Windows 7 64 bit.
Toolhelp32ReadProcessMemory
http://msdn.microsoft.com/en-us/library/windows/desktop/ms686826(v=vs.85).aspx
Am I wrong to assume this can be used to read ALL memory used by a process, including the memory used to store the image, PID, stack, heap, and everything?
Also, what is meant by the "base address" ?
This seems to work for SOME running processes, Toolhelp32ReadProcessMemory(pid, (LPCVOID)0x400000, buffer, BUFSIZE, &bRead), but it ALWAYS causes error 299
"Only part of a ReadProcessMemory or WriteProcessMemory request was completed."
"The base address in the specified process to read."
What does that mean?
If this function is a part of the toolhelp library that creates snapshots of processes, why does it require a Process ID to work with? What does this function do that is different from ReadProcessMemory???