armasm/easyantipatchguard

Easy Anti PatchGuard

easyantipatchguard's Issues

Couldnt find KiTimerDispatch on version v21H2 19044.1766

Might be able to be fixed by changing the signature?

lkd> u KiTimerDispatch l20
nt!KiTimerDispatch:
fffff801`4bc0f350 2428            and     al,28h
fffff801`4bc0f352 8b4c2420        mov     ecx,dword ptr [rsp+20h]
fffff801`4bc0f356 ffc9            dec     ecx
fffff801`4bc0f358 81e1ffff0000    and     ecx,0FFFFh
fffff801`4bc0f35e 33d2            xor     edx,edx
fffff801`4bc0f360 8bc1            mov     eax,ecx
fffff801`4bc0f362 b920000000      mov     ecx,20h
fffff801`4bc0f367 f7f1            div     eax,ecx
fffff801`4bc0f369 8bc0            mov     eax,eax
fffff801`4bc0f36b 8b4c2420        mov     ecx,dword ptr [rsp+20h]
fffff801`4bc0f36f ffc9            dec     ecx
fffff801`4bc0f371 83e11f          and     ecx,1Fh
fffff801`4bc0f374 ba01000000      mov     edx,1
fffff801`4bc0f379 d3e2            shl     edx,cl
fffff801`4bc0f37b 8bca            mov     ecx,edx
fffff801`4bc0f37d 488b542428      mov     rdx,qword ptr [rsp+28h]
fffff801`4bc0f382 8b44822c        mov     eax,dword ptr [rdx+rax*4+2Ch]
fffff801`4bc0f386 23c1            and     eax,ecx
fffff801`4bc0f388 85c0            test    eax,eax
---snip---

Contact

Hello do you have contact info? Thanks

error with win 10 1809

have error with win 10 1809 making kmode bsod.

YMBOL_NAME: nt!KiDispatchException+156b03
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.17763.1577
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 156b03
FAILURE_BUCKET_ID: 0x1E_nt!KiDispatchException

Not work on 20h2 19042.572

Does not work on 19042.572 not printing KiTimerDispatch