Binary Coverage for Reverse Engeneering

Code coverage is a procedure that helps researchers understand how many pieces of an application's algorithm are involved in processing data. Typically, this procedure is used to find vulnerabilities in software. In this article, we will see in practice how you can use this tool to simplify the procedure for examining application code.

Tool set and stand setup

, , , . . , : . :

- , . , , . .

? , , , . . , . :

dll Windows. :

• 
  
  
  
  

• , ()

  
  
  
  
  

• - call

  
  
  
  
  

- . .

:

1. IDA Pro

   
   
   
   
   

2. DinamoRIO

   
   
   
   
   

3. IDA Pro LightHouse

   
   
   
   
   

4. Windows 10

   
   
   
   
   

5. Virtual Box

   
   
   
   
   

. CrackMe. . , , CrackMe, - . , . , . .

. IDA Pro. , :

• IDA Pro

  
  
  
  
  

• IDAPython : idaapi.get_user_idadir()

  
  
  
  
  

• , plugins,

  
  
  
  
  

• plugins ,

  
  
  
  
  

• IDA Pro

  
  
  
  
  

, File:

. , drrun.exe drcov. :

drrun -t drcov -logdir ./ --  KeygenMe.exe
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

drrun , DinamoRIO . bin32. ".proc". . IDA Pro , . :

.

, , . , .

, . , .

---

OTUS - Reverse-Engineering. Professional.

: " "

• 1: PE , ,

  
  
  
  
  

• 2: . ,

  
  
  
  
  

---