Quote: |
Well... as long as it wasn't too much into ASM so us non programmers could understand it better. |
zeedo wrote: |
What is the point of reverse engineering if you can't understand the code ? If you can't program ripping a program apart seems a bit pointless. |
zeedo wrote: |
What is the point of reverse engineering if you can't understand the code ? If you can't program ripping a program apart seems a bit pointless. |
Quote: |
Strings, google, baselines, filemon, regmon, handles, system state monitors, VMWare, nmap, etc. |
Quote: |
Maybe it uses some anti-reverse engineering techniques such as checking to see if it is being run in VMWare. You wouldn't know that unless you reverse engineered it. |
zeedo wrote: |
I didn't ask how to monitor what a program does, I said what is the point of reverse engineering if you don't know how to code. The things you mentioned monitor a programs behaviour and can aid in reverse engineering. Reverse engineering itself is trying to rebuild the code or to figure out ALL possible program flows. Doing this without understanding how to code would be both very difficult and of questionable benefit. That makes no sense at all to me, can you please clarify what you mean. It has no bearing on my question from what I can make out. |
Quote: |
It doesn't have to be all possible program flows. Often the tools I mentioned earlier are enough to understand what a program does well enough for me and many others. Although you can never be 100% sure unless you know assembly and reverse all program flows like you said. That's what I was getting at when I mentioned VMWare and anti-reverse engineering techniques. |
output generated using printer-friendly topic mod, All times are GMT + 2 Hours