There is the complete code
using System;
using System.Collections.Generic;
using System.Text;
using System.Collections;
using System.Diagnostics;
using System.Runtime.InteropServices;
namespace ConsoleApplication1
{
class Program
{
[Flags] //AccessRights
public enum ProcessAccessRights
{
PROCESS_VM_READ = (0x0010),
PROCESS_VM_WRITE = (0x0020),
PROCESS_VM_OPERATION = (0x0008)
}
[DllImport("kernel32.dll")] //OpenProcess function
public static extern IntPtr OpenProcess(UInt32 dwDesiredAccess, Int32 bInheiritHandle, UInt32 dwProcessId);
[DllImport("kernel32.dll")] //CloseHandle function
public static extern Int32 CloseHandle(IntPtr hObject);
[DllImport("kernel32.dll")] //ReadProcessMemory function
public static extern Int32 ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, out byte[] lpBuffer, UInt32 nSize, out IntPtr lpNumberOfBytesRead);
[DllImport("kernel32.dll")] //WriteProcessMemory function
public static extern Int32 WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, out byte[] lpBuffer, UInt32 nSize, out IntPtr lpNumberOfBytesRead);
[DllImport("kernel32.dll")] //GetLastError function
public static extern UInt32 GetLastError();
[DllImport("kernel32.dll")] //SetLastError function
public static extern void SetLastError(UInt32 dwErrorCode);
static void Main(string[] args)
{
Process[] MyProcess = Process.GetProcessesByName("calc");
IntPtr hprocess = OpenProcess((uint)ProcessAccessRights.PROCESS_VM_READ, 1, (uint)MyProcess[0].Id);
if (hprocess.ToInt32() == 0)
{
Console.WriteLine("Handle failed!");
return;
}
byte[] buffer = new byte[4];
IntPtr num;
SetLastError(0);
Int32 readResult = ReadProcessMemory(hprocess, (IntPtr)0x0B007A, out buffer, 4, out num);
if (0 == readResult)
{
UInt32 lastError = GetLastError();
Console.WriteLine("Last Error: {0}", lastError.ToString("X"));
}
string y = BitConverter.ToInt32(buffer, 0).ToString();
Console.WriteLine(y);
Console.ReadKey();
}
}
}
I am trying to read a memory address from Microsoft Windows XP SP2 calculator
and please tell is the process name the process name in task manager or something else
The exception message
Unhandled Exception: System.ArgumentOutOfRangeException: Index was out of range.
Must be non-negative and less than the size of the collection.
Parameter name: startIndex
at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argu
ment, ExceptionResource resource)
at System.BitConverter.ToInt32(Byte[] value, Int32 startIndex)
at ConsoleApplication1.Program.Main(String[] args) in E:\MY IMPORTANT FILES\N
ew Folder (2)\ConsoleApplication2\ConsoleApplication2\Program.cs:line 49
Press any key to continue . . .
By the way it's nice to meet some smart guys from the east I am from Egypt (I am only 15).
Thanks for your effort and time
