Search
Module:
Directory

   Desktop Functions:

   Smart Device Functions:


Show Recent Changes
Subscribe (RSS)
Misc. Pages
Comments
FAQ
Helpful Tools
Playground
Suggested Reading
Website TODO List
Download Visual Studio Add-In

WriteProcessMemory (kernel32)
 
.

VB.NET Signature:

C#

[DllImport("kernel32.dll")]
static extern bool WriteProcessMemory(
     IntPtr hProcess,
     IntPtr lpBaseAddress,
     byte[] lpBuffer,
     Int32 nSize,
     out IntPtr lpNumberOfBytesWritten
);

<DllImport("kernel32.dll", SetLastError:=True)> _
    Public Shared Function WriteProcessMemory(
    ByVal hProcess As IntPtr,
    ByVal lpBaseAddress As IntPtr,
    ByVal lpBuffer As Byte(),
    ByVal nSize As Int32,
    <Out()> ByRef lpNumberOfBytesWritten As IntPtr) As Boolean
    End Function

Note the "out" datatype; in your call, use out keyword in your parameter to pass the variable by reference instead of value, ex.,

IntPtr outSz;
WriteProcessMemory(hProcess,lpBaseAddress, lpBuffer, nSize, out outSz);

C# Signature:

[DllImport("kernel32.dll", SetLastError = true)]
  public static extern bool WriteProcessMemory(
  IntPtr hProcess,
  IntPtr lpBaseAddress,
  byte[] lpBuffer,
  Int32 nSize,
  out IntPtr lpNumberOfBytesWritten);

[DllImport("kernel32.dll", SetLastError = true)]
  public static extern bool WriteProcessMemory(
  IntPtr hProcess,
  IntPtr lpBaseAddress,
  [MarshalAs(UnmanagedType.AsAny)] object lpBuffer,
  int dwSize,
  out IntPtr lpNumberOfBytesWritten);

Boo Signature:

[DllImport("kernel32.dll")]
def WriteProcessMemory(hProcess as IntPtr, lpBaseAddress as IntPtr, lpBuffer as (byte), nSize as int, ref lpNumberOfBytesWritten as int) as bool:
     pass

C# Generic Usage Snippet: (Also added RPM-> ReadProcessMemory example)

public bool Wpm<T>(IntPtr lpBaseAddress, T value) where T : struct
    {
        var buffer = new T[Marshal.SizeOf<T>()];
        buffer[0] = value;
        return WriteProcessMemory(_gameProcess.Process.Handle, lpBaseAddress, buffer, Marshal.SizeOf<T>(), out var bytesread);
    }

public bool Wpm<T>(IntPtr lpBaseAddress, T value, List<int> offsets) where T : struct
    {
        IntPtr address = lpBaseAddress;

        var lastOffset = offsets.Last();
        offsets.RemoveAt(offsets.Count - 1);

        foreach (var offset in offsets)
        {
        address = Rpm<IntPtr>(IntPtr.Add(address, offset));
        }

        return Wpm<T>(IntPtr.Add(address, lastOffset), value);
    }

VB.NET Signature:

Please edit this page!

Do you have...

  • helpful tips or sample code to share for using this API in managed code?
  • corrections to the existing content?
  • variations of the signature you want to share?
  • additional languages you want to include?

Select "Edit This Page" on the right hand toolbar and edit it! Or add new pages containing supporting types needed for this API (structures, delegates, and more).

 
Access PInvoke.net directly from VS:
Terms of Use
Edit This Page
Find References
Show Printable Version
Revisions