1

I am fairly new to software reverse engineering and I'd like to know how proceed with analyzing a program if I have a text file of disassembly code and a bin file of binary data. I understand assembly language. But, is there a better way than just going through the text file, instruction by instruction, trying to figure out what the program is doing? I don't have IDA Pro but I have Ghidra. Would I use Ghidra somehow? Or would I just use a debugger like x64dbg?

Improve this question
3
  • 2
    Can you tell what created this file? or what is its format?
    – Yotamz
    Commented May 6, 2020 at 7:53
  • 1
    Hi and welcome to RE.SE. Typically tools like IDA or Ghidra would use a sort of database which cross-references contents from the binary in the disassembly. So in a sense by having a textual respresentation here and a binary there you have lost those cross-references and "dumbed down" the disassembly. So I'd suggest you start over and use the tool (e.g. Ghidra) for the purpose it was created for. If you just want a "dumbed down" disassembly, objdump can do that for you.
    – 0xC0000022L ♦
    Commented May 6, 2020 at 13:41
  • So I guess I should mention that the text file contains disassembly code for an obfuscation algorithm and the bin file contains obfuscated binary data. What I'm trying to do is analyze the obfuscation algorithm used and try and "de-obfuscate" it.
    – DylanG1991
    Commented May 7, 2020 at 3:34

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.