InitiateEptFunctionAddressArrays unexpected behavior
pythonfansx opened this issue · comments
I found a typo in the function InitiateEptFunctionAddressArrays while reviewing the code, which caused the function not to meet the unexpected behavior.
for (INT index = 0; index < EPT_PROTECTED_FUNCTIONS_COUNT; index++) {
UNICODE_STRING current_function;
RtlInitUnicodeString(¤t_function, CONTROL_FUNCTIONS[index]);
PROTECTED_FUNCTION_ADDRESSES[index] =
MmGetSystemRoutineAddress(¤t_function);
It should be corrected to:
for (INT index = 0; index < EPT_PROTECTED_FUNCTIONS_COUNT; index++) {
RtlInitUnicodeString(¤t_function, PROTECTED_FUNCTIONS[index]);
PROTECTED_FUNCTION_ADDRESSES[index] =
MmGetSystemRoutineAddress(¤t_function);
Please correct the code in the subsequent version. thank you :}
thanks, fixed