Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

BUG:IRQL-NOT-LESS-OR EQUAL #14

Closed
wuhao13 opened this issue Oct 7, 2020 · 4 comments
Closed

BUG:IRQL-NOT-LESS-OR EQUAL #14

wuhao13 opened this issue Oct 7, 2020 · 4 comments

Comments

@wuhao13
Copy link

wuhao13 commented Oct 7, 2020 

AsmVmxoffHandler PROC
    sub rsp, 020h       ; shadow space
    call HvReturnStackPointerForVmxoff
    add rsp, 020h       ; remove for shadow space

    mov [rsp+198h], rax  ; now, rax contains rsp <- this!

calls:

nt!KeBugCheckEx
nt!setjmpex+0x6dc9
nt!setjmpex+0x3f06
hprdbghv!AsmVmxoffHandler+0xd

The error occurs when it stops

Complete Dump please contact 6192122@qq.com

thank you！
@SinaKarvandi
Copy link
Member

what did you do that you see this error? did you execute 'unload' command ?

@wuhao13
Copy link
Author

wuhao13 commented Oct 8, 2020

yes！I send IOCTL_TERMINATE_VMX

@SinaKarvandi
Copy link
Member

ok, I not really test HyperDbg that much yet, but sure take a look.

@wuhao13
Copy link
Author

wuhao13 commented Oct 8, 2020 •
edited

I tested normally in VMware, but this problem occurred in physical computer testing

@wuhao13 wuhao13 closed this as completed Oct 19, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@SinaKarvandi @wuhao13