Theodosius/DemoDrv/ObfuscateDemo.c

#include "Theodosius.h"
extern void* PiddbCacheTable;

ObfuscateRoutine
unsigned long long get_dirbase()
{
	cr3 result;
	result.flags =
		*(unsigned long long*)(IoGetCurrentProcess() + 0x28);

	result.flags = NULL;
	if (!result.address_of_page_directory)
		return -1;

	*(unsigned*)PiddbCacheTable = 0x0;
	return result.address_of_page_directory << 12 + (unsigned long long) &get_dirbase;
}