DarthGizka's user avatar
DarthGizka's user avatar
DarthGizka's user avatar
DarthGizka
  • Member for 8 years, 2 months
  • Last seen more than a month ago
  • Europe
11 votes
Accepted

PE .rdata section contents

8 votes
Accepted

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

7 votes
Accepted

Coalesce Enums in IDA?

7 votes

Is not valid win32 application. Why?

7 votes
Accepted

Register Calling Convention: written in stone, or in mud?

6 votes
Accepted

Reversing simple message + checksum pairs (32 bytes)

6 votes
Accepted

How can I make IDA start the analysis at imagebase?

5 votes

Why is this _DllMainCRTStartup calling convention not as expected?

5 votes

What meaning does that detour have?

5 votes
Accepted

Purpose of NOP immediately after CALL instruction

5 votes
Accepted

How is .rdata used within the executable

4 votes

Running an optimization pass on an IR

4 votes
Accepted

Identify a decryption scheme

4 votes

What are indicators for hitting the OEP?

4 votes

Protect a key from being recovered by decompilation

4 votes

What does __PAIR__ mean in Hex-Rays decompiler output?

4 votes

Soundness of ARM disassembly

3 votes
Accepted

/proc/self/maps equivalent on windows

3 votes
Accepted

Disassembler for batch/automated processing

3 votes

x86 Bytecode Reference

3 votes
Accepted

Borland C++ runtime startup

3 votes

Compiling plugins for use with IDA 5.0 free?

2 votes
Accepted

Books/tutorial on reversing protocol

2 votes
Accepted

IDA segmentation problem

2 votes

vTable size calculation (for MSVC)

2 votes
Accepted

Figuring out the CRC part of a packet

2 votes

Identifying jump table of a switch statement

2 votes

IDAPython for IDAFree 5.0

2 votes
Accepted

Finding responsible part of code writing specific values on stack

2 votes
Accepted

Automatically list of mapped memory locations(and their attributes) of a running process