Hier die Daten:
Base Adresse Offset0 Offset1 points to
'rub.exe'+003D0A6C 2A8 5BA 7AC780EA
Und hier der Code:
Code:
#AutoIt3Wrapper_UseX64=y
#RequireAdmin
#include "KDMemory.au3"
If @CPUArch <> "X64" Or @AutoItX64 == 0 Then
MsgBox(48, "Error", "Unsupported system")
Exit
EndIf
$szProcessName = "rub.exe"
$dwProcessId = ProcessExists($szProcessName)
If $dwProcessId == 0 Then
MsgBox(48, "Error", "Process doesn't exists!")
Else
$phHandles = _KDMemory_OpenProcess($dwProcessId)
If @error Then
MsgBox(48, "Error", "Can't open " & $szProcessName & "! @error: " & @error)
Else
Dim $pdwOffsets[1] = [0]
;~ $lpBaseAddress = Dec("1002C7710") ; AutoIt (SciTe) can't handle hexadecimal values above 0xFFFFFFFF (max 32 bit value)
$lpBaseAddress = _KDMemory_GetModuleBaseAddress($phHandles, $szProcessName) + 0x003D0A6C ; not recommended, for testing purposes only (use 'Dec("1002C7710")' instead)
If @error Then
MsgBox(48, "Error", "Can't get ModuleBaseAddress! @error: " & @error & ", @extended: " & @extended)
Else
_KDMemory_WriteProcessMemory($phHandles, $lpBaseAddress, 'DWORD', 5000, $pdwOffsets)
If @error Then MsgBox(48, "Error", "Can't write memory! @error: " & @error & ", @extended: " & @extended)
$lpMemoryData = _KDMemory_ReadProcessMemory($phHandles, $lpBaseAddress, 'DWORD', $pdwOffsets)
If @error Then
MsgBox(48, "Error", "Can't read memory! @error: " & @error & ", @extended: " & @extended)
Else
MsgBox(64, "Info", "Address: " & $lpMemoryData[0] & @CRLF & "Value: " & $lpMemoryData[1])
EndIf
EndIf
_KDMemory_CloseHandle($phHandles)
EndIf
EndIf
Würde mich sehr freuen wenn das dan endlich mal klappen würde.
Danke im Voraus.
