3 ms·

Modifying and running a binary by recompiling a reverse engineered disassembly

• pgp00 6y ago
  Here is a tool you might be interested in: https://egalito.org/ https://egalito.org/
• pzbitskiy 6y ago
  Reminds me early of 2000s when I taught code-rip techniques by extracting and fine-tuning a shuffling algorithm from a popular mp3 player, then re-assembling as PIC and inserting back to the binary.
  • djmips 6y ago
    This exposition is about a 2001 era exe compiled with MSVC6.
• woodruffw 6y ago
  > Either way, you want to start with a working binary and gradually replace some parts of it (but not others) with C code as you gradually understand more of the binary. The author found RetDec, but might not have known about McSema[1] and other binary lifters. The latter have this exact goal in mind: you lift the original binary to LLVM IR (and then potentially to C[2]) to perform transformations. [1]: https://github.com/lifting-bits/mcsema https://github.com/lifting-bits/mcsema [2]: https://github.com/lifting-bits/rellic https://github.com/lifting-bits/rellic FD: My company's work. But I don't currently work on either of those tools.