $Button1
$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"calypso-2.exe.exe")
$testoffset1 = "C" ; offset neben dem metin2client.bin
$testoffset2 = "5BA" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input1), "dword")
Case $Button2
$testoffset1 = "4" ; offset neben dem metin2client.bin
$testoffset2 = "5B6" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input2), "dword")
Case $Button3
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "5BA " ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input3), "dword")
Case $Button4
if guictrlread($combo1) = "Faust" Then
$testoffset1 = "4" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "1", "dword")
endif
if guictrlread($combo1) = "Einhand" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "2", "dword")
endif
if guictrlread($combo1) = "Zweihand" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "3", "dword")
endif
Case $Button5
if guictrlread($combo2) = "1" Then
$testoffset1 = "3C" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003D06D0" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "1", "dword")
wend
endif
if guictrlread($combo2) = "2" Then
$testoffset1 = "3C" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003D06D0" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "2", "dword")
wend
endif
if guictrlread($combo2) = "3" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "3", "dword")
wend
endif
Case $Button6

$OPEN = _MemoryOpen ($PID); The memory .. which makes the functions work.

_MemoryWrite(0x07A1806,$OPEN,30000,'byte[2]')
Case $Button7

$OPEN = _MemoryOpen ($PID); The memory .. which makes the functions work.

_MemoryWrite(0x07A1806,$OPEN,17754,'byte[2]')
EndSwitch
WEnd


Func _ReturnMemoryValue($sAdresse)
;blubbstar
$sNewAdresse = ""
$sAdresse = StringTrimLeft($sAdresse, 2)
For $i = StringLen($sAdresse) - 1 To 0 Step -2
$sNewAdresse &= StringMid($sAdresse, $i, 2)
Next
Return $sNewAdresse
EndFunc ;==>_ReturnMemoryValue

das ist meine Pointer.au3

 Spoiler

#include-once
#region _Memory
;================================================= ================================================
; AutoIt Version: 3.1.127 (beta)
; Language: English
; Platform: All Windows
; Author: Nomad
; Requirements: These functions will only work with beta.
;================================================= ================================================
; Credits: wOuter - These functions are based on his original _Mem() functions. But they are
; easier to comprehend and more reliable. These functions are in no way a direct copy
; of his functions. His functions only provided a foundation from which these evolved.
;================================================= ================================================
;
; Functions:
;
;================================================= ================================================
; Function: _MemoryOpen($iv_Pid(, $iv_DesiredAccess(, $iv_InheritHandle)))
; Description: Opens a process and enables all possible access rights to the process. The
; Process ID of the process is used to specify which process to open. You must
; call this function before calling _MemoryClose(), _MemoryRead(), or _MemoryWrite().
; Parameter(s): $iv_Pid - The Process ID of the program you want to open.
; $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which enables all
; possible access rights to the process specified by the
; Process ID.
; $if_InheritHandle - (optional) If this value is TRUE, all processes created by
; this process will inherit the access handle. Set to TRUE
; (1) by default. Set to 0 if you want it to be FALSE.
; Requirement(s): A valid process ID.
; Return Value(s): On Success - Returns an array containing the Dll handle and an open handle to
; the specified process.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $iv_Pid.
; 2 = Failed to open Kernel32.dll.
; 3 = Failed to open the specified process.
; Author(s): Nomad
; Note(s):
;================================================= ================================================
Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $if_InheritHandle = 1)

If Not ProcessExists($iv_Pid) Then
SetError(1)
Return 0
EndIf

Local $ah_Handle[2] = [DllOpen('kernel32.dll')]

If @Error Then
SetError(2)
Return 0
EndIf

Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $if_InheritHandle, 'int', $iv_Pid)

If @Error Then
DllClose($ah_Handle[0])
SetError(3)
Return 0
EndIf

$ah_Handle[1] = $av_OpenProcess[0]

Return $ah_Handle

EndFunc

;================================================= ================================================
; Function: _MemoryRead($iv_Address, $ah_Handle(, $sv_Type))
; Description: Reads the value located in the memory address specified.
; Parameter(s): $iv_Address - The memory address you want to read from. It must be in hex
; format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $sv_Type - (optional) The "Type" of value you intend to read. This is set to
; 'dword'(32bit(4byte) signed integer) by default. See the help file
; for DllStructCreate for all types.
; An example: If you want to read a word that is 15 characters in
; length, you would use 'char[16]'.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns the value located at the specified address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless specified as a 'char' type, then
; they are returned in ASCII format. Also note that size ('char[size]') for all
; 'char' types should be 1 greater than the actual size.
;================================================= ================================================
Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

Local $v_Buffer = DllStructCreate($sv_Type)

If @Error Then
SetError(@Error + 1)
Return 0
EndIf

DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

If Not @Error Then
Local $v_Value = DllStructGetData($v_Buffer, 1)
Return $v_Value
Else
SetError(6)
Return 0
EndIf

EndFunc

;================================================= ================================================
; Function: _MemoryWrite($iv_Address, $ah_Handle, $v_Data(, $sv_Type))
; Description: Writes data to the specified memory address.
; Parameter(s): $iv_Address - The memory address you want to write to. It must be in hex
; format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of value you intend to write. This is set to
; 'dword'(32bit(4byte) signed integer) by default. See the help file
; for DllStructCreate for all types.
; An example: If you want to write a word that is 15 characters in
; length, you would use 'char[16]'.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = $v_Data is not in the proper format to be used with the "Type"
; selected for $sv_Type, or it is out of range.
; 7 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Values sent must be in Decimal format, unless specified as a 'char' type, then
; they must be in ASCII format. Also note that size ('char[size]') for all
; 'char' types should be 1 greater than the actual size.
;================================================= ================================================
Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

Local $v_Buffer = DllStructCreate($sv_Type)

If @Error Then
SetError(@Error + 1)
Return 0
Else
DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(6)
Return 0
EndIf
EndIf

DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

If Not @Error Then
Return 1
Else
SetError(7)
Return 0
EndIf

EndFunc

;================================================= ================================================
; Function: _MemoryClose($ah_Handle)
; Description: Closes the process handle opened by using _MemoryOpen().
; Parameter(s): $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = Unable to close the process handle.
; Author(s): Nomad
; Note(s):
;================================================= ================================================
Func _MemoryClose($ah_Handle)

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
If Not @Error Then
DllClose($ah_Handle[0])
Return 1
Else
DllClose($ah_Handle[0])
SetError(2)
Return 0
EndIf

EndFunc

;================================================= ================================================
; Function: _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset(, $sv_Type))
; Description: Reads a chain of pointers and returns an array containing the destination
; address and the data at the address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension. (Offsets must be in decimal format, NOT hex!)
; $sv_Type - (optional) The "Type" of data you intend to read at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns an array containing the destination address and the value
; located at the address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = $sv_Type is not a string.
; 4 = $sv_Type is an unknown data type.
; 5 = Failed to allocate the memory needed for the DllStructure.
; 6 = Error allocating memory for $sv_Type.
; 7 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;================================================= ================================================
Func _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')

If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf

Local $iv_Data[2], $i
Local $v_Buffer = DllStructCreate('dword')

For $i = 0 to $iv_PointerCount

If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 2)
Return 0
EndIf

$iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

Else
$iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

EndIf

Next

$iv_Data[0] = $iv_Address

Return $iv_Data

EndFunc

;================================================= ================================================
; Function: _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data(, $sv_Type))
; Description: Reads a chain of pointers and writes the data to the destination address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension.
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of data you intend to write at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns the destination address.
; On Failure - Returns 0.
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = Failed to read from the specified process.
; 4 = $sv_Type is not a string.
; 5 = $sv_Type is an unknown data type.
; 6 = Failed to allocate the memory needed for the DllStructure.
; 7 = Error allocating memory for $sv_Type.
; 8 = $v_Data is not in the proper format to be used with the
; "Type" selected for $sv_Type, or it is out of range.
; 9 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Data written is in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used, doesn't matter what's entered)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;================================================= ================================================
Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')

If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf

Local $iv_StructData, $i
Local $v_Buffer = DllStructCreate('dword')

For $i = 0 to $iv_PointerCount
If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 3)
Return 0
EndIf

DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(8)
Return 0
EndIf

$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(9)
Return 0
Else
Return $iv_Address
EndIf
ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf

$iv_StructData = DllStructGetData($v_Buffer, 1)

Else
$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf

$iv_StructData = DllStructGetData($v_Buffer, 1)

EndIf
Next

EndFunc


;================================================= =================================
; Function: SetPrivilege( $privilege, $bEnable )
; Description: Enables (or disables) the $privilege on the current process
; (Probably) requires administrator privileges to run
;
; Author(s): Larry (from autoitscript.com's Forum)
; Notes(s):
;
;================================================= =================================

Func SetPrivilege( $privilege, $bEnable )
Const $TOKEN_ADJUST_PRIVILEGES = 0x0020
Const $TOKEN_QUERY = 0x0008
Const $SE_PRIVILEGE_ENABLED = 0x0002
Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
$nTokens = 1
$LUID = DLLStructCreate("dword;int")
If IsArray($privilege) Then $nTokens = UBound($privilege)
$TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
$SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","h wnd",$hCurrProcess[0], _
"int",BitOR($TOKEN_ADJUST_PRIVILEGES,$TOKEN_QUERY) ,"int*",0)
If $SP_auxret[0] Then
$hToken = $SP_auxret[3]
DLLStructSetData($TOKEN_PRIVILEGES,1,1)
$nTokenIndex = 1
While $nTokenIndex <= $nTokens
If IsArray($privilege) Then
$ntokenvar=$ntokenindex-1
$priv = $privilege[$ntokenvar]
Else
$priv = $privilege
EndIf
$ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue ","str","","str",$priv, _
"ptr",DLLStructGetPtr($LUID))
If $ret[0] Then
If $bEnable Then
DLLStructSetData($TOKEN_PRIVILEGES,2,$SE_PRIVILEGE _ENABLED,(3 * $nTokenIndex))
Else
DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
EndIf
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetD ata($LUID,1),(3 * ($nTokenIndex-1)) + 1)
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetD ata($LUID,2),(3 * ($nTokenIndex-1)) + 2)
DLLStructSetData($LUID,1,0)
DLLStructSetData($LUID,2,0)
EndIf
$nTokenIndex += 1
WEnd
$ret = DLLCall("advapi32.dll","int","AdjustTokenPrivilege s","hwnd",$hToken,"int",0, _
"ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",Dll StructGetSize($NEWTOKEN_PRIVILEGES), _
"ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*" ,0)
$f = DLLCall("kernel32.dll","int","GetLastError")
EndIf
$NEWTOKEN_PRIVILEGES=0
$TOKEN_PRIVILEGES=0
$LUID=0
If $SP_auxret[0] = 0 Then Return 0
$SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd", $hToken)
If Not $ret[0] And Not $SP_auxret[0] Then Return 0
return $ret[0]
EndFunc ;==>SetPrivilege

;================================================= ==================================================

; Function........: _MemoryGetBaseAddress($ah_Handle, $iHD)
;
; Description.....: Reads the 'Allocation Base' from the open process.
;
; Parameter(s)....: $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $iHD - Return type:
; |0 = Hex (Default)
; |1 = Dec
;
; Requirement(s)..: A valid process ID.
;
; Return Value(s).: On Success - Returns the 'allocation Base' address and sets @Error to 0.
; On Failure - Returns 0 and sets @Error to:
; |1 = Invalid $ah_Handle.
; |2 = Failed to find correct allocation address.
; |3 = Failed to read from the specified process.
;
; Author(s).......: Nomad. Szhlopp.
; URL.............:
; Note(s).........: Go to for the latest version of CheatEngine.
;================================================= ==================================================

Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)

Local $iv_Address = 0x00100000
Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dwo rd;dword')
Local $vData
Local $vType

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf


DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

If Not @Error Then

$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))

While $vType <> "00000080"
DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))
If Hex($iv_Address) = "01000000" Then ExitLoop
$iv_Address += 65536

WEnd

If $vType = "00000080" Then
SetError(0)
If $iHexDec = 1 Then
Return Dec($vData)
Else
Return $vData
EndIf

Else
SetError(2)
Return 0
EndIf

Else
SetError(3)
Return 0
EndIf

EndFunc ;==>_MemoryGetBaseAddress

Func _MemoryModuleGetBaseAddress($iPID, $sModule)
If Not ProcessExists($iPID) Then Return SetError(1, 0, 0)

If Not IsString($sModule) Then Return SetError(2, 0, 0)

Local $PSAPI = DllOpen("psapi.dll")

;Get Process Handle
Local $hProcess
Local $PERMISSION = BitOR(0x0002, 0x0400, 0x0008, 0x0010, 0x0020) ; CREATE_THREAD, QUERY_INFORMATION, VM_OPERATION, VM_READ, VM_WRITE

If $iPID > 0 Then
Local $hProcess = DllCall("kernel32.dll", "ptr", "OpenProcess", "dword", $PERMISSION, "int", 0, "dword", $iPID)
If $hProcess[0] Then
$hProcess = $hProcess[0]
EndIf
EndIf

;EnumProcessModules
Local $Modules = DllStructCreate("ptr[1024]")
Local $aCall = DllCall($PSAPI, "int", "EnumProcessModules", "ptr", $hProcess, "ptr", DllStructGetPtr($Modules), "dword", DllStructGetSize($Modules), "dword*", 0)
If $aCall[4] > 0 Then
Local $iModnum = $aCall[4] / 4
Local $aTemp
For $i = 1 To $iModnum
$aTemp = DllCall($PSAPI, "dword", "GetModuleBaseNameW", "ptr", $hProcess, "ptr", Ptr(DllStructGetData($Modules, 1, $i)), "wstr", "", "dword", 260)
If $aTemp[3] = $sModule Then
DllClose($PSAPI)
Return Ptr(DllStructGetData($Modules, 1, $i))
EndIf
Next
EndIf

DllClose($PSAPI)
Return SetError(-1, 0, 0)

EndFunc

das habe ich alles von einem TUT und zwar der hier;

aber das Problem bei der Sache ist, Betrachtet mal den MoveSpeed Abschnitt beim Ersten Spoiler, wo soll da der HEXCODE rein? bei Adresse oder doch testoffset3 ? Könnte mir wer Bei TeamViewer helfen, da ist es einfacher zu verstehen, den ich habe nur MoveSpeed eingestellt, aber es funz. nicht hab es oft versucht... Bitte PN bitte
Dank euch!

EDIT: Es gibt noch einen Problem, den ich leider nicht beschreiben kann °_°, kommt pls wer in TeamViewer? danke euch!

[.Infinite]

ITT: Metin2 -.-

$baseadress = _MemoryModuleGetBaseAddress($pid,"Calypso-2.exe.exe")

Ich kann mir nicht vorstellen, dass das richtig ist -.-

Wenn du mir "Movespeed Value" meinst, dass der Wert darauf gesetzt werden soll fehlt glaube ich einfach die Zeile

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, 0x4EBA93AE, "dword")

Außerdem könntest du das ganze enorm abkürzen, wenn du eine kurze Funktion schreiben würdest, die als Parameter eine Baseadadress, ein array mit Offsets und den zu schreibenden Wert aufnimmt...

Ansonsten frage ich mich, warum du die Zeilen

$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"metin2client.bin ")

immer wiederholst, obwohl sich der Wert nicht ändert!

Wenn du die beiden Sachen änderst ist dein Code maximal noch halb so lang und vieeel übersichtlicher.

[Cekdar]

soo, alles Bearbeitet, und doch das Calypso-2.exe.exe is richtig^^ Hier die Neue base!

 Spoiler

#include <GUIConstants.au3>
#include <pointer.au3>
#RequireAdmin
SetPrivilege("SeDebugPrivilege", 1)

#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Rambo's Multihack!! Created by Ramasan", 366, 376, 193, 192)
$Label1 = GUICtrlCreateLabel("AttackSpeed", 16, 16, 66, 17)
$Input1 = GUICtrlCreateInput("16256", 88, 8, 121, 21)
$Button1 = GUICtrlCreateButton("AttackSpeed", 248, 8, 83, 25, 0)
$Input2 = GUICtrlCreateInput("16256", 89, 37, 121, 21)
$Button2 = GUICtrlCreateButton("FasterAsFast", 249, 39, 83, 25, 0)
$Label2 = GUICtrlCreateLabel("MoveSpeed", 24, 42, 62, 17)
$Input3 = GUICtrlCreateInput("16256", 89, 72, 121, 21)
$Label3 = GUICtrlCreateLabel("AttackRange", 20, 75, 67, 17)
$Button3 = GUICtrlCreateButton("AttackRange", 250, 69, 83, 25, 0)
$Label4 = GUICtrlCreateLabel("WaffenHaltung", 14, 104, 76, 17)
$Combo1 = GUICtrlCreateCombo("Bitte Wählen!", 96, 104, 145, 25)
GUICtrlSetData(-1, "Faust|Einhand|Zweihand")
$Button5 = GUICtrlCreateButton("OneHit", 248, 150, 83, 25, 0)
$Label5 = GUICtrlCreateLabel("OneHite", 19, 148, 43, 17)
$Combo2 = GUICtrlCreateCombo("Wählen Bitte!", 93, 148, 145, 25)
GUICtrlSetData(-1, "1|2|3")
$Button4 = GUICtrlCreateButton("WaffeHaltung", 252, 103, 83, 25, 0)
$Button6 = GUICtrlCreateButton("Zoom!", 90, 177, 107, 25, 0)
$Label6 = GUICtrlCreateLabel("ZoomHack", 21, 183, 57, 17)
$Button7 = GUICtrlCreateButton("Zoom nich-.-", 205, 179, 107, 25, 0)
$Label8 = GUICtrlCreateLabel("Credit: -_HackGamer, .United & Ramasan!", 24, 336, 282, 17)
GUISetState(@SW_SHOW)
#EndRegion ### END Koda GUI section ###

$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"calypso-2.exe.exe")

While 1
$nMsg = GUIGetMsg()
Switch $nMsg
Case $GUI_EVENT_CLOSE
Exit
Case $Button1
$pid = WinGetProcess("METIN2")
$openmem = _MemoryOpen($pid)
$baseadress = _MemoryModuleGetBaseAddress($pid,"calypso-2.exe.exe")
$testoffset1 = "C" ; offset neben dem metin2client.bin
$testoffset2 = "5BA" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input1), "dword")
Case $Button2
$testoffset1 = "4" ; offset neben dem metin2client.bin
$testoffset2 = "5B6" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input2), "dword")
Case $Button3
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "5BA " ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, guictrlread($Input3), "dword")
Case $Button4
if guictrlread($combo1) = "Faust" Then
$testoffset1 = "4" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003D0868" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "1", "dword")
endif
if guictrlread($combo1) = "Einhand" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "2", "dword")
endif
if guictrlread($combo1) = "Zweihand" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "440" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)

_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "3", "dword")
endif
Case $Button5
if guictrlread($combo2) = "1" Then
$testoffset1 = "3C" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003D06D0" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "1", "dword")
wend
endif
if guictrlread($combo2) = "2" Then
$testoffset1 = "3C" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003D06D0" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "2", "dword")
wend
endif
if guictrlread($combo2) = "3" Then
$testoffset1 = "8" ; offset neben dem metin2client.bin
$testoffset2 = "514" ;das obere offset
$testoffset3 = "003CE020" ;steht neben dem metin2client.bin+[wert]
Global $AOffset[3]
$AOffset[0] = 0
$AOffset[1] = Dec($testoffset1)
$AOffset[2] = Dec($testoffset2)
$Aaddress = "0x" & Hex($baseadress + Dec($testoffset3))
$Amemread = _MemoryPointerRead($Aaddress, $openmem, $AOffset, "byte[2]")
$Awert = _ReturnMemoryValue($Amemread[1])
$Awert = Dec($Awert)
while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "3", "dword")
wend
endif
Case $Button6

$OPEN = _MemoryOpen ($PID); The memory .. which makes the functions work.

_MemoryWrite(0x07A1806,$OPEN,30000,'byte[2]')
Case $Button7

$OPEN = _MemoryOpen ($PID); The memory .. which makes the functions work.

_MemoryWrite(0x07A1806,$OPEN,17754,'byte[2]')
EndSwitch
WEnd


Func _ReturnMemoryValue($sAdresse)
;blubbstar
$sNewAdresse = ""
$sAdresse = StringTrimLeft($sAdresse, 2)
For $i = StringLen($sAdresse) - 1 To 0 Step -2
$sNewAdresse &= StringMid($sAdresse, $i, 2)
Next
Return $sNewAdresse
EndFunc ;==>_ReturnMemoryValue

also, alles geht jetzt, bis auf °_° Attackrange, da griege ich den Code nicht raus-.-
und NoFog is entfernt, würde es aber gerne einfügen...
Genau MiniMap geht auchnicht!!!! Danke euch schonmalll!

[.Infinite]

Außerdem könntest du das ganze enorm abkürzen, wenn du eine kurze Funktion schreiben würdest, die als Parameter eine Baseadadress, ein array mit Offsets und den zu schreibenden Wert aufnimmt...

Das hast du noch nicht gemacht!

while 1
_MemoryPointerWrite($Aaddress, $openmem, $AOffset, "1", "dword")
wend

Eine Endlosschleife ist and er Stelle extrem ungünstig. Wenn du den Button einmal gedrückt hast, hängt dein Programm in der Schleife und du kannst nichts anderes mehr machen!

Für das andere Zeug solltest du vielleicht einfach den Typ fragen der dieses "Tutorial"(so etwas ist kein Tutorial!) gemacht hat. Außerdem würde ich dir empfehlen, dass du dich langsam mal mit den Grundlagen befasst...