Blackbone
Blackbone copied to clipboard
Mapping on Windows 10 1803
Seems that #4fc7cc1 commit doesn't work on 1803. When i test i have error "sequence number not found in library".
code of Error logging:
if (!image) {
LPSTR lpMsgBuf = nullptr;
if (FormatMessageA(
FORMAT_MESSAGE_ALLOCATE_BUFFER |
FORMAT_MESSAGE_FROM_SYSTEM |
FORMAT_MESSAGE_FROM_HMODULE |
FORMAT_MESSAGE_IGNORE_INSERTS,
GetModuleHandleA("ntdll.dll"),
image.status, MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
(LPSTR)&lpMsgBuf, 0, NULL) != 0)
{
Log(std::string(lpMsgBuf));
LocalFree(lpMsgBuf);
}
}
Works fine on my 2 machines. Waht's exactly failing?
well, mapping of image fails. image size is 2.5mb and no protectors or something.
Any logs or trace messages?
Only this message i sent "sequence number not found in library"
I also have problems with MapImage () on Windows 10 build 1803, weight image > 300kb
{Partial Copy} Due to protection conflicts not all the requested bytes could be copied.
or sometimes
{Ordinal Not Found} The ordinal %ld could not be located in the dynamic link library %hs.
this is what NTSTATUS gaves me. dll size is 3mb