From aaf35f35157ad80f031faaa4702bf6c6a4fc26c0 Mon Sep 17 00:00:00 2001 From: "SND\\EreTIk_cp" Date: Wed, 23 May 2012 09:36:56 +0000 Subject: [PATCH] [0.1.x] ~fix: using getOffset (alpc_conn.py) git-svn-id: https://pykd.svn.codeplex.com/svn@76560 9b283d60-5439-405e-af05-b73fd8c4d996 --- snippets/alpc_conn.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/snippets/alpc_conn.py b/snippets/alpc_conn.py index 95ff57b..3a459ba 100644 --- a/snippets/alpc_conn.py +++ b/snippets/alpc_conn.py @@ -26,7 +26,7 @@ def main(): """ argc_ = len(sys.argv) if (1 == argc_): - portTypeAddr = getOffset("nt", "AlpcPortObjectType") + portTypeAddr = getOffset("nt!AlpcPortObjectType") if (0 != portTypeAddr): objTable = typedVar("nt!_EPROCESS", getCurrentProcess()).ObjectTable lstAlpcPorts = ntobj.getListByHandleTable(objTable, ptrPtr(portTypeAddr))