(C++) Searcuing WC3's VM Help ;P.

#include <iostream>
#include <windows.h>
#include <conio.h>
#include <String.h>
using namespace std;

int* Search(int sid, HANDLE op, DWORD add) {
 MEMORY_BASIC_INFORMATION mbi;
 SYSTEM_INFO sys;
 LPVOID lpMem;
 string buffer;

 int Query_Return_Value;

 GetSystemInfo(&sys);
 lpMem = sys.lpMinimumApplicationAddress;

 while(lpMem < sys.lpMaximumApplicationAddress) {
  mbi.RegionSize = 0;
  Query_Return_Value = VirtualQueryEx(op, lpMem, &mbi, sizeof(mbi));

  if(Query_Return_Value == sizeof(mbi)) {
   ReadProcessMemory(op, &add, &buffer, mbi.RegionSize, NULL);

   if(mbi.Type == MEM_PRIVATE & mbi.State == MEM_COMMIT) {

    if(mbi.RegionSize > 0) {
    }

   }

   cout << GetLastError() << endl;

  } else {
   lpMem = (LPVOID)((DWORD)mbi.BaseAddress + (DWORD)mbi.RegionSize);
   cout << GetLastError() << endl;
  }

 }

 return &sid;
}

BOOL EnablePrivilege(LPCSTR PrivilegeName) {
 HANDLE Token;
 LUID luid;
 TOKEN_PRIVILEGES tp;
 BOOL bol;

 ZeroMemory(&tp, sizeof(tp));

 if(!OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &Token)) {
  return false;
 }

 if(!LookupPrivilegeValue(NULL, PrivilegeName, &luid)) {
  CloseHandle(Token);
  return false;
 }

 tp.PrivilegeCount = 1;
 tp.Privileges[0].Luid = luid;
 tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;

 bol = AdjustTokenPrivileges(Token, FALSE, &tp, sizeof(tp), NULL, NULL);
 CloseHandle(Token);
 return bol;
}

int main() {
 HANDLE tProc;
 HWND tWND;
 DWORD ProcessId;
 HANDLE TokenHandle;
 LUID debugid;
 TOKEN_PRIVILEGES tp;

 EnablePrivilege(SE_DEBUG_NAME);

 EnablePrivilege(SE_INC_BASE_PRIORITY_NAME);

 tWND = FindWindow(NULL, "Calculator"); //Something without any memory defense to test on.
 if(tWND){
 GetWindowThreadProcessId(tWND, &ProcessId);

 tProc = OpenProcess(PROCESS_ALL_ACCESS, FALSE, ProcessId);
 if(!tProc) {
  cout << "\nError 01: -Failed to open pid" << &ProcessId << endl;
  getch();
  return 0;
 }

 Search(1, tProc, ProcessId);
 } else {
  cout << "Failed to find window. Quit this and start the application, then start this \n application.";
  getch();
  }
 return 0;
}