mirror of
https://github.com/djdevin/recnet-plugin.git
synced 2026-09-08 14:41:30 -07:00
commit mostly nonworking code
This commit is contained in:
@@ -0,0 +1,9 @@
|
||||
#pragma once
|
||||
#include <windows.h>
|
||||
|
||||
// Unlink `self` from the PEB loader's three module lists so anything that walks the loaded-module
|
||||
// list (GetModuleHandle, CreateToolhelp32Snapshot's module snapshot, and -- the point here -- a
|
||||
// protector's periodic anti-tamper scan) no longer sees redirector.dll. The DLL stays mapped and all
|
||||
// its hooks/threads keep running; only its visibility in the loader lists is removed. See
|
||||
// src/memory/module_hide.c.
|
||||
void HideModuleFromPeb(HMODULE self);
|
||||
Reference in New Issue
Block a user