@Timo,
I uploaded an ntdll.spec for Win7SP1. Unfortunately, ntdll.pdb only exports 'SymTagPublicSymbol', no 'SymTagFunction' symbols, so it's not possible to generate the parameter lists. If they're needed they'll have to be inserted manually or I'll have to write a tool that gets them from "wInternl.h" :/
++ At least I was able to resolve the names of the 8 ordinal functions.
I won't go into all the skull dredging details of getting thus far.. Suffice to say it involved uttering various sulphur reeking curses in nine different languages and threatening the entire human race with extinction, writing a dummy program and running it in WinDbg to make SymSrv fetch ntdll.pdb, and hacking CreateSpec beyond recognition with various hardcoded path names.
Best Regards // Neo
-
Love Nystrom