admin/kkent030315-evil-mhyprot-cli
1
0
Fork 0
mirror of https://github.com/kkent030315/evil-mhyprot-cli synced 2026-08-31 14:05:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated Enumerate Process Threads (markdown)

Kento Oki
2020-10-26 15:42:01 +09:00
parent efc9e83850
commit d689d0697b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Enumerate-Process-Threads.md
+1 -1
@@ -7,7 +7,7 @@ I'll explain how I made managed to work it with reverse engineering.
First of all, the driver has a function that executes `ZwQuerySystemInformation`.
Here is a block found on ioctl handler subroutine:
```cpp
```asm
PAGE:FFFFF800188CD77E loc_FFFFF800188CD77E: ; CODE XREF: sub_FFFFF800188CD6E0+8C↑j
PAGE:FFFFF800188CD77E cmp ecx, 83024000h
PAGE:FFFFF800188CD784 jnz short loc_FFFFF800188CD794