Skip to content

Commit

Permalink
print nt error codes
Browse files Browse the repository at this point in the history
  • Loading branch information
@KebsCS
KebsCS committed Nov 24, 2023
1 parent 6bafe36 commit 866c0bc
Show file tree
Hide file tree
Showing 2 changed files with 20 additions and 18 deletions.
34 changes: 18 additions & 16 deletions KBotExt/Auth.cpp
View file
Original file line number Diff line number Diff line change
Expand Up @@ -215,38 +215,40 @@ std::wstring Auth::GetProcessCommandLine(const DWORD& processId)
PROCESS_BASIC_INFORMATION_WOW64 pbi;
ZeroMemory(&pbi, sizeof(pbi));

if (const auto NtQueryInformationProcess =
const auto NtQueryInformationProcess =
reinterpret_cast<tNtQueryInformationProcess>(GetProcAddress(GetModuleHandleA("ntdll.dll"), "NtWow64QueryInformationProcess64"));
NtQueryInformationProcess(processHandle, 0, &pbi, sizeof(pbi), nullptr) != 0)
if (auto status = NtQueryInformationProcess(processHandle, 0, &pbi, sizeof(pbi), nullptr); status != 0)
{
MessageBoxA(nullptr, "NtQueryInformationProcess failed", nullptr, 0);
MessageBoxA(nullptr, std::format("NtWow64QueryInformationProcess64 failed, error code: {}", status).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}

const auto NtWow64ReadVirtualMemory64 =
reinterpret_cast<tNtWow64ReadVirtualMemory64>(GetProcAddress(GetModuleHandleA("ntdll.dll"), "NtWow64ReadVirtualMemory64"));

if (NtWow64ReadVirtualMemory64(processHandle, pbi.PebBaseAddress, peb, pebSize, nullptr) != 0)
if (auto status = NtWow64ReadVirtualMemory64(processHandle, pbi.PebBaseAddress, peb, pebSize, nullptr); status != 0)
{
MessageBoxA(nullptr, "PEB NtWow64ReadVirtualMemory64 failed", nullptr, 0);
MessageBoxA(nullptr, std::format("PEB NtWow64ReadVirtualMemory64 failed, error code: {}", status).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}

if (const auto parameters = *reinterpret_cast<PVOID64*>(peb + ProcessParametersOffset); NtWow64ReadVirtualMemory64(
processHandle, parameters, processParameters, processParametersSize, nullptr) != 0)
const auto parameters = *reinterpret_cast<PVOID64*>(peb + ProcessParametersOffset);
if (auto status = NtWow64ReadVirtualMemory64(
processHandle, parameters, processParameters, processParametersSize, nullptr); status != 0)
{
MessageBoxA(nullptr, "processParameters NtWow64ReadVirtualMemory64 failed", nullptr, 0);
MessageBoxA(nullptr, std::format("processParameters NtWow64ReadVirtualMemory64 failed, error code: {}", status).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}

const UNICODE_STRING_WOW64* pCommandLine = reinterpret_cast<UNICODE_STRING_WOW64*>(processParameters + CommandLineOffset);
const auto commandLineCopy = static_cast<PWSTR>(malloc(pCommandLine->MaximumLength));
if (NtWow64ReadVirtualMemory64(processHandle, pCommandLine->Buffer, commandLineCopy, pCommandLine->MaximumLength, nullptr) != 0)
if (auto status = NtWow64ReadVirtualMemory64(processHandle, pCommandLine->Buffer, commandLineCopy, pCommandLine->MaximumLength, nullptr);
status != 0)
{
MessageBoxA(nullptr, "pCommandLine NtWow64ReadVirtualMemory64 failed", nullptr, 0);
MessageBoxA(nullptr, std::format("pCommandLine NtWow64ReadVirtualMemory64 failed, error code: {}", status).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}
Expand Down Expand Up @@ -277,27 +279,27 @@ std::wstring Auth::GetProcessCommandLine(const DWORD& processId)
PROCESS_BASIC_INFORMATION pbi;
ZeroMemory(&pbi, sizeof(pbi));

if (const auto NtQueryInformationProcess =
const auto NtQueryInformationProcess =
reinterpret_cast<tNtQueryInformationProcess>(GetProcAddress(GetModuleHandleA("ntdll.dll"), "NtQueryInformationProcess"));
NtQueryInformationProcess(processHandle, 0, &pbi, sizeof(pbi), nullptr) != 0)
if (auto status = NtQueryInformationProcess(processHandle, 0, &pbi, sizeof(pbi), nullptr); status != 0)
{
MessageBoxA(nullptr, "NtQueryInformationProcess failed", nullptr, 0);
MessageBoxA(nullptr, std::format("NtQueryInformationProcess failed, error code: {}", status).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}

static auto pReadProcessMemory = (decltype(&ReadProcessMemory))GetProcAddress(kernel32, "ReadProcessMemory");
if (!pReadProcessMemory(processHandle, pbi.PebBaseAddress, peb, pebSize, nullptr))
{
MessageBoxA(nullptr, "PEB ReadProcessMemory failed", nullptr, 0);
MessageBoxA(nullptr, std::format("PEB ReadProcessMemory failed, error code: {}", GetLastError()).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}

if (const PBYTE* parameters = static_cast<PBYTE*>(*reinterpret_cast<LPVOID*>(peb + ProcessParametersOffset)); !pReadProcessMemory(
processHandle, parameters, processParameters, processParametersSize, nullptr))
{
MessageBoxA(nullptr, "processParameters ReadProcessMemory failed", nullptr, 0);
MessageBoxA(nullptr, std::format("processParameters ReadProcessMemory failed, error code: {}", GetLastError()).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}
Expand All @@ -306,7 +308,7 @@ std::wstring Auth::GetProcessCommandLine(const DWORD& processId)
const auto commandLineCopy = static_cast<PWSTR>(malloc(pCommandLine->MaximumLength));
if (!pReadProcessMemory(processHandle, pCommandLine->Buffer, commandLineCopy, pCommandLine->MaximumLength, nullptr))
{
MessageBoxA(nullptr, "pCommandLine ReadProcessMemory failed", nullptr, 0);
MessageBoxA(nullptr, std::format("pCommandLine ReadProcessMemory failed, error code: {}", GetLastError()).c_str(), nullptr, 0);
CloseHandle(processHandle);
return {};
}
Expand Down
4 changes: 2 additions & 2 deletions KBotExt/MiscTab.h
View file
Original file line number Diff line number Diff line change
Expand Up @@ -478,8 +478,8 @@ class MiscTab
ImGui::SameLine();
ImGui::TextWrapped("%s ID: %s", closestChampion.c_str(), closestId.c_str());

if (ImGui::Button("Check email of the account"))
result = LCU::Request("GET", "https://127.0.0.1/lol-email-verification/v1/email");
/*if (ImGui::Button("Check email of the account"))
result = LCU::Request("GET", "https://127.0.0.1/lol-email-verification/v1/email");*/

ImGui::Separator();

Expand Down

0 comments on commit 866c0bc

Please sign in to comment.