Jump to content

ReadProcessMemory


Recommended Posts

Hi all.

This way I can take one value:

...
$Buffer = DllStructCreate("dword a;")
_WinAPI_ReadProcessMemory($hProcess, $DataPtr, DllStructGetPtr($Buffer), DllStructGetSize($Buffer), $read)
...

This way I can take two value:

...
$Buffer = DllStructCreate("dword a;dword b")
_WinAPI_ReadProcessMemory($hProcess, $DataPtr, DllStructGetPtr($Buffer), DllStructGetSize($Buffer), $read)
...

How to read multiple values at different addresses?

For example:

This is not a valid example

...
Dim $aAdresses[3]=[0x1005330,0x0100579C,0x0100319C]
_WinAPI_ReadProcessMemory($hProcess, $aAdresses, DllStructGetPtr($Buffer), DllStructGetSize(Buffer), $read)
...

:x

Edited by Odin
Link to comment
Share on other sites

Subsequently?

This is neither a valid example

Dim $aAdresses[3] = [0x1005330, 0x0100579C, 0x0100319C]
Dim $Buffer[UBound($aAdresses)-1]
For $i = 0 To UBound($aAdresses) - 1
    $Buffer[$i] = DllStructCreate("dword a;dword b")
    _WinAPI_ReadProcessMemory($hProcess, $aAdresses[$i], DllStructGetPtr($Buffer[$i]), DllStructGetSize($Buffer[$i]), $read)
Next
Edited by KaFu
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...