1

I would like to scan (or alternatively dump) memory that a DLL accesses while it's running. Scanning the application's (EXE) memory is not feasible (too large), and the DLL needs the application to run.

Are there any tools like this?

  • how big is the executable? – rev Apr 9 '15 at 12:00
  • @AcidShout The EXE itself is about 14MB, but it uses somewhere around 400-500MB of memory. DLL is 2MB and should use significantly less memory. – Joona Apr 9 '15 at 12:22
  • I'm not sure of how much computing power you have, but 500MB is not that much. You should try scanning. If you're on Windows, however, you can set a PAGE_GUARD memory protection, and you'll get a notification (as exception) each time the memory is accesed (execute, read, or write). – rev Apr 9 '15 at 12:46
  • @AcidShout I have tried with CheatEngine, and it simply freezes after a few scans. If I could only get the memory the DLL uses, I should be able to find what I need pretty quickly, as well. – Joona Apr 9 '15 at 12:50
  • 1
    @AcidShout Thanks, I just found out that I can actually do that in Python too! Sounds like a feasible project. – Joona Apr 9 '15 at 13:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.