Re: Read Application Memory

[Kuba Ober]

On Sunday 09 December 2007, Kai Lauterbach wrote:
> Hi,
>
> at the moment I'm writing a little Linux based program to read some
> variables from a Windows application. But my problem is, that i can't
> access to the virtual memory of the Win App running under wine. I don't
> know how to do this. c/c++ isn't the problem but the right way to do it.

On Linux, you'd typically use ptrace(). You PTRACE_ATTACH to the process 
(which becomes your child), wait() for the child to actually stop (attaching 
sends it SIGSTOP), you can then use PTRACE_PEEK/POKE to read/write process's 
memory.

Looks easy on paper, at least.

Cheers, Kuba