Mirrors/wavestone-cdt-edrsandblast
1
0
Fork 0
mirror of https://github.com/wavestone-cdt/EDRSandblast.git synced 2026-06-11 01:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

cosmetic changes

Browse Source
This commit is contained in:
Maxime Meignan
2023-11-03 16:10:40 +01:00
parent b1321850c1
commit 4fde66c86d
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
EDRSandblast/Drivers/DriverRTCore.c
+1 -1
View File
@@ -139,7 +139,7 @@ VOID WriteMemoryPrimitive_RTCore(SIZE_T Size, DWORD64 Address, PVOID Buffer) {
exit(1); exit(1);
} }
DeviceIoControl(GetDriverHandle_RTCore (), DeviceIoControl(GetDriverHandle_RTCore(),
RTCORE64_MEMORY_WRITE_CODE, RTCORE64_MEMORY_WRITE_CODE,
&WriteCommand, &WriteCommand,
sizeof(WriteCommand), sizeof(WriteCommand),
EDRSandblast/Utils/NtoskrnlOffsets.c
+3 -4
View File
@@ -6,6 +6,7 @@
*/ */
#include <tchar.h> #include <tchar.h>
#include <stdio.h> #include <stdio.h>
#include <shlwapi.h>
#include "FileVersion.h" #include "FileVersion.h"
#include "PrintFunctions.h" #include "PrintFunctions.h"
@@ -126,12 +127,10 @@ TCHAR g_ntoskrnlPath[MAX_PATH] = { 0 };
LPTSTR GetNtoskrnlPath() { LPTSTR GetNtoskrnlPath() {
if (_tcslen(g_ntoskrnlPath) == 0) { if (_tcslen(g_ntoskrnlPath) == 0) {
// Retrieves the system folder (eg C:\Windows\System32). // Retrieves the system folder (eg C:\Windows\System32).
TCHAR systemDirectory[MAX_PATH] = { 0 }; GetSystemDirectory(g_ntoskrnlPath, _countof(g_ntoskrnlPath));
GetSystemDirectory(systemDirectory, _countof(systemDirectory));
// Compute ntoskrnl.exe path. // Compute ntoskrnl.exe path.
_tcscat_s(g_ntoskrnlPath, _countof(g_ntoskrnlPath), systemDirectory); PathAppend(g_ntoskrnlPath, TEXT("\\ntoskrnl.exe"));
_tcscat_s(g_ntoskrnlPath, _countof(g_ntoskrnlPath), TEXT("\\ntoskrnl.exe"));
} }
return g_ntoskrnlPath; return g_ntoskrnlPath;
} }