Jump to content
IGNORED

Ghidra is nice!


Recommended Posts

Hi,

 

I recently had some time to test Ghidra (reverse engineering tool released by NSA) and it is great free alternative to IDA Pro or Dis6502.

https://github.com/NationalSecurityAgency/ghidra

It has 6502 support and easily (with skipping header and setting loading address) you can load single segment XEX files. I didn't check yet how to script it for multi-segment XEX. It shouldn't be hard to create an Atari loader basing on https://github.com/zeroKilo/C64LoaderWV

 

Then you can analyze the code in very convenient way, with even translation of ASM to C language.

I didn't check (yet) https://github.com/tom-seddon/Ghidra6502

 

Simple keyboard manual (how to rename labels, set arrays, start code analysis) is here: 

https://ghidra-sre.org/CheatSheet.html

 

 ghidra.thumb.png.37f6800db4ca0611f48eba0a76a892f0.png

Edited by ilmenit
  • Like 4
  • Thanks 3
Link to comment
Share on other sites

Cool - will have to give it a look.

 

An alternative to trying to stick multiple segments together can be to just use a memory dump from emulation.

But generally you want to set the trap to very early on so you get it before the program has a chance to make any modifications to itself or it's data areas.

  • Like 1
Link to comment
Share on other sites

3 minutes ago, Rybags said:

Cool - will have to give it a look.

 

An alternative to trying to stick multiple segments together can be to just use a memory dump from emulation.

But generally you want to set the trap to very early on so you get it before the program has a chance to make any modifications to itself or it's data areas.

yup, breakpoint on the RUN address in majority of cases should be enough

Link to comment
Share on other sites

Ghidra is indeed very nice. It's not without its faults: for example I still haven't found an option that can export a disassembly that you can then immediately reassemble. Some processing of the file is required. Also, marking bytes as an array (so you can make the source more compact) is still quite weird.

 

But still, it helped me a lot in disassembling a game and porting it to the Atari ST, and is much better than similar free tools (radare2, cutter) and costs way less than commercial tools (IDA pro, Binary Ninja). So definitely worth checking out!

 

 

  • Like 2
Link to comment
Share on other sites

  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...