从外部地址读取浮点值
本文关键字:读取 地址 从外部 | 更新日期: 2023-09-27 18:18:05
我试图从外部地址获得浮点值。为此,我使用以下代码:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Diagnostics;
using System.Runtime.InteropServices;
using System.Windows.Forms;
namespace Reader
{
class Scanner
{
[DllImport("Kernel32.dll",SetLeastError=true)]
static extern bool ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, byte[] lpBuffer, UInt32 nSize, ref UInt32 lpNumberOfBytesRead);
unsafe public static string[] getCharValues()
{
try
{
Process[] pr = Process.GetProcessesByName("Prozess.exe");
Process process = pr[0];
uint baseAdress = (uint)process.MainModule.BaseAddress.ToInt32();
uint o = 0;
byte[] ret = new byte[10];
if(!ReadProcessMemory(process.Handle, (IntPtr)(process.MainModule.BaseAddress+0x156CC38), ret, (UInt32)ret.Length, ref o))
return new string[] {Marshal.GetLastWin32Error().TosTring()};
return new string[] { BitConverter.ToSingle(ret, 0).ToString() };
}
catch(IndexOutOfRangeException)
{
MessageBox.Show("Prozess ist vermutlich nicht geöffnet");
return new string[] {""};
}
}
}
}
返回的字符串数组写在文本框中,但始终为0。实际上应该是8000(这是作弊引擎的输出)我做错了什么?
错误码299
我只是写得很快,但这就是思想:
public float ReadFloat(InPtr address, HANDLE pHandle)
{
byte[] memory = new byte[4];
if (ReadProcessMemory(pHandle, address, memory, (UIntPtr)4, IntPtr.Zero))
{
float value = BitConverter.ToSingle(memory, 0);
return value;
}
return 0.0f;
}
如果是双精度,则使用8字节作为数组大小,确保读取8字节并使用Bitconverter.ToDouble(),并将float更改为double