I want to know whether there is any way to understand program by reading through lines of assembly produced by OllyDBG?
Is it really logical and normal thing to do? For instance, for understanding how the malwares or viruses inject DLL into specific programs to change the way they execute by loading their own functions, is it a normal practice to read line by line? Are there any resources available to teach how to read such instructions and understand the program line by line? I have seen several RE tutorials. But most of the time, the guy would go through and look for specific instructions to manipulate and does not care about how the other areas of the program function.
-
is it "dejunking" what you are looking for ?– Abr001amSep 4, 2015 at 4:26
1 Answer
The main idea behind RE is not just reading line by line, but carefully distinguishing important lines from not important. The main part of all those tutorials is not reading assembly, but selecting places to read. By the way, disassembler such as IDA is better for reading the code.
-
@w s I have got a program which injects a dll into another process, but I do not know how to find out injection part? Could you give me a general hint for a place to start with?– FreeMindJul 27, 2015 at 11:17
-
1