-
-
Notifications
You must be signed in to change notification settings - Fork 754
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
21 changed files
with
152 additions
and
69 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -14,7 +14,7 @@ | |
| // (c) Ulf Frisk, 2020-2021 | ||
| // Author: Ulf Frisk, [email protected] | ||
| // | ||
| // Header Version: 2.7 | ||
| // Header Version: 2.8 | ||
| // | ||
|
|
||
| #ifndef __LEECHCORE_H__ | ||
|
|
@@ -41,7 +41,8 @@ typedef unsigned __int64 QWORD, *PQWORD; | |
| #define EXPORTED_FUNCTION __attribute__((visibility("default"))) | ||
| typedef void VOID, *PVOID, *HANDLE, **PHANDLE, *HMODULE; | ||
| typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PULONG64; | ||
| typedef uint64_t SIZE_T, *PSIZE_T, FILETIME, *PFILETIME; | ||
| typedef size_t SIZE_T, *PSIZE_T; | ||
| typedef uint64_t FILETIME, *PFILETIME; | ||
| typedef uint32_t DWORD, *PDWORD, *LPDWORD, BOOL, *PBOOL, NTSTATUS; | ||
| typedef uint16_t WORD, *PWORD; | ||
| typedef uint8_t BYTE, *PBYTE, *LPBYTE, UCHAR; | ||
|
|
@@ -169,7 +170,10 @@ typedef struct tdMEM_SCATTER { | |
| DWORD version; // MEM_SCATTER_VERSION | ||
| BOOL f; // TRUE = success data in pb, FALSE = fail or not yet read. | ||
| QWORD qwA; // address of memory to read | ||
| PBYTE pb; // buffer to hold memory contents | ||
| union { | ||
| PBYTE pb; // buffer to hold memory contents | ||
| QWORD _Filler; | ||
| }; | ||
| DWORD cb; // size of buffer to hold memory contents. | ||
| DWORD iStack; // internal stack pointer | ||
| QWORD vStack[MEM_SCATTER_STACK_SIZE]; // internal stack | ||
|
|
||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -7,7 +7,7 @@ | |
| // (c) Ulf Frisk, 2018-2021 | ||
| // Author: Ulf Frisk, [email protected] | ||
| // | ||
| // Header Version: 4.2 | ||
| // Header Version: 4.3 | ||
| // | ||
|
|
||
| #include "leechcore.h" | ||
|
|
@@ -34,7 +34,8 @@ typedef unsigned __int64 QWORD, *PQWORD; | |
| #define EXPORTED_FUNCTION __attribute__((visibility("default"))) | ||
| typedef void VOID, *PVOID, *HANDLE, **PHANDLE, *HMODULE; | ||
| typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PULONG64; | ||
| typedef uint64_t SIZE_T, *PSIZE_T, FILETIME, *PFILETIME; | ||
| typedef size_t SIZE_T, *PSIZE_T; | ||
| typedef uint64_t FILETIME, *PFILETIME; | ||
| typedef uint32_t DWORD, *PDWORD, *LPDWORD, BOOL, *PBOOL, NTSTATUS; | ||
| typedef uint16_t WORD, *PWORD; | ||
| typedef uint8_t BYTE, *PBYTE, *LPBYTE, UCHAR; | ||
|
|
@@ -343,7 +344,10 @@ typedef struct tdVMMDLL_VFS_FILELISTBLOB { | |
| DWORD cbStruct; | ||
| DWORD cFileEntry; | ||
| DWORD cbMultiText; | ||
| LPSTR uszMultiText; | ||
| union { | ||
| LPSTR uszMultiText; | ||
| QWORD _Reserved; | ||
| }; | ||
| DWORD _FutureUse[8]; | ||
| VMMDLL_VFS_FILELISTBLOB_ENTRY FileEntry[0]; | ||
| } VMMDLL_VFS_FILELISTBLOB, *PVMMDLL_VFS_FILELISTBLOB; | ||
|
|
@@ -892,7 +896,7 @@ typedef struct tdVMMDLL_MAP_HANDLEENTRY { | |
| DWORD dwPID; | ||
| DWORD dwPoolTag; | ||
| DWORD _FutureUse[5]; | ||
| union { LPSTR uszType; LPWSTR wszType; }; // U/W dependant | ||
| union { LPSTR uszType; LPWSTR wszType; QWORD _Pad1; }; // U/W dependant | ||
| } VMMDLL_MAP_HANDLEENTRY, *PVMMDLL_MAP_HANDLEENTRY; | ||
|
|
||
| typedef struct tdVMMDLL_MAP_NETENTRY { | ||
|
|
@@ -940,12 +944,12 @@ typedef struct tdVMMDLL_MAP_SERVICEENTRY { | |
| DWORD dwOrdinal; | ||
| DWORD dwStartType; | ||
| SERVICE_STATUS ServiceStatus; | ||
| union { LPSTR uszServiceName; LPWSTR wszServiceName; };// U/W dependant | ||
| union { LPSTR uszDisplayName; LPWSTR wszDisplayName; };// U/W dependant | ||
| union { LPSTR uszPath; LPWSTR wszPath; }; // U/W dependant | ||
| union { LPSTR uszUserTp; LPWSTR wszUserTp; }; // U/W dependant | ||
| union { LPSTR uszUserAcct; LPWSTR wszUserAcct; }; // U/W dependant | ||
| union { LPSTR uszImagePath; LPWSTR wszImagePath; }; // U/W dependant | ||
| union { LPSTR uszServiceName; LPWSTR wszServiceName; QWORD _Reserved1; }; // U/W dependant | ||
| union { LPSTR uszDisplayName; LPWSTR wszDisplayName; QWORD _Reserved2; }; // U/W dependant | ||
| union { LPSTR uszPath; LPWSTR wszPath; QWORD _Reserved3; }; // U/W dependant | ||
| union { LPSTR uszUserTp; LPWSTR wszUserTp; QWORD _Reserved4; }; // U/W dependant | ||
| union { LPSTR uszUserAcct; LPWSTR wszUserAcct; QWORD _Reserved5; }; // U/W dependant | ||
| union { LPSTR uszImagePath; LPWSTR wszImagePath; QWORD _Reserved6; }; // U/W dependant | ||
| DWORD dwPID; | ||
| DWORD _FutureUse1; | ||
| QWORD _FutureUse2; | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.