//------------------------------------------------------------------------------
// Title: PENT(Process memory Editor on windows NT)
// Version: 0.1.3a
// Copyright: (C)Dr.Hell, 2001-2002
// Web: http://members.tripod.co.jp/DrHell/
//------------------------------------------------------------------------------

This is a low level process memory editor and works on Windows NT4.
Of course, it works on Windows 95/98/2000/XP.

Written in Japanese..




 VisualBasic AvP[V匙łBNxAʓr^CpӂKvĔς킵łB^C͌݊R̂ŁA 1 AvP[V 10 KoCgL邱ƂɂȂ邽߁AɍȂłB

PENT  VisualBasic AvP[Voł𐥂ƂA^GfB^SЂɓׂ쐬vZXGfB^łBVisualBasic AvP[VƔrΗyɋNAX^hAŎ舵eՂȏɁANT4łgp\ƂHLȓLĂ܂B

M҂́AvZXGfB^ƂāAcep𔭕\Ă܂Acep͔r̂߂̈ꎞmۂsA͈͂𐔃KxɌ肹𓾂܂BPENTł͐lw(Hex,)oȂʁAꎞmۂKvȂ̂ŁAV[XȌ\ƂȂĂ܂A[hI[vZX{\łB


͈͓ɂ

͈͓́Aj[[:ʂ\]ɂČ郊Xgɉ₪Ȃꍇɂ̂݁Aj[[ݒ:͈]ɂĎ͈͂AYAhXXgɒǉ܂BXgɌ₪݂Ԃ́Ǎɑ΂či݌s܂̂ŁA͈͂ύXĂʂ͂܂BYK萔𒴂ꍇ͌I܂B

v0.1.3AYK萔𒴂ꍇɁA͈͂̐擪AŌ̊Y+1ɎŕύX悤ɂȂ܂Bi荞݌̌ʁAYȂȂꍇɁAɎ̌Ɉڂ܂B


햾

Process Walking ̕@ƂāAʏ CreateToolhelp32Snapshot Љ܂A NT4 ł̓T|[gĂ܂B̃vZXGfB^NT4œ삵Ȃ̂͂̂߂łB߂ LoadLibrary ŃNɂ邭炢̔zׂ͂Ǝv̂łA̕ӂ薳ڒȍƂłˁB

ReadProcessMemory ͎g킯łAID ڈÑł OpenProcess āAnbLOsAƂX}[gƂ͒͋ZɂĎĂ܂B

st@C𔺂W[͊T˓ʒuɕ񂪏ôłAȊO̓P[XX^fBKvȂ悤łBsʁÅł 8 ӏAv 32 LoCg̃GA100%vZX悤łB

̏ꍇ𑽂ΐmȃvZX̎擾\łAƁAxȂ̂ŁAꕔAvZXID̂ݕ\ꍇ܂B̂悤ȃvZX͂ق100%ݕs\ȃvZXł̂ŖȂł傤B


XVe(0.1.3->0.1.3a)

t@C̉sǂ܂ȂoOCB


XVe(0.1.2->0.1.3)

Ή̎@ύXB
(ٍ̐vOƓlAOt@CNɓǂݍޕɕύXB
PȃeLXgt@Cł̂ŁAGfB^ōDȂ悤ɕҏWĉB)

͈͓ŁAʂꍇAI
͈͂̐擪AhXAqbgŏIAhX+1ɕύX@\ǉB

"l"ǉB
͂l4oCg̃gGfBAƂ݂ȂAf[^ƂċLB
Ⴆ 9999 ͂ƁA4oCg16i\L$0000270FƂȂB
gGfBǍ͉i[邩A
܂ƂA0F 27 00 00 4oCgHex f[^i[B
4oCgȉŌꍇ邾낤A͂_ł͍͌sȂB


XVe(0.1.1->0.1.2)

ύXT|[gA̃oCiɓ܂B
9xnɂĔ͈͓Ŗ[vɊׂꍇ̂CB
(NTn͈ÖقCardinalɂȂ̂ŌƂĂ܂)


XVe(0.1.0->0.1.1)

vZX̎擾@P܂B

݂łȂvZXł{͂ł悤ɂ܂B

Oł̓t@[Xg[XƂƂŁA\ڂĂ܂āA
T[`Ƀobt@OsĂ܂łA
͐^ʖڂɃobt@O܂B


Ɛӓ

{\tgEFA͓{ɂʗpt[EFÅTOɑ̂łB
{\tgEFAgpƂɂ萶@Ȃ镾Qɑ΂Ă⏞v܂̂ŁA
̎|ꂽ̂݌gpB
lɂĔzz͎Rƒv܂AEςȂ悤肢v܂B
pzzւ̓]ڂɂ͎(Ɠcn)ɑ΂鋖KvƂ܂B
̓Iɂ͓]ڐ̏pzzv邱ƂɂȂƎv܂AǐSIȉiݒ̂̂ɂĂ͍l܂B


A

E-mail: DrHell@lycos.jp
