Simple Memory Editor

[Thamiel]

This little bit of code was made because I needed a way to change values in the memory space of a running program on the fly with different values.

and as such I just made my own tool for it with AutoIt and here is the result of that endeavor, any comments on ways to do any of it better welcomed

expandcollapse popup

#cs
Memory_Editor.au3 - It's not fancy and may not be the best way to do it, but it does what I needed it for ;-)
#ce

#Include <NomadMemory.au3>
#include <string.au3>

$i = 1

While $i = 1
    $Do_It = MsgBox(262148, "Do You Wish To Edit A Program's Memory Space ?", _
    "Do You Wish To Continue [Yes / No] ?" & @LF & "Also You Can Enter x At Anytime To Exit")
    If $Do_It = 6 Then _Edit()
    If $Do_It = 7 Then Exit
WEnd

Func _Edit()
$File = InputBox("Process to use", "Enter Process Name From Taskman", "" , " M", 75, 20, -1, -1)
If $File = 'x' Then Exit

$Addy = "0x" & InputBox("Address to use", "Enter Start Address [Hex]", "", " M", 75, 130, -1, -1)
If $Addy = 'x' Then Exit

$Type = InputBox("Data Type", "Enter 1 for Text" & @lf & "Enter 2 for Hex", "", " M", 75, 130, -1, -1)
If $Type = 'x' Then Exit
If $Type = '1' Then
    $Text = InputBox("New Data", "Enter Text String", "", " M", 600, 130, @DesktopWidth/4, -1)
    $Data = "0x" & _StringToHex($Text)
    ElseIf $Type = "2" Then
    $Data = "0x" & InputBox("New Data", "Enter Hex Data", "", " M", 600, 130, @DesktopWidth/4, -1)
    Else
Exit

EndIf

$Proc = ProcessList($File)
    $ID = _MemoryOpen($Proc[1][1])
    If @Error Then
    MsgBox(262144, "ERROR", "Failed to open memory")
    EndIf
    _MemoryWrite($Addy, $ID, $Data, 'byte[' & StringLen($Data)/2-1 & ']')
    _MemoryClose($ID)
    MsgBox(262144,"Confirmed", "Memory Edited")
EndFunc

Edited February 21, 2009 by Thamiel

[crapmail]

please use [ autoit ] tags?

[ukmazy]

and please a link to NomadMemory.au3

[Andreik]

and please a link to NomadMemory.au3

NomadMemory.au3

[ukmazy]

thanks Andreik

[martin]

This little bit of code was made because I needed a way to change values in the memory space of a running program on the fly with different values.

and as such I just made my own tool for it with AutoIt and here is the result of that endeavor, any comments on ways to do any of it better welcomed

CODE

#cs

Memory_Editor.au3 - It's not fancy and may not be the best way to do it, but it does what I needed it for ;-)

#ce

#Include <NomadMemory.au3>

#include <string.au3>

$i = 1

While $i = 1

$Do_It = MsgBox(262148, "Do You Wish To Edit A Program's Memory Space ?", _

"Do You Wish To Continue [Yes / No] ?" & @LF & "Also You Can Enter x At Anytime To Exit")

If $Do_It = 6 Then _Edit()

If $Do_It = 7 Then Exit

WEnd

Func _Edit()

$File = InputBox("Process to use", "Enter Process Name From Taskman", "" , " M", 75, 20, -1, -1)

If $File = 'x' Then Exit

$Addy = "0x" & InputBox("Address to use", "Enter Start Address [Hex]", "", " M", 75, 130, -1, -1)

If $Addy = 'x' Then Exit

$Type = InputBox("Data Type", "Enter 1 for Text" & @lf & "Enter 2 for Hex", "", " M", 75, 130, -1, -1)

If $Type = 'x' Then Exit

If $Type = '1' Then

$Text = InputBox("New Data", "Enter Text String", "", " M", 600, 130, @DesktopWidth/4, -1)

$Data = "0x" & _StringToHex($Text)

ElseIf $Type = "2" Then

$Data = "0x" & InputBox("New Data", "Enter Hex Data", "", " M", 600, 130, @DesktopWidth/4, -1)

Else

Exit

EndIf

$Proc = ProcessList($File)

$ID = _MemoryOpen($Proc[1][1])

If @Error Then

MsgBox(262144, "ERROR", "Failed to open memory")

EndIf

_MemoryWrite($Addy, $ID, $Data, 'byte[' & StringLen($Data)/2-1 & ']')

_MemoryClose($ID)

MsgBox(262144,"Confirmed", "Memory Edited")

EndFunc

A good start to a useful script Thamiel.

If you are thinking of developing it I would suggest trying to get one gui to replace all the inputs, have radio buttons for options rather than entering a nuimber, and display the current contents of a memory location with an option to change it. A bit more error checking would be helpful.

BTW, related to crapmail's contribution post, I prefer CODE tags as my signature verifies.

[GEOSoft]

please use [ autoit ] tags?

Please buy a box of crayons.