Sign in to follow this  
Followers 0
DesireDenied

What is wrong with this?

1 post in this topic

$TargetInfoB_Open = _MemOpen(0x10, false, $engine_pid)
$GetTargetInfoB = _MemRead($TargetInfoB_Open, 0x014A5340, 4)
$v_Close = _MemClose($TargetInfoB_Open)

$TargetInfoB=String($GetTargetInfoB)

$aArray = _SplitByCharSRE($TargetInfoB, 1)  
$lpTargetInfoB = ($aArray[0] & $aArray[1] & $aArray[8] & $aArray[9] & $aArray[6] & $aArray[7] & $aArray[4] & $aArray[5] & $aArray[2] & $aArray[3])  

$TargetInfoBl=StringLower($lpTargetInfoB)

ConsoleWrite('$TargetInfoB: ' & $TargetInfoB & @LF)
ConsoleWrite('$TargetInfoBl: ' & $TargetInfoBl & @LF)

this is only part of my code.

there is a 4 bytes long hex value at the 0x014A5340 depends on what kind of target i select, my code return to me bytes swaped hex value.

works good:

if value in memory is like this one: 0x08002E04, i get exactly what i want (0x042e0008)

if value in memory is like this one: 0x78006715, i get exactly what i want (0x15670078)

works bad:

if value in memory is like this one: 0x38849F14, all i get is: (8„ź)

so what the hell im doing wrong?

what should i do to return only hex value from target mem adress?


Share this post


Link to post
Share on other sites



Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0