nefarius/Domito
1
0
Fork 0
Code Issues Activity

Dynamically load CI exports #1

New Issue
Closed
opened 2023-07-02 11:31:19 +02:00 by nefarius · 1 comment
nefarius commented 2023-07-02 11:31:19 +02:00
Owner
Copy Link

Some exports like CiGetCertPublisherName (and RtlUTF8StringToUnicodeString) are not supported on older (e.g. 1507) Windows 10 builds and therefore should be dynamically resolved and fail with STATUS_NOT_IMPLEMENTED if not available to avoid driver loading to fail.

  • #2 related
  • Remove the ci.lib stubs once done
Some exports like `CiGetCertPublisherName` (and [`RtlUTF8StringToUnicodeString`](https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-rtlutf8stringtounicodestring)) are not supported on older (e.g. 1507) Windows 10 builds and therefore should be dynamically resolved and fail with `STATUS_NOT_IMPLEMENTED` if not available to avoid driver loading to fail. - [ ] #2 related - [ ] Remove the `ci.lib` stubs once done
nefarius commented 2023-07-03 23:33:07 +02:00
Author
Owner
Copy Link

This can not be done; the import addresses are somehow mangled, I assume the CI.dll is protected by PatchGuard or some other unknown mechanism, shame!

This can not be done; the import addresses are somehow mangled, I assume the CI.dll is protected by PatchGuard or some other unknown mechanism, shame!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: nefarius/Domito#1
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?