/* * Process Hacker - * memory region * * Copyright (C) 2008 wj32 * * This file is part of Process Hacker. * * Process Hacker is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * Process Hacker is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Process Hacker. If not, see . */ using System; using System.Collections.Generic; using System.Runtime.InteropServices; using System.Text; using ProcessHacker.Common.Objects; namespace ProcessHacker.Native { public class MemoryRegion : BaseObject { private static Dictionary _sizeCache = new Dictionary(); public static implicit operator int(MemoryRegion memory) { return memory.Memory.ToInt32(); } public static implicit operator IntPtr(MemoryRegion memory) { return memory.Memory; } public unsafe static implicit operator byte*(MemoryRegion memory) { return (byte*)memory.Memory; } public unsafe static explicit operator void*(MemoryRegion memory) { return (void*)memory.Memory; } public unsafe static explicit operator int*(MemoryRegion memory) { return (int*)memory.Memory; } private IntPtr _memory; private int _size; /// /// Creates a new, invalid memory allocation. /// You must set the pointer using the Memory property. /// protected MemoryRegion() { } public MemoryRegion(IntPtr memory) : this(memory, 0) { } public MemoryRegion(IntPtr memory, int offset) : this(memory, offset, 0) { } public MemoryRegion(IntPtr memory, int offset, int size) : this(memory.Increment(offset), size, false) { } protected MemoryRegion(IntPtr memory, int size, bool owned) : base(owned) { _memory = memory; _size = size; } protected sealed override void DisposeObject(bool disposing) { this.Free(); } protected virtual void Free() { } /// /// Gets a pointer to the allocated memory. /// public IntPtr Memory { get { return _memory; } protected set { _memory = value; } } /// /// Gets the size of the allocated memory. /// public virtual int Size { get { return _size; } protected set { _size = value; } } public MemoryRegionStream GetStream() { return new MemoryRegionStream(this); } private int GetStructSizeCached(Type structType) { if (!_sizeCache.ContainsKey(structType)) _sizeCache.Add(structType, Marshal.SizeOf(structType)); return _sizeCache[structType]; } public string ReadAnsiString(int offset) { return Marshal.PtrToStringAnsi(_memory.Increment(offset)); } public string ReadAnsiString(int offset, int length) { return Marshal.PtrToStringAnsi(_memory.Increment(offset), length); } public byte[] ReadBytes(int length) { return this.ReadBytes(0, length); } public byte[] ReadBytes(int offset, int length) { byte[] buffer = new byte[length]; this.ReadBytes(offset, buffer, 0, length); return buffer; } public void ReadBytes(byte[] buffer, int startIndex, int length) { this.ReadBytes(0, buffer, startIndex, length); } public void ReadBytes(int offset, byte[] buffer, int startIndex, int length) { Marshal.Copy(_memory.Increment(offset), buffer, startIndex, length); } /// /// Reads a signed integer. /// /// The offset at which to begin reading. /// The integer. public int ReadInt32(int offset) { return this.ReadInt32(offset, 0); } /// /// Reads a signed integer. /// /// The offset at which to begin reading. /// The index at which to begin reading, after the offset is added. /// The integer. public int ReadInt32(int offset, int index) { return Marshal.ReadInt32(_memory, offset + index * sizeof(int)); } public IntPtr ReadIntPtr(int offset) { return this.ReadIntPtr(offset, 0); } public IntPtr ReadIntPtr(int offset, int index) { return Marshal.ReadIntPtr(_memory, offset + index * IntPtr.Size); } /// /// Reads an unsigned integer. /// /// The offset at which to begin reading. /// The integer. public uint ReadUInt32(int offset) { return this.ReadUInt32(offset, 0); } /// /// Reads an unsigned integer. /// /// The offset at which to begin reading. /// The index at which to begin reading, after the offset is added. /// The integer. public uint ReadUInt32(int offset, int index) { return (uint)this.ReadInt32(offset, index); } /// /// Creates a struct from the memory allocation. /// /// The type of the struct. /// The new struct. public T ReadStruct() { return this.ReadStruct(0); } /// /// Creates a struct from the memory allocation. /// /// The type of the struct. /// The index at which to begin reading to the struct. This is multiplied by /// the size of the struct. /// The new struct. public T ReadStruct(int index) { return this.ReadStruct(0, index); } /// /// Creates a struct from the memory allocation. /// /// The type of the struct. /// The offset to add before reading. /// The index at which to begin reading to the struct. This is multiplied by /// the size of the struct. /// The new struct. public T ReadStruct(int offset, int index) { return (T)Marshal.PtrToStructure( _memory.Increment(offset + this.GetStructSizeCached(typeof(T)) * index), typeof(T)); } public string ReadUnicodeString(int offset) { return Marshal.PtrToStringUni(_memory.Increment(offset)); } public string ReadUnicodeString(int offset, int length) { return Marshal.PtrToStringUni(_memory.Increment(offset), length); } /// /// Writes a single byte to the memory allocation. /// /// The offset at which to write. /// The value of the byte. public void WriteByte(int offset, byte b) { Marshal.WriteByte(this, offset, b); } public void WriteBytes(int offset, byte[] b) { Marshal.Copy(b, 0, _memory.Increment(offset), b.Length); } public void WriteInt16(int offset, short i) { Marshal.WriteInt16(this, offset, i); } public void WriteInt32(int offset, int i) { Marshal.WriteInt32(this, offset, i); } public void WriteIntPtr(int offset, IntPtr i) { Marshal.WriteIntPtr(this, offset, i); } public void WriteMemory(int destOffset, IntPtr data, int srcOffset, int length) { ProcessHacker.Native.Api.Win32.RtlMoveMemory( _memory.Increment(destOffset), data.Increment(srcOffset), length.ToIntPtr() ); } public void WriteStruct(T s) { this.WriteStruct(0, s); } public void WriteStruct(int index, T s) { this.WriteStruct(0, index, s); } public void WriteStruct(int offset, int index, T s) { Marshal.StructureToPtr(s, _memory.Increment(offset + this.GetStructSizeCached(typeof(T)) * index), false); } /// /// Writes a Unicode string to the allocated memory. /// /// The offset to add. /// The string to write. public void WriteUnicodeString(int offset, string s) { byte[] b = UnicodeEncoding.Unicode.GetBytes(s); for (int i = 0; i < b.Length; i++) Marshal.WriteByte(this.Memory, offset + i, b[i]); } } }