File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -164,19 +164,18 @@ def get_current_process_syswow_peb_addr():
164164
165165def get_current_process_syswow_peb ():
166166 current_process = windows .current_process
167-
168- class CurrentProcessReadSyswow (process .Process ):
169- bitness = 64
170- def _get_handle (self ):
171- return winproxy .OpenProcess (dwProcessId = current_process .pid )
172-
173- def read_memory (self , addr , size ):
174- buffer_addr = ctypes .create_string_buffer (size )
175- winproxy .NtWow64ReadVirtualMemory64 (self .handle , addr , buffer_addr , size )
176- return buffer_addr [:]
177167 peb_addr = get_current_process_syswow_peb_addr ()
178168 return windows .winobject .process .RemotePEB64 (peb_addr , CurrentProcessReadSyswow ())
179169
170+ class CurrentProcessReadSyswow (process .Process ):
171+ bitness = 64
172+ def _get_handle (self ):
173+ return winproxy .OpenProcess (dwProcessId = windows .current_process .pid )
174+
175+ def read_memory (self , addr , size ):
176+ buffer_addr = ctypes .create_string_buffer (size )
177+ winproxy .NtWow64ReadVirtualMemory64 (self .handle , addr , buffer_addr , size )
178+ return buffer_addr [:]
180179
181180class ReadSyswow64Process (process .Process ):
182181 def __init__ (self , target ):
You can’t perform that action at this time.
0 commit comments