du hast den C++ Code dazu und kannst es nicht portieren?
Eigentlich sollte ich es dir nicht geben aber:
Code:
;==================================================================================
; Function: _MemoryScan($ah_Handle, $pattern [, $after[, $iv_addrStart, [$iv_addrEnd]]])
; Description: Finds the address of the first occurance of a pattern in a process.
; Parameter(s): $ah_Handle - An array containing the Dll handle and the handle
; of the open process as returned by _MemoryOpen().
; $pattern - The pattern you want to find. Provide the pattern
; as a String of hex values. You may use the '.' as wildcard.
; Any other character as '0123456789ABCDEFabcdef.' is ignored.
; Example: "55 8B .. 83"
; $after - (optional) Set to FALSE by default.
; If set to TRUE, the method will return the address
; after the pattern, else the method returns the address
; of the pattern itself.
; $iv_addrStart - (optional) Set to 0x00400000 by default.
; This is the address where the method begins to scan
; for the pattern. It must be in hex format (0x00000000).
; $iv_addrEnd - (optional) Set to 0X00FFFFFF by default.
; This is the address where the method stops to scan
; for the pattern. It must be in hex format (0x00000000).
; Requirement(s): None.
; Return Value(s): On Success - Returns the address of the first occurance of the pattern
; ($after = FALSE) or the address after the first occurance
; of the pattern ($after = TRUE). The address is in
; hexadecimal format.
; On Failure - Returns -1
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = Invalid $pattern.
; Author(s): Luzifer42
; Note(s): The default scan range will be completed in less than one second.
;==================================================================================
Func _MemoryScan($ah_Handle, $pattern, $after=false, $iv_addrStart=0x00400000, $iv_addrEnd=0X00FFFFFF, $step=51200)
If Not IsArray($ah_Handle) Then
SetError(1)
Return -1
EndIf
$pattern=StringRegExpReplace($pattern, "[^0123456789ABCDEFabcdef.]", "")
IF StringLen($pattern)=0 Then
SetError(2)
Return -1
EndIf
For $addr=$iv_addrStart To $iv_addrEnd Step $step-(StringLen($pattern)/2)
StringRegExp(_MemoryRead($addr, $ah_Handle, "byte[" & $step & "]"), $pattern, 1, 2)
If Not @Error Then
If $after Then
return StringFormat("0x%.8X", $addr+((@Extended-2)/2))
Else
return StringFormat("0x%.8X", $addr+((@Extended-StringLen($pattern)-2)/2))
EndIf
EndIf
Next
Return -1
EndFunc
Func _MemoryScan($ah_Handle, $pattern, $after=false, $iv_addrStart=0x1001000, $iv_addrEnd=0x6000, $step=51200)
If Not IsArray($ah_Handle) Then
SetError(1)
Return -1
EndIf
$pattern=StringRegExpReplace($pattern, "[^0123456789ABCDEFabcdef.]", "")
IF StringLen($pattern)=0 Then
SetError(2)
Return -2
EndIf
For $addr=$iv_addrStart To $iv_addrEnd Step $step-(StringLen($pattern)/2)
StringRegExp(_MemoryRead($addr, $ah_Handle, "byte[" & $step & "]"), $pattern, 1, 2)
If Not @Error Then
If $after Then
return StringFormat("0x%.8X", $addr+((@Extended-2)/2))
Else
return StringFormat("0x%.8X", $addr+((@Extended-StringLen($pattern)-2)/2))
EndIf
EndIf
Next
Return -3
EndFunc
Olly Help 12/08/2009 - Dekaron - 0 Replies I remember seeing this somewhere in Lena's tutorial, but I don't remember what it is, or where exactly I saw it.
What I'm trying to do is attach olly to 2moons and then kill a mob in a higher map than I should be in. So, how do I make olly follow the code as I'm doing this? I thought it was a hotkey like f9 or something, but I don't remember...
Need a little help with Olly 12/08/2009 - Mabinogi - 16 Replies Why are the addresses in my IDA different from the ones in my Olly?
Same DLL, but I cant find the adress NOR the unicode in my Olly that I see in front of my in my IDA.
Any suggestions?
Edit: Using IDA 64 bit and normal OllyDbg
Auotit Angelbot Hilfe 11/30/2009 - Metin2 - 8 Replies Ich hoffe mal ich bin hier richtig.
Ich habe das folgende Problem:
Mein AngelBot soll erst dann anfangen, wenn das Metin Fenster aktiviert ist.
Aber wenn es aktiviert ist passiert nichts.
Bin ziemlich neu in Autoit und kenn mich noch nicht so gut damit aus.
Das ist mein Code:
HotKeySet("{ESC}", "Terminate")
WinWaitActive("METIN2","",3) ; warten bis Metin2 ausgewählt ist
SnD Olly 07/29/2009 - General Coding - 13 Replies While searching for a way to unpack Themida, i stumbled across a great suite of tools gathered around a modified version of the famous OllyDbg, assembled by the group "Seek n' Destroy".
The package is about 78Mb huge and features alot of plugins for olly and other tools you could need for your general reverse engineering needs.
This package is still in beta and has some downsides, which are for example:
1) lots of stuff in olly is now in leetspeak...
screenshot:...
Olly DGB to run 01/26/2009 - World of Warcraft - 2 Replies Hey, quick question, I was talking with one of my old buddies recently and we hada discussion about how we could get olly debugger or something of the likes to run alongside with WoW. Or any other dbg program. Thanks!