📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  a friendly qustion about reversing

Topic created on: February 20, 2011 09:22 CST by mehdinaghous .

i study 1 years about reversing debugging assembly api
but i cant use this code in my software
i want copy software but is difficult converting this assembly code to high level i cant undrestand Concept of this assembly codes
i teach a littile book for reversing (ida pro book , Reverse_Engineering_with_IDA_Pro)
but i cant very good undrestand
any body have a good ida for this qustion

  djnemo     February 20, 2011 10:53.25 CST
mybe its packed or ...

  NirIzr     June 24, 2011 18:23.25 CDT
if your goal is producing complete compiling code, this kind of work is really demanding and can get really boring. i would suggest patching the app instead if possible or try to get a lesser reversing goal like algorithmic understanding or complete pseudo-code generation..

if you still want to get complete compiling code and having trouble doing this on your own - i would suggest getting a copy of hexray's "HexRay" product, its a descent decompiler and could save you a big portion of the work.
i would vote against doing such a thing since it also takes most of the fun out of reversing..

  R4ndom     May 7, 2012 01:43.51 CDT
You could also try writing some code in a high level language and see what the assembled ams looks like.this helped me a great deal in looking at assembly and reversing it back to high level code...

  NirIzr     May 7, 2012 12:06.16 CDT
> R4ndom: You could also try writing some code in a high level language and see what the assembled ams looks like.this helped me a great deal in looking at assembly and reversing it back to high level code...

a great tip! i second that.

if you aim at learning and willing to spend some money on it i'd recommend getting the Hacking dis-assembly uncovered _1st edition_ by kris kaspersky (which he posted in the forum an free version of, so you can get a legal chm).
this book does exactly what R4ndom suggested - it shows you C/C++ code and than goes through the dis-assembly using up to three different compilers for each snippet.
a great read!

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit