|
|
|
@ -39,4 +39,13 @@ Registeration of APCS:
|
|
|
|
|
LOBYTE(v77) = 0;
|
|
|
|
|
KeInitializeApc(allocated_pool_2, some_pethread, 0i64, j_apc_callback, 0i64, 0i64, v77, 0i64);
|
|
|
|
|
if ( (unsigned __int8)KeInsertQueueApc(allocated_pool_2, allocated_pool_2, 0i64, 2i64) )
|
|
|
|
|
```
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
# HWID
|
|
|
|
|
|
|
|
|
|
```cpp
|
|
|
|
|
02646072 190.99209595 [GoodEye]ZwDeviceIoControlFile Called From 0xFFFFF804DEFDB9B1
|
|
|
|
|
02646073 190.99211121 [GoodEye] - FileHandle: 0xFFFFFFFF80003E28
|
|
|
|
|
02646074 190.99211121 [GoodEye] - IoControlCode: 0x000000000007C088
|
|
|
|
|
02646075 190.99211121 [GoodEye] - OutputBufferLength: 0x0000000000000211
|
|
|
|
|
02646076 190.99211121 [GoodEye] - InoutBufferLength: 0x0000000000000021
|