One interesting thing that I'd love to do when I h...

2009-01-23T19:41:00.000+01:00

One interesting thing that I'd love to do when I have time (hah) is take this technique:

http://www.phreedom.org/presentations/reverse-engineering-microsoft-binaries/

To grab every version of the NT kernel, and then do these kinds of automatic extractions to generate a picture of how things like NT system calls have evolved over time.

If you plugged this into the MS symbols, you could do some even more interesting things, but that's an exercise left to the reader ;)

Comments on Ero Carrera's blog: More syscall ordinals

One interesting thing that I'd love to do when I h...