C# (CSharp) DbgEngDebugger.GetCurrentThreadTebEffectiveの例

コード例 #1

ファイル: NativeHeapRegionProvider.cs プロジェクト: Zhentar/DbgShell

        private static IEnumerable <ulong> AllHeaps(DbgEngDebugger debugger)
        {
            dynamic teb           = debugger.GetCurrentThreadTebEffective(CancellationToken.None).Value;
            dynamic peb           = teb.ProcessEnvironmentBlock.DbgGetPointee();
            uint    numberOfHeaps = peb.NumberOfHeaps.ToUint32(null);

            return(debugger.ReadMemPointers((ulong)peb.ProcessHeaps.DbgGetPointer(), numberOfHeaps));
        }