Blog - www.dennisbabkin.com

Calling WDF functions before WdfDriverCreate is a bad idea.

OpusV, evasive bill payment practices and ghosting developers.

Using WinDbg to understand dependency between KPCR, KPRCB, K/ETHREAD, K/EPROCESS and KAPC_STATE structures.

Reverse engineering the SHStrDupW function with WinDbgX to prevent a potential memory leak.

Difference between EvtCleanupCallback and EvtDestroyCallback.

EXCEPTION_DOUBLE_FAULT and the UNEXPECTED_KERNEL_MODE_TRAP (7f) bugcheck.

StarLink antenna in a balcony, length of cable, acceptable obstructions, connection speeds and latency, use outside of the US.

What happens under the hood of "asynchronous" JavaScript: await, async, Promise, then.

Understanding virtual function tables, vtable, __purecall, novtable, Control Flow Guard.

Sequence of calls to a credential provider in Windows.

A primer on writing a credential provider in Windows.

Example of secure binary serialization and de-serialization in C++.

How to use TPM to encrypt and decrypt small blobs of data programmatically.

How to step into a SYSCALL with a debugger using kernel binary patch.

How to make a critical process that can crash Windows if it is closed.

How to perform "title bar window shake" programmatically in Windows.

Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.

How to put a thread into a kernel wait state and how to wake it up by a thread ID.

What is the shutdown-in-progress state of a process?

Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

What do you need to become a software reverse engineer?

How to set up a virtual machine for your reverse engineering work on Windows.

Most reviews that you find online are probably cherry-picked and fake.

Batty, a game coded almost entirely in Assembly, plus importance of timely backups.

How to get a certificate, the process of code-signing & notarization of macOS binaries for distribution outside of the Apple App Store.

Xcode build schemes, diagnosing memory corruption and crashes, sanitizers in Xode, analyzing crash logs.

Shutdown/reboot/logoff notifications, sleep/wake notifications, sending macOS to sleep or setting a wake event, rebooting or shutting down.

Critical sections, reader/writer locks, interactive login sessions, root user detection, CFString conversion.

Example of low-level inter-process communication (IPC) in C++ using Mach messages.

Recent proliferation of fake bug bounty hunters and "vulnerability racketeers".

Deceptive practices and hidden charges of personal data scrapers & content aggregators.