Invoking Win32k syscalls from kernel space

		Exetools > General > General Discussion
Invoking Win32k syscalls from kernel space

01-05-2022, 18:22

DavidXanatos DavidXanatos is offline

Family

Join Date: Jun 2018

Posts: 183

Rept. Given: 3

Rept. Rcvd 47 Times in 33 Posts

Thanks Given: 59

Thanks Rcvd at 363 Times in 120 Posts

Sure: [s]https://www10.zippyshare.com...[/s] PDB included
The dispatch function that calls the asm or c versions is called Syscall_Invoke its called from a couple places but most relevant from Syscall_Api_Invoke

Last edited by DavidXanatos; 01-06-2022 at 17:15.

The Following User Gave Reputation+1 to DavidXanatos For This Useful Post:
user1 (01-05-2022)

The Following 2 Users Say Thank You to DavidXanatos For This Useful Post:
niculaita (01-06-2022), user1 (01-05-2022)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
C++ helper Class to make Syscalls	Aesculapius	Source Code	0	05-26-2019 23:37
Hades:Windows kernel driver lets reverse engineers monitor user and kernel mode code	sh3dow	Source Code	0	05-12-2016 03:15

All times are GMT +8. The time now is 01:49.