User PhoeniX

16 votes

Accepted

What is the difference between static disassembly and dynamic disassembly?

answered Jan 17, 2014 at 21:21

16 votes

How to know in which language/technology program (.exe) is written?

answered Jan 5, 2014 at 9:36

12 votes

Difference between DllMain and DllEntryPoint

answered May 22, 2013 at 20:38

9 votes

Accepted

How to unpack files packed with multiple packers?

answered Jul 28, 2013 at 18:23

9 votes

Is there any disassembler to rival IDA Pro?

answered Sep 11, 2013 at 14:52

9 votes

Accepted

How to detect a debugger using some "time" checking strategies?

answered Jan 19, 2014 at 7:50

8 votes

Accepted

Can a Windows process check if it has been injected by another process?

answered Jan 19, 2014 at 20:18

7 votes

How to unpack(carve) files from a camera firmware .bin file?

answered Jul 9, 2018 at 6:08

6 votes

Use OllyDbg to identify what happens when a button is pressed

answered May 19, 2015 at 7:04

6 votes

How can DLL injection be detected?

answered Jun 16, 2013 at 20:17

5 votes

Malware in virtual machines

answered Jul 22, 2013 at 19:25

5 votes

The debugger could not attach to the selected process

answered Dec 29, 2013 at 21:06

5 votes

Totally unknown file analysis approaches

answered Sep 1, 2013 at 11:42

5 votes

Accepted

How can I change the value of a variable while debugging?

answered Dec 31, 2014 at 8:14

5 votes

Reading Physical Memory

answered Jun 27, 2017 at 17:04

4 votes

Accepted

Creating a patcher for a mac app

answered Jun 29, 2017 at 17:10

4 votes

Accepted

Exports that redirects to other library

answered Aug 6, 2017 at 22:37

4 votes

Find exact dependency tree of a program

answered Jan 5, 2015 at 9:19

4 votes

Accepted

Runtime memory reading with injection

answered Feb 5, 2014 at 12:31

4 votes

Reversing simple hello world in C++

answered Feb 20, 2014 at 8:34

4 votes

API hooking using DLL injection with Python C-Types

answered Aug 31, 2013 at 6:57

4 votes

Accepted

How to dump a DLL not listed using Process Explore and similar tools

answered Jan 1, 2014 at 10:05

4 votes

PDB v2.0 File Format documentation

answered Jul 28, 2013 at 18:31

3 votes

Accepted

Understanding assembly loop

answered Aug 11, 2013 at 20:56

3 votes

How to load a dumped process and several accompanied memory pages in IDA?

answered May 26, 2013 at 19:27

3 votes

Accepted

How can I decompile my (dot)NET .EXE file into its source code

answered Aug 25, 2013 at 17:19

3 votes

How to modify a file from the process context of iexplore.exe?

answered Sep 4, 2013 at 13:22

3 votes

x64dbg how to debug a DLL called from an application

answered Jun 18, 2017 at 5:03

3 votes

C++ Anti Kernel Debugger?

answered Jul 21, 2017 at 16:39

2 votes

Trying to call DLL's functions from my exe

answered Jun 29, 2017 at 18:05

Stack Exchange Network

47 Answers

What is the difference between static disassembly and dynamic disassembly?

How to know in which language/technology program (.exe) is written?

Difference between DllMain and DllEntryPoint

How to unpack files packed with multiple packers?

Is there any disassembler to rival IDA Pro?

How to detect a debugger using some "time" checking strategies?

Can a Windows process check if it has been injected by another process?

How to unpack(carve) files from a camera firmware .bin file?

Use OllyDbg to identify what happens when a button is pressed

How can DLL injection be detected?

Malware in virtual machines

The debugger could not attach to the selected process

Totally unknown file analysis approaches

How can I change the value of a variable while debugging?

Reading Physical Memory

Creating a patcher for a mac app

Exports that redirects to other library

Find exact dependency tree of a program

Runtime memory reading with injection

Reversing simple hello world in C++

API hooking using DLL injection with Python C-Types

How to dump a DLL not listed using Process Explore and similar tools

PDB v2.0 File Format documentation

Understanding assembly loop

How to load a dumped process and several accompanied memory pages in IDA?

How can I decompile my (dot)NET .EXE file into its source code

How to modify a file from the process context of iexplore.exe?

x64dbg how to debug a DLL called from an application

C++ Anti Kernel Debugger?

Trying to call DLL's functions from my exe