You look through a digital microscope (a like IDA Pro or Ghidra). You see a sequence of hex numbers: B8 05 00 00 00 . The disassembler translates this into: MOV EAX, 5

This is your first "artifact." You realize the machine is the number 5 into the EAX slot. The next line says ADD EAX, 10 . Now you know the machine is calculating 3. The Locked Door (Control Flow)

Suddenly, you hit a line that says CMP EAX, 20 followed by JNE 0x401050 . The machine is checking if your total is 20.

Once a program is compiled into a "binary," it becomes a black box of machine code—a long, cryptic string of ones and zeros that only a CPU can understand. is the art of translating those numbers back into Assembly language , the human-readable instructions that reveal exactly how a program thinks, hides, or attacks. The Story: The Digital Archaeologist

Before you look at the code, you look at your tools. Your workbench has a few small slots to hold data while you work. In x86, these are your : EAX: Your primary calculator.

This is a fork in the road. If the answer isn't 20, the machine "jumps" to a completely different section of code.

Search SINI

Close

Introduction To X86 Disassembly -

You look through a digital microscope (a like IDA Pro or Ghidra). You see a sequence of hex numbers: B8 05 00 00 00 . The disassembler translates this into: MOV EAX, 5

This is your first "artifact." You realize the machine is the number 5 into the EAX slot. The next line says ADD EAX, 10 . Now you know the machine is calculating 3. The Locked Door (Control Flow) Introduction to x86 disassembly

Suddenly, you hit a line that says CMP EAX, 20 followed by JNE 0x401050 . The machine is checking if your total is 20. You look through a digital microscope (a like

Once a program is compiled into a "binary," it becomes a black box of machine code—a long, cryptic string of ones and zeros that only a CPU can understand. is the art of translating those numbers back into Assembly language , the human-readable instructions that reveal exactly how a program thinks, hides, or attacks. The Story: The Digital Archaeologist The next line says ADD EAX, 10

Before you look at the code, you look at your tools. Your workbench has a few small slots to hold data while you work. In x86, these are your : EAX: Your primary calculator.

This is a fork in the road. If the answer isn't 20, the machine "jumps" to a completely different section of code.