Ange

Germany

http://corkami.com

author of Corkami - reverse engineering & visual documentations
arcade games, brainteasers

top accounts reputation activity subscriptions

Tools to work cooperatively on the same binary

tools disassembly static-analysis ida asked Mar 28, 2013 at 9:39

reverseengineering.stackexchange.com

24 votes

What's 'fs:[0]' doing and how can I execute it step by step?

windows x86 seh asked Apr 23, 2013 at 12:31

reverseengineering.stackexchange.com

17 votes

How can you reliably unpack a Windows driver manually?

windows unpacking driver asked Mar 29, 2013 at 20:43

reverseengineering.stackexchange.com

14 votes

Any way to represent the file-memory relation in a Portable Executable (PE) file?

tools pe asked Apr 28, 2013 at 16:30

reverseengineering.stackexchange.com

9 votes

How can one extract the appended data of a Portable Executable?

pe asked May 6, 2013 at 10:59

reverseengineering.stackexchange.com

7 votes

control the output file at binary level

pdf asked Feb 24, 2014 at 21:23

tex.stackexchange.com

7 votes

Which format/tool to store 'basic' informations?

disassembly tools debuggers asked Mar 28, 2013 at 10:05

reverseengineering.stackexchange.com

Top Answers

What's 'fs:[0]' doing and how can I execute it step by step?

reverseengineering.stackexchange.com

How do you reverse engineer an EXE "compiled" with PyInstaller

reverseengineering.stackexchange.com

Which calling convention to use for EAX/EDX in IDA

reverseengineering.stackexchange.com

In what industries is [code] reverse engineering used?

reverseengineering.stackexchange.com

What is an "opaque predicate"?

reverseengineering.stackexchange.com

What are the different types of packers?

reverseengineering.stackexchange.com

Tools to work cooperatively on the same binary

reverseengineering.stackexchange.com

How common are virtualized packers in the wild?

reverseengineering.stackexchange.com

What is "overlapping instructions" obfuscation?

reverseengineering.stackexchange.com

What different UPX formats exist and how do they differ?

reverseengineering.stackexchange.com

How to prevent "upx -d" on an UPX packed executable?

reverseengineering.stackexchange.com

How to detect a virtualized environment?

reverseengineering.stackexchange.com

What are the main features of radare2?

reverseengineering.stackexchange.com

Is there any disassembler to rival IDA?

reverseengineering.stackexchange.com

What are good Windows anti-debug references?

reverseengineering.stackexchange.com

Better explanation of different x86 CALL variations

reverseengineering.stackexchange.com

Can I set entry point at code in PE headers?

reverseengineering.stackexchange.com

Is there any simple open source Windows packer?

reverseengineering.stackexchange.com

How can you reliably unpack a Windows driver manually?

reverseengineering.stackexchange.com

How to prevent use of Resource editors

reverseengineering.stackexchange.com

How can one extract the appended data of a Portable Executable?

reverseengineering.stackexchange.com

Reverse engineer an old DOS QBasic executable

reverseengineering.stackexchange.com

Deal with obfuscated assembly

reverseengineering.stackexchange.com

How to prevent automatic padding by IDA?

reverseengineering.stackexchange.com

How can one extract resources from a New Executable?

reverseengineering.stackexchange.com

where can I get mIDA

reverseengineering.stackexchange.com

How can I locate exported functions of an EXE or DLL?

reverseengineering.stackexchange.com

Debugging EXE with TLS

reverseengineering.stackexchange.com

How do I acquire SoftICE?

reverseengineering.stackexchange.com

How do I add functionality to an existing binary executable?

reverseengineering.stackexchange.com