-
Notifications
You must be signed in to change notification settings - Fork 5
/
NtdllFunctions.cpp
13 lines (11 loc) · 1.09 KB
/
NtdllFunctions.cpp
1
2
3
4
5
6
7
8
9
10
11
12
13
#include "NtdllFunctions.hpp"
const LPCSTR NTDLL_DLL_NAME = "ntdll.dll";
DLLFunctionsLoader NtdllFunctions::_functionsLoader(NTDLL_DLL_NAME);
NtQueryInformationProcess NtdllFunctions::_NtQueryInformationProcess = (NtQueryInformationProcess)(NtdllFunctions::_functionsLoader["NtQueryInformationProcess"]);
NtGetContextThread NtdllFunctions::_NtGetContextThread = NtdllFunctions::_functionsLoader["NtGetContextThread"];
NtReadVirtualMemory NtdllFunctions::_NtReadVirtualMemory = NtdllFunctions::_functionsLoader["NtReadVirtualMemory"];
NtUnmapViewOfSection NtdllFunctions::_NtUnmapViewOfSection = NtdllFunctions::_functionsLoader["NtUnmapViewOfSection"];
NtWriteVirtualMemory NtdllFunctions::_NtWriteVirtualMemory = NtdllFunctions::_functionsLoader["NtWriteVirtualMemory"];
NtSetContextThread NtdllFunctions::_NtSetContextThread = NtdllFunctions::_functionsLoader["NtSetContextThread"];
NtResumeThread NtdllFunctions::_NtResumeThread = NtdllFunctions::_functionsLoader["NtResumeThread"];
NtQueryInformationThread NtdllFunctions::_NtQueryInformationThread = NtdllFunctions::_functionsLoader["NtQueryInformationThread"];