AutoIt Français

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <MemoryGetBaseAddressUDF.au3>
#include <Array.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)
while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = WinGetProcess("TeamSpeak 3", "")
          If $ProcessID = -1 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "WinGetProcess error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)
               
               While 1
                   $StaticOffset = Dec("00C3DA00")
                  $BaseADDR = _MemoryGetBaseAddress($MemOpen, 1)
                    If @error Then
                     MsgBox(16, "ERROR", "_MemoryGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                   $FinalADDR = "0x" & Hex($BaseADDR + $StaticOffset)
                  Dim $Offset[11] = [0, Dec(0xf0), Dec(0x698), Dec(0x0), Dec(0x108), Dec(0x10), Dec(0x0), Dec(0x0), Dec(0x0), Dec(0x18), Dec(0x50)]
                  
                   $Adress = _MemoryPointerRead($FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf
                     
                   $Result = Hex($Adress[0])
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf
                     
                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "FinalADDR : " & $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc
         
   Func Pause()
      While 1 
         Sleep(300)
      WEnd
   EndFunc

Code : Tout sélectionner

#include-once
#region _Memory
;=================================================================================================
; AutoIt Version:   3.1.127 (beta)
; Language:         English
; Platform:         All Windows
; Author:           Nomad
; Requirements:     These functions will only work with beta.
;=================================================================================================
; Credits:  wOuter - These functions are based on his original _Mem() functions.  But they are
;           easier to comprehend and more reliable.  These functions are in no way a direct copy
;           of his functions.  His functions only provided a foundation from which these evolved.
;=================================================================================================
;
; Functions:
;
;=================================================================================================
; Function:         _MemoryOpen($iv_Pid(, $iv_DesiredAccess(, $iv_InheritHandle)))
; Description:      Opens a process and enables all possible access rights to the process.  The
;                   Process ID of the process is used to specify which process to open.  You must
;                   call this function before calling _MemoryClose(), _MemoryRead(), or _MemoryWrite().
; Parameter(s):     $iv_Pid - The Process ID of the program you want to open.
;                   $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which enables all
;                                       possible access rights to the process specified by the
;                                       Process ID.
;                   $if_InheritHandle - (optional) If this value is TRUE, all processes created by
;                                       this process will inherit the access handle.  Set to TRUE
;                                       (1) by default.  Set to 0 if you want it to be FALSE.
; Requirement(s):   A valid process ID.
; Return Value(s):  On Success - Returns an array containing the Dll handle and an open handle to
;                                the specified process.
;                   On Failure - Returns 0
;                   @Error - 0 = No error.
;                            1 = Invalid $iv_Pid.
;                            2 = Failed to open Kernel32.dll.
;                            3 = Failed to open the specified process.
; Author(s):        Nomad
; Note(s):
;=================================================================================================
Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1)
   
    If Not ProcessExists($iv_Pid) Then
        SetError(1)
        Return 0
    EndIf
   
    Local $ah_Handle[2] = [DllOpen('kernel32.dll')]
   
    If @Error Then
        SetError(2)
        Return 0
    EndIf
   
    Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid)
   
    If @Error Then
        DllClose($ah_Handle[0])
        SetError(3)
        Return 0
    EndIf
   
    $ah_Handle[1] = $av_OpenProcess[0]
   
    Return $ah_Handle
   
EndFunc

;=================================================================================================
; Function:         _MemoryRead($iv_Address, $ah_Handle(, $sv_Type))
; Description:      Reads the value located in the memory address specified.
; Parameter(s):     $iv_Address - The memory address you want to read from. It must be in hex
;                                 format (0x00000000).
;                   $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $sv_Type - (optional) The "Type" of value you intend to read.  This is set to
;                               'dword'(32bit(4byte) signed integer) by default.  See the help file
;                               for DllStructCreate for all types.
;                               An example: If you want to read a word that is 15 characters in
;                               length, you would use 'char[16]'.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns the value located at the specified address.
;                   On Failure - Returns 0
;                   @Error - 0 = No error.
;                            1 = Invalid $ah_Handle.
;                            2 = $sv_Type was not a string.
;                            3 = $sv_Type is an unknown data type.
;                            4 = Failed to allocate the memory needed for the DllStructure.
;                            5 = Error allocating memory for $sv_Type.
;                            6 = Failed to read from the specified process.
; Author(s):        Nomad
; Note(s):          Values returned are in Decimal format, unless specified as a 'char' type, then
;                   they are returned in ASCII format.  Also note that size ('char[size]') for all
;                   'char' types should be 1 greater than the actual size.
;=================================================================================================
Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')
   
    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf
   
    Local $v_Buffer = DllStructCreate($sv_Type)
   
    If @Error Then
        SetError(@Error + 1)
        Return 0
    EndIf
   
    DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
   
    If Not @Error Then
        Local $v_Value = DllStructGetData($v_Buffer, 1)
        Return $v_Value
    Else
        SetError(6)
        Return 0
    EndIf
   
EndFunc

;=================================================================================================
; Function:         _MemoryWrite($iv_Address, $ah_Handle, $v_Data(, $sv_Type))
; Description:      Writes data to the specified memory address.
; Parameter(s):     $iv_Address - The memory address you want to write to.  It must be in hex
;                                 format (0x00000000).
;                   $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $v_Data - The data to be written.
;                   $sv_Type - (optional) The "Type" of value you intend to write.  This is set to
;                               'dword'(32bit(4byte) signed integer) by default.  See the help file
;                               for DllStructCreate for all types.
;                               An example: If you want to write a word that is 15 characters in
;                               length, you would use 'char[16]'.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns 1
;                   On Failure - Returns 0
;                   @Error - 0 = No error.
;                            1 = Invalid $ah_Handle.
;                            2 = $sv_Type was not a string.
;                            3 = $sv_Type is an unknown data type.
;                            4 = Failed to allocate the memory needed for the DllStructure.
;                            5 = Error allocating memory for $sv_Type.
;                            6 = $v_Data is not in the proper format to be used with the "Type"
;                                selected for $sv_Type, or it is out of range.
;                            7 = Failed to write to the specified process.
; Author(s):        Nomad
; Note(s):          Values sent must be in Decimal format, unless specified as a 'char' type, then
;                   they must be in ASCII format.  Also note that size ('char[size]') for all
;                   'char' types should be 1 greater than the actual size.
;=================================================================================================
Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')
   
    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf
   
    Local $v_Buffer = DllStructCreate($sv_Type)
   
    If @Error Then
        SetError(@Error + 1)
        Return 0
    Else
        DllStructSetData($v_Buffer, 1, $v_Data)
        If @Error Then
            SetError(6)
            Return 0
        EndIf
    EndIf
   
    DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
   
    If Not @Error Then
        Return 1
    Else
        SetError(7)
        Return 0
    EndIf
   
EndFunc

;=================================================================================================
; Function:         _MemoryClose($ah_Handle)
; Description:      Closes the process handle opened by using _MemoryOpen().
; Parameter(s):     $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns 1
;                   On Failure - Returns 0
;                   @Error - 0 = No error.
;                            1 = Invalid $ah_Handle.
;                            2 = Unable to close the process handle.
; Author(s):        Nomad
; Note(s):
;=================================================================================================
Func _MemoryClose($ah_Handle)
   
    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf
   
    DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
    If Not @Error Then
        DllClose($ah_Handle[0])
        Return 1
    Else
        DllClose($ah_Handle[0])
        SetError(2)
        Return 0
    EndIf
   
EndFunc


;=================================================================================================
; Function:         _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset(, $sv_Type))
; Description:      Reads a chain of pointers and returns an array containing the destination
;                   address and the data at the address.
; Parameter(s):     $iv_Address - The static memory address you want to start at. It must be in
;                                 hex format (0x00000000).
;                   $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $av_Offset - An array of offsets for the pointers.  Each pointer must have an
;                                offset.  If there is no offset for a pointer, enter 0 for that
;                                array dimension. (Offsets must be in decimal format, NOT hex!)
;                   $sv_Type - (optional) The "Type" of data you intend to read at the destination
;                                address.  This is set to 'dword'(32bit(4byte) signed integer) by
;                                default.  See the help file for DllStructCreate for all types.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns an array containing the destination address and the value
;                                located at the address.
;                   On Failure - Returns 0
;                   @Error - 0 = No error.
;                            1 = $av_Offset is not an array.
;                            2 = Invalid $ah_Handle.
;                            3 = $sv_Type is not a string.
;                            4 = $sv_Type is an unknown data type.
;                            5 = Failed to allocate the memory needed for the DllStructure.
;                            6 = Error allocating memory for $sv_Type.
;                            7 = Failed to read from the specified process.
; Author(s):        Nomad
; Note(s):          Values returned are in Decimal format, unless a 'char' type is selected.
;                   Set $av_Offset like this:
;                   $av_Offset[0] = NULL (not used)
;                   $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
;                   $av_Offset[2] = Offset for pointer 2
;                   etc...
;                   (The number of array dimensions determines the number of pointers)
;=================================================================================================
Func _MemoryPointerRead($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')

    If IsArray($av_Offset) Then
        If IsArray($ah_Handle) Then
            Local $iv_PointerCount = UBound($av_Offset) - 1
        Else
            SetError(2)
            Return 0
        EndIf
    Else
        SetError(1)
        Return 0
    EndIf

    Local $iv_Data[2], $i
    Local $v_Buffer = DllStructCreate('dword')

    For $i = 0 to $iv_PointerCount

        If $i = $iv_PointerCount Then
            $v_Buffer = DllStructCreate($sv_Type)
            If @Error Then
                SetError(@Error + 2)
                Return 0
            EndIf

            $iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        ElseIf $i = 0 Then
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        Else
            $iv_Address = '0x' & hex($iv_Data[1] + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        EndIf

    Next

    $iv_Data[0] = $iv_Address
   
    Return $iv_Data

EndFunc   ;==>_MemoryPointerRead


;=================================================================================================
; Function:         _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data[, $sv_Type])
; Description:      Reads a chain of pointers and writes the data to the destination address.
; Parameter(s):     $iv_Address - The static memory address you want to start at. It must be in
;                                 hex format (0x00000000).
;                   $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $av_Offset - An array of offsets for the pointers.  Each pointer must have an
;                                offset.  If there is no offset for a pointer, enter 0 for that
;                                array dimension.
;                   $v_Data - The data to be written.
;                   $sv_Type - (optional) The "Type" of data you intend to write at the destination
;                                address.  This is set to 'dword'(32bit(4byte) signed integer) by
;                                default.  See the help file for DllStructCreate for all types.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns the destination address.
;                   On Failure - Returns 0.
;                   @Error - 0 = No error.
;                            1 = $av_Offset is not an array.
;                            2 = Invalid $ah_Handle.
;                            3 = Failed to read from the specified process.
;                            4 = $sv_Type is not a string.
;                            5 = $sv_Type is an unknown data type.
;                            6 = Failed to allocate the memory needed for the DllStructure.
;                            7 = Error allocating memory for $sv_Type.
;                            8 = $v_Data is not in the proper format to be used with the
;                                "Type" selected for $sv_Type, or it is out of range.
;                            9 = Failed to write to the specified process.
; Author(s):        Nomad
; Note(s):          Data written is in Decimal format, unless a 'char' type is selected.
;                   Set $av_Offset like this:
;                   $av_Offset[0] = NULL (not used, doesn't matter what's entered)
;                   $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
;                   $av_Offset[2] = Offset for pointer 2
;                   etc...
;                   (The number of array dimensions determines the number of pointers)
;=================================================================================================
Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')
    
    If IsArray($av_Offset) Then
        If IsArray($ah_Handle) Then
            Local $iv_PointerCount = UBound($av_Offset) - 1
        Else
            SetError(2)
            Return 0
        EndIf
    Else
        SetError(1)
        Return 0
    EndIf
    
    Local $iv_StructData, $i
    Local $v_Buffer = DllStructCreate('dword')

    For $i = 0 to $iv_PointerCount
        If $i = $iv_PointerCount Then
            $v_Buffer = DllStructCreate($sv_Type)
            If @Error Then
                SetError(@Error + 3)
                Return 0
            EndIf
            
            DllStructSetData($v_Buffer, 1, $v_Data)
            If @Error Then
                SetError(8)
                Return 0
            EndIf
            
            $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(9)
                Return 0
            Else
                Return $iv_Address
            EndIf
        ElseIf $i = 0 Then
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(3)
                Return 0
            EndIf
            
            $iv_StructData = DllStructGetData($v_Buffer, 1)
            
        Else
            $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(3)
                Return 0
            EndIf
            
            $iv_StructData = DllStructGetData($v_Buffer, 1)
            
        EndIf
    Next

EndFunc


;===================================================================================================

; Function........:  _MemoryModuleGetBaseAddress($iPID, $sModule)
;
;===================================================================================================
Func _MemoryModuleGetBaseAddress($iPID, $sModule)
    If Not ProcessExists($iPID) Then Return SetError(1, 0, 0)

    If Not IsString($sModule) Then Return SetError(2, 0, 0)

    Local   $PSAPI = DllOpen("psapi.dll")

    ;Get Process Handle
    Local   $hProcess
    Local   $PERMISSION = BitOR(0x0002, 0x0400, 0x0008, 0x0010, 0x0020) ; CREATE_THREAD, QUERY_INFORMATION, VM_OPERATION, VM_READ, VM_WRITE

    If $iPID > 0 Then
        Local $hProcess = DllCall("kernel32.dll", "ptr", "OpenProcess", "dword", $PERMISSION, "int", 0, "dword", $iPID)
        If $hProcess[0] Then
            $hProcess = $hProcess[0]
        EndIf
    EndIf

    ;EnumProcessModules
    Local   $Modules = DllStructCreate("ptr[1024]")
    Local   $aCall = DllCall($PSAPI, "int", "EnumProcessModules", "ptr", $hProcess, "ptr", DllStructGetPtr($Modules), "dword", DllStructGetSize($Modules), "dword*", 0)
    If $aCall[4] > 0 Then
        Local   $iModnum = $aCall[4] / 4
        Local   $aTemp
        For $i = 1 To $iModnum
            $aTemp =  DllCall($PSAPI, "dword", "GetModuleBaseNameW", "ptr", $hProcess, "ptr", Ptr(DllStructGetData($Modules, 1, $i)), "wstr", "", "dword", 260)
            If $aTemp[3] = $sModule Then
                DllClose($PSAPI)
                Return Ptr(DllStructGetData($Modules, 1, $i))
            EndIf
        Next
    EndIf

    DllClose($PSAPI)
    Return SetError(-1, 0, 0)

EndFunc


;===================================================================================================
; Function:            SetPrivilege( $privilege, $bEnable )
; Description:        Enables (or disables) the $privilege on the current process
;                    (Probably) requires administrator privileges to run
;
; Author(s):        Larry (from autoitscript.com's Forum)
; Notes(s):
; http://www.autoitscript.com/forum/index.php?s=&showtopic=31248&view=findpost&p=223999
;===================================================================================================

Func SetPrivilege( $privilege, $bEnable )
    Const $TOKEN_ADJUST_PRIVILEGES = 0x0020
    Const $TOKEN_QUERY = 0x0008
    Const $SE_PRIVILEGE_ENABLED = 0x0002
    Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
    $nTokens = 1
    $LUID = DLLStructCreate("dword;int")
    If IsArray($privilege) Then    $nTokens = UBound($privilege)
    $TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
    $NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
    $hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
    $SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","hwnd",$hCurrProcess[0],   _
            "int",BitOR($TOKEN_ADJUST_PRIVILEGES,$TOKEN_QUERY),"int*",0)
    If $SP_auxret[0] Then
        $hToken = $SP_auxret[3]
        DLLStructSetData($TOKEN_PRIVILEGES,1,1)
        $nTokenIndex = 1
        While $nTokenIndex <= $nTokens
            If IsArray($privilege) Then
                $priv = $privilege[$nTokenIndex-1]
            Else
                $priv = $privilege
            EndIf
            $ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue","str","","str",$priv,   _
                    "ptr",DLLStructGetPtr($LUID))
            If $ret[0] Then
                If $bEnable Then
                    DLLStructSetData($TOKEN_PRIVILEGES,2,$SE_PRIVILEGE_ENABLED,(3 * $nTokenIndex))
                Else
                    DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
                EndIf
                DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,1),(3 * ($nTokenIndex-1)) + 1)
                DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,2),(3 * ($nTokenIndex-1)) + 2)
                DLLStructSetData($LUID,1,0)
                DLLStructSetData($LUID,2,0)
            EndIf
            $nTokenIndex += 1
        WEnd
        $ret = DLLCall("advapi32.dll","int","AdjustTokenPrivileges","hwnd",$hToken,"int",0,   _
                "ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",DllStructGetSize($NEWTOKEN_PRIVILEGES),   _
                "ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*",0)
        $f = DLLCall("kernel32.dll","int","GetLastError")
    EndIf
    $NEWTOKEN_PRIVILEGES=0
    $TOKEN_PRIVILEGES=0
    $LUID=0
    If $SP_auxret[0] = 0 Then Return 0
    $SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd",$hToken)
    If Not $ret[0] And Not $SP_auxret[0] Then Return 0
    return $ret[0]
EndFunc   ;==>SetPrivilege

#EndRegion

Code : Tout sélectionner

; Function........:  _MemoryGetBaseAddress($ah_Handle, $iHD)
;
; Description.....:  Reads the 'Allocation Base' from the open process.
;
; Parameter(s)....:  $ah_Handle - An array containing the Dll handle and the handle of the open
;                                 process as returned by _MemoryOpen().
;                    $iHD - Return type:
;                       |0 = Hex (Default)
;                       |1 = Dec
;
; Requirement(s)..:  A valid process ID.
;
; Return Value(s).:  On Success - Returns the 'allocation Base' address and sets @Error to 0.
;                    On Failure - Returns 0 and sets @Error to:
;                       |1 = Invalid $ah_Handle.
;                       |2 = Failed to find correct allocation address.
;                       |3 = Failed to read from the specified process.
;
; Author(s).......:  Nomad. Szhlopp.
; URL.............:  http://www.autoitscript.com/forum/index.php?showtopic=78834
; Note(s).........:  Go to http://Www.CheatEngine.org for the latest version of CheatEngine.
;===================================================================================================
Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)
    
    Local $iv_Address = 0x00100000
    Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')
    Local $vData
    Local $vType
    
    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf
    

    DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
    
    If Not @Error Then
        
        $vData = Hex(DllStructGetData($v_Buffer, 2))
        $vType = Hex(DllStructGetData($v_Buffer, 3))
        
        While $vType <> "00000080"
            DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
            $vData = Hex(DllStructGetData($v_Buffer, 2))
            $vType = Hex(DllStructGetData($v_Buffer, 3))
            If Hex($iv_Address) = "01000000" Then ExitLoop
            $iv_Address += 65536
            
        WEnd

        If $vType = "00000080" Then
            SetError(0)
            If $iHexDec = 1 Then
                Return Dec($vData)
            Else
                Return $vData
            EndIf
            
        Else
            SetError(2)
            Return 0
        EndIf
        
    Else
        SetError(3)
        Return 0
    EndIf
    
EndFunc

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>

#include <Array.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)


while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win32.exe')
          If $ProcessID = -1 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "WinGetProcess error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00C3DA00")
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win32.exe')


                    If @error Then
                     MsgBox(16, "ERROR", "_MemoryGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                   $FinalADDR = "0x" & Hex($BaseADDR + $StaticOffset)
                  Dim $Offset[11] = [0, Dec(0xf0), Dec(0x698), Dec(0x0), Dec(0x108), Dec(0x10), Dec(0x0), Dec(0x0), Dec(0x0), Dec(0x18), Dec(0x50)]

                   $Adress = _MemoryPointerRead($FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf

                   $Result = Hex($Adress[0])
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "FinalADDR : " & $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc


Func ProcessModuleGetBaseAddress($iProcessID, $sModuleName)

;on ouvre le processus
Local $hProcess = DllCall('kernel32.dll', _
   'HANDLE', 'OpenProcess', _
   'DWORD', 0x1F0FFF, _
   'BOOL', True, _
   'DWORD', $iProcessID)

;on recup les handles des module de notre process
Local $ModulesMax = DllStructCreate('ptr[1024]')
Local $iProcessModules = DllCall('psapi.dll', _
   'BOOL', 'EnumProcessModules', _
   'HANDLE', $hProcess[0], _
   'ptr', DllStructGetPtr($ModulesMax), _
   'DWORD', DllStructGetSize($ModulesMax), _
   'DWORD*', '')
Local $sModuleBaseName

;on parcour la liste des modules
For $i = 1 To $iProcessModules[4] / 4
  $sModuleBaseName = DllCall('psapi.dll', _
    'DWORD', 'GetModuleBaseNameW', _
    'HANDLE', $hProcess[0], _
    'ptr', DllStructGetData($ModulesMax, 1, $i), _
    'wstr', '', _
    'DWORD', 256)
    ;quand on a celui qui nous correspond on close notre Process et on retourne les valeurs en mémoire
    If $sModuleBaseName[3] = $sModuleName Then
        Local $bResult = DllCall('kernel32.dll', _
       'BOOL', 'CloseHandle', _
       'HANDLE', $hProcess)
        Return DllStructGetData($ModulesMax, 1, $i)
    EndIf
Next

EndFunc

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <Array.au3>
#include <ProcessModuleGetBaseAddress.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)


while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win64.exe')
          If $ProcessID = 0 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "ProcessExists error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00C3DA00")
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win64.exe')


                    If @error Then
                     MsgBox(16, "ERROR", "_MemoryGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                   $FinalADDR = "0x" & Hex($BaseADDR + $StaticOffset)
                  Dim $Offset[11] = [0, Dec(0xf0), Dec(0x688), Dec(0x0), Dec(0x108), Dec(0x10), Dec(0x0), Dec(0x0), Dec(0x0), Dec(0x18), Dec(0x50)]

                   $Adress = _MemoryPointerRead($FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf

                   $Result = Hex($Adress[0])
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "FinalADDR : " & $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <Array.au3>
#include <ProcessModuleGetBaseAddress64.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)

while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win64.exe')
          If $ProcessID = 0 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "ProcessExists error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00C3DA00")
                 MsgBox(0,"$StaticOffset", $StaticOffset)
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win64.exe')
                    If @error Then
                     MsgBox(16, "ERROR", "ProcessModuleGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                  MsgBox(0,"$BaseADDR", $BaseADDR)

                   $FinalADDR = Hex($BaseADDR + $StaticOffset)
                   MsgBox(0,"$FinalADDR", $FinalADDR)
                  Dim $Offset[11]
                     $Offset[0] = 0
                     $Offset[1] = Dec(158)
                     $Offset[2] = Dec(800)
                     $Offset[3] = Dec(10)
                     $Offset[4] = Dec(0)
                     $Offset[5] = Dec(0)
                     $Offset[6] = Dec(0)
                     $Offset[7] = Dec(0)
                     $Offset[8] = Dec(0)
                     $Offset[9] = Dec(18)
                     $Offset[10] = Dec(48)
                   $Address = _MemoryPointerRead("0x" & $FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf
;~                   MsgBox(0,"$Pointer1", $Pointer1[0])
;~                   $Pointer2 = _MemoryPointerRead("0x" & $Pointer1, $MemOpen, Dec(-0x18))
;~                   MsgBox(0,"$Pointer2", $Pointer2[0])
                     
                   $Result = Hex($Address[0])
                    MsgBox(0,"$Result", $Result)
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "StaticOffset : " & $StaticOffset & @CRLF _
                        & "FinalADDR : " &  $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc

Code : Tout sélectionner

Func ProcessModuleGetBaseAddress($iProcessID, $sModuleName)

;on ouvre le processus
Local $hProcess = DllCall('kernel32.dll', _
   'HANDLE', 'OpenProcess', _
   'DWORD', 0x1F0FFF, _
   'BOOL', True, _
   'DWORD', $iProcessID)

;on recup les handles des module de notre process
Local $ModulesMax = DllStructCreate('ptr[1024]')
Local $iProcessModules = DllCall('psapi.dll', _
   'BOOL', 'EnumProcessModulesEx', _
   'HANDLE', $hProcess[0], _
   'ptr', DllStructGetPtr($ModulesMax), _
   'DWORD', DllStructGetSize($ModulesMax), _
   'DWORD*', '', _
   'DWORD','3')
Local $sModuleBaseName

;on parcour la liste des modules
For $i = 1 To $iProcessModules[4] / 4
  $sModuleBaseName = DllCall('psapi.dll', _
    'DWORD', 'GetModuleBaseNameW', _
    'HANDLE', $hProcess[0], _
    'ptr', DllStructGetData($ModulesMax, 1, $i), _
    'wstr', '', _
    'DWORD', 256)
    ;quand on a celui qui nous correspond on close notre Process et on retourne les valeurs en mémoire
    If $sModuleBaseName[3] = $sModuleName Then
        Local $bResult = DllCall('kernel32.dll', _
       'BOOL', 'CloseHandle', _
       'HANDLE', $hProcess[0])
        Return DllStructGetData($ModulesMax, 1, $i)
    EndIf
Next

EndFunc
 

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <Array.au3>
#include <ProcessModuleGetBaseAddress.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)


while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win32.exe')
          If $ProcessID = 0 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "ProcessExists error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00878608")
                 MsgBox(0,"$StaticOffset", $StaticOffset)
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win32.exe')
                    If @error Then
                     MsgBox(16, "ERROR", "ProcessModuleGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                  MsgBox(0,"$BaseADDR", $BaseADDR)

                   $FinalADDR = Hex($BaseADDR + $StaticOffset)
                   MsgBox(0,"$FinalADDR", $FinalADDR)
                  Dim $Offset[6]
                     $Offset[0] = 0
                     $Offset[1] = Dec(-0x30)
                     $Offset[2] = Dec(-0x18)
                     $Offset[3] = Dec(-0x25c) 
                     $Offset[4] = Dec(-0x60)
                     $Offset[5] = Dec(-0x348)
                   $Address = _MemoryPointerRead("0x" & $FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf
;~                   MsgBox(0,"$Pointer1", $Pointer1[0])
;~                   $Pointer2 = _MemoryPointerRead("0x" & $Pointer1, $MemOpen, Dec(-0x18))
;~                   MsgBox(0,"$Pointer2", $Pointer2[0])
                     
                   $Result = Hex($Address[0])
                    MsgBox(0,"$Result", $Result)
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "StaticOffset : " & $StaticOffset & @CRLF _
                        & "FinalADDR : " &  $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc
 

Code : Tout sélectionner

Func ProcessModuleGetBaseAddress($iProcessID, $sModuleName)

;on ouvre le processus
Local $hProcess = DllCall('kernel32.dll', _
   'HANDLE', 'OpenProcess', _
   'DWORD', 0x1F0FFF, _
   'BOOL', True, _
   'DWORD', $iProcessID)

;on recup les handles des module de notre process
Local $ModulesMax = DllStructCreate('ptr[1024]')
Local $iProcessModules = DllCall('psapi.dll', _
   'BOOL', 'EnumProcessModules', _
   'HANDLE', $hProcess[0], _
   'ptr', DllStructGetPtr($ModulesMax), _
   'DWORD', DllStructGetSize($ModulesMax), _
   'DWORD*', '')
Local $sModuleBaseName

;on parcour la liste des modules
For $i = 1 To $iProcessModules[4] / 4
  $sModuleBaseName = DllCall('psapi.dll', _
    'DWORD', 'GetModuleBaseNameW', _
    'HANDLE', $hProcess[0], _
    'ptr', DllStructGetData($ModulesMax, 1, $i), _
    'wstr', '', _
    'DWORD', 256)
    ;quand on a celui qui nous correspond on close notre Process et on retourne les valeurs en mémoire
    If $sModuleBaseName[3] = $sModuleName Then
        Local $bResult = DllCall('kernel32.dll', _
       'BOOL', 'CloseHandle', _
       'HANDLE', $hProcess)
        Return DllStructGetData($ModulesMax, 1, $i)
    EndIf
Next

EndFun

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>

#include <Array.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)

start()

while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('chrome.exe')
          If $ProcessID = -1 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "WinGetProcess error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00C3DA00")
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'chrome.exe')


                    If @error Then
                     MsgBox(16, "ERROR", "_MemoryGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                   $FinalADDR = "0x" & Hex($BaseADDR + $StaticOffset)
                  Dim $Offset[11] = [0, Dec(0xf0), Dec(0x698), Dec(0x0), Dec(0x108), Dec(0x10), Dec(0x0), Dec(0x0), Dec(0x0), Dec(0x18), Dec(0x50)]

                   $Adress = _MemoryPointerRead($FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf

                   $Result = Hex($Adress[0])
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "FinalADDR : " & $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc


Func ProcessModuleGetBaseAddress($iProcessID, $sModuleName)

;on ouvre le processus
Local $hProcess = DllCall('kernel32.dll', _
   'HANDLE', 'OpenProcess', _
   'DWORD', 0x1F0FFF, _
   'BOOL', True, _
   'DWORD', $iProcessID)

;on recup les handles des module de notre process
Local $ModulesMax = DllStructCreate('ptr[1024]')
Local $iProcessModules = DllCall('psapi.dll', _
   'BOOL', 'EnumProcessModulesEx', _
   'HANDLE', $hProcess[0], _
   'ptr', DllStructGetPtr($ModulesMax), _
   'DWORD', DllStructGetSize($ModulesMax), _
   'DWORD*', '', _
   'DWORD','3')
Local $sModuleBaseName

;on parcour la liste des modules
For $i = 1 To $iProcessModules[4] / 4
  $sModuleBaseName = DllCall('psapi.dll', _
    'DWORD', 'GetModuleBaseNameW', _
    'HANDLE', $hProcess[0], _
    'ptr', DllStructGetData($ModulesMax, 1, $i), _
    'wstr', '', _
    'DWORD', 256)
    ;quand on a celui qui nous correspond on close notre Process et on retourne les valeurs en mémoire
    If $sModuleBaseName[3] = $sModuleName Then
        Local $bResult = DllCall('kernel32.dll', _
       'BOOL', 'CloseHandle', _
       'HANDLE', $hProcess[0])
        Return DllStructGetData($ModulesMax, 1, $i)
    EndIf
Next

EndFunc
 

Code : Tout sélectionner

#include-once
#region _Memory
;==================================================================================
; AutoIt Version:   3.1.127 (beta)
; Language:   English
; Platform:   All Windows
; Author:         Nomad
; Requirements:  These functions will only work with beta.
;==================================================================================
; Credits:  wOuter - These functions are based on his original _Mem() functions.
;         But they are easier to comprehend and more reliable.  These
;         functions are in no way a direct copy of his functions.  His
;         functions only provided a foundation from which these evolved.
;==================================================================================
;
; Functions:
;
;==================================================================================
; Function:   _MemoryOpen($iv_Pid[, $iv_DesiredAccess[, $iv_InheritHandle]])
; Description:    Opens a process and enables all possible access rights to the
;               process.  The Process ID of the process is used to specify which
;               process to open.  You must call this function before calling
;               _MemoryClose(), _MemoryRead(), or _MemoryWrite().
; Parameter(s):  $iv_Pid - The Process ID of the program you want to open.
;               $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which
;                              enables all possible access rights to the
;                              process specified by the Process ID.
;               $iv_InheritHandle - (optional) If this value is TRUE, all processes
;                              created by this process will inherit the access
;                              handle.  Set to 1 (TRUE) by default.  Set to 0
;                              if you want it FALSE.
; Requirement(s):   None.
; Return Value(s):  On Success - Returns an array containing the Dll handle and an
;                         open handle to the specified process.
;               On Failure - Returns 0
;               @Error - 0 = No error.
;                      1 = Invalid $iv_Pid.
;                      2 = Failed to open Kernel32.dll.
;                      3 = Failed to open the specified process.
; Author(s):        Nomad
; Note(s):
;==================================================================================
Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1)

    If Not ProcessExists($iv_Pid) Then
        SetError(1)
        Return 0
    EndIf

    Local $ah_Handle[2] = [DllOpen('kernel32.dll')]

    If @Error Then
        SetError(2)
        Return 0
    EndIf

    Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid)

    If @Error Then
        DllClose($ah_Handle[0])
        SetError(3)
        Return 0
    EndIf

    $ah_Handle[1] = $av_OpenProcess[0]

    Return $ah_Handle

EndFunc

;==================================================================================
; Function:   _MemoryRead($iv_Address, $ah_Handle[, $sv_Type])
; Description:    Reads the value located in the memory address specified.
; Parameter(s):  $iv_Address - The memory address you want to read from. It must
;                          be in hex format (0x00000000).
;               $ah_Handle - An array containing the Dll handle and the handle
;                         of the open process as returned by _MemoryOpen().
;               $sv_Type - (optional) The "Type" of value you intend to read.
;                        This is set to 'dword'(32bit(4byte) signed integer)
;                        by default.  See the help file for DllStructCreate
;                        for all types.  An example: If you want to read a
;                        word that is 15 characters in length, you would use
;                        'char[16]' since a 'char' is 8 bits (1 byte) in size.
; Return Value(s):  On Success - Returns the value located at the specified address.
;               On Failure - Returns 0
;               @Error - 0 = No error.
;                      1 = Invalid $ah_Handle.
;                      2 = $sv_Type was not a string.
;                      3 = $sv_Type is an unknown data type.
;                      4 = Failed to allocate the memory needed for the DllStructure.
;                      5 = Error allocating memory for $sv_Type.
;                      6 = Failed to read from the specified process.
; Author(s):        Nomad
; Note(s):      Values returned are in Decimal format, unless specified as a
;               'char' type, then they are returned in ASCII format.  Also note
;               that size ('char[size]') for all 'char' types should be 1
;               greater than the actual size.
;==================================================================================
Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')

    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf

    Local $v_Buffer = DllStructCreate($sv_Type)

    If @Error Then
        SetError(@Error + 1)
        Return 0
    EndIf

    DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

    If Not @Error Then
        Local $v_Value = DllStructGetData($v_Buffer, 1)
        Return $v_Value
    Else
        SetError(6)
        Return 0
    EndIf

EndFunc

;==================================================================================
; Function:   _MemoryWrite($iv_Address, $ah_Handle, $v_Data[, $sv_Type])
; Description:    Writes data to the specified memory address.
; Parameter(s):  $iv_Address - The memory address which you want to write to.
;                          It must be in hex format (0x00000000).
;               $ah_Handle - An array containing the Dll handle and the handle
;                         of the open process as returned by _MemoryOpen().
;               $v_Data - The data to be written.
;               $sv_Type - (optional) The "Type" of value you intend to write.
;                        This is set to 'dword'(32bit(4byte) signed integer)
;                        by default.  See the help file for DllStructCreate
;                        for all types.  An example: If you want to write a
;                        word that is 15 characters in length, you would use
;                        'char[16]' since a 'char' is 8 bits (1 byte) in size.
; Return Value(s):  On Success - Returns 1
;               On Failure - Returns 0
;               @Error - 0 = No error.
;                      1 = Invalid $ah_Handle.
;                      2 = $sv_Type was not a string.
;                      3 = $sv_Type is an unknown data type.
;                      4 = Failed to allocate the memory needed for the DllStructure.
;                      5 = Error allocating memory for $sv_Type.
;                      6 = $v_Data is not in the proper format to be used with the
;                         "Type" selected for $sv_Type, or it is out of range.
;                      7 = Failed to write to the specified process.
; Author(s):        Nomad
; Note(s):      Values sent must be in Decimal format, unless specified as a
;               'char' type, then they must be in ASCII format.  Also note
;               that size ('char[size]') for all 'char' types should be 1
;               greater than the actual size.
;==================================================================================
Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')

    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf

    Local $v_Buffer = DllStructCreate($sv_Type)

    If @Error Then
        SetError(@Error + 1)
        Return 0
    Else
        DllStructSetData($v_Buffer, 1, $v_Data)
        If @Error Then
            SetError(6)
            Return 0
        EndIf
    EndIf

    DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

    If Not @Error Then
        Return 1
    Else
        SetError(7)
        Return 0
    EndIf

EndFunc

;==================================================================================
; Function:   _MemoryClose($ah_Handle)
; Description:    Closes the process handle opened by using _MemoryOpen().
; Parameter(s):  $ah_Handle - An array containing the Dll handle and the handle
;                         of the open process as returned by _MemoryOpen().
; Return Value(s):  On Success - Returns 1
;               On Failure - Returns 0
;               @Error - 0 = No error.
;                      1 = Invalid $ah_Handle.
;                      2 = Unable to close the process handle.
; Author(s):        Nomad
; Note(s):
;==================================================================================
Func _MemoryClose($ah_Handle)

    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf

    DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
    If Not @Error Then
        DllClose($ah_Handle[0])
        Return 1
    Else
        DllClose($ah_Handle[0])
        SetError(2)
        Return 0
    EndIf

EndFunc

Func SetPrivilege( $privilege, $bEnable )
    Const $MY_TOKEN_ADJUST_PRIVILEGES = 0x0020
    Const $MY_TOKEN_QUERY = 0x0008
    Const $MY_SE_PRIVILEGE_ENABLED = 0x0002
    Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
    $nTokens = 1
    $LUID = DLLStructCreate("dword;int")
    If IsArray($privilege) Then    $nTokens = UBound($privilege)
    $TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
    $NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
    $hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
    $SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","hwnd",$hCurrProcess[0],   _
            "int",BitOR($MY_TOKEN_ADJUST_PRIVILEGES,$MY_TOKEN_QUERY),"int*",0)
    If $SP_auxret[0] Then
        $hToken = $SP_auxret[3]
        DLLStructSetData($TOKEN_PRIVILEGES,1,1)
        $nTokenIndex = 1
        While $nTokenIndex <= $nTokens
            If IsArray($privilege) Then
                $priv = $privilege[$nTokenIndex-1]
            Else
                $priv = $privilege
            EndIf
            $ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue","str","","str",$priv,   _
                    "ptr",DLLStructGetPtr($LUID))
            If $ret[0] Then
                If $bEnable Then
                    DLLStructSetData($TOKEN_PRIVILEGES,2,$MY_SE_PRIVILEGE_ENABLED,(3 * $nTokenIndex))
                Else
                    DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
                EndIf
                DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,1),(3 * ($nTokenIndex-1)) + 1)
                DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,2),(3 * ($nTokenIndex-1)) + 2)
                DLLStructSetData($LUID,1,0)
                DLLStructSetData($LUID,2,0)
            EndIf
            $nTokenIndex += 1
        WEnd
        $ret = DLLCall("advapi32.dll","int","AdjustTokenPrivileges","hwnd",$hToken,"int",0,   _
                "ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",DllStructGetSize($NEWTOKEN_PRIVILEGES),   _
                "ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*",0)
        $f = DLLCall("kernel32.dll","int","GetLastError")
    EndIf
    $NEWTOKEN_PRIVILEGES=0
    $TOKEN_PRIVILEGES=0
    $LUID=0
    If $SP_auxret[0] = 0 Then Return 0
    $SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd",$hToken)
    If Not $ret[0] And Not $SP_auxret[0] Then Return 0
    return $ret[0]
EndFunc   ;==>SetPrivilege

;=================================================================================================
; Function:   _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset[, $sv_Type])
; Description:    Reads a chain of pointers and returns an array containing the destination
;               address and the data at the address.
; Parameter(s):  $iv_Address - The static memory address you want to start at. It must be in
;                          hex format (0x00000000).
;               $ah_Handle - An array containing the Dll handle and the handle of the open
;                         process as returned by _MemoryOpen().
;               $av_Offset - An array of offsets for the pointers.  Each pointer must have an
;                         offset.  If there is no offset for a pointer, enter 0 for that
;                         array dimension.
;               $sv_Type - (optional) The "Type" of data you intend to read at the destination
;                         address.  This is set to 'dword'(32bit(4byte) signed integer) by
;                         default.  See the help file for DllStructCreate for all types.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns an array containing the destination address and the value
;                         located at the address.
;               On Failure - Returns 0
;               @Error - 0 = No error.
;                      1 = $av_Offset is not an array.
;                      2 = Invalid $ah_Handle.
;                      3 = $sv_Type is not a string.
;                      4 = $sv_Type is an unknown data type.
;                      5 = Failed to allocate the memory needed for the DllStructure.
;                      6 = Error allocating memory for $sv_Type.
;                      7 = Failed to read from the specified process.
; Author(s):        Nomad
; Note(s):      Values returned are in Decimal format, unless a 'char' type is selected.
;               Set $av_Offset like this:
;               $av_Offset[0] = NULL (not used)
;               $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
;               $av_Offset[2] = Offset for pointer 2
;               etc...
;               (The number of array dimensions determines the number of pointers)
;=================================================================================================
Func _MemoryPointerRead($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')

    If IsArray($av_Offset) Then
        If IsArray($ah_Handle) Then
            Local $iv_PointerCount = UBound($av_Offset) - 1
        Else
            SetError(2)
            Return 0
        EndIf
    Else
        SetError(1)
        Return 0
    EndIf

    Local $iv_Data[2], $i
    Local $v_Buffer = DllStructCreate('dword')

    For $i = 0 To $iv_PointerCount

        If $i = $iv_PointerCount Then
            $v_Buffer = DllStructCreate($sv_Type)
            If @error Then
                SetError(@error + 2)
                Return 0
            EndIf

            $iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        ElseIf $i = 0 Then
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        Else
            $iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @error Then
                SetError(7)
                Return 0
            EndIf

            $iv_Data[1] = DllStructGetData($v_Buffer, 1)

        EndIf

    Next

    $iv_Data[0] = $iv_Address

    Return $iv_Data

EndFunc   ;==>_MemoryPointerRead



;=================================================================================================
; Function:         _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data[, $sv_Type])
; Description:      Reads a chain of pointers and writes the data to the destination address.
; Parameter(s):     $iv_Address - The static memory address you want to start at. It must be in
;                                 hex format (0x00000000).
;                   $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $av_Offset - An array of offsets for the pointers.  Each pointer must have an
;                                offset.  If there is no offset for a pointer, enter 0 for that
;                                array dimension.
;                   $v_Data - The data to be written.
;                   $sv_Type - (optional) The "Type" of data you intend to write at the destination
;                                address.  This is set to 'dword'(32bit(4byte) signed integer) by
;                                default.  See the help file for DllStructCreate for all types.
; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
; Return Value(s):  On Success - Returns the destination address.
;                   On Failure - Returns 0.
;                   @Error - 0 = No error.
;                            1 = $av_Offset is not an array.
;                            2 = Invalid $ah_Handle.
;                            3 = Failed to read from the specified process.
;                            4 = $sv_Type is not a string.
;                            5 = $sv_Type is an unknown data type.
;                            6 = Failed to allocate the memory needed for the DllStructure.
;                            7 = Error allocating memory for $sv_Type.
;                            8 = $v_Data is not in the proper format to be used with the
;                                "Type" selected for $sv_Type, or it is out of range.
;                            9 = Failed to write to the specified process.
; Author(s):        Nomad
; Note(s):          Data written is in Decimal format, unless a 'char' type is selected.
;                   Set $av_Offset like this:
;                   $av_Offset[0] = NULL (not used, doesn't matter what's entered)
;                   $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
;                   $av_Offset[2] = Offset for pointer 2
;                   etc...
;                   (The number of array dimensions determines the number of pointers)
;=================================================================================================

Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')

    If IsArray($av_Offset) Then
        If IsArray($ah_Handle) Then
            Local $iv_PointerCount = UBound($av_Offset) - 1
        Else
            SetError(2)
            Return 0
        EndIf
    Else
        SetError(1)
        Return 0
    EndIf

    Local $iv_StructData, $i
    Local $v_Buffer = DllStructCreate('dword')

    For $i = 0 to $iv_PointerCount
        If $i = $iv_PointerCount Then
            $v_Buffer = DllStructCreate($sv_Type)
            If @Error Then
                SetError(@Error + 3)
                Return 0
            EndIf

            DllStructSetData($v_Buffer, 1, $v_Data)
            If @Error Then
                SetError(8)
                Return 0
            EndIf

            $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(9)
                Return 0
            Else
                Return $iv_Address
            EndIf
        ElseIf $i = 0 Then
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(3)
                Return 0
            EndIf

            $iv_StructData = DllStructGetData($v_Buffer, 1)

        Else
            $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
            DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
            If @Error Then
                SetError(3)
                Return 0
            EndIf

            $iv_StructData = DllStructGetData($v_Buffer, 1)

        EndIf
    Next

EndFunc


;===================================================================================================
; Function........:  _MemoryGetBaseAddress($ah_Handle, $iHD)
;
; Description.....:  Reads the 'Allocation Base' from the open process.
;
; Parameter(s)....:  $ah_Handle - An array containing the Dll handle and the handle of the open
;                                process as returned by _MemoryOpen().
;                   $iHD - Return type:
;                      |0 = Hex (Default)
;                      |1 = Dec
;
; Requirement(s)..:  A valid process ID.
;
; Return Value(s).:  On Success - Returns the 'allocation Base' address and sets @Error to 0.
;                   On Failure - Returns 0 and sets @Error to:
;                      |1 = Invalid $ah_Handle.
;                      |2 = Failed to find correct allocation address.
;                      |3 = Failed to read from the specified process.
;
; Author(s).......:  Nomad. Szhlopp.
; URL.............:  <a href='http://www.autoitscript.com/forum/index.php?showtopic=78834' class='bbc_url' title=''>http://www.autoitscript.com/forum/index.php?showtopic=78834</a>
; Note(s).........:  Go to http://Www.CheatEngine.org for the latest version of CheatEngine.
;===================================================================================================
Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)

    Local $iv_Address = 0x00100000
    Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')
    Local $vData
    Local $vType

    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf

    DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

    If Not @Error Then

        $vData = Hex(Int(DllStructGetData($v_Buffer, 2)))
        $vType = Hex(Int(DllStructGetData($v_Buffer, 3)))

        While $vType <> "00000080"
            DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
            $vData = Hex(Int(DllStructGetData($v_Buffer, 2)))
            $vType = Hex(Int(DllStructGetData($v_Buffer, 3)))
            If Hex($iv_Address) = "01000000" Then ExitLoop
            $iv_Address += 65536

        WEnd
        If $vType = "00000080" Then
            SetError(0)
            If $iHexDec = 1 Then
                Return Dec($vData)
            Else
                Return $vData
            EndIf

        Else
            SetError(2)
            Return 0
        EndIf

    Else
        SetError(3)
        Return 0
    EndIf

EndFunc
#EndRegion
 

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <Array.au3>
#include <ProcessModuleGetBaseAddress64.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)

while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win64.exe')
          If $ProcessID = 0 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "ProcessExists error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00C3DA00")
                 MsgBox(0,"$StaticOffset", $StaticOffset)
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win64.exe')
                    If @error Then
                     MsgBox(16, "ERROR", "ProcessModuleGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                  MsgBox(0,"$BaseADDR", $BaseADDR)

                   $FinalADDR = Hex($BaseADDR + $StaticOffset)
                   MsgBox(0,"$FinalADDR", $FinalADDR)
                  Dim $Offset[11]
                     $Offset[0] = 0
                     $Offset[1] = Dec(158)
                     $Offset[2] = Dec(800)
                     $Offset[3] = Dec(10)
                     $Offset[4] = Dec(0)
                     $Offset[5] = Dec(0)
                     $Offset[6] = Dec(0)
                     $Offset[7] = Dec(0)
                     $Offset[8] = Dec(0)
                     $Offset[9] = Dec(18)
                     $Offset[10] = Dec(50)
                   $Address = _MemoryPointerRead("0x" & $FinalADDR, $MemOpen, $Offset)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                     EndIf
;~                   MsgBox(0,"$Pointer1", $Pointer1[0])
;~                   $Pointer2 = _MemoryPointerRead("0x" & $Pointer1, $MemOpen, Dec(-0x18))
;~                   MsgBox(0,"$Pointer2", $Pointer2[0])
                     
                   $Result = Hex($Address[0])
                    MsgBox(0,"$Result", $Result)
                   $Value = _MemoryRead('0x' & $Result, $MemOpen)
                     If @error Then
                        MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                     EndIf

                  ToolTip("PId : " & $ProcessID & @CRLF _
                        & "BaseADDR : " & $BaseADDR & @CRLF _
                        & "StaticOffset : " & $StaticOffset & @CRLF _
                        & "FinalADDR : " &  $FinalADDR & @CRLF _
                        & "Result : " & $Result & @CRLF _
                        & "MaxClients : " & $Value, 0, 0)
                        Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc

Code : Tout sélectionner

  #include-once
    #region _Memory
    ;==================================================================================
    ; AutoIt Version:   3.1.127 (beta)
    ; Language:   English
    ; Platform:   All Windows
    ; Author:         Nomad
    ; Requirements:  These functions will only work with beta.
    ;==================================================================================
    ; Credits:  wOuter - These functions are based on his original _Mem() functions.
    ;         But they are easier to comprehend and more reliable.  These
    ;         functions are in no way a direct copy of his functions.  His
    ;         functions only provided a foundation from which these evolved.
    ;==================================================================================
    ;
    ; Functions:
    ;
    ;==================================================================================
    ; Function:   _MemoryOpen($iv_Pid[, $iv_DesiredAccess[, $iv_InheritHandle]])
    ; Description:    Opens a process and enables all possible access rights to the
    ;               process.  The Process ID of the process is used to specify which
    ;               process to open.  You must call this function before calling
    ;               _MemoryClose(), _MemoryRead(), or _MemoryWrite().
    ; Parameter(s):  $iv_Pid - The Process ID of the program you want to open.
    ;               $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which
    ;                              enables all possible access rights to the
    ;                              process specified by the Process ID.
    ;               $iv_InheritHandle - (optional) If this value is TRUE, all processes
    ;                              created by this process will inherit the access
    ;                              handle.  Set to 1 (TRUE) by default.  Set to 0
    ;                              if you want it FALSE.
    ; Requirement(s):   None.
    ; Return Value(s):  On Success - Returns an array containing the Dll handle and an
    ;                         open handle to the specified process.
    ;               On Failure - Returns 0
    ;               @Error - 0 = No error.
    ;                      1 = Invalid $iv_Pid.
    ;                      2 = Failed to open Kernel32.dll.
    ;                      3 = Failed to open the specified process.
    ; Author(s):        Nomad
    ; Note(s):
    ;==================================================================================
    Func _MemoryOpen($iv_Pid, $iv_DesiredAccess = 0x1F0FFF, $iv_InheritHandle = 1)

        If Not ProcessExists($iv_Pid) Then
            SetError(1)
            Return 0
        EndIf

        Local $ah_Handle[2] = [DllOpen('kernel32.dll')]

        If @Error Then
            SetError(2)
            Return 0
        EndIf

        Local $av_OpenProcess = DllCall($ah_Handle[0], 'int', 'OpenProcess', 'int', $iv_DesiredAccess, 'int', $iv_InheritHandle, 'int', $iv_Pid)

        If @Error Then
            DllClose($ah_Handle[0])
            SetError(3)
            Return 0
        EndIf

        $ah_Handle[1] = $av_OpenProcess[0]

        Return $ah_Handle

    EndFunc

    ;==================================================================================
    ; Function:   _MemoryRead($iv_Address, $ah_Handle[, $sv_Type])
    ; Description:    Reads the value located in the memory address specified.
    ; Parameter(s):  $iv_Address - The memory address you want to read from. It must
    ;                          be in hex format (0x00000000).
    ;               $ah_Handle - An array containing the Dll handle and the handle
    ;                         of the open process as returned by _MemoryOpen().
    ;               $sv_Type - (optional) The "Type" of value you intend to read.
    ;                        This is set to 'dword'(32bit(4byte) signed integer)
    ;                        by default.  See the help file for DllStructCreate
    ;                        for all types.  An example: If you want to read a
    ;                        word that is 15 characters in length, you would use
    ;                        'char[16]' since a 'char' is 8 bits (1 byte) in size.
    ; Return Value(s):  On Success - Returns the value located at the specified address.
    ;               On Failure - Returns 0
    ;               @Error - 0 = No error.
    ;                      1 = Invalid $ah_Handle.
    ;                      2 = $sv_Type was not a string.
    ;                      3 = $sv_Type is an unknown data type.
    ;                      4 = Failed to allocate the memory needed for the DllStructure.
    ;                      5 = Error allocating memory for $sv_Type.
    ;                      6 = Failed to read from the specified process.
    ; Author(s):        Nomad
    ; Note(s):      Values returned are in Decimal format, unless specified as a
    ;               'char' type, then they are returned in ASCII format.  Also note
    ;               that size ('char[size]') for all 'char' types should be 1
    ;               greater than the actual size.
    ;==================================================================================
    Func _MemoryRead($iv_Address, $ah_Handle, $sv_Type = 'dword')

        If Not IsArray($ah_Handle) Then
            SetError(1)
            Return 0
        EndIf

        Local $v_Buffer = DllStructCreate($sv_Type)

        If @Error Then
            SetError(@Error + 1)
            Return 0
        EndIf

        DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

        If Not @Error Then
            Local $v_Value = DllStructGetData($v_Buffer, 1)
            Return $v_Value
        Else
            SetError(6)
            Return 0
        EndIf

    EndFunc

    ;==================================================================================
    ; Function:   _MemoryWrite($iv_Address, $ah_Handle, $v_Data[, $sv_Type])
    ; Description:    Writes data to the specified memory address.
    ; Parameter(s):  $iv_Address - The memory address which you want to write to.
    ;                          It must be in hex format (0x00000000).
    ;               $ah_Handle - An array containing the Dll handle and the handle
    ;                         of the open process as returned by _MemoryOpen().
    ;               $v_Data - The data to be written.
    ;               $sv_Type - (optional) The "Type" of value you intend to write.
    ;                        This is set to 'dword'(32bit(4byte) signed integer)
    ;                        by default.  See the help file for DllStructCreate
    ;                        for all types.  An example: If you want to write a
    ;                        word that is 15 characters in length, you would use
    ;                        'char[16]' since a 'char' is 8 bits (1 byte) in size.
    ; Return Value(s):  On Success - Returns 1
    ;               On Failure - Returns 0
    ;               @Error - 0 = No error.
    ;                      1 = Invalid $ah_Handle.
    ;                      2 = $sv_Type was not a string.
    ;                      3 = $sv_Type is an unknown data type.
    ;                      4 = Failed to allocate the memory needed for the DllStructure.
    ;                      5 = Error allocating memory for $sv_Type.
    ;                      6 = $v_Data is not in the proper format to be used with the
    ;                         "Type" selected for $sv_Type, or it is out of range.
    ;                      7 = Failed to write to the specified process.
    ; Author(s):        Nomad
    ; Note(s):      Values sent must be in Decimal format, unless specified as a
    ;               'char' type, then they must be in ASCII format.  Also note
    ;               that size ('char[size]') for all 'char' types should be 1
    ;               greater than the actual size.
    ;==================================================================================
    Func _MemoryWrite($iv_Address, $ah_Handle, $v_Data, $sv_Type = 'dword')

        If Not IsArray($ah_Handle) Then
            SetError(1)
            Return 0
        EndIf

        Local $v_Buffer = DllStructCreate($sv_Type)

        If @Error Then
            SetError(@Error + 1)
            Return 0
        Else
            DllStructSetData($v_Buffer, 1, $v_Data)
            If @Error Then
                SetError(6)
                Return 0
            EndIf
        EndIf

        DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')

        If Not @Error Then
            Return 1
        Else
            SetError(7)
            Return 0
        EndIf

    EndFunc

    ;==================================================================================
    ; Function:   _MemoryClose($ah_Handle)
    ; Description:    Closes the process handle opened by using _MemoryOpen().
    ; Parameter(s):  $ah_Handle - An array containing the Dll handle and the handle
    ;                         of the open process as returned by _MemoryOpen().
    ; Return Value(s):  On Success - Returns 1
    ;               On Failure - Returns 0
    ;               @Error - 0 = No error.
    ;                      1 = Invalid $ah_Handle.
    ;                      2 = Unable to close the process handle.
    ; Author(s):        Nomad
    ; Note(s):
    ;==================================================================================
    Func _MemoryClose($ah_Handle)

        If Not IsArray($ah_Handle) Then
            SetError(1)
            Return 0
        EndIf

        DllCall($ah_Handle[0], 'int', 'CloseHandle', 'int', $ah_Handle[1])
        If Not @Error Then
            DllClose($ah_Handle[0])
            Return 1
        Else
            DllClose($ah_Handle[0])
            SetError(2)
            Return 0
        EndIf

    EndFunc

    Func SetPrivilege( $privilege, $bEnable )
        Const $MY_TOKEN_ADJUST_PRIVILEGES = 0x0020
        Const $MY_TOKEN_QUERY = 0x0008
        Const $MY_SE_PRIVILEGE_ENABLED = 0x0002
        Local $hToken, $SP_auxret, $SP_ret, $hCurrProcess, $nTokens, $nTokenIndex, $priv
        $nTokens = 1
        $LUID = DLLStructCreate("dword;int")
        If IsArray($privilege) Then    $nTokens = UBound($privilege)
        $TOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
        $NEWTOKEN_PRIVILEGES = DLLStructCreate("dword;dword[" & (3 * $nTokens) & "]")
        $hCurrProcess = DLLCall("kernel32.dll","hwnd","GetCurrentProcess")
        $SP_auxret = DLLCall("advapi32.dll","int","OpenProcessToken","hwnd",$hCurrProcess[0],   _
                "int",BitOR($MY_TOKEN_ADJUST_PRIVILEGES,$MY_TOKEN_QUERY),"int*",0)
        If $SP_auxret[0] Then
            $hToken = $SP_auxret[3]
            DLLStructSetData($TOKEN_PRIVILEGES,1,1)
            $nTokenIndex = 1
            While $nTokenIndex <= $nTokens
                If IsArray($privilege) Then
                    $priv = $privilege[$nTokenIndex-1]
                Else
                    $priv = $privilege
                EndIf
                $ret = DLLCall("advapi32.dll","int","LookupPrivilegeValue","str","","str",$priv,   _
                        "ptr",DLLStructGetPtr($LUID))
                If $ret[0] Then
                    If $bEnable Then
                        DLLStructSetData($TOKEN_PRIVILEGES,2,$MY_SE_PRIVILEGE_ENABLED,(3 * $nTokenIndex))
                    Else
                        DLLStructSetData($TOKEN_PRIVILEGES,2,0,(3 * $nTokenIndex))
                    EndIf
                    DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,1),(3 * ($nTokenIndex-1)) + 1)
                    DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,2),(3 * ($nTokenIndex-1)) + 2)
                    DLLStructSetData($LUID,1,0)
                    DLLStructSetData($LUID,2,0)
                EndIf
                $nTokenIndex += 1
            WEnd
            $ret = DLLCall("advapi32.dll","int","AdjustTokenPrivileges","hwnd",$hToken,"int",0,   _
                    "ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",DllStructGetSize($NEWTOKEN_PRIVILEGES),   _
                    "ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int*",0)
            $f = DLLCall("kernel32.dll","int","GetLastError")
        EndIf
        $NEWTOKEN_PRIVILEGES=0
        $TOKEN_PRIVILEGES=0
        $LUID=0
        If $SP_auxret[0] = 0 Then Return 0
        $SP_auxret = DLLCall("kernel32.dll","int","CloseHandle","hwnd",$hToken)
        If Not $ret[0] And Not $SP_auxret[0] Then Return 0
        return $ret[0]
    EndFunc   ;==>SetPrivilege

    ;=================================================================================================
    ; Function:   _MemoryPointerRead ($iv_Address, $ah_Handle, $av_Offset[, $sv_Type])
    ; Description:    Reads a chain of pointers and returns an array containing the destination
    ;               address and the data at the address.
    ; Parameter(s):  $iv_Address - The static memory address you want to start at. It must be in
    ;                          hex format (0x00000000).
    ;               $ah_Handle - An array containing the Dll handle and the handle of the open
    ;                         process as returned by _MemoryOpen().
    ;               $av_Offset - An array of offsets for the pointers.  Each pointer must have an
    ;                         offset.  If there is no offset for a pointer, enter 0 for that
    ;                         array dimension.
    ;               $sv_Type - (optional) The "Type" of data you intend to read at the destination
    ;                         address.  This is set to 'dword'(32bit(4byte) signed integer) by
    ;                         default.  See the help file for DllStructCreate for all types.
    ; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
    ; Return Value(s):  On Success - Returns an array containing the destination address and the value
    ;                         located at the address.
    ;               On Failure - Returns 0
    ;               @Error - 0 = No error.
    ;                      1 = $av_Offset is not an array.
    ;                      2 = Invalid $ah_Handle.
    ;                      3 = $sv_Type is not a string.
    ;                      4 = $sv_Type is an unknown data type.
    ;                      5 = Failed to allocate the memory needed for the DllStructure.
    ;                      6 = Error allocating memory for $sv_Type.
    ;                      7 = Failed to read from the specified process.
    ; Author(s):        Nomad
    ; Note(s):      Values returned are in Decimal format, unless a 'char' type is selected.
    ;               Set $av_Offset like this:
    ;               $av_Offset[0] = NULL (not used)
    ;               $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
    ;               $av_Offset[2] = Offset for pointer 2
    ;               etc...
    ;               (The number of array dimensions determines the number of pointers)
    ;=================================================================================================
    Func _MemoryPointerRead($iv_Address, $ah_Handle, $av_Offset, $sv_Type = 'dword')

        If IsArray($av_Offset) Then
            If IsArray($ah_Handle) Then
                Local $iv_PointerCount = UBound($av_Offset) - 1
            Else
                SetError(2)
                Return 0
            EndIf
        Else
            SetError(1)
            Return 0
        EndIf

        Local $iv_Data[2], $i
        Local $v_Buffer = DllStructCreate('dword')

        For $i = 0 To $iv_PointerCount

            If $i = $iv_PointerCount Then
                $v_Buffer = DllStructCreate($sv_Type)
                If @error Then
                    SetError(@error + 2)
                    Return 0
                EndIf

                $iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
                DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @error Then
                    SetError(7)
                    Return 0
                EndIf

                $iv_Data[1] = DllStructGetData($v_Buffer, 1)

            ElseIf $i = 0 Then
                DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @error Then
                    SetError(7)
                    Return 0
                EndIf

                $iv_Data[1] = DllStructGetData($v_Buffer, 1)

            Else
                $iv_Address = '0x' & Hex($iv_Data[1] + $av_Offset[$i])
                DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @error Then
                    SetError(7)
                    Return 0
                EndIf

                $iv_Data[1] = DllStructGetData($v_Buffer, 1)

            EndIf

        Next

        $iv_Data[0] = $iv_Address

        Return $iv_Data

    EndFunc   ;==>_MemoryPointerRead



    ;=================================================================================================
    ; Function:         _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data[, $sv_Type])
    ; Description:      Reads a chain of pointers and writes the data to the destination address.
    ; Parameter(s):     $iv_Address - The static memory address you want to start at. It must be in
    ;                                 hex format (0x00000000).
    ;                   $ah_Handle - An array containing the Dll handle and the handle of the open
    ;                                process as returned by _MemoryOpen().
    ;                   $av_Offset - An array of offsets for the pointers.  Each pointer must have an
    ;                                offset.  If there is no offset for a pointer, enter 0 for that
    ;                                array dimension.
    ;                   $v_Data - The data to be written.
    ;                   $sv_Type - (optional) The "Type" of data you intend to write at the destination
    ;                                address.  This is set to 'dword'(32bit(4byte) signed integer) by
    ;                                default.  See the help file for DllStructCreate for all types.
    ; Requirement(s):   The $ah_Handle returned from _MemoryOpen.
    ; Return Value(s):  On Success - Returns the destination address.
    ;                   On Failure - Returns 0.
    ;                   @Error - 0 = No error.
    ;                            1 = $av_Offset is not an array.
    ;                            2 = Invalid $ah_Handle.
    ;                            3 = Failed to read from the specified process.
    ;                            4 = $sv_Type is not a string.
    ;                            5 = $sv_Type is an unknown data type.
    ;                            6 = Failed to allocate the memory needed for the DllStructure.
    ;                            7 = Error allocating memory for $sv_Type.
    ;                            8 = $v_Data is not in the proper format to be used with the
    ;                                "Type" selected for $sv_Type, or it is out of range.
    ;                            9 = Failed to write to the specified process.
    ; Author(s):        Nomad
    ; Note(s):          Data written is in Decimal format, unless a 'char' type is selected.
    ;                   Set $av_Offset like this:
    ;                   $av_Offset[0] = NULL (not used, doesn't matter what's entered)
    ;                   $av_Offset[1] = Offset for pointer 1 (all offsets must be in Decimal)
    ;                   $av_Offset[2] = Offset for pointer 2
    ;                   etc...
    ;                   (The number of array dimensions determines the number of pointers)
    ;=================================================================================================

    Func _MemoryPointerWrite ($iv_Address, $ah_Handle, $av_Offset, $v_Data, $sv_Type = 'dword')

        If IsArray($av_Offset) Then
            If IsArray($ah_Handle) Then
                Local $iv_PointerCount = UBound($av_Offset) - 1
            Else
                SetError(2)
                Return 0
            EndIf
        Else
            SetError(1)
            Return 0
        EndIf

        Local $iv_StructData, $i
        Local $v_Buffer = DllStructCreate('dword')

        For $i = 0 to $iv_PointerCount
            If $i = $iv_PointerCount Then
                $v_Buffer = DllStructCreate($sv_Type)
                If @Error Then
                    SetError(@Error + 3)
                    Return 0
                EndIf

                DllStructSetData($v_Buffer, 1, $v_Data)
                If @Error Then
                    SetError(8)
                    Return 0
                EndIf

                $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
                DllCall($ah_Handle[0], 'int', 'WriteProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @Error Then
                    SetError(9)
                    Return 0
                Else
                    Return $iv_Address
                EndIf
            ElseIf $i = 0 Then
                DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @Error Then
                    SetError(3)
                    Return 0
                EndIf

                $iv_StructData = DllStructGetData($v_Buffer, 1)

            Else
                $iv_Address = '0x' & hex($iv_StructData + $av_Offset[$i])
                DllCall($ah_Handle[0], 'int', 'ReadProcessMemory', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer), 'int', '')
                If @Error Then
                    SetError(3)
                    Return 0
                EndIf

                $iv_StructData = DllStructGetData($v_Buffer, 1)

            EndIf
        Next

    EndFunc


    ;===================================================================================================
    ; Function........:  _MemoryGetBaseAddress($ah_Handle, $iHD)
    ;
    ; Description.....:  Reads the 'Allocation Base' from the open process.
    ;
    ; Parameter(s)....:  $ah_Handle - An array containing the Dll handle and the handle of the open
    ;                                process as returned by _MemoryOpen().
    ;                   $iHD - Return type:
    ;                      |0 = Hex (Default)
    ;                      |1 = Dec
    ;
    ; Requirement(s)..:  A valid process ID.
    ;
    ; Return Value(s).:  On Success - Returns the 'allocation Base' address and sets @Error to 0.
    ;                   On Failure - Returns 0 and sets @Error to:
    ;                      |1 = Invalid $ah_Handle.
    ;                      |2 = Failed to find correct allocation address.
    ;                      |3 = Failed to read from the specified process.
    ;
    ; Author(s).......:  Nomad. Szhlopp.
    ; URL.............:  <a href='http://www.autoitscript.com/forum/index.php?showtopic=78834' class='bbc_url' title=''>http://www.autoitscript.com/forum/index.php?showtopic=78834</a>
    ; Note(s).........:  Go to http://Www.CheatEngine.org for the latest version of CheatEngine.
    ;===================================================================================================
    Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0)

        Local $iv_Address = 0x00100000
        Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')
        Local $vData
        Local $vType

        If Not IsArray($ah_Handle) Then
            SetError(1)
            Return 0
        EndIf

        DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

        If Not @Error Then

            $vData = Hex(Int(DllStructGetData($v_Buffer, 2)))
            $vType = Hex(Int(DllStructGetData($v_Buffer, 3)))

            While $vType <> "00000080"
                DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
                $vData = Hex(Int(DllStructGetData($v_Buffer, 2)))
                $vType = Hex(Int(DllStructGetData($v_Buffer, 3)))
                If Hex($iv_Address) = "01000000" Then ExitLoop
                $iv_Address += 65536

            WEnd
            If $vType = "00000080" Then
                SetError(0)
                If $iHexDec = 1 Then
                    Return Dec($vData)
                Else
                    Return $vData
                EndIf

            Else
                SetError(2)
                Return 0
            EndIf

        Else
            SetError(3)
            Return 0
        EndIf

    EndFunc
    #EndRegion

Code : Tout sélectionner

Func ProcessModuleGetBaseAddress($iProcessID, $sModuleName)

;on ouvre le processus
Local $hProcess = DllCall('kernel32.dll', _
   'HANDLE', 'OpenProcess', _
   'DWORD', 0x1F0FFF, _
   'BOOL', True, _
   'DWORD', $iProcessID)

;on recup les handles des module de notre process
Local $ModulesMax = DllStructCreate('ptr[1024]')
Local $iProcessModules = DllCall('psapi.dll', _
   'BOOL', 'EnumProcessModulesEx', _
   'HANDLE', $hProcess[0], _
   'ptr', DllStructGetPtr($ModulesMax), _
   'DWORD', DllStructGetSize($ModulesMax), _
   'DWORD*', '', _
   'DWORD','3')
Local $sModuleBaseName

;on parcour la liste des modules
For $i = 1 To $iProcessModules[4] / 4
  $sModuleBaseName = DllCall('psapi.dll', _
    'DWORD', 'GetModuleBaseNameW', _
    'HANDLE', $hProcess[0], _
    'ptr', DllStructGetData($ModulesMax, 1, $i), _
    'wstr', '', _
    'DWORD', 256)
    ;quand on a celui qui nous correspond on close notre Process et on retourne les valeurs en mémoire
    If $sModuleBaseName[3] = $sModuleName Then
        Local $bResult = DllCall('kernel32.dll', _
       'BOOL', 'CloseHandle', _
       'HANDLE', $hProcess[0])
        Return DllStructGetData($ModulesMax, 1, $i)
    EndIf
Next

EndFunc

Code : Tout sélectionner

HotKeySet("{,}","start")
HotKeySet("{;}","Pause")
#include <NomadMemory.au3>
#include <Array.au3>
#include <ProcessModuleGetBaseAddress.au3>
#RequireAdmin
SetPrivilege("SetDebugPrivilege", 1)
opt("MouseCoordMode",2)


while 1
   Sleep(300)
WEnd

   Func start()
          $ProcessID = ProcessExists('ts3client_win32.exe')
          If $ProcessID = 0 Then
            MsgBox(16, "ERROR", "Application is not running. Please run TeamSpeak 3 before starting this app." &@CRLF& "ProcessExists error n°" & $ProcessID)
            Exit
         EndIf
          $MemOpen = _MemoryOpen($ProcessID)
         If @error Then
            MsgBox(16, "ERROR", "Failed to open memory for process;" & $ProcessID &@CRLF& "_MemoryOpen error n°" & @error)
            Exit
         EndIf
               TrayTip("Overlay", "on", 10, 0)

               While 1
                 $StaticOffset = Dec("00878608")
                 MsgBox(0,"$StaticOffset", $StaticOffset)
                 $BaseADDR = ProcessModuleGetBaseAddress( $ProcessID, 'ts3client_win32.exe')
                    If @error Then
                     MsgBox(16, "ERROR", "ProcessModuleGetBaseAddress error n°  " & @error)
                     Exit
                  EndIf
                  MsgBox(0,"$BaseADDR", $BaseADDR)

                   $FinalADDR = Hex($BaseADDR + $StaticOffset)
                   MsgBox(0,"$FinalADDR", $FinalADDR)
                  Dim $Offset[6]
                     $Offset[0] = 0
                     $Offset[1] = Dec("0x30")
                     $Offset[2] = Dec("0x18")
                     $Offset[3] = Dec("0x25c")
                     $Offset[4] = Dec("0x60")
                     $Offset[5] = Dec("0x348")

                     $Address = _MemoryPointerRead("0x" & $FinalADDR, $MemOpen, $Offset)
                        If @error Then
                           MsgBox(16, "ERROR", "_MemoryPointerRead error n°" & @error)
                           exit
                        EndIf
                        
                     $Result = Hex($Address[0])
                    MsgBox(0,"$Result", $Result)
                     $Value = _MemoryRead('0x' & $Result, $MemOpen)
                        If @error Then
                           MsgBox(16, "ERROR", "_MemoryRead error n° " & @error)
                           exit
                        EndIf

                     ToolTip("PId : " & $ProcessID & @CRLF _
                           & "BaseADDR : " & $BaseADDR & @CRLF _
                           & "StaticOffset : " & $StaticOffset & @CRLF _
                           & "FinalADDR : " &  $FinalADDR & @CRLF _
                           & "Result : " & $Result & @CRLF _
                           & "MaxClients : " & $Value, 0, 0)
                           Sleep(500)
               WEnd
               _MemoryClose($MemOpen)
   EndFunc

   Func Pause()
      While 1
         Sleep(300)
      WEnd
  EndFunc