LUser
  • Member for 7 years, 6 months
  • Last seen more than a month ago
How to protect a PE file?
3 votes

You really cannot. You can only slow a reverser down The goal of the packer, crypter or anti debug methods, ect. is simply to slow the reverser . Eventually (if there is desire ) your code will be ...

View answer
What's the best way of improving already compiled binary?
3 votes

Exporting the file to ASM then re-compiling takes a very long time, is very complicated and should be only done if you have a decent active intelligent group. Believe me, I have done this. We reverse ...

View answer
Is there a way to 'mov eax, ax'?
3 votes

The answer is to use rol: rol eax, 10

View answer
adding instructions in IDA
2 votes

I use Stud_Pe and I have added over 8 mb to a program using this. All you need to do is make a new .stud (sort of like adding a second .text section) and then code cave it in. Also, You shouldn't have ...

View answer
Ollydbg 2.1 Allow for multiple saves or not make backups
Accepted answer
2 votes

Here is a hack for now... I think it would be better to not allow for it to make backups... Which I can do but for now this will just allow the changes to take place and JMP over the error sequence. ...

View answer
What are my options to add instructions to a binary?
1 votes

What you are really looking for is a code stud. A code cave uses unused space to sort of jump add your own code and jump back. The problem with code caves is that there is a size constraint in the PE ...

View answer
Can AI be used to write better decompilers/disassemblers?
1 votes

I want to say yes, but I have to say NO. The thing is that computers grab our programs that we write and optimize them in a way that often will make little or no sense to humans. You'll see things ...

View answer
Why is using a 32bit system over 64bit recommended for people that are new to reverse engineering?
Accepted answer
1 votes

Short answer : Because it's an easier place to start .X64 allows for an extended instruction set , more access to memory and more allocation space in pretty much everything. Long Answer: I wouldn't ...

View answer
Reverse Engineering Classes in ARM
Accepted answer
0 votes

Because it is compiler specific , it is not required to be internally the same always. It seems though that CLANG and GCC use R0 to store this. C++ class MyClass { int field_; public: void ...

View answer
How to paste 30-(N) number of assembly code to ollydbg
0 votes

There many ways to do this. I once had to add 3000 lines to a program . The answer above works , but your life will become much ,much harder this way. Use this tool MLA from Ramm michael In Olly , ...

View answer
How to debug ARM binary with IDA pro on Windows?
Accepted answer
0 votes

Here is a simple video for setting up qemu for ARM. http://www.securitytube.net/video/5818 Using IDA you can open and disassemble the program fine. Just to debug you will probably get stuck using ...

View answer