|
|
|
|
#1
04-15-2014, 17:37
|
||||
|
||||
|
Problem solved.
After downloaded the symbols, we need to use pdb-getprocaddress to get three addresses. In my system, they are... [060200000109_x86_000162F9] NtUserQueryWindow=00009965 NtUserBuildHwndList=0000FBB1 NtUserFindWindowEx=0000804C 
|
|
#2
04-16-2014, 03:03
|
|||
|
|||
|
Thanks ZeNiX, I added it here:
https://bitbucket.org/NtQuery/pdb-getprocaddress/commits/8ac27b0c21d3df3b95e775afff24ad993fc492d8 If somebody wants to share his config, please do it 
__________________
My blog: https://ntquery.wordpress.com
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| ScyllaHide HookLibraryx86.dll | phroyt | General Discussion | 3 | 10-25-2019 09:48 |
| ScyllaHide Detector | Lueilwitz | Source Code | 2 | 08-07-2019 06:32 |
Hybrid Mode
