Do you know a way to read Windows Program's RAM?

General
1

Hi, I've a program which unfortunately is abandoned, I would read its results and use NR fo send where i need, do you know if there is a node able to open Windows RAM and read certain locations? Do you know if it's possible to do it by another software that can provide those datas to NR? Thank you!

2

Not sure you're going to find that answer here - this is not a windows developer forum.

However, once you find an application that is able todo that (without AV from kicking in), then you can maybe use the exec node to run said application, that is attempting to read process memory

For any application to open up process memory in Windows, it will need to be able to.

  • Run as SYSTEM/Administrator
  • Make use of the windows API OpenProcess
  • Make use of the windows API ReadProcessMemory
  • Obtain access rights of PROCESS_VM_READ
  • Obtain a SeDebugPrivilege token inside the application reading the memory

Like I said, unless you're in luck - not sure you will find out how here.

There are node libraries around

  • ffi-napi
  • ref-napi

But not sure they will have been discussed

1 Like
3

thank you for reporting your experience. I've used WinHex to find the data I needed, but with such program seams there aren't ways to ask and get RAMs value with APIs.
So I?m looking for a tool, able to return me values when asked, or that could look for changes and send somehow to NR. Any ideas? Sometimes there are tools that may do that easy.. I just don't know )
ffi-napi and ref-napi seem not able to do this

4

As Marcus says, really not a Node-RED thing. However, check out Sysinternals Suite - Sysinternals | Microsoft Learn.

1 Like
5

Mates, thank you for suggestiong, I understand such topic looks not connected with NR but I?m not trying to figure out for a problem which does read RAM, I'm looing for something which is able to interface/send these values to NR, thisj is why I hope it can be useful to somebody else too here )
Anyway my first attempt was looking for somthing that can solve the issue and it's already available, fortunately, but it looks nothing about that does exist in NR world