User c00000fd

1

0

votes

0

answers

16

views

Is there an event log to check when WinDbg kernel debugger fails to attach on OS load?

18h ago c00000fd 983

0

votes

0

answers

36

views

How to dump firmware from an SD card?

firmware firmware-analysis flash sd-card

Apr 27 at 18:48 c00000fd 983

1

0

votes

1

answer

146

views

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

windows-10 uwp dnspy

Jul 18 at 10:00 Community♦ 1

3

votes

2

answers

1k

views

Do I need to have IDA Pro to use the BinDiff tool?

bin-diffing tool-bindiff

Apr 6 at 21:59 cblichmann 45

2

votes

1

answer

300

views

__security_cookie for function pointers in Windows 10

ida windows security

Sep 25 at 17:25 Igor Skochinsky♦ 29.7k

0

votes

0

answers

355

views

IDA 7.0 (free) fails to load symbols with message “DWARF: Cannot determine location of DWARF info” during debugging

ida symbols debugging-symbols

Sep 24 at 19:45 c00000fd 983

1

vote

1

answer

143

views

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

windbg breakpoint kernel-mode

Jun 20 '19 at 10:43 blabb 11.7k

0

votes

1

answer

3k

views

How to configure IDA to load .pdb files from Microsoft public symbol server?

ida windbg symbols debugging-symbols

May 24 at 10:03 Community♦ 1

0

votes

1

answer

123

views

How to call WinApi from a breakpoint in IDA Pro?

ida idapython windbg winapi ida-plugin

Jun 14 '19 at 6:32 Igor Skochinsky♦ 29.7k

3

votes

1

answer

88

views

GetWindowLongPtr with undocumented nIndex of -1

windows c winapi

Apr 13 '19 at 7:53 c00000fd 983

1

6

votes

1

answer

2k

views

Can I define custom enum-type to be used in Ghidra as a data type?

windows binary-analysis decompilation static-analysis ghidra

May 17 at 11:04 Community♦ 1

9

votes

2

answers

3k

views

How to load symbols from a symbol server in Ghidra?

disassembly windows binary-analysis decompilation ghidra

Dec 22 at 9:02 Community♦ 1

5

3

votes

2

answers

2k

views

How to disassemble a packed .NET executable?

disassembly .net packers

Mar 23 '19 at 23:41 c00000fd 983

0

votes

2

answers

582

views

.00cfg section in the PE file

pe windows-10 pe32 x86-64

Oct 10 '18 at 20:34 Igor Skochinsky♦ 29.7k

2

votes

1

answer

107

views

How are argc and wargv globals exported from a 64-bit PE file compiled with Visual Studio?

pe injection windows-10 asm x86-64

Oct 12 '18 at 17:22 peter ferrie 4,276

1

3

votes

1

answer

598

views

Question about the limit and base address in x86-64 segmentation model?

x86 windbg x64 kernel-mode segmentation

Jun 29 '18 at 11:34 josh 1,514

2

votes

2

answers

766

views

Can I set more than 4 memory access breakpoints in WinDbg?

debugging memory windbg breakpoint

Jun 25 '18 at 20:32 NirIzr 10.1k

4

votes

0

answers

832

views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

windows debugging windbg kernel-mode

Jun 17 '18 at 3:41 c00000fd 983

1

vote

1

answer

512

views

How do TDBCtrlGrid or TDBCtrlPanel Borland Delphi controls add new text rows?

windows patching delphi

May 31 '18 at 9:51 Johann Aydinbas 1,081

22

28

votes

4

answers

9k

views

How to reverse engineer a Windows 10 UWP app?

ida debugging windows-10

May 9 at 0:09 Paul 103

0

votes

1

answer

247

views

Is it possible to use an xref on memory address in IDA Pro?

ida windows windbg

Dec 2 '17 at 8:34 NirIzr 10.1k

2

3

votes

1

answer

1k

views

How to step into kernel code from a user-mode code using IDA Pro and WinDbg as a debugger?

ida windows windbg kernel-mode

Nov 23 '17 at 9:05 Anton Kukoba 1,560

2

votes

1

answer

379

views

How to adjust function type/call parameters to custom structs in IDA Pro?

ida windows debugging binary-analysis

Feb 28 '17 at 11:27 Community♦ 1

1

5

votes

1

answer

1k

views

How to know which module am I currently in? (EIP/RIP pointer)

ida windows debugging windbg

Jan 4 '17 at 11:52 NirIzr 10.1k

1

4

votes

1

answer

15k

views

How to switch to “Graph View” in IDA Pro while debugging with WinDbg inside a system DLL?

ida disassembly windows debuggers

Dec 29 '16 at 19:59 Martin 398

1

2

votes

1

answer

3k

views

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

ida windows windbg entry-point

Nov 27 '16 at 1:33 Community♦ 1

4

votes

2

answers

414

views

How to break on a clipboard operation in cmd.exe with IDA / WinDbg?

ida windows debugging windbg

Jul 1 '16 at 10:29 blabb 11.7k

2

votes

1

answer

4k

views

How to change address in the hex view in IDA debugger?

ida windows debugging windbg

Jan 28 '16 at 8:55 w s 7,370

3

votes

1

answer

1k

views

What is the command to “go to current statement” in IDA debugger?

ida windows debuggers

Jan 28 '16 at 9:02 ebux 1,661

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

29 Questions

Is there an event log to check when WinDbg kernel debugger fails to attach on OS load?

How to dump firmware from an SD card?

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

Do I need to have IDA Pro to use the BinDiff tool?

__security_cookie for function pointers in Windows 10

IDA 7.0 (free) fails to load symbols with message “DWARF: Cannot determine location of DWARF info” during debugging

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

How to configure IDA to load .pdb files from Microsoft public symbol server?

How to call WinApi from a breakpoint in IDA Pro?

GetWindowLongPtr with undocumented nIndex of -1

Can I define custom enum-type to be used in Ghidra as a data type?

How to load symbols from a symbol server in Ghidra?

How to disassemble a packed .NET executable?

.00cfg section in the PE file

How are argc and wargv globals exported from a 64-bit PE file compiled with Visual Studio?

Question about the limit and base address in x86-64 segmentation model?

Can I set more than 4 memory access breakpoints in WinDbg?

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

How do TDBCtrlGrid or TDBCtrlPanel Borland Delphi controls add new text rows?

How to reverse engineer a Windows 10 UWP app?

Is it possible to use an xref on memory address in IDA Pro?

How to step into kernel code from a user-mode code using IDA Pro and WinDbg as a debugger?

How to adjust function type/call parameters to custom structs in IDA Pro?

How to know which module am I currently in? (EIP/RIP pointer)

How to switch to “Graph View” in IDA Pro while debugging with WinDbg inside a system DLL?

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

How to break on a clipboard operation in cmd.exe with IDA / WinDbg?

How to change address in the hex view in IDA debugger?

What is the command to “go to current statement” in IDA debugger?