search

KeganHollern / MemStream

Efficient DMA Library
46 stars 12 forks source link

Alternative for gptCursorAsync #9

Closed Griffin1337 closed 10 months ago

Griffin1337 commented 10 months ago

Ran into an issue where VMMDLL_ProcessGetProcAddressU and VMMDLL_Map_GetEATU were both failing to get any exports from win32kbase. Found an alternative that allowed reading the cursor position from win32kfull pulling it from the Import Table image

KeganHollern commented 10 months ago

For the record using the import table is EXTRAORDINARY BASED