Help [AHK] UDF & SAMP Addresses

[Rat]

i've got several questions on how to add a function for specific addresses.

variable prefixes:

Spoiler

1. hGTA, hThread
2. dwSAMP, dwFunc
3. pParam1
4. iRefreshScoreboard
5. oScoreboardData
6. nZone, nCity
7. bInitZaC
8. wString
9. aParams

correct me if i'm wrong. i'm assuming

dw

stands for DWORD

a

stands for ?array?
what are

h, p, i, o, n, b, w

sample function:

getSkinId()

Spoiler

getSkinId()
{
    if(!checkHandles())
        return -1

 	dwCPedPtr := readDWORD(hGTA, ADDR_CPED_PTR)
    if(ErrorLevel) {
        ErrorLevel := ERROR_READ_MEMORY
        return -1
    }
 
	if(!dwCPedPtr)
		return -1
	 
	dwVal := readMem(hGTA, dwCPedPtr + 0x22, 2, "UShort")
	if(ErrorLevel) {
	    ErrorLevel := ERROR_READ_MEMORY
	    return -1
	}
	
	return dwVal
}

1. what does PTR mean on some addresses such as this one?
2. where did 0x22 come from? why is it the value that is needed to be added to dwCPedPtr to get the id?

 

[0B36]

PTR is an ACRONYM for "Pointer"

You add 0x22 to CPEDPtr's base address which specifically points to its skin.

So 0x22 here is the pointer to the skin, and it's from sa-mp.

 

[Rat]

PTR is an ACRONYM for "Pointer"

You add 0x22 to CPEDPtr's base address which specifically points to its skin.

So 0x22 here is the pointer to the skin, and it's from sa-mp.

can i have a link to pointers such as this one?
:trollface:

 

[Rat]

given these memory functions:

readDWORD(hProcess, dwAddress)
readMem(hProcess, dwAddress, dwLen=4, type="UInt")
writeRaw(hProcess, dwAddress, pBuffer, dwLen)
callWithParams(hProcess, dwFunc, aParams, bCleanupStack = true)

Spoiler

readDWORD(hProcess, dwAddress) {
    if(!hProcess) {
        ErrorLevel := ERROR_INVALID_HANDLE
        return 0
    }
    
    VarSetCapacity(dwRead, 4)    ; DWORD = 4
    dwRet := DllCall(    "ReadProcessMemory"
                        , "UInt",  hProcess
                        , "UInt",  dwAddress
                        , "Str",   dwRead
                        , "UInt",  4
                        , "UInt*", 0)
    if(dwRet == 0) {
        ErrorLevel := ERROR_READ_MEMORY
        return 0
    }
    
    ErrorLevel := ERROR_OK
    return NumGet(dwRead, 0, "UInt")
}

readMem(hProcess, dwAddress, dwLen=4, type="UInt") {
    if(!hProcess) {
        ErrorLevel := ERROR_INVALID_HANDLE
        return 0
    }
    
    VarSetCapacity(dwRead, dwLen)
    dwRet := DllCall(    "ReadProcessMemory"
                        , "UInt",  hProcess
                        , "UInt",  dwAddress
                        , "Str",   dwRead
                        , "UInt",  dwLen
                        , "UInt*", 0)
    if(dwRet == 0) {
        ErrorLevel := ERROR_READ_MEMORY
        return 0
    }
    
    ErrorLevel := ERROR_OK
    return NumGet(dwRead, 0, type)
}

writeRaw(hProcess, dwAddress, pBuffer, dwLen) {
    if(!hProcess) {
        ErrorLevel := ERROR_INVALID_HANDLE
        return false
    }
    
    dwRet := DllCall(    "WriteProcessMemory"
                        , "UInt", hProcess
                        , "UInt", dwAddress
                        , "UInt", pBuffer
                        , "UInt", dwLen
                        , "UInt", 0
                        , "UInt")
    if(dwRet == 0) {
        ErrorLEvel := ERROR_WRITE_MEMORY
        return false
    }
    
    ErrorLevel := ERROR_OK
    return true
}

callWithParams(hProcess, dwFunc, aParams, bCleanupStack = true) {
    if(!hProcess) {
        ErrorLevel := ERROR_INVALID_HANDLE
        return false
    }
    validParams := 0
    
    i := aParams.MaxIndex()
    
    ;         i * PUSH + CALL + RETN
    dwLen := i * 5    + 5    + 1
    if(bCleanupStack)
        dwLen += 3
    VarSetCapacity(injectData, i * 5    + 5       + 3       + 1, 0)
    
    i_ := 1
    while(i > 0) {
        if(aParams[i][1] != "") {
            dwMemAddress := 0x0
            if(aParams[i][1] == "p") {
                dwMemAddress := aParams[i][2]
            } else if(aParams[i][1] == "s") {
                if(i_>3)
                    return false
                dwMemAddress := pParam%i_%
                writeString(hProcess, dwMemAddress, aParams[i][2])
                if(ErrorLevel)
                    return false
                i_ += 1
            } else if(aParams[i][1] == "i") {
                dwMemAddress := aParams[i][2]
            } else {
                return false
            }
            NumPut(0x68, injectData, validParams * 5, "UChar")
            NumPut(dwMemAddress, injectData, validParams * 5 + 1, "UInt")
            validParams += 1
        }
        i -= 1
    }
    
    offset := dwFunc - ( pInjectFunc + validParams * 5 + 5 )
    NumPut(0xE8, injectData, validParams * 5, "UChar")
    NumPut(offset, injectData, validParams * 5 + 1, "Int")
    
    if(bCleanupStack) {
        NumPut(0xC483, injectData, validParams * 5 + 5, "UShort")
        NumPut(validParams*4, injectData, validParams * 5 + 7, "UChar")
        
        NumPut(0xC3, injectData, validParams * 5 + 8, "UChar")
    } else {
        NumPut(0xC3, injectData, validParams * 5 + 5, "UChar")
    }
    
    writeRaw(hGTA, pInjectFunc, &injectData, dwLen)
    if(ErrorLevel)
        return false
    
    hThread := createRemoteThread(hGTA, 0, 0, pInjectFunc, 0, 0, 0)
    if(ErrorLevel)
        return false
    
    waitForSingleObject(hThread, 0xFFFFFFFF)
    
    closeProcess(hThread)
    
    return true
}

i want to make a function for this address:

global FUNC_SAMP_CLEARPLAYERANIMATION		:= 0x155C0

disableAnimation()
{
    if(!checkHandles())
        return false

    dwFunc := dwSAMP + FUNC_SAMP_CLEARPLAYERANIMATION
    ; ... ;

    return true
}

1. which memory function(s) would be needed?
2. what exactly does callWithParams(hProcess, dwFunc, aParams, bCleanupStack = true) do, and when should i use it?

 

[democrazy]

1. callwthparams
2. callwthparams calls a samp function, it injects code into samp memory and use createRemoteThread


byt the way:
0x155C0 is 0.3z address, right?

found here in the forum for 0.3.7
SetPlayerAnimation = 0x16FA0

 

[0B36]

All addresses found so far are listed in Notes and Snippets, check them out at your own will.

Yes democrazy, I have listed all sa-mp patches I have found so far.

 

[democrazy]

about variables names:
dont always trust them  :trollface:
but yeah, you can use prefix "dw" for DWORD etc.

 

[Rat]

1. callwthparams
2. callwthparams calls a samp function, it injects code into samp memory and use createRemoteThread


byt the way:
0x155C0 is 0.3z address, right?

found here in the forum for 0.3.7
SetPlayerAnimation = 0x16FA0

oops.. i got that from luxdav's ahk samp trainer
i'm going to use ClearAnimation=0x14C70 then

now my code looks like:

global FUNC_SAMP_CLEARPLAYERANIMATION    := 0x14C70
global hGTA                                     := 0x0

clearPlayerAnimation()
{
    if(!checkHandles())
        return false

    dwFunc := dwSAMP + FUNC_SAMP_CLEARPLAYERANIMATION
    callWithParams(hGTA, dwFunc, ???, false)

    return true
}

1. i'm totally clueless on what to pass on aParams  :computer_guy:
2. i'm guessing bCleanupStack should be set to false. or should it be true? when should bCleanupStack be set to true or false?
3. am i missing anything else?  :dont_care:
4. thanks for bearing with me.  :yesyes:

 

[democrazy]

you need to do some research about this function
- how many parameters
- calling convention

then i can tell you what to do