User DarthGizka

12 votes

Accepted

PE .rdata section contents

answered Jan 2, 2015 at 7:25

8 votes

Is not valid win32 application. Why?

answered Dec 23, 2014 at 15:28

8 votes

Accepted

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

answered Jan 21, 2016 at 15:13

7 votes

Accepted

Coalesce Enums in IDA?

answered Feb 20, 2015 at 14:44

7 votes

Accepted

Register Calling Convention: written in stone, or in mud?

answered Dec 29, 2016 at 9:33

6 votes

Accepted

How can I make IDA start the analysis at imagebase?

answered Jan 30, 2015 at 7:19

6 votes

Accepted

Reversing simple message + checksum pairs (32 bytes)

answered Dec 30, 2014 at 20:08

5 votes

What meaning does that detour have?

answered Dec 27, 2014 at 18:58

5 votes

Accepted

Purpose of NOP immediately after CALL instruction

answered Jan 16, 2015 at 14:05

5 votes

Why is this _DllMainCRTStartup calling convention not as expected?

answered Feb 6, 2016 at 15:11

5 votes

Accepted

How is .rdata used within the executable

answered Apr 27, 2016 at 19:21

4 votes

What does PAIR mean in Hex-Rays decompiler output?

answered Feb 23, 2015 at 12:35

4 votes

Soundness of ARM disassembly

answered Feb 24, 2015 at 13:32

4 votes

Running an optimization pass on an IR

answered Jan 27, 2015 at 6:14

4 votes

Accepted

Identify a decryption scheme

answered Jan 3, 2015 at 15:58

4 votes

What are indicators for hitting the OEP?

answered Dec 23, 2014 at 23:33

4 votes

Protect a key from being recovered by decompilation

answered Jan 1, 2015 at 11:44

3 votes

Accepted

Borland C++ runtime startup

answered Dec 28, 2014 at 10:41

3 votes

Compiling plugins for use with IDA 5.0 free?

answered Jan 23, 2015 at 19:00

3 votes

Accepted

/proc/self/maps equivalent on windows

answered Feb 20, 2015 at 8:26

3 votes

Accepted

Disassembler for batch/automated processing

answered Apr 18, 2016 at 8:51

3 votes

x86 Bytecode Reference

answered Apr 27, 2016 at 19:03

2 votes

vTable size calculation (for MSVC)

answered Apr 12, 2016 at 13:09

2 votes

Accepted

Figuring out the CRC part of a packet

answered Feb 21, 2016 at 15:15

2 votes

Identifying jump table of a switch statement

answered Jan 5, 2016 at 14:41

2 votes

IDAPython for IDAFree 5.0

answered Feb 15, 2015 at 8:14

2 votes

Accepted

Finding responsible part of code writing specific values on stack

answered Feb 16, 2015 at 8:13

2 votes

Accepted

Automatically list of mapped memory locations(and their attributes) of a running process

answered Mar 11, 2015 at 6:28

2 votes

Accepted

Books/tutorial on reversing protocol

answered Dec 27, 2014 at 18:41

2 votes

Accepted

IDA segmentation problem

answered Dec 29, 2014 at 15:08

Stack Exchange Network

39 Answers

PE .rdata section contents

Is not valid win32 application. Why?

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

Coalesce Enums in IDA?

Register Calling Convention: written in stone, or in mud?

How can I make IDA start the analysis at imagebase?

Reversing simple message + checksum pairs (32 bytes)

What meaning does that detour have?

Purpose of NOP immediately after CALL instruction

Why is this _DllMainCRTStartup calling convention not as expected?

How is .rdata used within the executable

What does PAIR mean in Hex-Rays decompiler output?

Soundness of ARM disassembly

Running an optimization pass on an IR

Identify a decryption scheme

What are indicators for hitting the OEP?

Protect a key from being recovered by decompilation

Borland C++ runtime startup

Compiling plugins for use with IDA 5.0 free?

/proc/self/maps equivalent on windows

Disassembler for batch/automated processing

x86 Bytecode Reference

vTable size calculation (for MSVC)

Figuring out the CRC part of a packet

Identifying jump table of a switch statement

IDAPython for IDAFree 5.0

Finding responsible part of code writing specific values on stack

Automatically list of mapped memory locations(and their attributes) of a running process

Books/tutorial on reversing protocol

IDA segmentation problem