mirror of
https://github.com/bats3c/DarkLoadLibrary
synced 2026-06-06 15:14:33 +00:00
Update README.md
This commit is contained in:
@@ -12,6 +12,7 @@ https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/
|
||||
DARKMODULE DarkModule = DarkLoadLibrary(
|
||||
LOAD_LOCAL_FILE, // control flags
|
||||
L"TestDLL.dll", // local dll path, if loading from disk
|
||||
NULL, // DLL Buffer to load from if loading from memory
|
||||
0, // dll size if loading from memory
|
||||
NULL // dll name if loaded from memory
|
||||
);
|
||||
@@ -26,6 +27,10 @@ DARKMODULE DarkModule = DarkLoadLibrary(
|
||||
|
||||
This can be any path that `CreateFileW` will open.
|
||||
|
||||
### DLL Buffer:
|
||||
|
||||
This argument is only needed when `LOAD_MEMORY` is set. In that case this argument should be the buffer containing the DLL.
|
||||
|
||||
#### DLL Size:
|
||||
|
||||
This argument is only needed when `LOAD_MEMORY` is set. In that case this argument should be the size of the buffer containing the DLL.
|
||||
|
||||
Reference in New Issue
Block a user