Search found 3 matches

by lotsch
Sun Sep 02, 2018 1:14 am
Forum: Reverse Engineering and Debugging
Topic: MmMapIoSpace on Page Tables (1803/Redstone 4)
Replies: 4
Views: 4856

Re: MmMapIoSpace on Page Tables (1803/Redstone 4)

yeah ok, I will be using something different instead.
by lotsch
Fri Aug 31, 2018 7:25 pm
Forum: Reverse Engineering and Debugging
Topic: MmMapIoSpace on Page Tables (1803/Redstone 4)
Replies: 4
Views: 4856

Re: MmMapIoSpace on Page Tables (1803/Redstone 4)

Hm, yeah I've seen that this function is very abusable on many drivers, would there be any easy way to figure out how to patch it back to working on Page Tables? I'm not very familiar with kernel debugging but I imagine you could try putting a breakpoint on MmMapIoSpace in your driver, call the func...
by lotsch
Thu Aug 30, 2018 3:13 am
Forum: Reverse Engineering and Debugging
Topic: MmMapIoSpace on Page Tables (1803/Redstone 4)
Replies: 4
Views: 4856

MmMapIoSpace on Page Tables (1803/Redstone 4)

With the Windows Update 1803, I noticed that when trying to call MmMapIoSpace on any of the Page Tables (PML4, PDPT, PD, PT) it is always going to fail with 0x3E6 (Invalid access to memory location.). I also tested the exact same code on older versions and it works perfectly fine there. Apparently, ...