User c00000fd

1

0

votes

0

answers

32

views

Is there an event log to check when WinDbg kernel debugger fails to attach on OS load?

Aug 7 at 3:21 c00000fd 1,075

0

votes

0

answers

45

views

How to dump firmware from an SD card?

firmware firmware-analysis flash

Apr 27 at 18:48 c00000fd 1,075

1

0

votes

2

answers

265

views

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

windows-10 dnspy

Nov 17 at 5:43 chentiangemalc 731

2

5

votes

2

answers

2k

views

Do I need to have IDA Pro to use the BinDiff tool?

bin-diffing tool-bindiff

Apr 6 at 21:59 cblichmann 70

2

votes

1

answer

460

views

__security_cookie for function pointers in Windows 10

ida windows security

Sep 25 '19 at 17:25 Igor Skochinsky♦ 30.8k

0

votes

0

answers

507

views

IDA 7.0 (free) fails to load symbols with message “DWARF: Cannot determine location of DWARF info” during debugging

ida symbols debugging-symbols

Sep 24 '19 at 19:45 c00000fd 1,075

1

vote

1

answer

168

views

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

windbg breakpoint kernel-mode

Jun 20 '19 at 10:43 blabb 12.5k

0

votes

1

answer

4k

views

How to configure IDA to load .pdb files from Microsoft public symbol server?

ida windbg symbols debugging-symbols

May 24 at 10:03 Community♦ 1

0

votes

1

answer

140

views

How to call WinApi from a breakpoint in IDA Pro?

ida idapython windbg winapi ida-plugin

Jun 14 '19 at 6:32 Igor Skochinsky♦ 30.8k

3

votes

1

answer

102

views

GetWindowLongPtr with undocumented nIndex of -1

windows c winapi

Apr 13 '19 at 7:53 c00000fd 1,075

1

8

votes

1

answer

2k

views

Can I define custom enum-type to be used in Ghidra as a data type?

windows binary-analysis decompilation static-analysis ghidra

May 17 at 11:04 Community♦ 1

9

votes

2

answers

4k

views

How to load symbols from a symbol server in Ghidra?

disassembly windows binary-analysis decompilation ghidra

Dec 22 '19 at 9:02 Community♦ 1

5

3

votes

2

answers

2k

views

How to disassemble a packed .NET executable?

disassembly .net packers

Mar 23 '19 at 23:41 c00000fd 1,075

0

votes

2

answers

737

views

.00cfg section in the PE file

pe windows-10 pe32 x86-64

Oct 10 '18 at 20:34 Igor Skochinsky♦ 30.8k

2

votes

1

answer

120

views

How are argc and wargv globals exported from a 64-bit PE file compiled with Visual Studio?

pe injection windows-10 asm x86-64

Oct 12 '18 at 17:22 peter ferrie 4,316

1

3

votes

1

answer

649

views

Question about the limit and base address in x86-64 segmentation model?

x86 windbg x64 kernel-mode segmentation

Jun 29 '18 at 11:34 josh 1,664

2

votes

2

answers

853

views

Can I set more than 4 memory access breakpoints in WinDbg?

debugging memory windbg breakpoint

Jun 25 '18 at 20:32 NirIzr 10.4k

4

votes

0

answers

849

views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

windows debugging windbg kernel-mode

Jun 17 '18 at 3:41 c00000fd 1,075

1

vote

1

answer

571

views

How do TDBCtrlGrid or TDBCtrlPanel Borland Delphi controls add new text rows?

windows patching delphi

May 31 '18 at 9:51 Johann Aydinbas 1,111

23

29

votes

4

answers

10k

views

How to reverse engineer a Windows 10 UWP app?

ida debugging windows-10

May 9 at 0:09 Paul 113

1

vote

1

answer

272

views

Is it possible to use an xref on memory address in IDA Pro?

ida windows windbg

Dec 2 '17 at 8:34 NirIzr 10.4k

2

3

votes

1

answer

1k

views

How to step into kernel code from a user-mode code using IDA Pro and WinDbg as a debugger?

ida windows windbg kernel-mode

Nov 23 '17 at 9:05 Anton Kukoba 1,598

2

votes

1

answer

405

views

How to adjust function type/call parameters to custom structs in IDA Pro?

ida windows debugging binary-analysis

Feb 28 '17 at 11:27 Community♦ 1

1

5

votes

1

answer

1k

views

How to know which module am I currently in? (EIP/RIP pointer)

ida windows debugging windbg

Jan 4 '17 at 11:52 NirIzr 10.4k

1

4

votes

1

answer

17k

views

How to switch to “Graph View” in IDA Pro while debugging with WinDbg inside a system DLL?

ida disassembly windows debuggers

Dec 29 '16 at 19:59 Martin 398

1

2

votes

1

answer

4k

views

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

ida windows windbg entry-point

Nov 27 '16 at 1:33 Community♦ 1

4

votes

2

answers

423

views

How to break on a clipboard operation in cmd.exe with IDA / WinDbg?

ida windows debugging windbg

Jul 1 '16 at 10:29 blabb 12.5k

3

votes

1

answer

4k

views

How to change address in the hex view in IDA debugger?

ida windows debugging windbg

Jan 28 '16 at 8:55 w s 7,515

4

votes

1

answer

1k

views

What is the command to “go to current statement” in IDA debugger?

ida windows debuggers

Jan 28 '16 at 9:02 ebux 1,711

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

29 Questions

Is there an event log to check when WinDbg kernel debugger fails to attach on OS load?

How to dump firmware from an SD card?

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

Do I need to have IDA Pro to use the BinDiff tool?

__security_cookie for function pointers in Windows 10

IDA 7.0 (free) fails to load symbols with message “DWARF: Cannot determine location of DWARF info” during debugging

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

How to configure IDA to load .pdb files from Microsoft public symbol server?

How to call WinApi from a breakpoint in IDA Pro?

GetWindowLongPtr with undocumented nIndex of -1

Can I define custom enum-type to be used in Ghidra as a data type?

How to load symbols from a symbol server in Ghidra?

How to disassemble a packed .NET executable?

.00cfg section in the PE file

How are argc and wargv globals exported from a 64-bit PE file compiled with Visual Studio?

Question about the limit and base address in x86-64 segmentation model?

Can I set more than 4 memory access breakpoints in WinDbg?

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

How do TDBCtrlGrid or TDBCtrlPanel Borland Delphi controls add new text rows?

How to reverse engineer a Windows 10 UWP app?

Is it possible to use an xref on memory address in IDA Pro?

How to step into kernel code from a user-mode code using IDA Pro and WinDbg as a debugger?

How to adjust function type/call parameters to custom structs in IDA Pro?

How to know which module am I currently in? (EIP/RIP pointer)

How to switch to “Graph View” in IDA Pro while debugging with WinDbg inside a system DLL?

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

How to break on a clipboard operation in cmd.exe with IDA / WinDbg?

How to change address in the hex view in IDA debugger?

What is the command to “go to current statement” in IDA debugger?