Hi all.

I would like to know, how do get the memory range a process is using? like the base address and end address. I want to make a memory scanner like tsearch,cheat engine,art money etc.

Ideas?

__________________

---

Sorry that I'm not familiar with Delphi nor Pascal, but you can do this with these languages? I'm not even sure if we can do this with C++ I personally haven't tried it out, but I think there must be something with operating system, since operating system is the one who's responsible in running a program...

__________________

---

From what i have seen you are able to do this with quite a few languages, C++ i am 99% sure you can and even VB/VB.NET i am 60% sure you can.

__________________

---

Not sure about searching through the actual memory ranges, but I know you can get the handles of windows and sub-windows and manipulate anything on screen you want. (Just use windows api to handle windows forms). Vb/.NET is hella easy at doing this - just load up Spy++ and literally "Spy" the hWnd names

__________________
Day Cares | Golf Courses | Disc Golf Courses | Campgrounds | Ice Rinks | Paintball Fields | Dentists | Plastic Surgeons | Aging Jokes
Catholic Churches | Lutheran Churches | Methodist Churches | Episcopal Churches | Clean Jokes

---

Hi

You can create this with c++,vb and delphi (cheat engine was created with dephi). The thing is i need to read a value from memory,the program uses DMA. I know you can NOP it and stuff, but only need to read this value, not change it.

So by scanning the memory i could find the memory address, for instance if a specific button is enabled, the value=30,once you click the button and it is enabled again it is =60 and click until it cannot be clicked anymore,starting over it would be 30 again.

Or unless someone as an idea how to read the text off a statusbar,there is where this value is displayed. I can read text off buttons,labels etc (with WM_GETTEXT). but cannot read it of a statusbar (have no idea why)

Maybe this would also help, the statusbar with the value is in a runtime created window, i am now reading the value from the process that created this window, if that helps...

ideas?

__________________

---