Skip to main content
Ange's user avatar
Ange's user avatar
Ange's user avatar
Ange
  • Member for 11 years, 4 months
  • Last seen more than a month ago
37 votes
Accepted

How do you reverse engineer an EXE "compiled" with PyInstaller

37 votes
Accepted

What's 'fs:[0]' doing and how can I execute it step by step?

24 votes
Accepted

Which calling convention to use for EAX/EDX in IDA

21 votes

In what industries is [code] reverse engineering used?

19 votes

What is an "opaque predicate"?

18 votes
Accepted

What are the different types of packers?

17 votes
Accepted

How common are virtualized packers in the wild?

17 votes

Tools to work cooperatively on the same binary

16 votes

What is "overlapping instructions" obfuscation?

16 votes

What different UPX formats exist and how do they differ?

15 votes

Is there any disassembler to rival IDA Pro?

15 votes
Accepted

What are the main features of radare2?

15 votes
Accepted

How to detect a virtualized environment?

15 votes
Accepted

How to prevent "upx -d" on an UPX packed executable?

14 votes
Accepted

What are good Windows anti-debug references?

13 votes

Better explanation of different x86 CALL variations

12 votes

Can I set entry point at code in PE headers?

12 votes
Accepted

Is there any simple open source Windows packer?

11 votes

How can you reliably unpack a Windows driver manually?

10 votes
Accepted

How to prevent use of Resource editors

10 votes

How can one extract the appended data of a Portable Executable?

9 votes

How to prevent automatic padding by IDA?

9 votes
Accepted

How can one extract resources from a New Executable?

9 votes
Accepted

where can I get mIDA

9 votes
Accepted

Deal with obfuscated assembly

9 votes

Reverse engineer an old DOS QBasic executable

8 votes
Accepted

Debugging EXE with TLS

8 votes

How do I acquire SoftICE?

8 votes
Accepted

How can I locate exported functions of an EXE or DLL?

7 votes

How do I add functionality to an existing binary executable?