Practical Reverse Engineering RtlValidateUnicodeString Pg 35 Exercise 5
Support us on Patreon: https://patreon.com/guidedhacking
A short & simple video showing you how to solve exercise 5 of page 35 of the Practical Reverse Engineering book. It asks you reverse engineer the simple RtlValidateUnicodeString function. Using the knowledge you have gained from previous exercises in the book, your goal is turn the assembly into reversed C code.
The RtlUnicodeStringValidate function validates the contents of a UNICODE_STRING structure which is passed as an argument along with a flags argument.
NTSTATUS NTAPI RtlValidateUnicodeString (
IN ULONG Flags,
IN PCUNICODE_STRING UnicodeString
);
RtlUnicodeStringValidate returns one of the following NTSTATUS values: STATUS_SUCCESS or STATUS_INVALID_PARAMETER. The SourceString pointer cannot be NULL. If you need to specify a NULL pointer value, use the RtlUnicodeStringValidateEx function.
Discussion: https://guidedhacking.com/threads/15332/
Donate on our Forum : http://bit.ly/2HkOco9
Support us on Patreon : http://bit.ly/38mnveC
Follow us on Facebook : http://bit.ly/2vvHfhk
Follow us on Twitter : http://bit.ly/3bC7J1i
Follow us on Twitch : http://bit.ly/39ywOZ2
Follow us on Reddit : http://bit.ly/3bvOB57
Follow us on GitHub : http://bit.ly/2HoNXIS
Follow us on Instagram : http://bit.ly/2SoDOlu
The Practical Reverse Engineering Book
Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find. Now the good guys can use the same tools to stop these threats. Practical Reverse Engineering goes under the hood of reverse engineering for security analysts, security engineers, and system programmers, so they can learn how to use these same processes to stop hackers in their tracks. The book covers x86, x64, and ARM (the first book to cover all three); Windows kernel rootkits and drivers; virtual machine protection techniques; and much more. Best of all, it offers a systematic approach to the material, with plenty of hands-on exercises and real-world examples.
#ReverseEngineering #PracticalReverseEngineering #RtlUnicodeStringValidate