Closed this issue a year ago · 2 comments
Draft here: https://github.com/ergrelet/windiff/blob/master/docs/kernel_user_interface.md
Syscall extraction has been implemented for ntdll.dll and win32u.dll in v1.1.0.
ntdll.dll
win32u.dll
Fully implemented as of v1.2.0