View Single Post
  #11  
Old 07-15-2009, 05:13
ahmadmansoor's Avatar
ahmadmansoor ahmadmansoor is offline
Coder
 
Join Date: Feb 2006
Location: Syria
Posts: 1,047
Rept. Given: 517
Rept. Rcvd 374 Times in 142 Posts
Thanks Given: 380
Thanks Rcvd at 416 Times in 119 Posts
ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399
I have installed VB6.0 then I have installed VS2008 ....could this affect ???!!!
my friend the problem that I have tested ur code ..that all .
and I have the same result .I will try to compile ur source code ,and try to see the ruselt.

note : my friend can u help me in something else .
I have got this code form my frind Nieylana in accessroot.com
this is a function to Search Memory ...but it not work with some target:
+++++++++++++++++++++++
Public Function SearchMemory(searchString As String, Address As Long, LengthToSearch As Long) As Long
Dim x As Long
Dim y As Long
Dim SearchPointer As Long
Dim NumRead As Long
Dim nextByte As String
Dim isFound As Boolean
ReDim ByteArray((Len(searchString) / 2) - 1)
ReDim ByteMask((Len(searchString) / 2) - 1)

For x = 0 To UBound(ByteArray)
nextByte = Mid(searchString, (x * 2) + 1, 2)
If nextByte <> "??" Then
ByteArray(x) = Val("&H" & nextByte)
ByteMask(x) = 0
Else
ByteMask(x) = 1
End If
Next x
ReDim MemoryArray(LengthToSearch - 1)

Call ReadProcessMemory(ByVal mvarhProc, ByVal Address, MemoryArray(0), LengthToSearch, NumRead)
If NumRead = 0 Then
Call Err.Raise(7, , "Source memory could not be read!")
End If

For SearchPointer = 0 To LengthToSearch - 1
For x = 0 To UBound(ByteArray)
If SearchPointer + x = LengthToSearch Then
isFound = False
GoTo SearchedALL
End If
If MemoryArray(SearchPointer + x) <> ByteArray(x) And ByteMask(x) <> 1 Then
isFound = False
Exit For
End If
isFound = True
Next x
If isFound = True Then Exit For
Next SearchPointer
SearchedALL:
If isFound = True Then
SearchMemory = Address + SearchPointer
Else
SearchMemory = -1
End If
End Function
++++++++++++++++++++++
can u help me to write a function to search all memory in the target ,
like in olly .
and make it search for a pattern like this
"FF15????????90E9"
the function of Nieylana do this very will ..but cann't search all memory .
I think the problem in the size of the search .
I hope u can help me in this .
Many thanks for u .
__________________
Ur Best Friend Ahmadmansoor
Always My Best Friend: Aaron & JMI & ZeNiX
Reply With Quote