windows deep internals
вы все еще верите написанному кириллицей ?
пятница, 21 апреля 2017 г.
etwex - ida plugin for Etw traces IIDs searching
›
For example you may need to find which Etw providers located in some module. There are lots of functions can be used to register provider a...
четверг, 6 апреля 2017 г.
ntdll ProtectedPolicies
›
It seems that since windows 10 ntdll has security feature called "ProtectedPolicies" - you can query it with RtlQueryProtectedPoli...
1 комментарий:
четверг, 2 марта 2017 г.
ida plugin for RFG fixups processing
›
I commited today code for Ida Pro plugin for RFG fixups processing - for both version 1 & 2 It seems that by default during automatic...
среда, 1 марта 2017 г.
IMAGE_DYNAMIC_RELOCATION_TABLE.Version 2
›
it seems that around since w10 build 15007 format of rfg relocs was changed and field IMAGE_DYNAMIC_RELOCATION_TABLE.Version now has value ...
вторник, 7 февраля 2017 г.
apisetschema.dll from windows 10 build 15025
›
lots of new modules was added : win-core-registry-fromapp win-gaming-expandedresources win-gaming-gamemonitor win-ngc-serialization wi...
четверг, 19 января 2017 г.
KiServiceTable from windows 10 build 15007 x64
›
KiServiceLimit .eq. 0x1c8
KiServiceTable from windows 10 build 15007
›
KiServiceLimit .eq. 0x1c8
‹
›
Главная страница
Открыть веб-версию
