User PhoeniX - Reverse Engineering Stack Exchange

PhoeniX

Member for 10 years, 6 months
Last seen more than 4 years ago

14 Questions

Score Activity Newest Views

18 votes

3 answers

5k views

What are nullsub_ functions in IDA?

asked Jul 6, 2013 at 10:24

10 votes

2 answers

1k views

Binary instrumentation with Python

asked Jul 22, 2013 at 21:45

8 votes

1 answer

3k views

What are general guide lines for reversing COM objects

asked Jul 23, 2013 at 18:02

8 votes

2 answers

2k views

How to Attach debugger or start analysis of process that is debugging itself?

asked Sep 29, 2013 at 15:29

7 votes

4 answers

2k views

Program with no dependencies

asked May 24, 2013 at 20:33

5 votes

2 answers

4k views

How to load a dumped process and several accompanied memory pages in IDA?

asked May 25, 2013 at 21:04

5 votes

1 answer

2k views

Prevent malware from deleting itself during installation on Windows x64

asked Jun 16, 2013 at 20:24

5 votes

3 answers

338 views

Tool for checking if there is any patch in the loaded module

asked Jun 17, 2013 at 8:23

5 votes

1 answer

303 views

Reverse engineering in pairs - is it possible?

asked Dec 12, 2013 at 8:11

3 votes

1 answer

2k views

Transfer function names from one IDA DB to another

asked Mar 6, 2014 at 12:44

3 votes

2 answers

444 views

How to get all the references to function using PyDBG?

asked Jun 3, 2013 at 14:38

2 votes

5 answers

1k views

Question regarding sections in PE image

asked Jun 27, 2013 at 20:05

2 votes

0 answers

84 views

Opinions and suggestions regarding malware sandboxes [closed]

asked May 24, 2013 at 8:54

1 vote

1 answer

427 views

How to create empty IDB file with IDApython?

asked Jan 29, 2016 at 15:45