Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon.

Pages: 1-

looking at executables

Name: Anonymous 2008-07-21 18:56

is there a way to look at the actual machine code of an executable file? actually i know there is, but what is it? just curiosity.

Name: Anonymous 2008-07-21 18:58

>>1
cat

Name: Anonymous 2008-07-21 19:01

>>2
whuh? the limit of my CS knowledge is an introductory java course, so i can;t tell if that means anything or not.

Name: Anonymous 2008-07-21 19:03

Name: Anonymous 2008-07-21 19:51

ida pro

Name: Anonymous 2008-07-21 19:56

Java is the answer.

Name: Anonymous 2008-07-21 20:34

>>5
listen to this man and learn to pirate it

Name: Anonymous 2008-07-22 12:55

ollydbg, windbg, libdisassm, etc

Name: Anonymous 2008-07-22 12:59

objdump -d

Name: Anonymous 2008-07-24 22:02

FIRST POST AFTER THE DDOS

Name: Anonymous 2008-07-24 22:44

IT'S MACHINE CODE

>>3
whuh? the limit of my CS knowledge is an introductory java course, so i can;t tell if that means anything or not.
If you're so retarded, why would you want to look at machine code anyway?

Name: Anonymous 2008-07-25 1:10

/gorp/ is that way -->

Name: Anonymous 2008-07-25 2:26

>>11
genuine curiosity. i've always wondered about this issue, was looking into how decompilers work and was reminded of it.

Name: Anonymous 2008-07-25 2:34

>>5
>>8
>>9
oh wow, thanks. now, another question; these are all called decompilers or disassemblers. what i was thinking was that there was a natural way (don't know how else to describe it) of looking at the executables (of whatever format) and seeing the processor instructions, and it was this way of looking that the decompilers used to recreate the source. so, how do the decompilers/disassemblers work?

Name: Anonymous 2008-07-25 2:44

>>14
Decompiler don't generally work at all. There's nothing special about how disassemblers work; there's naturally an almost 1:1 mapping between machine code in binary form and its `human readable' version.

Name: Anonymous 2008-07-28 10:53

>>15
Unless you are decompiling JAVA bytecode!~~~

Name: Anonymous 2008-07-28 18:05

>>16
KAWAI~~~~~~~~ですねっ!

Name: Anonymous 2008-07-28 18:22

There's some de-compiler projects, which aim to produce source code in some high-level language (usually C). The ones I've seen (and that was years ago, no doubt they've all died) used specific knowledge of certain compilers to re-create the source code. The process required very specific tuning down to the version number of the supported compilers, and unsupported versions was very hit-and-miss.

It's best to just learn the target processors in and out, learn all the specific idioms and tricks used. This is all a lot easier if you don't have to target x86 CPUs, which are a mess both due to the ISA, and due to the fact that the CPU engineers look at the code produced by the compilers to revise the ISA.

Name: Anonymous 2008-07-28 18:32

>>14
looking at the executables (of whatever format) and seeing the processor instructions
1. Open executable with hex editor
2. Learn the layout of ELF files (or Mach-O or PE)
3. Get chart with machine code instructions for your processor
4. Realize that what you want to do is boring, pointless and extremely hideous.

Name: >>19 2008-07-28 18:35

s/hideous/tedious/. Fuck

Name: Anonymous 2008-08-01 20:19

>>16
Java decompilers are actually really good at recreating source code, not just bytecode mnemonic dumps.

Name: Anonymous 2008-08-01 20:56

man objdump
man readelf
etc

Name: Anonymous 2008-08-01 21:24

objdump is extremely easy to confuse and is not recommended for anything serious.

Name: Anonymous 2008-08-02 20:06

>>23
Here in /prog/ we say things such as it are ``considered harmful''.

Name: Anonymous 2008-08-02 22:57

>>21
This man knows. jad can work wonders.

Name: Anonymous 2008-08-03 9:23

>>25
Closed source. :(

Meanwhile, javap is a piece of shit.

Name: Anonymous 2008-08-03 10:13

>>26
Java rox.

Name: Anonymous 2008-08-03 10:34

Crackrox!

Name: Anonymous 2008-08-03 11:35

>>24
Your quotes look pretty harmful to me.

Name: Anonymous 2008-08-03 21:13

30 GET

Name: Anonymous 2008-08-04 8:58

xvi32

/thread

Name: ​​​​​​​​​​ 2010-09-10 2:49

Name: ​​​​​​​​​​ 2010-10-25 15:48


Don't change these.
Name: Email:
Entire Thread Thread List