admin/rad9800-misc
1
0
Fork 0
mirror of https://github.com/rad9800/misc synced 2026-06-08 16:56:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update NtTraceEvent.c

Browse Source
This commit is contained in:
rad9800
2022-11-10 18:17:43 +00:00
committed by GitHub
parent 1e1346281e
commit 4466d5cd6d
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NtTraceEvent.c
+1 -3
View File
@@ -25,7 +25,7 @@ void trace_event_patch(
{
ExceptionInfo->ContextRecord->Rip = find_gadget(
ExceptionInfo->ContextRecord->Rip,
"\xc3", 1, 30);
"\xc3", 1, 100);
ExceptionInfo->ContextRecord->EFlags |= (1 << 16); // Set Resume Flag
}
@@ -34,8 +34,6 @@ int main()
const PVOID handler = hardware_engine_init();
FARPROC ptrNtTraceEvent = GetProcAddress(GetModuleHandleW(L"ntdll.dll"), "NtTraceEvent");
uintptr_t addr = find_gadget(ptrNtTraceEvent, "\xc3", 1, 100);
insert_descriptor_entry(ptrNtTraceEvent, 0, trace_event_patch, GetCurrentThreadId());