Guest User

Untitled

a guest
Jul 21st, 2018
80
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.83 KB | None | 0 0
  1. #AutoIt3Wrapper_Compression=4
  2. #AutoIt3Wrapper_UseUpx=n
  3. #AutoIt3Wrapper_UseX64=n
  4. #RequireAdmin ; wird bei windows vista/7 benötigt.
  5. #include <Pointer.au3>
  6.  
  7. Global $Offset[3], $iPID, $StaticOffset, $hOpen, $iBase, $iFinal, $aValue
  8.  
  9. $iPID = ProcessExists("NostaleX.dat")
  10. If $iPID = 0 Then
  11. MsgBox (0, "","Process nicht gefunden.")
  12. Exit
  13. EndIf
  14.  
  15. SetPrivilege("SeDebugPrivilege", 1)
  16. $iBase = _MemoryModuleGetBaseAddress($iPid,"NostaleX.dat")
  17. $base1 = $iBase + 0x003D3500
  18. $base2 = _MemoryRead($base1) + 0xAC
  19. $base3 = _MemoryRead($base2) + 0x4C
  20. $value = _MemoryRead($base3)
  21. $hOpen = _MemoryOpen($iPID)
  22.  
  23.  
  24. msgbox(0,"",$iBase)
  25. $iFinal = "0x" & Hex($iBase + $StaticOffset)
  26. $aValue = _MemoryPointerRead($iFinal, $hOpen, $Offset)
  27. Msgbox(0,"","Address = " & $aValue[0] & @CRLF & "Value = " & $aValue[1] & @CRLF)
  28.  
  29. _memoryclose($hOpen)
Add Comment
Please, Sign In to add comment