From 4b67d366e6e26a4d1f990373209e38793aa2e744 Mon Sep 17 00:00:00 2001
From: correy <112426112@qq.com>
Date: Wed, 25 Oct 2023 21:12:20 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B6=88=E9=99=A4=E4=B8=80=E4=BA=9Bcpp?=
 =?UTF-8?q?=E7=9A=84gsl=E7=9A=84=E8=AD=A6=E5=91=8A=E3=80=82?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 libdrv/APC.cpp      | Bin 14320 -> 14374 bytes
 libdrv/CopyFile.cpp | Bin 112018 -> 112054 bytes
 libdrv/File.cpp     | Bin 116854 -> 116970 bytes
 libdrv/Image.cpp    | Bin 77212 -> 77348 bytes
 libdrv/Network.cpp  | Bin 32312 -> 32328 bytes
 libdrv/Process.cpp  | Bin 120882 -> 120978 bytes
 libdrv/Registry.cpp | Bin 61054 -> 61142 bytes
 libdrv/cpu.cpp      | Bin 117946 -> 118030 bytes
 libdrv/encrypt.cpp  |   4 ++++
 libdrv/log.cpp      | Bin 13832 -> 13860 bytes
 libdrv/misc.cpp     | Bin 11964 -> 11980 bytes
 libdrv/object.cpp   | Bin 55916 -> 56052 bytes
 libdrv/pe.cpp       | Bin 64130 -> 64322 bytes
 libdrv/ssdt.cpp     | Bin 32076 -> 32124 bytes
 14 files changed, 4 insertions(+)

diff --git a/libdrv/APC.cpp b/libdrv/APC.cpp
index 496216dca411f0cd480bbee1ea98c1c3c546a861..978d90484d3d86411639fcb3fcd0d978ddf6e9c2 100644
GIT binary patch
delta 34
qcmey6zpP+`5bNZ7@*J#=3<V6yll6t9CvTF{nS8*IZL=BcE+YWj{0qzg

delta 20
ccmZ2h@F9PL5bI<sR+Y&sw1hU-v92%z09e8Yx&QzG

diff --git a/libdrv/CopyFile.cpp b/libdrv/CopyFile.cpp
index c75bb98cde58c652b9b4ac072ae46e2a53447080..455a3a504ed935ee03ed06a4aded48a3f9591893 100644
GIT binary patch
delta 146
zcmbRAnr+)_whdXC(?3))vM}o~C``7mR0eT`rU%qAN=@F8$s=6NP|E<6VJKlpWGG@t
zXGmoznVe`RJo(;ZxyhRXL^ca#g(*x<vJ;xT;0fRKJC%%an;&$Q8KR0@*wd$uEV5;@
R-cvs>WRYXr;|v&0S^>J;I!XWl

delta 121
zcmdn?nr+f+whdXClN0h;CKqKYO`efy!mq=iz)-@F$WX+P&XCGbGWq^)-O2AN_@>n`
zdTq|h;#1gMw8xHd@`q<0KrFLap~uevD8ivJxoA(-^b7ioLemSX7+p5|J@xZK5el3B
O!HAJ>`ve0<wN?O_fiTtp

diff --git a/libdrv/File.cpp b/libdrv/File.cpp
index de74eb1faaff2d38b09991cdf92848d8b74c3249..1707621bcb7f93cd2cd0db3f78297fd991d4a7c9 100644
GIT binary patch
delta 489
zcmex1f&JA)_6<txlY`iWHXE>WNJANAjGOl;3n@+)F=7;&e8<HABs|$6Q~*pHOpu#=
zfK6obgix8uZLU>dF+MjlzG{YA25Sa=Al%o@9ywXTUSskBH;&15ZmTAL;t<<x<?g@>
zF|Z>fhmgq@AT5*EB#CT(7rH`V@|Ax=lM&X6Y<`s%<^s0&f)dYUDJP!E3qHzCZdk1V
z7F)Mk3#5Dc0&PZ#NgG`zpDA;h?4ZRlUBR9)X7YuNQ>IxknoMJ4<e5BAnr-s0r8<*$
z?GxL~wQde4)F%p)uWT=Zo3OcHN0|^%CS$SzyUFB)?JS$?POGWIr6(5@@oc{J$&Lpu
zGHIjGbTMYef0Hj*fbA@pZeYg9w>jX85!2*^DxU2?xhR#%PmIL210ATqh^lOIz!#0}
z0h)|OoFEm`H<+QD16I&r!gzyi`Yts_x#>@A8D*vi7%?hM-(bz?2R2r~hA|-q?3WLx
MdA4`WV0@zw0HQpvhyVZp

delta 482
zcmZvYKS&z^6vlZfUX<%`9N}nF8;<iZniP$?2nG$sR>-2%C`B?HL9LVyhl3O+w{~!d
z_dy>zNVHD2sCdI=l1w5BlA)7BaBv8cDTOFbUQC?o`2Kvq?|biNU8rV+LtS7yOHs$t
zljQ9A>{n0ag3i6$G=gA{gs;;w>l-ux>-{cHUQ2dP!{wBU<B3)*d?-R0R-D=K_zP?$
zSDsac*$R<}(zIOL#Z}tRr&;oIV2AupVrI3DKl=P_4BATx$AXBRpMkn4|69ZUp#(D*
z=1PRZ$S?muJnG}jD5X$1ddKDg%|c7OWs^LUi)5=K?-$!pakE(ar66B5AkS$|IhRms
z>3Xqv{s~JJ)ww*^Lk(t5<kCEK*tdUCP#@VA@@Wa#H{Gs>ZEr&KUlm2kVAG%=n?n?H
zKHlj<!y$;tKO%qWC)K`f;Y>4KKZ~)tT<?Sd`frFrXA8>TMZSuV%=dB6qTEHY+Y~0F
rtrjuHlZ#%xJV*&2r$ZFr;xMh%zUi*U$V@%<pmmB!ZK|%eL1%prXM(sd

diff --git a/libdrv/Image.cpp b/libdrv/Image.cpp
index c1567c1602d8cab9565111624d43ac817367a2e8..25e630a043392ec0f936021411846e041634b158 100644
GIT binary patch
delta 422
zcmbPpn`OxzmJK_kn5!9TCtGh;o!lVHGWmg&2rH1!pfj0KRun8F8*e$ePoHO!0pDb%
zCb7+V(tm_W)1hD>p$9h8da`4o{N#wZyvbfigeE)ab4<PyXCVl-jX{AShar{0hymml
z*?3owRg(?)<u*@>&k<s*p3JyJc=CisEjWvdH506~aI^E|bNoV+=T-4-J~dg6ak5RB
z#b%z85?;7Uym}^|nq0AYL(>ZZpndBm-<x)6a-KNbWS$b2&2dv_$xeO}2XsWd5!Ac7
zm`>eXxcMtTSo-D>+09LdpDBPj=}+9jbm3;{$tRxhz}><%`Q4Kckj!Ssr_;G73mgsu
eE4z3oaB|s4J+LzU%@;oA$%BNq+X^zq%K!iu$d+0F

delta 286
zcmZ2-hh@%fmJK_kCJT7*O_qxnoBTjZVse0o%H)`Mt;qrgQj_<12yL#D{v(W6frEjB
z-sDY36eici<xO_d7n{ryZ^5a<pumvBkjh{***D&G@+M`W$p-v#ldBTAHeZNO5}M4^
zBsDppNC8O8Ojc^TwK=aih!0tCvr^L`!O1~Qt0wDBzce{doNcmCiOc47Q)kIe_KSC!
zED*1QuwnDX&0qN^+Z~nJ{Os^Eg~<=5^G&|@!~$rn)Z{k`K)*HdOpbdRGP%#3Yx9Ap
wJ=~K6J_b!TI&3$29Y5dXZy)t02Q1Rr9P%koetM4xBj4nhcP868gcxOH0K;r;qW}N^

diff --git a/libdrv/Network.cpp b/libdrv/Network.cpp
index be9dd3ec27e150bd7ebdb82f14666c14aae3f62f..3f31ddf70b72f159197eb688fb5c9cac1bde5021 100644
GIT binary patch
delta 50
wcmdn-hw;Q8#tkwu%+(CFlci<s!E~gIJea=dBRsiF#s<v(C?dT1hD<^t0LsY`$^ZZW

delta 42
zcmV+_0M-A<`~kT90k9k#lOP;ElU`v4lV}_mlj2Mgla?GjlYl=4llT-2v*;XPVRGjX
A#sB~S

diff --git a/libdrv/Process.cpp b/libdrv/Process.cpp
index cc6bf3e676164a74c3ddf5fa6b473d4bdfd5c5e8..ce8a06b1d68debc7437971b93d993a21d3a3772d 100644
GIT binary patch
delta 336
zcmdnAfql|O_6?tyC-1o}G>N5QGLwhM<_RqGgpv4@C$L0pR*_u62a=rpZlT8HEAB$m
z9V8f8CM#(;fCV?Wi%fpNECkfVH91C-XY(qJBl18Aq3H&@7*!@O@K6A0nS9Q}08I0E
z>VfU?@{Dmu*dsJqft73WyiT6U@5H61uZduk+dN@no518CNwLiui)2K=<~e9H3QRBC
z#V9p-U%k*|g9|*9r)_HjJK^0zp3NrPXIul>u>HeqMje*zY?Bx*n2`7tGZ?d&Vf-nq
zV7Dl+a%`WqkZ}Vyh&MfAEu#U<9=_>I)-s9#?E!mf@&+rG?HATEcJRRD5$>1{bQRzB
JHM<zwWC7wKedGWD

delta 266
zcmbQVk$uw!_6?tyr(amj$TnRslu>SSoJ7{-GZGn_Kd`t7qY7_6BO$;)JxPL5X7UGh
zjmeMx3QgA2aF{&dI^X054Gpl`$v3olHt*9oB0t$~o6+PQ9txAM>=2mz#zSwi+!DUY
zI-Yu)<2-ZRr)z{Vs(>uooG|f`z~oEXLYpHN$%st<u!~V<`UM~{Iqrhg<a67aCiBVj
zO@61&x4B^ZjBAq%^!c_=n8K*TvfXVGqXiR;KaCy60?MQ;V9a0y^Y1NW+`$cEO<%E=
a(EwuhkF|_q+lAIK&f`JYwH;{dB3S?c%4`7u

diff --git a/libdrv/Registry.cpp b/libdrv/Registry.cpp
index c7938222816aaf5b05aa4ce75186f443d78efd31..604e2e024e0bd646dfeabefed4e98bf2a93f71c3 100644
GIT binary patch
delta 420
zcmex&hxyuF<_#XKlV9|POzt=@G<lh&5o7h_jZcLq+g;$A#3qH{Y*w@KW8B=t?#IJi
z%}_g8P*Z&Jy%Z&&JmU<}$rt2>HtUFd;Y5~#vmKhaCM%@c!TI-6<Tz6p5*bQ>7^a<P
zvw-{$Nw_n7>iH&X^og(<Gl1-xZs~|{2fCvU@FE$kgv6E;%wtGpC})Ug$Oh7tV3R<u
zF7wcUtCH&Dn>>Y8Xz~@0DM&u)@wAbKD*<{E&L-9;RYH>kM8qaXP1M?4RPl=q;rPjI
i^+8aJ^sL1;HRuJv<(j~@?7yH3m0xh3Wi!*o8d(7L`I8y|

delta 368
zcmcb1m-*iv<_#XKlc#tHOg8J2o7_|{Gr5CRWby)5hspbz*d~Wf6q)>wRcdmdG~470
z0UVR#Ch|-^SI@QCfo&4+WF~R3$qF7yn}tLqxL};gV%NkbH^_NF`ErxwIVKB<$W2~X
zeq!<l9+t@lB5a$_rL7R$JfW(BakGpu8ykk*P&Y6dPoB@}h}RVXR@>mN09&l!Avd|o
zgAZ)E3abipK10%EMse}URjhoIQ!Irhvv^Jcy7mqG=8nJ;VbYxZNP^LNa^OTsp!b7-
xJ`$Sj@LFhc06WWOp9Z}El<=8xp#rFMKa2L{1YWku5+Xd4Cp5Bbj=ESQ3jhYVf3g4o

diff --git a/libdrv/cpu.cpp b/libdrv/cpu.cpp
index fb4a25c1aa9712a132a8585ec9bf02370cae0969..ff08a49eb77b2675e0a3979afc652c3103e54b1a 100644
GIT binary patch
delta 335
zcmdlrlf7>i`-T%d%+(CFlLfcRPwwy$oBW3d!dDa!pDZxNV6uS#*X9V`MXbC)MGQI&
z3JjSHK-P4}`HZ5IH;9RC))IDT1RIdJ)^u{gQm4%irdY5rR!?4dL3y*qOfycf9LTVS
zcV3&%Evgbi6L4dhd|)ffbh%hYk;zdZE}Ok}39y5eIBpi*oOkdA3z(ySP?o=lA(f$+
zp_Czqp#<cF$v`pg5};TvLjj1tdEqfeS&-t*3m<O;+p;<ETO}J<d*HW~ld}#9Oy5w-
zXfeIPfRSzUfxlZsz)}kz&)+U2%-F>N;mL__-z3eL265%W$J4j3(_?%g36h&W)q^n*
Z%y{a-xD>3~aF*!g0A7ym%RCuHngRN|cQyb3

delta 314
zcmeC1#lCAM`-T%dlb=oDn;f@DVDc*-B{2H|FUMquwHBM>c$cuU>M$rUWKL!j6rOA#
zCo)+<oMp3>utVeI2dCL4a|rTmo-kz&3s_UY6p_i-P78npCr_B7GI@dBsmXm8rKWqi
zGs;XZ&==XfY}NyInDLtzEIJ~D#F@Y{`N39}={7NpBGYvO7&$iU?ebxt%p@qZdBVY0
zER**g2RiT|-{e`xc&7L4Wdw8BOBhlaav2IXUp&SrJ3T><aoS{s?;M*;o(Ktnd7Bl!
zKVpT63vFKamq`@H<JcY~%-F>-d6S&j_HWXRX+qn9+UumIKk{G<V6|r8W#F0~n8zqQ
e-OrP;XET%F5yr^|0s_-Ncr$Wr-{s91(g*;nR(Q7n

diff --git a/libdrv/encrypt.cpp b/libdrv/encrypt.cpp
index 7a02be0..4dcf841 100644
--- a/libdrv/encrypt.cpp
+++ b/libdrv/encrypt.cpp
@@ -395,5 +395,9 @@ Encrypting Data with CNG
         if (pbIV) {
             ExFreePoolWithTag(pbIV, TAG);
         }
+
+        if (pbBlob) {
+            ExFreePoolWithTag(pbBlob, TAG);
+        }        
     }
 }
diff --git a/libdrv/log.cpp b/libdrv/log.cpp
index 8a19228d1d478590604fd7b494083342d1c949f1..8d6cb18bb31f1174d6c34ad83d8fcf2e83a172c5 100644
GIT binary patch
delta 64
zcmeCkS(3A14Ht7YL+#{+#=?`tZ)~2%ZN|%3Jvm=Oa`GbyHz><aat?&Wnaq&SkjGHW
LP_p^0q_hkG^pzEU

delta 53
zcmZ3I(~+}b4cFvPVy`yO;x^-*yiJ5}vYZ6h<Tny7jMkF{B}6BCNzQ??E@-iA7LXE=
F0RS>e5$*s0

diff --git a/libdrv/misc.cpp b/libdrv/misc.cpp
index b7dc281a19b5e795ce3959dd4516bf8fba11dceb..ab818f20ae96c3f49f3b398aee1a866ae6dfd786 100644
GIT binary patch
delta 46
tcmdlJdnR^+2?ujEL+#|NvWj53P(gTe8b^UBh_m^s>~>Btqg&mO9RP!V51;@5

delta 30
mcmX>TyC-&o3CH9|vI>)p_=Ps-aTJJdek8k%bMqW^19kwxlM9mo

diff --git a/libdrv/object.cpp b/libdrv/object.cpp
index f8ad0c75af9cdada921f208548c4c3bea485a2a4..ccc24ea8b112f8b344743c150c9d0eda815b1f81 100644
GIT binary patch
delta 430
zcmaE}h55@?<_*_`SgRRo8LTHSoM%7zO%C5=0|max0`+p61BBVcpi=yv(vyocMJB7n
z2~D1&xqum{VKQUA?&Jh55q6Mf9R`KTfvlonaX}~H&GWQYu!1?R28!}f1q`JO#SFm=
zl?=HINeuZ6ISiQ$$qXQa3Oy}3U4XnIFmJbkG+5_V19ODs+!+iA75awaFpDNnkkZ-Q
zV#ve^cG<dlLhQv1B~U|y!HRxc*@J0DFIxx=boI9^rO6Rq6_f2U*d{+o5ZN4NBf|@p
zEc8Utw3*TCvoPEd%9|zPRxyIr9gLq2HB5hVTY`%Um~*nF7EA;EKl#HduF3m44sBLx
zOW*(rZf@?|DFBwWo}UP&XU|^_c5}djc`#j@78-$_vDt8)G!s-%dh!KMj?H-+{%HaL
D+mVS-

delta 278
zcmeyemHEvU<_*_`CQtIznN%b)IUtvB@~KL`$rr5UHirnaiA|mt#y2@Gj&E|6rpV+;
zn(HPXveubgpe4er!=NxZkX3Z@rdFZN+q71&PEImV0Ah*Biwx|*l7c4UlbH<7CI`gH
z$YwCOFk~_mF#t6&WH1CXR5Ii;Br)VO<N!sJCvR*O-aNrjk8|=NE0xKIJcA}XSldm`
zOXHh7!CG(gA?rW9lLJ-*UF7M4A~DTtoABm<xO0q?l@g|boe6UDiv%|nuyTjiyv>_h
z?Kn4o>DwVNdBgmK$s!AuO@4G$YVwT*lfbTSSZKt%dD}WECJ=9O0T;*Q3!EIAzis%Z
F2>_+@YkvR$

diff --git a/libdrv/pe.cpp b/libdrv/pe.cpp
index a7fc6a203b83b7dd7763faf940e0f0b217247b08..1a4127952532af844612526521542b1b2686f41a 100644
GIT binary patch
delta 477
zcmZqr%6#Y>^M)Y4$&U<#CMWQzL1}@>=VmAX*$R^%@acf*0}JFPN2tn8o^(-c^M%=b
zteaazE=d7pL?-VE1nCl)JV)OQ%IBH<PM-tF7Mi>#h-)&R0fMb(zy=rhG2of3aRH=8
z3@r8_2xOzkWP#ugFh9Uh2uv3kN`P&hWhewuKnn{&-dYuW$pvg9{%}y5TryJ*tZu<f
z6A;ar$&klT!l1xVG5Mi^=;S{$1%RR=lVxTpf!!T2OGccau>m`kCZ}v7#aM^Ui)28?
cZvJro9V3vTF!|TT31E8y40$#$xpYq*0E8mN-2eap

delta 419
zcmX@~jk)P7^M)Y4$wISaCd+J+n0!ExZ?eKHzR3<Vl_o3fWScxg#c8t0Wr4{L_;@BS
zP?ejU1H?`WLYouj@Ud>5A#zCyEL*3qHu(=f-y{Q;$qqp#5T@AV1wjgv6AUC+eHii?
z$|uJgsDgNt7Z~tNUSudWIUrbM@*{&8AU10dLm5Nj<b{UnlXDgbZN6tHq(HH;AV=Oa
zv}2w8U>3{d11W5iH$-_&{@}v4d0nKHJyG5bSg17l!%R7#TBpf7_V7)v+RQb%W3$5K
zHJgnlKiXWg*=zPDF`^6thTEjgO4!WV{AlwQnaP_fWj1fS@PKjhBo&#-+b&I*+`+^*
Nd4nO(=9J6#)B&IIrGx+g

diff --git a/libdrv/ssdt.cpp b/libdrv/ssdt.cpp
index 118c73bd7fa5d3a7fe039728d3e1324eb269c4f4..f8ab0ccee4b077cd50b0cda125a700c8f71ce535 100644
GIT binary patch
delta 154
zcmX@}i}BAd#to-fCr?rnn(PI{uUPZI>;tMilZ)8AfNZVF^Sn4FU-06Y9HlR`nS=d<
zELZ`XssWgGQFQ^+XH@ujgBem8k{L=EG8yt2@+MDI6P|oPRR%2kz@2aM4^;s$TaQg_
bvW^;r?WHCM)4jPx?Ta#yqqTXS*E%BrFTFPr

delta 100
zcmezKi}B1a#to-fC!b^OoBSw8YH}5u*JP<&zR4HVBsRZe6O)_Fp=vkTOEqZn0#z-r
zf)}a+lNY$lOqNg+n5?5_0@SF$9n4U|kO;)348@b@tIBTPp!P+1@*y>~&F8$<836zg
Cl_s(P