Read registers in memory

		Exetools > General > General Discussion
Read registers in memory

09-26-2014, 17:39

Carbon

VIP

Join Date: Sep 2013

Posts: 113

Rept. Given: 7

Rept. Rcvd 189 Times in 48 Posts

Thanks Given: 0

Thanks Rcvd at 60 Times in 19 Posts

Quote:

Originally Posted by anon_c

ReadProcessMemory(PI.hProcess, pointer(Context.Ebx + 8), @BaseAddress,

EBX -> PEB

+ sizeof(void*)*2

== PEB->ImageBase

__________________
My blog: https://ntquery.wordpress.com

The Following 2 Users Say Thank You to Carbon For This Useful Post:
anon_c (09-15-2015), niculaita (06-30-2021)

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

All times are GMT +8. The time now is 04:56.