I love Windows Internals. It is really a pleasure to watch the videos of one of its co-authors.
@user-yi4ef2gk1o
28 күн бұрын
Very cool if you can maybe show us adding functions to a driver then injecting that driver without hurting the non-tampered with driver functionability !! 😃😄
@2radix774
Ай бұрын
great explanation as always
@2radix774
Ай бұрын
btw, at 6:64 it shows you ObjectNameAddress (in this case 36feb2e5a8) in my case ObjectNameAddress is 0x0000000a`9232dd88 when I type: du 0xa9232dd88 it dosent show me the string representing path, why is that? (it only prints "VX")
@zodiacon
Ай бұрын
It's a UNICODE_STRING structure, so you may need to use dt ntdll!_UNICODE_STRING and the address
@_zproxy
29 күн бұрын
it seems a sata volume can only be accessed after it was mounted into a empty folder. yet can we use a volume without mounting it to any folder?
@zodiacon
29 күн бұрын
Not sure what you mean by "mounting to a folder" - a volume is independent of any folder. It may be unformatted, which will not allow "standard" access but still possible with APIs.
@_zproxy
29 күн бұрын
@@zodiacon seems without calling SetVolumeMountPoint one cannot access files directly on the new volume, otherwise one could subst subfolders as drives directly via Control\Session Manager\DOS Devices ..
@zodiacon
29 күн бұрын
I did access files directly...
@zodiacon
29 күн бұрын
That said, there may be subtleties I am missing here.
@_zproxy
29 күн бұрын
@@zodiacon your volume was mounted as C. try a volume thats not mounted at all.
@deankavanagh4306
25 күн бұрын
Sorry to ask this just in case this has been asked before, I love the windows internals books and was just wondering if anyone knows whether an 8th edition will be on the way or wether the current 7th edition also is completely relevant to windows 11? I assume it is since I have heard that 11’s codebase is the same or most of it is to 10,s. Thanks to any replies!
@zodiacon
25 күн бұрын
Yes, the 7th edition is relevant to Windows 11 as well as Windows 10. There are some new stuff in Windows 11, but it's still the same codebase.
@deankavanagh4306
25 күн бұрын
@@zodiacon Thanks Pavel, is there likely to be an 8th edition in the future if enough changes occur?
@zodiacon
25 күн бұрын
I would say it's likely, but really no way to tell...
@deankavanagh4306
25 күн бұрын
@@zodiacon Thanks pavel, really appreciate your replies!
@semihartan
29 күн бұрын
Hey, anyone knows how to download the notepad's symbols? In my case, it seems like windbg doesn't download it automatically.
@zodiacon
29 күн бұрын
If you're on Win 11 and using the "new" notepad - I believe the symbols are not provided by MS.
@semihartan
29 күн бұрын
@@zodiacon Yes, I am on Win 11. I see it now, thanks alot. Uhh, if you don't mind, may I ask you why a Windows Guru like you doesn't prefer Win 11? I don't like Win 11 too but use it though because of hardware/driver compatibility.
@zodiacon
29 күн бұрын
Win 11 is a failure, in my opinion. The kernel is still good, but the user-facing features are terrible, such as the task bar and explorer.
@semihartan
29 күн бұрын
@@zodiacon Yes, I agree with you. In addition, its memory use in idle takes increasingly more memory. Even just a simple calculator app can take 100 MB in memory. I miss the old Windows 7 days so much.
Пікірлер: 24