IDTGuard v0.1 December, 2005 Build
Programming, Reverse Engineering, WindowsThis is a very interessting tool I did one year ago to realize proof of concept of my IDT authenticity theory.
Tool can be found at : IDTGuard v0.1
Note: This tool doesn’t work with Windows 2003 SP1 cause I used \\PhysicalMemory. (http://technet2.microsoft.com/WindowsServer/en/library/e0f862a3-cf16-4a48-bea5-f2004d12ce351033.mspx?mfr=true
The following paste is a sample of use with the 0×2D interrupt on Windows 2000.
Interrupt […]
Vista’s WoW Path Redirection
Articles, Reverse Engineering, WindowsWindows Vista x64, is my first 64bits Operating System before it I never had been interested about 32-64bits compabilities. It started when I used the Daniel Pistelli’s tool called “Explorer Suite”,which is available at the following link : http://ntcore.com/download.php, I noticed that Windows Live Messenger, which is a x86 binary, is just linked by four […]
I found Waldo !
Blogging, Reverse Engineering, WindowsThere is a funny programmer @ Redmond who put a “Waldo” into the Windows Vista Boot Loader code :)
.text:00000000004330D8 lea rdx, aHiThere
.text:00000000004330DF […]