String mit ReadMemoryProcess auslesen

[Fridolin Walther]

Simpler wäre es wahrscheinlich die ReadWideStringFromProcessMemory Funktion anzupassen, so daß "Offline" zurückgegeben wird statt einem leeren String.

Delphi-Quellcode:

function ReadWideStringFromProcessMemory(PID : Cardinal; AddressOfString : Cardinal) : WideString; 
var 
  ProcessHandle : THandle; 
  WideCharRead : WideChar; 
  BytesRead : Cardinal; 
begin 
  Result := ''; 
  ProcessHandle := OpenProcess(PROCESS_VM_READ, FALSE, PID); 
  if ProcessHandle <> INVALID_HANDLE_VALUE then 
    begin 
      repeat 
        ReadProcessMemory(ProcessHandle, Pointer(AddressOfString), @WideCharRead, SizeOf(WideCharRead), BytesRead); 
        Inc(AddressOfString, SizeOf(WideCharRead)); 
        Result := Result + WideCharRead; 
      until (Word(WideCharRead) = 0) or (BytesRead <> SizeOf(WideCharRead)); 
      CloseHandle(ProcessHandle); 
    end; 
  if Result = '' then Result := 'Offline'; 
end;