New answers tagged decompilation
0
Here are the required steps using Igor Skochinsky's answer:
Clone musl git repository:
git clone --depth=1 git://git.musl-libc.org/musl
Compile the code:
cd musl; ./configure; make -s -j2
Extract Flair tool from IDA SDK. Run pelf (ELF parser) with the musl static
library which is compiled in above step:
cd ./lib
~/flair/bin/linux/pelf libc.a
The ...
2
No. In most cases, you cannot obtain the actual source code just because you have the compiler available.
However, it depends on the language. If the source code was written in .NET, for example, a decompiler such as dnSpy or ILSpy can produce relatively accurate source code. However, if it was written in C/C++, for instance, then it will be harder to ...
0
Usually, it's not possible.
You should use external tools like ghidra or IDAs decompiler - hex-rays.
1
This question is a bit confusing.
Both __fastcall and __thiscall share that they use ecx as the first storage point. So either you implicitly say the class pointer will be in ecx (__thiscall) or you say the function is not a member function but has one argument - which also gets passed in ecx when using __fastcall so the class pointer still ends up in the ...
1
There’s very little chance of success if both encryption algorithm and the key is unknown (besides trivial cases like single byte XOR) so you need to work on discovering those things.
Since you have the program which can read the file, the information must be inside it. You can try to find the decryption function by static analysis (disassembly/...
0
These sections indicate that this is a standard PE, or binary executable loaded by OS. That means that the code is in assembly, and you need a x64 dissambler(probably) . Try IDA.
Just notice that you have to know quite a bit to reverse a game, and I would start with easy crackme excersices.
0
Yea, it's not completely automatic like IDA Pro.
Although the NSA dev team is very active on the project. And any US citizen should be able to add such a feature (via Java) and make a pull request to add it.
I found what you do is simply add the module to your Ghidra project.
When you click on the module/executable it will ask "...Would you like to analyze ...
2
I guess that you won't be happy if, while analyzing a malware, a certain pattern in the executable binary makes Hex-rays connect to an evil server somewhere in the World with your account and download a payload on your system...
And, yes, there have been some examples where security analysis software have been pinpointed with security threats. The last I ...
Top 50 recent answers are included
