File tree Expand file tree Collapse file tree 1 file changed +6
-2
lines changed Expand file tree Collapse file tree 1 file changed +6
-2
lines changed Original file line number Diff line number Diff line change @@ -129,6 +129,8 @@ NTSTATUS KphInitializeDynamicPackage(
129
129
// Windows 10, Windows Server 2016
130
130
else if (majorVersion == 10 && minorVersion == 0 )
131
131
{
132
+ ULONG revisionNumber = KphpGetKernelRevisionNumber ();
133
+
132
134
switch (buildNumber )
133
135
{
134
136
case 10240 :
@@ -171,7 +173,7 @@ NTSTATUS KphInitializeDynamicPackage(
171
173
return STATUS_NOT_SUPPORTED ;
172
174
}
173
175
174
- Package -> StructData .EgeGuid = 0x18 ;
176
+ Package -> StructData .EgeGuid = revisionNumber >= 693 ? 0x28 : 0x18 ;
175
177
Package -> StructData .EpObjectTable = 0x418 ;
176
178
Package -> StructData .EreGuidEntry = 0x20 ;
177
179
Package -> StructData .HtHandleContentionEvent = 0x30 ;
@@ -275,6 +277,8 @@ NTSTATUS KphInitializeDynamicPackage(
275
277
// Windows 10
276
278
else if (majorVersion == 10 && minorVersion == 0 )
277
279
{
280
+ ULONG revisionNumber = KphpGetKernelRevisionNumber ();
281
+
278
282
switch (buildNumber )
279
283
{
280
284
case 10240 :
@@ -317,7 +321,7 @@ NTSTATUS KphInitializeDynamicPackage(
317
321
return STATUS_NOT_SUPPORTED ;
318
322
}
319
323
320
- Package -> StructData .EgeGuid = 0xc ;
324
+ Package -> StructData .EgeGuid = revisionNumber >= 693 ? 0x14 : 0xc ;
321
325
Package -> StructData .EpObjectTable = 0x154 ;
322
326
Package -> StructData .EreGuidEntry = 0x10 ;
323
327
Package -> StructData .OtName = 0x8 ;
You can’t perform that action at this time.
0 commit comments