来自进程的C#readprocessmemory有多个窗口

时间:2018-06-17 09:23:32

标签: process window readprocessmemory

使用作弊引擎,我可以从任何应用程序中看到所有窗口和搜索内存。

但是当我尝试使用C#readprocessmemory时,我只得到了该过程的主要应用程序。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace ConsoleApp1
{
    class Program
    {
        const int PROCESS_WM_READ = 0x0010;

        [DllImport("kernel32.dll")]
        public static extern IntPtr OpenProcess(int dwDesiredAccess, bool bInheritHandle, int dwProcessId);

        [DllImport("kernel32.dll")]
        public static extern bool ReadProcessMemory(int hProcess,
          int lpBaseAddress, byte[] lpBuffer, int dwSize, ref int lpNumberOfBytesRead);
        static void Main(string[] args)
        {
            Process process = Process.GetProcessesByName("testprocess")[0]; 
            IntPtr processHandle = OpenProcess(PROCESS_WM_READ, false, process.Id);

            int bytesRead = 0;
            byte[] buffer = new byte[24]; //'Hello World!' takes 12*2 bytes because of Unicode 


            // 0x0046A3B8 is the address where I found the string, replace it with what you found
            ReadProcessMemory((int)processHandle, 0x0046A3B8, buffer, buffer.Length, ref bytesRead);

            Console.WriteLine(Encoding.Unicode.GetString(buffer) +
               " (" + bytesRead.ToString() + "bytes)");

            Console.ReadLine();
        }
    }
}

如何从第二个窗口获取内存?

0 个答案:

没有答案