A forum for reverse engineering, OS internals and malware analysis
Any chance to have it as well for win32k.sys file?
Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/
http://p4r4n0id.com/
p4r4n0id wrote:Any chance to have it as well for win32k.sys file?Which particular structure/declaration you are looking for? I'm afraid even in PDB files there not so many useful info regarding win32k.
Ring0 - the source of inspiration
Windows 8.1 RTM (ntoskrnl 6.3.9600.16384 symbols)
.h + .idc in attach
.h + .idc in attach
Attachments
ntoskrnl_x64_win81_6.3.9600.16384_idc
(182.16 KiB) Downloaded 72 times
(182.16 KiB) Downloaded 72 times
ntoskrnl_x64_win81_6.3.9600.16384_structures
(1.63 MiB) Downloaded 81 times
(1.63 MiB) Downloaded 81 times
Windows 10 TP (ntoskrnl 6.4.9841.0 symbols)
.h file in attach
.h file in attach
Attachments
ntoskrnl_x64_win10_6.4.9841.0_h
(183.17 KiB) Downloaded 96 times
(183.17 KiB) Downloaded 96 times
ntoskrnl 10.0.10074.1 types & structures (header file) .
Attachments
(204.84 KiB) Downloaded 76 times
[10.0.14316] ntoskrnl + ntdll + hal types & structures
Attachments
(351.24 KiB) Downloaded 90 times
Windows 10 Redstone 1 (1607) ntoskrnl (10.0.14393.693) pdb + extracted structures.
Attachments
(1.77 MiB) Downloaded 55 times
Windows 10 Redstone 2 (1703) ntoskrnl (10.0.15063.413) pdb + extracted structures.
Attachments
(2.21 MiB) Downloaded 37 times
Windows 10 Redstone 3 (1709) ntoskrnl (10.0.16299.15) pdb + extracted structures.
Attachments
(2.17 MiB) Downloaded 25 times