GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-26 02:18:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add the GetUserModuleByAddress and enhance the process module tracker

Browse Source
This commit is contained in:
BeneficialCode
2022-06-07 22:47:07 +08:00
parent 42d24c5e1b
commit a30d58c897
12 changed files with 92 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WinSysCore/ProcessModuleTracker.cpp
+3 -2
View File
@@ -4,6 +4,7 @@
#include <Psapi.h>
#include <ImageHlp.h>
#include "Helpers.h"
#include "DriverHelper.h"
#pragma comment(lib,"imagehlp")
@@ -18,7 +19,7 @@ struct ProcessModuleTracker::Impl {
BOOL _isWow64;
explicit Impl(DWORD pid) :_pid(pid) {
_handle.reset(::OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ | SYNCHRONIZE, FALSE, pid));
_handle.reset(DriverHelper::OpenProcess(pid, PROCESS_QUERY_INFORMATION | PROCESS_VM_READ | SYNCHRONIZE));
if (_handle)
::IsWow64Process(_handle.get(), &_isWow64);
}
@@ -123,8 +124,8 @@ struct ProcessModuleTracker::Impl {
existing.erase(key);
}
}
pmi->ModuleSize += (ULONG)mbi.RegionSize;
}
pmi->ModuleSize += (ULONG)mbi.RegionSize;
}
address += mbi.RegionSize;
}