| 53 | } |
| 54 | |
| 55 | void InitTarget() { |
| 56 | process::target_pid = readlocal<ULONG64>(readlocal<ULONG64>(process::STRUCT_OFFSET_ADDRESS));//double reading because STRUCT_OFFSET_ADDRESS saves a pointer that has pid |
| 57 | //print("\n[+] process::target_pid: %d", process::target_pid); |
| 58 | if (process::target_pid != 0) { |
| 59 | status::SUCESSFUL(); |
| 60 | } |
| 61 | else { |
| 62 | status::ERROR(); |
| 63 | } |
| 64 | } |
| 65 | |
| 66 | void GetBase() { |
| 67 | if (NT_SUCCESS(PsLookupProcessByProcessId((HANDLE)process::target_pid, &process::target_process))) { |
no test coverage detected