ida | Introduction to Data Analysis , using R | Data Visualization library

I have the following structure in PostgreSQL:

I started with reverse engineering and using the IDA disassembler tool. I wrote some programs in C++, made an .exe and reversed it in IDA to "hack" my own programs.

Now I wanted to do the same with a python program. As a start a made this simple program:

I have two dataframes:

Some disassemblers like IDA or Ghidra take an exe and output the instructions. Other disassemblers require the user to parse the PE header, isolate binary for the instructions and pass that in.

I'm trying to learn to use the Capstone Python API, but the .py documentation only ever shows a buffer of isolated instructions being passed, like so:

I have followed below steps to install and run pktgen-dpdk. But I am getting "Illegal instruction" error and application stops.

System Information (Centos 8)

I wrote a shellcode in C that pops a messagebox. I have compiled two variations of it. One says "Hello World!" (shellcodeA) and the other one says "Goodbye World!" (shellcodeB).

Please, correct me if I'm wrong anywhere...

What I want to do: I want to find a certain function inside some DLL, which is being loaded by Windows service, during remote kernel debugging via WinDBG. (WinDBG plugin in IDA + VirtualKD + VMWare VM with Windows 10 x64). I need to do it kernel mode, because I need to switch the processes and see all the memory

What I did:

1. I found an offset to the function in IDA (unfortunately, the DLL doesn't have debug symbols).
2. Connected to the VM in Kernel Mode.
3. Found the process of the service by iterating over the svchost-processes (!process 0 0 svchost.exe) and looking at CommandLine field in their PEBs (C:\Windows\system32\svchost.exe -k ...).
4. Switched to the process (.process /i ; g), refreshed the modules list (.reload)
5. Found the target DLL in user modules list and got its base address.

The problem: The DLL loaded into memory doesn't fully correspond to the original DLL-file, so I can't find the function there. When I jump to the address like + there is nothing there and around. But I found some other functions using this method, so it looks correct. Then I tried to find the sequence of bytes belonging to the function according to the original DLL-file and also got nothing. The function uses strings, which I found in data section, but there are no xrefs to them. Looks like that function has completely disappeared...

What am I doing wrong?

P.S.: Also I dumped memory from to and compared it with the original file. Besides different jump addresses and offsets, sometimes the assembler code is completely missed...

I'm doing some remote kernel debugging with IDA + WinDBG plugin and I want to set a breakpoint in some function inside the DLL, which I found while disassembling it in IDA. I switched to the process, which loads the target DLL, but unfortunately I found out that the DLL in memory is partly missed including my function.

Examples for proof are below. Here IDA recognized the function sub_180001FC8, but in WinDBG this disassembly breaks off on address 0x7fff3d131fff.

Screenshot 1 - DLL loaded into memory in live kernel debugging

Screenshot 2 - same DLL opened in IDA "statically"

What's wrong and how to recover missed parts?

I make a double word data in .data section, and the data is an address which points to a string, the string has a name created by IDA itself, I want to convert the data to strings name, like this:

so, how can I do this in python script?