Skip to main content
blabb's user avatar
blabb's user avatar
blabb's user avatar
blabb
  • Member for 10 years, 6 months
  • Last seen this week
16 votes
Accepted

concat22 in ghidra decompiler

14 votes
Accepted

how to reverse DeviceIoControl?

13 votes

How to prevent "upx -d" on an UPX packed executable?

11 votes

How can I set a breakpoint for a button click?

10 votes
Accepted

How does this EB F2 x86 instruction work?

9 votes

What is the meaning of IDA Pro's Local Variable Syntax?

9 votes

Reversing self-modifying code

8 votes

In IDA, is there a way to add a reference to a dynamically imported function into the Imports tab?

8 votes
Accepted

How to find how global variables defined in binary

8 votes

WinDbg Debugging without symbols

8 votes
Accepted

What are the .cpp files in IDA disassembly

8 votes
Accepted

Find main() function of executable with windbg

8 votes

How are the segment registers (fs, gs, cs, ss, ds, es) used in Linux?

8 votes

What is the difference between MOV and LEA in example?

8 votes

Seeking for explanation about “ in_FS_OFFSET ” and “ __stack_chk_fail() ”

8 votes

Purpose of test eax,eax after a strcmp

8 votes
Accepted

Is there a way to name a flag for a bit field in Ghidra?

7 votes

Is it possible for a .exe PE file to do something without any imports at all?

7 votes
Accepted

How to find obfuscated hidden command line parameters?

7 votes
Accepted

Importing list of functions and addresses into WinDbg

7 votes
Accepted

Find reference to string in radare2

6 votes
Accepted

How to find WndProc using x64dbg?

6 votes
Accepted

Finding execution flow/calls to functions?

6 votes
Accepted

How to disassemble an entire function in Windbg?

6 votes

Confusing syntax found in malware

6 votes
Accepted

Are some special chars(<>) in function names not supported by windbg/cdb?

6 votes

WinDbg: Setting a breakpoint on every EXPORTED function of a module

5 votes
Accepted

x86-64 CALL opcode + disassembly

5 votes

What is an entropy graph

5 votes
Accepted

VADs with RWX permission in winlogon and csrss processes

1
2 3 4 5
21