Method | Description | |
---|---|---|
Allocate ( |
Reserves a region of memory within the virtual address space of a specified process.
|
|
ChangeProtection ( |
Changes the protection on a region of committed pages in the virtual address space of a specified process.
|
|
CloseHandle ( |
Closes an open object handle.
|
|
Free ( |
Releases a region of memory within the virtual address space of a specified process.
|
|
NtQueryInformationProcess ( |
etrieves information about the specified process.
|
|
OpenProcess ( ProcessAccessFlags accessFlags, int processId ) : |
Opens an existing local process object.
|
|
Query ( |
Retrieves information about a range of pages within the virtual address space of a specified process.
|
|
Query ( |
Retrieves information about a range of pages within the virtual address space of a specified process.
|
|
ReadBytes ( |
Reads an array of bytes in the memory form the target process.
|
|
WriteBytes ( |
Writes data to an area of memory in a specified process.
|
public static Allocate ( |
||
processHandle | The handle to a process. | |
size | int | The size of the region of memory to allocate, in bytes. |
protectionFlags | MemoryProtectionFlags | The memory protection for the region of pages to be allocated. |
allocationFlags | MemoryAllocationFlags | The type of memory allocation. |
return |
public static ChangeProtection ( |
||
processHandle | A handle to the process whose memory protection is to be changed. | |
address | A pointer to the base address of the region of pages whose access protection attributes are to be changed. | |
size | int | The size of the region whose access protection attributes are changed, in bytes. |
protection | MemoryProtectionFlags | The memory protection option. |
return | MemoryProtectionFlags |
public static CloseHandle ( |
||
handle | A valid handle to an open object. | |
return | void |
public static Free ( |
||
processHandle | A handle to a process. | |
address | A pointer to the starting address of the region of memory to be freed. | |
return | void |
public static NtQueryInformationProcess ( |
||
processHandle | A handle to the process to query. | |
return |
public static OpenProcess ( ProcessAccessFlags accessFlags, int processId ) : |
||
accessFlags | ProcessAccessFlags | The access level to the process object. |
processId | int | The identifier of the local process to be opened. |
return |
public static Query ( |
||
processHandle | A handle to the process whose memory information is queried. | |
addressFrom | A pointer to the starting address of the region of pages to be queried. | |
addressTo | A pointer to the ending address of the region of pages to be queried. | |
return | IEnumerable |
public static Query ( |
||
processHandle | A handle to the process whose memory information is queried. | |
baseAddress | A pointer to the base address of the region of pages to be queried. | |
return |
public static ReadBytes ( |
||
processHandle | A handle to the process with memory that is being read. | |
address | A pointer to the base address in the specified process from which to read. | |
size | int | The number of bytes to be read from the specified process. |
return | byte[] |
public static WriteBytes ( |
||
processHandle | A handle to the process memory to be modified. | |
address | A pointer to the base address in the specified process to which data is written. | |
byteArray | byte | A buffer that contains data to be written in the address space of the specified process. |
return | int |