DarthGizka's user avatar
DarthGizka's user avatar
DarthGizka's user avatar
DarthGizka
  • Member for 9 years, 3 months
  • Last seen more than a month ago
  • Europe
0 votes

How to perform memory address translation on x86 instructions?

7 votes
Accepted

Register Calling Convention: written in stone, or in mud?

5 votes
Accepted

How is .rdata used within the executable

3 votes

x86 Bytecode Reference

1 vote
Accepted

Unexpected memory value MOVed from text segment to register in Windows x86 32-bit program

3 votes
Accepted

Disassembler for batch/automated processing

2 votes

vTable size calculation (for MSVC)

0 votes

Reversing an MFC application: How to find class memory layouts?

2 votes
Accepted

Figuring out the CRC part of a packet

5 votes

Why is this _DllMainCRTStartup calling convention not as expected?

8 votes
Accepted

I really struggled to figure it out, now can anyone help me reverse engineer this checksum?

2 votes

Identifying jump table of a switch statement

1 vote
Accepted

Callee's return precalculations

2 votes
Accepted

Automatically list of mapped memory locations(and their attributes) of a running process

4 votes

Soundness of ARM disassembly

4 votes

What does __PAIR__ mean in Hex-Rays decompiler output?

7 votes
Accepted

Coalesce Enums in IDA?

3 votes
Accepted

/proc/self/maps equivalent on windows

2 votes
Accepted

Finding responsible part of code writing specific values on stack

2 votes

IDAPython for IDAFree 5.0

6 votes
Accepted

How can I make IDA start the analysis at imagebase?

4 votes

Running an optimization pass on an IR

3 votes

Compiling plugins for use with IDA 5.0 free?

5 votes
Accepted

Purpose of NOP immediately after CALL instruction

1 vote
Accepted

IDA Pro: How can I set memory breakpoint on field of structure?

1 vote

Is there any way to get a list of function arguments used with IDC?

4 votes
Accepted

Identify a decryption scheme

12 votes
Accepted

PE .rdata section contents

4 votes

Protect a key from being recovered by decompilation

6 votes
Accepted

Reversing simple message + checksum pairs (32 bytes)