Windows Vista and unexported kernel symbols (Part II, 32bits version)

Posted by Matthieu Suiche on January 31, 2007 · 1 Comment 

This paper exposes part II of my previous article about Windows Vista and internals structures. This one is talking about the 32bits version and aims to show new authencity tricks.

Download it from the following link:
Windows_Vista_32bits_and_unexported_kernel_symbols.pdf

Cheers,

Filed under Articles, Reverse Engineering, Windows · Tagged with