mirror of
https://github.com/bb107/MemoryModulePP
synced 2026-06-08 13:15:33 +00:00
win10 18363 x86 support
This commit is contained in:
@@ -451,6 +451,22 @@ typedef struct _RTL_INVERTED_FUNCTION_TABLE_64 {
|
||||
RTL_INVERTED_FUNCTION_TABLE_ENTRY_64 Entries[0x200];
|
||||
} RTL_INVERTED_FUNCTION_TABLE_64, * PRTL_INVERTED_FUNCTION_TABLE_64;
|
||||
|
||||
// The correct data structure should be this.
|
||||
//
|
||||
//typedef struct _RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32 {
|
||||
// PVOID EntrySEHandlerTableEncoded;
|
||||
// PVOID ImageBase;
|
||||
// ULONG ImageSize;
|
||||
// ULONG SEHandlerCount;
|
||||
//} RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32, * PRTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32;
|
||||
//typedef struct _RTL_INVERTED_FUNCTION_TABLE_WIN7_32 {
|
||||
// ULONG Count;
|
||||
// ULONG MaxCount;
|
||||
// ULONG Overflow;
|
||||
// RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32 Entries[0x200];
|
||||
//} RTL_INVERTED_FUNCTION_TABLE_WIN7_32, * PRTL_INVERTED_FUNCTION_TABLE_WIN7_32;
|
||||
//
|
||||
//
|
||||
typedef struct _RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32 {
|
||||
PVOID ImageBase;
|
||||
ULONG ImageSize;
|
||||
|
||||
Reference in New Issue
Block a user