![]() |
|
#2
|
|||
|
|||
|
better way is to use the NtQueryInformationProcess - process_basic_information method to obtain the peb address for the process, its much more reliable than using register values which might change with a service pack / os update etc..
|
| The Following User Says Thank You to evlncrn8 For This Useful Post: | ||
giv (10-21-2015) | ||
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| [Delphi] Check if ASLR is enabled | Agmcz | Source Code | 15 | 06-11-2018 09:09 |
| How to deal with threads ? | bcl25 | General Discussion | 4 | 03-29-2003 06:22 |