Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

1 vote
1 answer
15 views

Mov instruction from a pointed location at the beginning of a program

0 votes
0 answers
22 views

What does the code do?

1 vote
1 answer
39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

-1 votes
0 answers
244 views

What does this lowlevel function do?

2 votes
2 answers
143 views

Changing value of parameter with gdb

11 votes
2 answers
3k views

Encrypted Mach-o binary cannot be disassembled/traced with GDB

4 votes
4 answers
2k views

IDA: Generic approach to determine if an instruction reads from, or writes to, memory?

0 votes
1 answer
54 views

x64dbg: is there a way to save the complete disassembly of a module to a text file?

2 votes
1 answer
346 views

How to make IDA processor for file format with tree structure

0 votes
2 answers
55 views

How to set a variable as "pointer to struct" in IDA in order to automatically replace offsets by field names?

0 votes
0 answers
41 views

Normal artifact or something else?

1 vote
1 answer
25 views

What are these Device Object Characteristics / Flags in Windows 10 ntoskrnl!IopParseDevice

2 votes
1 answer
182 views

What is actually loaded here and different hexdump outputs on util-linux hexdump and on cutter and ghidra's hexdump

0 votes
0 answers
61 views

ADD right before CMP?

Browse more Questions