-
APC Series: KiUserApcDispatcher and Wow64
-
APC Series: User APC Internals
-
APC Series: User APC API
-
Dumping DPC Queues: Adventures in HIGH_LEVEL IRQL
-
Reversing DPC: KeInsertQueueDpc
-
AuxKlibQueryModuleInformation
-
Practical Reverse Engineering Solutions
-
Windows Library Code
-
Abusing Signed Windows Drivers
-
Autochk Rootkit Analysis
-
Reverse Engineering Optimizations: Division By Multiplication
-
Finding main() easily
-
Random PDC Driver
-
Reversing the x64 calling convention
-
Windows Critical Threads
-
How .NET executables are loaded
-
Windows Imports Searcher