All Questions

Tagged with
Filter by
Sorted by
Tagged with
0
votes
0answers
40 views

Which API function is responsible for input strings?

I'm trying to disassemble an executable file with IDA Pro. This program basically does some calculations based on the values one writes into a text box, then displays it in another text box. To find ...
-3
votes
1answer
211 views

Change value of an IF condition found in IDA

so I have the .idb file of an executeable I want to modify. In the IDB file, I found this code And I basically want to change 4111006 to 1006 in that IF condition. however, when I press TAB to go to ...
-1
votes
1answer
64 views

How to use Python while debugging in IDA

I'm debugging an .exe file in IDA. At a specific point during debugging, I want the Python code to automatically take the data in *(eax+8) and encrypt it with that module and print the result to file ...
3
votes
2answers
174 views

Why doesn't this retn instruction return from the function?

I disassembled an exe file on Windows with IDA and saw this function prologue: I see that when the retn executes instead of returning it jumps to sub_1314cba4. Why doesn't the retn instruction ...
2
votes
1answer
557 views

IDA PRO: Monitor variable during execution

I'm new with IDA. Say I have a variable which is created in some function and it is argument to other functions. My question is how to monitor this variable? In monitor I mean is there any way to set ...
0
votes
1answer
871 views

Ollydbg: Function name list like in IDA

I'm new with reverse engineering and especially with Ollydbg, I have little experience with IDA and currently trying to get used to Olly. My questions are: 1.Is there any window which would show ...
2
votes
2answers
2k views

Why does program fail to run under several debuggers?

To lay out the obvious for a start, I am a beginner in the Reverse Engineering area when it comes to Computer Science. I have come across a program which I wanted to reverse engineer for myself to see ...
1
vote
1answer
2k views

How is .rdata used within the executable

While reverse engineering an executable, I came across specific strings of interest which where in the .rdata section: How are these constant strings used by the underlying assembly code? Are ...
0
votes
1answer
2k views

When anaylsing a PE (.exe) in IDA Pro how can I jump to the 'user code' section and skip all the header/libary code?

Suppose I'm dissembling helloworld.exe (a program that outputs the string "hello world") and want to see the user code or code section for the file in IDA Pro. In what address would the user code be ...