Searched refs:g_originals (Results 1 – 3 of 3) sorted by relevance
22 SANDBOX_INTERCEPT OriginalFunctions g_originals; variable29 NtMapViewOfSectionFunction>(g_originals[MAP_VIEW_OF_SECTION_ID]); in TargetNtMapViewOfSection64()38 NtUnmapViewOfSectionFunction>(g_originals[UNMAP_VIEW_OF_SECTION_ID]); in TargetNtUnmapViewOfSection64()48 NtSetInformationThreadFunction>(g_originals[SET_INFORMATION_THREAD_ID]); in TargetNtSetInformationThread64()58 NtOpenThreadTokenFunction>(g_originals[OPEN_THREAD_TOKEN_ID]); in TargetNtOpenThreadToken64()67 NtOpenThreadTokenExFunction>(g_originals[OPEN_THREAD_TOKEN_EX_ID]); in TargetNtOpenThreadTokenEx64()80 NtCreateFileFunction>(g_originals[CREATE_FILE_ID]); in TargetNtCreateFile64()92 NtOpenFileFunction>(g_originals[OPEN_FILE_ID]); in TargetNtOpenFile64()101 NtQueryAttributesFileFunction>(g_originals[QUERY_ATTRIB_FILE_ID]); in TargetNtQueryAttributesFile64()111 g_originals[QUERY_FULL_ATTRIB_FILE_ID]); in TargetNtQueryFullAttributesFile64()[all …]
59 SANDBOX_INTERCEPT OriginalFunctions g_originals = { NULL }; variable415 memset(g_originals, 0, sizeof(g_originals)); in PatchNtdll()435 ResultCode ret = child_->TransferVariable("g_originals", g_originals, in PatchNtdll()436 sizeof(g_originals)); in PatchNtdll()528 DCHECK(!g_originals[it->id]); in PatchClientFunctions()529 g_originals[it->id] = &thunks->thunks[dll_data->num_thunks]; in PatchClientFunctions()
32 SANDBOX_INTERCEPT OriginalFunctions g_originals; variable188 DCHECK_NT(!g_originals[function->id]); in PatchDll()189 g_originals[function->id] = &thunks->thunks[i]; in PatchDll()