Skip to content

Commit

Permalink
v 1.3.1
Browse files Browse the repository at this point in the history 
Rearrange output
Add symbols usage for DSEFix
Snapshot 09 Apr 2023
  • Loading branch information
@hfiref0x
hfiref0x committed Apr 13, 2023
1 parent 8cc874a commit 841aa50
Show file tree
Hide file tree
Showing 27 changed files with 753 additions and 362 deletions.
48 changes: 25 additions & 23 deletions KDU.sha256
View file
Original file line number Diff line number Diff line change
Expand Up @@ -22,44 +22,44 @@ d45cf40c855a135898e4b35d0b5b2d00e3ad251a97d3f47990248116f22ff45e *Source\Example
1a429882d1bfd0455b00155d19dc4dd494e25e80a87fd3a0f9b318b33ac1b871 *Source\Examples\DummyDrv2\dummy\main.c
103a979ec980d48e7c27199433b0ecbb1fdcdebf8ee96c84c8db2cae0aa4ced8 *Source\Examples\DummyDrv2\dummy\main.h
10b9fe09b9357cb3c35a00a8b09ae24141ec5941a37c461c2a296d822aa2b512 *Source\Examples\DummyDrv2\dummy\r3request.c
f12057a99c6b20abf6d9c3df949d794b124ca19b189498ce2beaa5beeb2b077c *Source\Hamakaze\compress.cpp
82345231a904bfd01e64bb644a4132db93c34e2db7befc179ad4330176f63b85 *Source\Hamakaze\compress.cpp
09fa3cdaa1416b81ba5ee304cf24897726902b9d33a76d879f604b7fe26b4dcc *Source\Hamakaze\compress.h
09970cfcb9bfb7a8964ae4ec48fd15c1805e93ea81c858de2793691eefda3881 *Source\Hamakaze\diag.cpp
e8957d58c5e550a5e0f007883a564277c5a5cbc6b83af4b82bcbb30638997e63 *Source\Hamakaze\diag.cpp
a4fa97b9f2be414bc49881450d5935d2b48c1029d3bee655cd6e77e645327d74 *Source\Hamakaze\diag.h
6b8267d1f309cfe0939e54d0a1f99bc2a9eced834fb2d22610c20ff868320500 *Source\Hamakaze\drvmap.cpp
c7f7acb2a567a4c97e03d74f6d3d147a7489d5af0443696673a75f1806818eaa *Source\Hamakaze\drvmap.cpp
c62c75c00882d816856f56005eec67a82cf56179d2a4629c4c8bf53707c16c25 *Source\Hamakaze\drvmap.h
46a4fd4dacc53b917a0894542c786c5db08ac662157438447fa89f71afa615c5 *Source\Hamakaze\dsefix.cpp
5131aa81ffb17238a092b313a954a6d9e9203636ba47562f0a7f8d4daf306221 *Source\Hamakaze\dsefix.h
e5a1f46828479cddd14f6a401947240aff6ec4e7f246e4bf8f22b6c82105f92e *Source\Hamakaze\dsefix.cpp
bde58787437d8243d531f2ab1b33eda6bdf4afffdad08b63f85b16a3b65bd5fd *Source\Hamakaze\dsefix.h
27f3972b1ee460e8cef1b62af503cbf3e885c4338af56d34e636c2b9e653676b *Source\Hamakaze\global.h
ea0d8d42a5e7d7fb908c52351f99c69f2019c105d07a1f536756691ab2a74174 *Source\Hamakaze\ipcsvc.cpp
888a436b666b00592d29e8a2e82a9b5c7f0c1d4890aaab8cb2f623181ad07092 *Source\Hamakaze\ipcsvc.h
1ff1421d555548f44a4d67f0fa64bc945e8b0473acb90c0024c6b499570d259b *Source\Hamakaze\KDU.vcxproj
b553fc001f8e618a02b602c5a16f6d1b8b397c1681899ad211b49f31383a02a7 *Source\Hamakaze\KDU.vcxproj.filters
1039917a202d0d6e3eb589615ebb81526793da2244044f6219f6d2d941e3b589 *Source\Hamakaze\KDU.vcxproj.user
fa84aa19582e7b2cd0e2889bd2a709f896cfdc242ffa8f0e56bb1696329170ed *Source\Hamakaze\kduplist.h
c1fb3e0c2b8a766bfba8138912e52db610549f24e40878a484c32e76866589f2 *Source\Hamakaze\kduprov.cpp
a29f7dd29a464e1e044afd94791a5d51c7f69ba7c30af0bf7973178e013d1028 *Source\Hamakaze\KDU.vcxproj
55f3a6393ae677fc99380250728e5f068a98eeccea68a68610482056a5f3fbb2 *Source\Hamakaze\KDU.vcxproj.filters
aa35be57cdcb8f54843d731367ee88241e810fcf91716de45b6cd07ad67ce425 *Source\Hamakaze\KDU.vcxproj.user
236148d2cb61170a77c8815ef91851c4e22590e0f6c55b5351c0ed57f38c4f66 *Source\Hamakaze\kduplist.h
57dfb635d029dc56726e150ff7583714b3c1ef91c3a8e02c71cd73fbabb9b20a *Source\Hamakaze\kduprov.cpp
13a842b3bc62995ab8071ae56df74065d6a1388fcda66884012c6d8addb94055 *Source\Hamakaze\kduprov.h
ace87ca919d2502c47d147814808e42b892b38cf9092aa69a3dad5f44da05323 *Source\Hamakaze\main.cpp
5df844991a17772f75dbb2da15e09017dde3d426087227cefe35f038f50eb6df *Source\Hamakaze\main.cpp
e1a8de39e2d3d0bae5d9bbe1b18e849f5d070feb1d37f838176ede5a401f35ec *Source\Hamakaze\pagewalk.cpp
545ecf7e669b6b28753a02e33fae6f503750d26cf0bf9089701f401fd24e0dd1 *Source\Hamakaze\pagewalk.h
40067200848300c557bb687db61734f658704afb7ad3be07e4108d80f32c9d48 *Source\Hamakaze\ps.cpp
eaeb06030f296d1147869dc65254a990425033b64e654f5d0e1c1408eebc2d93 *Source\Hamakaze\ps.cpp
eb15810b52b16482f3a3a679fbeed102257bfa0416243e74fce5b634daf9b074 *Source\Hamakaze\ps.h
6ab34cc400e37c37605e0b04b076f9464172c6e1ae749b19f7d0c73f2d7177e3 *Source\Hamakaze\resource.h
f02b459bbc24380e6d2e2d80dfd0372a706f9c8c2f75df939ffbd5f7d6826dda *Source\Hamakaze\resource.rc
c617a2090e51738ba9aadff46c573fcf57caada21219ed673ee0f8998e35a831 *Source\Hamakaze\shellcode.cpp
a96ea46fac8d9c25c370aebd19a262c3277fc4bdf81043c043078f012971a7dd *Source\Hamakaze\shellcode.cpp
87c7274c6e821eb447ec87b63b0a058c59f0e64f0c109cfc1d529fb8e2f25150 *Source\Hamakaze\shellcode.h
5428b9eb02810dbc4bfd715ec657ee35a5e61e53079c65f05e1eea4f8a6fa4a0 *Source\Hamakaze\shellmasm.asm
1bc7b331c4d2be8d2b7686fee741954aa7c44f9b63f2001d451bb9d4ac6c2b61 *Source\Hamakaze\shellstager.lst
879eea1c38c0c408e3634d0ed2eeae2b8b21e1040b4b0988ea4d802de0ecd21e *Source\Hamakaze\sig.h
d568e2369c9d30a4f35d8c320137fd90c32307e707acdef9d7886b3867b22a83 *Source\Hamakaze\sup.cpp
dbf47ee3569e37239bf206ea79d225c64a092283bda9bab9110bd524afefc8f8 *Source\Hamakaze\sup.h
19c0f91fe914489b5716597847ecf7067f5af5125948b5126e4ce741732a48cf *Source\Hamakaze\sym.cpp
fb13502ed0db29b9241a6b717cdfd95cfcf0521266bea2ec26a6eb743eb524a9 *Source\Hamakaze\sup.cpp
60396a1465a67894d1020e7558d1c553c5331e457ec1e5d0cb1015ef551d85fe *Source\Hamakaze\sup.h
d19e67019fc5666a80a153991ec3d2ac3a7e8dbe088dd9ff93d3e0d0ced91cde *Source\Hamakaze\sym.cpp
292efaabf3f6223761aef1fc418ec98108fb529c7260d9d4a72715378c6b7547 *Source\Hamakaze\sym.h
184c9d3e717542e3d14848fb87cd69f861ba1c87f4401a3691d5d594a39b0aaa *Source\Hamakaze\tests.cpp
ad77ae168188a9748713ab5f7532447ca50a539fa8ebbec5ac86b273696b028e *Source\Hamakaze\tests.h
8046da85c2f9853496b369fa63fe1b89d47583d5367db4a49edfd9f52426e6d7 *Source\Hamakaze\victim.cpp
42c3ee977471fb2966d2abd804d1b69e6aeb6c5c86a02f9c75cf182b42af73c4 *Source\Hamakaze\victim.cpp
5b82accd00d244d77f107a7b8ff0253548a463e642976c36f76e85649e60fe8e *Source\Hamakaze\victim.h
655fcb8d6325a6a62cce0a1d67905ed1bbc529ab896827edef06ddc2229aee6c *Source\Hamakaze\wdksup.h
5ae659dfb08d8942e05719f25f0207e31be58942a11997a124ae3d2e8dc08ecb *Source\Hamakaze\wdksup.h
31860c95db21761086e2979753e981d6435f27435dead3ed7e4687e99bb878d4 *Source\Hamakaze\hde\hde64.c
fd5b39e2865e12b9525ebda8fd9e9658b341ead5932d1bcb412a189f81ca42ca *Source\Hamakaze\hde\hde64.h
9d37519623d404987300d3f3258148ba9adddfe1bed5f89a0e9e47646819c9c7 *Source\Hamakaze\hde\pstdint.h
Expand All @@ -70,10 +70,12 @@ de5286bda6dd23940fb2cc0f0e5d3cd12bad73ffdcf30259bc254047a5f1142f *Source\Hamakaz
1c2c5b6a7addf3389a6dee6b11e4a4648d403e9c456008ecefbc79deaa34afae *Source\Hamakaze\idrv\asrdrv.h
b1350783a851e6345b880c8a5313e871d2249aa5524f41406c52fa62483f2229 *Source\Hamakaze\idrv\atszio.cpp
015a6aff991174a881650c61fe1b28c5bfe3116a02a32abe5295ff389c5b7099 *Source\Hamakaze\idrv\atszio.h
515a1a8dfc78af4f8a3a1c832140b033ebc1064386f716729d6e626cde1d590b *Source\Hamakaze\idrv\dbk.cpp
498cbec6087b80ff01a3600221b27edd69db7debd6b6194a876a84af2ef5bee1 *Source\Hamakaze\idrv\dbk.cpp
24f81b4fdc1b924a36c981fb175b2dccebd7d029d6caed85fb731b74b22c7386 *Source\Hamakaze\idrv\dbk.h
7dd872a81007d7309eca434241d2703b97993b63538dca0c14a2eb46ab5bef64 *Source\Hamakaze\idrv\dbutil.cpp
ad955406989b80564e7e4cc400721e62d6d5c193e22037b075e07dd616f3c845 *Source\Hamakaze\idrv\dbutil.h
d44584c725b4a6837d344bcb9e0910de3572c583419be6c74eb7ed3461e1145e *Source\Hamakaze\idrv\dell.cpp
f9963f125a71a864053a3859e48f56129b72743381eaedd0ce0a5303ef2ced78 *Source\Hamakaze\idrv\dell.h
791a4d40f3f5076d0e6ed47e7db972f448ccc78ca578c35f11db637962c868a5 *Source\Hamakaze\idrv\directio64.cpp
73a97fa34df9c0733981536f2079d1eab89bfaf36b4c5d0003cb87d504764ec3 *Source\Hamakaze\idrv\directio64.h
65c53a700fff2f766420a7e0612446aed7ef8f04fd44162ff73c0ba7e3581d77 *Source\Hamakaze\idrv\gmer.cpp
Expand All @@ -83,8 +85,8 @@ db94f36f0d3b946500352ab07393994f0a09e2737a63e1cdbedd3da16c72cb2d *Source\Hamakaz
ae9dd179c7fdc2b1a4741399e64fa9d4a13d22b7fad45cedea9ce285fe7399ea *Source\Hamakaze\idrv\kph.cpp
4bcb0021a14e1d793d9df9f91c4fd261885f4583d36d350661e604fdf407f5d8 *Source\Hamakaze\idrv\kph.h
f3c889ede5142f88b54d3e5e973b46f0fb897d306695de82df9c683f72774fb8 *Source\Hamakaze\idrv\ldrsc.h
967cc58649fa7b99b634234f81982baa49ffa117866159320331313d941b52f0 *Source\Hamakaze\idrv\lenovo.cpp
60e3485cb9da250f4e14281ae996cbbdc02218d9f7765d3274503db115eb13ea *Source\Hamakaze\idrv\lenovo.h
513a4821cd2ed1f2e8a1cf5566f46c82000baaa01fe08b3d8b3707442a3776c9 *Source\Hamakaze\idrv\lenovo.cpp
4db420d9da9500d7dca26599bccda1e9caccb19323bc39d92eb4bad46cfa8f79 *Source\Hamakaze\idrv\lenovo.h
8bcc062ab27f293c35df032340e761f18013d978fd3df33fbaca3a30a2726b5f *Source\Hamakaze\idrv\lha.cpp
dcb5da7acb4997abbde8372a8daf74dae5727ca5cbf80b26876fdb4cb2a0bc08 *Source\Hamakaze\idrv\lha.h
cd54a9949aab0c5552c0defaef6b1a007e259b0b3e5ab8a3683ef0baa951a331 *Source\Hamakaze\idrv\mapmem.cpp
Expand All @@ -109,13 +111,13 @@ a0ed8a22c14b35bccd1ff0f45c8b23cad0f8c3af1d8e924caf4bfd63dfb02d89 *Source\Hamakaz
d0e354d2f97e993e5e40fb6bb2b99b5bc753beb23f8213d44f99c0309210c1e8 *Source\Hamakaze\idrv\winio.h
21c357fab30206cb0942e2fbfef6716b2f315d3620827ee32db451a2ebbc3c7d *Source\Hamakaze\idrv\winring0.cpp
103f50efe410f8668c40ddc68051ba49aa0ee1a5301cb54bc42991523c0edae9 *Source\Hamakaze\idrv\winring0.h
da1cc6b65cf03a50670b33100c1a4d996a1e17eb8391f9dd8fd630dd59843850 *Source\Hamakaze\idrv\zemana.cpp
285c2c1c44e863142bd5d0606a2bc940fb0e444aa825a675d472860a0499d5e4 *Source\Hamakaze\idrv\zemana.cpp
da1ea3c2ceebfdc6e5c338461dc214798870a0d6aa16f7f23c045123fa450f71 *Source\Hamakaze\idrv\zemana.h
de7bdf0bd4acec31c963b916331399bce23c155e3002f0a8152a4a36af13faf8 *Source\Hamakaze\res\274.ico
8124b0a1d33f2c21e05a858ce4d73cf9b7b85dd6e6f206d21e68302c78629769 *Source\Hamakaze\res\SB_SMBUS_SDK.bin
2be7dbd8cd194235e982e2e99a734c786503520f8c10be27ab5e5a0fc9814e5a *Source\Hamakaze\res\Taigei32.bin
1232f65b57bc8732ead29a730308f6c67bc53a2f9fafd47f8c7cc4b4f676a9e9 *Source\Hamakaze\utils\GenAsIo2Unlock.exe
1b91e9e2c1d7fb8a70e4b229093d8d2ae3d90babcbcd3b6da4666198dd02d5c8 *Source\Shared\consts.h
8f68259fe0de31e11d67943f4504739d4e245f6abd747800786a3b2a28ec6e5f *Source\Shared\consts.h
1cbb3b9ac4c7a6f557ddad181348002d3dfa260be724378487c7efb321162ef8 *Source\Shared\kdubase.h
e0ba365c8aa8e66fddd0f28bca4b827725911480fdcd968df2792c370f13ef42 *Source\Shared\ldr\ldr.cpp
37003367e625e218bf7e4c22850ac7d2efe926a6a832d29bc20a9f8b19a479af *Source\Shared\ldr\ldr.h
Expand Down
1 change: 1 addition & 0 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -199,6 +199,7 @@ Using this program might crash your computer with BSOD. Compiled binary and sour
* GhostEmperor: From ProxyLogon to kernel mode, https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/
* KDU v1.2 release and the wonderful world of Microsoft incoherency, https://swapcontext.blogspot.com/2022/02/kdu-v12-release-and-wonderful-world-of.html
* How to exploit a vulnerable windows driver, https://github.com/stong/CVE-2020-15368
* CVE-2022-3699, https://github.com/alfarom256/CVE-2022-3699

# Wormhole drivers code

Expand Down
4 changes: 2 additions & 2 deletions Source/Hamakaze/KDU.vcxproj
View file
Original file line number Diff line number Diff line change
Expand Up @@ -138,7 +138,7 @@
<ClCompile Include="idrv\asrdrv.cpp" />
<ClCompile Include="idrv\atszio.cpp" />
<ClCompile Include="idrv\dbk.cpp" />
<ClCompile Include="idrv\dbutil.cpp" />
<ClCompile Include="idrv\dell.cpp" />
<ClCompile Include="idrv\directio64.cpp" />
<ClCompile Include="idrv\gmer.cpp" />
<ClCompile Include="idrv\hilscher.cpp" />
Expand Down Expand Up @@ -193,7 +193,7 @@
<ClInclude Include="idrv\dbk.h" />
<ClInclude Include="idrv\hilscher.h" />
<ClInclude Include="idrv\ldrsc.h" />
<ClInclude Include="idrv\dbutil.h" />
<ClInclude Include="idrv\dell.h" />
<ClInclude Include="idrv\directio64.h" />
<ClInclude Include="idrv\gmer.h" />
<ClInclude Include="idrv\kph.h" />
Expand Down
4 changes: 2 additions & 2 deletions Source/Hamakaze/KDU.vcxproj.filters
View file
Original file line number Diff line number Diff line change
Expand Up @@ -138,7 +138,7 @@
<ClCompile Include="idrv\gmer.cpp">
<Filter>Source Files\idrv</Filter>
</ClCompile>
<ClCompile Include="idrv\dbutil.cpp">
<ClCompile Include="idrv\dell.cpp">
<Filter>Source Files\idrv</Filter>
</ClCompile>
<ClCompile Include="idrv\mimidrv.cpp">
Expand Down Expand Up @@ -290,7 +290,7 @@
<ClInclude Include="idrv\gmer.h">
<Filter>Source Files\idrv</Filter>
</ClInclude>
<ClInclude Include="idrv\dbutil.h">
<ClInclude Include="idrv\dell.h">
<Filter>Source Files\idrv</Filter>
</ClInclude>
<ClInclude Include="idrv\mimidrv.h">
Expand Down
5 changes: 2 additions & 3 deletions Source/Hamakaze/KDU.vcxproj.user
View file
Original file line number Diff line number Diff line change
@@ -1,12 +1,11 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
<LocalDebuggerCommandArguments>
</LocalDebuggerCommandArguments>
<LocalDebuggerCommandArguments>-dse 0</LocalDebuggerCommandArguments>
<DebuggerFlavor>WindowsLocalDebugger</DebuggerFlavor>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<LocalDebuggerCommandArguments>-list</LocalDebuggerCommandArguments>
<LocalDebuggerCommandArguments>-prv 2 -map c:\install\dummy.sys</LocalDebuggerCommandArguments>
<DebuggerFlavor>WindowsLocalDebugger</DebuggerFlavor>
</PropertyGroup>
</Project>
9 changes: 4 additions & 5 deletions Source/Hamakaze/compress.cpp
View file
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
/*******************************************************************************
*
* (C) COPYRIGHT AUTHORS, 2015 - 2022
* (C) COPYRIGHT AUTHORS, 2015 - 2023
*
* TITLE: COMPRESS.CPP
*
* VERSION: 1.20
* VERSION: 1.31
*
* DATE: 08 Feb 2022
* DATE: 08 Apr 2023
*
* Compression support routines.
*
Expand Down Expand Up @@ -181,8 +181,7 @@ PVOID KDUDecompressResource(
}
else {

supPrintfEvent(kduEventError,
"[!] Error decompressing resource, GetLastError %lu\r\n", GetLastError());
supShowWin32Error("[!] Error while decompressing resource", GetLastError());

}

Expand Down
46 changes: 17 additions & 29 deletions Source/Hamakaze/diag.cpp
View file
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
/*******************************************************************************
*
* (C) COPYRIGHT AUTHORS, 2022
* (C) COPYRIGHT AUTHORS, 2022 - 2023
*
* TITLE: DIAG.CPP
*
* VERSION: 1.28
* VERSION: 1.31
*
* DATE: 01 Dec 2022
* DATE: 09 Apr 2023
*
* Hamakaze system diagnostics component.
*
Expand Down Expand Up @@ -129,8 +129,7 @@ VOID KDUQuerySpecMitigationState()

}
else {
supPrintfEvent(kduEventError,
"Cannot query kernel va shadow information, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot query Kernel VA Shadow information", ntStatus);
}

RtlSecureZeroMemory(&SpecControlInfo, sizeof(SpecControlInfo));
Expand All @@ -141,12 +140,10 @@ VOID KDUQuerySpecMitigationState()
if (ntStatus == STATUS_NOT_IMPLEMENTED ||
ntStatus == STATUS_INVALID_INFO_CLASS)
{
supPrintfEvent(kduEventError,
"Speculation control information class not present, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Speculation control information class not present", ntStatus);
}
else if (ntStatus != STATUS_SUCCESS) {
supPrintfEvent(kduEventError,
"Cannot query speculation control information, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot query speculation control information", ntStatus);
}
else {

Expand Down Expand Up @@ -218,10 +215,7 @@ VOID KDUQueryProcessWorkingSet(
0);

if (!NT_SUCCESS(ntStatus)) {

supPrintfEvent(kduEventError,
"Cannot enable ws watch, NTSTATUS (0x%lX)\r\n", ntStatus);

supShowHardError("Cannot enable ws watch", ntStatus);
return;
}

Expand All @@ -231,10 +225,7 @@ VOID KDUQueryProcessWorkingSet(

ntStatus = EmptyWorkingSet();
if (!NT_SUCCESS(ntStatus)) {

supPrintfEvent(kduEventError,
"Error at EmptyWorkingSet, NTSTATUS (0x%lX)\r\n", ntStatus);

supShowHardError("Error at EmptyWorkingSet", ntStatus);
return;
}

Expand All @@ -246,10 +237,7 @@ VOID KDUQueryProcessWorkingSet(
NULL);

if (!NT_SUCCESS(ntStatus)) {

supPrintfEvent(kduEventError,
"Error at working set changes query, NTSTATUS (0x%lX)\r\n", ntStatus);

supShowHardError("Error at working set changes query", ntStatus);
return;
}

Expand Down Expand Up @@ -342,7 +330,7 @@ VOID KDUQueryProcessWorkingSet(
LdrUnlockLoaderLock(LDR_UNLOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS, cookie);
}
else {
supPrintfEvent(kduEventError, "Cannot lock loaded, NTSTATUS(0x%lX)\r\n", ntStatus);
supShowHardError("Failed acquire loader lock", ntStatus);
}
}

Expand Down Expand Up @@ -410,7 +398,7 @@ VOID TraceHandle(
LdrUnlockLoaderLock(LDR_UNLOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS, cookie);
}
else {
supPrintfEvent(kduEventError, "Cannot lock loaded, NTSTATUS(0x%lX)\r\n", ntStatus);
supShowHardError("Failed to acquire loader lock", ntStatus);
}

}
Expand All @@ -421,7 +409,7 @@ VOID TraceHandle(

}
else {
supPrintfEvent(kduEventError, "Cannot query trace, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot query trace", ntStatus);
}
}

Expand Down Expand Up @@ -457,7 +445,7 @@ VOID TracePsHandle(
NtClose(objectHandle);
}
else {
supPrintfEvent(kduEventError, "Cannot open process, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot open process", ntStatus);
}

if (!TraceThread)
Expand All @@ -476,7 +464,7 @@ VOID TracePsHandle(
NtClose(objectHandle);
}
else {
supPrintfEvent(kduEventError, "Cannot open thread, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot open thread", ntStatus);
}
}

Expand All @@ -502,7 +490,7 @@ VOID TraceSectionHandle(
FILE_NON_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT);

if (!NT_SUCCESS(ntStatus)) {
supPrintfEvent(kduEventError, "Cannot open test file, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot open test file", ntStatus);
return;
}

Expand All @@ -524,7 +512,7 @@ VOID TraceSectionHandle(
NtClose(sectionHandle);
}
else {
supPrintfEvent(kduEventError, "Cannot create test section, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot create test section", ntStatus);
}

NtClose(fileHandle);
Expand Down Expand Up @@ -673,7 +661,7 @@ VOID KDUBacktraceByHandle(
sizeof(traceEnable));

if (!NT_SUCCESS(ntStatus)) {
supPrintfEvent(kduEventError, "Cannot enable backtrace, NTSTATUS (0x%lX)\r\n", ntStatus);
supShowHardError("Cannot enable backtrace", ntStatus);
return;
}

Expand Down
Loading

0 comments on commit 841aa50

Please sign in to comment.