Skip to content

!wa_w32psdt

Jump to bottom Edit New page
Vyacheslav Rusakoff edited this page Jan 18, 2015 · 2 revisions 
kd> !wdbgark.help wa_w32psdt
!wa_w32psdt [/process <o>]
  /process <o> - process,Any GUI EPROCESS address (use explorer.exe)
Output the Win32k Service Descriptor Table

(Click for larger view)

WinDBG Anti-RootKit extension © 2013-2017 Vyacheslav Rusakoff

Blog | LinkedIn profile | Email

Main menu

Supported commands

Clone this wiki locally