Click here to Skip to main content
15,922,309 members
Home / Discussions / C#
   

C#

 
GeneralRe: Parsing a custom date string to a DateTime Object Pin
Sunset Towers25-Feb-08 7:52
Sunset Towers25-Feb-08 7:52 
GeneralRe: Parsing a custom date string to a DateTime Object Pin
led mike25-Feb-08 8:10
led mike25-Feb-08 8:10 
GeneralSystem error codes, FormatMessage, and memory reading. [modified] Pin
Jitse25-Feb-08 5:55
Jitse25-Feb-08 5:55 
GeneralClear textbox problem Pin
Rick van Woudenberg25-Feb-08 5:30
Rick van Woudenberg25-Feb-08 5:30 
GeneralRe: Clear textbox problem --> And this works Pin
Rick van Woudenberg25-Feb-08 5:33
Rick van Woudenberg25-Feb-08 5:33 
GeneralRe: Clear textbox problem --> And this works Pin
Gareth H25-Feb-08 6:46
Gareth H25-Feb-08 6:46 
GeneralRe: Clear textbox problem Pin
engsrini25-Feb-08 11:47
engsrini25-Feb-08 11:47 
QuestionProcess memory, significant addresses Pin
Jitse25-Feb-08 4:33
Jitse25-Feb-08 4:33 
Hi ho Smile | :)

I've been experimenting with reading memory of other processes for a while now. And I've noticed the virtual addresses are quite weird.

First of all I can't access anything from 0x0 till 0xFFFF. This seems to be a forbidden area or so. :p I've never found a process that didn't have this 'offset'. The first readable address socket is 0x10000. I first thought this previous forbidden area (lower than 0x10000) was a Windows header or so, but it seems this 0x10000 and further is the windows header, including some data like the windir, cpu architecture, and so on.

Now you'd think the actual data of the process itself is just after this Windows header, but that's often not the case. Suddenly there's another piece of memory that's not accessible there. That keeps on going for a while.

Now I searched up some interesting addresses for certain processes (like the Minesweeper of Windows XP), and I can for example find the width and height of a minefield. But when you look at the actual address of this data, it's extremely high (relatively of course): 0x1005334. This is a hundred times higher than the first memory address that's accessible (0x10000).

I've researched a bit, but I can't find information about a certain structure Windows uses for process memory. Maybe there's a fixed virtual address where it actually starts to be interesting to read memory, because that's the actual memory allocated by the process itself?

Thanks in advance. Smile | :)
GeneralRe: Process memory, significant addresses Pin
Luc Pattyn25-Feb-08 4:48
sitebuilderLuc Pattyn25-Feb-08 4:48 
GeneralRe: Process memory, significant addresses Pin
Jitse25-Feb-08 5:02
Jitse25-Feb-08 5:02 
GeneralRe: Process memory, significant addresses Pin
Luc Pattyn25-Feb-08 5:28
sitebuilderLuc Pattyn25-Feb-08 5:28 
GeneralRe: Process memory, significant addresses Pin
Jitse25-Feb-08 5:43
Jitse25-Feb-08 5:43 
GeneralC# Windows Service shutting down Pin
Saamir25-Feb-08 4:04
Saamir25-Feb-08 4:04 
GeneralRead Outlook express - 6 contacts using c# 2005 Pin
Member 4463561 @##$#%$#%*(*&^(&)(_++[25-Feb-08 4:02
Member 4463561 @##$#%$#%*(*&^(&)(_++[25-Feb-08 4:02 
GeneralRe: Read Outlook express - 6 contacts using c# 2005 Pin
Judah Gabriel Himango25-Feb-08 5:54
sponsorJudah Gabriel Himango25-Feb-08 5:54 
GeneralRun time error Pin
Mc_Topaz25-Feb-08 3:57
Mc_Topaz25-Feb-08 3:57 
GeneralRe: Run time error Pin
Judah Gabriel Himango25-Feb-08 5:48
sponsorJudah Gabriel Himango25-Feb-08 5:48 
GeneralRe: Run time error [modified] Pin
Mc_Topaz25-Feb-08 20:23
Mc_Topaz25-Feb-08 20:23 
GeneralRe: Run time error Pin
Judah Gabriel Himango26-Feb-08 6:33
sponsorJudah Gabriel Himango26-Feb-08 6:33 
GeneralRe: Run time error Pin
Gareth H25-Feb-08 6:54
Gareth H25-Feb-08 6:54 
Question[Datagrid] How to disable row selection when Button from ButtonColumn is selected [modified] Pin
Soulhalo25-Feb-08 3:51
Soulhalo25-Feb-08 3:51 
QuestionPop3 Protocol Pin
Sunshine Always25-Feb-08 3:12
Sunshine Always25-Feb-08 3:12 
GeneralRe: Pop3 Protocol Pin
DaveyM6925-Feb-08 3:34
professionalDaveyM6925-Feb-08 3:34 
Generalround Pin
arkiboys25-Feb-08 2:09
arkiboys25-Feb-08 2:09 
GeneralRe: round Pin
DaveyM6925-Feb-08 2:14
professionalDaveyM6925-Feb-08 2:14 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.