-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
LdrpHandleTlsData pattern only works for Windows 10 19H1 or later #10
Comments
Yes, I have already caught many different errors using manual map in windows 7. Is it true that LdrpHandleTlsData is not present in Windows 7, or is there still a solution? |
It's present in Windows 7 but the pattern and offset is different. Blackbone has the pattern here. |
I wanted to say this, I changed the offsets, but it looks like the matter is in the read_memory function. Error: https://i.imgur.com/Nzv7ifi.png . The point is most likely in this line: |
In general, when executing the read_memory function, my ret variable is equal to 0 instead of 1; The funny thing is that if I change the ntdll.dll file to another, the read_memory function is executed normally. I checked it even on the old version of windows 7, the same thing. Everything works well on Windows 10. And ret = 0 because & mut num_bytes_read = 0. This only happens with this DLL. Everything is fine with the rest =) |
Hi, can you tell me how to write this line correctly? |
The pattern is |
No description provided.
The text was updated successfully, but these errors were encountered: