MCPcopy Create free account
hub / github.com/qilingframework/qiling / make_eprocess

Function make_eprocess

qiling/os/windows/structs.py:907–921  ·  view source on GitHub ↗
(archbits: int)

Source from the content-addressed store, hash-verified

905# };
906
907def make_eprocess(archbits: int):
908 Struct = struct.get_aligned_struct(archbits)
909
910 obj_size = {
911 32: 0x2c0,
912 64: 0x4d0
913 }[archbits]
914
915 class EPROCESS(Struct):
916 # FIXME: define meaningful fields
917 _fields_ = (
918 ('dummy', ctypes.c_char * obj_size),
919 )
920
921 return EPROCESS
922
923
924def make_ldr_data(archbits: int):

Callers 2

init_eprocessMethod · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected