C# - Implementing An Algorithm To Read A Foreign Process Memory Using OpenProcess And ReadProcessMemory
Aug 26, 2009
I'm having some problems implementing an algorithm to read a foreign process' memory. Here is the main code:
[Code]...
Although generally it seems to work correctly, the problem is that for some memory values ReadProcessMemory is returning false, and GetLastError is returning 299. From what I've googled, it seems to happen on vista because some params of OpenProcess were updated. Anyone knows what this is about? And what values should I try? Notice that as they changed, I wouldn't want to know if it's VM_READ or so, I want to know exactly what the values are.
[Code]...
View 2 Replies
ADVERTISEMENT
Oct 4, 2009
I've been banging my head at a wall for like 4 hours now, googling and searching forums but I haven't found a solution yet. This is (a part) of the code: Public Declare Function OpenProcess Lib "Kernel32.dll" (ByVal dwDesiredAccess As Integer, ByVal bInheritHandle as Integer, ByVal dwProcId As Integer) As Integer
Public Declare Function ReadProcessMemory Lib "Kernel32.dll" (ByVal hProcess as IntPtr, ByVal lpBaseAddress As Integer, ByVal lpBuffer() As Byte, ByVal Size As Integer, ByRef BytesWritten As Integer) As String
[code].....
View 2 Replies
Aug 22, 2010
I'm trying to read another process's memory starting from mbi.BaseAddress to mbi.RegionSize using the function ReadProcessMemory, however I only succedeed to read 1 address at a time and it takes like forever to finish, the result being stored into a byte() variable, calling the readaddressmemory 1 million times instead of only 1 for example.
[Code]...
View 1 Replies
May 15, 2009
Read/Write Process Memory?
View 6 Replies
Nov 17, 2010
i have tryed so many times now so is there some one that can Read/ Process Memory in vb.net 08 ?
this is what i got
Dim help2 As Integer
Dim HP_Have As Integer = &H574
Label5.Text = ReadProcessMemory(proc.Handle.ToInt32(), HP_Have, help2, 4, 4)
View 23 Replies
Feb 5, 2011
I have decided to use a flood fill algorithm for my application, using this pseudo-code from Wikipedia:Flood-fill (node, target-color, replacement-color):
1. Set Q to the empty queue.
2. If the color of node is not equal to target-color, return.
3. Add node to Q.
4. For each element n of Q:
5. If the color of n is equal to target-color:
6. Set w and e equal to n.
7. Move w to the west until the color of the node to the west of w no longer matches target-color.
8. Move e to the east until the color of the node to the east of e no longer matches target-color.
9. Set the color of nodes between w and e to replacement-color.
10. For each node n between w and e:
11. If the color of the node to the north of n is target-color, add that node to Q.If the color of the node to the south of n is target-color, add that node to Q.
12. Continue looping until Q is exhausted.
13. Return.
I was doing alright, until I hit the "continue looping until Q is exhausted".I don't quite get that.
View 2 Replies
Jun 21, 2010
I need a code that search's in a process memory a custom value. And get the address of that value. Its a simple question but with a hard answer. I've searched in all over the internet, but couldnt find any.
View 6 Replies
May 30, 2010
Ive basically got 2 problems I need to solve.1) I am trying to determine if a certain process is running on the user's machine at the same time as my program.2) I am also then,if the process is running, trying to edit a specific memory addresses value. I have already found the memory addresses for the program, but how do I tell VB.Net to basically read the current value stored in that memory address, and then write a new value to that address
View 1 Replies
Dec 27, 2009
I want to be able to read and write the process memory of Firefox for a game on facebook(It's kind of like cheating only you can't cheat, nothing stays permanent.) this is just for fun. The game is called happy fish aquarium and you raise fish in the game and it's just really addicting. I found a program that reads process memory and lets me change certain values in happy fish aquarium so I can make my fish tank look different or whatever. But if I reload the page it will of course go back to the original state because the fish tank's memory is held online. The point is, I just want to make a program that can read the process memory from Firefox from a certain range and bytes. like 4 bytes and a range of 00400000 to 7FFFFFFF. Does anyone know how I can achieve this? Please note, this is not for cheating purposes in any way whatsoever, it's simply for visual fun(visual meaning only I can see it). What I want to do is the same as using the add-on firebug in firefox to change the html on a webpage.
View 10 Replies
Dec 15, 2010
I've been using the readprocessmemory function to read some values from another program and it works just fine for small values. However when I'm trying to read something like 5000.123456789 or whatever it doesn't even display the 5000, it just displays something that seems kinda random. Now, I've had this problem before and it helped to just increase the iSize from 1 to 10, but now I can't increase it anymore for some reason. I tried to increase it to 100 but then I got a fatal error. Is there some way to get around this? I guess it could also be because I'm not trying to read an integer but a float, but there is no float in VB, so i tried double, but no go.
[Code]...
View 3 Replies
Jun 1, 2008
I have searched google with this error in relation to Process.MainModule.FileName however none link with the error message, "Only part of a ReadProcessMemory or WriteProcessMemory request was completed".There however was one thread on these forums suggest a 64 bit issue however that was soon excluded as it was reported also in a 32 bit enviroment. The marked answer to that thread suggested it is a security problem however I don't think anything has been changed in relation to that comapred to a 'clean' project.
"If it is a security problem, you may try to run your application under the debugger" Process.MainModule failure I am in-fact debugging this application through Visual Studio so I am not quite sure what to do next in the process of diagnosing this problem. I am debugging using 32 bit in a 64 bit enviroment because of DirectX compatability issues?
View 20 Replies
May 22, 2007
Im getting a problem with one of my programs I have made in visual basic.NET where it gives me a memory error when i debug the program in the IDE. the exact error is this: "Attempted to read or write protected memory. This is often an indication that other memory is corrupt". My program basically has a few forms with text fields on that get their text values from an access database on the same hard drive. Im wondering if im doing something wrong because my program just seems to eat up memory whenever it does anything. For example I have one form that has a combobox on it and when you change the drop down list selection it retreives a few strings from the database and puts them into the relevant text boxes, if you keep changing the selection then the memory usage (in task manager) just keeps going up and up. occasionally I get the error mentioned above when debugging but in my built version of the program it throws an exception everytime the memory usage gets past 49K.
Also I noticed when debugging in the "immediate window" frame I get the following message often:A first chance exception of type 'System. Invalid OperationException' occurred in System.Data.dll...Do I need to somehow be "releasing" the memory that is used to gather data once it becomes redundant?
View 12 Replies
Nov 24, 2011
I am using the following code
This error occurs :
Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
Public Class FormRegEnumValue
[CODE]......................
View 2 Replies
Feb 1, 2009
QuoteSystem.AccessViolationException was unhandled Message="Attempted to read or write protected memory. This is often an indication that other memory is corrupt." Source="System.Windows.Forms"
Im designing a web browser and i continue to receive this error after going to about 3 websites it crashes with that error.
View 6 Replies
May 27, 2009
I cannot use Visual Basic 2008 at all. When I go to "new project" and choose "Windows Form Application" I get this error.I have tried multiple uninstall/reinstall with no result.A microsoft reply to this suggested that I needed: " .NET Framework 2.0 Service Pack 1 " I checked, and I did not have the .netframework 2.0 service Pack 1.
When I tried to download and install the above from Microsoft.com, the istaller said that "it was not allowsed" and I was not able to install the service pack 1.
I tried Uninstalling net framework 3.5, 3.0, 2.0 and then reinstalling .netframework 2.0 sevice pack 1; then reinstalling Visual basic 2008 express edition. At the reinstall of Visual basic 2008, .netframework 2.0 sevice pack 1 is unistalled by .net framework service pack 2.When I check the foruims for simiar problems, the formus are mostly for Visual basic 5.0, or other programs that I do not have.
Here is the programs I have installed:
Operating system: Windows XP
Microsoft .net framework 1.1
Microsoft .NET framwork 1.1 Hotfix(KB928366)
Microsoft .Net Framework 2.0 Service Pack 2
[code]....
All the security updates and hotfixes for Widows XP.
View 4 Replies
Feb 9, 2011
I have two forms, Form1 and Form2. Form2 has a button to show OpenFileDialog. I call Form2 from Form1 by a button. My startUp Form is Form1. When i start debugging, i press my Form1's button to show my Form2, it shows, but when i click On Form2's Button to show OpenFileDialog it is giving me exception that
"Attempted to read or write protected memory. This is often an indication that other memory is corrupt."
When i set my startup Form to Form2 and click Form2's Button to show OpenFileDialog then it shows!
View 13 Replies
Mar 7, 2011
I am using VB.NET 2010 with a solution that consists of class libraries and winform projects.
Each project has an app.config for it's specific needs. There are however, several settings that are common across all projects. I would like to implement a common config file to hold those, but that effort hasn't been very successful.
After much searching I developed a test program to play with and it was working until I moved the Globalsettings into a separate file. Below is a paste of my code along with the config files I've been experimenting with. I've added the references to system.configuration and made sure my config files are set to always copy to the output directory.
The code compiles, but GlobalSettingsLookup is never set to an instance of NamevalueCollection. I'm guessing it's because the ConfigurationManager can't load the section "GlobalSettings"(?) That's just a guess
My Code:
Dim GlobalsettingsLookup As NameValueCollection = CType(System.Configuration.ConfigurationManager.GetSection("GlobalSettings"), System.Collections.Specialized.NameValueCollection)
[Code].....
View 5 Replies
Aug 3, 2010
I have a new problem with this same Form Printing project and I get exactly the same exception but from the different point of code:
line 538: d.PrintFunction(c, typePrint, mp, x, y, extendedHeight, ScanForChildControls)
The exception type is System.AccessViolationException and it says (after I translate it from my own language in which the message is given in my pc, into English):"Protected memory was tried to be read or written. This often indicates that the other memory is damaged"
View 1 Replies
Aug 4, 2010
I am getting the following error: "Attempted to read or write protected memory. This is often an indication that other memory is corrupt". i am using interop service.
View 2 Replies
Aug 10, 2010
Is it possible to automatically insert a Code Snippet when an interface is implemented? If so, how do you do it? I am looking for something similar to when you implement IDispoable in VB.[code]This will be used by web forms when transfering parameters from one page to the next using Server.Transfer
View 1 Replies
Jan 17, 2010
I was just wondering if anyone out there has experienced the same problem as i. I have tried using open process with ReadProcessMemory and have been getting the same darn return value back (OpenProcess return value = 373662154752) and i dont know why.I tried even changing the processID to a bogus value and i get the same handle back! i find that really weird and frusterating. Anyways here is a snipet of my code.
[Code]...
I also want to mention that i have tried changing the Access rights to PROCESS_ALL_ACCESS and received same damn value... Any help on getting it to work would be appreaciated. Also i am working under windows 7 X64(Bit) if that makes any difference.
P.S If you have questions to why im using these api functions, its to do with creating a program to save information from stored buffers of a flight simulation software at bombardier where i work. All software has been given to me in order to build this program.
View 5 Replies
Dec 10, 2011
I have an .exe console application that when run, will do its thing and then close.
Q1: How can I time that run? (accurate, in milliseconds)
Q2: How can I see how much memory was used? (accurate, in bytes)
If MyPost Is Helpful Then MarkAsHelpful() ElseIf MyPost Is Answer Then MarkAsAnswer()
View 2 Replies
Feb 10, 2010
I am having issues with initializing more than one process without having to close the program and re launch to run a second process. I need to clear the process impersonator out of the memory or something in order to start a new one?
Imports System
Imports System.Runtime.InteropServices
Imports System.Security.Principal
Imports System.Security.Permissions
[code].....
View 3 Replies
Sep 8, 2009
I need to create a way to dump the memory of a process to a file. And I don't mean a crash dump, I mean dumping the memory. In C++ you can use the function MiniDumpWriteDump.
Here is my code so far:
Public Declare Function MiniDumpWriteDump Lib "dbghelp.dll" (ByVal hProcess _
As IntPtr, ByVal ProcessId As Int32, ByVal hFile As IntPtr, ByVal DumpType _
As mydumptypes, ByVal ExceptionParam As IntPtr, ByVal UserStreamParam As _
IntPtr, ByVal CallackParam As IntPtr) As Boolean
Enum mydumptypes
[Code] .....
A file is created, however when I looked inside the file with a hex editor, it was complete garbage. For a test, I opened notepad, typed in "Hello!", and dumped the notepad process. I could not find any strings in it, let alone the "Hello!" string.
mydumptypes.normal =
MiniDumpWithDataSegs= 0x00000001,
in c++. It wasn't what I wanted. Anyways, I fixed it.
View 2 Replies
Jan 16, 2012
Is there any way I can get the memory usage for all processes currently running on a machine in vb.net?
View 1 Replies
Mar 1, 2012
how load a string containing the source for a .exe strait into a process without accessing the hard drive.
Currently my code goes something like this...
Imports System.IO
Dim file As String
file = file_source
[Code]...
View 1 Replies
Mar 15, 2012
Is there a way in vb.net to check whether new memory pages have been created inside a process(such as winlogon, svchost etc) For eg : if i there is a certain value that may change if new memory pages are created inside the process. Then i can compare the previous value and the new value (after pages have been created) and make it sure that new pages have been created inside that process.
View 3 Replies
Mar 15, 2012
Is there a way to check whether new memory threads have been created inside a process in vb.net. By hashing the process and checking before and after the threads are created or something like that.
View 11 Replies
Aug 4, 2010
Read (search a value) in a non specific process memory. Write a value in the address found in the last function requested.
View 2 Replies
Jan 12, 2010
Is it possible to view every process that is accessing memory as well as windows services as well as how much thier accessing I want to make a program that can kill and block things accessing memory to block malicious programs to be able to delete the ie spyware that can't be fixed cause it adds it's self and locks it's self. From programs like spybot I can view the processes bit that's just wat windows registeres I need to look at eat is accessing memory.
View 6 Replies
