Stack Exchange

peter ferrie

United States

http://pferrie.host22.com

I work at Symantec, developing IPS and exploit detections. I like reverse engineering and retro-computing. I'm active on the Apple II scene.

top accounts reputation activity bookmarks subscriptions
Top Questions
No questions with score of 5 or more
Top Answers
23
Determining if a file is managed code or not
reverseengineering.stackexchange.com

19
What is the purpose of 'mov edi, edi'?
reverseengineering.stackexchange.com

16
INT 2D Anti-Forensic Method
reverseengineering.stackexchange.com

15
How can DLL injection be detected?
reverseengineering.stackexchange.com

14
How did Apple ][ basic programs protect against listing?
retrocomputing.stackexchange.com

12
Strange GDB behavior in OSX
reverseengineering.stackexchange.com

12
What conventions and language extensions did people use to program the 8086 and 80286?
retrocomputing.stackexchange.com

11
Analyzing highly obfuscated JavaScript
reverseengineering.stackexchange.com

11
buffer overflow exploits - Why is the shellcode put before the return address
reverseengineering.stackexchange.com

11
Scream very loudly
codegolf.stackexchange.com

10
in / out instructions - how should I treat this?
reverseengineering.stackexchange.com

10
Did any Mockingboard game use the VIA timers or interrupts?
retrocomputing.stackexchange.com

9
Call to an imported function in a PE file: Why is destination prepended with ds (call ds:func_name)?
reverseengineering.stackexchange.com

9
Commercial C64 software implemented in Forth?
retrocomputing.stackexchange.com

8
How can I prevent Immunity Debugger / OllyDbg from breaking on attach?
reverseengineering.stackexchange.com

8
How do AV vendors create signatures for polymorphic viruses?
reverseengineering.stackexchange.com

8
What impact does noninvasive debugging have?
reverseengineering.stackexchange.com

8
Why is it “safe” to write to ModuleBase.exe+0x100, and possibly other header offsets after PE is mapped to memory?
reverseengineering.stackexchange.com

7
What are the differences between metamorphic, oligomorphic and polymorphic malware?
reverseengineering.stackexchange.com

7
Hook end/middle of function
reverseengineering.stackexchange.com

7
OllyDbg FPU anti-debug
reverseengineering.stackexchange.com

7
Reliable algorithm to extract overlay of a PE
reverseengineering.stackexchange.com

7
What was the first computer malware that could infect Mac systems?
retrocomputing.stackexchange.com

6
Better explanation of different x86 CALL variations
reverseengineering.stackexchange.com

6
Modules that exist in a process address space
reverseengineering.stackexchange.com

6
Prefix REPNE instruction
reverseengineering.stackexchange.com

6
Helloellolloloo Worldorldrldldd
codegolf.stackexchange.com

5
What do the following ARM instructions mean?
reverseengineering.stackexchange.com

5
Is there any simple open source Windows packer?
reverseengineering.stackexchange.com

5
How to force the loading of a DLL in Windows XP at a particular address
reverseengineering.stackexchange.com

1 2