AFAIK most memorysearchers like artmoney, tsearch and so forth use ReadProcessMemory to read the memory of processes and scan that (or do they use MM Files and dump whole memory to it?) and my question is then how much faster would it be to use an injected DLL that used internal memcomparing, byte by byte or dword by dword, instead of relying on an API to fetch the mem and then scan it.
Posted on 2003-07-22 15:22:59 by SFP