search

KeganHollern / MemStream

Efficient DMA Library
44 stars 12 forks source link

Alternative for gptCursorAsync #9

Closed Griffin1337 closed 9 months ago

Griffin1337 commented 9 months ago

Ran into an issue where VMMDLL_ProcessGetProcAddressU and VMMDLL_Map_GetEATU were both failing to get any exports from win32kbase. Found an alternative that allowed reading the cursor position from win32kfull pulling it from the Import Table image

KeganHollern commented 9 months ago

For the record using the import table is EXTRAORDINARY BASED