Hi Paul,
On 31.05.2020 16:41, Paul Gofman wrote:
- if (!(h = OpenProcess( PROCESS_ALL_ACCESS, FALSE, process->info.UniqueProcessId)))
- {
WARN("Could not open process %#04lx.\n", process->info.UniqueProcessId);
return NULL;
- }
This should work, but ObOpenObjectByPointer() is generally used when we need a handle from a kernel object pointer.
Thanks,
Jacek