From ef732c24ee5a42467f60b74129cf524f7b082047 Mon Sep 17 00:00:00 2001 From: moshuiD <68362682+moshuiD@users.noreply.github.com> Date: Mon, 27 Jan 2025 14:31:08 +0800 Subject: [PATCH] fix can't get maped file Some addresses are less than 0x1000000000, which can cause scanning failure. Starting from 0 can solve this problem --- leechcore/device_vmware.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/leechcore/device_vmware.c b/leechcore/device_vmware.c index 4b0df3c..a6ed5f4 100644 --- a/leechcore/device_vmware.c +++ b/leechcore/device_vmware.c @@ -60,7 +60,7 @@ BOOL DeviceVMWare_Open_GetRange(_In_ DWORD dwPID, _Out_writes_opt_(42) LPWSTR ws { DWORD cch; HANDLE hProcess = 0; - QWORD va = 0x0000001000000000; + QWORD va = 0x0000000000000000; WCHAR wsz[MAX_PATH + 1] = { 0 }; MEMORY_BASIC_INFORMATION BI; hProcess = OpenProcess(PROCESS_QUERY_INFORMATION, FALSE, dwPID);