https://kostyk348.github.io/tags/reverse-engineering/Recent content in Reverse-Engineering on KonstantinHugo -- 0.135.0enMon, 17 Aug 2026 00:00:00 +0000https://kostyk348.github.io/posts/rev-wave/Mon, 17 Aug 2026 00:00:00 +0000https://kostyk348.github.io/posts/rev-wave/<h1 id="cellular-reverse-engineering-without-ghidra">Cellular reverse engineering without Ghidra</h1> <p>Each function of a binary becomes its own .eml cell: the call graph lives in headers, types propagate as a wave over References with call-site dataflow.</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>emlbox rev game.exe cells <span style="color:#75715e"># objdump -&gt; .eml function graph</span> </span></span><span style="display:flex;"><span>emlbox rev wave cells net_send arg1 void* <span style="color:#ae81ff">3</span> <span style="color:#75715e"># type wave</span> </span></span><span style="display:flex;"><span>emlbox rev diff cells_v1 cells_v2 <span style="color:#75715e"># version diffing</span> </span></span></code></pre></div><p>LLMs connect through rev-mcp: they read only the neighbours of a cell, not the whole disassembly — a point-wise context instead of a 500MB dump.</p>