vista kernel | Evilcodecave's Weblog

Vista IRP Struct with offset references for consult

September 10, 2009

Redirection:

http://evilcodecave.blogspot.com/2009/09/vista-irp-struct-with-offset-references.html

Leave a Comment » | Driver Coding, Reverse Code Engineering | Tagged: device drivers, IRP Struct, reverse engineering, Reversing, vista kernel | Permalink
Posted by evilcodecave

Vista’s TEB Struct with offset for handy consult

September 7, 2009

Redirection:

http://evilcodecave.blogspot.com/2009/09/vistas-teb-struct-with-offset-for-handy.html

Regards,

Giuseppe ‘Evilcry’ Bonfa’

Leave a Comment » | Reverse Code Engineering | Tagged: TEB struct, vista kernel, _TEB | Permalink
Posted by evilcodecave

Pills of Reversing – new PEB/_TEB members who uses it ?

September 6, 2009

Redirection:

http://evilcodecave.blogspot.com/2009/09/pills-of-reversing-new-pebteb-members.html

Leave a Comment » | Reverse Code Engineering | Tagged: DbgUiRemoteBreakin, RtlInitializeExceptionChain, RtlIsCurrentThreadAttachExempt, vista kernel, win7 kernel | Permalink
Posted by evilcodecave