MCPcopy Create free account
hub / github.com/NoMercy-ac/NoMercy / GetProcessEnvironmentBlock

Function GetProcessEnvironmentBlock

Source/Client/NM_Engine/ApiSetMap.cpp:37–50  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

35#include <../Extern/ReflectiveDLLRefresher/src/ApiSetMap.h>
36
37_PPEB GetProcessEnvironmentBlock()
38{
39 ULONG_PTR pPeb;
40#ifdef _WIN64
41 pPeb = __readgsqword(0x60);
42#else
43#ifdef WIN_ARM
44 pPeb = *(DWORD *)( (BYTE *)_MoveFromCoprocessor( 15, 0, 13, 0, 2 ) + 0x30 );
45#else _WIN32
46 pPeb = __readfsdword(0x30);
47#endif
48#endif
49 return (_PPEB)pPeb;
50}
51
52PPEB_LDR_DATA GetInMemoryOrderModuleList()
53{

Callers 5

GetRedirectedNameFunction · 0.85
GetRedirectedName_V6Function · 0.85
GetRedirectedName_V4Function · 0.85
GetRedirectedName_V2Function · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected