Driver import table parsing issue
zhutingxf opened this issue · 1 comments
zhutingxf commented
The imported functions in the driver's import table include not only functions from ntoskrnl but also from hal. For instance, when my driver utilizes KeQueryPerformanceCounter, loading the driver results in a blue screen. Upon inspecting the code, it seems that the import table parsing is incomplete, as it does not resolve the dependencies from hal.
hfiref0x commented
It is not supposed to resolve anything that target driver want to import. This is by design and won't be changed.