ProcessMemory

ProcessMemory is a small Windows x64 library for reading, writing, allocating, and traversing memory in another process.

Version 1.4 targets .NET Framework 4.7.2. It keeps the established read/write API, makes reads non-invasive, requires complete reads, and adds wildcard signature scanning.

Install

dotnet add package ProcessMemory --version 1.4.0

The consuming application must run as x64 and may require elevated permissions to open its target process.

Example

var memory = new ProcessMemory("MyGame");

if (memory.CheckProcess()) {
    var baseAddress = new IntPtr(memory.getBaseAddress);
    var value = memory.ReadInt32(baseAddress + 0x1234);
    memory.WriteInt32(baseAddress + 0x1234, value + 1);
}

Use null bytes as wildcards when scanning a memory region:

IntPtr match = memory.FindPattern(
    new IntPtr(memory.getBaseAddress),
    moduleSize,
    new byte?[] { 0x48, 0x8B, null, null, null, null, 0x48, 0x85 }
);