Click here to Skip to main content
15,867,308 members
Articles / Programming Languages / C#

How to write a Memory Scanner using C#

Rate me:
Please Sign up or sign in to vote.
4.86/5 (67 votes)
23 Sep 2006CPOL8 min read 345.3K   16K   164  
Search a process' memory to find specified 16, 32 or 64 bit data values.
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Drawing.Drawing2D;
using System.Text;
using System.Windows.Forms;
using System.Diagnostics;

namespace MemoryScanner
{
    public partial class ProcessWindow : Form
    {
        public ProcessWindow()
        {
            InitializeComponent();
            #region User Interface
            Bitmap bitmap = new Bitmap(this.Width, this.Height);
            Graphics graphic = Graphics.FromImage(bitmap);
            graphic.SmoothingMode = SmoothingMode.AntiAlias;
            Rectangle rectangle = new Rectangle(0, 0, this.Width, this.Height);
            LinearGradientBrush brush = new LinearGradientBrush(rectangle, Color.LightSteelBlue, Color.SteelBlue, 90, true);
            graphic.FillRectangle(brush, rectangle);
            Bitmap terminalBitmap = global::MemoryScanner.Properties.Resources.ProcessImage;
            int distance = (this.Height - terminalBitmap.Height) / 2;
            Rectangle imageRectangel = new Rectangle((distance / 2), distance, terminalBitmap.Width, terminalBitmap.Height);
            graphic.DrawImage(terminalBitmap, imageRectangel);
            Pen pen = new Pen(Brushes.White, 4);
            graphic.DrawRectangle(pen, rectangle);
            this.BackgroundImage = (Image)bitmap;
            #endregion
        }

        Process[] tempProcesses;
        int[] IDsList;

        private void closeButton_Click(object sender, EventArgs e)
        {
            Application.Exit();
        }

        private void WriteTheList()
        {
            listBox.Items.Clear();
            tempProcesses = Process.GetProcesses();
            IDsList = new int[tempProcesses.Length];
            int i = 0;
            foreach (Process pro in tempProcesses)
            {
                if (pro.MainWindowTitle != "")
                {
                    listBox.Items.Add(pro.ProcessName + " - (" + pro.MainWindowTitle + ")");
                    IDsList[i] = pro.Id;
                    i++;
                }
                else
                {
                    listBox.Items.Add(pro.ProcessName);
                    IDsList[i] = pro.Id;
                    i++;
                }
            }
        }

        private void refreshButton_Click(object sender, EventArgs e)
        {
            WriteTheList();
        }

        private void ProcessWindow_Load(object sender, EventArgs e)
        {
            WriteTheList();
        }

        private void nextButton_Click(object sender, EventArgs e)
        {
            if (listBox.SelectedIndex != -1)
            {
                WholeMemoryScan whole = new WholeMemoryScan();
                whole.process = Process.GetProcessById(IDsList[listBox.SelectedIndex]);
                whole.Show();
                this.Hide();
            }
            else
            {
                MessageBox.Show("No process is selected.", "Selection error", MessageBoxButtons.OK, MessageBoxIcon.Warning);
            }
        }
    }
}

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
Founder Sojaner AB
Sweden Sweden
UX designer and full stack developer mainly focused on .NET technologies.
Currently loving .NET Core 2.0.

Comments and Discussions