1. Anyone out there that know where I can find a memorydump-program?
2. I wanna know what handler-number a edit-field have in a window, but I only have the window-handler... How to do it?
Best Regards
// Christopher Vigren
2. I wanna know what handler-number a edit-field have in a window, but I only have the window-handler... How to do it?
Best Regards
// Christopher Vigren
1) Here's quick dump code:
2) Use GetDlgItem to get edit-box window handle from parent window handle.
.data
data_start equ $
szFileName db "dump.bin", 0
.code
invoke CreateFile, ADDR szFileName, GENERIC_WRITE, 0, 0, CREATE_ALWAYS, 0, 0
push eax
; dump 16KB of .data section
invoke WriteFile, eax, data_start, 16384, esp, 0
call CloseHandle2) Use GetDlgItem to get edit-box window handle from parent window handle.
There's lots of memory dumping programs, and they have different
purposes. If you want to do process dumping, you could check out
IczDump, or some of the stuff at www.programmerstools.org .
You could also take a look at WinHex (or perhaps it was some other
hex editor), which allows dumping/editing of arbitrary memory locations.
purposes. If you want to do process dumping, you could check out
IczDump, or some of the stuff at www.programmerstools.org .
You could also take a look at WinHex (or perhaps it was some other
hex editor), which allows dumping/editing of arbitrary memory locations.