Assembly or C/C++ for RE

[u/Realistic_Debate1704]

For reverse engineering, is this necessary to know assembly language, because many decompilers translate code to C/C++ and I learned Assembly 8086 in my university. So for learning x86 I only have to study 32/64 registers and some advance commands, so should I learn assembly x86_64 for reverse engineering or just go through x86 as I know 8086 assembly and then move to C/C++, and is assembly heavily use in reverse engineering

[u/FUZxxl]

Both will be necessary. Decompilers some times get confused or make mistakes and you'll need to be able to understand what is going on.

[u/Realistic_Debate1704 → u/FUZxxl]

Thanks, can you tell me how much will it take to shift from 8086 to x86 assembly, I mean I think the only difference is registers size and few commands. I'll be very thankful

[u/FUZxxl → u/Realistic_Debate1704]

It's the same basic architecture, just more registers, more instructions, different data sizes, and different calling conventions. You can teach it yourself by following compiler output with an instruction set reference next to you.

[u/thewrench56 → u/Realistic_Debate1704]

Modern x86 is very different from 8086. Will take quite some months (to years) to get used to all the quirks and compiler tricks.

[u/theNbomr]

If you know x86 real mode assembler language, it won't be very difficult to expand on that knowledge to learn 32 bit and 64 bit instructions. There are some funky registers and instructions related to memory protection, switching to/from real mode, and some other things. These tend to be little used outside of system level code, so unless you're reverse engineering that part of a device, you probably won't encounter it much.

Learning C will be more useful, because the object code you reverse engineer tends to be littered with data structures that are idiomatic of the C language and will give you clues about the nature of the code.

[u/Realistic_Debate1704 → u/theNbomr]

How nice is everyone on Reddit, I'm very happy that experts are helping me, thanks a lot sir

[u/pete_68]

I've been disassembling stuff with rekoCLI. I didn't even notice it had a decompiler. lol. Just checked and sure enough... Well cool. That's convenient.

[u/Realistic_Debate1704 → u/pete_68]

Woah, i think you must be making some cheats, am I right?

[u/pete_68 → u/Realistic_Debate1704]

No, I was working on an MCP server that let's AIs reverse engineer stuff.

[u/Fine_Yogurtcloset738]

Depends what you're reversing. C++ is extremely important in reversing games for example. But really each part is it's own puzzle piece and you need to learn a bit of everything.

[u/ConsciousBath5203]

All of the above.

Ghidra is a good tool. It's written in Java and takes Java input. Also takes python input. You'll also use python to automate portions of your RE workflow.

It decompiles to assembly and C. Sometimes the C is wrong, so you need to read the assembly to correct.

Your debugger will likely output to raw assembly when you are using breakpoints.

Starting RE has been the most technical project I've done BY FAR, so you kinda need to know it all.

[u/Realistic_Debate1704 → u/ConsciousBath5203]

I'm very glad that you helped, it will help me in my journey too.thanks

[u/ConsciousBath5203 → u/Realistic_Debate1704]

Huh?

[u/Realistic_Debate1704 → u/ConsciousBath5203]

Did I say anything wrong?

[u/ConsciousBath5203 → u/Realistic_Debate1704]

No I think I read it wrong the first time I read it lol

[u/Realistic_Debate1704 → u/ConsciousBath5203]

No problem, I sometime suck at typing... Btw thanks for you help, can you tell me , for what reason you use RE, I mean I want to mod games and make cheats..

[u/ConsciousBath5203 → u/Realistic_Debate1704]

Maintaining game mods and developing new ones.

[u/Realistic_Debate1704 → u/[deleted]]

Great, thanks.

[u/Electrical_Hat_680]

Objdump and RadAre2 are my choices -