Binary reverse engineering with clear PDF analysis report

We decode compiled binaries lacking source code or documentation into clear PDF reports detailing logic, entry points, hidden behaviour, protections and risks.

Zinn®, our Viking, behind a market stall with a striped awning, pointing at the goods.

At a glance

Price
From $124.99
Delivery
Delivered in 3 days
Sold
New

About this listing

Turning compiled code into a readable report

You hold an executable, a shared library or a firmware image with no accompanying source and no documentation, and you need to know how it behaves and whether it can be trusted, shipped or maintained safely. We examine the binary and hand back a structured PDF report that explains the findings in plain language rather than raw disassembly.

What the report contains

  • A PDF report running from 10 to 30 pages, depending on complexity
  • Reconstructed logic as readable pseudo-code: functions, data structures, algorithms
  • A full behaviour map: entry points, execution flow, network calls, file system access
  • Identification of protection layers: packing, obfuscation, anti-debug, anti-VM, encryption
  • A risk assessment covering suspicious behaviour, hidden features and security concerns
  • An indicator-of-compromise list where relevant: IP addresses, domains, file hashes, registry keys
  • An optional 30-minute debrief call to walk through the findings

How the work proceeds

The engagement runs over 4 stages. On day 0 you send the file along with a short note on your objective, whether that is an audit, recovery, security check or interoperability work. Days 1 to 2 cover static analysis: disassembling the binary, mapping its structure, spotting libraries and protection layers, and rebuilding the core logic. Days 2 to 3 add dynamic analysis where it is safe and useful, running the file in an isolated sandbox to watch its real behaviour across network, file and persistence activity. Delivery follows across days 3 to 5, bringing the PDF report plus a short summary email listing the 5 key findings, with a debrief call available if you want to go further.

Packages

Package | Price | Scope | Report | Delivery

Basic | $150 | Files up to 10 MB, static analysis only | 10-15 pages, main logic and behaviour summary | 3 business days

Standard | $300 | Files up to 50 MB, static plus dynamic analysis in a sandbox | 15-25 pages, full behaviour map, IOC list, protection mechanism review | 5 business days

Premium | $500 | Any file size, static plus dynamic plus network analysis | 25-30+ pages, full pseudo-code reconstruction of key functions, network protocol analysis where applicable, debrief call included | 7 business days

A custom quote is available for heavily obfuscated, packed or multi-component binaries.

What we need from you

  • The file to analyse, in formats such as .exe, .dll, .so, .bin, .elf or a firmware dump
  • Confirmation that you own the file or are authorised to have it examined; we only work on binaries you have the legal right to inspect
  • Your brief: a short note on the goal, whether that is a security audit, source recovery, interoperability, incident response or research
  • The domain this order is for

Background

Our reverse engineering work draws on disassembly with established tools, memory extraction, unpacking and deobfuscation, plus reconstruction of proprietary network protocols, encryption schemes and session logic. Rebuilt application logic has been validated against more than 800 automated tests, and development work spans Rust, Python and C/C++ with an emphasis on performance and reliability. We have previously reconstructed a mobile application end-to-end, from encrypted metadata through to working business logic validated against the live service, and we bring the same care to every file reviewed.

What sets this apart

  • Every finding in the report is backed by evidence: an address, a function or a packet
  • Output favours pseudo-code and plain language over raw disassembly dumps
  • Reports close with concrete recommendations rather than bare observations
  • Files are handled in an isolated environment, deleted after delivery, and never shared

Scope and limits

We only analyse files that you own or are legally authorised to inspect, and we do not crack software, bypass licences or help circumvent protection for unauthorised use. Malware samples are handled strictly inside an isolated sandbox, never on a production machine. An NDA is available on request. Send the file and your brief to begin, and feasibility and timeline are confirmed within 24 hours.

What you can buy

Basic

$124.99
Or pay €111.63 · £93.20 at today's rate — the rate is locked when you add it to your basket.

Fichier jusqu'a 10 MB, analyse statique seule, rapport 10-15 pages - 1 revision

Delivered in 3 days

Revisions included: 0

Buy this package

Already a customer? Buy in your account

Standard

$250.99
Or pay €224.17 · £187.16 at today's rate — the rate is locked when you add it to your basket.

Fichier jusqu'a 50 MB, statique + dynamique en sandbox, rapport 15-25 pages - 3 revisions

Delivered in 5 days

Revisions included: 0

Buy this package

Already a customer? Buy in your account

Premium

$437.99
Or pay €391.19 · £326.61 at today's rate — the rate is locked when you add it to your basket.

Toute taille, statique + dynamique + reseau, rapport 25-30+ pages, pseudo-code

Delivered in 7 days

Revisions included: 0

Buy this package

Already a customer? Buy in your account

No account needed first — yours is created at checkout. We hold the money until you accept the work.

Questions and answers

Will my file or code be shared with anyone?

No, your binary remains completely private. It is assessed within a secure, isolated sandbox that lacks any live network connection, and project specifics or findings are never disclosed to external parties. All files are permanently erased from our systems 7 days after delivery, and an NDA can be provided upon request at zero extra cost.

Can you still review my file if it is packed or heavily obfuscated?

Yes, deobfuscation and unpacking form an integral part of our offerings. While heavily shielded files might necessitate the Premium tier, we always inspect the file initially and verify feasibility within 24 hours prior to commencing the task.

Are voice meetings or video calls available to review the results?

To ensure every discovery remains fully documented and traceable, communication is maintained in writing. Alongside the PDF report, you receive 7 days of written post-delivery question-and-answer support, providing a complete written archive instead of a verbal conversation.

What specifically will I obtain upon project completion?

You receive a comprehensive PDF report detailing the file's behaviour, logic and risks. Depending on your chosen package, this may also include extracted data in CSV or JSON formats, an indicator-of-compromise inventory and the scripts utilised during the evaluation.