Reverse Engineering Stack Exchange

1 vote

1 answer

15 views

Mov instruction from a pointed location at the beginning of a program

disassembly windows assembly

0xC0000022L♦

10.5k

answered 7 hours ago

4 votes

1 answer

966 views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

windows debugging windbg kernel-mode

CommunityBot

1

modified May 21 at 2:08

0 votes

0 answers

11 views

Calling a function with a variable number of args from a proxy DLL

windows dll functions

mindoverflow

129

asked May 20 at 20:24

1 vote

1 answer

39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

disassembly windows assembly objdump

0xC0000022L♦

10.5k

modified May 20 at 10:03

4 votes

2 answers

17k views

Why my Resource Hacker doesn't work with some .EXE files

windows unpacking executable decompiler

Mick

7,322

modified May 19 at 17:20

1 vote

0 answers

24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

ida windows dll pointer msvc

Curious User

11

modified May 17 at 11:02

0 votes

1 answer

66 views

Frida hook multiple processes

windows python frida

BadSugar

78

modified May 17 at 10:41

3 votes

1 answer

714 views

Why is ASLR not activated though IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE is set?

windows pe windows-8 delphi processhacker

CommunityBot

1

modified May 17 at 6:01

0 votes

0 answers

13 views

How are system page map entries belonging to process's updated?

windows virtual-memory

Real Name

1

asked May 10 at 6:10

1 vote

1 answer

54 views

How to load a PDB file into x64dbg?

windows x64dbg symbols debugging-symbols pdb

Paweł Łukasik

4,512

answered May 7 at 6:26

13 votes

2 answers

4k views

How do the internals of a Windows update security patch work?

windows patching binary

Seva Alekseyev

111

modified May 4 at 15:21

1 vote

1 answer

25 views

What are these Device Object Characteristics / Flags in Windows 10 ntoskrnl!IopParseDevice

disassembly windows kernel

0xC0000022L♦

10.5k

answered Apr 27 at 8:39

0 votes

1 answer

24 views

IDA show xrefs in .pdata and nothing else

ida windows arm arm64 uefi

Igor Skochinsky♦

34.6k

answered Apr 26 at 23:49

1 vote

5 answers

2k views

Advice about first steps on reversing windows kernel

windows kernel-mode

MarianD

1,036

modified Apr 26 at 17:06

Stack Exchange Network

current community

your communities

more stack exchange communities

Explore our Questions

Mov instruction from a pointed location at the beginning of a program

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

Calling a function with a variable number of args from a proxy DLL

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

Why my Resource Hacker doesn't work with some .EXE files

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

Frida hook multiple processes

Why is ASLR not activated though IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE is set?

How are system page map entries belonging to process's updated?

How to load a PDB file into x64dbg?

How do the internals of a Windows update security patch work?

What are these Device Object Characteristics / Flags in Windows 10 ntoskrnl!IopParseDevice

IDA show xrefs in .pdata and nothing else

Advice about first steps on reversing windows kernel

Hot Network Questions