1

I'm working through "Practical Reverse Engineering" and absolutely loving it so far. However, some of the exercises involve "decompiling" some Windows kernel files (like KeInitializeDpc, KeInitializeApc, ObFastDereferenceObject, etc) and I don't run Windows. I haven't been able to find any of the drivers online nor have I found any reliable sites from which I can get a Windows (anything between XP and 7) iso. Is there anywhere that I could get either of these things?

4
  • In a lot of countries it is legal to "unbundle" MS software from the hardware it came with. If you live in such a country you can simply buy an old Windows version on eBay or else where they sell them for a few bucks.
    – Robert
    Sep 20, 2022 at 16:10
  • Obviously, this isn't a solution for everyone but with an MSDN/Visual Studio Professional subscription (?$500ish/year?) you can download isos for XP/Vista/7/8.1/10/11. Downloading from Microsoft and verifying the hash is the safest way to get those files. You might be able to get the "Windows XP mode" VM for free - it was a big marketing point when they released it. Sep 20, 2022 at 16:31
  • You can get 7/8.1/10 from here: developer.microsoft.com/en-us/microsoft-edge/tools/vms .. no account required Sep 20, 2022 at 22:56
  • @MegaTonnage thanks so much!
    – superzero
    Sep 21, 2022 at 15:58

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.