Codefuser Posted January 3, 2017 Share Posted January 3, 2017 I have tried searching and I found this example: https://www.autoitscript.com/forum/topic/66210-_searchprocessmemory/ However it does not work. After some debugging I found that $lpMinimumApplicationAddress is positive and $lpMaximumApplicationAddress is negative. Tried switching them around and that didn't work either. Can anyone help? Link to comment Share on other sites More sharing options...
Bert Posted January 3, 2017 Share Posted January 3, 2017 is this for your Obfuscation project? The Vollatran project My blog: http://www.vollysinterestingshit.com/ Link to comment Share on other sites More sharing options...
Codefuser Posted January 4, 2017 Author Share Posted January 4, 2017 (edited) Yes it is indeed for my obfuscation project. It is for scanning the memory for known signature of unwanted softwares (Debuggers, decompilers, dissasemblers, VMWare, etc). It is also for a part of another heuristic memory scanner project of mine. Edited January 4, 2017 by Codefuser Link to comment Share on other sites More sharing options...
Codefuser Posted January 6, 2017 Author Share Posted January 6, 2017 Still looking for help with this, any will be appreciated. Link to comment Share on other sites More sharing options...
Codefuser Posted January 8, 2017 Author Share Posted January 8, 2017 Still looking for help. Would love to get some. Link to comment Share on other sites More sharing options...
Codefuser Posted January 10, 2017 Author Share Posted January 10, 2017 Still looking for help. Someone's help would be greatly appreciated. Link to comment Share on other sites More sharing options...
Codefuser Posted January 20, 2017 Author Share Posted January 20, 2017 Still looking for help. Someone's help would be greatly appreciated. Link to comment Share on other sites More sharing options...
Codefuser Posted February 21, 2017 Author Share Posted February 21, 2017 Still looking for help with this. HMU. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now