Return process Memory Address of Application
cmd.exe file is running in memory and I want to get its address in memory. What function which can return me the address of a process or application? I got to know cmd.exe is running in library (dll) in windows. Windows run dll all the time. so, the process is already in memory. waiting for urgent reply.
Well, it isn't that easy. Each process gets its own virtual memory space. If you run cmd.exe, it will load its dll's in its own (private) memory space.
I am aware of two ways to peek into other processes memories: either use the windows "debug interface access" or these other process expicitly grant you some part of his memory (shared memory). (There used to be another way by installing system hooks, but IIRC this was considered evil and has been removed in Vista. Someone got more infos about this?)
But if you only want to call functions that cmd.exe is also able to call, you can load the DLL in question into your own program and call functions from it like for any other DLL.
Ciao, Imi.
I am aware of two ways to peek into other processes memories: either use the windows "debug interface access" or these other process expicitly grant you some part of his memory (shared memory). (There used to be another way by installing system hooks, but IIRC this was considered evil and has been removed in Vista. Someone got more infos about this?)
But if you only want to call functions that cmd.exe is also able to call, you can load the DLL in question into your own program and call functions from it like for any other DLL.
Ciao, Imi.
Topic archived. No new replies allowed.