| |
|
|
| good evening...
is it possible with others Prozessen whom last aufgetretenen API-Error (GetLastError) auszulesen?
Have strain a call get => must same works. everything further therefore tommorrow .
Greeting
Andreas |
|
|
| |
|
|
|
| so, then time go... it's about subesquent View source: CompileMarkSeparationDef @GetLastError(0) !"KERNEL32","GetLastError"
Def @SetLastError(1) !"KERNEL32","SetLastError"
DEF @GetDlgCtrlID(1) !"USER32","GetDlgCtrlID"
DEF @ButtonClicked(1) @GetDlgCtrlID(@&(1))=-%MENUITEM
Def @FreeLibrary(1) !"kernel32","FreeLibrary"
Declare Error&,Zurück&,Prod&
WindowStyle 31
WindowTitle "SetLastError"
Window 0,0-640,440
LET Zurück&=@CreateButton(%HWND,"Fehler setzen",20,20,300,30)
LET Prod&=@CreateButton(%HWND,"Fehler produzieren",20,80,300,30)
While 0=0
Waitinput
IF @ButtonClicked(Zurück&)
CLS
Locate 15,0
@SetLastError($0ABC1234)
Print "$"+@HEX$(@GetLastError())," "+@str$(@GetLastError())
ElseIF @ButtonClicked(Prod&)
CLS
Locate 15,0
@FreeLibrary(0)
Print @GetLastError()
endif
wend
After the started the Quelltextes becomes first the Button Error settle klicked. now started we time [...] and Mark whom Process PROFAN.EXE. in the Menu becomes then Program/Options and number in Bytefolge select and whom then erscheinenden dialog $ABC1234 association. now clicking we right in that Treeview on PROFAN.EXE, dial memory search from and clicking thereafter (without in the dialog something To Change) on the Button memory search. TNT seek now in memory of PROFAN.EXE to the number $ABC1234, The the worth of GetLastError corresponds to. quite end the for User accessible virtual Prozessspeichers becomes [...] fündig: windows2000 (SP2 and SP4) => address 2147344436
Change we now through You can the Buttons Error produzieren the value of GetLastError, changes itself too the worth, the in memory on this place standing.
These address relating itself but apparently not only on this a Process, sonder on this address shining in each Process the worth of GetLastError To stand. what me now yet interested: How sounds The found address XP? can me there someone help?? |
|
|
| |
|
|
|
| under not NT-based Systemen sees The thing against it differently from. there the virtual memory, in the the worth of GetLastError stored becomes, on this place complete differently manages becomes as NT, has there eachone Process another Errorcodeadresse. |
|
|
| |
|
|