commit mostly nonworking code

This commit is contained in:
Devin Zuczek
2026-08-18 15:53:45 -04:00
parent 54c97ef6d9
commit b15039ea08
29 changed files with 2797 additions and 43 deletions
+9
View File
@@ -0,0 +1,9 @@
#pragma once
#include <windows.h>
// Unlink `self` from the PEB loader's three module lists so anything that walks the loaded-module
// list (GetModuleHandle, CreateToolhelp32Snapshot's module snapshot, and -- the point here -- a
// protector's periodic anti-tamper scan) no longer sees redirector.dll. The DLL stays mapped and all
// its hooks/threads keep running; only its visibility in the loader lists is removed. See
// src/memory/module_hide.c.
void HideModuleFromPeb(HMODULE self);