Sign in to follow this  
Followers 0
Inververs

ReadProcessMemory

2 posts in this topic

#1 ·  Posted (edited)

Hi all.

This way I can take one value:

...
$Buffer = DllStructCreate("dword a;")
_WinAPI_ReadProcessMemory($hProcess, $DataPtr, DllStructGetPtr($Buffer), DllStructGetSize($Buffer), $read)
...

This way I can take two value:

...
$Buffer = DllStructCreate("dword a;dword b")
_WinAPI_ReadProcessMemory($hProcess, $DataPtr, DllStructGetPtr($Buffer), DllStructGetSize($Buffer), $read)
...

How to read multiple values at different addresses?

For example:

This is not a valid example

...
Dim $aAdresses[3]=[0x1005330,0x0100579C,0x0100319C]
_WinAPI_ReadProcessMemory($hProcess, $aAdresses, DllStructGetPtr($Buffer), DllStructGetSize(Buffer), $read)
...

:x

Edited by Odin

Share this post


Link to post
Share on other sites



#2 ·  Posted (edited)

Subsequently?

This is neither a valid example

Dim $aAdresses[3] = [0x1005330, 0x0100579C, 0x0100319C]
Dim $Buffer[UBound($aAdresses)-1]
For $i = 0 To UBound($aAdresses) - 1
    $Buffer[$i] = DllStructCreate("dword a;dword b")
    _WinAPI_ReadProcessMemory($hProcess, $aAdresses[$i], DllStructGetPtr($Buffer[$i]), DllStructGetSize($Buffer[$i]), $read)
Next
Edited by KaFu

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0