Solved

Memory

Posted on 1998-09-24
6
175 Views
Last Modified: 2010-04-06
Hello ,

Is it possible to get access to whole (physicly + virtual)
memory under windows using delphi/windows API ?

As i know accessing memory under protected mode possible
only from 0 ring or parent application/driver . But
"memory dump applications" reading memory without additional
VXD drivers.

Ivan
0
Comment
Question by:jecksom
  • 3
  • 2
6 Comments
 
LVL 20

Expert Comment

by:Madshi
ID: 1340739
Look at winAPI "VirtualProtect(Ex)". Sorry, have neither experience with these functions nor sources.

Regards, Madshi.
0
 
LVL 12

Expert Comment

by:rwilson032697
ID: 1340740
No it isn't, except by using a ring 0 device (VxD) and even then you are in tricky territory. Modern OSes simply cannot allow a process to have unrestricted _access_, even to read memory.

To do so would completely destroy any semblance of security.

Sorry :-(

Raymond.

0
 
LVL 1

Author Comment

by:jecksom
ID: 1340741
Hi , rwilson!

Well , i've already found solution . I can recommend you to look on win32 functions more
closer , which are :
VirtualQueryex
VirtualProtectex
read/writeProcessMemory
createprocesSnopShot ,first/Nextprocess,first/nextheap32,debug functions.
(o'coz some of those functions doesn't have support under NT 4.0 and probably will
be only from 5.0 > , but who could carry about users that using GUI - SERVER OS ?!?,
so it isn't a problem).

Thanx you anyway!
Jecksom

PS : Madshi ! You gave me great idea where to start , so after 2 days digging web pages ,
i've understand how it works !



0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 20

Expert Comment

by:Madshi
ID: 1340742
jecksom,

was this one-line-comment helpful enough for 175 points???
If it was, tell me. Then I will post a dummy answer.
If not, just keep the question idle. It will then be automatically deleted in a few weeks.

Regards, Madshi.
0
 
LVL 1

Author Comment

by:jecksom
ID: 1340743
Madshi !

Yep , i guess it 's enough for 175 point ! gimme your dummy answer ! :)

Jecksom

0
 
LVL 20

Accepted Solution

by:
Madshi earned 170 total points
ID: 1340744
Thank you, Jecksom...   :-)
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

A lot of questions regard threads in Delphi.   One of the more specific questions is how to show progress of the thread.   Updating a progressbar from inside a thread is a mistake. A solution to this would be to send a synchronized message to the…
This article explains how to create forms/units independent of other forms/units object names in a delphi project. Have you ever created a form for user input in a Delphi project and then had the need to have that same form in a other Delphi proj…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now