user avatar
user avatar
user avatar
Ange
  • Member for 9 years, 3 months
  • Last seen more than 7 years ago
37 votes
Accepted

What's 'fs:[0]' doing and how can I execute it step by step?

34 votes
Accepted

How do you reverse engineer an EXE "compiled" with PyInstaller

24 votes
Accepted

Which calling convention to use for EAX/EDX in IDA

21 votes

In what industries is [code] reverse engineering used?

19 votes

What is an "opaque predicate"?

17 votes

Tools to work cooperatively on the same binary

17 votes
Accepted

What are the different types of packers?

17 votes
Accepted

How common are virtualized packers in the wild?

16 votes

What is "overlapping instructions" obfuscation?

16 votes

What different UPX formats exist and how do they differ?

15 votes
Accepted

What are the main features of radare2?

15 votes
Accepted

How to detect a virtualized environment?

14 votes
Accepted

What are good Windows anti-debug references?

14 votes
Accepted

How to prevent "upx -d" on an UPX packed executable?

13 votes

Better explanation of different x86 CALL variations

13 votes

Is there any disassembler to rival IDA Pro?

12 votes
Accepted

Is there any simple open source Windows packer?

12 votes

Can I set entry point at code in PE headers?

11 votes

How can you reliably unpack a Windows driver manually?

10 votes
Accepted

How to prevent use of Resource editors

10 votes

How can one extract the appended data of a Portable Executable?

9 votes

How to prevent automatic padding by IDA?

9 votes
Accepted

How can one extract resources from a New Executable?

9 votes
Accepted

where can I get mIDA

9 votes
Accepted

Deal with obfuscated assembly

8 votes
Accepted

How can I locate exported functions of an EXE or DLL?

8 votes
Accepted

Debugging EXE with TLS

8 votes

How do I acquire SoftICE?

8 votes

Reverse engineer an old DOS QBasic executable

7 votes
Accepted

Working with DOS .COM files