| 38 | |
| 39 | |
| 40 | BOOL Memory::Setup(LPCSTR routineName) { |
| 41 | auto win32u = LoadLibraryA("win32u.dll"); |
| 42 | if (!win32u) { |
| 43 | return FALSE; |
| 44 | } |
| 45 | |
| 46 | auto addr = GetProcAddress(win32u, routineName); |
| 47 | if (!addr) { |
| 48 | return FALSE; |
| 49 | } |
| 50 | |
| 51 | *(PVOID*)&NtUserCloseWindowStation = addr; |
| 52 | return TRUE; |
| 53 | } |
| 54 | |
| 55 | bool Memory::GetProcessBaseAddressFromKernel(int processID, uint64_t* baseAddress) |
| 56 | { |
nothing calls this directly
no outgoing calls
no test coverage detected