MCPcopy Create free account
hub / github.com/ELMERIKH/PyinMemoryPE / CurrentProcessReadSyswow

Class CurrentProcessReadSyswow

windows/syswow64.py:168–176  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

166 current_process = windows.current_process
167
168 class CurrentProcessReadSyswow(process.Process):
169 bitness = 64
170 def _get_handle(self):
171 return winproxy.OpenProcess(dwProcessId=current_process.pid)
172
173 def read_memory(self, addr, size):
174 buffer_addr = ctypes.create_string_buffer(size)
175 winproxy.NtWow64ReadVirtualMemory64(self.handle, addr, buffer_addr, size)
176 return buffer_addr[:]
177 peb_addr = get_current_process_syswow_peb_addr()
178 return windows.winobject.process.RemotePEB64(peb_addr, CurrentProcessReadSyswow())
179

Callers 1

Calls

no outgoing calls

Tested by

no test coverage detected