-
Notifications
You must be signed in to change notification settings - Fork 6
/
ReClassNetDataReader.cs
75 lines (60 loc) · 1.67 KB
/
ReClassNetDataReader.cs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
using System;
using System.Collections.Generic;
using System.Diagnostics.Contracts;
using System.Linq;
using Microsoft.Diagnostics.Runtime;
using ReClassNET.Extensions;
using ReClassNET.Memory;
namespace DotNetInspectorPlugin
{
internal class ReClassNetDataReader : IDataReader
{
private readonly RemoteProcess process;
public ReClassNetDataReader(RemoteProcess process)
{
Contract.Requires(process != null);
this.process = process;
}
public IList<ModuleInfo> EnumerateModules()
{
process.EnumerateRemoteSectionsAndModules(out _, out var modules);
return modules
.Select(m => new ModuleInfo(this)
{
FileName = m.Path,
ImageBase = (ulong)m.Start,
FileSize = (uint)m.End.Sub(m.Start)
})
.ToList();
}
public Architecture GetArchitecture()
{
return IntPtr.Size == 4 ? Architecture.X86 : Architecture.Amd64;
}
public uint GetPointerSize()
{
return (uint)IntPtr.Size;
}
public bool ReadMemory(ulong address, byte[] buffer, int bytesRequested, out int bytesRead)
{
Contract.Requires(buffer != null);
bytesRead = bytesRequested;
return process.ReadRemoteMemoryIntoBuffer((IntPtr)address, ref buffer, 0, bytesRequested);
}
public bool ReadMemory(ulong address, IntPtr buffer, int bytesRequested, out int bytesRead)
{
bytesRead = bytesRequested;
var temp = new byte[bytesRequested];
if (!process.ReadRemoteMemoryIntoBuffer((IntPtr)address, ref temp))
{
return false;
}
System.Runtime.InteropServices.Marshal.Copy(temp, 0, buffer, bytesRequested);
return true;
}
public ulong ReadPointerUnsafe(ulong address)
{
return process.ReadRemoteUInt64((IntPtr)address);
}
}
}