Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-15-2009, 05:13
ahmadmansoor's Avatar
ahmadmansoor ahmadmansoor is offline
Coder
 
Join Date: Feb 2006
Location: Syria
Posts: 1,047
Rept. Given: 517
Rept. Rcvd 374 Times in 142 Posts
Thanks Given: 380
Thanks Rcvd at 416 Times in 119 Posts
ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399
I have installed VB6.0 then I have installed VS2008 ....could this affect ???!!!
my friend the problem that I have tested ur code ..that all .
and I have the same result .I will try to compile ur source code ,and try to see the ruselt.

note : my friend can u help me in something else .
I have got this code form my frind Nieylana in accessroot.com
this is a function to Search Memory ...but it not work with some target:
+++++++++++++++++++++++
Public Function SearchMemory(searchString As String, Address As Long, LengthToSearch As Long) As Long
Dim x As Long
Dim y As Long
Dim SearchPointer As Long
Dim NumRead As Long
Dim nextByte As String
Dim isFound As Boolean
ReDim ByteArray((Len(searchString) / 2) - 1)
ReDim ByteMask((Len(searchString) / 2) - 1)

For x = 0 To UBound(ByteArray)
nextByte = Mid(searchString, (x * 2) + 1, 2)
If nextByte <> "??" Then
ByteArray(x) = Val("&H" & nextByte)
ByteMask(x) = 0
Else
ByteMask(x) = 1
End If
Next x
ReDim MemoryArray(LengthToSearch - 1)

Call ReadProcessMemory(ByVal mvarhProc, ByVal Address, MemoryArray(0), LengthToSearch, NumRead)
If NumRead = 0 Then
Call Err.Raise(7, , "Source memory could not be read!")
End If

For SearchPointer = 0 To LengthToSearch - 1
For x = 0 To UBound(ByteArray)
If SearchPointer + x = LengthToSearch Then
isFound = False
GoTo SearchedALL
End If
If MemoryArray(SearchPointer + x) <> ByteArray(x) And ByteMask(x) <> 1 Then
isFound = False
Exit For
End If
isFound = True
Next x
If isFound = True Then Exit For
Next SearchPointer
SearchedALL:
If isFound = True Then
SearchMemory = Address + SearchPointer
Else
SearchMemory = -1
End If
End Function
++++++++++++++++++++++
can u help me to write a function to search all memory in the target ,
like in olly .
and make it search for a pattern like this
"FF15????????90E9"
the function of Nieylana do this very will ..but cann't search all memory .
I think the problem in the size of the search .
I hope u can help me in this .
Many thanks for u .
__________________
Ur Best Friend Ahmadmansoor
Always My Best Friend: Aaron & JMI & ZeNiX
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista x64 , Windows 7 limits? jump x64 OS 9 02-26-2010 01:00
Softice under Vista amigo General Discussion 14 03-09-2009 15:20
IDA and Vista nino General Discussion 2 10-12-2008 00:25
OllyDbg under Vista MR.HAANDI General Discussion 6 12-13-2006 19:12


All times are GMT +8. The time now is 14:30.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )