Function initialize_dll_info

RustVEHSyscalls/src/hooks.rs:42–47

Initializes the `DllInfo` struct with `ntdll.dll`'s base and end addresses by accessing the PEB and locating the module using its DJB2 hash (0x1edab0ed).

(obj: &mut DllInfo)

/// Initializes the `DllInfo` struct with `ntdll.dll`'s base and end addresses by accessing the PEB and
/// locating the module using its DJB2 hash (0x1edab0ed).
pub fn initialize_dll_info(obj: &mut DllInfo) {
    let (base_addr, size_of_image) = unsafe { ldr_module_info(0x1edab0ed) };

    obj.base_address = base_addr as u64;
    obj.end_address = unsafe { base_addr.add(size_of_image) } as u64;
}

/// Adds hardware breakpoints at the syscall entry and return addresses.
///