tools.ps.windows: Add read-peb and my-peb.
parent
a326b73470
commit
16d24a5194
|
@ -43,6 +43,16 @@ IN: tools.ps.windows
|
||||||
ReadProcessMemory win32-error=0/f
|
ReadProcessMemory win32-error=0/f
|
||||||
ba ;
|
ba ;
|
||||||
|
|
||||||
|
: read-peb ( handle address -- peb )
|
||||||
|
0 PEB heap-size read-process-memory PEB memory>struct ;
|
||||||
|
|
||||||
|
: my-peb ( -- peb )
|
||||||
|
GetCurrentProcessId [
|
||||||
|
open-process-read
|
||||||
|
[ <win32-handle> &dispose drop ]
|
||||||
|
[ dup query-information-process PebBaseAddress>> read-peb ] bi
|
||||||
|
] with-destructors ;
|
||||||
|
|
||||||
:: read-args ( handle -- string/f )
|
:: read-args ( handle -- string/f )
|
||||||
handle <win32-handle> &dispose drop
|
handle <win32-handle> &dispose drop
|
||||||
handle query-information-process :> process-basic-information
|
handle query-information-process :> process-basic-information
|
||||||
|
|
Loading…
Reference in New Issue