michel-pi / processmemoryutilities.net Goto Github PK

Library version: 1.3.2
Function: NativeWrapper.ReadProcessMemory
ERROR MSG: "The type 'T' must be a non-nullable value type, along with all fields at any level of nesting, in order to use it as parameter 'T' in the generic type or method 'NativeWrapper.ReadProcessMemory(IntPtr, IntPtr, ref T)'"

Usage shown below

        public T ReadMemory<T>(IntPtr address)
            where T : struct
        {
            T result = default;
            if (this.IsInvalid || address.ToInt64() <= 0)
            {
                return result;
            }

            NativeWrapper.ReadProcessMemory(this.handle, address, ref result);
            return result;
        }

I need to search some value in 64bit app like cheatengiee?but i can't find any way.

Hi on the readme there is a mention of GetLastError function, but i could not find it anywhere in the Lib

Description
If the target process (x64 bit) closes while the caller of this library (x64 bit process) is reading the target process memory, ReadProcessMemory will get stuck in an infinite while loop. This is because NtReadVirtualMemory over here returns PARTIAL_COPY rather than INVALID_HANDLE.

Workaround
The caller can directly use the underlying NtReadVirtualMemory function and handle the errors himself. Since NtReadVirtualMemory doesn't have any kind of looping in it.

Expected Behavior
As a caller I expect the library to not hang in an infinite loop and at some point in time returns the controller to the caller. There can be multiple solutions I (as a dev) can think of (not sure which one would be perfect):
1: Over here check if the offset is zero, if yes, error out.
2: Put a limit on the while loop and ask the caller for the limit number.

hello
i know my question is stupid but i'll give try as i don't know about this things only i can do edit code or just compile it run
i downloaded a cheat using this bypass ByPh but it's deteced
someone says that " just modify the ByPh class in your esp where it reads the memory and write to the memory.
instead those use the methods from this dll to read and write the memory. "
so how can i use ur file to be undetected