3 ms·
Great work. From looking at the PDF [1], it seems that this was done with something like IDA Pro rather than from sources. I imagine work like this would be a g
by taspeotis 11y ago
Great work. From looking at the PDF [1], it seems that this was done with something like IDA Pro rather than from sources. I imagine work like this would be a good candidate for the Microsoft Shared Source Initiative [2].
[1] http://j00ru.vexillium.org/dump/recon2015.pdf http://j00ru.vexillium.org/dump/recon2015.pdf
[2] https://www.microsoft.com/en-us/sharedsource/ https://www.microsoft.com/en-us/sharedsource/
- yuhong 11y agoNot even the PDB symbols are available for ATMFD, probably because it is third party code originally included into Win2000.