From ff4161602cd829ff000337704378f522f94cb4ab Mon Sep 17 00:00:00 2001 From: hakril Date: Sun, 2 Feb 2025 16:29:05 +0100 Subject: [PATCH] Small improvments --- windows/debug/symbols.py | 4 ++++ windows/syswow64.py | 6 +++++- windows/winobject/event_log.py | 1 + 3 files changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/debug/symbols.py b/windows/debug/symbols.py index d0599b6..472eac4 100644 --- a/windows/debug/symbols.py +++ b/windows/debug/symbols.py @@ -177,6 +177,10 @@ class SymbolType(object): windows.winproxy.LocalFree(res) return newres + @property + def module(self): + return self.resolver.get_module(self.modbase) + @property def name(self): return self._get_type_info(gdef.TI_GET_SYMNAME) diff --git a/windows/syswow64.py b/windows/syswow64.py index 2f2558c..fdb23f5 100644 --- a/windows/syswow64.py +++ b/windows/syswow64.py @@ -169,8 +169,12 @@ def get_current_process_syswow_peb(): class CurrentProcessReadSyswow(process.Process): bitness = 64 + def _get_handle(self): - return winproxy.OpenProcess(dwProcessId=windows.current_process.pid) + return winproxy.GetCurrentProcess() + + def __del__(self): + pass def read_memory(self, addr, size): buffer_addr = ctypes.create_string_buffer(size) diff --git a/windows/winobject/event_log.py b/windows/winobject/event_log.py index 6596b5c..af523c1 100644 --- a/windows/winobject/event_log.py +++ b/windows/winobject/event_log.py @@ -377,6 +377,7 @@ class ImprovedEVT_VARIANT(gdef.EVT_VARIANT): gdef.EvtVarTypeUInt16 + gdef.EVT_VARIANT_TYPE_ARRAY : "UInt16Arr", gdef.EvtVarTypeUInt32 + gdef.EVT_VARIANT_TYPE_ARRAY : "UInt32Arr", gdef.EvtVarTypeUInt64 + gdef.EVT_VARIANT_TYPE_ARRAY : "UInt64Arr", + gdef.EvtVarTypeHexInt64 + gdef.EVT_VARIANT_TYPE_ARRAY : "UInt64Arr", } NoneValue = None