All Questions
5 questions
1
vote
1
answer
247
views
How to deal with code that change its address among different execution
I think that this is a basic need of every reverser so this question may have been asked in other places but really, I'm unable to find an answer. Maybe I'm asking the wrong question.
So, supposing I ...
2
votes
1
answer
3k
views
Does PeID signatures work with 64-Bit Portable Executable (EXE) files?
Can the signatures from PeID be used on 64-Bit Portable Executable (EXE) files?
PeID does not support 64-Bit files but I can use the signatures in another application with 64-Bit support.
My main ...
- 51
3
votes
3
answers
4k
views
Detecting packed 64-bit Windows Portable Executable (EXE) files
What programs are the most useful to detect if a 64-bit PE file has been packed (main focus is on EXE files).
I am not interested in the packer used I would just like to know if the file is packed or ...
- 51
12
votes
5
answers
29k
views
Are there any OllyDbg anti-debug/anti-anti-debug plugins what work with Windows 7 / NT 6.x?
Title says it all. I'm trying to RE a video game which is packed with Themida and the second I attach OllyDbg it crashes. When on XP, I can use StrongOD and PhantOm but neither of these work properly ...
- 223
18
votes
5
answers
8k
views
Is there any simple open source Windows packer?
There are great questions here about different types of packers and that is very interesting to me. I would like to try my hand at reverse engineering one. Since I am very new to this, I would like ...
- 183