SearchMemory

The SearchMemory function searches the target's virtual memory for a specified pattern of bytes.

VOID
SearchMemory(
    ULONG64  SearchAddress,
    ULONG64  SearchLength,
    ULONG  PatternLength,
    PVOID  Pattern,
    PULONG64  FoundAddress
    );

Parameters

SearchAddress

Specifies the address in the target's virtual memory from which to start the search.

SearchLength

Specifies the size, in bytes, of the memory to search. For a successful match, the pattern must be found before SearchLength bytes have been examined.

PatternLength

Specifies the size, in bytes, of the pattern to search for.

Pattern

Specifies the pattern to search for.

FoundAddress

Receives the location of the pattern, found in the target's virtual memory. If the pattern was not found, the value in FoundAddress is unchanged by this function.

Return Value

None

Requirements

Headers: Defined in wdbgexts.h. If you are writing a WdbgExts extension, include wdbgexts.h. If you are writing a DbgEng extension that calls this function, include wdbgexts.h before dbgeng.h (see Writing DbgEng Extension Code for details).