Makka-Kappa

@scudette Had the same problem on Version 2004 (Os Build 10.0.19041.329) 

@scudette actually no, that log is being printed before the GetProcAddress stuff. It fails to find the Kernel Base used in the GetProcAddress. You should probably use NtQuerySystemInformation with the...

@scudette don't know if it still matters but you can also use RtlPcToFileHeader with RtlPcToFileHeader as the parameter to get the kernel base, and by doing that have a REALLY...

@scudette sure, do what you think is right. But ntoskrnl.exe does export RtlPcToFileHeader and I have used it before.

@igorrogov why would not it work? the driver loaded fine on my PC, which has HYPER-V and VSM enabled. Reading memory was also working. or maybe I don't understand what...