Codefuser Posted January 3, 2017 Posted January 3, 2017 I have tried searching and I found this example: https://www.autoitscript.com/forum/topic/66210-_searchprocessmemory/ However it does not work. After some debugging I found that $lpMinimumApplicationAddress is positive and $lpMaximumApplicationAddress is negative. Tried switching them around and that didn't work either. Can anyone help?
Bert Posted January 3, 2017 Posted January 3, 2017 is this for your Obfuscation project? The Vollatran project My blog: http://www.vollysinterestingshit.com/
Codefuser Posted January 4, 2017 Author Posted January 4, 2017 (edited) Yes it is indeed for my obfuscation project. It is for scanning the memory for known signature of unwanted softwares (Debuggers, decompilers, dissasemblers, VMWare, etc). It is also for a part of another heuristic memory scanner project of mine. Edited January 4, 2017 by Codefuser
Codefuser Posted January 6, 2017 Author Posted January 6, 2017 Still looking for help with this, any will be appreciated.
Codefuser Posted January 8, 2017 Author Posted January 8, 2017 Still looking for help. Would love to get some.
Codefuser Posted January 10, 2017 Author Posted January 10, 2017 Still looking for help. Someone's help would be greatly appreciated.
Codefuser Posted January 20, 2017 Author Posted January 20, 2017 Still looking for help. Someone's help would be greatly appreciated.
Codefuser Posted February 21, 2017 Author Posted February 21, 2017 Still looking for help with this. HMU.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now