_KPROCESS::DirectoryTableBase is not a PTE!

https://imgur.com/EDjhvUi.png
merge-requests/1/merge
_xeroxz 4 years ago
parent 01c018384b
commit d21e387815

@ -150,12 +150,10 @@ namespace nasa
void* mem_ctx::get_dirbase(vdm::vdm_ctx& v_ctx, DWORD pid) void* mem_ctx::get_dirbase(vdm::vdm_ctx& v_ctx, DWORD pid)
{ {
const auto peproc = const auto peproc =
reinterpret_cast<std::uint64_t>(v_ctx.get_peprocess(pid)); reinterpret_cast<std::uint64_t>(
v_ctx.get_peprocess(pid));
const auto dirbase = return v_ctx.rkm<void*>(peproc + 0x28);
v_ctx.rkm<pte>(peproc + 0x28);
return reinterpret_cast<void*>(dirbase.pfn << 12);
} }
bool mem_ctx::hyperspace_entries(pt_entries& entries, void* addr) bool mem_ctx::hyperspace_entries(pt_entries& entries, void* addr)

Loading…
Cancel
Save