Jump to content

What is wrong with this?


Recommended Posts

$TargetInfoB_Open = _MemOpen(0x10, false, $engine_pid)
$GetTargetInfoB = _MemRead($TargetInfoB_Open, 0x014A5340, 4)
$v_Close = _MemClose($TargetInfoB_Open)

$TargetInfoB=String($GetTargetInfoB)

$aArray = _SplitByCharSRE($TargetInfoB, 1)  
$lpTargetInfoB = ($aArray[0] & $aArray[1] & $aArray[8] & $aArray[9] & $aArray[6] & $aArray[7] & $aArray[4] & $aArray[5] & $aArray[2] & $aArray[3])  

$TargetInfoBl=StringLower($lpTargetInfoB)

ConsoleWrite('$TargetInfoB: ' & $TargetInfoB & @LF)
ConsoleWrite('$TargetInfoBl: ' & $TargetInfoBl & @LF)

this is only part of my code.

there is a 4 bytes long hex value at the 0x014A5340 depends on what kind of target i select, my code return to me bytes swaped hex value.

works good:

if value in memory is like this one: 0x08002E04, i get exactly what i want (0x042e0008)

if value in memory is like this one: 0x78006715, i get exactly what i want (0x15670078)

works bad:

if value in memory is like this one: 0x38849F14, all i get is: (8„ź)

so what the hell im doing wrong?

what should i do to return only hex value from target mem adress?

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...