marfixdev
commented
6 months ago Firstly it works for Windows 11.
If pattern is not compatible with your system then drop ntoskrnl.exe to your IDA and generate pattern for yourself from related functions.
Open thgiang opened 1 year ago
marfixdev
commented
6 months ago Firstly it works for Windows 11.
If pattern is not compatible with your system then drop ntoskrnl.exe to your IDA and generate pattern for yourself from related functions.
Thank you, it work with Windows 10. But I tried windows 7 and 11 it seem... blue screen :3
Can you explain me how to fix it? I am thinking about this:
unsigned char MiGetPteAddress_sequence[] = { 0x48, 0xC1, 0xE9, 0x09, 0x48, 0xB8, 0xF8, 0xFF, 0xFF, 0xFF, 0x7F, 0x00, 0x00, 0x00, 0x48, 0x23, 0xC8, 0x48, 0xB8 };