Thread
:
ScyllaHide
View Single Post
#
16
04-15-2014, 17:37
ZeNiX
Administrator
Join Date: Feb 2009
Posts: 732
Rept. Given: 177
Rept. Rcvd 773 Times in 259 Posts
Thanks Given: 213
Thanks Rcvd at 885 Times in 242 Posts
Problem solved.
After downloaded the symbols, we need to use pdb-getprocaddress to get three addresses.
In my system, they are...
[060200000109_x86_000162F9]
NtUserQueryWindow=00009965
NtUserBuildHwndList=0000FBB1
NtUserFindWindowEx=0000804C
ZeNiX
View Public Profile
Find all posts by ZeNiX