winmemscan Code
Status: Alpha
Brought to you by:
jchristat
File | Date | Author | Commit |
---|---|---|---|
Release | 2011-03-04 | jchristat | [r9] fixed some free calls |
QueryInformation.cpp | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
QueryInformation.h | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
ReadMe.txt | 2011-03-02 | jchristat | [r7] added -l option to list page lists statistics |
WinMemScan.cpp | 2011-03-04 | jchristat | [r8] fixed some freeing |
WinMemScan.sln | 2011-03-01 | jchristat | [r3] initial revision |
WinMemScan.vcproj | 2011-03-01 | jchristat | [r3] initial revision |
stdafx.cpp | 2011-03-01 | jchristat | [r3] initial revision |
stdafx.h | 2011-03-01 | jchristat | [r3] initial revision |
WinMemScan windows vista/win 7 memory tool inspection Copyright (C) 2011 Jerome.Christatos This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. ============================================================================ CVS ident "@(#) $Id: ReadMe.txt $" ============================================================================ -- This programm demonstrate the use of the the undocumented NtQueryInformation SuperFetchInformation class to get various memory scans and information on a live system. -- Compile using Ms VC++ and create a solution/project with a c++ console application -- usage : winmemscan -p dump the kernel pfn database describing each memory page status -l dump each page lists statistics winmemscan must be run as administrator ======================================================================== CONSOLE APPLICATION : WinMemScan Project Overview ======================================================================== AppWizard has created this WinMemScan application for you. This file contains a summary of what you will find in each of the files that make up your WinMemScan application. WinMemScan.vcproj This is the main project file for VC++ projects generated using an Application Wizard. It contains information about the version of Visual C++ that generated the file, and information about the platforms, configurations, and project features selected with the Application Wizard. WinMemScan.cpp This is the main application source file. ///////////////////////////////////////////////////////////////////////////// Other standard files: StdAfx.h, StdAfx.cpp These files are used to build a precompiled header (PCH) file named WinMemScan.pch and a precompiled types file named StdAfx.obj. ///////////////////////////////////////////////////////////////////////////// Other notes: /////////////////////////////////////////////////////////////////////////////