User DarthGizka

0 votes

How to perform memory address translation on x86 instructions?

answered Dec 31, 2016 at 9:37

7 votes

Accepted

Register Calling Convention: written in stone, or in mud?

answered Dec 29, 2016 at 9:33

5 votes

Accepted

How is .rdata used within the executable

answered Apr 27, 2016 at 19:21

3 votes

x86 Bytecode Reference

answered Apr 27, 2016 at 19:03

1 vote

Accepted

Unexpected memory value MOVed from text segment to register in Windows x86 32-bit program

answered Apr 24, 2016 at 17:43

3 votes

Accepted

Disassembler for batch/automated processing

answered Apr 18, 2016 at 8:51

2 votes

vTable size calculation (for MSVC)

answered Apr 12, 2016 at 13:09

0 votes

Reversing an MFC application: How to find class memory layouts?

answered Apr 9, 2016 at 5:13

2 votes

Accepted

Figuring out the CRC part of a packet

answered Feb 21, 2016 at 15:15

5 votes

Why is this _DllMainCRTStartup calling convention not as expected?

answered Feb 6, 2016 at 15:11

8 votes

Accepted

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

answered Jan 21, 2016 at 15:13

2 votes

Identifying jump table of a switch statement

answered Jan 5, 2016 at 14:41

1 vote

Accepted

Callee's return precalculations

answered Nov 17, 2015 at 10:54

2 votes

Accepted

Automatically list of mapped memory locations(and their attributes) of a running process

answered Mar 11, 2015 at 6:28

4 votes

Soundness of ARM disassembly

answered Feb 24, 2015 at 13:32

4 votes

What does PAIR mean in Hex-Rays decompiler output?

answered Feb 23, 2015 at 12:35

7 votes

Accepted

Coalesce Enums in IDA?

answered Feb 20, 2015 at 14:44

3 votes

Accepted

/proc/self/maps equivalent on windows

answered Feb 20, 2015 at 8:26

2 votes

IDAPython for IDAFree 5.0

answered Feb 15, 2015 at 8:14

2 votes

Accepted

Finding responsible part of code writing specific values on stack

answered Feb 16, 2015 at 8:13

6 votes

Accepted

How can I make IDA start the analysis at imagebase?

answered Jan 30, 2015 at 7:19

4 votes

Running an optimization pass on an IR

answered Jan 27, 2015 at 6:14

3 votes

Compiling plugins for use with IDA 5.0 free?

answered Jan 23, 2015 at 19:00

5 votes

Accepted

Purpose of NOP immediately after CALL instruction

answered Jan 16, 2015 at 14:05

0 votes

IDA segmentation problem

answered Dec 30, 2014 at 10:25

1 vote

Accepted

IDA Pro: How can I set memory breakpoint on field of structure?

answered Jan 7, 2015 at 6:00

1 vote

Is there any way to get a list of function arguments used with IDC?

answered Jan 5, 2015 at 11:29

4 votes

Accepted

Identify a decryption scheme

answered Jan 3, 2015 at 15:58

4 votes

Protect a key from being recovered by decompilation

answered Jan 1, 2015 at 11:44

11 votes

Accepted

PE .rdata section contents

answered Jan 2, 2015 at 7:25

Stack Exchange Network

39 Answers

How to perform memory address translation on x86 instructions?

Register Calling Convention: written in stone, or in mud?

How is .rdata used within the executable

x86 Bytecode Reference

Unexpected memory value MOVed from text segment to register in Windows x86 32-bit program

Disassembler for batch/automated processing

vTable size calculation (for MSVC)

Reversing an MFC application: How to find class memory layouts?

Figuring out the CRC part of a packet

Why is this _DllMainCRTStartup calling convention not as expected?

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

Identifying jump table of a switch statement

Callee's return precalculations

Automatically list of mapped memory locations(and their attributes) of a running process

Soundness of ARM disassembly

What does PAIR mean in Hex-Rays decompiler output?

Coalesce Enums in IDA?

/proc/self/maps equivalent on windows

IDAPython for IDAFree 5.0

Finding responsible part of code writing specific values on stack

How can I make IDA start the analysis at imagebase?

Running an optimization pass on an IR

Compiling plugins for use with IDA 5.0 free?

Purpose of NOP immediately after CALL instruction

IDA segmentation problem

IDA Pro: How can I set memory breakpoint on field of structure?

Is there any way to get a list of function arguments used with IDC?

Identify a decryption scheme

Protect a key from being recovered by decompilation

PE .rdata section contents