Update gate.go

timwhitez · Jun 1, 2022 · 0b3ef0d · 0b3ef0d
1 parent 70583ab
commit 0b3ef0d
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/pkg/Gabh/gate.go b/pkg/Gabh/gate.go
@@ -242,10 +242,9 @@ func MemHgate(funcname string, hash func(string) string) (uint16, error) {
 func getSysIDFromMem(funcname string, hash func(string) string) (uint16, error) {
 	//Get dll module BaseAddr
 	//get ntdll handler
-	fakeModule1, _ := inMemLoads("kern3l32")
-	fakeModule2, _ := inMemLoads("ntd1l")
+	fakeModule2, _ := inMemLoads(string([]byte{'n', 't', 'd', '1', 'l'}))
 
-	if fakeModule1 != 0 || fakeModule2 != 0 {
+	if fakeModule2 != 0 {
 		return getSysIDFromDisk(funcname, hash)
 	}