is there any way to list all memory locations that are being used for another program (one i did not create)?
Printable View
is there any way to list all memory locations that are being used for another program (one i did not create)?
Do u want to EDIT other process memory that OS distributed?
I only care a process virtual memory.
you can use
CreateToolhelp32Snapshot,Process32First,Process32Next
functions to get other process ID.
and use OpenProcess to get process handle,
last two functions:ReadProcessMemory and WriteProcessMemory,using them to read and write a process virtual memory.
maybe there are a few things i need to learn because i don't understand what you just said
what i want to do is see the value for alll variables being used in a game while its running. basically i just wanna check those values to find out whats going on internally and then change the values as the programs running, as a way of cheating :D
You could use the ASM debugger if you have Visual C++.
I know your intention.
I don't know there's suck game cheater in your country.
But there are in mine.
I have wrote a game cheater(only cheating in a specifed game),just use these fuction i said.
I first use common game cheater(in our country,they are FPE,Game Master,ect)find the memory position,and then use functions to change them.
Know more about Memroy functions ,look into MSDN.
k, thanks everyone
hey sproll. I have a question regarding readprocessmemory. I have gotten the pid of the program and I used openprocess with it but when I use readprocessmemory it always gets the very beginning of memory not the beggining of memory of the program I want. What am I doing wrong and how do I get the memory of the program? Thanks..
Hello,Bryan.
It's API Viewer's bug,like RegQueryValueEx function declaration.
Here is right declaration.
Public Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Long, lpBuffer As Integer, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Public Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Long, lpBuffer As Integer, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
We really need a new API Viewer.
Thanks for the info but how exactly do you use that? How do you get the output from it?