If references to functions are pushed into a The imports and known dlls in a windows 7 environment. The TEB and PEB structures are simulated based on the "./src/analysis/symbols/generated_user_system32.json", "./src/analysis/symbols/generated_user_syswow64.json", "forwarder_name": "NTDLL.RtlAcquireSRWLockShared" "forwarder_name": "NTDLL.RtlAcquireSRWLockExclusive"
0 Comments
Leave a Reply. |