public static string GetListViewItem(IntPtr hwnd, uint processId, int item, int subItem = 0)
{
unsafe
{
string stringUni;
int num = 0;
IntPtr zero = IntPtr.Zero;
IntPtr intPtr = IntPtr.Zero;
IntPtr zero1 = IntPtr.Zero;
try
{
LV_ITEM lVITEM = new LV_ITEM();
zero1 = Marshal.AllocHGlobal(2048);
zero = ListViewItem1.OpenProcess(Win32ProcessAccessType.AllAccess, false, processId);
if (zero == IntPtr.Zero)
{
throw new ApplicationException("Failed to access process!");
}
intPtr = ListViewItem1.VirtualAllocEx(zero, IntPtr.Zero, 2048, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
if (intPtr == IntPtr.Zero)
{
throw new SystemException("Failed to allocate memory in remote process");
}
lVITEM.mask = 1;
lVITEM.iItem = item;
lVITEM.iSubItem = subItem;
lVITEM.pszText = (char *)(intPtr.ToInt32() + Marshal.SizeOf(typeof(LV_ITEM)));
lVITEM.cchTextMax = 500;
if (!ListViewItem1.WriteProcessMemory(zero, intPtr, ref lVITEM, (uint)Marshal.SizeOf(typeof(LV_ITEM)), out num))
{
throw new SystemException("Failed to write to process memory");
}
ListViewItem1.SendMessageTimeout(hwnd, 4171, IntPtr.Zero, intPtr, 2, 5000, IntPtr.Zero);
if (!ListViewItem1.ReadProcessMemory(zero, intPtr, zero1, 2048, out num))
{
throw new SystemException("Failed to read from process memory");
}
stringUni = Marshal.PtrToStringUni((IntPtr)(zero1.ToInt32() + Marshal.SizeOf(typeof(LV_ITEM))));
}
finally
{
if (zero1 != IntPtr.Zero)
{
Marshal.FreeHGlobal(zero1);
}
if (intPtr != IntPtr.Zero)
{
ListViewItem1.VirtualFreeEx(zero, intPtr, 0, Win32AllocationTypes.MEM_RELEASE);
}
if (zero != IntPtr.Zero)
{
ListViewItem1.CloseHandle(zero);
}
}
return(stringUni);
}
}
// Token: 0x06000577 RID: 1399 RVA: 0x00032FE4 File Offset: 0x000311E4
public static void SelectListViewItem(IntPtr hwnd, uint processId, int item)
{
IntPtr intPtr = IntPtr.Zero;
IntPtr intPtr2 = IntPtr.Zero;
IntPtr intPtr3 = IntPtr.Zero;
LV_ITEM lv_ITEM = default(LV_ITEM);
intPtr3 = Marshal.AllocHGlobal(2048);
intPtr = ListViewItem1.OpenProcess(Win32ProcessAccessType.AllAccess, false, processId);
intPtr2 = ListViewItem1.VirtualAllocEx(intPtr, IntPtr.Zero, 2048u, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
lv_ITEM.state = 3;
lv_ITEM.stateMask = 3;
IntPtr zero = IntPtr.Zero;
int num = 0;
ListViewItem1.WriteProcessMemory(intPtr, intPtr2, ref lv_ITEM, (uint)Marshal.SizeOf(typeof(LV_ITEM)), out num);
ListViewItem1.SendMessageTimeout(hwnd, 4139, (IntPtr)item, intPtr2, 2, 5000, IntPtr.Zero);
ListViewItem1.VirtualFreeEx(intPtr, intPtr2, 0, Win32AllocationTypes.MEM_RELEASE);
ListViewItem1.CloseHandle(intPtr);
}
// Token: 0x06000576 RID: 1398 RVA: 0x00032E84 File Offset: 0x00031084
public static void DoubleClickListView(IntPtr hwnd, uint processId, int item, int subitem)
{
IntPtr intPtr = IntPtr.Zero;
IntPtr intPtr2 = IntPtr.Zero;
NMHDR nmhdr;
nmhdr.hwndFrom = (int)hwnd;
nmhdr.idFrom = 116;
nmhdr.code = 515;
IntPtr hProcess = IntPtr.Zero;
hProcess = ListViewItem1.OpenProcess(Win32ProcessAccessType.AllAccess, false, processId);
intPtr = ListViewItem1.VirtualAllocEx(hProcess, IntPtr.Zero, 2048u, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
IntPtr zero = IntPtr.Zero;
int num = 0;
ListViewItem1.WriteProcessMemory(hProcess, intPtr, ref nmhdr, (uint)Marshal.SizeOf(typeof(NMHDR)), out num);
POINT point;
point.x = 31;
point.y = 31;
intPtr2 = ListViewItem1.VirtualAllocEx(hProcess, IntPtr.Zero, 2048u, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
ListViewItem1.WriteProcessMemory(hProcess, intPtr2, ref point, (uint)Marshal.SizeOf(typeof(POINT)), out num);
NMITEMACTIVATE nmitemactivate = default(NMITEMACTIVATE);
nmitemactivate.hdr = intPtr;
nmitemactivate.iItem = item;
nmitemactivate.iSubItem = subitem;
nmitemactivate.uOldState = 2u;
nmitemactivate.uNewState = 0u;
nmitemactivate.ptAction = intPtr2;
IntPtr intPtr3 = IntPtr.Zero;
intPtr3 = ListViewItem1.VirtualAllocEx(hProcess, IntPtr.Zero, 2048u, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
ListViewItem1.WriteProcessMemory(hProcess, intPtr3, ref nmitemactivate, (uint)Marshal.SizeOf(typeof(NMITEMACTIVATE)), out num);
ListViewItem1.SendMessageTimeout(hwnd, 78, (IntPtr)116, intPtr3, 2, 5000, IntPtr.Zero);
}
public static void DoubleClickListView(IntPtr hwnd, uint processId, int item, int subitem)
{
NMHDR nMHDR = new NMHDR();
POINT pOINT = new POINT();
IntPtr zero = IntPtr.Zero;
IntPtr intPtr = IntPtr.Zero;
nMHDR.hwndFrom = (int)hwnd;
nMHDR.idFrom = 116;
nMHDR.code = 515;
IntPtr zero1 = IntPtr.Zero;
zero1 = ListViewItem1.OpenProcess(Win32ProcessAccessType.AllAccess, false, processId);
zero = ListViewItem1.VirtualAllocEx(zero1, IntPtr.Zero, 2048, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
IntPtr intPtr1 = IntPtr.Zero;
int num = 0;
ListViewItem1.WriteProcessMemory(zero1, zero, ref nMHDR, (uint)Marshal.SizeOf(typeof(NMHDR)), out num);
pOINT.x = 31;
pOINT.y = 31;
intPtr = ListViewItem1.VirtualAllocEx(zero1, IntPtr.Zero, 2048, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
ListViewItem1.WriteProcessMemory(zero1, intPtr, ref pOINT, (uint)Marshal.SizeOf(typeof(POINT)), out num);
NMITEMACTIVATE nMITEMACTIVATE = new NMITEMACTIVATE()
{
hdr = zero,
iItem = item,
iSubItem = subitem,
uOldState = 2,
uNewState = 0,
ptAction = intPtr
};
IntPtr zero2 = IntPtr.Zero;
zero2 = ListViewItem1.VirtualAllocEx(zero1, IntPtr.Zero, 2048, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
ListViewItem1.WriteProcessMemory(zero1, zero2, ref nMITEMACTIVATE, (uint)Marshal.SizeOf(typeof(NMITEMACTIVATE)), out num);
ListViewItem1.SendMessageTimeout(hwnd, 78, (IntPtr)116, zero2, 2, 5000, IntPtr.Zero);
}
// Token: 0x06000578 RID: 1400 RVA: 0x000330AC File Offset: 0x000312AC
public static string GetListViewItem(IntPtr hwnd, uint processId, int item, int subItem = 0)
{
int num = 0;
IntPtr intPtr = IntPtr.Zero;
IntPtr intPtr2 = IntPtr.Zero;
IntPtr intPtr3 = IntPtr.Zero;
string result;
try
{
LV_ITEM lv_ITEM = default(LV_ITEM);
intPtr3 = Marshal.AllocHGlobal(2048);
intPtr = ListViewItem1.OpenProcess(Win32ProcessAccessType.AllAccess, false, processId);
bool flag = intPtr == IntPtr.Zero;
if (flag)
{
throw new ApplicationException("Failed to access process!");
}
intPtr2 = ListViewItem1.VirtualAllocEx(intPtr, IntPtr.Zero, 2048u, Win32AllocationTypes.MEM_COMMIT, Win32MemoryProtection.PAGE_READWRITE);
bool flag2 = intPtr2 == IntPtr.Zero;
if (flag2)
{
throw new SystemException("Failed to allocate memory in remote process");
}
lv_ITEM.mask = 1;
lv_ITEM.iItem = item;
lv_ITEM.iSubItem = subItem;
unsafe
{
lv_ITEM.pszText = (char *)(intPtr2.ToInt32() + Marshal.SizeOf(typeof(LV_ITEM)));
}
lv_ITEM.cchTextMax = 500;
bool flag3 = ListViewItem1.WriteProcessMemory(intPtr, intPtr2, ref lv_ITEM, (uint)Marshal.SizeOf(typeof(LV_ITEM)), out num);
bool flag4 = !flag3;
if (flag4)
{
throw new SystemException("Failed to write to process memory");
}
ListViewItem1.SendMessageTimeout(hwnd, 4171, IntPtr.Zero, intPtr2, 2, 5000, IntPtr.Zero);
flag3 = ListViewItem1.ReadProcessMemory(intPtr, intPtr2, intPtr3, 2048, out num);
bool flag5 = !flag3;
if (flag5)
{
throw new SystemException("Failed to read from process memory");
}
result = Marshal.PtrToStringUni((IntPtr)(intPtr3.ToInt32() + Marshal.SizeOf(typeof(LV_ITEM))));
}
finally
{
bool flag6 = intPtr3 != IntPtr.Zero;
if (flag6)
{
Marshal.FreeHGlobal(intPtr3);
}
bool flag7 = intPtr2 != IntPtr.Zero;
if (flag7)
{
ListViewItem1.VirtualFreeEx(intPtr, intPtr2, 0, Win32AllocationTypes.MEM_RELEASE);
}
bool flag8 = intPtr != IntPtr.Zero;
if (flag8)
{
ListViewItem1.CloseHandle(intPtr);
}
}
return(result);
}