nopriest
/
kdmapper-1803-20H2
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update intel_driver.hpp

This commit is contained in:
TheCruZ 2020-05-30 19:55:50 +02:00 committed by GitHub
parent 39ce215e4c
commit cb4784b189
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
kdmapper/intel_driver.hpp
View File

@ -144,6 +144,11 @@ namespace intel_driver
*(uint64_t*)((&kernel_injected_jmp[0]) + 2) = kernel_function_address; *(uint64_t*)((&kernel_injected_jmp[0]) + 2) = kernel_function_address;
const uint64_t kernel_NtQueryInformationAtom = GetKernelModuleExport(device_handle, utils::GetKernelModuleAddress("ntoskrnl.exe"), "NtQueryInformationAtom"); const uint64_t kernel_NtQueryInformationAtom = GetKernelModuleExport(device_handle, utils::GetKernelModuleAddress("ntoskrnl.exe"), "NtQueryInformationAtom");
if (!kernel_NtQueryInformationAtom)
{
std::cout << "[-] Failed to get export ntoskrnl.NtQueryInformationAtom" << std::endl;
return false;
}
if (!ReadMemory(device_handle, kernel_NtQueryInformationAtom, &original_kernel_function, sizeof(kernel_injected_jmp))) if (!ReadMemory(device_handle, kernel_NtQueryInformationAtom, &original_kernel_function, sizeof(kernel_injected_jmp)))
return false; return false;