Files
2021-08-12 14:16:53 -03:00

17 lines
664 B
C

#include <windows.h>
#include "pebutils.h"
#include "darkloadlibrary.h"
#define RVA(type, base_addr, rva) (type)((ULONG_PTR) base_addr + rva)
typedef BOOL(WINAPI * DLLMAIN)(HINSTANCE, DWORD, LPVOID);
typedef HMODULE(WINAPI* LOADLIBRARYA)(LPCSTR);
typedef BOOL(WINAPI* VIRTUALPROTECT)(LPVOID lpAddress, SIZE_T dwSize, DWORD flNewProtect, PDWORD lpflOldProtect);
typedef BOOL(WINAPI* FLUSHINSTRUCTIONCACHE)(HANDLE hProcess, LPCVOID lpBaseAddress, SIZE_T dwSize);
BOOL IsValidPE(PBYTE pbData);
BOOL MapSections(PDARKMODULE pdModule);
BOOL ResolveImports(PDARKMODULE pdModule);
BOOL LinkModuleToPEB(PDARKMODULE pdModule);
BOOL BeginExecution(PDARKMODULE pdModule);