search

ufrisk / pcileech

Direct Memory Access (DMA) Attack Software
GNU Affero General Public License v3.0
4.72k stars 706 forks source link

VMMDLL_Initialize on x86 #215

Closed unemknip closed 1 year ago

unemknip commented 1 year ago

Hello, I am making a program for x86 architecture, I recompile all the necessary files for x86 (leechcore, vmm)

But when VMMDLL_Initialize is called, it crashes because I catch nullptr and GetLastError says 193 which indicates that this application is not under win32.

I tried to figure out my mistake on my own, but I'm only at the stage of learning all the nuances related to DMA, so I thought I'd ask you :)

ufrisk commented 1 year ago

As you may have noticed I'm not really doing as much testing on 32-bit x86 as I should do. It's a bit of a 2nd class citizen.

I guess you'd need to run it on 32-bit x86 due to your CPU architecture? If you're able to run MemProcFS on 64-bit it's highly recommended. 64-bit MemProcFS is able to analyze 32-bit memory as well (it does not run on 32-bit only CPUs/OS'es though).

Are you targeting 32-bit Windows or Linux?

unemknip commented 1 year ago

As you may have noticed I'm not really doing as much testing on 32-bit x86 as I should do. It's a bit of a 2nd class citizen.

I guess you'd need to run it on 32-bit x86 due to your CPU architecture? If you're able to run MemProcFS on 64-bit it's highly recommended. 64-bit MemProcFS is able to analyze 32-bit memory as well (it does not run on 32-bit only CPUs/OS'es though).

Are you targeting 32-bit Windows or Linux?

Thanks for your answer, I need this architecture because it is running the process I am connecting to, I am using Windows

unemknip commented 1 year ago

Everything works fine, I made a mistake only in my code, thanks for your answer and sorry for wasting your time.

ufrisk commented 1 year ago

Thanks for letting me know and best wishes with your project :)