This commit is contained in:
DavidXanatos 2023-11-27 19:23:33 +01:00
parent 12a85fbcb4
commit 018140bcc1
2 changed files with 22 additions and 1 deletions

View File

@ -1716,7 +1716,18 @@ std::wstring GetPebString(HANDLE ProcessHandle, PEB_OFFSET Offset)
#ifdef _WIN64
is64BitOperatingSystem = TRUE;
#else // ! _WIN64
isWow64Process = CSbieAPI::IsWow64();
static bool IsWow64 = false;
static bool init = false;
if (!init)
{
ULONG_PTR wow64;
if (NT_SUCCESS(NtQueryInformationProcess(NtCurrentProcess(), ProcessWow64Information, &wow64, sizeof(ULONG_PTR), NULL))) {
IsWow64 = !!wow64;
}
init = true;
}
isWow64Process = IsWow64;
is64BitOperatingSystem = isWow64Process;
#endif _WIN64

View File

@ -495,6 +495,16 @@ OpenIpcPath=*\BaseNamedObjects*\PS_SERVICE_STARTED
OpenIpcPath=\RPC Control\protected_storage
#
# usefull exceptions for confidential boxes
#
[Template_LessConfidentialBox]
Tmpl.Title=Allow some windows processes to access processes in a confidential box
Tmpl.Class=Misc
DenyHostAccess=audiodg.exe,n
#
# Custom handling for special images
#