Search Results

Found 22 blog topic(s) in 3ms. The latest articles will appear on top:

• 
  Intricacies of WDF - Part 1

  Difference between EvtCleanupCallback and EvtDestroyCallback.

  windows-kernel

  wdf

  cpp

  programming-tips

  January 1, 2026

  by Dennis A. Babkin
• 
  Windows Kernel Stack is a Precious Little Resource

  EXCEPTION_DOUBLE_FAULT and the UNEXPECTED_KERNEL_MODE_TRAP (7f) bugcheck.

  windows-kernel

  crash-analysis

  win10

  debugger

  low-level

  windbg-preview

  windbgx

  cpp

  December 31, 2025

  by Dennis A. Babkin
• 
  Reverse Engineering Virtual Functions Compiled With Visual Studio C++ Compiler - Part 1

  Understanding virtual function tables, vtable, __purecall, novtable, Control Flow Guard.

  compiler

  cpp

  asm

  reverse-engineer

  debugger

  cfg

  msvs

  low-level

  January 10, 2025

  by Dennis A. Babkin
• 
  Windows Authentication - Credential Providers - Part 2

  Sequence of calls to a credential provider in Windows.

  credential-provider

  win-logon

  com

  win11

  win10

  cpp

  win32

  undocumented

  October 4, 2023

  by Dennis A. Babkin
• 
  Windows Authentication - Credential Providers - Part 1

  A primer on writing a credential provider in Windows.

  credential-provider

  win-logon

  com

  win11

  win10

  cpp

  win32

  undocumented

  September 20, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Secure Programming Practices - Serialization

  Example of secure binary serialization and de-serialization in C++.

  cpp

  serialization

  security

  fuzzing

  September 3, 2023

  by Dennis A. Babkin
• 
  Trusted Platform Module in Windows - Part 1

  How to use TPM to encrypt and decrypt small blobs of data programmatically.

  windows-internals

  tpm

  cpp

  reverse-engineer

  low-level

  win10

  win11

  August 28, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Reverse Engineering & Binary Augmentation - Snipping Tool

  Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

  reverse-engineer

  asm

  debugger

  low-level

  compiler

  pe

  cpp

  shellcode

  ...

  August 8, 2023

  by Dennis A. Babkin
• 
  Tips For macOS Programming - Part 3

  Xcode build schemes, diagnosing memory corruption and crashes, sanitizers in Xode, analyzing crash logs.

  macos

  cpp

  xcode

  debugger

  crash-analysis

  compiler

  symbolicate

  bug

  ...

  June 26, 2023

  by Dennis A. Babkin
• 
  Tips For macOS Programming - Part 2

  Shutdown/reboot/logoff notifications, sleep/wake notifications, sending macOS to sleep or setting a wake event, rebooting or shutting down.

  macos

  cpp

  xcode

  power-operations

  programming-tips

  June 18, 2023

  by Dennis A. Babkin
• 
  Tips For macOS Programming - Part 1

  Critical sections, reader/writer locks, interactive login sessions, root user detection, CFString conversion.

  macos

  cpp

  xcode

  synchronization

  programming-tips

  June 11, 2023

  by Dennis A. Babkin
• 
  Mach Messages in macOS

  Example of low-level inter-process communication (IPC) in C++ using Mach messages.

  macos

  low-level

  cpp

  efficiency

  February 4, 2023

  by Dennis A. Babkin
• 
  Incorrect COM initialization and sporadic crashes

  The perilous results of incorrect sequence of calls to CoInitialize and CoUninitialize functions.

  cpp

  win32

  com

  credential-provider

  bug

  windows-internals

  July 29, 2022

  by Dennis A. Babkin
• 
  When Developers Give Up - DeleteSecurityPackage Function

  Why it pays off to look into some Win32 functions with a disassembler.

  reverse-engineer

  undocumented

  windows-internals

  asm

  cpp

  debugger

  October 13, 2021

  by Dennis A. Babkin
• 
  Coding Windows Kernel Driver - InjectAll

  Making the Visual Studio solution for DLL injection into all running processes.

  windows-kernel

  win32

  windows-internals

  cpp

  msvs

  apc

  asm

  pe

  ...

  May 29, 2021

  by Dennis A. Babkin

  by Rbmm