Skip to content

bresheske/Memtool

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Memtool

A console tool for reading, writing, and search another process's memory heap. Currently supports 4-byte integers, 1-byte bytes, and strings of multiple encoding.

Example

To start, run the program. A small help menu appears.

Okay, so we want to search for the process ID of our process, for example, we'll take a look at ZSNES, a super nintendo emulator. We need to run zsnes first, of course.

A simple search by the name found the id of 10160 very quickly. Alright, so let's search for 'NETPLAY', which is one of the menubar options. We need to change our encoding type to default, as this application does not use Unicode. Try both if you're not sure.

And there is our address. Let's try to edit it with write memory.

Sometimes this fails, and that could be for a number of reasons. Usually it's due to a protected memory location. In this case, it works just fine. Let's take a look at our zsnes application.

And we edited some memory to change 'netplay' over to 'banana!'. We can double-check our memory by calling the read memory method as well.

And notice on the right we can see 'banana!' being displayed in the print-out.

Have fun!

About

C# Memory tool. Read/Write/Search other process's memory.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages