Tue, Apr 14, 2020 6:37:25 PM

2020-04-14 18:37:25 +02:00
parent e50e79673d
commit 12d7e0f1d0
8 changed files with 499 additions and 28 deletions
--- a/client/client/client.sln
+++ b/client/client/client.sln
@@ -0,0 +1,31 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 16
+VisualStudioVersion = 16.0.29728.190
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "client", "client\client.vcxproj", "{73BB66C2-5447-4DA2-8790-E9CE90AF6821}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Debug|x64.ActiveCfg = Debug|x64
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Debug|x64.Build.0 = Debug|x64
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Debug|x86.ActiveCfg = Debug|Win32
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Debug|x86.Build.0 = Debug|Win32
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Release|x64.ActiveCfg = Release|x64
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Release|x64.Build.0 = Release|x64
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Release|x86.ActiveCfg = Release|Win32
+		{73BB66C2-5447-4DA2-8790-E9CE90AF6821}.Release|x86.Build.0 = Release|Win32
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {5032EDB2-BA80-44F5-A9C5-E09C36732671}
+	EndGlobalSection
+EndGlobal
--- a/client/client/client/client.cpp
+++ b/client/client/client/client.cpp
@@ -0,0 +1,44 @@
+/*
+    Copyright (c) 2020 Samuel Tulach
+    Copyright (c) 2019 z175
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+*/
+
+#include <iostream>
+#include "nt.h"
+#include "driver.h"
+#include "utils.h"
+
+int main()
+{
+    std::cout << "[>] Enabling SE_SYSTEM_ENVIRONMENT_PRIVILEGE..." << std::endl;
+    bool status = Driver::Init();
+    if (!status) 
+    {
+        std::cout << "[-] Failed to enable privilege" << std::endl;
+    }
+
+    std::cout << "[>] Testing driver..." << std::endl;
+    status = Driver::Test();
+    if (!status)
+    {
+        std::cout << "[-] Driver test failed" << std::endl;
+    }
+}
--- a/client/client/client/client.vcxproj
+++ b/client/client/client/client.vcxproj
@@ -0,0 +1,163 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <ItemGroup Label="ProjectConfigurations">
+    <ProjectConfiguration Include="Debug|Win32">
+      <Configuration>Debug</Configuration>
+      <Platform>Win32</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Release|Win32">
+      <Configuration>Release</Configuration>
+      <Platform>Win32</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Debug|x64">
+      <Configuration>Debug</Configuration>
+      <Platform>x64</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Release|x64">
+      <Configuration>Release</Configuration>
+      <Platform>x64</Platform>
+    </ProjectConfiguration>
+  </ItemGroup>
+  <PropertyGroup Label="Globals">
+    <VCProjectVersion>16.0</VCProjectVersion>
+    <ProjectGuid>{73BB66C2-5447-4DA2-8790-E9CE90AF6821}</ProjectGuid>
+    <Keyword>Win32Proj</Keyword>
+    <RootNamespace>client</RootNamespace>
+    <WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
+  </PropertyGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
+    <ConfigurationType>Application</ConfigurationType>
+    <UseDebugLibraries>true</UseDebugLibraries>
+    <PlatformToolset>v142</PlatformToolset>
+    <CharacterSet>Unicode</CharacterSet>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
+    <ConfigurationType>Application</ConfigurationType>
+    <UseDebugLibraries>false</UseDebugLibraries>
+    <PlatformToolset>v142</PlatformToolset>
+    <WholeProgramOptimization>true</WholeProgramOptimization>
+    <CharacterSet>Unicode</CharacterSet>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
+    <ConfigurationType>Application</ConfigurationType>
+    <UseDebugLibraries>true</UseDebugLibraries>
+    <PlatformToolset>v142</PlatformToolset>
+    <CharacterSet>Unicode</CharacterSet>
+    <SpectreMitigation>false</SpectreMitigation>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
+    <ConfigurationType>Application</ConfigurationType>
+    <UseDebugLibraries>false</UseDebugLibraries>
+    <PlatformToolset>v142</PlatformToolset>
+    <WholeProgramOptimization>true</WholeProgramOptimization>
+    <CharacterSet>Unicode</CharacterSet>
+  </PropertyGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
+  <ImportGroup Label="ExtensionSettings">
+  </ImportGroup>
+  <ImportGroup Label="Shared">
+  </ImportGroup>
+  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+  </ImportGroup>
+  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+  </ImportGroup>
+  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+  </ImportGroup>
+  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+  </ImportGroup>
+  <PropertyGroup Label="UserMacros" />
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
+    <LinkIncremental>true</LinkIncremental>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
+    <LinkIncremental>true</LinkIncremental>
+    <OutDir>$(SolutionDir)build\bin\</OutDir>
+    <IntDir>$(SolutionDir)build\int\</IntDir>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
+    <LinkIncremental>false</LinkIncremental>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
+    <LinkIncremental>false</LinkIncremental>
+  </PropertyGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
+    <ClCompile>
+      <PrecompiledHeader>
+      </PrecompiledHeader>
+      <WarningLevel>Level3</WarningLevel>
+      <SDLCheck>true</SDLCheck>
+      <PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
+      <ConformanceMode>true</ConformanceMode>
+    </ClCompile>
+    <Link>
+      <SubSystem>Console</SubSystem>
+      <GenerateDebugInformation>true</GenerateDebugInformation>
+    </Link>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
+    <ClCompile>
+      <PrecompiledHeader>
+      </PrecompiledHeader>
+      <WarningLevel>Level3</WarningLevel>
+      <SDLCheck>true</SDLCheck>
+      <PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
+      <ConformanceMode>true</ConformanceMode>
+    </ClCompile>
+    <Link>
+      <SubSystem>Console</SubSystem>
+      <GenerateDebugInformation>true</GenerateDebugInformation>
+    </Link>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
+    <ClCompile>
+      <PrecompiledHeader>
+      </PrecompiledHeader>
+      <WarningLevel>Level3</WarningLevel>
+      <FunctionLevelLinking>true</FunctionLevelLinking>
+      <IntrinsicFunctions>true</IntrinsicFunctions>
+      <SDLCheck>true</SDLCheck>
+      <PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
+      <ConformanceMode>true</ConformanceMode>
+    </ClCompile>
+    <Link>
+      <SubSystem>Console</SubSystem>
+      <EnableCOMDATFolding>true</EnableCOMDATFolding>
+      <OptimizeReferences>true</OptimizeReferences>
+      <GenerateDebugInformation>true</GenerateDebugInformation>
+    </Link>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
+    <ClCompile>
+      <PrecompiledHeader>
+      </PrecompiledHeader>
+      <WarningLevel>Level3</WarningLevel>
+      <FunctionLevelLinking>true</FunctionLevelLinking>
+      <IntrinsicFunctions>true</IntrinsicFunctions>
+      <SDLCheck>true</SDLCheck>
+      <PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
+      <ConformanceMode>true</ConformanceMode>
+    </ClCompile>
+    <Link>
+      <SubSystem>Console</SubSystem>
+      <EnableCOMDATFolding>true</EnableCOMDATFolding>
+      <OptimizeReferences>true</OptimizeReferences>
+      <GenerateDebugInformation>true</GenerateDebugInformation>
+    </Link>
+  </ItemDefinitionGroup>
+  <ItemGroup>
+    <ClCompile Include="client.cpp" />
+  </ItemGroup>
+  <ItemGroup>
+    <ClInclude Include="driver.h" />
+    <ClInclude Include="nt.h" />
+    <ClInclude Include="utils.h" />
+  </ItemGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
+  <ImportGroup Label="ExtensionTargets">
+  </ImportGroup>
+</Project>
--- a/client/client/client/driver.h
+++ b/client/client/client/driver.h
@@ -0,0 +1,78 @@
+#pragma once
+
+namespace Driver 
+{
+	typedef struct _MemoryCommand
+	{
+		int magic;
+		int operation;
+		unsigned long long data1;
+		unsigned long long data2;
+		int size;
+	} MemoryCommand;
+	#define VARIABLE_NAME L"yromeMifE" // EfiMemory
+	#define COMMAND_MAGIC 0xDEAD
+
+	GUID DummyGuid
+		= { 0x8BE4DF61, 0x93CA, 0x11D2, { 0xAA, 0x0D, 0x00, 0xE0, 0x98, 0x03, 0x2B, 0x8C } };
+
+	#define EFI_VARIABLE_NON_VOLATILE                          0x00000001
+	#define EFI_VARIABLE_BOOTSERVICE_ACCESS                    0x00000002
+	#define EFI_VARIABLE_RUNTIME_ACCESS                        0x00000004
+	#define EFI_VARIABLE_HARDWARE_ERROR_RECORD                 0x00000008
+	#define EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS            0x00000010
+	#define EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS 0x00000020
+	#define EFI_VARIABLE_APPEND_WRITE                          0x00000040
+	#define ATTRIBUTES (EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS)
+
+	NTSTATUS SetSystemEnvironmentPrivilege(BOOLEAN Enable, PBOOLEAN WasEnabled)
+	{
+		if (WasEnabled != nullptr)
+			*WasEnabled = FALSE;
+
+		BOOLEAN SeSystemEnvironmentWasEnabled;
+		const NTSTATUS Status = nt::RtlAdjustPrivilege(22L, // SE_SYSTEM_ENVIRONMENT_PRIVILEGE
+			Enable,
+			FALSE,
+			&SeSystemEnvironmentWasEnabled);
+
+		if (NT_SUCCESS(Status) && WasEnabled != nullptr)
+			*WasEnabled = SeSystemEnvironmentWasEnabled;
+
+		return Status;
+	}
+
+	void SendCommand(MemoryCommand* cmd) 
+	{
+		UNICODE_STRING VariableName = RTL_CONSTANT_STRING(VARIABLE_NAME);
+		NTSTATUS status = nt::NtSetSystemEnvironmentValueEx(&VariableName,
+			&DummyGuid,
+			&cmd,
+			sizeof(MemoryCommand),
+			ATTRIBUTES);
+	}
+
+	bool Init() 
+	{
+		BOOLEAN SeSystemEnvironmentWasEnabled;
+		NTSTATUS status = SetSystemEnvironmentPrivilege(TRUE, &SeSystemEnvironmentWasEnabled);
+		return NT_SUCCESS(status);
+	}
+
+	bool Test() 
+	{
+		uintptr_t read = 0;
+		uintptr_t value = 123;
+
+		MemoryCommand cmd;
+		cmd.operation = 0;
+		cmd.magic = COMMAND_MAGIC;
+		cmd.data1 = (uintptr_t)&read;
+		cmd.data2 = (uintptr_t)&value;
+		cmd.size = sizeof(uintptr_t);
+
+		SendCommand(&cmd);
+
+		return (read == 123);
+	}
+}
--- a/client/client/client/nt.h
+++ b/client/client/client/nt.h
@@ -0,0 +1,105 @@
+#pragma once
+#include <Windows.h>
+#include <winternl.h>
+#pragma comment(lib, "ntdll.lib")
+
+namespace nt
+{
+	constexpr auto PAGE_SIZE = 0x1000;
+	constexpr auto STATUS_INFO_LENGTH_MISMATCH = 0xC0000004;
+
+	constexpr auto SystemModuleInformation = 11;
+	constexpr auto SystemHandleInformation = 16;
+	constexpr auto SystemExtendedHandleInformation = 64;
+
+	typedef struct _SYSTEM_HANDLE
+	{
+		PVOID Object;
+		HANDLE UniqueProcessId;
+		HANDLE HandleValue;
+		ULONG GrantedAccess;
+		USHORT CreatorBackTraceIndex;
+		USHORT ObjectTypeIndex;
+		ULONG HandleAttributes;
+		ULONG Reserved;
+	} SYSTEM_HANDLE, * PSYSTEM_HANDLE;
+
+	typedef struct _SYSTEM_HANDLE_INFORMATION_EX
+	{
+		ULONG_PTR HandleCount;
+		ULONG_PTR Reserved;
+		SYSTEM_HANDLE Handles[1];
+	} SYSTEM_HANDLE_INFORMATION_EX, * PSYSTEM_HANDLE_INFORMATION_EX;
+
+	typedef enum _POOL_TYPE {
+		NonPagedPool,
+		NonPagedPoolExecute,
+		PagedPool,
+		NonPagedPoolMustSucceed,
+		DontUseThisType,
+		NonPagedPoolCacheAligned,
+		PagedPoolCacheAligned,
+		NonPagedPoolCacheAlignedMustS,
+		MaxPoolType,
+		NonPagedPoolBase,
+		NonPagedPoolBaseMustSucceed,
+		NonPagedPoolBaseCacheAligned,
+		NonPagedPoolBaseCacheAlignedMustS,
+		NonPagedPoolSession,
+		PagedPoolSession,
+		NonPagedPoolMustSucceedSession,
+		DontUseThisTypeSession,
+		NonPagedPoolCacheAlignedSession,
+		PagedPoolCacheAlignedSession,
+		NonPagedPoolCacheAlignedMustSSession,
+		NonPagedPoolNx,
+		NonPagedPoolNxCacheAligned,
+		NonPagedPoolSessionNx
+	} POOL_TYPE;
+
+	typedef struct _RTL_PROCESS_MODULE_INFORMATION
+	{
+		HANDLE Section;
+		PVOID MappedBase;
+		PVOID ImageBase;
+		ULONG ImageSize;
+		ULONG Flags;
+		USHORT LoadOrderIndex;
+		USHORT InitOrderIndex;
+		USHORT LoadCount;
+		USHORT OffsetToFileName;
+		UCHAR FullPathName[256];
+	} RTL_PROCESS_MODULE_INFORMATION, * PRTL_PROCESS_MODULE_INFORMATION;
+
+	typedef struct _RTL_PROCESS_MODULES
+	{
+		ULONG NumberOfModules;
+		RTL_PROCESS_MODULE_INFORMATION Modules[1];
+	} RTL_PROCESS_MODULES, * PRTL_PROCESS_MODULES;
+
+	extern "C" 
+	{
+		NTSYSAPI
+		NTSTATUS
+		NTAPI
+		RtlAdjustPrivilege(
+			_In_ ULONG Privilege,
+			_In_ BOOLEAN Enable,
+			_In_ BOOLEAN Client,
+			_Out_ PBOOLEAN WasEnabled
+		);
+
+		NTSYSCALLAPI
+		NTSTATUS
+		NTAPI
+		NtSetSystemEnvironmentValueEx(
+			_In_ PUNICODE_STRING VariableName,
+			_In_ LPGUID VendorGuid,
+			_In_reads_bytes_opt_(ValueLength) PVOID Value,
+			_In_ ULONG ValueLength,
+			_In_ ULONG Attributes
+		);
+	}	
+
+	#define RTL_CONSTANT_STRING(s) { sizeof(s) - sizeof((s)[0]), sizeof(s), (PWSTR)s }
+}
--- a/client/client/client/utils.h
+++ b/client/client/client/utils.h
@@ -0,0 +1,44 @@
+#pragma once
+
+namespace Utils 
+{
+	uint64_t GetKernelModuleAddress(const std::string& module_name)
+	{
+		void* buffer = nullptr;
+		DWORD buffer_size = 0;
+
+		NTSTATUS status = NtQuerySystemInformation(static_cast<SYSTEM_INFORMATION_CLASS>(nt::SystemModuleInformation), buffer, buffer_size, &buffer_size);
+
+		while (status == nt::STATUS_INFO_LENGTH_MISMATCH)
+		{
+			VirtualFree(buffer, 0, MEM_RELEASE);
+
+			buffer = VirtualAlloc(nullptr, buffer_size, MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
+			status = NtQuerySystemInformation(static_cast<SYSTEM_INFORMATION_CLASS>(nt::SystemModuleInformation), buffer, buffer_size, &buffer_size);
+		}
+
+		if (!NT_SUCCESS(status))
+		{
+			VirtualFree(buffer, 0, MEM_RELEASE);
+			return 0;
+		}
+
+		const auto modules = static_cast<nt::PRTL_PROCESS_MODULES>(buffer);
+
+		for (auto i = 0u; i < modules->NumberOfModules; ++i)
+		{
+			const std::string current_module_name = std::string(reinterpret_cast<char*>(modules->Modules[i].FullPathName) + modules->Modules[i].OffsetToFileName);
+
+			if (!_stricmp(current_module_name.c_str(), module_name.c_str()))
+			{
+				const uint64_t result = reinterpret_cast<uint64_t>(modules->Modules[i].ImageBase);
+
+				VirtualFree(buffer, 0, MEM_RELEASE);
+				return result;
+			}
+		}
+
+		VirtualFree(buffer, 0, MEM_RELEASE);
+		return 0;
+	}
+}
--- a/driver/main.c
+++ b/driver/main.c
@@ -15,10 +15,6 @@ static const EFI_GUID ProtocolGuid
 static const EFI_GUID VirtualGuid
    = { 0x13FA7698, 0xC831, 0x49C7, { 0x87, 0xEA, 0x8F, 0x43, 0xFC, 0xC2, 0x51, 0x96 }};

-// Global variable GUID (gEfiGlobalVariableGuid)
-static const EFI_GUID VariableGuid
-    = { 0x8BE4DF61, 0x93CA, 0x11D2, { 0xAA, 0x0D, 0x00, 0xE0, 0x98, 0x03, 0x2B, 0x8C }};
-
 // ExitBootServices GUID (gEfiEventExitBootServicesGuid)
 static const EFI_GUID ExitGuid
    = { 0x27ABF055, 0xB1B8, 0x4C26, { 0x80, 0x48, 0x74, 0x8F, 0x37, 0xBA, 0xA2, 0xDF }};
@@ -91,32 +87,25 @@ HookedSetVariable(
    {       
        // Check of input is not null
        if (VariableName != NULL && VariableName[0] != CHAR_NULL && VendorGuid != NULL) 
-        {           
-            // Check if GUID is correct
-            if (CompareGuid(VendorGuid, &VariableGuid)) 
-            {
-                // Testing (instant bsoder 2000)
-                RT->ResetSystem(EfiResetCold, EFI_SUCCESS, 0, NULL);
-                
-                // Check if variable name is same as our declared one
-                // this is used to check if call is really from our program
-                // running in the OS (client)
-                if (StrnCmp(VariableName, VARIABLE_NAME, 
-                    (sizeof(VARIABLE_NAME) / sizeof(CHAR16)) - 1) == 0) 
+        {                     
+            // Check if variable name is same as our declared one
+            // this is used to check if call is really from our program
+            // running in the OS (client)
+            if (StrnCmp(VariableName, VARIABLE_NAME, 
+                (sizeof(VARIABLE_NAME) / sizeof(CHAR16)) - 1) == 0) 
+            {              
+                if (DataSize == 0 && Data == NULL)
                {
-                    if (DataSize == 0 && Data == NULL)
-                    {
-                        // Skip no data
-                        return EFI_SUCCESS;
-                    }
+                    // Skip no data
+                    return EFI_SUCCESS;
+                }

-                    // Check if the data size is correct
-                    if (DataSize == sizeof(MemoryCommand)) 
-                    {
-                        // We did it!
-                        // Now we can call the magic function
-                        return RunCommand((MemoryCommand*)Data);
-                    }
+                // Check if the data size is correct
+                if (DataSize == sizeof(MemoryCommand)) 
+                {
+                    // We did it!
+                    // Now we can call the magic function
+                    return RunCommand((MemoryCommand*)Data);
                }
            }
        }
@@ -298,4 +287,6 @@ efi_main(IN EFI_HANDLE ImageHandle, IN EFI_SYSTEM_TABLE *SystemTable)
    Print(L"Made by: Samuel Tulach\n");
    Print(L"Thanks to: @Mattiwatti (EfiGuard), Roderick W. Smith (rodsbooks.com)\n\n");
    Print(L"Driver has been loaded successfully. You can now boot to the OS.\n");
+
+    return EFI_SUCCESS;
 }
--- a/update.sh
+++ b/update.sh
@@ -0,0 +1,15 @@
+git add *.c
+git add *.cpp
+git add *.h
+git add *.cs
+git add *.sh
+git add *.sln
+git add *.csproj
+git add *.vcxproj
+git add *.config
+git add *.hpp
+git add *.md
+
+git commit -m "$(date)"
+
+git push