Process Module - Revision history

Elverion: /* findByExe */

2018-06-07T01:24:57Z

‎findByExe

Elverion: /* getModuleFilename */

2016-07-29T02:29:35Z

‎getModuleFilename

Elverion at 18:16, 25 February 2016

2016-02-25T18:16:01Z

84.155.33.79: /* getModules */

2015-10-03T10:22:44Z

‎getModules

Elverion at 03:45, 18 February 2015

2015-02-18T03:45:32Z

Elverion at 20:17, 23 January 2015

2015-01-23T20:17:41Z

Elverion at 20:16, 23 January 2015

2015-01-23T20:16:05Z

Elverion: /* getModuleAddress() */

2015-01-23T01:07:01Z

‎getModuleAddress()

Elverion: /* readBatch() */

2015-01-22T00:02:55Z

‎readBatch()

Elverion at 23:59, 21 January 2015

2015-01-21T23:59:57Z

← Older revision		Revision as of 01:24, 7 June 2018
Line 132:		Line 132:
	Look up a process ID by checking for its running executable. i.e. "explorer.exe"		Look up a process ID by checking for its running executable. i.e. "explorer.exe"

		+	If the process you are looking for is 64-bit, then you must use a 64-bit copy of MicroMacro, otherwise the process cannot be found.

	== getModuleAddress ==		== getModuleAddress ==

@@ Line 141: / Line 141: @@
 == getModuleFilename ==
-'''string process.getModuleAddress(handle process)'''
+'''string process.getModuleFilename(handle process)'''
 Returns the fully qualified path of the main executable of an ''opened'' (see process.open) process.
 == getModules ==

← Older revision		Revision as of 18:16, 25 February 2016
Line 138:		Line 138:
	Look up the address of a module within a process and return its origin address. Often this is used to lookup the location where a DLL is loaded. 'moduleName' should be the full name. i.e. "whatever.dll"		Look up the address of a module within a process and return its origin address. Often this is used to lookup the location where a DLL is loaded. 'moduleName' should be the full name. i.e. "whatever.dll"
	If the function fails or it could not locate the module, it returns nil.		If the function fails or it could not locate the module, it returns nil.
		+
		+
		+	== getModuleFilename ==
		+	'''string process.getModuleAddress(handle process)'''
		+
		+	Returns the fully qualified path of the main executable of an ''opened'' (see process.open) process.

@@ Line 141: / Line 141: @@
 == getModules ==
-'''table process.getModuleAddress(number procId)'''
+'''table process.getModules(number procId)'''
 Returns a table of key/value pairs of every module found within the process specified by the process ID. Module names will be the key and the address within the program will be the value.
 If the function fails, it returns nil.
 == attachInput ==

← Older revision		Revision as of 03:45, 18 February 2015
Line 170:		Line 170:

	Returns true if the target process is 64-bit.		Returns true if the target process is 64-bit.
		+
		+
		+	== terminate ==
		+	'''boolean process.terminate(handle proc)'''
		+
		+	'''boolean process.terminate(handle proc, number exitCode = 0)'''
		+
		+
		+	Attempts to terminate the target process. Returns true on success, or false on failure. 'exitCode' is an optional identifier you can use to specify the reason it is being terminated.
		+
		+
		+	== getWindows ==
		+	'''table process.getWindows(number procId)'''
		+
		+	Returns a list of tables containing the 'hwnd' (handle to window), 'name' (window title), and 'class' of each window that belongs to the process specified by the process ID. For more information on the return value, see [[Window_Module#findList\|window.findList]]().

@@ Line 1: / Line 1: @@
-== open() ==
+== open ==
 '''procHandle process.open(number procId)'''
@@ Line 5: / Line 5: @@
-== close() ==
+== close ==
 '''process.close(handle procHandle)'''
@@ Line 11: / Line 11: @@
-== read() ==
+== read ==
 '''number|string process.read(handle procHandle, string type, number address[, number length])'''
@@ Line 21: / Line 21: @@
-== readPtr() ==
+== readPtr ==
 '''number|string process.readPtr(handle procHandle, string type, number address, number|table offsets[, number length])'''
@@ Line 30: / Line 30: @@
-== readBatch() ==
+== readBatch ==
 '''table process.readBatch(handle procHandle, number address, string mask)'''
@@ Line 83: / Line 83: @@
 "3i" means "read 3 integers" while "3c" means "read a string of length 3".
-== readChunk() ==
+== readChunk ==
 '''chunk process.readChunk(handle procHandle, number address, number size)'''
@@ Line 92: / Line 92: @@
 The chunk is an object that you can then use to extract the various data from. It is generally faster to read a chunk then extract from it than it is to do many single reads with process.read().
-== write() ==
+== write ==
 '''boolean process.write(handle procHandle, string type, number address, string|number data)'''
@@ Line 101: / Line 101: @@
-== writePtr() ==
+== writePtr ==
 '''boolean process.writePtr(handle procHandle, string type, number address, number|table offsets, number|string data)'''
@@ Line 110: / Line 110: @@
-== findPattern() ==
+== findPattern ==
 '''number process.findPattern(handle procHandle, number address, number length, string bitmask, string szmask)'''
@@ Line 120: / Line 120: @@
-== findByWindow() ==
+== findByWindow ==
 '''number process.findByWindow(number hwnd)'''
@@ Line 127: / Line 127: @@
-== findByExe() ==
+== findByExe ==
 '''number process.findByExe(string procname)'''
@@ Line 133: / Line 133: @@
-== getModuleAddress() ==
+== getModuleAddress ==
 '''number process.getModuleAddress(number procId, string moduleName)'''
@@ Line 140: / Line 140: @@
-== getModules() ==
+== getModules ==
 '''table process.getModuleAddress(number procId)'''
@@ Line 147: / Line 147: @@
-== attachInput() ==
+== attachInput ==
 '''boolean process.attachInput(number hwnd)'''
@@ Line 153: / Line 153: @@
-== detachInput() ==
+== detachInput ==
 '''boolean process.detachInput(number hwnd)'''
@@ Line 160: / Line 160: @@
-== is32bit() ==
+== is32bit ==
 '''boolean process.is32bit(handle proc)'''
@@ Line 166: / Line 166: @@
-== is64bit() ==
+== is64bit ==
 '''boolean process.is64bit(handle proc)'''
 Returns true if the target process is 64-bit.

@@ Line 138: / Line 138: @@
 Look up the address of a module within a process and return its origin address. Often this is used to lookup the location where a DLL is loaded. 'moduleName' should be the full name. i.e. "whatever.dll"
 If the function fails or it could not locate the module, it returns nil.
 == attachInput() ==
@@ Line 145: / Line 153: @@
-== detachInput(number hwnd) ==
+== detachInput() ==
-'''boolean process.detachInput()'''
+'''boolean process.detachInput(number hwnd)'''
 Detach our input thread from the target window.
 Returns true on success, false on failure.

@@ Line 62: / Line 62: @@
 | unsigned int
 |-
-| j
+| h
 | int64
 |-
-| J
+| H
 | unsigned int64
 |-
@@ Line 82: / Line 82: @@
 "3i" means "read 3 integers" while "3c" means "read a string of length 3".
 == readChunk() ==

@@ Line 18: / Line 18: @@
 When reading a string, a maximum bytes to read should be given as 'length', otherwise do not specify length.
-The type of data returned depends on the type requested. That is, requested a byte, short, int, float, or double returns a number while requesting a string returns a string. If this function should fail, it will return nil.
+The type of data returned depends on the type requested. That is, requesting a byte, short, int, int64, float, or double returns a number while requesting a string returns a string. If this function should fail, it will return nil.
@@ Line 61: / Line 61: @@
 | I
 | unsigned int
 |-
 | f