Read RAM from Process

[Marcus Meissner]

On Sun, Dec 09, 2007 at 01:58:53PM +0100, Kai Lauterbach wrote:
> Hi,
> 
> at the moment I'm writing a little Linux based program to read some
> variables from a Windows application. But my problem is, that i can't
> access to the virtual memory of the Win App running under wine. I don't
> know how to do this. c/c++ isn't the problem but the right way to do it.
> 
> I've already read the wineserver's main.c and fd.c but I think that it's
> not a good way to put a code into, which give's me the chance to read
> something. I need sth to connect, like /dev/mem or a network port.
> 
> My second idea was the wine debugger. Is it possible to get access the
> application memory at runtime from this? I mean, without stopping the
> application?
> 
> I hope you can help me and I've described my problem as clear as
> possible ;)

It will not help to repost the same question several times with
differetn subjects.

Reading other process memory in Linux is done using the ptrace()
function. Its use is a bit difficult, but there is a nice manpage.

You could also make your application a Wine app and then use the
NtReadVirtualMemory() or ReadProcessMemory() functions on the other
process (after finding it via toolhelp32).

Ciao, Marcus