├── .gitattributes
├── PathModification.c
└── PathModification.h


/.gitattributes:
--------------------------------------------------------------------------------
1 | # Auto detect text files and perform LF normalization
2 | * text=auto
3 | 


--------------------------------------------------------------------------------
/PathModification.c:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zhuhuibeishadiao/PathModification/72e0f45dae42b8dd57f168b483b8fcbb092eb9f6/PathModification.c


--------------------------------------------------------------------------------
/PathModification.h:
--------------------------------------------------------------------------------
 1 | #ifndef _PATH_MODIFICATION_H_
 2 | #define _PATH_MODIFICATION_H_ 1
 3 | //NTSTATUS PsGetTarProcessInfo(HANDLE pid);
 4 | //
 5 | //BOOLEAN PathPebLdr(PEPROCESS Process, WCHAR* szFullName, WCHAR* szBaseName);
 6 | //
 7 | //BOOLEAN PathPebProcessParameters(PEPROCESS Process, WCHAR* szFullName);
 8 | //
 9 | //BOOLEAN PathSeAuditProcessCreationInfo(PEPROCESS Process, WCHAR* ProcessName);
10 | //
11 | //BOOLEAN PathImageFileName(PEPROCESS Process, char* cName);
12 | //
13 | //BOOLEAN PathSeFileObject(PEPROCESS Process, WCHAR* szFullName);
14 | 
15 | BOOLEAN PathModification(HANDLE pid);
16 | #endif


--------------------------------------------------------------------------------