ATL / WTL / STL

err = DeviceIoControl(hVolume,IOCTL_SCSI_PASS_THROUGH_DIRECT,(PVOID)sptd_sb, (DWORD)sizeof(sptd_sb),(PVOID)sptd_sb,(DWORD)sizeof(sptd_sb),dwBytesReturned,NULL);

HANDLE hproc = ::OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
if(!hproc)
{
	printf("OpenProcess() failed: 0x%x", ::GetLastError());
	return _T("");
}

_NtQueryInformationProcess NtQueryInformationProcess = (_NtQueryInformationProcess)GetProcAddress(GetModuleHandleA("ntdll.dll"), "NtQueryInformationProcess");
PROCESS_BASIC_INFORMATION pbi;
DWORD size_written;
NTSTATUS nt = NtQueryInformationProcess(hproc, ProcessBasicInformation, (void*)&pbi, sizeof(PROCESS_BASIC_INFORMATION), &size_written); // get pbi
if(nt)
{
	printf("NtQueryInformationProcess() failed: 0x%x", nt);
	return _T("");
}

PEB* peb = pbi.PebBaseAddress;
ULONG session_id = peb->SessionId;
SIZE_T read_size;
RTL_USER_PROCESS_PARAMETERS* proc_params = NULL;
DWORD old_protection;
if(!::VirtualProtectEx(hproc, peb->ProcessParameters, sizeof(RTL_USER_PROCESS_PARAMETERS*), PAGE_EXECUTE_READWRITE, &old_protection))
{
	printf("VirtualProtectEx() failed: 0x%x", ::GetLastError());
	return _T("");
}


// ************ FAILS HERE !!!! ***************
if(!::ReadProcessMemory(hproc, peb->ProcessParameters, (RTL_USER_PROCESS_PARAMETERS*)proc_params, sizeof(RTL_USER_PROCESS_PARAMETERS*), &read_size))
{
	printf("ReadProcessMemory() failed: 0x%x", ::GetLastError());
	return _T("");
}

if(!::VirtualProtectEx(hproc, peb->ProcessParameters, sizeof(RTL_USER_PROCESS_PARAMETERS*), old_protection, NULL))
{
	printf("VirtualProtectEx() failed: 0x%x", ::GetLastError());
	return _T("");
}

// m_DBConnectSettings manages a OLE connection CString (m_sInitString)
// name = m_sInitString	
// value = {0x046dfed8 "Provider=SQLOLEDB;Persist Security Info=False;User ID=xx;Password=xxxxx;Data Source=MSSQL$XXXXXLOCAL;Initial Catalog=XxxxxxxxxxXXX"}
// type = ATL::CStringT<unsigned short,StrTraitMFC_DLL<unsigned short,ATL::ChTraitsCRT<unsigned short> > >

// I X’ed out company identifying information.  The actual SQL database files are on the local machine:
//    C:\Program Files(x86)\Common Files\Company Name\Databases\MSSQL$XXXXXLOCAL\Data folder.

startTime = GetTickCount();

// Try to connect to the database.
CDBConnection DB;	// inherits from CDataSource

if( DB.Open( m_DBConnectSettings ) )	 
{
    DB.Close();
    endTime = GetTickCount();
    logStr.Format(_T("CDBEngine::InitializeDatabase DB.Open elapsedTime: %d ticks"), (endTime - startTime));
    EventLog.LogEvent(0x04, logStr);
}

// And here is CDBConnection::Open
BOOL CDBConnection::Open( const CDBConnectSettings &Settings )
{
    USES_CONVERSION;
    return( SUCCEEDED( OpenFromInitializationString(
        T2COLE((LPCTSTR)Settings) ) ) );
}