Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WinVerifyTrust bcrypt.dll - Debug Mode #18

Open
Ernaw opened this issue Jan 16, 2025 · 3 comments
Open

WinVerifyTrust bcrypt.dll - Debug Mode #18

Ernaw opened this issue Jan 16, 2025 · 3 comments

Comments

@Ernaw
Copy link

Ernaw commented Jan 16, 2025

Hey,
I'm having some problems when debugging the solution. Maybe I missed something. (solution is clean)

Image

@AlSch092
Copy link
Owner

What operating system? There was a similar issue opened a while ago and it had to do with them using an older OS (Win7), however it's difficult for me to debug this since I don't have access to any older OS versions. I believe it was specifically that one of the structures used in the WinVerifyTrust routine has different offsets, your best bet is to find a working example of signature verification for your specific OS and then replace the code with the example's.

@Ernaw
Copy link
Author

Ernaw commented Jan 17, 2025

I'm using windows 11 (24H2), that's what's so strange

Image

@AlSch092
Copy link
Owner

Is bcrypt.dll the only file that causes this? I can't find any information online about this particular case, it looks as if it's a null pointer issue due to writing to 0x00..24, which implies a member of a struct is being written to but the object is NULL. We also can't seem to wrap the WinVerifyTrust call in a __try/__except block due to stack unwinding.

Although this isn't a good solution, you could add a check to see if the file is bcrypt.dll and skip over it if so (assuming it's the only file causing this issue). I'll see if I can get a dual boot of Win11 going, since I'm on 10 currently, but unfortunately for now your best option is probably skipping over whatever files are failing.

Cheers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants