diff --git a/SbieHide/HideFromPEB.cpp b/SbieHide/HideFromPEB.cpp index a449cc0..9106217 100644 --- a/SbieHide/HideFromPEB.cpp +++ b/SbieHide/HideFromPEB.cpp @@ -1,8 +1,6 @@ #include "HideFromPEB.h" #include "MemoryImageHideInformation.h" -#include - VOID EraseModuleNameFromPeb() { PPEB ProcessEnvironmentBlock = nullptr; PLIST_ENTRY FirstEntry = nullptr; @@ -42,11 +40,6 @@ VOID EraseModuleNameFromPeb() { RtlZeroMemory(CurrentEntryData->BaseDllName.Buffer, CurrentEntryData->BaseDllName.MaximumLength); RtlZeroMemory(CurrentEntryData->FullDllName.Buffer, CurrentEntryData->FullDllName.MaximumLength); - #ifdef _WIN64 - RtlZeroMemory(CurrentEntryData, 136); - #else - RtlZeroMemory(CurrentEntryData, 72); - #endif CurrentEntry = NextEntry; continue; diff --git a/SbieHide/LibEntry.cpp b/SbieHide/LibEntry.cpp index fa96713..d956c88 100644 --- a/SbieHide/LibEntry.cpp +++ b/SbieHide/LibEntry.cpp @@ -12,7 +12,7 @@ BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved) InitMemoryImageHideInformation(); EraseModuleNameFromPeb(); - EraseModuleNameFromPeb(); + EnableApiHook(); break; case DLL_THREAD_ATTACH: