New answers tagged


If the ASLR isn't enabled for the module, and it's loaded at the address of 0x400000 this is as simply as DWORD address = 0x427000; ReadProcessMemory(handle, (void*)address, &value, sizeof(value), NULL); However if the ASLR is enabled (or the process just isn't mapped to memory starting at 0x400000) you need to get base address of the module. I assume ...

Top 50 recent answers are included