K
K
Kaktys_DH2020-07-03 21:11:24
reverse engineering
Kaktys_DH, 2020-07-03 21:11:24

How do reverse engineering programs work?

how do programs that do reverse engineering work? And why do they turn them into different assemblers, what does the transformation into one or another assembler depend on? If you know an article on how programs work that turn code into assembler from ordinary code, then send a link to them. Thanks

Answer the question

In order to leave comments, you need to log in

2 answer(s)
S
Saboteur, 2020-07-03
@saboteur_kiev

ordinary code turn the code into assembler

Regular code is practically assembler.
The process is called decompilation.
Almost any debugger can do it.
Programs for "reverse engineering" do not exist. There are programs for debugging. Those who know how various systems and protocols work can use them for reverse engineering.
Boy. There is no program that will hack everything for you. You need to learn a lot, and for starters, just learn how to program at least on something.
You are asking the sixth not-so-smart question, which is EASY to find a ready-made answer if you use the search. But you seem to be lazy. This is exactly the indicator that you are unlikely to succeed. Too lazy to learn.

D
Danil Shekhovtsov, 2020-08-16
@Danil6969

On the example of Ghidra: first, a search for machine code patterns is performed (key values ​​​​like opcodes must match, for this an instruction mask is compiled, then the required target value obtained by bitwise AND with a mask), then the appropriate pattern is converted into two lines. The first one is the header, fed into the disassembler, contains mnemonics and operands, Ghidra uses specifications in the Sleigh language. But this is so, for a warm-up, since disasm is unrealistic to read, this is where an intermediate idea was invented. The bottom line is that each instruction is a microfunction containing code (for example, in the Pcode language, as in Ghidra). It is then sent to the decompiler and elevated to the final C code.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question