Ejemplo n.º 1
0
        public static ulong GetPebAddress(this Process process)
        {
            NT.PROCESS_BASIC_INFORMATION pbi = new NT.PROCESS_BASIC_INFORMATION();
            NT.NtQueryInformationProcess(process.Handle, 0, &pbi, pbi.Size, IntPtr.Zero);

            return(pbi.PebBaseAddress);
        }