最終更新:2023-12-07 (木) 10:19:41 (411d)
supR3HardenedScreenImage
Top / supR3HardenedScreenImage
Screens an image file or file mapped with execute access.
処理
- NtQueryObject?
- supR3HardenedWinVerifyCacheLookup?
- if (pCacheHit?)
- supHardenedWinIsWinVerifyTrustCallable?
- supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on kernel32.dll [lacks WinVerifyTrust]
- if(RT_SUCCESS(pCacheHit?->rc))
- return SUCCESS
- else
- supR3HardenedScreenImageCalcStatus?
メモ
- supR3HardenedMonitor_LdrLoadDll: rejecting rcNt=0xc0000190のエラーコード： (STATUS_TRUST_FAILURE)
