GetCorrectOffset (19043)

Question

GetCorrectOffset (19043)

lmzxyz opened this issue 3 years ago · 3 comments

int GetCorrectOffset(CHAR* Name, ULONG BuildNumber) only supports 19041 and 19042. It's outdated for BuildNumber 19043.
How can I find these offsets for the new version?

dretax commented 3 years ago

Correct

Answer 1 · 2021-08-06T18:41:21.000Z

https://www.vergiliusproject.com/kernels/x64/Windows%2010%20%7C%202016/2104%2021H1%20(May%202021%20Update)/_EPROCESS

i will update the code later

Answer 2 · 2021-08-06T19:32:39.000Z

Thanks a lot if I'm not mistaken they are still the same. So changing the if statement in memory.c on line 42 to the following should do the trick.
else if (BuildNumber == 19041 || BuildNumber == 19042 || BuildNumber == 19043)