private void button1_Click(object sender, EventArgs e)
{
IntPtr kernel = Win32API.GetModuleHandle("kernel32.dll");
if (kernel == IntPtr.Zero)
{
label2.Text = "ERROR";
}
else
{
label2.Text = Convert.ToString(kernel.ToInt64(), 16);
progressBar1.PerformStep();
}
IntPtr lploadlibrary = Win32API.GetProcAddress(kernel, "LoadLibraryA");
if (lploadlibrary == IntPtr.Zero)
{
label4.Text = "ERROR";
}
else
{
label4.Text = Convert.ToString(lploadlibrary.ToInt64(), 16);
progressBar1.PerformStep();
}
IntPtr param = Win32API.VirtualAllocEx(MyProc.Handle, (IntPtr)0, 100, Win32API.MEM_COMMIT, Win32API.PAGE_EXECUTE_READWRITE);
if (param == IntPtr.Zero)
{
label6.Text = "ERROR";
}
else
{
label6.Text = Convert.ToString(param.ToInt64(), 16);
progressBar1.PerformStep();
}
bool wpm = EditMemory.WriteMemoryAOB(MyProc.Handle, param, richTextBox1.Text);
if (wpm == false)
{
label8.Text = "ERROR";
}
else
{
label8.Text = Convert.ToString(wpm);
progressBar1.PerformStep();
}
IntPtr remoteThread = Win32API.CreateRemoteThread(MyProc.Handle, 0, 0, lploadlibrary, param, 0, (IntPtr)0);
if (remoteThread == IntPtr.Zero)
{
label10.Text = "ERROR";
}
else
{
label10.Text = Convert.ToString(remoteThread.ToInt64(), 16);
progressBar1.PerformStep();
Win32API.CloseHandle(remoteThread);
}
}
