init

kdmapper/intel_driver.hpp

@@ -244,7 +244,8 @@ namespace intel_driver
 			}
 			return true;
 		}
-		else if (HIWORD(pFixed->dwFileVersionLS) >= 17134) {
+		//else if (HIWORD(pFixed->dwFileVersionLS) >= 17134) {//1803
+		else if (HIWORD(pFixed->dwFileVersionLS) >= 15063) {//1703
 			const auto NtGdiDdDDIReclaimAllocations2 = reinterpret_cast<void*>(GetProcAddress(LoadLibrary("gdi32full.dll"), "NtGdiDdDDIReclaimAllocations2"));
 
 			if (!NtGdiDdDDIReclaimAllocations2)

kdmapper/kdmapper.vcxproj

@@ -118,6 +118,9 @@
       <ConformanceMode>true</ConformanceMode>
       <TreatWarningAsError>false</TreatWarningAsError>
       <LanguageStandard>stdcpp17</LanguageStandard>
+      <RuntimeLibrary>MultiThreaded</RuntimeLibrary>
+      <StringPooling>true</StringPooling>
+      <ControlFlowGuard>false</ControlFlowGuard>
     </ClCompile>
     <Link>
       <EnableCOMDATFolding>true</EnableCOMDATFolding>

kdmapper/kdmapper.vcxproj.user

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <PropertyGroup />
+</Project>

kdmapper/x64/Release/kdmapper.exe.recipe

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project>
+  <ProjectOutputs>
+    <ProjectOutput>
+      <FullPath>J:\Workspace\Chenggong\kdmapper-1803-20H2\x64\Release\kdmapper.exe</FullPath>
+    </ProjectOutput>
+  </ProjectOutputs>
+  <ContentFiles />
+  <SatelliteDlls />
+  <NonRecipeFileRefs />
+</Project>

kdmapper/x64/Release/kdmapper.log

@@ -0,0 +1,22 @@
+  intel_driver.cpp
+J:\Workspace\Chenggong\kdmapper-1803-20H2\kdmapper\intel_driver.hpp(85,1): warning C4267: “参数”: 从“size_t”转换到“DWORD”，可能丢失数据
+J:\Workspace\Chenggong\kdmapper-1803-20H2\kdmapper\intel_driver.cpp(189): message : 查看对正在编译的函数 模板 实例化“bool intel_driver::CallKernelFunction<uint64_t,nt::POOL_TYPE,uint64_t>(HANDLE,T *,uint64_t,const nt::POOL_TYPE,const uint64_t)”的引用
+          with
+          [
+              T=uint64_t
+          ]
+  kdmapper.cpp
+J:\Workspace\Chenggong\kdmapper-1803-20H2\kdmapper\intel_driver.hpp(85,1): warning C4267: “参数”: 从“size_t”转换到“DWORD”，可能丢失数据
+J:\Workspace\Chenggong\kdmapper-1803-20H2\kdmapper\kdmapper.cpp(84): message : 查看对正在编译的函数 模板 实例化“bool intel_driver::CallKernelFunction<NTSTATUS,>(HANDLE,T *,uint64_t)”的引用
+          with
+          [
+              T=NTSTATUS
+          ]
+  main.cpp
+  service.cpp
+  正在生成代码
+  3 of 1041 functions ( 0.3%) were compiled, the rest were copied from previous compilation.
+    0 functions were new in current compilation
+    3 functions had inline decision re-evaluated but remain unchanged
+  已完成代码的生成
+  kdmapper.vcxproj -> J:\Workspace\Chenggong\kdmapper-1803-20H2\x64\Release\kdmapper.exe

kdmapper/x64/Release/kdmapper.tlog/kdmapper.lastbuildstate

@@ -0,0 +1,2 @@
+PlatformToolSet=v142:VCToolArchitecture=Native32Bit:VCToolsVersion=14.28.29333:TargetPlatformVersion=10.0.19041.0:
+Release|x64|J:\Workspace\Chenggong\kdmapper-1803-20H2\|