Load WoW.exe PE image for Warden MEM_CHECK responses

Parse PE sections from WoW.exe into a flat virtual memory image so
MEM_CHECK returns real binary contents instead of zeros. Also mocks
KUSER_SHARED_DATA (0x7FFE026C) with Windows 7 version info.
This commit is contained in:
Kelsi 2026-02-14 02:00:15 -08:00
parent cb79e43a29
commit 5e8384f34e
5 changed files with 280 additions and 3 deletions

View file

@ -24,6 +24,7 @@
namespace wowee::game {
class TransportManager;
class WardenCrypto;
class WardenMemory;
class WardenModuleManager;
class PacketParsers;
}
@ -1299,6 +1300,7 @@ private:
uint32_t wardenPacketsAfterGate_ = 0;
bool wardenCharEnumBlockedLogged_ = false;
std::unique_ptr<WardenCrypto> wardenCrypto_;
std::unique_ptr<WardenMemory> wardenMemory_;
std::unique_ptr<WardenModuleManager> wardenModuleManager_;
// Warden module download state