1:
2:
3:
4:

asm
  mov eax, [pointerzumgeld] // eax ist nach jedem spielstart verändern, pointerzumgeld bleib immer gleich
  mov eax, [eax] // geld auslesen
end;                    

1:
2:
3:
4:
5:
6:
7:

asm
  mov eax, [wichtigeaddr]
  add eax, $124
  shl eax, 1
  mov edx, [eax] // in edx steht das geld
  
end;                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:

const
  buffer: packed array[0..1] of Byte = ($EB, $09); // Sprung 9 Bytes weit
var
  StartInfo: TStartupInfo;
  ProcInfo: TProcessInformation;
  CreateOK: Boolean;
  ErrorCode: DWord;
  AppDone: DWord;

  lpflOldProtect: Cardinal;
  lpNumberOfBytesWritten: Cardinal;
begin
  ErrorCode := 0;
  FillChar(StartInfo, SizeOf(TStartupInfo), #0);
  FillChar(ProcInfo, SizeOf(TProcessInformation), #0);
  StartInfo.cb := SizeOf(TStartupInfo);

  CreateOK := Windows.CreateProcess(nil,
    PChar(ExecuteFile + ' ' + paramstring),
    nil, nil, False,
    CREATE_NEW_PROCESS_GROUP + IDLE_PRIORITY_CLASS + SYNCHRONIZE + CREATE_SUSPENDED,
    nil, nil, StartInfo, ProcInfo);
  WaitForInputIdle(ProcInfo.hProcess, INFINITE);
  if CreateOK then
  begin
    VirtualProtectEx(ProcInfo.hProcess, Ptr($00801FA1), SizeOf(buffer), PAGE_EXECUTE_READWRITE, lpflOldProtect);
    WriteProcessMemory(ProcInfo.hProcess, Ptr($00801FA1), @buffer[0], SizeOf(buffer), lpNumberOfBytesWritten);
    ResumeThread(ProcInfo.hThread);
    if wait then
    begin
      repeat
        AppDone := WaitForSingleObject(ProcInfo.hProcess, 10);
        ProcessMessage;
      until AppDone <> WAIT_TIMEOUT;
      CloseHandle(ProcInfo.hProcess);
      CloseHandle(ProcInfo.hThread);
    end
    else
      procid := ProcInfo.hProcess;
  end;
  GetExitCodeProcess(ProcInfo.hProcess, ErrorCode);
  Execute_Program := ErrorCode;                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:

unit Unit1;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, StdCtrls;

type
  TForm1 = class(TForm)
    Edit1: TEdit;
    Button1: TButton;
    procedure Button1Click(Sender: TObject);
  private
    function PointerSolve(Process: integer; p_array: array of integer): integer;
  public
    { Public-Deklarationen }
  end;

var
  Form1: TForm1;

implementation

{$R *.dfm}

procedure TForm1.Button1Click(Sender: TObject);
var
  WindowName: Integer;
  Pidi: Integer;
  Wert:DWORD  ;
  Window1: Integer;
  lBuf: integer;
  addr_array: array[0..4] of integer;
begin
  addr_array[0]:=StrToInt('$100000');
  addr_array[1]:=StrToInt('$7B8');
  addr_array[2]:=StrToInt('$C');
  addr_array[3]:=StrToInt('$30');
  addr_array[4]:=StrToInt('$24B8');
  WindowName :=FindWindow(nil,'TEST');
  GetWindowThreadProcessId(WindowName ,@pidi);
  Window1 :=OpenProcess(PROCESS_VM_READ ,False , pidi);
  lBuf:=PointerSolve(Window1, addr_array);
  ReadProcessMemory(Window1 ,ptr(lBuf),@lBuf,4,Wert);
  Edit1.Text :=IntToStr(lbuf);
  CloseHandle(Window1);
end;

function TForm1.PointerSolve(Process: integer; p_array: array of integer):integer;
var
  pointercount: integer;
  i: integer;
  base_addr: integer;
  offset: integer;
  temp: integer;
  Wert:DWORD  ;
begin
  pointercount:=length(p_array);
  base_addr:=p_array[0];
  for I := 1 to pointercount-1 do
  begin
    ReadProcessMemory(Process, ptr(base_addr), @temp, 4, Wert);
    base_addr:= temp + p_array[i];
  end;
  result:=base_addr;
end;
end.