Merge pull request #36 from bb107/Session_0_Initialize

#35 Fix initialization failure in session 0
bb107 · Oct 8, 2023 · b2e4ed4 · b2e4ed4
2 parents 5fb7f59 + 131699f
commit b2e4ed4
Showing 1 changed file with 15 additions and 6 deletions.
diff --git a/MemoryModule/Initialize.cpp b/MemoryModule/Initialize.cpp
@@ -333,12 +333,21 @@ NTSTATUS MmpAllocateGlobalData() {
 	SIZE_T ViewSize = 0;
 	PTEB teb = NtCurrentTeb();
 
-	swprintf_s(
-		buffer,
-		L"\\Sessions\\%d\\BaseNamedObjects\\MMPP*%p",
-		NtCurrentPeb()->SessionId,
-		(PVOID)(~(ULONG_PTR)teb->ClientId.UniqueProcess ^ (ULONG_PTR)teb->ProcessEnvironmentBlock->ProcessHeap)
-	);
+	if (NtCurrentPeb()->SessionId == 0) {
+		swprintf_s(
+			buffer,
+			L"\\BaseNamedObjects\\MMPP*%p",
+			(PVOID)(~(ULONG_PTR)teb->ClientId.UniqueProcess ^ (ULONG_PTR)teb->ProcessEnvironmentBlock->ProcessHeap)
+		);
+	}
+	else {
+		swprintf_s(
+			buffer,
+			L"\\Sessions\\%d\\BaseNamedObjects\\MMPP*%p",
+			NtCurrentPeb()->SessionId,
+			(PVOID)(~(ULONG_PTR)teb->ClientId.UniqueProcess ^ (ULONG_PTR)teb->ProcessEnvironmentBlock->ProcessHeap)
+		);
+	}
 
 	RtlInitUnicodeString(&us, buffer);
 	InitializeObjectAttributes(&oa, &us, 0, nullptr, nullptr);