| 55 | |
| 56 | |
| 57 | BOOL InitProcessQuery() { |
| 58 | HMODULE hNtDll; |
| 59 | hNtDll = GetModuleHandle(L"ntdll.dll"); |
| 60 | if (hNtDll == NULL) { |
| 61 | LOG_A(LOG_ERROR, "ProcessQuery: could not find ntdll.dll"); |
| 62 | return FALSE; |
| 63 | } |
| 64 | NtQueryVirtualMemory = (pNtQueryVirtualMemory)GetProcAddress(hNtDll, "NtQueryVirtualMemory"); |
| 65 | if (NtQueryVirtualMemory == NULL) { |
| 66 | LOG_A(LOG_ERROR, "ProcessQuery: Could not get NtQueryVirtualMemory error: %d", GetLastError()); |
| 67 | return FALSE; |
| 68 | } |
| 69 | return TRUE; |
| 70 | } |
| 71 | |
| 72 | |
| 73 | std::wstring GetProcessName(HANDLE hProcess) { |