如何注入/挂接正在运行的进程以从中获取信息？

Question

I'm trying to learn about injecting/hooking running processes.

I have a game running, and in the game you can type /coord to get a print of what your current X, Y coordinates are. Basically I want to just have this done automatically through a program so I was looking into how I might do this with C# but I'm not exactly sure what I would google to start to learn how exactly I might do this, basically I just want a small GUI that will update the X/Y position automatically as I move around.

I'm not exactly sure where to start if anybody can just point me in the right direction that would be great.

If this is too off-topic / broad feel free to close it, sorry for any inconvenience.

Answer 1

This is not really possible with c# only, unless the game is also written in c#, and you can somehow convince the game to load your module.

Otherwise, there will need to be atleast a native stub that starts up the .net runtime.

See this for an example of injecting native code in an application: http://www.codeproject.com/Articles/4610/Three-Ways-to-Inject-Your-Code-into-Another-Proces

This native code can then bootstrap whatever intermediate language you will use.

On the other hand, reading the process memory can be done from any language that can use the Windows API, using OpenProcess, ReadProcessMemory, CloseHandle .