FilterHandler::FilterHandler(){ pInfo = ProcInfo::getInstance(); filtered_library_name.push_back("GDI32.dll"); filtered_library_name.push_back("LPK.dll"); filtered_library_name.push_back("USP10.dll"); //Initializing the Filter map: "stack" => adding FILTER_STACK to filterExecutionFlag initFilterMap(); }
FilterHandler::FilterHandler(){ //Initializing the TEB char *tebStr=(char *)malloc(16); W::_TEB *teb = W::NtCurrentTeb(); sprintf(tebStr,"%x",teb); tebAddr = strtoul(tebStr,NULL,16); MYINFO("Init FilterHandler Teb %x",tebAddr); //Initializing the Filter map: "stack" => adding FILTER_STACK to filterExecutionFlag initFilterMap(); }