Auto IT - Nomad Memory, problem z BaseAdress tibiałki

Bawię się i bawię i mam problema. gdyż baseadress zwraca mi okrągłe 0...
Czy coś jest zyebane w nomadzie, czy ja jestem głupi?

mam sobie kod, niby powinien mi zwracać boxa z base adress ale zwraca go zawsze jako 0...


https://i.imgur.com/Jj61yQK.png


Jako, że kod widać na skrinie, to zarzucę wam te funkcje z nomada :
/// Otwieranka ///

Kod PHP:

---

Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1) If Not ProcessExists($iv_Pid) Then SetError(1) Return 0 EndIf Local $ah_Handle[2] = [DllOpen('kernel32.dll')] If @Error Then SetError(2) Return 0 EndIf Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid) If @Error Then DllClose($ah_Handle[0]) SetError(3) Return 0 EndIf $ah_Handle[1] = $av_OpenProcess[0] Return $ah_Handle EndFunc

---

/// Czytanka ///

Kod PHP:

---

Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword') If Not IsArray($ah_Handle) Then SetError(1) Return 0 EndIf Local $v_Buffer = DllStructCreate($sv_Type) If @Error Then SetError(@Error + 1) Return 0 EndIf DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '') If Not @Error Then Local $v_Value = DllStructGetData($v_Buffer, 1) Return $v_Value Else SetError(6) Return 0 EndIf EndFunc

---

/// Base Dresiarz ///

Kod PHP:

---

Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0) Local $iv_Address = 0x00100000 Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword') Local $vData Local $vType If Not IsArray($ah_Handle) Then SetError(1) Return 0 EndIf DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer)) If Not @Error Then $vData = Hex(DllStructGetData($v_Buffer, 2)) $vType = Hex(DllStructGetData($v_Buffer, 3)) While $vType <> "00000080" DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer)) $vData = Hex(DllStructGetData($v_Buffer, 2)) $vType = Hex(DllStructGetData($v_Buffer, 3)) If Hex($iv_Address) = "01000000" Then ExitLoop $iv_Address += 65536 WEnd If $vType = "00000080" Then SetError(0) If $iHexDec = 1 Then Return Dec($vData) Else Return $vData EndIf Else SetError(2) Return 0 EndIf Else SetError(3) Return 0 EndIf EndFunc ;==>_MemoryGetBaseAddress

---

#region _Memory
;================================================= ================================================
; AutoIt Version: 3.1.127 (beta)
; Language: English
; Platform: All Windows
; Author: Nomad
; Requirements: These functions will only work with beta.
;================================================= ================================================
; Credits: wOuter - These functions are based on his original _Mem() functions. But they are
; easier to comprehend and more reliable. These functions are in no way a direct copy
; of his functions. His functions only provided a foundation from which these evolved.
;================================================= ================================================
;
; Functions:
;
;================================================= ================================================
; Function: _MemoryOpen($iv_Pid(, $iv_DesiredAccess(, $iv_InheritHandle)))
; Description: Opens a process and enables all possible access rights to the process. The
; Process ID of the process is used to specify which process to open. You must
; call this function before calling _MemoryClose(), _MemoryRead(), or _MemoryWrite().
; Parameter(s): $iv_Pid - The Process ID of the program you want to open.
; $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which enables all
; possible access rights to the process specified by the
; Process ID.
; $if_InheritHandle - (optional) If this value is TRUE, all processes created by
; this process will inherit the access handle. Set to TRUE
; (1) by default. Set to 0 if you want it to be FALSE.
; Requirement(s): A valid process ID.
; Return Value(s): On Success - Returns an array containing the Dll handle and an open handle to
; the specified process.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $iv_Pid.
; 2 = Failed to open Kernel32.dll.
; 3 = Failed to open the specified process.
; Author(s): Nomad
; Note(s):
;================================================= ================================================
Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1)

If Not ProcessExists($iv_Pid) Then
SetError(1)
Return 0
EndIf

Local $ah_Handle[2] = [DllOpen('kernel32.dll')]

If @Error Then
SetError(2)
Return 0
EndIf

Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid)

If @Error Then
DllClose($ah_Handle[0])
SetError(3)
Return 0
EndIf

$ah_Handle[1] = $av_OpenProcess[0]

Return $ah_Handle

EndFunc

;================================================= ================================================
; Function: _MemoryRead($iv_Address, $ah_Handle(, $sv_Type))
; Description: Reads the value located in the memory address specified.
; Parameter(s): $iv_Address - The memory address you want to read from. It must be in hex
; format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $sv_Type - (optional) The "Type" of value you intend to read. This is set to
; 'dword'(32bit(4byte) signed integer) by default. See the help file
; for DllStructCreate for all types.
; An example: If you want to read a word that is 15 characters in
; length, you would use 'char[16]'.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns the value located at the specified address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless specified as a 'char' type, then
; they are returned in ASCII format. Also note that size ('char[size]') for all
; 'char' types should be 1 greater than the actual size.
;================================================= ================================================
Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

Local $v_Buffer = DllStructCreate($sv_Type)

If @Error Then
SetError(@Error + 1)
Return 0
EndIf

DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

If Not @Error Then
Local $v_Value = DllStructGetData($v_Buffer, 1)
Return $v_Value
Else
SetError(6)
Return 0
EndIf

EndFunc

;================================================= ================================================
; Function: _MemoryWrite($iv_Address, $ah_Handle, $v_Data(, $sv_Type))
; Description: Writes data to the specified memory address.
; Parameter(s): $iv_Address - The memory address you want to write to. It must be in hex
; format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of value you intend to write. This is set to
; 'dword'(32bit(4byte) signed integer) by default. See the help file
; for DllStructCreate for all types.
; An example: If you want to write a word that is 15 characters in
; length, you would use 'char[16]'.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = $sv_Type was not a string.
; 3 = $sv_Type is an unknown data type.
; 4 = Failed to allocate the memory needed for the DllStructure.
; 5 = Error allocating memory for $sv_Type.
; 6 = $v_Data is not in the proper format to be used with the "Type"
; selected for $sv_Type, or it is out of range.
; 7 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Values sent must be in Decimal format, unless specified as a 'char' type, then
; they must be in ASCII format. Also note that size ('char[size]') for all
; 'char' types should be 1 greater than the actual size.
;================================================= ================================================
Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

Local $v_Buffer = DllStructCreate($sv_Type)

If @Error Then
SetError(@Error + 1)
Return 0
Else
DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(6)
Return 0
EndIf
EndIf

DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

If Not @Error Then
Return 1
Else
SetError(7)
Return 0
EndIf

EndFunc

;================================================= ================================================
; Function: _MemoryClose($ah_Handle)
; Description: Closes the process handle opened by using _MemoryOpen().
; Parameter(s): $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns 1
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = Invalid $ah_Handle.
; 2 = Unable to close the process handle.
; Author(s): Nomad
; Note(s):
;================================================= ================================================
Func _MemoryClose($ah_Handle)

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf

DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
If Not @Error Then
DllClose($ah_Handle[0])
Return 1
Else
DllClose($ah_Handle[0])
SetError(2)
Return 0
EndIf

EndFunc


;================================================= ================================================
; Function: _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset(, $sv_Type))
; Description: Reads a chain of pointers and returns an array containing the destination
; address and the data at the address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension. (Offsets must be in decimal format, NOT hex!)
; $sv_Type - (optional) The "Type" of data you intend to read at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns an array containing the destination address and the value
; located at the address.
; On Failure - Returns 0
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = $sv_Type is not a string.
; 4 = $sv_Type is an unknown data type.
; 5 = Failed to allocate the memory needed for the DllStructure.
; 6 = Error allocating memory for $sv_Type.
; 7 = Failed to read from the specified process.
; Author(s): Nomad
; Note(s): Values returned are in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;================================================= ================================================
Func _MemoryPointerRead($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')

If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf

Local $iv_Data[2], $i
Local $v_Buffer = DllStructCreate('dword')

For $i = 0 to $iv_PointerCount

If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 2)
Return 0
EndIf

$iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

Else
$iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(7)
Return 0
EndIf

$iv_Data[1] = DllStructGetData($v_Buffer, 1)

EndIf

Next

$iv_Data[0] = $iv_Address

Return $iv_Data

EndFunc ;==>_MemoryPointerRead


;================================================= ================================================
; Function: _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data[, $sv_Type])
; Description: Reads a chain of pointers and writes the data to the destination address.
; Parameter(s): $iv_Address - The static memory address you want to start at. It must be in
; hex format (0x00000000).
; $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $av_Offset - An array of offsets for the pointers. Each pointer must have an
; offset. If there is no offset for a pointer, enter 0 for that
; array dimension.
; $v_Data - The data to be written.
; $sv_Type - (optional) The "Type" of data you intend to write at the destination
; address. This is set to 'dword'(32bit(4byte) signed integer) by
; default. See the help file for DllStructCreate for all types.
; Requirement(s): The $ah_Handle returned from _MemoryOpen.
; Return Value(s): On Success - Returns the destination address.
; On Failure - Returns 0.
; @Error - 0 = No error.
; 1 = $av_Offset is not an array.
; 2 = Invalid $ah_Handle.
; 3 = Failed to read from the specified process.
; 4 = $sv_Type is not a string.
; 5 = $sv_Type is an unknown data type.
; 6 = Failed to allocate the memory needed for the DllStructure.
; 7 = Error allocating memory for $sv_Type.
; 8 = $v_Data is not in the proper format to be used with the
; "Type" selected for $sv_Type, or it is out of range.
; 9 = Failed to write to the specified process.
; Author(s): Nomad
; Note(s): Data written is in Decimal format, unless a 'char' type is selected.
; Set $av_Offset like this:
; $av_Offset[0] = NULL (not used, doesn't matter what's entered)
; $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
; $av_Offset[2] = Offset for pointer 2
; etc...
; (The number of array dimensions determines the number of pointers)
;================================================= ================================================
Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')

If IsArray($av_Offset) Then
If IsArray($ah_Handle) Then
Local $iv_PointerCount = UBound($av_Offset) - 1
Else
SetError(2)
Return 0
EndIf
Else
SetError(1)
Return 0
EndIf

Local $iv_StructData, $i
Local $v_Buffer = DllStructCreate('dword')

For $i = 0 to $iv_PointerCount
If $i = $iv_PointerCount Then
$v_Buffer = DllStructCreate($sv_Type)
If @Error Then
SetError(@Error + 3)
Return 0
EndIf

DllStructSetData($v_Buffer, 1, $v_Data)
If @Error Then
SetError(8)
Return 0
EndIf

$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(9)
Return 0
Else
Return $iv_Address
EndIf
ElseIf $i = 0 Then
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf

$iv_StructData = DllStructGetData($v_Buffer, 1)

Else
$iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
If @Error Then
SetError(3)
Return 0
EndIf

$iv_StructData = DllStructGetData($v_Buffer, 1)

EndIf
Next

EndFunc


;================================================= ==================================================

; Function........: _MemoryGetBaseAddress($ah_Handle, $iHD)
;
; Description.....: Reads the 'Allocation Base' from the open process.
;
; Parameter(s)....: $ah_Handle - An array containing the Dll handle and the handle of the open
; process as returned by _MemoryOpen().
; $iHD - Return type:
; |0 = Hex (Default)
; |1 = Dec
;
; Requirement(s)..: A valid process ID.
;
; Return Value(s).: On Success - Returns the 'allocation Base' address and sets @Error to 0.
; On Failure - Returns 0 and sets @Error to:
; |1 = Invalid $ah_Handle.
; |2 = Failed to find correct allocation address.
; |3 = Failed to read from the specified process.
;
; Author(s).......: Nomad. Szhlopp.
; URL.............: http://www.autoitscript.com/forum/index ... opic=78834 ;
; Note(s).........: Go to Www.CheatEngine.org for the latest version of CheatEngine.
;================================================= ==================================================
Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)

Local $iv_Address = 0x00100000
Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dwo rd;dword')
Local $vData
Local $vType

If Not IsArray($ah_Handle) Then
SetError(1)
Return 0
EndIf


DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

If Not @Error Then

$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))

While $vType <> "00000080"
DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
$vData = Hex(DllStructGetData($v_Buffer, 2))
$vType = Hex(DllStructGetData($v_Buffer, 3))
If Hex($iv_Address) = "01000000" Then ExitLoop
$iv_Address += 65536

WEnd

If $vType = "00000080" Then
SetError(0)
If $iHexDec = 1 Then
Return Dec($vData)
Else
Return $vData
EndIf

Else
SetError(2)
Return 0
EndIf

Else
SetError(3)
Return 0
EndIf

EndFunc ;==>_MemoryGetBaseAddress

;================================================= ==================================================

; Function........: _MemoryModuleGetBaseAddress($iPID, $sModule)
;
;================================================= ==================================================
Func _MemoryModuleGetBaseAddress($iPID, $sModule)
If Not ProcessExists($iPID) Then Return SetError(1, 0, 0)

If Not IsString($sModule) Then Return SetError(2, 0, 0)

Local $PSAPI = DllOpen("psapi.dll")

;Get Process Handle
Local $hProcess
Local $PERMISSION = BitOR(0x0002, 0x0400, 0x0008, 0x0010, 0x0020) ; CREATE_THREAD, QUERY_INFORMATION, VM_OPERATION, VM_READ, VM_WRITE

If $iPID > 0 Then
Local $hProcess = DllCall("kernel32.dll", "ptr", "OpenProcess", "dword", $PERMISSION, "int", 0, "dword", $iPID)
If $hProcess[0] Then
$hProcess = $hProcess[0]
EndIf
EndIf

;EnumProcessModules
Local $Modules = DllStructCreate("ptr[1024]")
Local $aCall = DllCall($PSAPI, "int", "EnumProcessModules", "ptr", $hProcess, "ptr", DllStructGetPtr($Modules), "dword", DllStructGetSize($Modules), "dword*", 0)
If $aCall[4] > 0 Then
Local $iModnum = $aCall[4] / 4
Local $aTemp
For $i = 1 To $iModnum
$aTemp = DllCall($PSAPI, "dword", "GetModuleBaseNameW", "ptr", $hProcess, "ptr", Ptr(DllStructGetData($Modules, 1, $i)), "wstr", "", "dword", 260)
If $aTemp[3] = $sModule Then
DllClose($PSAPI)
Return Ptr(DllStructGetData($Modules, 1, $i))
EndIf
Next
EndIf

DllClose($PSAPI)
Return SetError(-1, 0, 0)

EndFunc


;================================================= ==================================================
; Function: SetPrivilege( $privilege, $bEnable )
; Description: Enables (or disables) the $privilege on the current process
; (Probably) requires administrator privileges to run
;
; Author(s): Larry (from autoitscript.coms Forum)
; Notes(s):
; http://www.autoitscript.com/forum/index ... t&p=223999 ;
;================================================= ==================================================

Func SetPrivilege( $privilege, $bEnable )
Const $TOKEN_ADJUST_PRIVILEGES = 0x0020
Const $TOKEN_QUERY = 0x0008
Const $SE_PRIVILEGE_ENABLED = 0x0002
Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
$nTokens = 1
$LUID = DLLStructCreate("dword;int")
If IsArray($privilege) Then $nTokens = UBound($privilege)
$TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
$hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
$SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","h wnd",$hCurrProcess[0], _
"int",BitOR($TOKEN_ADJUST_PRIVILEGES,$TOKEN_QUERY) ,"int*",0)
If $SP_auxret[0] Then
$hToken = $SP_auxret[3]
DLLStructSetData($TOKEN_PRIVILEGES,1,1)
$nTokenIndex = 1
While $nTokenIndex <= $nTokens
If IsArray($privilege) Then
$priv = $privilege[$nTokenIndex-1]
Else
$priv = $privilege
EndIf
$ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue ","str","","str",$priv, _
"ptr",DLLStructGetPtr($LUID))
If $ret[0] Then
If $bEnable Then
DLLStructSetData($TOKEN_PRIVILEGES,2,$SE_PRIVILEGE _ENABLED,(3 * $nTokenIndex))
Else
DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
EndIf
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetD ata($LUID,1),(3 * ($nTokenIndex-1)) + 1)
DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetD ata($LUID,2),(3 * ($nTokenIndex-1)) + 2)
DLLStructSetData($LUID,1,0)
DLLStructSetData($LUID,2,0)
EndIf
$nTokenIndex += 1
WEnd
$ret = DLLCall("advapi32.dll","int","AdjustTokenPrivilege s","hwnd",$hToken,"int",0, _
"ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",Dll StructGetSize($NEWTOKEN_PRIVILEGES), _
"ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*" ,0)
$f = DLLCall("kernel32.dll","int","GetLastError")
EndIf
$NEWTOKEN_PRIVILEGES=0
$TOKEN_PRIVILEGES=0
$LUID=0
If $SP_auxret[0] = 0 Then Return 0
$SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd", $hToken)
If Not $ret[0] And Not $SP_auxret[0] Then Return 0
return $ret[0]
EndFunc ;==>SetPrivilege

#EndRegion

Dodaj do tego swojego programu SetPrivilege("SeDebugPrivilege" , 1) i sproboj tez z require admin

@wenrzu ;
niestety, nic to nie dało ;/

Jaki error number wywala getbaseadress ?

Dodaj jeszcze to:
#AutoIt3Wrapper_UseX64=n

Cytuj:

---

wenrzu napisał

Jaki error number wywala getbaseadress ?

Dodaj jeszcze to:
#AutoIt3Wrapper_UseX64=n

---

2 = Failed to find correct allocation address.
Dodanie wrappera nic nie dało @wenrzu ;

To jeszcze podmien tego swojego getbaseadress na

;=================================
==================================
================================
; Function........: _MemoryGetBa
seAddress($ah_Handle, $iHD)
;
; Description.....: Reads the 'A
llocation Base' from the open pr
ocess.
;
; Parameter(s)....: $ah_Handle -
An array containing the Dll hand
le and the handle of the open
;
process as returned by _MemoryOp
en().
; $iHD - Retur
n type:
; |0 = Hex
(Default)
; |1 = Dec
;
; Requirement(s)..: A valid proc
ess ID.
;
; Return Value(s).: On Success -
Returns the 'allocation Base' ad
dress and sets @Error to 0.
; On Failure -
Returns 0 and sets @Error to:
; |1 = Inva
lid $ah_Handle.
; |2 = Fail
ed to find correct allocation
address.
; |3 = Fail
ed to read from the specified
process.
;
; Author(s).......: Nomad. Szhlo
pp.
; URL.............: <a href='ht
tp://www.autoitscript.com/forum/
index.php?showtopic=78834' class
='bbc_url' title=''>http://www.au
toitscript.com/forum/index.php?
showtopic=78834</a>
; Note(s).........: Go to Www.Ch
eatEngine.org for the latest ve
rsion of CheatEngine.
;=================================
==================================
================================
Func _MemoryGetBaseAddress($ah_Han
dle, $iHexDec = 0)
Local $iv_Address = 0x0010000
0
Local $v_Buffer = DllStructCr
eate('dword;dword;dword;dword;
dword;dword;dword')
Local $vData
Local $vType
If Not IsArray ($ah_Handle) Th
en
SetError(1)
Return 0
EndIf
DllCall ($ah_Handle[0], 'int',
'VirtualQueryEx', 'int', $ah_Han
dle[1], 'int', $iv_Address, 'ptr'
, DllStructGetPtr ($v_Buffer), '
int', DllStructGetSize($v_Buffer)
)
If Not @Error Then
$vData = Hex( Int ( DllStruc
tGetData($v_Buffer, 2)))
$vType = Hex( Int ( DllStruc
tGetData($v_Buffer, 3)))
While $vType <> "00000080
"
DllCall ($ah_Handle[0]
, 'int', 'VirtualQueryEx', 'int',
$ah_Handle[1], 'int', $iv_Addres
s, 'ptr', DllStructGetPtr($v_
Buffer), 'int', DllStructGetSize (
$v_Buffer))
$vData = Hex (Int ( DllS
tructGetData($v_Buffer, 2)))
$vType = Hex (Int ( DllS
tructGetData($v_Buffer, 3)))
If Hex($iv_Address) =
"01000000" Then ExitLoop
$iv_Address += 65536
WEnd
If $vType = "00000080" Th
en
SetError(0)
If $iHexDec = 1 Then
Return Dec ($vData
)
Else
Return $vData
EndIf
Else
SetError(2)
Return 0
EndIf
Else
SetError(3)
Return 0
EndIf
EndFunc

I to za setprivilege

Func SetPrivilege( $privilege, $b
Enable )
Const $MY_TOKEN_ADJUST_PRIVIL
EGES = 0x0020
Const $MY_TOKEN_QUERY = 0x000
8
Const $MY_SE_PRIVILEGE_ENABLE
D = 0x0002
Local $hToken, $SP_auxret, $S
P_ret, $hCurrProcess, $nTokens, $
nTokenIndex, $priv
$nTokens = 1
$LUID = DLLStructCreate("dwor
d;int")
If IsArray($privilege) Then
$nTokens = UBound($privilege)
$TOKEN_PRIVILEGES = DLLStruct
Create("dword;dword[" & (3 * $
nTokens) & "]")
$NEWTOKEN_PRIVILEGES = DLLStr
uctCreate("dword;dword[" & (3 * $
nTokens) & "]")
$hCurrProcess = DLLCall("kern
el32.dll","hwnd","GetCurrentP
rocess")
$SP_auxret = DLLCall("advapi3
2.dll","int","OpenProcessToken","
hwnd",$hCurrProcess[0], _
"int",BitOR($MY_TOKEN
_ADJUST_PRIVILEGES,$MY_TOKEN_QUER
Y),"int*",0)
If $SP_auxret[0] Then
$hToken = $SP_auxret[3]
DLLStructSetData($TOKEN_P
RIVILEGES,1,1)
$nTokenIndex = 1
While $nTokenIndex <= $nT
okens
If IsArray($privilege
) Then
$priv = $privileg
e[$nTokenIndex-1]
Else
$priv = $privileg
e
EndIf
$ret = DLLCall("advap
i32.dll","int","LookupPrivil
egeValue","str","","str",$priv,
_
"ptr",DLLStr
uctGetPtr($LUID))
If $ret[0] Then
If $bEnable Then
DLLStructSetD
ata($TOKEN_PRIVILEGES,2,$MY_SE_
PRIVILEGE_ENABLED,(3 * $
nTokenIndex))
Else
DLLStructSetD
ata($TOKEN_PRIVILEGES,2,0,(3 * $
nTokenIndex))
EndIf
DLLStructSetData(
$TOKEN_PRIVILEGES,2,DllStructGetDa
ta($LUID,1),(3 * ($nTokenIndex-1
)) + 1)
DLLStructSetData(
$TOKEN_PRIVILEGES,2,DllStructGetDa
ta($LUID,2),(3 * ($nTokenIndex-1
)) + 2)
DLLStructSetData(
$LUID,1,0)
DLLStructSetData(
$LUID,2,0)
EndIf
$nTokenIndex += 1
WEnd
$ret = DLLCall("advapi32.
dll","int","AdjustTokenPrivileges
","hwnd",$hToken,"int",0, _
"ptr",DllStructGe
tPtr($TOKEN_PRIVILEGES),"int",
DllStructGetSize($NEWTOKEN_
PRIVILEGES), _
"ptr",DllStructGe
tPtr($NEWTOKEN_PRIVILEGES),"int*"
,0)
$f = DLLCall("kernel32.dl
l","int","GetLastError")
EndIf
$NEWTOKEN_PRIVILEGES=0
$TOKEN_PRIVILEGES=0
$LUID=0
If $SP_auxret[0] = 0 Then Ret
urn 0
$SP_auxret = DLLCall("kernel3
2.dll","int","CloseHandle","hwnd"
,$hToken)
If Not $ret[0] And Not $SP_au
xret[0] Then Return 0
return $ret[0]
EndFunc ;==>SetPrivilege

@wenrzu ;
wrzuć to w [code][/code] albo [php][/php] bo forum rozwala linijki

Cytuj:

---

BBsrv napisał

@wenrzu ;
wrzuć to w [code][/code] albo [php][/php] bo forum rozwala linijki

---

Pozwol ze jutro Ci to jebne, bo teraz jestem na telefonie i nie mam jak.

Cytuj:

---

wenrzu napisał

Pozwol ze jutro Ci to jebne, bo teraz jestem na telefonie i nie mam jak.

---

trudno, okej ;p
@edit
udało mi się rozszyfrować w miarę geta i mam połowiczny sukces. Base już znajduje (o ile dobry znajduje xd) z privilages miałem pare parse errorów więc sobie darowałem.
Tylko trochę dużo hp mam, jak na 8 lvl xD
https://i.imgur.com/NBti08c.png
@wenrzu ;
: )

Wiesz że wartość hp cza xorem potraktować?

Cytuj:

---

LGTK napisał

Wiesz że wartość hp cza xorem potraktować?

---

a no już wiem XD @LGTK ;
a coś więcej ? w jaki sposób potraktować ?
Nigdy się nie bawiłem w pisanie botów, so jestem zielony ; )

@edit, już wiem, dzięki za naprowadzenie @LGTK ;
xD
Działa, a już się zacząłem obawiać że nie da się xorować w autoit...
BitXOR()

Spoko spoko xd
Nie chciałeś prawdziwego języka wybrać?

Cytuj:

---

LGTK napisał

Spoko spoko xd
Nie chciałeś prawdziwego języka wybrać?

---

Powiem ci szczerze, że myślałem o tym... ale kurde nie chce mi sie ogarniać języka od podstaw, głównie się bawię więc wiesz, nie zamierzam pisać jakiegoś super pro bota, bo to nie ma sensu. A do pobawienia się wystarczy łałtoit ;p

Do pisania prostych bocikow/programow autoit jest idealny, a moim zdaniem daje tez pewien zarys o programowaniu i latwiej potem zaczac w czyms innym :)

Z czym trzeba było zxorować hp?

Kod:

---

public static readonly uint XOR = 0x7C42D0 - 0x400000 + baseAdress;  // 10.36
 public static readonly uint Player_Health = 0x959000 - 0x400000 + baseAdress; // 10.36

---

No i potem hp = readint(player_hp) xor readint(xor) i masz hp

(zakładam, ze otwartą pamięć tibii trzymasz w $pamiec)

Jakby ktoś chciał się bawić, to dla ułatwienia sobie można użyć tych funkji :

Kod PHP:

---

func xor($xxx) $drugi = _MemoryRead(0x7C42D0 - 0x400000 + $BaseAdress, $pamiec) $aa1 = BitXOR($xxx, $drugi) return $aa1 EndFunc

---

Kod PHP:

---

func adres($add) $ile = $add - 0x400000 + $BaseAdress return $ile EndFunc

---

adres() - zamiast co kawałek pisać xxx - 0x400000 + base, robisz adres(xxx) ,
np. pobieranie hp (ofc jeszcze to trza xornąć)

Kod:

---

$hp = _MemoryRead(adres(0x959000), $pamiec)

---

xor() - xorowanie, zamiast co kawałek obliczać adres, robisz xor(xxx),
np pobieranie ilości hp :

Kod:

---

$HP = xor(_MemoryRead(adres(0x959000), $pamiec))

---

lub w dłuższej wersji :

Kod:

---

$hp1 = 0x959000 - 0x400000 + $BaseAdress
$hp2 = _MemoryRead($hp1, $pamiec)
$xor = _MemoryRead(0x7C42D0 - 0x400000 + $BaseAdress, $pamiec)
$HP = BitXOR($hp2, $xor)

---

; )


anyway, pomóżcie wyciągnąć z pamięci =D :
nick postaci
serwer
profesja
Może zna ktoś z was adresy? ;]

@LordCompi ;

Po co oni dodali to xorowanie? xD

żeby było trudniej boty pisać zapewne, tak samo jak zmienne adresy czy cotam

@BBsrv http://tpforums.org/forum/forums/89-Client-Updates

Robisz pętle po całej bl jeśli aktualnie przeszukiwany obiekt (potwor, gracz,npc) ma ID = twojemu wyciągasz Nick

Ew pobierasz nazwę okna i wywalasz "Tibia - " xd można też z CharList struct

Czy tylko u mnie timery są zjebane...? co bym nie zrobił to appka po chwili robi sie brak odpowiedzi... no kurwica mnie weźmie zara...
/edit
nie ważne, już wiem.. trzeba w funcję wsadzić jakiekolwiek 4 zmienne...
dla potomnych,
func xxx($1, $2, $3, $4)
blablabla
endfunc

Cytuj:

---

nick postaci
serwer
profesja

---

Nick postaci jest bardzo łatwo znaleźć. Najprostszy sposób to pobranie ID gracza (0x957034) i zeskanowanie battlelisty.
Robimy to tak
(pseudokod)

Kod:

---

bl_start=0x9AC558
bl_step=0xc0
for( i=0; i<1299; i++) {
id=readint(bl_start+(i*bl_step));
if id=readint(player_id) { nick=readstring(bl_start+(i*bl_step)+4); }
}

---

Profesje robi się chyba tak samo, ale nie jestem w 100% pewien bo nigdy nie potrzebowałem tego.
A serwer to juz inna bajka, o wiele bardziej złożona niż nick.

Adresy chyba z 10.35

Odkopuje...
Wie ktos jak rozwiazac ten problem z zerowym baseaddressem? Kod z #6 postu nic nie zmienia

Ja z tego ostatnio korzystalem i dzialalo:

Kod:

---

#include <Pointer2.au3>
Local $prozessname = "JakasGra.exe"
$PID = ProcessExists($prozessname)
        If $PID > 0 Then
                $Handle = _MemoryOpen($PID)
                $Address = _MemoryModuleGetBaseAddress("" & $PID & "", "" & $prozessname & "")
                $Address = "0x" & Hex($Address + Dec("01ECBE54"))
                Dim $Offset[3]
                $Offset[0] = 0x0
                $Offset[1] = 0x5C
                $Offset[2] = 0x260
        EndIf
        $Read = _MemoryPointerRead($Address, $Handle, $Offset, "dword")
        _MemoryClose($Handle)

MsgBox(0, "", "VALUE IS : " & $Read[1])

---

A tutaj include:
http://speedy.sh/wKqv6/Pointer2.au3

wyłącz ASLR -> olej base adres -> profit.
możesz wyłączyć albo emetem albo zmodyfikować klienta (opcja 2 szybsza)

RADA SUPER TRU: zacznij pisać w prawdziwym języku == profit

Cytuj:

---

LGTK napisał

RADA SUPER TRU: zacznij pisać w prawdziwym języku == profit

---

po co ma zaczynać w czymkolwiek i się znudzić po godzinie (albo 5 minutach xd) ? to co mu potrzebne może na spokojnie w łałto icie zrobić