User Remko - Reverse Engineering Stack Exchange

30 votes

Accepted

What is "overlapping instructions" obfuscation?

answered Apr 3, 2013 at 8:25

25 votes

Accepted

Checking if an .exe is actually a .jar wrapped in an .exe

answered Mar 20, 2013 at 12:12

24 votes

Is reverse engineering and using parts of a closed source application legal?

answered Mar 20, 2013 at 13:29

15 votes

How to prevent use of Resource editors

answered Mar 30, 2013 at 21:25

10 votes

How do you reverse engineer an EXE "compiled" with PyInstaller

answered Mar 22, 2013 at 15:05

9 votes

What happens when a DLL is added to AppInit_DLL

answered Mar 30, 2013 at 22:33

8 votes

What hints in machine code can point me to the compiler which was used to generate it?

answered Mar 20, 2013 at 14:53

8 votes

In what industries is [code] reverse engineering used?

answered Apr 15, 2013 at 21:13

7 votes

Patching a .Net 4.0 Binary in Olly or CFF Explorer

answered Jun 15, 2013 at 13:52

7 votes

What techniques are used in reverse engineering a serial protocol?

answered Apr 3, 2013 at 8:06

7 votes

What are the essential IDA Plugins or IDA Python scripts that you use?

answered Mar 20, 2013 at 13:32

6 votes

Accepted

How to find CLSID from CoCreateInstance in IDA?

answered Mar 14, 2018 at 8:27

6 votes

Permanently load a DLL to an executable

answered Mar 30, 2019 at 19:37

5 votes

Accepted

Load .IDL / TypeLib into Ida Pro

answered Aug 15, 2018 at 15:44

5 votes

Accepted

Debug a .dll file within powershell

answered Jun 16, 2017 at 10:34

5 votes

How to reverse engineer a Windows 10 UWP app?

answered Jan 9, 2018 at 18:50

5 votes

How to detect a virtualized environment?

answered Apr 10, 2013 at 14:01

4 votes

Accepted

Recommended way to modify assembler instructions in IDA

answered Mar 3, 2019 at 22:21

4 votes

Windows 11: Interact with IDA pro when running in session 0

answered Feb 8, 2023 at 9:18

3 votes

Accepted

other than x32dbg, is there a more friendly way to check functions, their args and their return values on runtime?

answered May 28, 2023 at 8:35

3 votes

Accepted

DLL exports same function with multiple names

answered May 6 at 18:11

3 votes

How can I enumerate and hook into a Windows 10 RPC interface?

answered Mar 27, 2019 at 9:17

3 votes

Edit codes in .Net Reflector with Reflexil (Compile Window)

answered Feb 20, 2017 at 18:08

3 votes

Winapi ReadFile monitor

answered Oct 11, 2016 at 6:36

2 votes

The Nokia CA-50 cable has a longer USB port. Does it hide any kind of chip?

answered Nov 26, 2016 at 14:28

2 votes

64 bit Pseudocode decompiler

answered Dec 13, 2016 at 9:28

2 votes

Accepted

How to debug / analyze a Themida protected binary

answered Sep 6, 2021 at 13:44

2 votes

Accepted

Programmatically Find COM Object Method Offset in Image from Method Name

answered Aug 29, 2022 at 13:38

2 votes

How to run part of exe file that is being reversed

answered Dec 27, 2018 at 10:12

2 votes

School project - Cracking a school emulator

answered Apr 4, 2018 at 10:04

Stack Exchange Network

42 Answers

What is "overlapping instructions" obfuscation?

Checking if an .exe is actually a .jar wrapped in an .exe

Is reverse engineering and using parts of a closed source application legal?

How to prevent use of Resource editors

How do you reverse engineer an EXE "compiled" with PyInstaller

What happens when a DLL is added to AppInit_DLL

What hints in machine code can point me to the compiler which was used to generate it?

In what industries is [code] reverse engineering used?

Patching a .Net 4.0 Binary in Olly or CFF Explorer

What techniques are used in reverse engineering a serial protocol?

What are the essential IDA Plugins or IDA Python scripts that you use?

How to find CLSID from CoCreateInstance in IDA?

Permanently load a DLL to an executable

Load .IDL / TypeLib into Ida Pro

Debug a .dll file within powershell

How to reverse engineer a Windows 10 UWP app?

How to detect a virtualized environment?

Recommended way to modify assembler instructions in IDA

Windows 11: Interact with IDA pro when running in session 0

other than x32dbg, is there a more friendly way to check functions, their args and their return values on runtime?

DLL exports same function with multiple names

How can I enumerate and hook into a Windows 10 RPC interface?

Edit codes in .Net Reflector with Reflexil (Compile Window)

Winapi ReadFile monitor

The Nokia CA-50 cable has a longer USB port. Does it hide any kind of chip?

64 bit Pseudocode decompiler

How to debug / analyze a Themida protected binary

Programmatically Find COM Object Method Offset in Image from Method Name

How to run part of exe file that is being reversed

School project - Cracking a school emulator