From 573acc3bf6df5b9fefe1a7a34fa33726097e8ff3 Mon Sep 17 00:00:00 2001
From: kanren3 <760917197@qq.com>
Date: Wed, 5 Apr 2023 22:53:50 +0800
Subject: [PATCH] fixup dump<memory alignment and Protect PAGE_NOACCESS filter
 >

---
 Scylla/PeParser.cpp          | 2 +-
 Scylla/ProcessAccessHelp.cpp | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Scylla/PeParser.cpp b/Scylla/PeParser.cpp
index b240bd6..7aba4fe 100644
--- a/Scylla/PeParser.cpp
+++ b/Scylla/PeParser.cpp
@@ -539,7 +539,7 @@ bool PeParser::readSectionFromFile(const DWORD readOffset, PeFileSection & peFil
 
 bool PeParser::readSectionFrom(const DWORD_PTR readOffset, PeFileSection & peFileSection, const bool isProcess)
 {
-	const DWORD maxReadSize = 100;
+	const DWORD maxReadSize = 0x100;
 	DWORD currentReadSize;
 	BYTE data[maxReadSize];
 	bool retValue = true;
diff --git a/Scylla/ProcessAccessHelp.cpp b/Scylla/ProcessAccessHelp.cpp
index d2c1e0d..e043062 100644
--- a/Scylla/ProcessAccessHelp.cpp
+++ b/Scylla/ProcessAccessHelp.cpp
@@ -142,8 +142,8 @@ bool ProcessAccessHelp::readMemoryPartlyFromProcess(DWORD_PTR address, SIZE_T si
 			{
 				bytesToRead = size - readBytes;
 			}
-
-			if (memBasic.State == MEM_COMMIT)
+			
+			if (memBasic.State == MEM_COMMIT && memBasic.Protect != PAGE_NOACCESS)
 			{
 				if (!readMemoryFromProcess(addressPart, bytesToRead, (LPVOID)((DWORD_PTR)dataBuffer + readBytes)))
 				{