volatility icon indicating copy to clipboard operation
volatility copied to clipboard
verified publisher icon volatilityfoundation

win10x64 tagWnd

Open zhuhuibeishadiao opened this issue 6 years ago • 0 comments

tagWnd spwndNext 7601:0x48 14393:0x58 15063:0x58 16299:0x58 17134:0x40 17763:0x40

tagWND* spwndNext (We know that one offset is enough) tagWnd* spwndPrev + 8 tagWnd* spwndParent + 8x2 tagWnd* spwndChild + 8x3 tagWnd* spwndOwner + 8x4

strName: 7601:0xe0 14393:0xe0 15063:0xf0 16299:0xf0 17134:0xa8 17763:0xa8

zhuhuibeishadiao avatar May 17 '19 03:05 zhuhuibeishadiao