Monday, October 5, 2009

Remote Heap walker - window ce

Remote heap walker is based on the Toolhelp.dll, functions like
CloseToolhelp32Snapshot
CreateToolhelp32Snapshot
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
Process32First
Process32Next
Toolhelp32ReadProcessMemory

are used to get the data. The client exe, cchwcli.exe, is located at
C:\Program Files\CE Remote Tools\5.01\target\wce500\x86\cchwcli.exe.

No comments:

Post a Comment