What I know about it:

struct unknown_struct
    struct _KAPC apc;
    struct _KEVENT event;
    char unknown[2056];

So first a kernel apc struct then a kernel event struct and the total size is 0x878 (2168) bytes. Anybody know a struct on 64-bit windows that matches this description? Thanks.

  • A little more context would be helpful. I am sure this struct doesn't stand alone without ever getting used by code. You could arguably look at tools like PDBRipper and modify them to look for structs of a given size. I reckon your struct ought to be in ntoskrnl.exe symbols, right?
    – 0xC0000022L
    Aug 1 at 7:50
  • Yeah it was a custom struct nothing to do with microsoft. How to mark as answered?
    – Real Name
    Aug 1 at 8:20
  • Only an answer can be marked as the accepted one. Instead you could mark it for deletion, if you wanted.
    – 0xC0000022L
    Aug 1 at 12:19


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.