elmelik/NsiAllocateAndGetTable-used-from-GetTcpTableInternal

Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64

NsiAllocateAndGetTable-used-from-GetTcpTableInternal

Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64

This might be useful for security researchers or other people who want to know how NsiAllocateAndGetTable is used since microsoft doesn't say anything about this function

Reversed and commented disassemblies

IDA's Pseudocode

• >>GetTcpTableInternal Pseudocode<<
• >>GetTcpTableInternal Pseudocode as cpp file<<

IDA's Assembly in graph view

• >>GetTcpTableInternal Assembly<<
• >>GetTcpTableInternal Assembly as asm file<<

Knowledge used to create a hook

• >>NsiAllocateAndGetTable hook in c++<<