Memory writing

[Zisly]

Problem solved, thanks Authenticity !!

Edited April 5, 2009 by Zisly

[Authenticity]

You don't need to split and write each a time.

Use $Bin = Binary($var).

Then it goes something like this:

#include <Memory.au3>

Dim $RSA_KEY = '1091201329673994292788609605089955415282375029027981291234687579372662914925764463307396960011106039' & _
               '0723088861007265581882535850342905759282762943641310856602909362821263595383668656267584972062078627' & _
               '9431090218017681061521755056710823876476444260558147179707119674283982419152118103759076030616683978' & _
               '566631413'

; Get binary representation of the key.
Dim $BinRSA = Binary($RSA_KEY)

; Create the buffer, pointer to the buffer and size of the buffer.
Dim $tBuff = DllStructCreate('byte[' & BinaryLen($BinRSA) & ']'), $tMem
Dim $pBuff = DllStructGetPtr($tBuff)
Dim $iBuff = DllStructGetSize($tBuff)

; Fill buffer with binary representation
 DllStructSetData($tBuff, 1, $BinRSA)
 
 ; Initialize memory in the process address space.
Dim $pMemory = _MemInit(WinGetHandle('Tibia'), $iBuff, $tMem)
_MemWrite($tMem, $pBuff, $pMemory, $iBuff)

; $Return = _MemRead($tMem, $pMemory, $pBuff, $iBuff)
_MemFree($tMem)

Hope it's correct.

[Zisly]

Thanks for the fast answer, I will test this when I get home.

But one thing that I don't get, where is the memory adress? :S

Edited April 4, 2009 by Zisly

[Zisly]

Nevermind, I solved it

[Zisly]

Well I have a problem.

The RSA key is protected or something so I can't change it

In C++ people use VirtualProtectEx to write the RSA.

Is there something similar available for autoit?

[Authenticity]

_MemInit, _MemWrite. Both use VirtualAllocateEx and WriteProcessMemory, etc.. #include <Memory.au3>

Edit: About VirtualProtectEx. You can use DllCall to call them directly, the constants are already included by Memory.au3

Edited April 4, 2009 by Authenticity

[Zisly]

_MemInit, _MemWrite. Both use VirtualAllocateEx and WriteProcessMemory, etc.. #include <Memory.au3>

Edit: About VirtualProtectEx. You can use DllCall to call them directly, the constants are already included by Memory.au3

Could you possibly write a little example?

[Authenticity]

I gave you example about _MemInit and _MemWrite. What you need is to read about the definition of VirtualProtectEx on MSDN like which dll exposes it (most probably it's kernel32.dll) and come back if you have a hard time implementing it. ;] Good-luck.

[Zisly]

I gave you example about _MemInit and _MemWrite. What you need is to read about the definition of VirtualProtectEx on MSDN like which dll exposes it (most probably it's kernel32.dll) and come back if you have a hard time implementing it. ;] Good-luck.

Well to me your code doesn't seem to write to a specific address (which I want) or does it? :S

Well I'll check out MSDN

[Authenticity]

Oh ;] specific address. Look up "NomadMemory.au3".

[Zisly]

Oh ;] specific address. Look up "NomadMemory.au3".

Well thats what I'm using.

I can write and everything, the only thing I have problems is with the protected memory or what you call it

It won't let me change the RSA key

I know you can "unlock" memory, but no idea how with AutoIt and my DllCall experience sucks

Edited April 4, 2009 by Zisly

[Authenticity]

Maybe something like this:

#include <MemoryConstants.au3>
#include <NomadMemory.au3>

$iAddress = 0x77AD88
$i_pid = WinGetProcess("Tibia")
$aReturn = _MemoryOpen($i_pid, 0x1F0FFF, 0)
    If @error Then Exit
    
$hProc = $aReturn[1]

$aRet = DllCall($aReturn[0], 'int', 'VirtualProtectEx', 'int', $hProc, 'ptr', $iAddress, _
        'ulong_ptr', 2, 'dword', $PAGE_READWRITE, 'dword*', '')

[Zisly]

I modified it a bit and it works

THANK YOU!!!

Thanks for taking your time answering my questions , I really appreciate it!

Edited April 5, 2009 by Zisly