Of course, one could do a search on Google for something like
Undocumented Windows NT ebook and look at the bottom of the page.
Of course, that person better have already ordered a copy! :)
- Ender
There's also a book called Undocumented Windows NT. That would probably
be the best hope of
Hi Dan,
Windows NT/2000 Native API Reference by Gary Nebbett
http://www.amazon.com/exec/obidos/ASIN/1578701996/
according to my friend who wrote one of the competitors
to Shrinker.
I don't know... I looked at its index on amazon.com, and it had no
reference to LdrAccessResource. So I
On Wed, Jan 02, 2002 at 03:28:22PM -0500, Robert Baruch wrote:
Hi Dan,
Windows NT/2000 Native API Reference by Gary Nebbett
http://www.amazon.com/exec/obidos/ASIN/1578701996/
according to my friend who wrote one of the competitors
to Shrinker.
I don't know... I looked at its index
On Wed, Jan 02, 2002 at 03:28:22PM -0500, Robert Baruch wrote:
Hi Dan,
Windows NT/2000 Native API Reference by Gary Nebbett
http://www.amazon.com/exec/obidos/ASIN/1578701996/
according to my friend who wrote one of the competitors
to Shrinker.
I don't know... I looked at its index
Robert Baruch wrote:
Well, Shrinker is getting kind of ridiculous with its required checks for
the genuine Microsoft NTDLL.DLL. Also I can't find LdrAccessResource
documented anywhere. Smacks of anticompetitiveness and monopolistic
intentions to me :) Is there a book on undocumented NT/2000?
Robert Baruch [EMAIL PROTECTED] writes:
So anyway, if we implemented this internal function (in C), then in theory
it wouldn't be much of a big deal to code LdrAccessResource in assembly.
Although it will raise a few eyebrows, we can always put in a comment
similar to the one that will go in
On 26 Dec 2001 12:46:33 -0800
Alexandre Julliard [EMAIL PROTECTED] wrote:
But unlike EXC_CallHandler there is no good reason to do that, except
to work around Shrinker stupidity. And for all we know there might be
20 more similar tests (and if not, they may be added in the next
Shrinker
Robert Baruch [EMAIL PROTECTED] writes:
More stepping through the code, comparing Windbg to gdb, and I found
another landmine. Shrinker gets the address of the NTDLL procedure
LdrAccessResource, and looks for this code:
FF74 push [esp+X]
E8 call
Instead, it finds an
On Mon, 24 Dec 2001, Alexandre Julliard wrote:
hard, but I doubt you'll get gcc to generate exactly the above code;
and writing LdrAccessResource in assembly is not really an option.
Yes, but can't we write a trivial wrapper in assembly that simply calls an
internal function (written in C)
On 24 Dec 2001 12:33:50 -0800
Alexandre Julliard [EMAIL PROTECTED] wrote:
Instead, it finds an unimplemented procedure in Wine. So now I will
look
at LdrAccessResource (and friends) to see what's involved in
implementing
it, whatever it is.
Sounds much more problematic.
More stepping through the code, comparing Windbg to gdb, and I found
another landmine. Shrinker gets the address of the NTDLL procedure
LdrAccessResource, and looks for this code:
FF74 push [esp+X]
E8 call
Instead, it finds an unimplemented procedure in Wine. So now I will
11 matches
Mail list logo