Jump to content

Oldschool

Active Members
  • Posts

    253
  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

Oldschool's Achievements

Universalist

Universalist (6/7)

0

Reputation

  1. I'm starting to suspect it happens cause my scripts are not on drive C, cause it never used to happen, until I added a new drive... When they were on drive C, it used to dump a copy into @scriptdir backup folder
  2. SciTe dumps script copy into RecycleBin @ compile How do I stop/redirect that please? Been staring @ SciTe menus for like 45 minutes now, and can't find it for the life of me...
  3. Try using a DLLStructCreate to create a float datastructure Then DLLStructSetData to set the value in there Then pass the DllStructGetPtr into the mem write function, which you will probably have to mod to accommodate this.
  4. Send me a screenshot of your pointer... It's hard to guess where you went wrong in the dark...
  5. Do you have a screenshot of your pointer?
  6. It's possible that the game is not giving you access to itself...blocking OpenProcess from doing it's dirty work. Maybe try using a lower access privilege for that initial DLL call.
  7. You got a firewall or antivirus running in background? Which .exe are you trying to do this with?
  8. http://www.autoitscript.com/forum/index.ph...st&p=563921
  9. This code I use in one of my scripts, so you will have to tweak a little...But basically what it does is follow 2 pointers in search for a value. If both locations don't contain a value, it will end with Error 27 $iv_Pid = ProcessExists("Some.exe") $iv_DesiredAccess = 0x1F0FFF $av_OpenProcess = DllCall('Kernel32.dll', 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', 1, 'int', $iv_Pid) $procHwnd = $av_OpenProcess[0] If Not $procHwnd Then MsgBox(0, "","Error while getting process handle!") ;set the static address $Address = 0x6d6fed00 Dim $Offset[5] $Offset[0] = 0xc4 $Offset[1] = 0x170 $Offset[2] = 0xd8 $Offset[3] = 0x58 $Offset[4] = 0x3d4 Local $v_Buffer = DllStructCreate('dword') For $i = 0 To 3 ;Ubound($Offset)-1 $Address = Hex($Address + $Offset[$i]) DllCall("Kernel32.dll", 'int', 'ReadProcessMemory', 'int', $procHwnd, 'int', '0x'&$Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '') $Address = DllStructGetData($v_Buffer, 1) ;MsgBox(0, "", Hex($Address)) Next $iv_Address = Hex($Address + $Offset[Ubound($Offset)-1]) Local $read_Buffer = DllStructCreate("byte[24]") DllCall("Kernel32.dll", 'int', 'ReadProcessMemory', 'int', $procHwnd, 'int', Dec($iv_Address), 'ptr', DllStructGetPtr($read_Buffer), 'int', DllStructGetSize($read_Buffer), 'int', '') If @Error Then SetError(@Error + 1) Local $Output = BinaryToString(Binary(DllStructGetData($read_Buffer, 1)), 2) $var = StringInStr($OutPut, ".") $Output = StringLeft($Output, $var-1) If Not $Output Then $Address = 0x6d6fed00 Dim $Offset[5] $Offset[0] = 0xc4 $Offset[1] = 0x170 $Offset[2] = 0xA0 $Offset[3] = 0x13C $Offset[4] = 0x1EC Local $v_Buffer = DllStructCreate('dword') For $i = 0 To 3 ;Ubound($Offset)-1 $Address = Hex($Address + $Offset[$i]) DllCall("Kernel32.dll", 'int', 'ReadProcessMemory', 'int', $procHwnd, 'int', '0x'&$Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '') $Address = DllStructGetData($v_Buffer, 1) ;MsgBox(0, "", Hex($Address)) Next $iv_Address = Hex($Address + $Offset[Ubound($Offset)-1]) Local $read_Buffer = DllStructCreate("byte[24]") DllCall("Kernel32.dll", 'int', 'ReadProcessMemory', 'int', $procHwnd, 'int', Dec($iv_Address), 'ptr', DllStructGetPtr($read_Buffer), 'int', DllStructGetSize($read_Buffer), 'int', '') If @Error Then SetError(@Error + 1) Local $Output = BinaryToString(Binary(DllStructGetData($read_Buffer, 1)), 2) $var = StringInStr($OutPut, " ") $Output = StringLeft($Output, $var-1) EndIf ;MsgBox(0, "", $Output) If Not $Output Then MsgBox(0, "Error 27", "Empty Address") Local $av_Ret = DllCall("Kernel32.dll", 'int', 'CloseHandle', 'int', $procHwnd)
  10. http://www.autoitscript.com/forum/index.php?showtopic=77864
  11. Getting the latest beta helped Thx to the devs for this timely addition !
  12. There used to be _ListView_ClickItem in <A3LListView.au3> I don't see a replacement for it in the <GuiListView.au3>, or am I just blind?
  13. I just found a massive collection of application protection tools I think you will all enjoy Hacked Decompiler no more! http://leechermods.blogspot.com/2008/02/ex...-modssubcc.html Themida happens to be there as well.
  14. Armadillo is an option, although expensive...not to mention ExeCryptor that has a 30 day free trial.
  15. Thats pretty good...here is a link to Ptrex doing the same... http://www.autoitscript.com/forum/index.ph...t=0#entry490962
×
×
  • Create New...