Results 1 to 8 of 8

Thread: Windows NT IDA scripts

  1. #1
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,114
    Blog Entries
    5

    Windows NT IDA scripts

    These IDC files are likely of interest to those trying to map out their own NTOSKRNL. Perhaps [Yates] can find a home for them for us in his collection

    Windows NT Status Codes
    Windows NT Bug Codes
    Windows NT IRQ Levels (IRQL)
    MSVC Exception Record
    Definition of EPROCESS
    Definition of ETHREAD


    other NT articles of interest:
    NT4.H (Revision 005)
    Flushing VDM memory
    Enumerating Pseudo-FS objects (mailslots, pipes, etc)

    http://www.alkor.ru/~00077500/kb/winnt.htm

    Kayaker

  2. #2
    Reversing Since '98 \o/ [yAtEs]'s Avatar
    Join Date
    Feb 2002
    Posts
    97
    Blog Entries
    2
    oh cool, these are of great interest to me , i'll also take in these
    files, feed and clothe them, im sure they will have a happy
    life on my site.

    yates.

  3. #3
    Excellent. I also have some add-ons. Be prepared to check them out from wasm. Thanks, Kayaker - you are as informative as usual

  4. #4

    updated ntstatus

    here's an updated ntstatus.idc that I created from the xp sp1 ddk. it contains around 350 more lines/definitions

    the parsing code was under 30 lines of C.

    -doug

    edit:
    "Sorry, your attachment could not be accepted because your administrator's attachment quota would be exceeded by 17124364 bytes. He/She has been notified of this."

  5. #5
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,114
    Blog Entries
    5
    Thanks for the updated script doug. I'm not sure what the attachment problem is, the current size limit is set at 1,048,576 bytes, so from the error message you got you must have been trying to upload an 18MB file?

    Lol, OK we'll assume not, so there must be some other problem. The board has just been updated to VBulletin 3.0.0 Beta 7 (cheers and/or jeers to Woodmann/JMI), so there *may* be some problem with the attachments. We can run a few tests and bugcheck on that.

    Cheers to all,
    Kayaker

  6. #6
    the mention about "administrator's" quota... or is that just a generic error message..

    anyone able to attach file(s)?

    this file is a 13kb .zip

  7. #7
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,114
    Blog Entries
    5
    Quote Originally Posted by doug
    anyone able to attach file(s)?
    No attachments of any size seem possible right now, things look OK on the surface though so there's a buggy floating around somewhere... hang in there.

  8. #8
    attachments are fixed, so here's the file.

    -doug
    Attached Files Attached Files

Similar Threads

  1. olly plugin scripts
    By bestobest in forum OllyScript Plugin
    Replies: 16
    Last Post: May 26th, 2006, 18:24
  2. Armadillo scripts
    By hipu in forum Malware Analysis and Unpacking Forum
    Replies: 6
    Last Post: June 25th, 2004, 01:18
  3. ASPRs 1.30 & 1.31 scripts
    By Mario555 in forum OllyScript Plugin
    Replies: 2
    Last Post: May 19th, 2004, 07:02
  4. 16 new scripts for OllyScript
    By psyCK0 in forum OllyScript Plugin
    Replies: 1
    Last Post: February 25th, 2004, 02:05
  5. ida scripts
    By glopglop in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: October 26th, 2001, 14:08

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •