|
|
|
@ -53,7 +53,7 @@ namespace vdm
|
|
|
|
|
|
|
|
|
|
m_smep_off.flags = cr4_value.flags;
|
|
|
|
|
m_smep_off.smep_enable = false;
|
|
|
|
|
m_smep_off.smap_enable = false; // newer spus have this on...
|
|
|
|
|
m_smep_off.smap_enable = false; // newer cpus have this on...
|
|
|
|
|
|
|
|
|
|
// WARNING: some virtual machines dont have SMEP...
|
|
|
|
|
// my VMWare VM doesnt... nor does my Virtual Box VM...
|
|
|
|
@ -140,7 +140,8 @@ namespace vdm
|
|
|
|
|
m_kpcr_rsp_offset = *reinterpret_cast<std::uint32_t*>(ki_system_call + 8);
|
|
|
|
|
m_kpcr_krsp_offset = *reinterpret_cast<std::uint32_t*>(ki_system_call + 17);
|
|
|
|
|
|
|
|
|
|
// handle KVA shadowing... if KVA shadowing is enabled LSTAR will point at KiSystemCall64Shadow...
|
|
|
|
|
// handle KVA shadowing... if KVA shadowing is
|
|
|
|
|
// enabled LSTAR will point at KiSystemCall64Shadow...
|
|
|
|
|
SYSTEM_KERNEL_VA_SHADOW_INFORMATION kva_info = { 0 };
|
|
|
|
|
|
|
|
|
|
// if SystemKernelVaShadowInformation is not a valid class just
|
|
|
|
|