This commit is contained in:
lhodges1 2023-08-21 02:39:39 +10:00
parent 4f610ffa53
commit bfb74e2ec2
2 changed files with 9 additions and 0 deletions

View file

@ -14,7 +14,10 @@ VOID InitCallbackReportQueue( PBOOLEAN Status )
report_queue = QueueCreate(); report_queue = QueueCreate();
if ( report_queue == NULL ) if ( report_queue == NULL )
{
*Status = FALSE; *Status = FALSE;
return;
}
KeInitializeGuardedMutex( &mutex ); KeInitializeGuardedMutex( &mutex );
@ -125,6 +128,11 @@ OB_PREOP_CALLBACK_STATUS ObPreOpCallbackRoutine(
LPCSTR process_creator_name = PsGetProcessImageFileName( process_creator ); LPCSTR process_creator_name = PsGetProcessImageFileName( process_creator );
LPCSTR target_process_name = PsGetProcessImageFileName( target_process ); LPCSTR target_process_name = PsGetProcessImageFileName( target_process );
/*
* NOTE for whatever fukin reason this shit prevent notepad rfom launching need
* 2 fix lol
*/
if ( !strcmp( "notepad.exe", target_process_name) ) if ( !strcmp( "notepad.exe", target_process_name) )
{ {
if ( !strcmp( process_creator_name, "lsass.exe" ) || !strcmp( process_creator_name, "csrss.exe" ) ) if ( !strcmp( process_creator_name, "lsass.exe" ) || !strcmp( process_creator_name, "csrss.exe" ) )

View file

@ -15,6 +15,7 @@ PQUEUE_HEAD QueueCreate()
head->start = NULL; head->start = NULL;
head->entries = 0; head->entries = 0;
__debugbreak();
KeInitializeSpinLock( &head->lock ); KeInitializeSpinLock( &head->lock );
return head; return head;