C++ read memory address with pointer+offset -
i trying read address of process should number 20. determined address located @ dll base offset + number offset of 10. using
readprocessmemory(phandle, (void*)address, &number, sizeof(number), 0);
to read specific address. question how correctly search address located @ "57b86f68" + 10 offset?
you can read data handle if phandle
process handle process_vm_read access granted:
readprocessmemory(phandle, (void*)(0x57b86f68 + 0x10), &number, sizeof(number), 0);
to proper access rights process handle check openprocess
flags, process_vm_read
should there.
if still not working things more complex. should translate virtual address physical address , after direct access memory via kernel mode.
Comments
Post a Comment