idapython - Get Xrefs to a stack variable

7yr ⋅

⋅

ADVERTISEMENT

What PE anomalies can crash the Windows Loader or cause a file to not load?

7yr ⋅

⋅

What are the tools to analyze Python (obfuscated) bytecode?

11yr ⋅

⋅

Determining the serial port protocol of a typewriter

11yr ⋅

⋅

How to know which module am I currently in? (EIP/RIP pointer)

7yr ⋅

⋅

How to find matching braces in IDA's decompiled code?

7yr ⋅

⋅

Reverse engineering Earthsiege 2 3D model format

9yr ⋅

⋅

move with sign extension in c code

8yr ⋅

⋅

Window application - Does the debugger stop the window thread?

7yr ⋅

⋅

Finding, hex-editing date timestamp to correct it

8yr ⋅

⋅

Why doesn't the breakpoint get hit in gdb?

7yr ⋅

⋅

Retrieving Objective-C Control Flow?

9yr ⋅

⋅

Generating Snapchat Snaptags (QR Codes)

9yr ⋅

⋅

Any way to represent the file-memory relation in a Portable Executable (PE) file?

11yr ⋅

⋅

Trying to decompress a hello world program using OllyDbg v201

8yr ⋅

⋅

How do I call a statically imported function from a Dll? call dword ptr ds <> not working

8yr ⋅

⋅

Treating independent code as a function in IDA Pro

11yr ⋅

⋅

reverse engineering file containing time series data

8yr ⋅

⋅

ADVERTISEMENT

Information provided by Hex-Rays after @ symbol in variable declarations

10yr ⋅

⋅

Problem while debugging with gdbserver in IDA Pro

10yr ⋅

⋅

Understanding the loop disassembly

9yr ⋅

⋅

How can I identify how this string is being encoded so I can replicate it?

7yr ⋅

⋅

Rename obfuscated names with .NET Reflector?

11yr ⋅

⋅

How do I change a string correctly in IDA Pro?

8yr ⋅

⋅

Invalid INDX entries for $I30 on NTFS harddisk

7yr ⋅

⋅

How to decompile an Objective-C static library (for iOS)?

11yr ⋅

⋅

What do the grey dashed lines in IDA's text view represent?

7yr ⋅

⋅

Visual View in radare2 while debugging

7yr ⋅

⋅

What changes in MS Windows system libraries after restart?

10yr ⋅

⋅

Adding a new PE section for a code cave

7yr ⋅

⋅

Reverse Engineering program written in Python, compiled with freeze

10yr ⋅

⋅

Patching a string using DLL injection and OllyDbg

8yr ⋅

⋅

What is a good and reliable C decompiler that support ELF and SH4 Architecture?

7yr ⋅

⋅

ADVERTISEMENT

Why does `ldd` and `(gdb) info sharedlibrary` show a different library base address?

10yr ⋅

⋅

What is this way of representing color in this unknown image format

10yr ⋅

⋅

Rearrange instructions in an ida database?

10yr ⋅

⋅

Are those code snippets and file paths in a C++ binary some sort of standard debug information?

11yr ⋅

⋅

I need quick correction on this x86 opcode conundrum

11yr ⋅

⋅

Ollydbg terminated while loading dll

9yr ⋅

⋅

IDA failed to construct correct graph

8yr ⋅

⋅

Trying to reverse GPS Watch firmware image with binwalk

10yr ⋅

⋅

Where is the code for a global variable declaration in Ollydbg?

10yr ⋅

⋅

Change block/node color with idapython

9yr ⋅

⋅

Reversing DLink DIR100 firmware

11yr ⋅

⋅

Assembly variable meaning

10yr ⋅

⋅

Where do I find a cheap hardware USB sniffer

8yr ⋅

⋅

IDA Pro: Side effects or disadvantages of Create function

9yr ⋅

⋅

WinDbg fails to connect to IDA Pro debugger server

11yr ⋅

⋅

Unpack Billion 5102 firmware

11yr ⋅

⋅

Dump Flash Memory with SPI from SPANSION FL016KIF

11yr ⋅

⋅

ADVERTISEMENT

Decompiling Modem Firmware (firmware.bin) with unknown results on binwalk

11yr ⋅

⋅

Creating my own custom structure in Ollydbg

8yr ⋅

⋅

Recognizing CLib functions in Ollydbg or IDA

8yr ⋅

⋅

How does disassembler really work?

9yr ⋅

⋅

IDA Pro: How can I set memory breakpoint on field of structure?

10yr ⋅

⋅

Unrecognized procedures in IDA Pro

9yr ⋅

⋅

Chunked function (discontinuous chunks of code comprising a function)

11yr ⋅

⋅

Why IDA Pro generated a j_printf function call?

11yr ⋅

⋅

Reversing a Windows service

9yr ⋅

⋅

Find level data in binaries?

11yr ⋅

⋅

Attaching debugger to process IDA Pro privilege problem

9yr ⋅

⋅

ADVERTISEMENT

Relocation table patching

10yr ⋅

⋅

Visual studio memory allocation reverse engineering

9yr ⋅

⋅

Analyze a created thread after main thread

9yr ⋅

⋅

Any way to fix misinterpreted case jump tables in Ida Pro?

10yr ⋅

⋅

Fixing import table of unpacked DLL with ImpREC : ImpRec throws invalid OEP! error

9yr ⋅

⋅

Strange function in IDA Pro: Only one basic block ending with a jmp sub_xxxxxx (instead of a ret)

9yr ⋅

⋅

Unpacking and dumping using ollydump

9yr ⋅

⋅

Find and step VEH handlers with Olly?

9yr ⋅

⋅

Rename classes and packages in a jar file

10yr ⋅

⋅

What do the first 16 bytes on the stack represent?

10yr ⋅

⋅

RE Compressed backup file,router linux based so is it compresed with zlib?

11yr ⋅

⋅

IDA Pro: Where does newly created structure go to from Pseudocode window?

10yr ⋅

⋅

lldb: break at start of actual code, not entrypoint

10yr ⋅

⋅

Documenting reversed application

11yr ⋅

⋅

R.java to xml file

10yr ⋅

⋅

ADVERTISEMENT

Ollydbg and IDA Pro unable to attach to process

10yr ⋅

⋅

Safecom TA-810 protocol (having trouble with the CRC)

10yr ⋅

⋅

Correct IDA PRO Control Flow Graph

10yr ⋅

⋅

Missing addresses from relocation section of ASLR enabled PE binary

10yr ⋅

⋅

Why jump to unconditional jumps?

10yr ⋅

⋅

How should I reach my shellcode?

10yr ⋅

⋅

List arrays (de-reference pointers) in Ollydbg

8yr ⋅

⋅

Reverse engineering car stereo panel

8yr ⋅

⋅

gdb setting fs register on Linux

10yr ⋅

⋅

Extracting data from a Program for external use

10yr ⋅

⋅

Why IDA Pro generate define-lack code like this?

10yr ⋅

⋅

How to interpret entries from Exports tab in ProcessHacker

10yr ⋅

⋅

Extract dlls in Import Directory & runtime tool

11yr ⋅

⋅

Radare2 windows unwanted lines during debugging

9yr ⋅

⋅

Code-Cave Assembly Patching Issue in x64_dbg

9yr ⋅

⋅

Debugging Win32.Upatre - why does Ollydbg fail to analyze this?

9yr ⋅

⋅

ADVERTISEMENT

Reversing a Mac OS X binary that appears to be non encrypted, backtrace just shows mach_msg_trap ()

11yr ⋅

⋅

OllyDbg 2.01 Run Trace Skip selection option

9yr ⋅

⋅

Why does Olly 2.01 fail to break at the module EP?

9yr ⋅

⋅

What is the command to go to current statement in IDA debugger?

8yr ⋅

⋅