modify syscall_number windows 7 7601

x-Ai · Mar 6, 2024 · 513c9ea · 513c9ea · i486 · May 18, 2024
1 parent 6f87605
commit 513c9ea
Showing 1 changed file with 13 additions and 13 deletions.
diff --git a/HookLibrary/HookHelper.cpp b/HookLibrary/HookHelper.cpp
@@ -724,19 +724,19 @@ LONG CALLBACK VMPSysenterHandler(EXCEPTION_POINTERS* info)
                 if (!IsBadReadPtr((void*)ExceptionAddr, 2))
                     if (*reinterpret_cast<USHORT*>(ExceptionAddr) == 0x340F) // sysenter
                     {
-                        //x32bit syscall_number windows 10 22H2 19045.3324 ~
+                        //x32bit syscall_number windows 7 Service Pack 1 Build 7601
                         enum SYSCALLNAME : ULONG {
-                            NTSETINFORMATIONPROCESS = 0x4F,
-                            NTQUERYINFORMATIONPROCESS = 0xB9,
-                            NTSETINFORMATIONTHREAD = 0x4D,
-                            NTOPENFILE = 0xF4,
-                            NTCREATESECTION = 0x163,
-                            NTMAPVIEWOFSECTION = 0x101,
-                            NTUNMAPVIEWOFSECTION = 0x14,
-                            NTCLOSE = 0x18E,
-                            NTPROTECTVIRTUALMEMORY = 0xCE,
-                            NTQUERYVIRTUALMEMORY = 0x97,
-                            NTQUERYSYSTEMINFORMATION = 0x9D
+                            NTSETINFORMATIONPROCESS = 0x14d,
+                            NTQUERYINFORMATIONPROCESS = 0xe9,
+                            NTSETINFORMATIONTHREAD = 0x14f,
+                            NTOPENFILE = 0xb3,
+                            NTCREATESECTION = 0x53,
+                            NTMAPVIEWOFSECTION = 0xa7,
+                            NTUNMAPVIEWOFSECTION = 0x181,
+                            NTCLOSE = 0x32,
+                            NTPROTECTVIRTUALMEMORY = 0xd7,
+                            NTQUERYVIRTUALMEMORY = 0x10b,
+                            NTQUERYSYSTEMINFORMATION = 0x105
                         };
 
 
@@ -951,4 +951,4 @@ LONG CALLBACK VMPSysenterHandler(EXCEPTION_POINTERS* info)
 
     return EXCEPTION_CONTINUE_SEARCH;
 }
-#endif
+#endif