Search Results

Found 14 blog topic(s) in 2ms. The latest articles will appear on top:

• 
  Reverse Engineering - Stepping Into a System Call

  How to step into a SYSCALL with a debugger using kernel binary patch.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  win10

  ...

  August 25, 2023

  by Dennis A. Babkin
• 
  Critical Section vs Kernel Objects

  Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  mitigation-policy

  ...

  August 19, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering & Binary Augmentation - Snipping Tool

  Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

  reverse-engineer

  asm

  debugger

  low-level

  compiler

  pe

  cpp

  shellcode

  ...

  August 8, 2023

  by Dennis A. Babkin
• 
  What Not to Do - Coding Apps in Assembly & Timely Backups

  Batty, a game coded almost entirely in Assembly, plus importance of timely backups.

  asm

  low-level

  game-dev

  what-not-to-do

  July 11, 2023

  by Dennis A. Babkin
• 
  When Developers Give Up - DeleteSecurityPackage Function

  Why it pays off to look into some Win32 functions with a disassembler.

  reverse-engineer

  undocumented

  windows-internals

  asm

  cpp

  debugger

  October 13, 2021

  by Dennis A. Babkin
• 
  Coding Windows Kernel Driver - InjectAll

  Making the Visual Studio solution for DLL injection into all running processes.

  windows-kernel

  win32

  windows-internals

  cpp

  msvs

  apc

  asm

  pe

  ...

  May 29, 2021

  by Dennis A. Babkin

  by Rbmm
• 
  C++ and Assembly

  Adding x86, x64 Assembly Language code to the Visual Studio C++ project.

  asm

  msvs

  compiler

  cpp

  debugger

  efficiency

  win32

  May 2, 2021

  by Dennis A. Babkin
• 
  Intricacies of Microsoft Compilers - Part 2

  The use of __imp_ and __imp_load_ prefixes.

  asm

  msvs

  compiler

  cpp

  debugger

  pe

  undocumented

  April 28, 2021

  by Rbmm
• 
  Intricacies of Microsoft Compilers

  The case of a curious __imp_.

  asm

  msvs

  compiler

  cpp

  debugger

  pe

  undocumented

  April 26, 2021

  by Dennis A. Babkin
• 
  Macro Wizardry in Visual Studio

  Useful macros for debugging your C++ code.

  msvs

  cpp

  macro

  compiler

  debugger

  asm

  January 20, 2021

  by Dennis A. Babkin

  by Rbmm
• 
  Loop Optimization in C++

  Testing capabilities of the Visual C++ compiler to optimize loops.

  cpp

  efficiency

  asm

  compiler

  msvs

  December 5, 2020

  by Dennis A. Babkin
• 
  Depths of Windows APC

  Aspects of internals of the Asynchronous Procedure Calls from the kernel mode.

  windows-internals

  apc

  windows-kernel

  win32

  cfg

  undocumented

  asm

  November 27, 2020

  by Rbmm

  by Dennis A. Babkin
• 
  Deep Dive Into Windows PE Format - GetProcAddress Spoofing

  Malware researchers - Beware of GetProcAddress spoofing via manipulation of PE format in memory.

  windows-internals

  asm

  pe

  anti-malware

  msrc

  October 1, 2020

  by Dennis A. Babkin
• 
  Deep Dive Into Assembly Language - Windows Shellcode - GetProcAddress

  How to implement GetProcAddress in shellcode using x86-64 and x86 assembly language.

  windows-internals

  asm

  shellcode

  pe

  September 14, 2020

  by Dennis A. Babkin