Skip to content

Commit 96d22d5

Browse files
committed
Fix win10 kernel update breaking changes
1 parent fd9b2fe commit 96d22d5

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

phlib/kphdata.c

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -129,6 +129,8 @@ NTSTATUS KphInitializeDynamicPackage(
129129
// Windows 10, Windows Server 2016
130130
else if (majorVersion == 10 && minorVersion == 0)
131131
{
132+
ULONG revisionNumber = KphpGetKernelRevisionNumber();
133+
132134
switch (buildNumber)
133135
{
134136
case 10240:
@@ -171,7 +173,7 @@ NTSTATUS KphInitializeDynamicPackage(
171173
return STATUS_NOT_SUPPORTED;
172174
}
173175

174-
Package->StructData.EgeGuid = 0x18;
176+
Package->StructData.EgeGuid = revisionNumber >= 693 ? 0x28 : 0x18;
175177
Package->StructData.EpObjectTable = 0x418;
176178
Package->StructData.EreGuidEntry = 0x20;
177179
Package->StructData.HtHandleContentionEvent = 0x30;
@@ -275,6 +277,8 @@ NTSTATUS KphInitializeDynamicPackage(
275277
// Windows 10
276278
else if (majorVersion == 10 && minorVersion == 0)
277279
{
280+
ULONG revisionNumber = KphpGetKernelRevisionNumber();
281+
278282
switch (buildNumber)
279283
{
280284
case 10240:
@@ -317,7 +321,7 @@ NTSTATUS KphInitializeDynamicPackage(
317321
return STATUS_NOT_SUPPORTED;
318322
}
319323

320-
Package->StructData.EgeGuid = 0xc;
324+
Package->StructData.EgeGuid = revisionNumber >= 693 ? 0x14 : 0xc;
321325
Package->StructData.EpObjectTable = 0x154;
322326
Package->StructData.EreGuidEntry = 0x10;
323327
Package->StructData.OtName = 0x8;

0 commit comments

Comments
 (0)