HILFE! Suchen nach Unicode im Speicher!!

[Astat]

Hallo NetComPlus, du kannst dir folgende Funktion umbauen.

Für die Suche schau mal da.
http://www.delphipraxis.net/internal...light=scanfile
http://www.delphipraxis.net/internal...light=scanfile
http://www.delphipraxis.net/internal...light=scanfile
http://www.delphipraxis.net/internal...light=scanfile

Delphi-Quellcode:

function GetMemoryDump(dwProcessId : DWORD) : string;
var
  hProcess : THandle;
  cbRead : cardinal;
  buf : array of char;
  memStart : pointer;
  memInfo : MEMORY_BASIC_INFORMATION;
  FileStream: TFileStream;
begin
  result := '';
  hProcess := OpenProcess(PROCESS_QUERY_INFORMATION or PROCESS_VM_READ, FALSE, dwProcessId);
  if hProcess = 0 then exit;
  FileStream := TFileStream.Create('MemoryDump.bin', fmCreate   or fmShareDenyNone);
  memstart := pointer($00000);
  while VirtualQueryEx(hProcess, memstart, memInfo, SizeOf(MEMORY_BASIC_INFORMATION)) = SizeOf(MEMORY_BASIC_INFORMATION) do
  begin
    if (meminfo.State = MEM_COMMIT) then
    begin
      setlength(buf, meminfo.RegionSize);
      if ReadProcessMemory(hProcess, memInfo.BaseAddress, buf, memInfo.RegionSize, cbRead) then
        FileStream.Write(buf[0], cbRead);
      //-- hier Buffer durchsuchen, wenn gefunden BaseAddress + regionsize - offset -> ausgeben
      setlength(buf, 0);
      buf := nil;
    end;
    DWORD(memstart) := DWORD(meminfo.BaseAddress) + meminfo.regionsize;
  end;
  CloseHandle(hProcess);
  FileStream.Free;
end;

lg. Astat