35 lines · 1.1 KB · C++
RawDownload
/*  name      Vx Api  type      trojan  cve       —  year      unknown  os        Windows  authors   unknown  source    krisyotam  archived  krisyotam (2026)  notes     — */#include "Win32Helper.h" DWORD GetCurrentDirectoryFromUserProcessParametersA(_In_ DWORD nBufferLength, _Inout_ PCHAR lpBuffer){	PRTL_USER_PROCESS_PARAMETERS ProcessParameters = GetPeb()->ProcessParameters; 	if (ProcessParameters->CurrentDirectory.DosPath.Length > nBufferLength)		return 0; 	return (DWORD)WCharStringToCharString(lpBuffer, ProcessParameters->CurrentDirectory.DosPath.Buffer, ProcessParameters->CurrentDirectory.DosPath.MaximumLength);} DWORD GetCurrentDirectoryFromUserProcessParametersW(_In_ DWORD nBufferLength, _Inout_ PWCHAR lpBuffer){	PRTL_USER_PROCESS_PARAMETERS ProcessParameters = GetPeb()->ProcessParameters; 	if (ProcessParameters->CurrentDirectory.DosPath.Length > nBufferLength)		return 0; 	if (StringCopyW(lpBuffer, ProcessParameters->CurrentDirectory.DosPath.Buffer) == NULL)		return 0; 	return ProcessParameters->CurrentDirectory.DosPath.Length;}