It seems that this method does not support the latest klhk.sys

[ipower]

It seems that this method does not support the latest klhk.sys

[ZRR666]

set_hvm_event is no longer a function but a piece of code

[recoil23]

set_hvm_event is no longer a function but a piece of code

Do you have a fix for that please?

[recoil23]

Alright I've just looked myself into it. Listen cuz we are in a big trouble. They changed their driver code starting from the versions when installer puts it in separate folder named KV. New hypervisor code and some of funcs are inlined now. I was only able to find some new sigs ill share here but the hypervisor got ripped :(

// Find number of services (SSDT)
presult = utils::find_pattern_km( L"klhk.sys", ".text", "\x89\x05\xCC\xCC\xCC\xCC\x85\xC0", "xx????xx" );
// Find number of services (Shadow SSDT)
presult = utils::find_pattern_km( L"klhk.sys", ".text", "\x89\x05\xCC\xCC\xCC\xCC\x85\xC0", "xx????xx" );
// Find provider data
presult = utils::find_pattern_km(L"klhk.sys", ".text", "\x89\x1D\xCC\xCC\xCC\xCC\x75\x07", "xx????xx");

[iPower]

Well then just replicate what the function does. It's not like it's hard to do lol.

[iPower]

Solved: 0a86dd9