The following is the full listing of available blog posts. The latest articles will appear on top:

• 
  Windows Authentication - Credential Providers - Part 2

  Sequence of calls to a credential provider in Windows.

  credential-provider

  win-logon

  com

  win11

  win10

  cpp

  win32

  undocumented

  October 4, 2023

  by Dennis A. Babkin
• 
  Windows Authentication - Credential Providers - Part 1

  A primer on writing a credential provider in Windows.

  credential-provider

  win-logon

  com

  win11

  win10

  cpp

  win32

  undocumented

  September 20, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Secure Programming Practices - Serialization

  Example of secure binary serialization and de-serialization in C++.

  cpp

  serialization

  security

  fuzzing

  September 3, 2023

  by Dennis A. Babkin
• 
  Trusted Platform Module in Windows - Part 1

  How to use TPM to encrypt and decrypt small blobs of data programmatically.

  windows-internals

  tpm

  cpp

  reverse-engineer

  low-level

  win10

  win11

  August 28, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Reverse Engineering - Stepping Into a System Call

  How to step into a SYSCALL with a debugger using kernel binary patch.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  win10

  ...

  August 25, 2023

  by Dennis A. Babkin
• 
  Native Functions To The Rescue - Part 1

  How to make a critical process that can crash Windows if it is closed.

  windows-internals

  undocumented

  win10

  win11

  win32

  reverse-engineer

  low-level

  August 22, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Shaky Windows All The Way

  How to perform "title bar window shake" programmatically in Windows.

  windows-internals

  undocumented

  win10

  win11

  win32

  reverse-engineer

  August 21, 2023

  by Rbmm
• 
  Critical Section vs Kernel Objects

  Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  mitigation-policy

  ...

  August 19, 2023

  by Dennis A. Babkin
• 
  Things You Find While Reverse Engineering - AlertByThreadId

  How to put a thread into a kernel wait state and how to wake it up by a thread ID.

  while-re

  windows-internals

  synchronization

  low-level

  undocumented

  August 18, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Nuances of a Process Harakiri in Windows

  What is the shutdown-in-progress state of a process?

  windows-internals

  synchronization

  debugger

  low-level

  August 16, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Reverse Engineering & Binary Augmentation - Snipping Tool

  Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

  reverse-engineer

  asm

  debugger

  low-level

  compiler

  pe

  cpp

  shellcode

  ...

  August 8, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering - Tips For Beginners

  What do you need to become a software reverse engineer?

  reverse-engineer

  debugger

  low-level

  July 26, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering - VM Setup - Windows

  How to set up a virtual machine for your reverse engineering work on Windows.

  reverse-engineer

  debugger

  win10

  low-level

  pe

  vm

  vmware

  windbg-preview

  July 23, 2023

  by Dennis A. Babkin
• 
  Reviews On Major Platforms

  Most reviews that you find online are probably cherry-picked and fake.

  general-audience

  reviews

  July 16, 2023

  by Dennis A. Babkin
• 
  What Not to Do - Coding Apps in Assembly & Timely Backups

  Batty, a game coded almost entirely in Assembly, plus importance of timely backups.

  asm

  low-level

  game-dev

  what-not-to-do

  July 11, 2023

  by Dennis A. Babkin