noury/mirror-ac
1
0
Fork 0
mirror of https://github.com/donnaskiez/ac.git synced 2024-11-21 22:24:08 +01:00
Code Issues Projects Releases Packages Wiki Activity

bed time c:

Browse source
This commit is contained in:
lhodges1 2023-08-27 05:25:57 +10:00
parent 404902b952
commit b4fc3f223c
1 changed files with 26 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
driver/pool.c
View file

@ -58,7 +58,7 @@ VOID ScanPageForProcessAllocations(
if ( !PageBase || !PageSize ) if ( !PageBase || !PageSize )
return; return;
for ( INT offset = 0; offset < PageSize; offset++ ) for ( INT offset = 0; offset <= PageSize - length; offset++ )
{ {
for ( INT sig_index = 0; sig_index < length; sig_index++ ) for ( INT sig_index = 0; sig_index < length; sig_index++ )
{ {
@ -68,21 +68,28 @@ VOID ScanPageForProcessAllocations(
break; break;
} }
//CHAR current_char = *( PCHAR )( PageBase + offset + sig_index ); CHAR current_char = *( PCHAR )( PageBase + offset + sig_index );
//CHAR current_sig_byte = process[ sig_index ]; CHAR current_sig_byte = process[ sig_index ];
//if ( current_char != current_sig_byte ) if ( current_char != current_sig_byte )
//{ {
// found = FALSE; found = FALSE;
// break; break;
//} }
} }
//if ( found ) if ( found )
//{ {
// PPOOL_HEADER pool_header = PageBase + offset - POOL_TAG_SIZE; PPOOL_HEADER pool_header = PageBase + offset - POOL_TAG_SIZE;
// DEBUG_LOG( "Maybe found: %llx", ( UINT64 )pool_header ); DEBUG_LOG( "Maybe found: %llx", ( UINT64 )pool_header );
ULONG test = ( ULONG )pool_header;
if ( test & POOL_FLAG_NON_PAGED )
{
DEBUG_LOG( "maybe found pool with non paged pool" );
}
//if ( pool_header->PoolType & POOL_FLAG_NON_PAGED && //if ( pool_header->PoolType & POOL_FLAG_NON_PAGED &&
// pool_header->PoolTag == 0x636f7250 ) // pool_header->PoolTag == 0x636f7250 )
@ -90,7 +97,7 @@ VOID ScanPageForProcessAllocations(
// DEBUG_LOG( "FOUND POOL at: %llx", ( UINT64 )pool_header ); // DEBUG_LOG( "FOUND POOL at: %llx", ( UINT64 )pool_header );
// break; // break;
//} //}
//} }
} }
} }