RAMvader
1.4
A .NET library which provides access to other processes' memory space.
|
Represents a memory alteration that overwrites instructions of the target process' memory space with custom bytes. More...
Inherits RAMvader.CodeInjection.MemoryAlterationBase.
Public Member Functions | |
MemoryAlterationPoke (Target targetIORef, MemoryAddress targetAddress, byte[] customBytes) | |
Constructor. More... | |
override bool | SetEnabled< TMemoryAlterationID, TCodeCave, TVariable > (Injector< TMemoryAlterationID, TCodeCave, TVariable > injectorRef, bool bEnable) |
Called to activate or deactivate a memory alteration into the target process' memory space. More... | |
Additional Inherited Members | |
Protected Member Functions inherited from RAMvader.CodeInjection.MemoryAlterationBase | |
MemoryAlterationBase (Target targetIORef, MemoryAddress targetAddress, int targetSize) | |
Constructor. The constructor will read the bytes of the target process' memory space and keep a "snapshot" of it at the moment the constructor is called. When a memory alteration gets disabled, this "snapshot" will be used to restore the original bytes of the instruction or value that was in the target process' memory space before it was activated. More... | |
Protected Member Functions inherited from RAMvader.NotifyPropertyChangedAdapter | |
void | SendPropertyChangedNotification ([CallerMemberName] string propertyName="") |
This method should be called inside PROPERTY SETTER METHODS to notify listeners of the "property changed" event that the property has been updated. More... | |
Properties inherited from RAMvader.CodeInjection.MemoryAlterationBase | |
byte [] | TargetOriginalBytes [get, protected set] |
Keeps the bytes that represent the original instruction or value that was in memory before the memory alteration got activated. More... | |
MemoryAddress | TargetAddress [get, protected set] |
The address (in the target process' memory space) where the memory alteration will occur. More... | |
Events inherited from RAMvader.NotifyPropertyChangedAdapter | |
PropertyChangedEventHandler | PropertyChanged |
Used for implementing the INotifyPropertyChanged interface. More... | |
Represents a memory alteration that overwrites instructions of the target process' memory space with custom bytes.
RAMvader.CodeInjection.MemoryAlterationPoke.MemoryAlterationPoke | ( | Target | targetIORef, |
MemoryAddress | targetAddress, | ||
byte [] | customBytes | ||
) |
Constructor.
targetIORef | A reference to the Target object that will be used to read the target process' memory space. This Target MUST be attached to a process, as it will be used in this constructor method to read the process' memory and keep a snapshot of the original bytes at the given 'targetAddress' for restoring their values, whenever MemoryAlterationPoke.SetEnabled<TMemoryAlterationID, TCodeCave, TVariable>(Injector<TMemoryAlterationID, TCodeCave, TVariable>, bool) is called to deactivate a memory alteration. |
targetAddress | The address of the instruction(s) that will be replaced with custom bytes. |
customBytes | The bytes which will replace the instruction(s) at the given address. The length of this array is used to determine the size of the instructions to be replaced at that address. |
|
virtual |
Called to activate or deactivate a memory alteration into the target process' memory space.
TMemoryAlterationID | The enumeration of Memory Alteration Sets used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>. |
TCodeCave | The enumeration of Code Caves used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>. |
TVariable | The enumeration of Injection Variables used for the Injector<TMemoryAlterationSetID, TCodeCave, TVariable>. |
injectorRef | A reference to an Injector<TMemoryAlterationSetID, TCodeCave, TVariable> object, with which you can perform I/O operations on the target process' memory space and access related data, like values and addresses of variables and code caves. |
bEnable | A flag specifying if the memory alteration should be enabled or disabled. |
Implements RAMvader.CodeInjection.MemoryAlterationBase.