<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.3.3" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments on: Reverse Engineering Citrix ThinWire</title>
	<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/</link>
	<description>Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics</description>
	<pubDate>Wed, 27 May 2026 07:36:27 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.3</generator>
		<item>
		<title>By: Software Generalist &#187; Blog Archive &#187; Reading Notebook: 16-July-09</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-86334</link>
		<dc:creator>Software Generalist &#187; Blog Archive &#187; Reading Notebook: 16-July-09</dc:creator>
		<pubDate>Tue, 28 Jul 2009 17:45:57 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-86334</guid>
		<description>[...] Terminal services (pp. 19 -20) - an for architectural overview (UML diagram) please see this post: Reverse Engineering Citrix ThinWire  [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] Terminal services (pp. 19 -20) - an for architectural overview (UML diagram) please see this post: Reverse Engineering Citrix ThinWire  [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Software Generalist &#187; Blog Archive &#187; Reading Notebook: 24-July-09</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-85872</link>
		<dc:creator>Software Generalist &#187; Blog Archive &#187; Reading Notebook: 24-July-09</dc:creator>
		<pubDate>Fri, 24 Jul 2009 12:44:46 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-85872</guid>
		<description>[...] USER and GDI functions (pp. 54 - 55) - Long time ago I created a UML component diagram depicting component dependencies extracted from stack traces: http://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/  [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] USER and GDI functions (pp. 54 - 55) - Long time ago I created a UML component diagram depicting component dependencies extracted from stack traces: <a href="http://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/" rel="nofollow">http://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/</a>  [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dmitry Vostokov</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-535</link>
		<dc:creator>Dmitry Vostokov</dc:creator>
		<pubDate>Thu, 01 Mar 2007 17:41:14 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-535</guid>
		<description>Corrected both diagrams (removed direct link from video display driver to video port driver)

Thanks,
Dmitry</description>
		<content:encoded><![CDATA[<p>Corrected both diagrams (removed direct link from video display driver to video port driver)</p>
<p>Thanks,<br />
Dmitry</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Toby Opferman</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-18</link>
		<dc:creator>Toby Opferman</dc:creator>
		<pubDate>Tue, 26 Dec 2006 00:29:09 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-18</guid>
		<description>No problem. The video display driver also directly accesses the hardware and performs things such as DMA transfers. This helps speed things up as it then doesnâ€™t require the display driver to send an IRP to the miniport for every graphic command.

http://www.codeproject.com/system/driverdev6asp.asp</description>
		<content:encoded><![CDATA[<p>No problem. The video display driver also directly accesses the hardware and performs things such as DMA transfers. This helps speed things up as it then doesnâ€™t require the display driver to send an IRP to the miniport for every graphic command.</p>
<p><a href="http://www.codeproject.com/system/driverdev6asp.asp" rel="nofollow">http://www.codeproject.com/system/driverdev6asp.asp</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Toby Opferman</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-16</link>
		<dc:creator>Toby Opferman</dc:creator>
		<pubDate>Tue, 26 Dec 2006 00:27:58 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-16</guid>
		<description>The diagram is slightly inaccurate. The video driver only ever directly links against WIN32K and would not call VideoPort.Sys directly without going through WIN32K. There is also another Citrix related path missing which I would not be able to mention in a public forum.</description>
		<content:encoded><![CDATA[<p>The diagram is slightly inaccurate. The video driver only ever directly links against WIN32K and would not call VideoPort.Sys directly without going through WIN32K. There is also another Citrix related path missing which I would not be able to mention in a public forum.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dmitry Vostokov</title>
		<link>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-17</link>
		<dc:creator>Dmitry Vostokov</dc:creator>
		<pubDate>Sun, 05 Nov 2006 14:45:20 +0000</pubDate>
		<guid>https://www.dumpanalysis.org/blog/index.php/2006/10/24/reverse-engineering-citrix-thinwire/#comment-17</guid>
		<description>Thanks for pointing this out! This was adopted from the picture in OSR article:

From Andy's Bookshelf: So you Wanna Write a Video Driver?
Figure 2 - DDI and Miniport Drivers

http://www.osronline.com/article.cfm?id=66

I'll add a label to that link: "via win32k!EngDeviceIoControl" similar I've done for vdtw30.dll and termdd.sys interaction

Thanks,
Dmitry</description>
		<content:encoded><![CDATA[<p>Thanks for pointing this out! This was adopted from the picture in OSR article:</p>
<p>From Andy&#8217;s Bookshelf: So you Wanna Write a Video Driver?<br />
Figure 2 - DDI and Miniport Drivers</p>
<p><a href="http://www.osronline.com/article.cfm?id=66" rel="nofollow">http://www.osronline.com/article.cfm?id=66</a></p>
<p>I&#8217;ll add a label to that link: &#8220;via win32k!EngDeviceIoControl&#8221; similar I&#8217;ve done for vdtw30.dll and termdd.sys interaction</p>
<p>Thanks,<br />
Dmitry</p>
]]></content:encoded>
	</item>
</channel>
</rss>
