How to get read AND write access to wow process?

[Shutzler]

Right now i only have read access, and i do it like this:

public Memory(int ProcessID)
        {
            this.ProcessID = ProcessID;
            System.Diagnostics.Process.EnterDebugMode();

            ProcessHandle = OpenProcess(OpenProcess_Access.VMRead | OpenProcess_Access.QueryInformation, false, ProcessID);
            if (ProcessHandle == 0)
                throw new Win32Exception("Unable to open process ID " + this.ProcessID);
        }

But i've come so far that i want to write to memory (i can fetch data i need). I've tried OpenProcess_Access.VMWrite but big bad message box says "Access Denied" all the time (silly box :P)

[Kryso]

[Only registered and activated users can see links. ]

Originally Posted by msdn

hProcess [in]
A handle to the process memory to be modified. The handle must have PROCESS_VM_WRITE and PROCESS_VM_OPERATION access to the process.

And if you still getting errors, you're not running as admin or something.

[Shutzler]

Okey, thanks for the input. Changed code to

ProcessHandle = OpenProcess(OpenProcess_Access.VMWrite & OpenProcess_Access.VMOperation, true, ProcessID);

And instead of access denied i got:

System.ComponentModel.Win32Exception: Unable to open process ID 4348

Im sure i run as Admin cuz i tried to build and then open EXE as administrator (running win7)

[Shutzler]

Changed somethings... and got this error:

System.ComponentModel.Win32Exception: Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

Wierd as it should work(it should, shouldnt it? )

const uint PROCESS_ALL_ACCESS = 0x000F0000 | 0x00100000 | 0xFFF;
ProcessHandle = OpenProcess(PROCESS_ALL_ACCESS , false, ProcessID);

the error shows up when the program tries to read a float.

what throws my exception:

        public float ReadFloat(uint address)
        {
            float value = 0f;
            int returnLength = 0;
            if (!ReadProcessMemory(ProcessHandle, address, out value, Marshal.SizeOf(value), out returnLength))
                throw new Win32Exception(Marshal.GetLastWin32Error());
            return value;
        }

[Kryso]

OpenProcess_Access.VMWrite & OpenProcess_Access.VMOperation

Learn something about bit operators


And for the second problem - change your import of ReadProcessMemory to:

            [DllImport( "kernel32.dll", SetLastError = true )]
            public static extern bool ReadProcessMemory( IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] lpBuffer, int nSize, out int lpNumberOfBytesRead );

[Shutzler]

Originally Posted by Kryso

Learn something about bit operators


And for the second problem - change your import of ReadProcessMemory to:

            [DllImport( "kernel32.dll", SetLastError = true )]
            public static extern bool ReadProcessMemory( IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] lpBuffer, int nSize, out int lpNumberOfBytesRead );

My operator mistake was allready corrected if you look at my third post. Should be working: const uint PROCESS_ALL_ACCESS = 0x000F0000 | 0x00100000 | 0xFFF;


But is there a difference is ur dll import and (??)

[DllImport("kernel32.dll", SetLastError = true)]
        public static extern bool ReadProcessMemory(
         int hProcess,
         uint lpBaseAddress,
         out byte[] buffer,
         int dwSize,
         out int lpNumberOfBytesRead
        );

Anyways... my reading was working all dandy and nice, it was when i tried to include some writing and add access the problems started.

[furang]

Does your application have debug privileges?
Kryso's right using winapi through importing necessary dll.
My code is unmanaged!)))

[bigtimt]

For the record. if you are using .Net and you use Process.EnterDebugMode(), you can also use Process.Handle. no need for OpenProcess.
The handle received from Process.Handle is an All_Access handle

[Kryso]

But is there a difference is ur dll import and (??)

[In, Out] != out