01
Why C++ Is Worth the Pain
Everyone hits a wall with C++ early on. Here is the honest case for why you should push through it anyway, and what you actually get on the other side.
C++
about 10 min read
Writing
9 posts
02
C# Is Faster Than You Think
Most people write C# like it's a scripting language and wonder why it doesn't perform. Here's what the runtime actually gives you when you use it properly.
C#
about 12 min read
03
How Windows Actually Loads a DLL
What ntdll is really doing when you call LoadLibrary. PEB walkers, LDR data tables, TLS callbacks, and why DllMain has rules that exist for a reason.
Windows Internals
about 16 min read
04
Writing Your First Kernel Driver
Ring-0 is a different world. IRPs, dispatch routines, IRQL constraints, and why forgetting to call IoCompleteRequest is a thread-hanging bug not a crash.
Kernel Dev
about 18 min read
05
How the Windows Scheduler Actually Works
Thread priorities, quantum expiry, and the distinction between processor affinity and NUMA locality. What happens when your thread gets preempted and why it matters.
Windows Internals
about 14 min read
06
Static Analysis Without a Server
FCAT started from an annoyance: every online static analysis tool makes you upload your binary to someone else's disk. Here is how I built a full PE analysis suite in C# and WebAssembly that runs entirely in the browser tab.
C# / WASM
about 10 min read
07
The Entropy of a Packed Binary
Entropy comes up constantly in malware triage and packer detection, and most explanations stop at 'high entropy means compressed or encrypted' without saying why.
Static Analysis
about 8 min read
08
Building Sentinel: Sharding, Gateways, and Why WebSockets Lie to You
The moment you want to react to events in real time, you're not making REST calls anymore—you're holding open a persistent connection with failure modes that only show up in production.
Systems / Backend
about 11 min read
09
Reading Assembly Without a Disassembler
Every disassembler is doing the same mechanical thing you can do by hand. Once you can decode raw hex yourself, the tool stops being a black box you trust blindly.
Reverse Engineering
about 12 min read