flat assembler
Message board for the users of flat assembler.

Index > Windows > How to get teh KeServiceDescriptorTable in windows IA-64?

Author
Thread Post new topic Reply to topic
bruninho



Joined: 22 Sep 2018
Posts: 1
bruninho 22 Sep 2018, 18:42
I need to hook a service function in KeServiceDescriptorTable by number and i know that i can find the offset of SDT with KTHREAD struct. How to find offset of KTHREAD in windows x64?
Post 22 Sep 2018, 18:42
View user's profile Send private message Reply with quote
comrade



Joined: 16 Jun 2003
Posts: 1150
Location: Russian Federation
comrade 01 Oct 2018, 03:44
First off, IA-64 is Itanium 64 which is very different architecture than x64 (aka x86-64, aka amd64, aka EMT64).

To answer your question, you can download the public symbols to get the layout of the KTHREAD structure for a particular build of Windows.

I have a hard time reading your post and therefore I am unsure if I've answered it fully. You can try rewriting your post in a more coherent manner.
Post 01 Oct 2018, 03:44
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2024, Tomasz Grysztar. Also on GitHub, YouTube.

Website powered by rwasa.