202 questions
2
votes
1
answer
79
views
Why ReadProcessMemory finds less data than MiniDumpWriteDump on a simple process?
I have a very simple test python program (but I could be any program in another language) :
import time
PMMMEMPF = "KDOABC"
while True:
print(PMMMEMPF)
time.sleep(0.1)
Of course, ...
- 401
2
votes
1
answer
114
views
C++ ReadProcessMemory, base addresses
I tried to readprocessmemory of a game called wesnoth. But when i debug it the value is set to 0 for both bytes_read and gold_value.
But When i go into cheatengine and paste the pointer for the gold ...
- 23
-2
votes
1
answer
265
views
c# kernel32.dll readprocessmemory windows 11 returns error 299
I've implemented the ReadProcessMemory function from kernel32.dll using C# PInvoke. Compiling and installing on Windows 10 it functions flawlessly. However, installing the same program in Windows 11, ...
- 19
0
votes
0
answers
106
views
Read Process Memory for dynamic pointer
I am trying to read memory from a process (snes9x emulator) in Python using ReadProcessMemory. There is a memory viewer and I am supposed to get 16777216 at 0x01D27A3C (see picture). I tried to do ...
- 1
-4
votes
1
answer
467
views
Is there any method to readprocessmemory into a string and print it in console?
I already did this by a simple method:
#include <iostream>
#include <Windows.h>
#include <string>
using namespace std;
wstring astr2wstr(std::string & string_a){
int length ...
- 3
0
votes
0
answers
69
views
Why I cannot write to the process memory (WriteProcessMemory)? [duplicate]
Summary:
So basically I'm trying to read/write to the target process ConsoleApplication1.exe using ReadProcessMemory
and WriteProcessMemory functions in the winapi. I am able to read from the target ...
- 11
0
votes
1
answer
102
views
How to deal with large RegionSize in VirtualQueryEx?
I'm writing a simple memoryscanner in c, where I'm using VirtualQueryEx to scan an arbitrary process's memory.
VirtualQueryEx (hProc, addr, &meminfo, sizeof(meminfo)
I loop through all of the ...
- 1
0
votes
1
answer
650
views
Read Process Memory doesn't seem to give the right value
I am trying to read memory from a process (gameboy advance emulator) in Python using ReadProcessMemory. There is a memory viewer and I am supposed to get 81 at 0xD273 (see picture). I am new to this, ...
1
vote
0
answers
148
views
Read value of variable in a running Windows application process, also after restart
Is it possible at all to read the value (presumably a variable, since it changes every few seconds and is shown on screen) from a process in Windows? This is some custom, fairly old (10y) Windows GUI ...
- 11.6k
-1
votes
1
answer
1k
views
"Invalid access to memory location" with WriteProcessMemory
I code a script whose task is to "reset" a certain part of the process memory. I've got my Baseadress from process hacker 2 (https://cdn.discordapp.com/attachments/854061591312728085/...
1
vote
0
answers
364
views
Cannot find a string in another process memory
I am trying to explore win32 for a bit, and trying to find a string of a variable or something in memory of another process.
I have started notepad, written "hello", and cant find it in its ...
- 47
0
votes
1
answer
209
views
ReadProcessMemory() dont read pages with specific AllocationProtect values
I'm building a Memory Scanner and with some error handling I noticed that ReadProcessMemory() is reading 90% of process' pages, but the ones that have mbi.Protect value == 1 or 260 it fails and ...
0
votes
1
answer
236
views
How to read a buffer content after you call ReadProcessMemory() ? (python)
I'm building a Memory Scanner with ctypes and after I create a buffer with VirtualAlloc(), then I use ReadProcessMemory() to write the memory contents in the buffer, but how can I see the contents to ...
1
vote
0
answers
203
views
C# ReadProcessMemory AccessViolationException in WinForms but not in Console
I'm writing a program which reads and writes the memory of a process. For testing purposes I wrote it first in a console application, which works; but when I moved on to a WinForms/WPF application, I ...
-1
votes
1
answer
340
views
Why does ReadProcessMemory fail so often with ERROR_PARTIAL_COPY?
The following program tries to scan read/write pages of a foreign application with ReadProcessMemory():
#include <Windows.h>
#include <iostream>
#include <vector>
#include <...
- 3,171