aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorsegfault <toni@impl.cc>2020-12-02 08:49:36 +0100
committersegfault <toni@impl.cc>2020-12-02 08:49:36 +0100
commite6d0ce32b43b6013779268768ff9d136a1e537f9 (patch)
tree4e1afad0d4da5be1aa15db071c99ea5d34979bbd
parent5ab58e307af7d281cf4caaa5c5f55c2a06a36782 (diff)
Removed superfluous code.
* Re-Enabled Release targets
-rw-r--r--KMemDriver.sln25
-rw-r--r--KMemDriver/KMemDriver.c57
2 files changed, 13 insertions, 69 deletions
diff --git a/KMemDriver.sln b/KMemDriver.sln
index c38f0f1..d242ad3 100644
--- a/KMemDriver.sln
+++ b/KMemDriver.sln
@@ -1,7 +1,7 @@

Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio 15
-VisualStudioVersion = 15.0.28307.421
+# Visual Studio Version 16
+VisualStudioVersion = 16.0.30114.105
MinimumVisualStudioVersion = 10.0.40219.1
Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "KMemDriver", "KMemDriver\KMemDriver.vcxproj", "{5B65BD0E-C43C-41E3-A016-1CD0B092998F}"
EndProject
@@ -24,25 +24,24 @@ Global
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Debug|x64.ActiveCfg = Debug|x64
{5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Debug|x64.Build.0 = Debug|x64
- {5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Release|x64.ActiveCfg = Debug|x64
- {5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Release|x64.Build.0 = Debug|x64
- {5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Release|x64.Deploy.0 = Release|x64
+ {5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Release|x64.ActiveCfg = Release|x64
+ {5B65BD0E-C43C-41E3-A016-1CD0B092998F}.Release|x64.Build.0 = Release|x64
{B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Debug|x64.ActiveCfg = Debug|x64
{B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Debug|x64.Build.0 = Debug|x64
- {B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Release|x64.ActiveCfg = Debug|x64
- {B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Release|x64.Build.0 = Debug|x64
- {E27E6F2C-154E-46AF-BED4-78D50C751565}.Debug|x64.ActiveCfg = Release|x64
- {E27E6F2C-154E-46AF-BED4-78D50C751565}.Debug|x64.Build.0 = Release|x64
+ {B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Release|x64.ActiveCfg = Release|x64
+ {B6790A97-6995-46B6-AD73-AC5BC4AC76DB}.Release|x64.Build.0 = Release|x64
+ {E27E6F2C-154E-46AF-BED4-78D50C751565}.Debug|x64.ActiveCfg = Debug|x64
+ {E27E6F2C-154E-46AF-BED4-78D50C751565}.Debug|x64.Build.0 = Debug|x64
{E27E6F2C-154E-46AF-BED4-78D50C751565}.Release|x64.ActiveCfg = Release|x64
{E27E6F2C-154E-46AF-BED4-78D50C751565}.Release|x64.Build.0 = Release|x64
{AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Debug|x64.ActiveCfg = Debug|x64
{AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Debug|x64.Build.0 = Debug|x64
- {AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Release|x64.ActiveCfg = Debug|x64
- {AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Release|x64.Build.0 = Debug|x64
+ {AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Release|x64.ActiveCfg = Release|x64
+ {AD4E6887-32BA-4CC9-924C-18F0ECAFB576}.Release|x64.Build.0 = Release|x64
{B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Debug|x64.ActiveCfg = Debug|x64
{B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Debug|x64.Build.0 = Debug|x64
- {B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Release|x64.ActiveCfg = Debug|x64
- {B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Release|x64.Build.0 = Debug|x64
+ {B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Release|x64.ActiveCfg = Release|x64
+ {B6441DA8-67E2-47E9-9A10-CD5C90173EAC}.Release|x64.Build.0 = Release|x64
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
diff --git a/KMemDriver/KMemDriver.c b/KMemDriver/KMemDriver.c
index 917d421..6dac77e 100644
--- a/KMemDriver/KMemDriver.c
+++ b/KMemDriver/KMemDriver.c
@@ -7,34 +7,10 @@
#include <Ntstrsafe.h>
#define CHEAT_EXE L"kmem"
-
-#ifndef _DEBUG_
-#define FNZERO_MARKER() \
- do { \
- volatile UINT32 marker = 0xDEADC0DE;\
- UNREFERENCED_PARAMETER(marker); \
- } while (0)
-#define FNZERO_FN(fn_start) \
- do { fn_zero_text((PVOID)fn_start); } while (0)
-#define FNZERO(fn_start) \
- FNZERO_MARKER(); \
- FNZERO_FN(fn_start)
-#else
-#define FNZERO_MARKER()
-#define FNZERO_FN(fn_start)
-#define FNZERO(fn_start)
-#endif
-
-#define WAIT_OBJECT_0 ((STATUS_WAIT_0 ) + 0 )
+#d3efine WAIT_OBJECT_0 ((STATUS_WAIT_0 ) + 0 )
DRIVER_INITIALIZE DriverEntry;
#pragma alloc_text(INIT, DriverEntry)
-void OnImageLoad(
- PUNICODE_STRING FullImageName,
- HANDLE ProcessId,
- PIMAGE_INFO ImageInfo
-);
-#pragma alloc_text(PAGE, OnImageLoad)
NTSTATUS WaitForControlProcess(OUT PEPROCESS* ppEProcess);
NTSTATUS VerifyControlProcess(IN PEPROCESS pEProcess);
@@ -371,37 +347,6 @@ NTSTATUS KRThread(IN PVOID pArg)
low, high, high - low, IoGetRemainingStackSize());
}
- if (mmapedBase && !hijackedDriver &&
- NT_SUCCESS(GetDriverObject(&hijackedDriver, L"\\Driver\\ahcache")))
- {
- if (hijackedDriver) {
-#ifdef _DEBUG_
- KDBG("Got DriverObject at 0x%p\n", hijackedDriver);
- PKLDR_DATA_TABLE_ENTRY drv_section = hijackedDriver->DriverSection;
- KDBG("PDrvObj: base -> 0x%p , name -> '%wZ' , flags -> 0x%X\n",
- drv_section->DllBase, drv_section->BaseDllName, drv_section->Flags);
-#endif
- /* !!! EXPERIMENTAL !!! */
-#if 0
- hijacked = 1;
- /* the following lines are known to cause a bugcheck */
- hijackedDriverOriginal = *hijackedDriver;
- hijackedDriver->DriverStart = mmapedBase;
- //hijackedDriver->DriverSection = (PVOID)((ULONG_PTR)mmapedBase + 100);
-#endif
-#if 0
- /* the following lines are known to not work with ahcache driver */
- hijackedDriver->DriverInit = (PDRIVER_INITIALIZE)DriverEntry;
- hijackedDriver->DriverStartIo = NULL;
- hijackedDriver->DriverUnload = NULL;
- SIZE_T funcs = sizeof hijackedDriver->MajorFunction / sizeof hijackedDriver->MajorFunction[0];
- for (SIZE_T i = 0; i < funcs; ++i) {
- hijackedDriver->MajorFunction[i] = NULL;
- }
-#endif
- }
- }
-
status = WaitForControlProcess(&ctrlPEP);
if (!NT_SUCCESS(status))
goto finish;