2

By already given specific process' handle, how can I move further to search for a specific keywords(bytes, ints(2 bytes), text(an array)) in its memory in code, using VC++ ?

1
  • Can you reframe the question? Keywords don't exist after the program has been compiled.
    – dirkgently
    Mar 8, 2009 at 8:32

2 Answers 2

3

I take it you want to scan through another's process raw memory. By definition, processes are and should be isolated from one another and have totally independent address spaces (your address 0x06573AF8 contains something entirely different from the corresponsing address in another process' address space).

However, there are a number of ways around this: in Windows, the classic answer is to write a specific DLL which you then inject into the address space of the other process. Take a look at CodeProject for some hands-on advice, or slightly more generally, wikipedia.

3

The easiest way is probably to use ReadProcessMemory. Also consider using WinDbg - it already has exactly this functionality.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.