winmemscan Code
Status: Alpha
Brought to you by:
jchristat
| File | Date | Author | Commit |
|---|---|---|---|
| Release | 2011-03-04 | jchristat | [r9] fixed some free calls |
| QueryInformation.cpp | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
| QueryInformation.h | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
| ReadMe.txt | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
| WinMemScan.cpp | 2011-03-04 | jchristat | [r8] fixed some freeing |
| WinMemScan.sln | 2011-03-01 | jchristat | [r3] initial revision |
| WinMemScan.vcproj | 2011-03-01 | jchristat | [r3] initial revision |
| stdafx.cpp | 2011-03-01 | jchristat | [r3] initial revision |
| stdafx.h | 2011-03-01 | jchristat | [r3] initial revision |
WinMemScan windows vista/win 7 memory tool inspection
Copyright (C) 2011 Jerome.Christatos
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
============================================================================
CVS ident "@(#) $Id: ReadMe.txt $"
============================================================================
--
This programm demonstrate the use of the the undocumented NtQueryInformation
SuperFetchInformation class to get various memory scans and information on a
live system.
--
Compile using Ms VC++ and create a solution/project with a c++ console application
--
usage : winmemscan -p dump the kernel pfn database describing each memory page status
-l dump each page lists statistics
winmemscan must be run as administrator
========================================================================
CONSOLE APPLICATION : WinMemScan Project Overview
========================================================================
AppWizard has created this WinMemScan application for you.
This file contains a summary of what you will find in each of the files that
make up your WinMemScan application.
WinMemScan.vcproj
This is the main project file for VC++ projects generated using an Application Wizard.
It contains information about the version of Visual C++ that generated the file, and
information about the platforms, configurations, and project features selected with the
Application Wizard.
WinMemScan.cpp
This is the main application source file.
/////////////////////////////////////////////////////////////////////////////
Other standard files:
StdAfx.h, StdAfx.cpp
These files are used to build a precompiled header (PCH) file
named WinMemScan.pch and a precompiled types file named StdAfx.obj.
/////////////////////////////////////////////////////////////////////////////
Other notes:
/////////////////////////////////////////////////////////////////////////////