SearchMemory - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// wdbgexts.h

VOID SearchMemory(
  ULONG64  SearchAddress,
  ULONG64  SearchLength,
  ULONG    PatternLength,
  PVOID    Pattern,
  PULONG64 FoundAddress
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-wdbgexts-searchmemory)

SearchMemory function

Description

The SearchMemory function searches the target's virtual memory for a specified pattern of bytes.

Parameters

SearchAddress

Specifies the address in the target's virtual memory from which to start the search.

SearchLength

Specifies the size, in bytes, of the memory to search. For a successful match, the pattern must be found before SearchLength bytes have been examined.

PatternLength

Specifies the size, in bytes, of the pattern to search for.

Pattern

Specifies the pattern to search for.

FoundAddress

Receives the location of the pattern, found in the target's virtual memory. If the pattern was not found, the value in FoundAddress is unchanged by this function.

View the official Windows Driver Kit DDI reference

Edit description on GitHub