GetModuleFileNameEx of Thread ID?
I am trying to get the file path of a thread id. I was hoping that this
will work..but it doesn't
NtOpenThread(@hProc, THREAD_ALL_ACCESS, @ObjAttr, @ClientID) ;
pBuf := AllocMem(MAX_PATH);
GetModuleFileNameEx(hProc, 0, pBuf, MAX_PATH);
Any idea how it is done ?
No comments:
Post a Comment