[HELP] Visual Basic.NET 05/08 - Read Memory

[IAmHawtness]

Originally Posted by Zeelia

Thanks guys, finally receiving some help ^.^
And thanks for the code examples, ookamocka and IAmHawtness, this will really help me to proceed with my code.

I hope you can help me if i get some more errors. I really want to do this since there is no (known) application which uses VB.NET, which really is the easiest language (except English).

*EDIT* I have one question though, it may sound newbie.
To use memory addresses in VB I have to replace the initiating double-zeros with &H, right?
But what do I have to do if I have a memory address starting with only one zero?
Is the "rule" that you should replace initiating double zero's with &H or ANY beginning zero, no matter how many, with &H?
I'd really appreciate an answer on this one =)

Thanks!
//Zeelia

If you have an address, say 1B4AD589, then in VB you'd just put &H in fron of all of it: &H1B4AD589. Only reason you put &H in front is so VB knows that it's hexadecimal. It will remove the zeros infront of the hex number automatically, if there is anything to remove.

[_tao4229_]

You don't need to call OpenProcess using the ID, .NET provides the native handle as 'variable_name'.Handle. From there you can directly call Read/WriteProcessMemory.

[Zeelia]

@IAmHawtness yes I know, thank you. I was just stupid because I put the memory address in a string variable so that's why VB didn't do it automatically. When I removed the quotes, all the magic happened =)

@_tao4229_ Ohh you're right! Thanks
Since I'm using FindWindow, I get the handle directly. But how do you mean with "'variable_name'.Handle"?
Handle is not a property of an integer which the handle variable is.

And here's how I get the handle now, thanks to tao4229:

PHP Code:

            ProcessHandle = FindWindow(vbNullString, "[Conquer] Raiding Clans")
            GetWindowThreadProcessId(ProcessHandle, ProcessID)
            fReadProcessMemory(&H82B010) 


[IAmHawtness]

Originally Posted by Zeelia

Okay so first I don't know how to find the player base address.But for the charname, I have the memory address which isn't static, and I'm having troubles finding the pointer and offset because nothing writes to the memory address while I'm logged in so I have to do a pointer scan which really takes long time... Maybe its here that the player base address comes in?

Public Const PlayerBaseAddrPtr As Long = &H691CA0

Public Const NamePtrOffset = &H10C
Public Const XCoordOffset = &H1B8
Public Const YCoordOffset = &H1BC
Public Const IDOffset = &H88

To find your char name you could do something like:

Dim BaseAddress as long
Dim NamePtrAddress as long
Dim Name(16) as byte

ReadProcessMemory ProcessHandle, PlayerBaseAddrPtr, BaseAddress, 8, 0 
ReadProcessMemory ProcessHandle, BaseAddress + NamePtrOffset, NamePtrAddress, 8, 0
ReadProcessMemory ProcessHandle, NamePtrAddress, Name(0), 16, 0

CharName.Text = StrConv(Name, vbUnicode)

That's if not .NET has some other string converting feature that I'm not aware of.

[Zeelia]

Thank you!

In fact, since the return from the memory is in a byte, there is this function which I have been told to use:
System.Text.UnicodeEncoding.Unicode.GetString(Name )

But i guess they work the same =)

I'm gonna start up cheat engine to get the memory addresses and I'll test the example you posted above.
I'll edit this post in a few minutes...

*EDIT* Okay. I think I have some kind of error in my code... Maybe while I'm retrieving the window handle, I don't know :S.
All the memory addresses I try give me an error and the code you supplied also gives me errors.
I'm using Err.LastDllError and it returns error '6' which means that my variables have the wrong properties (I think).
I changed the declared function into:

PHP Code:

Public Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Long, ByRef lpBuffer As Long, ByVal nSize As Integer, ByRef lpNumberOfBytesWritten As Integer) As Integer 


and now it returns null.
Any ideas??

[IAmHawtness]

Originally Posted by Zeelia

Thank you!

In fact, since the return from the memory is in a byte, there is this function which I have been told to use:
System.Text.UnicodeEncoding.Unicode.GetString(Name )

But i guess they work the same =)

I'm gonna start up cheat engine to get the memory addresses and I'll test the example you posted above.
I'll edit this post in a few minutes...

Good luck

[Zeelia]

*bump*
okay edited my post
just bumping so you know that I've edited^^