yindo/gse_fork
1
0
Fork 0
mirror of https://github.com/alex47exe/gse_fork.git synced 2026-02-04 05:41:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

validate nt-header signature

Browse Source
This commit is contained in:
otavepto
2024-05-06 23:29:17 +03:00
parent 6fbc37630b
commit 47d48829a9
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
helpers/pe_helpers.cpp
View File

@@ -28,7 +28,12 @@ PIMAGE_NT_HEADERS pe_helpers::get_nt_header(HMODULE hModule)
return nullptr;
}
LONG newExeHeaderOffset = dosHeader->e_lfanew;
return (PIMAGE_NT_HEADERS)((char*)hModule + newExeHeaderOffset);
PIMAGE_NT_HEADERS ntHeader = (PIMAGE_NT_HEADERS)((char*)hModule + newExeHeaderOffset);
if (!ntHeader || ntHeader->Signature != 0x00004550) { // "PE\0\0"
return nullptr;
}
return ntHeader;
}
PIMAGE_FILE_HEADER pe_helpers::get_file_header(HMODULE hModule)