Reverse engineering


snooping on the wire
used for networking or external busses
not that easily doable for disk filesystems

disassembly
tells you what the code does
doesn't help very much on data structures

symbolic debugging information
gives you all data structures that are in headers
needs a program with debugging information

modify the original program
allowed in the EU for personal/eduction purposes
in this case no option (legally and technically)