Has anyone tried to reverse Windows 8.1 ntoskrnl.exe ? I'm in search of specific code (Windows Thread Scheduler) and I would tend to believe that this code is likely somewhere in this exe. Which dissembler is best for reviewing this file ? I ran into a screen that indicated that some of the information is packed.
A forum for reverse engineering, OS internals and malware analysis
You may want to look on several Ki* functions first.
Ring0 - the source of inspiration
