Read/Write ProcessMemory

[naitsabes85]

Hello,
How can i read or write a address with a value that has length more then 4?
Seams like ReadProcessMem only gets the first 4 of the value.

Im trying to get the whole value from a word that has length 17 in memory.

dim value as byte
GetWindowThreadProcessId hwnd, pid
phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid)
ReadProcessMem phandle, address, value, 1, 0&
CloseHandle hProcess

Thanks,
Naitsabes

[plenderj]

I assume you are referring to ReadProcessMemory()?
It's declaration is as follows;

Public Declare Function ReadProcessMemory Lib "kernel32" Alias "ReadProcessMemory" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long

So the 2nd last parameter is the amount of data to read. By the way, the last parameter is passed ByRef, so you should be passing in a variable of type Long to test if the correct amount of data was read.

[naitsabes85]

Something like this?

Dim valbuffer As Long
ReadProcessMemory phandle, &H5EB988, valbuffer, 17, 0&
Text1 = valbuffer

Thanks,
naitsabes

[penagate]

More like this

Public Declare Function ReadProcessMemory Lib "kernel32" Alias "ReadProcessMemory" _
    (ByVal hProcess As Long, _
     ByRef lpBaseAddress As Any, _
     ByRef lpBuffer As Any, _
     ByVal nSize As Long, _
     ByRef lpNumberOfBytesRead As Long) _
    As Long
 
Dim lngBytesRead        As Long
Dim bufReadBuffer(16)   As Byte
 
ReadProcessMemory phandle, _
                  ByVal &H5EB988&, _
                  ByVal VarPtr(bufReadBuffer(0)), _
                  ByVal 17&, _
                  lngBytesRead

[naitsabes85]

More like this

Public Declare Function ReadProcessMemory Lib "kernel32" Alias "ReadProcessMemory" _
    (ByVal hProcess As Long, _
     ByRef lpBaseAddress As Any, _
     ByRef lpBuffer As Any, _
     ByVal nSize As Long, _
     ByRef lpNumberOfBytesRead As Long) _
    As Long
 
Dim lngBytesRead        As Long
Dim bufReadBuffer(16)   As Byte
 
ReadProcessMemory phandle, _
                  ByVal &H5EB988&, _
                  ByVal VarPtr(bufReadBuffer(0)), _
                  ByVal 17&, _
                  lngBytesRead

Thanks ill try that!
naitsabes