RAMvader  1.4
A .NET library which provides access to other processes' memory space.
RAMvader.CodeInjection.MemoryAlterationNOP Class Reference

Represents a memory alteration that overwrites instructions of the target process' memory space with NOP instructions. More...

Inherits RAMvader.CodeInjection.MemoryAlterationBase.

Public Member Functions

 MemoryAlterationNOP (Target targetIORef, MemoryAddress targetAddress, int instructionSize)
 Constructor. More...
 
override bool SetEnabled< TMemoryAlterationID, TCodeCave, TVariable > (Injector< TMemoryAlterationID, TCodeCave, TVariable > injectorRef, bool bEnable)
 Called to activate or deactivate a memory alteration into the target process' memory space. More...
 

Additional Inherited Members

- Protected Member Functions inherited from RAMvader.CodeInjection.MemoryAlterationBase
 MemoryAlterationBase (Target targetIORef, MemoryAddress targetAddress, int targetSize)
 Constructor. The constructor will read the bytes of the target process' memory space and keep a "snapshot" of it at the moment the constructor is called. When a memory alteration gets disabled, this "snapshot" will be used to restore the original bytes of the instruction or value that was in the target process' memory space before it was activated. More...
 
- Protected Member Functions inherited from RAMvader.NotifyPropertyChangedAdapter
void SendPropertyChangedNotification ([CallerMemberName] string propertyName="")
 This method should be called inside PROPERTY SETTER METHODS to notify listeners of the "property changed" event that the property has been updated. More...
 
- Properties inherited from RAMvader.CodeInjection.MemoryAlterationBase
byte [] TargetOriginalBytes [get, protected set]
 Keeps the bytes that represent the original instruction or value that was in memory before the memory alteration got activated. More...
 
MemoryAddress TargetAddress [get, protected set]
 The address (in the target process' memory space) where the memory alteration will occur. More...
 
- Events inherited from RAMvader.NotifyPropertyChangedAdapter
PropertyChangedEventHandler PropertyChanged
 Used for implementing the INotifyPropertyChanged interface. More...
 

Detailed Description

Represents a memory alteration that overwrites instructions of the target process' memory space with NOP instructions.

Constructor & Destructor Documentation

◆ MemoryAlterationNOP()

RAMvader.CodeInjection.MemoryAlterationNOP.MemoryAlterationNOP ( Target  targetIORef,
MemoryAddress  targetAddress,
int  instructionSize 
)

Constructor.

Parameters
targetIORefA reference to the Target object that will be used to read the target process' memory space. This Target MUST be attached to a process, as it will be used in this constructor method to read the process' memory and keep a snapshot of the original bytes at the given 'targetAddress' for restoring their values, whenever MemoryAlterationNOP.SetEnabled<TMemoryAlterationID, TCodeCave, TVariable>(Injector<TMemoryAlterationID, TCodeCave, TVariable>, bool) is called to deactivate a memory alteration.
targetAddressThe address of the instruction(s) that will be replaced with NOP instructions.
instructionSizeThe size of the instruction(s) that will be replaced with NOP instructions.

Member Function Documentation

◆ SetEnabled< TMemoryAlterationID, TCodeCave, TVariable >()

override bool RAMvader.CodeInjection.MemoryAlterationNOP.SetEnabled< TMemoryAlterationID, TCodeCave, TVariable > ( Injector< TMemoryAlterationID, TCodeCave, TVariable >  injectorRef,
bool  bEnable 
)
virtual

Called to activate or deactivate a memory alteration into the target process' memory space.

Template Parameters
TMemoryAlterationIDThe enumeration of Memory Alteration Sets used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>.
TCodeCaveThe enumeration of Code Caves used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>.
TVariableThe enumeration of Injection Variables used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>.
Parameters
injectorRefA reference to an Injector<TMemoryAlterationSetID, TCodeCave, TVariable> object, with which you can perform I/O operations on the target process' memory space and access related data, like values and addresses of variables and code caves.
bEnableA flag specifying if the memory alteration should be enabled or disabled.
Returns
Returns a flag specifying if the operation was successful or not.

Implements RAMvader.CodeInjection.MemoryAlterationBase.