Skip to content

Commit 621ae78

Browse files
committed
feat: Add ntoskrnl offsets to SeMediumDaclSd for 10.0.22621.2864
1 parent f4098eb commit 621ae78

File tree

2 files changed

+26
-8
lines changed

2 files changed

+26
-8
lines changed

collat_payload/nt_offsets.c

Lines changed: 16 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,19 @@ VOID set_build_rev(ULONG rev)
1111

1212
UINT64 get_sd_ptr_offset()
1313
{
14-
if (build_rev == 4478)
14+
if (build_rev == 2864)
1515
{
16+
// 10.0.22621.2864
17+
return ORIG_SD_OFFSET_2864;
18+
}
19+
else if (build_rev == 4478)
20+
{
21+
// 10.0.25398.4478
1622
return SD_PTR_OFFSET_4478;
1723
}
1824
else if (build_rev == 4908 || 4909)
1925
{
26+
// 10.0.25398.4908/4909
2027
return SD_PTR_OFFSET_4908;
2128
}
2229

@@ -25,12 +32,19 @@ UINT64 get_sd_ptr_offset()
2532

2633
UINT64 get_orig_sd_offset()
2734
{
28-
if (build_rev == 4478)
35+
if (build_rev == 2864)
36+
{
37+
// 10.0.22621.2864
38+
return ORIG_SD_OFFSET_2864;
39+
}
40+
else if (build_rev == 4478)
2941
{
42+
// 10.0.25398.4478
3043
return ORIG_SD_OFFSET_4478;
3144
}
3245
else if (build_rev == 4908 || 4909)
3346
{
47+
// 10.0.25398.4908/4909
3448
return ORIG_SD_OFFSET_4908;
3549
}
3650

collat_payload/nt_offsets.h

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,17 @@
77
//#define ORIG_SD_OFFSET 0xd55f20
88
//#define SD_PTR_OFFSET 0xd55658
99

10-
// Xbox - 4478
11-
#define ORIG_SD_OFFSET_4478 0xC62B8
12-
#define SD_PTR_OFFSET_4478 0xC5A58
10+
// Xbox - 10.0.22621.2864 - Base: 0xFFFFF8004009F000
11+
#define ORIG_SD_OFFSET_2864 0xC0E48 // @ ntoskrnl.exe!0xFFFFF8004015FE48
12+
#define SD_PTR_OFFSET_2864 0xC05F0 // @ ntoskrnl.exe!0xFFFFF8004015F5F0
1313

14-
// Xbox - 4908/4909
15-
#define ORIG_SD_OFFSET_4908 0xC62B8
16-
#define SD_PTR_OFFSET_4908 0xC5A48
14+
// Xbox - 10.0.25398.4478 - Base: 0xFFFFF8004009F000
15+
#define ORIG_SD_OFFSET_4478 0xC62B8 // @ ntoskrnl.exe!0xFFFFF800401652B8
16+
#define SD_PTR_OFFSET_4478 0xC5A58 // @ ntoskrnl.exe!0xFFFFF80040164A58
17+
18+
// Xbox - 10.0.25398.4908/4909 - Base: 0xFFFFF8004009F000
19+
#define ORIG_SD_OFFSET_4908 0xC62B8 // @ ntoskrnl.exe!0xFFFFF800401652B8
20+
#define SD_PTR_OFFSET_4908 0xC5A48 // @ ntoskrnl.exe!0xFFFFF80040164A48
1721

1822
VOID set_build_rev(ULONG rev);
1923
UINT64 get_sd_ptr_offset();

0 commit comments

Comments
 (0)