admin/bb107-MemoryModulePP
1
0
Fork 0
mirror of https://github.com/bb107/MemoryModulePP synced 2026-06-08 13:15:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove some useless definitions, implement LdrpHandleTlsData

Browse Source
This commit is contained in:
Boring
2021-06-06 22:59:42 +08:00
parent 41c1175add
commit 78b3d1d707
17 changed files with 328 additions and 1197 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MemoryModule/rtlldr.cpp
+2 -13
View File
@@ -1,4 +1,4 @@
#include "rtlldr.h"
#include "stdafx.h"
#pragma warning(disable:4996)
PLDR_DATA_TABLE_ENTRY const LdrpNtdllBase = RtlFindLdrTableEntryByBaseName(L"ntdll.dll");
@@ -57,18 +57,7 @@ ULONG NTAPI LdrHashEntry(IN const UNICODE_STRING& str, IN bool _xor) {
}
HANDLE NTAPI RtlFindLdrpHeap() {
PLIST_ENTRY ListHead, ListEntry;
PLDR_DATA_TABLE_ENTRY CurEntry;
MEMORY_BASIC_INFORMATION mbi{};
static HANDLE result = nullptr;
if (result)return result;
ListHead = &NtCurrentPeb()->Ldr->InLoadOrderModuleList;
ListEntry = ListHead->Flink;
if (ListHead == ListEntry)return result;
CurEntry = CONTAINING_RECORD(ListEntry, LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
NtQueryVirtualMemory(NtCurrentProcess(), CurEntry, MemoryBasicInformation, &mbi, sizeof(mbi), (PSIZE_T)&ListHead);
return result = mbi.AllocationBase;
return RtlProcessHeap();
}
PLIST_ENTRY NTAPI RtlFindLdrpHashTable() {