frmread.frm

内存搜索

VERSION 5.00
Begin VB.Form ReadForm 
   BorderStyle     =   1  'Fixed Single
   Caption         =   "Read Process Memory"
   ClientHeight    =   4425
   ClientLeft      =   7905
   ClientTop       =   5130
   ClientWidth     =   4560
   LinkTopic       =   "Form1"
   MaxButton       =   0   'False
   ScaleHeight     =   4425
   ScaleWidth      =   4560
   ShowInTaskbar   =   0   'False
   Visible         =   0   'False
   Begin VB.ListBox Datas 
      Height          =   4155
      ItemData        =   "frmRead.frx":0000
      Left            =   1680
      List            =   "frmRead.frx":0002
      TabIndex        =   7
      Top             =   120
      Width           =   2775
   End
   Begin VB.CommandButton Read 
      Caption         =   "Read"
      Height          =   375
      Left            =   120
      TabIndex        =   6
      Top             =   1680
      Width           =   1455
   End
   Begin VB.TextBox Length 
      Appearance      =   0  'Flat
      Height          =   285
      Left            =   720
      TabIndex        =   5
      Text            =   "&H10"
      Top             =   1155
      Width           =   855
   End
   Begin VB.TextBox Base 
      Appearance      =   0  'Flat
      Height          =   285
      Left            =   720
      TabIndex        =   3
      Text            =   "&H"
      Top             =   675
      Width           =   855
   End
   Begin VB.TextBox ProcId 
      Alignment       =   1  'Right Justify
      Appearance      =   0  'Flat
      Enabled         =   0   'False
      Height          =   285
      Left            =   720
      TabIndex        =   1
      Top             =   195
      Width           =   855
   End
   Begin VB.Label Label3 
      AutoSize        =   -1  'True
      Caption         =   "Length"
      Height          =   195
      Left            =   120
      TabIndex        =   4
      Top             =   1200
      Width           =   495
   End
   Begin VB.Label Label2 
      AutoSize        =   -1  'True
      Caption         =   "Base"
      Height          =   195
      Left            =   120
      TabIndex        =   2
      Top             =   720
      Width           =   360
   End
   Begin VB.Label Label1 
      AutoSize        =   -1  'True
      Caption         =   "PID:"
      Height          =   195
      Left            =   120
      TabIndex        =   0
      Top             =   240
      Width           =   315
   End
End
Attribute VB_Name = "ReadForm"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Option Explicit

Private Sub Form_Load()
ProcId.Text = ProcessId

End Sub

Private Sub Read_Click()
Dim s() As Byte, n As Long, i As Long
Dim lBaseAddr As Long
Dim hProcess As Long

lBaseAddr = Val(Base.Text)
n = Val(Length.Text)
ReDim s(n - 1)

hProcess = OpenProcess(PROCESS_VM_OPERATION Or PROCESS_VM_READ Or PROCESS_VM_WRITE, 0, ProcessId)
If hProcess = 0 Then
    MsgBox "Cannot open the Process"
    Exit Sub
End If

ReadProcessMemory hProcess, lBaseAddr, s(0), n, ByVal 0&

Datas.Clear
For i = 0 To n - 1
    Datas.AddItem "λַ:" & Hex$((i + lBaseAddr)) & "H" & "= " & Hex$(s(i)) & "H"
Next

CloseHandle hProcess

End Sub