lkd> dd NtBuildNumber
7c99dc08
f0000a28 00000000 7c96f49c 00000000
7c99dc18 7c96f48c 00000001 7c96f480 00000002
有见过这样的 NtBuildNumber不？ f0000a28
下面这个是根据导出表算出来的
lkd> dd 804d8000+0x760e8
8054e0e8
f0000a28 00000000 0053005c 00730079
NT 3.1 Windows NT 3.1 Workstation (named just Windows NT), Advanced Server 27 July 1993 528
NT 3.5 Windows NT 3.5 Workstation, Server 21 September 1994 807
NT 3.51 Windows NT 3.51 Workstation, Server 30 May 1995 1057
NT 4.0 Windows NT 4.0 Workstation, Server, Server Enterprise Edition, Terminal Server, Embedded 29 July 1996 1381
NT 5.0 Windows 2000 Professional, Server, Advanced Server, Datacenter Server, Advanced/Datacenter Server Limited Edition 17 February 2000 2195
NT 5.1 Windows XP Home, Professional, 64-bit Edition (Itanium), Media Center (original, 2003, 2004 & 2005), Tablet PC (original and 2005), Starter, Embedded, Home N, Professional N 25 October 2001 2600
NT 5.1 Windows Fundamentals for Legacy PCs N/A 8 July 2006 2600
NT 5.2 Windows XP 64-bit Edition Version 2003 (Itanium)[14] 28 March 2003 3790
NT 5.2 Windows Server 2003 Standard, Enterprise, Datacenter, Web, Storage, Small Business Server, Compute Cluster 24 April 2003 3790
NT 5.2 Windows XP Professional x64 Edition 25 April 2005 3790
NT 5.2 Windows Home Server N/A 16 July 2007 3790
NT 6.0 Windows Vista Home Basic, Home Premium, Business, Enterprise, Ultimate, Home Basic N, Business N Business: 30 November 2006
Consumer: 30 January 2007 6000
6001(SP1)
6002(SP2)
NT 6.0 Windows Server 2008 Foundation, Standard, Enterprise, Datacenter, Web Server, HPC Server, Itanium-Based Systems[15] 27 February 2008 6001
6002(SP2)
NT 6.1[16] Windows 7 Starter, Home Basic, Home Premium, Professional, Enterprise, Ultimate[17] 22 October 2009[18] 7600
NT 6.1[16] Windows Server 2008 R2 Foundation, Standard, Enterprise, Datacenter, Web Server, HPC Server, Itanium-Based Systems 22 October 2009[19] 7600
[课程]FART 脱壳王！加量不加价！FART作者讲授！
