forked from DaxxTrias/Process.NET
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathLocalProcessMemory.cs
More file actions
107 lines (101 loc) · 3.95 KB
/
LocalProcessMemory.cs
File metadata and controls
107 lines (101 loc) · 3.95 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
using System;
using System.Runtime.InteropServices;
using ProcessNET.Extensions;
using ProcessNET.Native.Types;
namespace ProcessNET.Memory
{
/// <summary>
/// Class for memory editing a process.
/// </summary>
/// <seealso cref="ProcessMemory" />
public class LocalProcessMemory : ProcessMemory
{
/// <summary>
/// Initializes a new instance of the <see cref="LocalProcessMemory" /> class.
/// </summary>
/// <param name="handle">The process.</param>
public LocalProcessMemory(SafeMemoryHandle handle) : base(handle)
{
}
/// <summary>
/// Writes a set of bytes to memory.
/// </summary>
/// <param name="intPtr">The address where the bytes start in memory.</param>
/// <param name="length">The length of the byte chunk to read from the memory address.</param>
/// <returns>
/// The byte array section read from memory.
/// </returns>
public override byte[] Read(IntPtr intPtr, int length)
{
var readBytes = new byte[length];
Read(intPtr, readBytes);
return readBytes;
}
/// <summary>
/// Writes a set of bytes to memory.
/// </summary>
/// <param name="intPtr">The address where the bytes start in memory.</param>
/// <param name="buffer">The buffer to read data onto, it's size determines the count of bytes to read.</param>
public override void Read(IntPtr intPtr, byte[] buffer)
{
int length = buffer.Length;
unsafe
{
var bytes = (byte*)intPtr;
for (var i = 0; i < length; i++)
buffer[i] = bytes[i];
}
}
/// <summary>
/// Reads the value of a specified type from memory.
/// </summary>
/// <typeparam name="T">The type of the value.</typeparam>
/// <param name="intPtr">The address where the value is read.</param>
/// <returns>A value.</returns>
public override T Read<T>(IntPtr intPtr)
{
return intPtr.Read<T>();
}
/// <summary>
/// Write an array of bytes in the remote process.
/// </summary>
/// <param name="intPtr">The address where the array is written.</param>
/// <param name="bytesToWrite">The array of bytes to write.</param>
public override int Write(IntPtr intPtr, byte[] bytesToWrite)
{
using (
new MemoryProtectionOperation(intPtr, bytesToWrite.Length, 0x40))
unsafe
{
var ptr = (byte*) intPtr;
for (var i = 0; i < bytesToWrite.Length; i++)
ptr[i] = bytesToWrite[i];
}
return bytesToWrite.Length;
}
/// <summary>
/// Writes the values of a specified type to memory.
/// </summary>
/// <typeparam name="T">The type of the value.</typeparam>
/// <param name="intPtr">The address where the value is written.</param>
/// <param name="value">The value to write.</param>
/// <param name="replace">
/// If the current value should be replaced. See
/// https://msdn.microsoft.com/en-us/library/4ca6d5z7(v=vs.100).aspx for details.
/// </param>
public void Write<T>(IntPtr intPtr, T value, bool replace)
{
Marshal.StructureToPtr(value, intPtr, replace);
}
/// <summary>
/// Writes the values of a specified type to memory.
/// </summary>
/// <typeparam name="T">The type of the value.</typeparam>
/// <param name="intPtr">The address where the value is written.</param>
/// <param name="value">The value to write.</param>
public override void Write<T>(IntPtr intPtr, T value)
{
Write(intPtr, value, false);
}
}
}