HWND GetWindowForProcessAndClassName(DWORD pid, const char* className)
{HWND curWnd = GetTopWindow(0); //0 arg means to get the window at the top of the Z orderchar classNameBuf[256];while (curWnd != NULL){DWORD curPid;DWORD dwThreadId = GetWindowThreadProcessId(curWnd, &curPid);if (curPid == pid){GetClassName(curWnd, classNameBuf, 256);if (strcmp(className, classNameBuf) == 0) return curWnd;HWND childWindow = FindWindowEx(curWnd, NULL, className, NULL);if (childWindow != NULL) return childWindow;}curWnd = GetNextWindow(curWnd, GW_HWNDNEXT);}return NULL;
}

FOR EACH block of memory allocated by our target processIF that block is committed and read/write enabledScan the contents of that block for our byte patternIF WE FIND ITreturn that address

char* FindBytePatternInProcessMemory(HANDLE process, const char* pattern, size_t patternLen)
{char* basePtr = (char*)0x0;MEMORY_BASIC_INFORMATION memInfo;while (VirtualQueryEx(process, (void*)basePtr, &memInfo, sizeof(MEMORY_BASIC_INFORMATION))){const DWORD mem_commit = 0x1000;const DWORD page_readwrite = 0x04;if (memInfo.State == mem_commit && memInfo.Protect == page_readwrite){// search this memory for our pattern}basePtr = (char*)memInfo.BaseAddress + memInfo.RegionSize;}
}

char* FindPattern(char* src, size_t srcLen, const char* pattern, size_t patternLen)
{char* cur = src;size_t curPos = 0;while (curPos < srcLen){if (memcmp(cur, pattern, patternLen) == 0){return cur;}curPos++;cur = &src[curPos];}return nullptr;
}
char* FindBytePatternInProcessMemory(HANDLE process, const char* pattern, size_t patternLen)
{MEMORY_BASIC_INFORMATION memInfo;char* basePtr = (char*)0x0;while (VirtualQueryEx(process, (void*)basePtr, &memInfo, sizeof(MEMORY_BASIC_INFORMATION))){const DWORD mem_commit = 0x1000;const DWORD page_readwrite = 0x04;if (memInfo.State == mem_commit && memInfo.Protect == page_readwrite){char* remoteMemRegionPtr = (char*)memInfo.BaseAddress;char* localCopyContents = (char*)malloc(memInfo.RegionSize);SIZE_T bytesRead = 0;if (ReadProcessMemory(process, memInfo.BaseAddress, localCopyContents, memInfo.RegionSize, &bytesRead)){char* match = FindPattern(localCopyContents, memInfo.RegionSize, pattern, patternLen);if (match){uint64_t diff = (uint64_t)match - (uint64_t)(localCopyContents);char* processPtr = remoteMemRegionPtr + diff;return processPtr;}}free(localCopyContents);}basePtr = (char*)memInfo.BaseAddress + memInfo.RegionSize;}
}