Mixing
Read the protected memory of other processes
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
1
I have a problem.
I want to read another process's memory in Windows.
I use the following functions:
<DllImport("kernel32.dll", SetLastError:=True)> _
Public Shared Function ReadProcessMemory(ByVal hProcess As IntPtr, _
ByVal lpBaseAddress As Int64, _
<Out()> ByVal lpBuffer As Byte(), _
ByVal dwSize As Integer, _
ByRef lpNumberOfBytesRead As Integer) As Boolean
End Function
<Flags>
Public Enum ProcessAccessFlags As UInteger
All = &H1F0FFF
Terminate = &H1
CreateThread = &H2
VirtualMemoryOperation = &H8
VirtualMemoryRead = &H10
VirtualMemoryWrite = &H20
DuplicateHandle = &H40
CreateProcess = &H80
SetQuota = &H100
SetInformation = &H200
QueryInformation = &H400
QueryLimitedInformation = &H1000
Synchronize = &H100000
End Enum
Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As ProcessAccessFlags, bInheritHandle As Boolean, processId As UInt32) As IntPtr
But when I want to read the position 7FF5F7E40024, I see the following error:
Attempted to read or write protected memory. This is often an
indication that other memory is corrupt
I am sure there is an Mp4 movie in this position of memory, and this position is not corrupt memory.
.net vb.net memory
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
add a comment |
1
I have a problem.
I want to read another process's memory in Windows.
I use the following functions:
<DllImport("kernel32.dll", SetLastError:=True)> _
Public Shared Function ReadProcessMemory(ByVal hProcess As IntPtr, _
ByVal lpBaseAddress As Int64, _
<Out()> ByVal lpBuffer As Byte(), _
ByVal dwSize As Integer, _
ByRef lpNumberOfBytesRead As Integer) As Boolean
End Function
<Flags>
Public Enum ProcessAccessFlags As UInteger
All = &H1F0FFF
Terminate = &H1
CreateThread = &H2
VirtualMemoryOperation = &H8
VirtualMemoryRead = &H10
VirtualMemoryWrite = &H20
DuplicateHandle = &H40
CreateProcess = &H80
SetQuota = &H100
SetInformation = &H200
QueryInformation = &H400
QueryLimitedInformation = &H1000
Synchronize = &H100000
End Enum
Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As ProcessAccessFlags, bInheritHandle As Boolean, processId As UInt32) As IntPtr
But when I want to read the position 7FF5F7E40024, I see the following error:
Attempted to read or write protected memory. This is often an
indication that other memory is corrupt
I am sure there is an Mp4 movie in this position of memory, and this position is not corrupt memory.
.net vb.net memory
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
I experience this errorisn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?
– 500 - Internal Server Error
Jan 3 at 16:49
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16
add a comment |
1
1
1
I have a problem.
I want to read another process's memory in Windows.
I use the following functions:
<DllImport("kernel32.dll", SetLastError:=True)> _
Public Shared Function ReadProcessMemory(ByVal hProcess As IntPtr, _
ByVal lpBaseAddress As Int64, _
<Out()> ByVal lpBuffer As Byte(), _
ByVal dwSize As Integer, _
ByRef lpNumberOfBytesRead As Integer) As Boolean
End Function
<Flags>
Public Enum ProcessAccessFlags As UInteger
All = &H1F0FFF
Terminate = &H1
CreateThread = &H2
VirtualMemoryOperation = &H8
VirtualMemoryRead = &H10
VirtualMemoryWrite = &H20
DuplicateHandle = &H40
CreateProcess = &H80
SetQuota = &H100
SetInformation = &H200
QueryInformation = &H400
QueryLimitedInformation = &H1000
Synchronize = &H100000
End Enum
Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As ProcessAccessFlags, bInheritHandle As Boolean, processId As UInt32) As IntPtr
But when I want to read the position 7FF5F7E40024, I see the following error:
Attempted to read or write protected memory. This is often an
indication that other memory is corrupt
I am sure there is an Mp4 movie in this position of memory, and this position is not corrupt memory.
.net vb.net memory
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
I have a problem.
I want to read another process's memory in Windows.
I use the following functions:
<DllImport("kernel32.dll", SetLastError:=True)> _
Public Shared Function ReadProcessMemory(ByVal hProcess As IntPtr, _
ByVal lpBaseAddress As Int64, _
<Out()> ByVal lpBuffer As Byte(), _
ByVal dwSize As Integer, _
ByRef lpNumberOfBytesRead As Integer) As Boolean
End Function
<Flags>
Public Enum ProcessAccessFlags As UInteger
All = &H1F0FFF
Terminate = &H1
CreateThread = &H2
VirtualMemoryOperation = &H8
VirtualMemoryRead = &H10
VirtualMemoryWrite = &H20
DuplicateHandle = &H40
CreateProcess = &H80
SetQuota = &H100
SetInformation = &H200
QueryInformation = &H400
QueryLimitedInformation = &H1000
Synchronize = &H100000
End Enum
Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As ProcessAccessFlags, bInheritHandle As Boolean, processId As UInt32) As IntPtr
But when I want to read the position 7FF5F7E40024, I see the following error:
Attempted to read or write protected memory. This is often an
indication that other memory is corrupt
I am sure there is an Mp4 movie in this position of memory, and this position is not corrupt memory.
.net vb.net memory
.net vb.net memory
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
edited Jan 3 at 9:28
Ahmed Abdelhameed
6,56482347
6,56482347
asked Jan 3 at 9:20
M.R.JM.R.J
61
asked Jan 3 at 9:20
M.R.JM.R.J
61
asked Jan 3 at 9:20
M.R.JM.R.J
61
61
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
I experience this errorisn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?
– 500 - Internal Server Error
Jan 3 at 16:49
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16
add a comment |
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
I experience this errorisn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?
– 500 - Internal Server Error
Jan 3 at 16:49
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
I experience this error isn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?– 500 - Internal Server Error
Jan 3 at 16:49
I experience this error isn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?– 500 - Internal Server Error
Jan 3 at 16:49
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54019351%2fread-the-protected-memory-of-other-processes%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54019351%2fread-the-protected-memory-of-other-processes%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Exactly where (in response to what) do you see this error? From the sound of it, it's an access violation in your own process - it's not that you can't read that foreign address as such.
– 500 - Internal Server Error
Jan 3 at 10:01
When I start reading the memory of another process, I experience this error. I even worked as an administrator, but my program still encountered an error. How can a Cheat Engine(Software) have full access to the memory of other processes?
– M.R.J
Jan 3 at 15:56
I experience this errorisn't very concrete. Where? Does ReadProcessMemory return false, or what? What's the exact error message that you get?– 500 - Internal Server Error
Jan 3 at 16:49
The return value of the ReadProcessMemory function is false for me. I also used the GetLastError function, then return value was 8405688346201817088. My main goal is to convert the memory into a file.
– M.R.J
Jan 3 at 17:16