Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

1 vote
1 answer
15 views

Mov instruction from a pointed location at the beginning of a program

4 votes
1 answer
966 views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

0 votes
0 answers
11 views

Calling a function with a variable number of args from a proxy DLL

1 vote
1 answer
39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

4 votes
2 answers
17k views

Why my Resource Hacker doesn't work with some .EXE files

1 vote
0 answers
24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

0 votes
1 answer
66 views

Frida hook multiple processes

3 votes
1 answer
714 views

Why is ASLR not activated though IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE is set?

0 votes
0 answers
13 views

How are system page map entries belonging to process's updated?

1 vote
1 answer
54 views

How to load a PDB file into x64dbg?

13 votes
2 answers
4k views

How do the internals of a Windows update security patch work?

1 vote
1 answer
25 views

What are these Device Object Characteristics / Flags in Windows 10 ntoskrnl!IopParseDevice

0 votes
1 answer
24 views

IDA show xrefs in .pdata and nothing else

1 vote
5 answers
2k views

Advice about first steps on reversing windows kernel

Browse more Questions