下面是我的代码：

public static string ReadListViewItem(IntPtr lstview, int item)
{
    const int dwBufferSize = 1024;

    int dwProcessID;
    LV_ITEM lvItem;
    string retval;
    bool bSuccess;
    IntPtr hProcess = IntPtr.Zero;
    IntPtr lpRemoteBuffer = IntPtr.Zero;
    IntPtr lpLocalBuffer = IntPtr.Zero;
    IntPtr threadId = IntPtr.Zero;

    try
    {
        lvItem = new LV_ITEM();
        lpLocalBuffer = Marshal.AllocHGlobal(dwBufferSize);
        // Get the process id owning the window
        threadId = GetWindowThreadProcessId(lstview, out dwProcessID);
        if ((threadId == IntPtr.Zero) || (dwProcessID == 0))
            throw new ArgumentException("hWnd");

        // Open the process with all access
        hProcess = OpenProcess(PROCESS_ALL_ACCESS, false, dwProcessID);
        if (hProcess == IntPtr.Zero)
            throw new ApplicationException("Failed to access process");

        // Allocate a buffer in the remote process
        lpRemoteBuffer = VirtualAllocEx(hProcess, IntPtr.Zero, dwBufferSize, MEM_COMMIT,
          PAGE_READWRITE);
        if (lpRemoteBuffer == IntPtr.Zero)
            throw new SystemException("Failed to allocate memory in remote process");

        // Fill in the LVITEM struct, this is in your own process
        // Set the pszText member to somewhere in the remote buffer,
        // For the example I used the address imediately following the LVITEM stuct
        lvItem.mask = LVIF_TEXT;

        lvItem.iItem = item;
        lvItem.iSubItem = 2;
        lvItem.pszText = (IntPtr)(lpRemoteBuffer.ToInt32() + Marshal.SizeOf(typeof(LV_ITEM)));
        lvItem.cchTextMax = 50;

        // Copy the local LVITEM to the remote buffer
        bSuccess = WriteProcessMemory(hProcess, lpRemoteBuffer, ref lvItem,
          Marshal.SizeOf(typeof(LV_ITEM)), IntPtr.Zero);
        if (!bSuccess)
            throw new SystemException("Failed to write to process memory");

        // Send the message to the remote window with the address of the remote buffer
        SendMessage(lstview, LVM_GETITEMText, 0, lpRemoteBuffer);

        // Read the struct back from the remote process into local buffer
        bSuccess = ReadProcessMemory(hProcess, lpRemoteBuffer, lpLocalBuffer, dwBufferSize,IntPtr.Zero);
        if (!bSuccess)
            throw new SystemException("Failed to read from process memory");

        // At this point the lpLocalBuffer contains the returned LV_ITEM structure
        // the next line extracts the text from the buffer into a managed string
        retval = Marshal.PtrToStringAnsi((IntPtr)(lpLocalBuffer +
          Marshal.SizeOf(typeof(LV_ITEM))));
    }
    finally
    {
        if (lpLocalBuffer != IntPtr.Zero)
            Marshal.FreeHGlobal(lpLocalBuffer);
        if (lpRemoteBuffer != IntPtr.Zero)
            VirtualFreeEx(hProcess, lpRemoteBuffer, 0, MEM_RELEASE);
        if (hProcess != IntPtr.Zero)
            CloseHandle(hProcess);
    }
    return retval;
}

无论我做什么，retval都返回空，尽管lpLocalBuffer没有。
下面是LV_ITEM的定义：

[StructLayout(LayoutKind.Sequential)]
private struct LV_ITEM
{
    public int mask;
    public int iItem;
    public int iSubItem;
    public int state;
    public int stateMask;
    public IntPtr pszText;
    public int cchTextMax;
    public int iImage;
    internal int lParam;
    internal int iIndent;
}

我试过编译x86，x64，任何CPU，似乎没有工作在所有！
知道为什么会这样吗
C# + .NET 4，Windows 7 64位。