_KPROCESS::DirectoryTableBase is not a PTE!

https://imgur.com/EDjhvUi.png
merge-requests/1/merge
_xeroxz 4 years ago
parent 01c018384b
commit d21e387815

@ -150,12 +150,10 @@ namespace nasa
void* mem_ctx::get_dirbase(vdm::vdm_ctx& v_ctx, DWORD pid)
{
const auto peproc =
reinterpret_cast<std::uint64_t>(v_ctx.get_peprocess(pid));
reinterpret_cast<std::uint64_t>(
v_ctx.get_peprocess(pid));
const auto dirbase =
v_ctx.rkm<pte>(peproc + 0x28);
return reinterpret_cast<void*>(dirbase.pfn << 12);
return v_ctx.rkm<void*>(peproc + 0x28);
}
bool mem_ctx::hyperspace_entries(pt_entries& entries, void* addr)

Loading…
Cancel
Save