FilesExpand file tree

 master

/

PebApi.inc

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

31 lines (27 loc) · 741 Bytes

 master

/

PebApi.inc

Copy path

Top

File metadata and controls

• Code
• Blame

31 lines (27 loc) · 741 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

; Module hashes

PEB_NtdllDll = 0x3cfa685d

PEB_Kernel32Dll = 0x6a4abc5b

; Function hashes (ntdll.dll)

PEB_RtlAllocateHeap = 0x3e192526

PEB_NtUnmapViewOfSection = 0xf21037d0

; Function hashes (kernel32.dll)

PEB_GetProcessHeap = 0xa80eecae

PEB_GetModuleFileNameW = 0x45b06d8c

PEB_CreateProcessW = 0x16b3fe88

PEB_TerminateProcess = 0x78b5b983

PEB_VirtualAllocEx = 0x6e1a959c

PEB_WriteProcessMemory = 0xd83d6aa1

PEB_GetThreadContext = 0x68a7c7d2

PEB_SetThreadContext = 0xe8a7c7d3

PEB_ResumeThread = 0x9e4a3f88

macro pebcall modulehash, functionhash, [arg]

{

common

if ~ arg eq

reverse

pushd arg

common

end if

stdcall PebGetProcAddress, modulehash, functionhash

call eax

}