搜索另一个进程的记忆 [英] Search the memory of another process

问题描述

有没有快速的方式来搜索/扫描某个进程的内存的特定值，
找到该值的位置，编辑并保存？

有例如窥视汤姆，但这很慢，Vista& Win7。

解决方案

您将不得不调试过程（即相当于将流程附加到您的自定义调试器），并使用 ReadProcessMemory 读取和 WriteProcessMemory 写入。 / p>

这是 Delphi代码覆盖项目正在插入断点以在运行时跟踪代码覆盖。

查看类 DebugProcess ，它具有读取和写入调试过程的内存的方法。 / p>

Is there a fast way to search/scan the memory of a process for a specific value, find the location of this value, edit and save it?

There are examples like Peeping Tom, but it's very slow and has issues with Vista & Win7.

解决方案

You will have to debug the process (i.e. the equivalent of attaching the process to your custom debugger) and use ReadProcessMemory to read and WriteProcessMemory to write.

This is what the Delphi Code Coverage project is doing to insert breakpoints to track code coverage at runtime.

Look at the class DebugProcess, it has methods to read and write to the memory of the debugged process.

这篇关于搜索另一个进程的记忆的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！