Search Results

Found 2 blog topic(s) in 1ms. The latest articles will appear on top:

• 
  Reverse Engineering - Resolving Confusion Over PsGetCurrentProcess, PsGetCurrentProcessId and PsGetProcessId

  Using WinDbg to understand dependency between KPCR, KPRCB, K/ETHREAD, K/EPROCESS and KAPC_STATE structures.

  reverse-engineer

  windows-kernel

  asm

  arm64

  low-level

  win32

  windows-internals

  undocumented

  ...

  June 1, 2026

  by Dennis A. Babkin
• 
  Reverse Engineering - SHStrDup* Function

  Reverse engineering the SHStrDupW function with WinDbgX to prevent a potential memory leak.

  reverse-engineer

  windbgx

  debugger

  asm

  arm64

  low-level

  win32

  cpp

  ...

  March 15, 2026

  by Dennis A. Babkin