diff --git a/Scylla/PeParser.cpp b/Scylla/PeParser.cpp index b240bd6..7aba4fe 100644 --- a/Scylla/PeParser.cpp +++ b/Scylla/PeParser.cpp @@ -539,7 +539,7 @@ bool PeParser::readSectionFromFile(const DWORD readOffset, PeFileSection & peFil bool PeParser::readSectionFrom(const DWORD_PTR readOffset, PeFileSection & peFileSection, const bool isProcess) { - const DWORD maxReadSize = 100; + const DWORD maxReadSize = 0x100; DWORD currentReadSize; BYTE data[maxReadSize]; bool retValue = true; diff --git a/Scylla/ProcessAccessHelp.cpp b/Scylla/ProcessAccessHelp.cpp index d2c1e0d..e043062 100644 --- a/Scylla/ProcessAccessHelp.cpp +++ b/Scylla/ProcessAccessHelp.cpp @@ -142,8 +142,8 @@ bool ProcessAccessHelp::readMemoryPartlyFromProcess(DWORD_PTR address, SIZE_T si { bytesToRead = size - readBytes; } - - if (memBasic.State == MEM_COMMIT) + + if (memBasic.State == MEM_COMMIT && memBasic.Protect != PAGE_NOACCESS) { if (!readMemoryFromProcess(addressPart, bytesToRead, (LPVOID)((DWORD_PTR)dataBuffer + readBytes))) {