Memory/Process stuff

[xjake88x]

Hello. I recently got VB.net and wow, it's so much better than VB 6. Beyond compare!

I remember vb 6 couldn't multitask or handle processes or memory too well, it always crashed and stuff. VB.net seems to be better with that kind of stuff...

I have a question though. I'm into the whole memory string stuff (like ArtMoney). Is there a way I can search the memory of a process for a string or a number or something? This type of stuff really interests me and it's really the only thing I don't know much about.

Thanks,
Jake


P.S. I know i'm asking for probably a lot of code or something. If you can point me to some examples that would be great!

Thanks again .

[Pirate]

Start from this class , read about it on MSDN help:
System.Diagnostics.Process()

for the memory stuff , I don't think .NET Framework classes will be any better than APIs .

[xjake88x]

Thanks . I just remember, VB 6 crashed with the APIs and stuff.

[Merrion]

Also System.Interop.Marshalling can be used here....
I have some of the VB6 debugger converted to .NET but it needs much work

[xjake88x]

Hi, I don't seem to have any kind of System.Interop.Marshalling.. ..

[rjv_rnjn]

I think <Interop> specifier works only for the COM components that are being used in a .Net solution

[<ABX]

Could he have possibly meant:

System.Runtime.InteropServices
System.Runtime.InteropServices.Marshal

[xjake88x]

I figure it's not going to be anything in the .NET framework. It's basically something you can only do in C++, (or by using API's written in C++), because VB.NET and C#.NET are managed code, which means they can't access memory outside of it's own variables. If you try to access an index of an array that is past the Upper bound in VB or C#, you get an index out of bounds exception, but not in C++. In C++ you will get random values from the memory. Some of C++'s methods (not the .NET framework) can read and write memory outside of it's own allocated space. It involves the risk of memory fragmentation/corruption, though that can be fixed with an easy reboot . Basically, you need to use API's in C# and VB to perform such tasks. Now, I just need to figure out what API's. Does anybody know of some examples for searching memory for strings or something like that? Thanks

[Pirate]

I figure it's not going to be anything in the .NET framework. It's basically something you can only do in C++, (or by using API's written in C++), because VB.NET and C#.NET are managed code, which means they can't access memory outside of it's own variables. If you try to access an index of an array that is past the Upper bound in VB or C#, you get an index out of bounds exception, but not in C++. In C++ you will get random values from the memory. Some of C++'s methods (not the .NET framework) can read and write memory outside of it's own allocated space. It involves the risk of memory fragmentation/corruption, though that can be fixed with an easy reboot . Basically, you need to use API's in C# and VB to perform such tasks. Now, I just need to figure out what API's. Does anybody know of some examples for searching memory for strings or something like that? Thanks

Wrong! C#,specifically, can execute unmanaged code also like using pointers (in C\C++) using unsafe keyword .

[xjake88x]

Well VB can execute unmanaged code thru APIs.. If C# can do it without API's then my MCSD .NET certification course is wrong .

[ice_531]

MemoryCopy api.

Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)

or search msdn for RTLMOVEMEMORY

[Pirate]

I'm sorry . I wasn't clear enough . When I said "unmanaged" I meant pointers . I know VB.NET (or even old VB6) can use APIs . Here's what C# can do but not VB.NET : http://msdn.microsoft.com/library/de...clrfUnsafe.asp

[<ABX]

'Memory Copying
System.Runtime.InteropServices.Marshal.Copy

'Reading Memory
System.Runtime.InteropServices.Marshal.ReadByte()
System.Runtime.InteropServices.Marshal.ReadInt16()
System.Runtime.InteropServices.Marshal.ReadInt32()
System.Runtime.InteropServices.Marshal.ReadInt64()
'Writing
System.Runtime.InteropServices.Marshal.WriteByte()
System.Runtime.InteropServices.Marshal.WriteInt16()
System.Runtime.InteropServices.Marshal.WriteInt32()
System.Runtime.InteropServices.Marshal.WriteInt64()

Edit: Clarified