Artemis/Artemis/Artemis/Utilities/Memory/Win32.cs

using System;
using System.Runtime.InteropServices;

namespace Artemis.Utilities.Memory
{
    /// <summary>
    ///     Win32 methods
    /// </summary>
    public static class Win32
    {
        [Flags]
        public enum ProcessAccessType
        {
            PROCESS_TERMINATE = 0x0001,
            PROCESS_CREATE_THREAD = 0x0002,
            PROCESS_SET_SESSIONID = 0x0004,
            PROCESS_VM_OPERATION = 0x0008,
            PROCESS_VM_READ = 0x0010,
            PROCESS_VM_WRITE = 0x0020,
            PROCESS_DUP_HANDLE = 0x0040,
            PROCESS_CREATE_PROCESS = 0x0080,
            PROCESS_SET_QUOTA = 0x0100,
            PROCESS_SET_INFORMATION = 0x0200,
            PROCESS_QUERY_INFORMATION = 0x0400
        }

        [DllImport("kernel32.dll", SetLastError = true)]
        public static extern bool WriteProcessMemory(
            IntPtr process, IntPtr address, byte[] buffer, uint size, ref uint written);

        [DllImport("Kernel32.dll", SetLastError = true)]
        public static extern bool ReadProcessMemory(
            IntPtr process, IntPtr address, byte[] buffer, uint size, ref uint read);

        [DllImport("kernel32.dll")]
        public static extern IntPtr OpenProcess(
            [MarshalAs(UnmanagedType.U4)] ProcessAccessType access,
            [MarshalAs(UnmanagedType.Bool)] bool inheritHandler, uint processId);

        [DllImport("kernel32.dll")]
        public static extern int CloseHandle(IntPtr objectHandle);
    }
}