c00000fd's user avatar
c00000fd's user avatar
c00000fd's user avatar
c00000fd
  • Member for 8 years, 2 months
  • Last seen this week
34 votes
4 answers
17k views

How to reverse engineer a Windows 10 UWP app?

11 votes
2 answers
4k views

Why did Intel chose 90h machine code for their NOP instruction instead of a 0?

10 votes
2 answers
8k views

How to load symbols from a symbol server in Ghidra?

10 votes
1 answer
5k views

Can I define custom enum-type to be used in Ghidra as a data type?

8 votes
2 answers
8k views

Do I need to have IDA Pro to use the BinDiff tool?

6 votes
1 answer
1k views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

6 votes
1 answer
28k views

How to switch to "Graph View" in IDA Pro while debugging with WinDbg inside a system DLL?

6 votes
1 answer
2k views

How to know which module am I currently in? (EIP/RIP pointer)

5 votes
1 answer
2k views

What is the command to "go to current statement" in IDA debugger?

5 votes
1 answer
6k views

How to change address in the hex view in IDA debugger?

5 votes
1 answer
3k views

__security_cookie for function pointers in Windows 10

5 votes
1 answer
690 views

How to use dnSpyEx or some other .NET debugger to attach to a .NET process started with a process-hollowing technique?

4 votes
2 answers
8k views

How to disassemble a packed .NET executable?

4 votes
2 answers
4k views

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

4 votes
1 answer
1k views

Question about the limit and base address in x86-64 segmentation model?

4 votes
2 answers
565 views

How to break on a clipboard operation in cmd.exe with IDA / WinDbg?

3 votes
1 answer
2k views

How to step into kernel code from a user-mode code using IDA Pro and WinDbg as a debugger?

3 votes
1 answer
253 views

GetWindowLongPtr with undocumented nIndex of -1

3 votes
1 answer
14k views

How to configure IDA to load .pdb files from Microsoft public symbol server?

3 votes
0 answers
503 views

How to do live debugging of ARM64 binaries on macOS with M1/M2 chips?

2 votes
1 answer
219 views

How are __argc and __wargv globals exported from a 64-bit PE file compiled with Visual Studio?

2 votes
2 answers
2k views

.00cfg section in the PE file

2 votes
2 answers
2k views

Can I set more than 4 memory access breakpoints in WinDbg?

2 votes
1 answer
846 views

How to adjust function type/call parameters to custom structs in IDA Pro?

2 votes
1 answer
6k views

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

1 vote
1 answer
537 views

Is it possible to use an xref on memory address in IDA Pro?

1 vote
1 answer
1k views

How do TDBCtrlGrid or TDBCtrlPanel Borland Delphi controls add new text rows?

1 vote
1 answer
679 views

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

1 vote
2 answers
2k views

IDA 7.0 (free) fails to load symbols with message "DWARF: Cannot determine location of DWARF info" during debugging

1 vote
2 answers
2k views

How to attach and step through a running .NET process?