A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about user-mode development.
Forum Statistics Last post
Mobile Cross Platform SDK
by p4r4n0id  - Sat Aug 03, 2013 5:28 pm
1 Replies 
 5447 Views
 by r3shl4k1sh
 Sat Aug 03, 2013 9:14 pm
Desktop Question
by Vrtule  - Mon Jul 29, 2013 5:06 pm
6 Replies 
 9852 Views
 by Vrtule
 Wed Jul 31, 2013 2:45 pm
SEH exceptions in remote process thread
by dash  - Fri Jul 12, 2013 6:23 pm
2 Replies 
 6136 Views
 by dash
 Sat Jul 13, 2013 8:33 pm
Identifying packers
by wacked  - Thu Dec 30, 2010 12:04 pm
5 Replies 
 11087 Views
 by Marc Ochsenmeier
 Thu Jun 20, 2013 1:43 pm
shared section trick
by R00tKit  - Tue Apr 23, 2013 7:40 am
9 Replies 
 13914 Views
 by aionescu
 Wed May 01, 2013 6:11 am
How to realize COM isolation?
by tcxyqs  - Mon Mar 11, 2013 3:09 am
0 Replies 
 4076 Views
 by tcxyqs
 Mon Mar 11, 2013 3:09 am
Source Code to Kill IceSword
by pipedev  - Tue Mar 05, 2013 11:16 am
4 Replies 
 7676 Views
 by pipedev
 Wed Mar 06, 2013 1:43 pm
Fast signature search
by Tigzy  - Sat Nov 10, 2012 3:05 pm
6 Replies 
 9849 Views
 by Tigzy
 Fri Feb 22, 2013 11:49 am
[NEW YEAR GIFT]RING3 EAT/IAT HOOK Source Code
by m5home  - Sat Feb 09, 2013 1:51 pm
1 Replies 
 4613 Views
 by m5home
 Sat Feb 09, 2013 6:52 pm
3 Replies 
 6394 Views
 by EP_X0FF
 Fri Feb 08, 2013 7:34 am
How to get the absolute offset of file on disk?
by myid  - Sat Jan 26, 2013 11:38 am
5 Replies 
 7590 Views
 by myid
 Sat Jan 26, 2013 3:45 pm
Reading ExpandString as binary data
by Buster_BSA  - Thu Jan 03, 2013 12:10 pm
2 Replies 
 4697 Views
 by Buster_BSA
 Thu Jan 03, 2013 2:48 pm
4 Replies 
 6533 Views
 by myid
 Fri Dec 21, 2012 12:57 pm
Batch - Heuristic registry key deletion
by thisisu  - Sat Dec 15, 2012 12:55 am
5 Replies 
 7260 Views
 by thisisu
 Thu Dec 20, 2012 10:21 pm
Applying job object UILIMIT_HANDLES on IE
by hx1997  - Tue Dec 04, 2012 4:31 pm
0 Replies 
 4413 Views
 by hx1997
 Tue Dec 04, 2012 4:31 pm
shadow-defender system freeze (bypass)
by Houdini  - Sun Nov 25, 2012 7:08 pm
0 Replies 
 3376 Views
 by Houdini
 Sun Nov 25, 2012 7:08 pm
modified executable...
by STRELiTZIA  - Thu Nov 15, 2012 10:18 am
4 Replies 
 6212 Views
 by STRELiTZIA
 Fri Nov 16, 2012 9:54 am
LdrSetAppCompatDllRedirectionCallback
by Alex  - Fri Jul 08, 2011 6:38 pm
2 Replies 
 5973 Views
 by rinn
 Fri Nov 16, 2012 5:12 am
Good articles about win32 and kernel
by R00tKit  - Sun Nov 11, 2012 1:35 pm
1 Replies 
 3683 Views
 by R00tKit
 Sun Nov 11, 2012 1:50 pm
Crash on Import Loading
by wacked2  - Tue Nov 06, 2012 11:00 pm
0 Replies 
 3391 Views
 by wacked2
 Tue Nov 06, 2012 11:00 pm
strange desktop behavior [windows 8]
by kmd  - Tue Nov 06, 2012 1:54 pm
2 Replies 
 4180 Views
 by kmd
 Tue Nov 06, 2012 2:51 pm
Batch program - Reducing runtime tips
by thisisu  - Wed Oct 24, 2012 8:28 pm
2 Replies 
 4153 Views
 by thisisu
 Thu Nov 01, 2012 5:04 am
LdrLoadDll internals needed
by p4r4n0id  - Fri Oct 26, 2012 2:07 pm
6 Replies 
 6856 Views
 by R00tKit
 Sat Oct 27, 2012 5:58 pm
malware C&C method what and why
by R00tKit  - Wed Oct 17, 2012 11:42 am
3 Replies 
 5017 Views
 by yokami
 Wed Oct 24, 2012 12:12 pm
Startup location : Where to put my program?
by Tigzy  - Thu Oct 11, 2012 10:21 am
10 Replies 
 16921 Views
 by l4tr0d3ctism
 Tue Jan 01, 2013 6:22 am