Comment by daurnimator
7 years ago
The basics are available in the windows driver development kit.
Many internal symbol and function names are available with debug symbols that have been released by Microsoft over the years.
Lots of undocumented internals you can learn about from this book: https://amzn.to/2XHhSFF
If the book doesn't match what you see (which isn't that often), then you just single-step and see what's happening.
No comments yet
Contribute on Hacker News ↗