1

I am fairly new to software reverse engineering and I'd like to know how proceed with analyzing a program if I have a text file of disassembly code and a bin file of binary data. I understand assembly language. But, is there a better way than just going through the text file, instruction by instruction, trying to figure out what the program is doing? I don't have IDA Pro but I have Ghidra. Would I use Ghidra somehow? Or would I just use a debugger like x64dbg?

  • 2
    Can you tell what created this file? or what is its format? – Yotamz May 6 at 7:53
  • 1
    Hi and welcome to RE.SE. Typically tools like IDA or Ghidra would use a sort of database which cross-references contents from the binary in the disassembly. So in a sense by having a textual respresentation here and a binary there you have lost those cross-references and "dumbed down" the disassembly. So I'd suggest you start over and use the tool (e.g. Ghidra) for the purpose it was created for. If you just want a "dumbed down" disassembly, objdump can do that for you. – 0xC0000022L May 6 at 13:41
  • So I guess I should mention that the text file contains disassembly code for an obfuscation algorithm and the bin file contains obfuscated binary data. What I'm trying to do is analyze the obfuscation algorithm used and try and "de-obfuscate" it. – DylanG1991 May 7 at 3:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.