Reading/Assembling Memory Format (Data)

Question

0.00/5 (No votes)

See more:

I am reading all of a processes's memory using C++ ReadProcessMemory. After I am done reading the memory of a process I own, what I do is I dump the memory to a binary file on the disk. I now want to read, that memory into something useful. Since it's the whole memory space of the process then it would have to have all the relevant sections, .text, data etc.

Can anyone point to a document or a tutorial on how to parse up I am assuming the PE Format memory ?

Posted 24-Jan-14 8:18am

CdnSecurityEngineer

Add a Solution

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Ron Beyer · Accepted Answer · 2014-01-24T08:30:00

Solution 1

http://msdn.microsoft.com/en-us/magazine/cc301805.aspx[^]

http://msdn.microsoft.com/en-us/magazine/ms809762.aspx[^]

http://support.microsoft.com/default.aspx?scid=kb;en-us;q121460[^]

Posted 24-Jan-14 8:30am

Ron Beyer

Reading/Assembling Memory Format (Data)

1 solution

Solution 1

Add your solution here

Preview 0

Reading/Assembling Memory Format (Data)

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us