I think you want to use the getmodulehandle function from kernel32 to resolve the relative address. Then you can use the kernel32 readprocessmemory function with the "flat" address.
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
Posted: Fri Jul 16, 2010 2:20 pm Post subject:
justa_dude wrote:
I think you want to use the getmodulehandle function from kernel32 to resolve the relative address. Then you can use the kernel32 readprocessmemory function with the "flat" address.
GetModuleHandle only works inside the current process.
Quote:
How can i read this "nostalex.dat" pointer with my memory reading program
Use the Process and ProcessModule classes to obtain the processes information and to obtain the base address for "nostalex.dat", then use ReadProcessMemory to read the memory at the given location.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum