User chentiangemalc - Reverse Engineering Stack Exchange

chentiangemalc

Member for 10 years, 3 months
Last seen more than a week ago

chentiangemalc.wordpress.com
Melbourne, Australia

Network profile

38 Answers

Score Activity Newest

7 votes

Is it possible to download program database (PDB) files of Microsoft Windows binaries without installing any software?

answered Nov 25, 2020 at 20:44

6 votes

Is Null in Windows equal to zero?

answered Dec 3, 2020 at 23:01

5 votes

Accepted

Stack-pointer analysis failed

answered Jan 15, 2020 at 1:54

5 votes

Accepted

x64dbg or alternative: Run to selection while storing all ran opcodes

answered Nov 18, 2020 at 20:45

4 votes

Obfuscated VBE malware script analysis

answered Jan 21, 2020 at 0:23

3 votes

Accepted

strtok called on char pointer at 0

answered Jan 21, 2020 at 5:48

3 votes

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

answered Nov 17, 2020 at 5:10

2 votes

Accepted

Attach one debugger to a DotNet application, and a second one to a loaded DLL

answered Jan 15, 2020 at 22:56

2 votes

Catch connection string between exe and mdb

answered Jan 16, 2020 at 12:33

2 votes

Reverse old win32 app to find encryption vulnerability

answered Jan 22, 2020 at 12:15

2 votes

Finding Code Reference String in MS-DOS 16-bit Executable with IDA Pro

answered Nov 13, 2020 at 20:35

2 votes

Accepted

reversing bytcode - trying to work decompiling expression

answered Jun 29, 2015 at 8:08

2 votes

IDA Pro ignores condition in breakpoint

answered Jan 9, 2020 at 6:59

2 votes

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

answered Aug 24, 2021 at 1:40

2 votes

Does Microsoft's C++ compiler add functions?

answered Jan 11, 2022 at 0:42

2 votes

Accepted

IDA decompiler syntax: for function int __usercall sub_45BD46@ <eax>(char a1@<bl>, int a2@<esi>, int a3)

answered Jan 13, 2022 at 0:52

2 votes

Why does this hooking function work and never cause a "backwards" jump?

answered Jan 13, 2022 at 6:16

1 vote

Debugging Windows applications on Linux: Hardware watchpoints and backtracing in IDA not working and winedbg hardware watchpoints borderline unusable?

answered Apr 26, 2022 at 23:32

1 vote

Accepted

what is metaData of assemblies and what is used for

answered Jan 12, 2022 at 23:24

1 vote

How do I find where in the code a particular Windows Resource is used?

answered Jan 13, 2022 at 3:32

1 vote

Red Alert 2 Windows 8 DirectDraw compatibility

answered Nov 29, 2020 at 23:13

1 vote

What conditions can create the "Not a Valid Win32 Application" error message upon load?

answered Nov 29, 2020 at 23:36

1 vote

Change manifest file using ResourceHacker CLI

answered Aug 17, 2021 at 6:39

1 vote

Can't figure out a crash in IDA "The memory could not be read -> 00000710 (exc.code c0000005, tid 20612)"

answered Aug 17, 2021 at 6:47

1 vote

I have a 16GB memory dump from Belkasoft RAM Capture, what free tools can I use to analyze it?

answered Nov 25, 2020 at 1:57

1 vote

Calling MessageBoxW x64 confused about pointer

answered Nov 25, 2020 at 22:52

1 vote

Where to get started with reverse engineering a usb video device on Windows?

answered Jan 4, 2021 at 0:06

1 vote

IDA hex != String

answered Jan 5, 2021 at 0:19

1 vote

Identify ldfld reference in .NET when parsing GetILAsByteArray

answered Feb 21, 2019 at 0:38

1 vote

Is this a good way to get past anti-debugging measures?

answered Jan 8, 2020 at 6:13

1