/// <summary>
/// Reads the WoW X64 structure.
/// </summary>
/// <param name="pointer">The pointer.</param>
private static ThreadContext ReadWowX64Structure(IntPtr pointer)
{
WOW64_CONTEXT structure = (WOW64_CONTEXT)Marshal.PtrToStructure(pointer, typeof(WOW64_CONTEXT));
return(new ThreadContext()
{
InstructionPointer = structure.Eip,
StackPointer = structure.Esp,
FramePointer = structure.Ebp,
Bytes = ReadBytes(pointer, typeof(WOW64_CONTEXT)),
});
}
/// <summary>
/// Reads the WoW X64 structure.
/// </summary>
/// <param name="pointer">The pointer.</param>
private static ThreadContext ReadWowX64Structure(IntPtr pointer)
{
WOW64_CONTEXT structure = (WOW64_CONTEXT)Marshal.PtrToStructure(pointer, typeof(WOW64_CONTEXT));
return(new WindowsThreadContext(structure.Eip, structure.Esp, structure.Ebp, ReadBytes(pointer, typeof(WOW64_CONTEXT))));
}
public static extern bool Wow64SetThreadContext(IntPtr hThread, ref WOW64_CONTEXT lpContext);
public static extern bool Wow64SetThreadContext( IntPtr hThread, ref WOW64_CONTEXT lpContext );
