Log in

View Full Version : about reversing port communication buffer and how register and memory work with ports


alim2201
March 2nd, 2011, 15:26
hello to every body
i know to how sniff port with port monitor and port analizer software
i work a littile with olly and ida and saw some video from lena
but i want to know to access port function and port bytes reverssing with ida
i want to know how register and memory and buffer works with port data in assembly

about reversing port communication buffer and how register and memory work with ports
(any guide any link and any books)
thanks

Maximus
March 2nd, 2011, 17:00
port???
I suppose you do not know what 'ports' are, or you wouldnt be using Olly at all.

case A: 'ports' are I/O ports associated with IN and OUT assembler instructions, only available after an IOPL check... for this kind of port, you need a Debugger like SoftICE/Syser or WinDbg (or some cool, dangerous edit of your IOPL).

case B: you are referring to Internet 'ports': the go read http://en.wikipedia.org/wiki/Winsock, then the associated links, then socket functions you should/could breakpoint, http://msdn.microsoft.com/en-us/library/ms741394.aspx . At that point, grab WireShark at CISTL.