POC not working on certain cpu

[gergeerew]

Issue Summary

I've been testing your poc using qemu with a vdi file created from VBox Win10 19041 machine. When it got to the execution of "\maxram\hvloader.efi", in the function HvlpSLATPresent, my cpu is checked against Second Level Address Translation:

and it failed:

which make the caller quit without continuing loading up the dll payload mcupdate_*.dll and further is Windows OS:

My guess is my cpu just not suitable for this POC. I'm using "Intel64 Family 6 Model 165 Stepping 3 GenuineIntel ~2904 Mhz" for the host machine. You have any idea?

Question

If the problem is really my cpu, is there any other efi file that loads a DLL which I could code my payload (like hvloader.efi loading mcupdate.dll)?

[Wack0]

You can use <=th1 winload.efi for this too, this is what I did when porting to armv7: https://github.com/Wack0/batondrop_armv7

(obviously you'll need to create your own image from scratch for amd64)