1. using System;
  2. using System.Runtime.InteropServices;
  4. namespace CS_WowInjection
  5. {
  6. internal static class NativeMethods
  7. {
  8. [DllImport("kernel32.dll")]
  9. public static extern int VirtualQueryEx(IntPtr hProcess, IntPtr lpAddress,
  10. out MEMORY_BASIC_INFORMATION lpBuffer, uint dwLength);
  12. [StructLayout(LayoutKind.Sequential)]
  13. public struct MEMORY_BASIC_INFORMATION
  14. {
  15. public IntPtr BaseAddress;
  16. public IntPtr AllocationBase;
  17. public MBI_Protect AllocationProtect;
  18. public ulong RegionSize;
  19. public MBI_State State;
  20. public MBI_Protect Protect;
  21. public MBI_Type Type;
  22. }
  24. public enum MBI_Protect : uint
  25. {
  26. PAGE_EXECUTE = 0x00000010,
  27. PAGE_EXECUTE_READ = 0x00000020,
  28. PAGE_EXECUTE_READWRITE = 0x00000040,
  29. PAGE_EXECUTE_WRITECOPY = 0x00000080,
  30. PAGE_NOACCESS = 0x00000001,
  31. PAGE_READONLY = 0x00000002,
  32. PAGE_READWRITE = 0x00000004,
  33. PAGE_WRITECOPY = 0x00000008,
  34. PAGE_GUARD = 0x00000100,
  35. PAGE_NOCACHE = 0x00000200,
  36. PAGE_WRITECOMBINE = 0x00000400
  37. }
  39. public enum MBI_State : uint
  40. {
  41. MEM_COMMIT = 0x1000,
  42. MEM_FREE = 0x10000,
  43. MEM_RESERVE = 0x2000
  44. }
  46. public enum MBI_Type : uint
  47. {
  48. MEM_IMAGE = 0x1000000,
  49. MEM_MAPPED = 0x40000,
  50. MEM_PRIVATE = 0x20000
  51. }
  53. [DllImport("kernel32.dll", SetLastError = true)]
  54. [return: MarshalAs(UnmanagedType.Bool)]
  55. public static extern bool ReadProcessMemory(
  56. IntPtr hProcess,
  57. IntPtr lpBaseAddress,
  58. [Out] byte[] lpBuffer,
  59. int dwSize,
  60. out int lpNumberOfBytesRead
  61. );
  62. }
  63. }