| 5 | #define API_SET_SCHEMA_ENTRY_FLAGS_SEALED 1 |
| 6 | |
| 7 | static bool GetProcessPeb(HANDLE hProcess, PPEB peb) { |
| 8 | PROCESS_BASIC_INFORMATION info; |
| 9 | if (!NT_SUCCESS(::NtQueryInformationProcess(hProcess, ProcessBasicInformation, &info, sizeof(info), nullptr))) |
| 10 | return false; |
| 11 | |
| 12 | return ::ReadProcessMemory(hProcess, info.PebBaseAddress, peb, sizeof(*peb), nullptr); |
| 13 | } |
| 14 | |
| 15 | const std::vector<ApiSetEntry>& ApiSets::GetApiSets() const { |
| 16 | return _entries; |
no outgoing calls
no test coverage detected