It's only hitting vulnerable path in termdd.sys!!! NOT DOS - View it on GitHub