Reading a value from memory

[mechtn]

Here is a sample I put together for reading a value from memory once you know it's static offset and other offsets.

#RequireAdmin

SetPrivilege("SetDebugPrivilege", 1)

#include <NomadMemory2.au3>

Global $PID

Global $sModule = "exmodule.dll"

Global $StaticOffset

Global $openmem

$PID = ProcessExists("exproces.exe")

If $PID == 0 Then

MsgBox(4096,"Error","Process not running!",3)

Return

EndIf

$openmem = _MemoryOpen($PID)

If @error Then

Return

EndIf

Local $Offset[1]

$Offset[0] = 0 ; Is ALWAYS 0.

$StaticOffset = Dec("27E8C")

$baseADDR = _MemoryModuleGetBaseAddress($PID, $sModule)

$finalADDR = "0x" & Hex($baseADDR + $StaticOffset)

$r = _MemoryRead($finaladdr,$openmem)

$r = _MemoryRead($r + 0x798,$openmem)

$r = _MemoryRead($r + 0x504,$openmem)

$r = _MemoryRead($r + 0x14,$openmem)

$r = _MemoryRead($r + 0x8,$openmem)

$r = _MemoryRead($r + 0x40,$openmem, "float")

ConsoleWrite("Pointer Value:" & $r & @CRLF)

[JohnOne]

Here is a sample I put together for reading a value from memory once you know it's static offset and other offsets.

#RequireAdmin

SetPrivilege("SetDebugPrivilege", 1)

#include <NomadMemory2.au3>

Global $PID

Global $sModule = "exmodule.dll"

Global $StaticOffset

Global $openmem

$PID = ProcessExists("exproces.exe")

If $PID == 0 Then

MsgBox(4096,"Error","Process not running!",3)

Return

EndIf

$openmem = _MemoryOpen($PID)

If @error Then

Return

EndIf

Local $Offset[1]

$Offset[0] = 0 ; Is ALWAYS 0.

$StaticOffset = Dec("27E8C")

$baseADDR = _MemoryModuleGetBaseAddress($PID, $sModule)

$finalADDR = "0x" & Hex($baseADDR + $StaticOffset)

$r = _MemoryRead($finaladdr,$openmem)

$r = _MemoryRead($r + 0x798,$openmem)

$r = _MemoryRead($r + 0x504,$openmem)

$r = _MemoryRead($r + 0x14,$openmem)

$r = _MemoryRead($r + 0x8,$openmem)

$r = _MemoryRead($r + 0x40,$openmem, "float")

ConsoleWrite("Pointer Value:" & $r & @CRLF)

Sorry pal, but that is a mess.

I don't even know where to begin with what is wrong with it.

Where does this SetPrivilege function come from cause it certainly not in that,

and from what function are you returning from?

Sorry, but you need to go back to the drawing board.

[mechtn]

It's working code from a bigger project that I was just sharing as an example. I'd love to know suggestions to clean it up and make it better. I'll clean some of it up and try to explain it better.

[MvGulik]

Suggestions:

- Read up on forum rules. (as they probably change a bit sins you last post.)

- Learn about forum code tags.