[Najgor]

Really nicely done, will definitely try this out

[GoldStar]

I never noticed the Process.MainModule.ModuleMemorySize property. Nice post Proto, thanks.

same here. good job posting.

[SIM-99212]

Code

The WriteToDynamicAddress will write to a specific address that is calcualted using the following formula Baseaddress of the Process + Your Address = ReadAddress. The Buffer Paramter contains the data to write.

Just out of curiosity, would the WriteToDynamicAddress work as a RunPE substitute?

Nice code BTW.

[pr0t0typ3]

Code

The WriteToDynamicAddress will write to a specific address that is calcualted using the following formula Baseaddress of the Process + Your Address = ReadAddress. The Buffer Paramter contains the data to write.

Just out of curiosity, would the WriteToDynamicAddress work as a RunPE substitute?

Nice code BTW.

You could use it as a part of a RunPE but there are many other things that need to be done, like Setting a new Thread Context etc.

[RockYy]

Thanks proto. gonna look through it and if its too hard for me yet, I'll retry it later =)

[The-One]

Okey, I try to write it into a file like this:

Code

Dim id As IntPtr = p.Id
    Dim bt As Byte() = FullDump(id)
    Dim fs As New FileStream("dump.exe", FileMode.Create, FileAccess.Write)
    For i = 0 To bt.Length - 1
    fs.WriteByte(bt(i))
    Next
    fs.Close()

But all it does is nothing, to a file.

[pr0t0typ3]

Okey, I try to write it into a file like this:

Code

Dim id As IntPtr = p.Id
    Dim bt As Byte() = FullDump(id)
    Dim fs As New FileStream("dump.exe", FileMode.Create, FileAccess.Write)
    For i = 0 To bt.Length - 1
    fs.WriteByte(bt(i))
    Next
    fs.Close()

But all it does is nothing, to a file.

1. The ID is a Integer not Intptr
   


2. Why don't you use the much simpler IO.File.WriteAllBytes Function ?
   


3. Did you try debugging ? Is the Byte Array empty ?
   

Try to change the things above and test them and then tell me again.

[The-One]

1. The ID is a Integer not Intptr
   


2. Why don't you use the much simpler IO.File.WriteAllBytes Function ?
   


3. Did you try debugging ? Is the Byte Array empty ?
   

Try to change the things above and test them and then tell me again.

Tried that all and doesn't work. The file starts at 0x0010, but it has to start at 0x0400.