Posts Tagged ‘coff’

IDA – Interactive Disassembler Macros Page

This page presents IDA macros I’ve written. Load PE/COFF symbols Introduction Download Installation and use Same script but in a standalone version Load PE/COFF symbolsBACK TO TOC IntroductionBACK TO TOC It appears that when IDA parses symbols of Windows applications compiled with gcc (cygwin), it does not load symbol names properly. I.e. instead of real […]

How debugger works

Table of contents Load PE/COFF symbols Introduction Download Installation and use Same script but in a standalone version Introduction Kernel support ptrace() Starting to debug Debugger-debuggee synchronization A new debugger was born The magic behind INT 3 Breakpoints hands on Single steps Conclusion IntroductionBACK TO TOC In this article, I’d like to tell you how […]