sayfudin13 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

KiFastSystemCall I want to know where is next step? #514

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
ntdll.dll:7C90EB8B ntdll_KiFastSystemCall:
ntdll.dll:7C90EB8B mov     edx, esp
ntdll.dll:7C90EB8D sysenter
ntdll.dll:7C90EB8F nop
After this link the program check the license and add it to database.
but after this line i cant find next line of license check?
how i can find that?
i am using of ida pro and ollydbg?
Please help me.
and i want to know how i can use patch file?

What is the expected output? What do you see instead?

What version of the product are you using? On what operating system?

Please provide any additional information below.

Original issue reported on code.google.com by cino...@gmail.com on 15 Aug 2014 at 6:24

GoogleCodeExporter commented 9 years ago
Windows XP Sp2

Original comment by cino...@gmail.com on 15 Aug 2014 at 6:25

GoogleCodeExporter commented 9 years ago
This doesn't appear to be a bug in volatility.  Closing as invalid.  Please 
find a different forum to ask your questions, such as IRC or the mailing lists. 
 This issue tracker is strictly for bugs in volatility.

Original comment by mike.auty@gmail.com on 15 Aug 2014 at 6:54