admin/silverf0x-RpcView
1
0
Fork 0
mirror of https://github.com/silverf0x/RpcView synced 2026-06-08 17:26:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for Protected and PPL processes with the ProcessExplorer driver.

Browse Source 
REMARK: the feature requires the procexp.sys driver version 15.0.0.0
This commit is contained in:
silverf0x
2019-01-20 17:49:31 +01:00
parent 80fc306cac
commit 7302b614ce
6 changed files with 55 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
RpcView/MainWindow.cpp
+1 -1
View File
@@ -193,7 +193,7 @@ BOOL __fastcall RpcGetProcessData(RpcModuleInfo_T* pRpcModuleInfo, RVA_T Rva, VO
if (pRpcModuleInfo == NULL) goto End;
pAddress = (VOID*)(pRpcModuleInfo->pModuleBase + Rva);
hProcess = OpenProcess(PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, FALSE, pRpcModuleInfo->Pid);
hProcess = ProcexpOpenProcess(PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, FALSE, pRpcModuleInfo->Pid);
if (hProcess == NULL) goto End;
bResult = ReadProcessMemory(hProcess, pAddress, pBuffer, BufferLength, NULL);
End: