Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Driver does not load #19

Open
greenozon opened this issue Aug 19, 2022 · 5 comments
Open

Driver does not load #19

greenozon opened this issue Aug 19, 2022 · 5 comments

Comments

@greenozon
Copy link

Does it suppose to work on win7sp1 x64?

I"m getting this:

c:\Tmp\Driver>"c:\Tmp\Driver\\drvmap.exe" "c:\Tmp\Driver\\KsDumperDriver.sys"
[+] loaded capcom driver: 0
[+] allocated 0x7000 bytes at 0xFFFFFA8015F06000
processing module: ntoskrnl.exe [0xFFFFF8000300A000]
Assertion failed: RtlFindExportedRoutineByName != nullptr, file c:\users\foxy\desktop\tools\drvmap-master\capcom\capcom.cpp, line 196
@quanmanss11
Copy link

lmao xd

@quanmanss11
Copy link

try https://github.com/hfiref0x/TDL/blob/master/Compiled/Furutaka.exe (Furutake.exe drivername.sys)

@quanmanss11
Copy link

quanmanss11 commented Sep 27, 2022 •
edited

x64 only (x64 Windows 7/8/8.1/10.)

@greenozon
Copy link
Author

my OS is x64

LMAO

@greenozon
Copy link
Author

greenozon commented Sep 29, 2022 •
edited

My hypothesis is that RtlFindExportedRoutineByName API is only available on win10/11
thus lower OS are out of bound... but need proofs

eg: https://github.com/Chuyu-Team/MINT/blob/69b28783df6522b8a8516a0711268424e876b493/MINT.h#L22334

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@greenozon @quanmanss11