load
load [ModuleName (string)]
vmm
module.CreateFile
in the target system, in IRP_MJ_CREATE
, the driver loads the modules like vt-x and debugger and all other kernel modules, so it doesn't have an IOCTL. You can call CreateFile
to the driver's device and get a handle.load
command until the first app releases the handle (by CloseHandle
) or call unload
command.SeDebugPrivilege
to obtain a handle, otherwise an ACCESS_DENIED
is thrown.