Originally Posted by Broderick
This is a quick function I just wrote to read a string from the remote process:
My ReadProcessMemory P/Invoke was this:
The following imports are required:
An example usage would be this:
Code:
Private Shared Function ReadRemoteString(ByVal hProcess As IntPtr, ByVal lpAddress As IntPtr, Optional ByVal encoding As Encoding = Nothing) As String
If encoding Is Nothing Then encoding = encoding.ASCII 'default encoding value.
Dim builder As New StringBuilder() 'easiest and cleanest way to build an unknown-length string.
Dim buffer(255) As Byte 'fucking despise VB's array declarations
Dim nbytes As Integer = 0
Dim terminator As Integer = -1
While terminator < 0 AndAlso ReadProcessMemory(hProcess, lpAddress, buffer, buffer.Length, nbytes) AndAlso nbytes > 0
lpAddress = New IntPtr(lpAddress.ToInt32() + nbytes) 'advance where we're reading from.
nbytes = builder.Length 'micro-optimization for .IndexOf
builder.Append(encoding.GetString(buffer)) 'append the data to the StringBuilder
terminator = builder.ToString().IndexOf(ControlChars.NullChar, nbytes) 'check if there's a null-byte in the string yet (strings are null-terminated)
End While
Return builder.ToString().Substring(0, terminator) 'return the data up til the null terminator.
End Function
Code:
<DllImport("kernel32.dll")>
Private Shared Function ReadProcessMemory(ByVal hProcess As IntPtr, ByVal lpAddress As IntPtr, ByVal lpBuffer As Byte(), ByVal szBuffer As Integer, <Out()> ByRef nBytesRead As Integer) As <MarshalAs(UnmanagedType.Bool)> Boolean
End Function
Code:
Imports System.Text Imports System.Runtime.InteropServices
Code:
Dim hProcess As IntPtr = OpenProcess( ... ) Dim value As String = ReadRemoteString(hProcess, New IntPtr(&H1F028), Encoding.Unicode) MessageBox.Show(value)
Ty for sharing me such a nice writed code. Gonna need it in future for sure
