//------------------------------------------------------------------------------
// Title: PENT(Process memory Editor on windows NT)
// Version: 0.1.3
// Copyright: (C)Dr.Hell, 2001-2002
// Web: http://members.tripod.co.jp/DrHell/
//------------------------------------------------------------------------------

This is a low level process memory editor and works on Windows NT4.
Of course, it works on Windows 95/98/2000/XP.

Written in Japanese..




 VisualBasic AvP[V匙łB
NxAʓr^CpӂKvĔς킵łB
^C͌݊R̂ŁA
 1 AvP[V 10 KoCgL邱ƂɂȂ邽߁AɍȂłB

PENT  VisualBasic AvP[Voł𐥂ƂA
^GfB^SЂɓׂ쐬vZXGfB^łB
VisualBasic AvP[VƔrΗyɋNA
X^hAŎ舵eՂȏɁA
NT4łgp\ƂHLȓLĂ܂B

M҂́AvZXGfB^ƂāAcep𔭕\Ă܂A
cep͔r̂߂̈ꎞmۂsA͈͂
KxɌ肹𓾂܂B
PENTł͐lw(Hex,)oȂʁAꎞmۂKvȂ̂ŁAV[XȌ\ƂȂĂ܂A[hI[vZX{\łB


͈͓ɂ

͈͓́Aj[[:ʂ\]ɂČ郊Xgɉ₪Ȃꍇɂ̂݁Aj[[ݒ:͈]ɂĎ͈͂AYAhXXgɒǉ܂B
XgɌ₪݂Ԃ́Ǎɑ΂či݌s܂̂ŁA͈͂ύXĂʂ͂܂B
YK萔𒴂ꍇ͌I܂B

v0.1.3AYK萔𒴂ꍇɁA͈͂̐擪AŌ̊Y+1ɎŕύX悤ɂȂ܂Bi荞݌̌ʁAYȂȂꍇɁAɎ̌Ɉڂ܂B


햾

Process Walking ̕@ƂāAʏ CreateToolhelp32Snapshot Љ܂A
 NT4 ł̓T|[gĂ܂B
̃vZXGfB^NT4œ삵Ȃ̂͂̂߂łB
߂ LoadLibrary ŃNɂ邭炢̔zׂ͂Ǝv̂łA
̕ӂ薳ڒȍƂłˁB

ReadProcessMemory ͎g킯łAID ڈÑł OpenProcess āA
nbLOsAƂ
X}[gƂ͒͋ZɂĎĂ܂B

st@C𔺂W[͊T˓ʒuɕ񂪏ôłA
ȊO̓P[XX^fBKvȂ悤łB
sʁÅł 8 ӏAv 32 LoCg̃GA
100%vZX悤łB

̏ꍇ𑽂ΐmȃvZX̎擾\łA
ƁAxȂ̂ŁAꕔAvZXID̂ݕ\ꍇ܂B
̂悤ȃvZX͂ق100%ݕs\ȃvZXł̂ŖȂł傤B


XVe(0.1.2->0.1.3)

Ή̎@ύXB
(ٍ̐vOƓlAOt@CNɓǂݍޕɕύXB
PȃeLXgt@Cł̂ŁAGfB^ōDȂ悤ɕҏWĉB)

͈͓ŁAʂꍇAI
͈͂̐擪AhXAqbgŏIAhX+1ɕύX@\ǉB

"l"ǉB
͂l4oCg̃gGfBAƂ݂ȂAf[^ƂċLB
Ⴆ 9999 ͂ƁA4oCg16i\L$0000270FƂȂB
gGfBǍ͉i[邩A
܂ƂA0F 27 00 00 4oCgHex f[^i[B
4oCgȉŌꍇ邾낤A͂_ł͍͌sȂB


XVe(0.1.1->0.1.2)

ύXT|[gA̃oCiɓ܂B
9xnɂĔ͈͓Ŗ[vɊׂꍇ̂CB
(NTn͈ÖقCardinalɂȂ̂ŌƂĂ܂)


XVe(0.1.0->0.1.1)

vZX̎擾@P܂B

݂łȂvZXł{͂ł悤ɂ܂B

Oł̓t@[Xg[XƂƂŁA\ڂĂ܂āA
T[`Ƀobt@OsĂ܂łA
͐^ʖڂɃobt@O܂B


Ɛӓ

{\tgEFA͓{ɂʗpt[EFÅTOɑ̂łB
{\tgEFAgpƂɂ萶@Ȃ镾Qɑ΂Ă⏞v܂̂ŁA
̎|ꂽ̂݌gpB
lɂĔzz͎Rƒv܂AEςȂ悤肢v܂B
pzzւ̓]ڂɂ͎(Ɠcn)ɑ΂鋖KvƂ܂B
̓Iɂ͓]ڐ̏pzzv邱ƂɂȂƎv܂AǐSIȉiݒ̂̂ɂĂ͍l܂B


A

E-mail: DrHell@lycos.jp
