@Timo,
I uploaded an ntdll.spec for Win7SP1.
Unfortunately, ntdll.pdb only exports 'SymTagPublicSymbol', no
'SymTagFunction' symbols, so it's not possible to generate the parameter
lists. If they're needed they'll have to be inserted manually or I'll
have to write a tool that gets them from "wInternl.h" :/
++ At least I was able to resolve the names of the 8 ordinal functions.
I won't go into all the skull dredging details of getting thus far..
Suffice to say it involved uttering various sulphur reeking curses in
nine different languages and threatening the entire human race with
extinction, writing a dummy program and running it in WinDbg to make
SymSrv fetch ntdll.pdb, and hacking CreateSpec beyond recognition with
various hardcoded path names.
Best Regards
// Neo
Show replies by date