User wisk - Reverse Engineering Stack Exchange

6 votes

Accepted

How do I go about overriding a function internally defined in a binary on Linux?

answered Jan 17, 2019 at 15:26

6 votes

Why Ida pseudo-code translate test as AND?

answered Mar 4, 2019 at 11:56

6 votes

Accepted

Detecting protected processes and critical processes from windows driver

answered Mar 20, 2019 at 18:12

5 votes

Accepted

Reverse engineering a compression algorithm to decompress ASCII text (LZ-variant?)

answered Mar 18, 2019 at 19:41

4 votes

Accepted

Decryption loops

answered Mar 20, 2019 at 22:28

4 votes

Accepted

Is the main function's name in the symbol table of C & C++ programs always 'main'? if not, how to find the name?

answered Apr 16, 2019 at 20:17

4 votes

Enumerating (name, addresses) in PLT of an ELF file without elf.h

answered Dec 27, 2018 at 15:18

4 votes

Accepted

What is __sighandler_t struct and purpose of SIGTRAP signal handler

answered Dec 27, 2018 at 16:27

3 votes

obtaining string value from Unknown elf-x86-64 binary with gdb

answered Nov 20, 2018 at 19:38

3 votes

What's this obfuscation technique?

answered Jan 29, 2019 at 19:17

3 votes

How to load a color theme correctly in IDAPro?

answered Feb 18, 2019 at 0:13

3 votes

Accepted

What is this assembly doing?

answered Mar 10, 2019 at 22:01

2 votes

QEMU fpu mode error when attempting to run MIPS binary

answered Mar 21, 2019 at 21:01

2 votes

Accepted

IDA "unk_XXXXXX" meaning?

answered Apr 11, 2019 at 20:14

2 votes

Accepted

What is the following assembly code doing?

answered Sep 17, 2019 at 8:52

2 votes

Is it possible to change a signed byte to an int in compiled assembly code?

answered Mar 7, 2019 at 23:50

2 votes

why code at .rodata executes

answered Jan 24, 2019 at 21:53

2 votes

How to reverse engineer a Black Box?

answered Jan 2, 2019 at 22:10

2 votes

Simplifying assembly

answered Jan 2, 2019 at 23:32

2 votes

Accepted

What purpose of MOVZX EAX,AX after MOVZX EAX, WORD PTR [RBP+ADDR.SA_DATA]?

answered Dec 22, 2018 at 9:54

2 votes

Writing ELF headers in Radare?

answered Nov 19, 2018 at 23:36

1 vote

dongle check happen before a debugger start debugging

answered Dec 26, 2018 at 7:06

1 vote

What are those instructions doing?

answered Dec 30, 2018 at 14:47

1 vote

IDA Interpreting mov instructions in a unusual way

answered Jan 2, 2019 at 21:55

1 vote

Confused about a firmware binary

answered Jan 5, 2019 at 0:15

1 vote

finding file I/O in IDA Pro (actually IDA free)

answered Jan 28, 2019 at 18:35

1 vote

Accepted

Fork and Waitpid calls in a CTF linux binary

answered Mar 8, 2019 at 0:10

1 vote

Accepted

IDA: apply function parameter as struct pointer

answered Dec 28, 2019 at 2:23

1 vote

What is the obfuscation method utilised in Playdead's 'LIMBO' video game?

answered Jan 17, 2021 at 20:06

1 vote

How can I follow virtual function calls in IDA?

answered Apr 22, 2019 at 13:42

Stack Exchange Network

41 Answers

How do I go about overriding a function internally defined in a binary on Linux?

Why Ida pseudo-code translate test as AND?

Detecting protected processes and critical processes from windows driver

Reverse engineering a compression algorithm to decompress ASCII text (LZ-variant?)

Decryption loops

Is the main function's name in the symbol table of C & C++ programs always 'main'? if not, how to find the name?

Enumerating (name, addresses) in PLT of an ELF file without elf.h

What is __sighandler_t struct and purpose of SIGTRAP signal handler

obtaining string value from Unknown elf-x86-64 binary with gdb

What's this obfuscation technique?

How to load a color theme correctly in IDAPro?

What is this assembly doing?

QEMU fpu mode error when attempting to run MIPS binary

IDA "unk_XXXXXX" meaning?

What is the following assembly code doing?

Is it possible to change a signed byte to an int in compiled assembly code?

why code at .rodata executes

How to reverse engineer a Black Box?

Simplifying assembly

What purpose of MOVZX EAX,AX after MOVZX EAX, WORD PTR [RBP+ADDR.SA_DATA]?

Writing ELF headers in Radare?

dongle check happen before a debugger start debugging

What are those instructions doing?

IDA Interpreting mov instructions in a unusual way

Confused about a firmware binary

finding file I/O in IDA Pro (actually IDA free)

Fork and Waitpid calls in a CTF linux binary

IDA: apply function parameter as struct pointer

What is the obfuscation method utilised in Playdead's 'LIMBO' video game?

How can I follow virtual function calls in IDA?