64 bit reversing without IDA 6.6? menu

User Tag List

Results 1 to 3 of 3
  1. #1
    temp321's Avatar Sergeant
    Reputation
    7
    Join Date
    Dec 2012
    Posts
    35
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    64 bit reversing without IDA 6.6?

    I don't have IDA 6.6 and I imagine most of you here don't either.

    However I noticed all the recent dumps are now 64bit maybe due to Carbine leaving traps for people who use the 32 bit exe on 64 bit windows.

    So I open up an older IDA and a realized all the plugins don't work and there is no hex rays of course. C4Decompiler freezes and Rec4studio looks awful, it is full of C statements like _r12 = 0 which is barely any different from assembly.

    I try to locate the same code from the 32bit assembly and I find the code is extremely different with function arguments being pushed into random registers instead of the stack, and certain functions are not inlined. It feels like a huge chore to reverse on 32 bit and locate on 64 bit.

    How do you deal with 64 bit reversing?

    These ads disappear when you log in.

  2. #2
    Midi12's Avatar Contributor
    Reputation
    90
    Join Date
    Sep 2012
    Posts
    182
    Thanks G/R
    6/13
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I only use IDA 6.5 assembler view.

  3. #3
    temp321's Avatar Sergeant
    Reputation
    7
    Join Date
    Dec 2012
    Posts
    35
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Ah just tried 6.5, rebasing doesn't break the references now unlike 6.1.

    However I still miss hexrays and the function string associate plugin.

Similar Threads

  1. [HELP] Reversing functions with IDA (unitReaction)
    By GrenadeFisher in forum WoW Memory Editing
    Replies: 5
    Last Post: 11-26-2012, 07:12 PM
  2. Replies: 4
    Last Post: 05-31-2012, 04:19 PM
  3. [wow][mac] Reversing a mount list function (IDA)
    By Tanaris4 in forum WoW Memory Editing
    Replies: 2
    Last Post: 01-06-2010, 02:36 PM
  4. [Request] Female Gnome > Male Tauren (Without the white bits!)
    By RJay in forum WoW ME Questions and Requests
    Replies: 15
    Last Post: 09-10-2008, 01:53 PM
  5. Enter SM cathedral, without key
    By Matt in forum World of Warcraft Exploits
    Replies: 1
    Last Post: 08-16-2006, 08:28 AM
All times are GMT -5. The time now is 04:00 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2020 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search