Vostokov D. Reversing Disassembly Reconstruction Accelerated 2022

Textbook in PDF format

About the Author
Presentation Slides and Transcript
Practice Exercises
Exercise R0: Download, setup, and verify your WinDbg Preview or WinDbg installation, or Docker Debugging Tools for Windows image
Exercise R1
Exercise R2
Exercise R3
Exercise R4
Exercise R5
Exercise R6
Memory Cell Diagrams
MCD-R1
MCD-R2
MCD-R3
MCD-R5
MCD-R6
Source Code
DataTypes.cpp
Separate.cpp
CPPx64.cpp
Selected Q&A
Annotated Disassembly (JIT .NET Code)
Execution Residue (Unmanaged Space, User)
Fiber Bundle
Historical Information
Injected Symbols
Regular Data
Rough Stack Trace (Unmanaged Space)
Manual Stack Trace Reconstruction