From d5d24e5c05d25bbbd52a471643e85c636ee584c2 Mon Sep 17 00:00:00 2001 From: cypherpunk Date: Wed, 15 Jan 2014 00:09:27 +0100 Subject: [PATCH] fixed AutoSearchIATEx, now it can dump again --- TitanEngine/TitanEngine.cpp | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/TitanEngine/TitanEngine.cpp b/TitanEngine/TitanEngine.cpp index c7e649a..b5ac661 100644 --- a/TitanEngine/TitanEngine.cpp +++ b/TitanEngine/TitanEngine.cpp @@ -19442,9 +19442,9 @@ __declspec(dllexport) void TITCALL ImporterAutoSearchIATEx(DWORD ProcessId, ULON { if(GetTempFileNameW(szTempFolder, L"DumpTemp", GetTickCount() + 102, szTempName)) { - //HANDLE hProcess = 0; - //hProcess = OpenProcess(PROCESS_VM_READ|PROCESS_QUERY_INFORMATION, FALSE, ProcessId); - //DumpProcessW(ProcessId, (LPVOID)ImageBase, szTempName, NULL); TODO + HANDLE hProcess = OpenProcess(PROCESS_VM_READ|PROCESS_QUERY_INFORMATION, FALSE, ProcessId); + + DumpProcessW(hProcess, (LPVOID)ImageBase, szTempName, NULL); ImporterAutoSearchIATW(ProcessId, szTempName, SearchStart, pIATStart, pIATSize); DeleteFileW(szTempName); }