Practical Agentic Reverse Engineering

Chapter 1: Introduction

1. The problem and the promise
2. Who this book is for
3. How the book is organised
4. The Method

Chapter 2: What AI Agents Change

1. Where agents help
2. Hallucinated addresses
3. Stale tool state
4. Context churn
5. The human boundary

Chapter 3: Ground Rules for Owned Targets

1. DMCA 1201(f) and the EU directive
2. EULA clauses
3. Crackmes and CTF binaries
4. Your own builds
5. Reporting and disclosure

Chapter 4: Setting Up REA with Ghidra

1. Node and npm prerequisites
2. Installing rea-agents
3. Ghidra and analyzeHeadless
4. Providers and configuration
5. Pinning REA and Ghidra versions

Chapter 5: The Evidence Loop

1. Ask and trace
2. Read the evidence
3. Follow up
4. Reconstruct
5. Verify by differential testing
6. Worked Investigations

Chapter 6: Electron and JavaScript

1. Electron application artifacts
2. Preload and IPC surface
3. JavaScript reconstruction
4. Passive runtime observation

Chapter 7: Native Binaries and Differential Tests

1. Reconstructing pan_from_x in C
2. Cross-references and tracing
3. Differential testing harness

Chapter 8: Websites and Network Captures

1. Browser observation
2. mitmproxy capture
3. Request tracing and HAR
4. Source location

Chapter 9: Android APK and Devices

1. APK artifacts and jadx
2. Decompiling with jadx
3. adb device inspection
4. Linking static and live

Chapter 10: .NET, WASM and Firmware

1. The LabLicensing DLL
2. Inspect-managed commands
3. WASM in brief
4. Firmware in brief
5. Less common formats
6. Staying Reliable

Chapter 11: Detecting Hallucinated Analysis

1. Why agents confabulate
2. Doctor checks and diagnostics
3. Cross-checking providers
4. Recording unknowns
5. Beyond REA

Chapter 12: An End-to-End Investigation

1. The investigation question
2. Strings and cross-references
3. Reconstructing key_digest in C
4. Differential verification
5. A working key generator
6. Established and unknown

Chapter 13: Conclusion

1. What the loop gives you
2. What to do next

Appendix A: REA CLI Reference (pinned to 6.4.0)

1. Scope and version
2. Global options
3. Core analysis commands
4. Target-family commands
5. Setup, readiness and maintenance
6. Evidence and verification commands
7. Exit status

Appendix B: Prompt Cookbook

1. Using this cookbook
2. Stage recipes
3. Target recipes
4. Discipline prompts

Appendix C: Legal Practice Targets

1. Why a target is lawful
2. The statute and the cases
3. Practice targets
4. Out-of-bounds targets
5. The pre-flight checklist
6. Reporting findings

Glossary

References