Search Results

Found 3 blog topic(s) in 1ms. The latest articles will appear on top:

• 
  Reverse Engineering - Resolving Confusion Over PsGetCurrentProcess, PsGetCurrentProcessId and PsGetProcessId

  Using WinDbg to understand dependency between KPCR, KPRCB, K/ETHREAD, K/EPROCESS and KAPC_STATE structures.

  reverse-engineer

  windows-kernel

  asm

  arm64

  low-level

  win32

  windows-internals

  undocumented

  ...

  June 1, 2026

  by Dennis A. Babkin
• 
  Reverse Engineering - SHStrDup* Function

  Reverse engineering the SHStrDupW function with WinDbgX to prevent a potential memory leak.

  reverse-engineer

  windbgx

  debugger

  asm

  arm64

  low-level

  win32

  cpp

  ...

  March 15, 2026

  by Dennis A. Babkin
• 
  Windows Kernel Stack is a Precious Little Resource

  EXCEPTION_DOUBLE_FAULT and the UNEXPECTED_KERNEL_MODE_TRAP (7f) bugcheck.

  windows-kernel

  crash-analysis

  win10

  debugger

  low-level

  windbg-preview

  windbgx

  cpp

  December 31, 2025

  by Dennis A. Babkin