user avatar
user avatar
user avatar
chentiangemalc
  • Member for 9 years
  • Last seen more than a week ago
6 votes

Is Null in Windows equal to zero?

5 votes
Accepted

Stack-pointer analysis failed

5 votes
Accepted

x64dbg or alternative: Run to selection while storing all ran opcodes

4 votes

Obfuscated VBE malware script analysis

4 votes

Is it possible to download program database (PDB) files of Microsoft Windows binaries without installing any software?

3 votes
Accepted

strtok called on char pointer at 0

3 votes

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

2 votes
Accepted

Attach one debugger to a DotNet application, and a second one to a loaded DLL

2 votes

Catch connection string between exe and mdb

2 votes

Reverse old win32 app to find encryption vulnerability

2 votes

Finding Code Reference String in MS-DOS 16-bit Executable with IDA Pro

2 votes
Accepted

reversing bytcode - trying to work decompiling expression

2 votes

IDA Pro ignores condition in breakpoint

2 votes

Does Microsoft's C++ compiler add functions?

2 votes
Accepted

IDA decompiler syntax: for function int __usercall sub_45BD46@ <eax>(char a1@<bl>, int a2@<esi>, int a3)

2 votes

Why does this hooking function work and never cause a "backwards" jump?

1 vote

Debugging Windows applications on Linux: Hardware watchpoints and backtracing in IDA not working and winedbg hardware watchpoints borderline unusable?

1 vote
Accepted

what is metaData of assemblies and what is used for

1 vote

How do I find where in the code a particular Windows Resource is used?

1 vote

Red Alert 2 Windows 8 DirectDraw compatibility

1 vote

What conditions can create the "Not a Valid Win32 Application" error message upon load?

1 vote

Change manifest file using ResourceHacker CLI

1 vote

Can't figure out a crash in IDA "The memory could not be read -> 00000710 (exc.code c0000005, tid 20612)"

1 vote

I have a 16GB memory dump from Belkasoft RAM Capture, what free tools can I use to analyze it?

1 vote

Calling MessageBoxW x64 confused about pointer

1 vote

Where to get started with reverse engineering a usb video device on Windows?

1 vote

IDA hex != String

1 vote

Identify ldfld reference in .NET when parsing GetILAsByteArray

1 vote

Is this a good way to get past anti-debugging measures?

1 vote

Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?