aljaz/shadow-rs
1
1
Fork 0
mirror of https://github.com/joaoviictorti/shadow-rs.git synced 2026-01-28 19:54:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(driver): Remove KeUnstackDetachProcess

Browse Source
This commit is contained in:
joaoviictorti
2024-09-25 20:17:26 -03:00
parent 9827365eba
commit 8084118ae7
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
driver/src/utils/mod.rs
View File

@@ -166,13 +166,12 @@ pub unsafe fn get_process_by_name(process_name: &str) -> Option<usize> {
/// - `Option<*mut c_void>`: The address of the target function if found.
///
pub unsafe fn get_module_peb(pid: usize, module_name: &str, function_name: &str) -> Option<*mut c_void> {
let mut apc_state: KAPC_STATE = core::mem::zeroed();
let apc_state: KAPC_STATE = core::mem::zeroed();
let target = Process::new(pid)?;
let attach_process = ProcessAttach::new(target.e_process);
let target_peb = PsGetProcessPeb(target.e_process) as *mut PEB;
if target_peb.is_null() || (*target_peb).Ldr.is_null() {
KeUnstackDetachProcess(&mut apc_state);
return None;
}