SSaguninsagunwrites.hashnode.dev·Aug 16 · 5 min readImmediate Addressing ModeIn the previous article, we learned about Implied Addressing, where the operand is automatically understood from the instruction. Now we'll look at another simple addressing mode: Immediate Addressing00
SSaguninsagunwrites.hashnode.dev·Aug 16 · 9 min readAddressing ModesA CPU instruction tells the processor what operation to perform. But when an instruction needs data, another question appears: Where is that data located? The method used by an instruction to specify 00
SSaguninsagunwrites.hashnode.dev·Aug 5 · 7 min readMalware Reverse EngineeringWhen malware analysts receive a suspicious program, they often begin with questions: What does this file do? What systems does it affect? How does it communicate? How does it hide? Basic analysis can 00
MFMathijs Frankinmathijs-frank.hashnode.dev·Jul 22 · 5 min readWhy my compiler won't optimize for youThis is part of an ongoing project. A programming game where getting better at the game means getting better at real coding. Background here: Learning Coding Like a Board Game. For my game I will crea10
JTJeff Tonginwind010.hashnode.dev·Jun 12 · 15 min readMalicious Binary Reverse EngineeringI'm no Low Level (Ed) or John Hammond. I'm at the point where it's a skills issue. I need some guidance. Initially, I tried to get have Claude Codede to analyze the malicious repository with instructi00
JTJeff Tonginwind010.hashnode.dev·Jun 12 · 13 min readDeeper Malware Binary AnalysisWe've setup the docker container with disassemblers like radare2 in the previous post. Separation of Concerns I'm going to use radare2 to slice out by offset/size from the header. We used file and obj00
JTJeff Tonginwind010.hashnode.dev·Jun 11 · 10 min readMalicious Binary Analysis In Malicious IPs and Domain Reconnaissance we trace the endpoints where the suspicious code is coming from. We're going to dive deeper, but I need some protections. The DNS, registry, and endpoint rec00
KSKartikey Sharmainkartikey5960.hashnode.dev·Dec 26, 2025 · 8 min readWhat Happens Before and After a Function Call (x86-64)We all have seen the long-running Foo Bar Code snippet used to explain function calls. In this article, we will focus on what actually happens in a generic nested function call at the machine level. We will explore the machine instructions generated ...10
LWLee Westlakeinrhm.hashnode.dev·Sep 25, 2025 · 6 min readGeneral Assembly Language PrimerWhen it comes to programming retro computers, four universal truths are practically immutable by contemporary standards: they’re slow and have very little memory … and uhhhh … they’re slow and have very little memory. Okay, so technically that’s only...00
UIUmer Islaminblog.umerislam.codes·Sep 15, 2025 · 2 min readAssembly Language: Memory Allocation, Access, Bytes and Words.For the CPU to operate, we must store the data we want to operate on; it is stored in RAM. The different buses of the CPU that communicate with the RAM fetch and read that data. NOTE: Please read the first blog in the series for a better understandin...00
