Undocumented structures for W2k-Win10
Re: Undocumented structures for W2k-Win7
Any chance to have it as well for win32k.sys file?
Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/
http://p4r4n0id.com/
- EP_X0FF
- Global Moderator
- Posts: 4872
- Joined: Sun Mar 07, 2010 5:35 am
- Location: Russian Federation
- Contact:
Re: Undocumented structures for W2k-Win7
Which particular structure/declaration you are looking for? I'm afraid even in PDB files there not so many useful info regarding win32k.p4r4n0id wrote:Any chance to have it as well for win32k.sys file?
Ring0 - the source of inspiration
Re: Undocumented structures for W2k-Win7
Windows 8.1 RTM (ntoskrnl 6.3.9600.16384 symbols)
.h + .idc in attach
.h + .idc in attach
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win7
Windows 10 TP (ntoskrnl 6.4.9841.0 symbols)
.h file in attach
.h file in attach
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win7
ntoskrnl 10.0.10074.1 types & structures (header file) .
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win10
[10.0.14316] ntoskrnl + ntdll + hal types & structures
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win10
Windows 10 Redstone 1 (1607) ntoskrnl (10.0.14393.693) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win10
Windows 10 Redstone 2 (1703) ntoskrnl (10.0.15063.413) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.
Re: Undocumented structures for W2k-Win10
Windows 10 Redstone 3 (1709) ntoskrnl (10.0.16299.15) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.